{"type": "bundle", "id": "bundle--4490a8ea-1102-4502-b154-2610bec4b1a9", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--302587c8-5d95-4f5a-bc90-428354ae1d06", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--54ddff5c-a2b6-491d-829e-613f058ff4b4", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--96b451f6-0b69-4bbc-9b61-93360a496a21", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--c47f15aa-fd5b-42ef-b228-777b96438760", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--d0c0e47f-76e2-44e1-afb1-3de17f4213a7", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--746be285-3146-4d61-96ec-cbaa426a537b", "relationship_type": "located-at", "source_ref": "infrastructure--d0c0e47f-76e2-44e1-afb1-3de17f4213a7", "target_ref": "location--302587c8-5d95-4f5a-bc90-428354ae1d06", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--3d01cc85-3cac-4a33-b631-09b8d7cca864", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7705169f-c56f-4bd6-9b84-1faac64c8c0e", "relationship_type": "located-at", "source_ref": "infrastructure--3d01cc85-3cac-4a33-b631-09b8d7cca864", "target_ref": "location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--8ab8b4ed-a2d9-44ff-9018-e6c0494e2fec", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--6d8702af-e767-457f-9ad7-2d7a51586f50", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4fd9506-fcac-42db-beaf-3aff8156f953", "relationship_type": "located-at", "source_ref": "infrastructure--6d8702af-e767-457f-9ad7-2d7a51586f50", "target_ref": "location--54ddff5c-a2b6-491d-829e-613f058ff4b4", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--70319363-2219-40cc-a0a0-63789497bb84", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc472419-48f4-44e6-ad2c-2125b305d61b", "relationship_type": "located-at", "source_ref": "infrastructure--70319363-2219-40cc-a0a0-63789497bb84", "target_ref": "location--96b451f6-0b69-4bbc-9b61-93360a496a21", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--8b5b2b1f-fb27-486b-9fac-e36c38c998bf", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--be10e45c-5e3e-4783-a578-e8cf127b8e61", "name": "CVE-2021-31207", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31207", "external_id": "CVE-2021-31207"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--5f14d94e-a9d4-41a5-a46a-9cbbcd04ac20", "name": "CVE-2021-41773", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--dbe0c875-a6ca-4a1e-9389-d09f6fdd66c9", "name": "CVE-2021-42013", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--14747ef6-d470-4d66-a18d-42ccd89ca08f", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e3ea8e-9aa2-4c44-a85a-40166b0c2f62", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '!==']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8f9050-916c-42f8-bc6a-362fdeb84d1e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '!fallback)']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efb33f2-8a5a-40ee-b613-2ad9ce6ad996", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"\";']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f4f9ba-4e47-445b-b6a4-a75316ca7f04", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"Segoe']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73124879-7167-4916-952f-fc70cce919cf", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"claw\";']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b89f651-80f9-4c5a-a30f-a9d229ff6932", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"claw:dark\",']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe93c92-5830-4421-9fac-9932a80bbda3", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"claw:light\",']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92eae88-7492-4f6d-89ab-b677d20beaec", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"claw:system\",']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db626187-7ef0-48c3-81c7-6cb45b4ea1a2", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"dark\",']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48593fd3-73cb-420d-b6bc-c58a0d56b873", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"dark\";']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4ed264-4462-4e45-adc4-652129b83b48", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"dash\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c752ec58-a75f-46ed-b45e-914afc5dee84", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"dash-light\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82885440-fceb-43f5-acd2-dcd573b54368", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"dash:dark\",']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36271ef1-c17c-48c4-9a5c-ddb8fb452022", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"dash:light\",']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6510502e-4400-4514-99d4-a4192179c2bc", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"data-theme-mode\",']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b20ff7-a746-4877-93e1-f78742035bd3", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"function\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a99e74e-0210-4b47-a48b-39ea4b740e6b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"function\")']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449a21ed-981e-4d61-a0ae-172fb12b8619", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"knot\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0f9c23-ff3b-4402-a420-494deb83ea31", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"knot:dark\",']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114aac2f-3733-4e4c-9d05-5c10e752f963", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"light\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71dfdbb-c842-41d2-a978-d1715e9bf38c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"openclaw-app\";']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e1cdf5-3884-44be-98ae-594f1a036b56", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"openknot\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103abb78-3712-4cdd-aa7c-d44d15c2a27d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"openknot-light\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980f6045-9b76-499f-a621-9364743e580d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"string\")']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff48b370-df68-4c57-84ca-7fa56f13dff1", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"system\")']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7d9810-dfdc-4bf1-afdc-7a9374d6541d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '\"system\";']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d965ec0-6d1c-4dca-aa9a-4560a9e4236d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '&&']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0dc8a4-971e-4f31-85b6-bc17c9bfa2dc", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '(!app']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62760b8-3b41-47d6-97a8-dbddf0b592b0", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '(!raw)']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136d6487-fdfa-411b-b331-e5f8ade81e9c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '()']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ffeb10-2163-4931-8169-bd4538190489", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '(appMounted())']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117c8b3d-ff96-41d7-baa4-96dd6bfedb43", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '(e)']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cb7ab7-fc24-47a4-b49f-32769ae3e4c7", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '(function']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f7ab73-0f01-4759-aa15-b7a2d2ef350d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '(keys[i].indexOf(\"openclaw.control.settings.v1\")']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75371e3b-65e5-4998-9e10-4d559dea18f3", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '(mode']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2cf8322-fe81-4a01-8cec-c94a4acaf578", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '(panel']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6037e657-e2e7-4ed5-84ff-d5e41a6ac6d7", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '(raw)']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad273149-86aa-4093-a098-7cd0b1aace6e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '(retry)']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df46f5a2-a25c-46cd-a99f-0c9411ec847b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '(typeof']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3d1251-35ab-4493-800d-bda8fb300725", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '(var']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb95e1ef-91a2-4c73-a8d5-636cab290118", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '(wait)']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a1a8718-6be1-44db-83c0-91076f61e7f4", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '(window.customElements']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d319a4-c8e0-4f5e-8a4e-946b37126314", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = ');']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982c7003-6f7e-49fd-a11f-e01be3e27f1c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '-apple-system,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a373b1-16ce-4386-9e22-031e43ac79c1", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '.mount-fallback']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5528ea5b-3e89-4e7c-9e62-e858552043d3", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '.mount-fallback:not([hidden])']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6829aad-bd34-4999-a56a-55bf01f575a4", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '.mount-fallback__actions']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba60b218-4eb9-451b-8b1e-54cc7aca5709", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '.mount-fallback__button']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce3abc1-8294-4411-a8db-48a22330d04a", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '.mount-fallback__button--primary']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4addac-33f9-457d-b3e2-4320625e70e1", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '.mount-fallback__button:focus-visible,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61fda30-e41d-46de-a34e-d13468d8f004", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '.mount-fallback__eyebrow']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1b46a7-c63b-44ca-8d64-0b699af2fef7", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '.mount-fallback__eyebrow,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8275e747-d3c1-4d32-90c3-01c2ae16e3b7", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '.mount-fallback__panel']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9651a3-005c-490b-8505-96428c302775", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '.mount-fallback__panel:focus']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9360bd3b-d7c9-4022-a059-a3a11d377b41", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '/>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7fedb5-d436-4bb2-84c0-5c4f49fe81da", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '0']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf57ea1-3273-45d8-b944-58ab1b936870", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '0)']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a640873-55df-4f10-beff-962762cf6154", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '0,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1373f2-c9bf-4436-b18f-04ac9a4fa99b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '0.08em;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d2c1d4-8f45-42b0-8dd6-b6c18809f5b1", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '0.14);']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c44d00b-c1a5-4b8e-88e5-be4ee86df109", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '0.18em;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7fcbca7-0041-4481-af74-3d6605fe56b1", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '0.22);']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7011c14c-289c-4c27-99bc-1128ae313369", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '0.28);']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efc3b5c-af28-47a1-a4f5-317b54e8539e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '0.36);']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f284d55c-1c32-45df-87f5-137f204c291d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '0.78rem;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c3ccaf-ba94-4d92-8191-3a1c7cd87984", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '0;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30768ab-8268-4147-9ba7-e450fc1ee90f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69c0419-8f4a-4e71-bb15-ee5c6f80578e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b19f3f4-1f86-4c48-97ec-7d8a6406c72c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.13.79.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4e76c6-6a66-448f-8f56-135e854cffff", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.15.114.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9dc4eac-b4b1-497f-bd5d-607aac52a03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.15.35.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089a410a-f709-4317-a98a-d8235e80d649", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.15;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aadfa95-18e6-4d72-a9de-ba480a748f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.162.188.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c50c68d-19f8-4ca2-96bb-1c5cf9c444ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.168.106.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997e9ed6-c942-46ac-ac7f-3f026b671c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.168.87.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71de3cb-1f71-4bd5-b9ae-b607bbc211ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.170.2.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c312de9-d3b2-40bc-b3b3-ce13af81f673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.170.240.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3cbf72-f394-42b8-abf9-eda9b6f5d90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.182.215.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200f5abe-39a8-426a-ac14-aaba44d15dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.183.84.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3d7a15-dc50-454b-891a-2451673c1fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d9778c-891f-4ffb-8193-ab84c07e4eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab292990-0b21-4062-b4f0-fe9dc5dab592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064f0983-3186-4960-8e78-2cd29c5beb49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60eec8ca-3c98-43ef-ac42-f18d8f457e00", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.2rem;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d61c91d-c8f3-40ae-b098-d15bbadd988e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.54.227.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accd1d65-7e13-4aff-a0fd-bc0ccd057b70", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.6;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f494ecae-37a6-462b-8dbb-1de8bce09718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.85.216.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535d9f8a-d35a-465e-9bfe-ae9187399fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.85.216.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147a6d0c-6bb6-4766-91cf-e8081c0220b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '10.136.151.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccabcbe4-9c47-4f1a-b89b-a8afce26a8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd6ccaa-02fc-4fcf-a0c7-0905535257ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cecb74a-8a70-4468-b918-df93c439047d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7abf2f-3b14-43b6-8e42-82aac1e4b247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd068b2-8ac3-40d6-a9bb-7e5609a6ac19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5dcbd64-c3cb-49a9-bfe4-a35416fae8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bce8f76-086f-4734-b122-d151c4065896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad9cb3d-a9b4-4329-b1fc-e3081486b5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--543fe7ef-7d2f-4d9f-a26b-a68d27004980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9093ea2-838c-45e4-80e8-235d09e3b140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c31750-fb01-4397-9870-8168007e8275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6abcba-5c26-4990-8599-65a22f20d911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd25c4b-5c4f-4d0b-9078-7504aec68e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8979d1-a5d6-4b0e-b997-a9fe53b132f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63939163-d17c-45eb-9e9d-dff775c7b205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2ec1c8-d4a9-481a-b5fc-db63ddd11801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19ed70d-96cf-4add-81fa-22d5b823e57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5394ff9e-3b4b-4aed-8ac7-9e15fc6135e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbdeed2-ec1a-45e4-bcc3-db071fc841c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43cd6eb6-d164-4f75-b46a-f5626a0b0e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c616b178-971f-4722-b28f-d6fbad322bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1719f4-6450-4b61-95e5-94d9c74e48c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f072fb-d18f-4fd4-9331-e1ba132b785e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52339e07-7b8f-4407-b41d-d6dea01b36f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0021ac39-8400-4173-96ff-32cf33fb7394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e623b18b-8aec-4c51-8b07-383851a9ca98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbf4dbf-d9e9-40ab-aec0-895730eda940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90702657-a005-4e7f-b6f8-cbedef55b5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ff12a4-82bd-4b36-80d7-230ac906dc3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91cd285-62af-404c-a6fc-8b043f896622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c7d647-ba2e-4d0d-949e-fc37e2bb3532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed37cd93-5858-497e-85ae-f2df8cc571ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92725058-7b8e-4cce-8cd9-13a8f5aea6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001cbdce-91da-45f6-af77-1339e5d89ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86104b03-da43-483e-812a-a3a269b6f00b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75c596c-cd6e-414f-83a6-fa010cc8ed9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4358038-6ae2-4f46-a506-02219679492d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9030c3fa-431a-41ed-9d63-580320589b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50585b3f-b78e-415c-a88e-ca244b0974a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6318c99f-cb62-4405-8fa2-fd063107dcea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d45cd8-bda7-414d-a7f4-abc901e8fc0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9497b734-26f0-4aac-ab7d-1c592ff1511b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e72229-a4ee-4c8d-a2dc-fc233cae4fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6744c7-11cc-4991-91a6-bb43b93bd4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc84e0b-48f0-4a12-99eb-ae2c95a1639d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85139cf0-e70f-43e9-b9d1-ed7a12426ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839f5412-47ed-4a0f-9fb0-274203e67a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c906d43-372c-458a-97b6-85443366602a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838a859d-7420-486d-b305-6ee319a28b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84eb4dee-1a0c-4e14-92c1-d8e80c7af524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6e8c79-f482-4cfd-9ada-6f29230ed3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4070b22a-b571-4ea0-93c1-0a5a357c469f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187aa118-fbe3-4e79-b395-c934e64baefa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.227.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242cf00b-3874-45dd-ae67-b76597ca9df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.51.195.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9aa5bd7-1d32-4d1f-9494-419afbf1738b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.8.134.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac00aa1-32fe-48ac-84b6-903b92dc80b7", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100vh;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf87441c-2ac6-41cc-a55f-a01251c6f54d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.108.105.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98cf2563-3dd3-43ee-9728-26bba95eaedc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.55.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3dc367-e956-492b-8316-02d421f12aec", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.85.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417f599b-6ddf-464a-8848-f8ec45fa3790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.206.108.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3a5d8a-5f66-4659-b2b1-4c45950f17b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.184.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24e8242-784f-4832-a230-6879c9a70e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.208.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402661cf-fe47-42c6-a4aa-8f2499ce2007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.244.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100be4f1-f563-4fce-bd9e-9e03237b5be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa2a166-0ff5-4870-b420-a7b27f56dd50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4826e581-b65d-49de-9ce2-053bde828e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598b3989-0ea2-4874-999f-57215d86bd4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2295dd66-9077-464c-a858-048f72ad8e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b90a13-c55b-4388-a47d-cd5576aa0894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c397cae-708d-4307-8d9a-3cefcfa9fa85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02058c0a-5f60-4a17-90a3-ed760f2198f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc831f12-2afe-411b-bc31-255217f00509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f9be6f-65d1-4748-a274-b9eba0af7f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67aa13a-38d6-423f-a48d-1aadd9cad397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332c8396-2373-48a5-9cbd-b20cb154025b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a422aa84-47df-4364-9d5a-322b643f0491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a57f64-f3d9-4fff-a8b0-73ad3782d55c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e120575-678c-4cdd-9ccb-778d920e9d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dece2293-4ece-4427-a5ca-0f55a27b8a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e1cc06-0d8c-4b86-9967-8345c24d8050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800e0c81-1aff-4da5-bd68-989a02ebfb5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a199db-3949-4947-94ab-c57092b17c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37b4c32-f54f-4daf-8523-94a9972167b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.116.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e154a4f-435e-4d73-a6ba-3a09d5369dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--892ab55e-f47e-48ed-b83b-c18d5290c58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80f6d23-eba8-4904-b513-e6740b798e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24db3e85-224d-4bfe-be88-605ac43ef659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.122.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c51328-c451-4aec-b088-c53402b064ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f37520d-fb04-4236-9e40-6840cc4060f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8954b5-35fe-4fee-a6ab-cfc983577b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8f36b1-4830-4244-b9f2-645c62dc5d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7873cebb-e27b-45d7-b52e-f6eb8a8035d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49482b9b-73dd-41e9-a590-6a8c4feddf5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c2702d-f53a-4e93-b854-5041a2ff94de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee804043-f127-4ed4-a779-1bbd054d0859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2877fc93-bdac-4405-8170-6e09b72ad017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62a8e55-a657-42a1-8f40-82334cce51fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00cf956-1acf-4c6b-ad76-81788c206635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.37.35.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4899a04-bae6-470a-ba57-1853786c5714", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.42.46.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2557875f-a631-4a9a-8bbe-daba4dcd574d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.15.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9fff21-97c5-48c8-be95-c0b3a9c1a59a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.15.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5e2436-7622-4079-a848-49ad0b5b6548", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.158.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3bf5731-aee3-4293-b983-5a82a14bc273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.68.46.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01686a1-ec21-4605-9433-faee048701b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.119.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90dbd131-8f9a-41ee-bfe9-42731aedce50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.186.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083a2909-6115-44d1-85f0-bb9f7fe0abb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.200.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab959e2-3cfa-4357-8a3a-36c978e11d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.165.127.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d67e589-b43e-4cdd-b8f0-2f4f802a59e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.204.206.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9028f5cc-1a60-45dd-9a21-dd2cec396dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.223.47.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f79a9b-2bc3-4166-9ab0-6b825a678a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ebe5059-8897-4934-9bf3-9e9598dd7d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f67dcb5-71db-44bf-8bf6-923149518a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.211.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7397056-9d9e-487e-9120-200448bbd009", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.101.162.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6ad132-a90d-4b50-9cdd-a989ddc1f2b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.107.199.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3f5d0a-22eb-48a1-b322-44a306ebe6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.109.176.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8a7345-9048-4f37-adf9-7a290e56e647", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.110.22.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af82d05-3f7d-496c-8789-d383f0d48b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.114.147.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c3ec56-59ac-4097-ac03-8d5ac02dcea4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.115.64.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925d1e3f-c288-4366-a1e3-d05a92bd1bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.117.100.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4497ef4-e825-4c6d-a70e-90e0ad6fe29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.252.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75a0ce3-8a5d-4f29-9970-87e143e5fea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.28.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d3e2f6-ea2b-4e19-9a98-324eb542cbfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.189.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbcf535-4015-4e1d-b06a-379df41f4620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.189.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1cc0be-bfce-4120-be69-956d861cb924", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.202.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4671f9e-42be-4f92-aa64-109ec431c5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c24faf-1791-45c6-a0fe-b2882f3659b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.250.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e3b2ab-79a7-4538-8a8b-1bc88a253bed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.34.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609badfa-473b-4c9d-9f82-1ab5629b455b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66261f4-e8ea-4819-9cee-9514aa1a2bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.131.61.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eff6012-2cc9-4b29-af35-cf688c14826a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.236.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3753a1a-f69b-4f27-bb52-92b56f950168", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.243.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c468a1-7f94-42cd-b420-786b9770916a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.135.102.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38dba20-3909-4250-b07e-8fe20d4e9dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.135.251.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f33f2ce-17cc-4578-b652-455e38ea2149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2428a800-5734-486a-a3ca-cf057c0b29de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91244f35-32b1-4049-b8c9-53384c4f6b42", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.11.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c148d24-cd7c-45ac-a880-928b8b2a8a62", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.238.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c161a83-2703-43bd-989e-30e423638ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.159.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35562323-0d0c-4b87-92f1-26ebb8a08b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.147.182.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7988ce26-1b07-4376-8d22-0e542c146d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e1b45f-bf76-4197-ae47-9f5328e12877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44131bdf-85bb-4c2c-9049-c6f11106eb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.28.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a9b575-6ea1-4a7c-a26d-ab3cd9d6047e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.86.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94880a60-3e50-4ce6-8d1e-01ad76736646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de35e843-a3f7-4c3c-ba03-9c3ed6478cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.113.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013e9fb4-b3c6-4af0-b3d1-890818bb8062", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.113.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047e9d53-7be2-4ed8-8703-5bacb95ea8c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbae007f-3f2a-4518-99de-b5f8b5cb5c3d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.156.47.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0556e092-4974-4124-b3be-ba938fee4d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.34.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85418e9c-f033-46b0-a573-97d32ff6faf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.162.31.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d68b2e-d835-45b6-a0f8-989bd174e609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.163.118.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92e0e10-adc9-4856-9b87-0d31d7d3ad3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.165.128.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7340b81-58c2-48f2-814e-d1751046ced9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.167.89.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925e62a4-bb8e-4301-b7df-096b252ead8f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.168.19.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51dccc7-a10c-40a4-8973-69bcf2473564", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.170.233.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287e2fb9-c1a1-44ca-9d8a-737b5cebd2f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.236.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45caeed6-f9a7-4eed-8bca-6b168970b4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71704984-7127-4179-b64c-65f6232f0342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b79355a-3bc4-4ab1-bbe8-1e44300daec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369aab27-8434-4c7c-8bd5-af218e6cc5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b33d9d-9b7e-4394-a8e3-b3bac824108c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.175.51.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004bb072-c74b-47ac-a630-bc9681b53eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e234414d-83a1-4918-863f-813b7e128b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.90.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62858434-6b1a-461b-9311-14d5c9830bca", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.177.235.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcdb549c-d288-4b2b-986f-e64b8f9d63ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23267d24-d94b-4d92-ae83-8d16a7f01fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.182.97.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c8c3a9-8628-4598-ba51-833de0cadd71", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.146.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd86ff59-4d4b-400c-b9c4-a3ef21bf46de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.211.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdcacbc8-7963-489b-9f7f-4771e73783fc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.234.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae6f1f3-7d97-4b9c-966b-85022f6b1614", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.235.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd05204-3c8f-4ea3-968b-5e0f10595ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.190.178.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d19a018-5a61-4579-a722-93322a19e188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.190.233.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c59601-7dda-45a1-8882-096197dd9ee9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.2.133.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1863aad-b0a5-4ead-a26b-e15e9fab4aae", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.20.223.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1df33b3-2f86-46d0-8a7e-8159f1e9bc08", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.200.23.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d0871c-3a82-4969-844e-06f4cae5bf12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.56.0']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc732948-a6fe-42e1-b8c3-4617b61b6699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.56.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738d155f-5c02-4207-8664-4ca0ca68b8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75747a9-0b62-497a-8b2a-e54b23983e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52454c6-815d-40d2-850e-c98bcd5acddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25626b66-b641-42ca-b9d9-0e7e221f4407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c6a006-fd38-447c-8358-8d8b725ee9ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.204.156.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfb4495-a6f8-4e37-8f69-6e1d189e1dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.209.65.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6488c869-4adf-4e73-9733-8c6c351d81ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3b3a01-6625-49d2-8186-dfcb67f24d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.212.186.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba973dc-b4f3-4522-8dbf-5e357ee05876", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.213.114.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4261115-4fd4-4482-a1da-17ece3379d67", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.217.190.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18d9641-6c7c-431c-89ea-efb887ff735a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.240.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a06dea1-0584-4a32-bf55-eff4329e1b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.240.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00ea1e9-09f5-4421-a4f1-147492995f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.219.153.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5861bf-5fbf-44dd-8406-fa2ef86f843e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.230.120.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310557e7-bb6e-4027-88b7-0769891d6ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.53.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf9b25d-7a99-4e9e-aed9-207200841c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791f06e4-a4b7-44fc-82f2-005714a46570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4a38c1-f418-49bc-b1d8-167eeaf7b929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968e242b-8bb4-46f5-91c7-690d83bdfcac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998e5246-d068-4d50-a13e-2137a79b50c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4501d822-7219-4d37-8672-d3b1760e0f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c847050-e677-40a3-a3d8-6c517a1ca4bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e835af-299e-4046-a7ed-d35672181f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb45bb4f-803f-4896-b3ba-01561591c7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553c99bc-5f94-4d0a-a06b-11548223d154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece01292-e161-42a3-bfec-aaed907b2ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b0d3f1-7f8b-4b6c-8e62-ab4b806f688a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b2d083-079c-4b5a-8881-15671de0e759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf775325-1ee6-468c-8506-ca36c89bbd95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dacb46e-9350-4342-8d13-bd577d2ed6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d24beb-d8c2-4fa0-995f-b711bf5474ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85ca3e0-c6b6-4015-bfc1-21f7106c4fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d375c436-41d9-4e21-b8f0-576a152257a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9042d7-889b-4ca0-884f-d41724fe1cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0176b42d-984a-4257-a739-d5cc940b72d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd6fe85-18cd-419c-8ff1-da0a9db297d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a00d8c-7577-4767-9766-e71847ac9e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.236.75.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3525b61-b0f9-4297-ab3e-1ead3b498566", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.241.43.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e0663a-4fa5-4a2e-9344-293500b38821", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.247.28.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda29a29-09d5-49ac-a1aa-b6de0ba6b71c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.248.120.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89cf4319-348c-4d07-8b88-6fe95ca7011e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.250.11.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d78b15-824e-434a-aab4-264ecafe3fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.252.90.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584f078a-d975-496e-94dd-9807dbe35993", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.8.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b038d6ff-f8b7-45af-9fcc-418f0d110329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83202a4-1faf-4746-9a69-9ed762afbca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec4bed4-b155-4f12-88c3-ed16bba06ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbf8be6-ef1e-4ae1-b904-792ddb8d17e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.31.249.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923b1bbc-ca59-42fa-a0bf-5b462ccc473d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.31.83.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de67aa8-7fbf-4403-8aa5-7179d2eb0244", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.36.220.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2a4122-0398-4fd7-a8a2-9c9b0dfdb0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.38.219.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29c4391-3d6b-4fbc-a77a-531c5fc8fbbb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.4.250.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac9fcac-424e-4716-9731-51eb25600747", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.4.251.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090070a3-71af-4099-9bd1-7633b88bafd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.4.67.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee215df6-77c3-4c53-955d-a3c19dff04f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.42.30.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05eaa83a-e0a4-48b0-8876-dc23ecd54d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.51.56.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c080376c-5395-4977-973b-a606ecf44cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.54.101.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25080bde-1e13-4a97-832e-0ba19de8a8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.57.224.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068bef2d-0cb9-4ce7-b569-dcc9aa97c9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.60.242.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50f0706-4a45-4241-830b-09b698b6edf3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.61.139.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3892d8dd-4f62-4c04-9712-acba19d78efa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.63.108.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a189047e-e1dc-42ad-a020-50f669542100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.69.189.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757ae5bf-6910-4132-8175-81be5ab634e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.72.1.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696173ac-2e38-4ace-ad68-42ea69e24270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.73.64.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf20d660-eaf6-4ffd-890b-5cd7d97563a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.73.66.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee82ad8f-f922-4075-af86-e81c832c3325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.183.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc4667d-63f2-4a82-a0be-49f6c07bb1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512e642c-8a30-4363-805c-970e5a78e856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720bf223-5a05-4b74-a2eb-5c0dea405895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.240.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986107d2-08b7-4096-bf10-f8753e692fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.242.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9062da5e-c1a4-4c9f-8a45-595d77b47b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.246.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e1713a-d83e-403a-ad3c-1bfa2546f2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.0.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53c46ad-d37d-408a-bdb0-4610fb14ff7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.81.3.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da69b693-565a-41ff-b7ab-d5b4c6429e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.132.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38cd2df-91d0-4b83-8358-70e3af5c7a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.20.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b7b2e6-5cf6-4b34-a106-efb1941e5b90", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.86.176.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bded65c-cd01-400f-af4b-cde9b9dda628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d32827-7e61-44d7-9bfd-d43383e2c952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473e5cd5-6467-48de-8886-3e2bbff374cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd63d86-37ae-440f-8ae1-7184c1f4b187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9597e1e-d92e-4488-8eb2-9b3ca3f028d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d3877b-1cc6-4bde-af27-077af7dd789a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7437d303-ab98-4c9d-b997-8796c2e64443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0575d416-575e-402e-bb4a-b2cb9e36c890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3faf404b-a033-41b7-ae90-2f912cf668fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbf3667-e4b8-4cd3-8173-ff58cb652d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.206.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c292998-7449-496a-838c-609d46577795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.77.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962c2772-ec99-476e-bfc6-2f75fb8642de", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.176.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5715cd-1559-4b2f-be56-a266c17c24bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.209.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953c96c5-e485-42ef-b4c1-63ba14c33657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e988ca33-0207-4cd6-9d7e-97672f868283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba0a0a2-080a-44b0-9f78-d1d31ed9af6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03d20e2-eaab-4d4c-ae8e-6ad24a376fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79297c80-e7b2-4ad4-a023-3a8aa43a1db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700b4587-f21a-4b3e-b6d2-8e1a64b84646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0f729a-b6e6-4752-b33b-813f4c2aeef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f9a8f3-726a-49b3-9e20-4a0a0a105765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ecca6a-34e0-4810-95ca-b3082cb3e115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ca0f47-ac9f-4335-9397-23c68920454c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3351e223-a85e-4e4c-91eb-1148870aab19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aab8704-d450-43a7-a5ad-6fd4bde3102f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851a5a57-98d4-4781-b775-48f5b074b156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c5435e-e2f7-4781-9eab-013992ee194b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56188e40-f92a-47a1-9015-9926d26f290b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a2c191-247c-4d22-8df4-893168ee2672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014a3a0c-0ad5-47d5-b3eb-d3c4439cc4a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce7ce1d-e8cd-42a5-8548-5b1dac157558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3803a343-62cf-44e0-aa88-a4eda0ecb5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15fe4fbd-ed1d-4171-9b6a-f30fd227bd2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7682d637-eb6c-4841-94cc-0332fdfe9c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74aeaf0d-f58b-4b1f-83c0-d602788da941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8572f7-4631-4d9b-a9f4-e329fbae0fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c137d07-3474-49e0-a5e4-ddf168288cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5282482-f0b9-4fd1-ac5f-2c1bc0441eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e040075-c753-4eaa-a065-e31603e67b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7c6c1c-e5ae-4c1e-9e8d-44f48143c15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1079ad70-ddc6-4948-8de1-e87eb1086c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f54078-b99c-481b-9ed9-ab108a973356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b243ec-fa83-45f4-98e7-d61ca8186ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba55579d-c9f6-4d04-9c76-17ea25293f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d1a1ea-c315-4b26-9c01-d1fa253eacdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9268c9-28b6-449b-bec0-1e4f6ed78437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d56f178-8357-4744-81b0-85217871daaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb12973-b5ed-4795-b735-8a134f5fd3c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608f7277-8124-46b6-81ba-cfaef4812ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d78d78-6d65-49b9-97eb-69529cb7fd9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f05b2e-3e61-4239-876b-17c165763a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9ff6b2-c2d0-41cb-8048-18b48f5cbdec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03cce23d-e6e3-4675-9452-806cc11d5e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee6b869-cab3-45d8-9310-d194bfc874ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27259538-9812-4575-ac42-93b2f95c436a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e61e854-a6a5-4f2f-985c-cc1c5fb1b7dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee2d8e6-ec62-4a00-88c7-e1a6d547e566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bae680e-c206-412a-a1cb-c48c1a091a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bee9c6-0f7e-4568-906a-43c767c8ac59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4273ed9-6c20-4fd9-9a6e-8912ef32dcb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.131.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a490d3-53cd-43fb-9a5b-628a2ea2d7b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.50.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7f7716-7760-4900-8fff-a54320a81758", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.164.54.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba40230-e3f3-41a0-9caa-79ee481e6e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.167.64.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991c90c5-ba56-4eb0-a3cd-7da30db915b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.168.132.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b06b6c9-c33f-4e09-a43e-8abe33ab8112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.192.92.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546486e6-0689-4c00-8cc5-1a2d0b09f5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.154.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74d3e86-7dc7-4940-8c26-429795e80d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.68.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6ad513-1456-4305-a9ba-2bb79208efad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.71.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6daf96b-9efe-4a7b-9344-07b84e646106", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.88.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7e9924-157d-4586-814a-ababe3091b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.9.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e9731a-21d3-4971-9a28-f1230c3c9c93", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.89.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa914b2-7980-4f1d-862c-84f1d2665581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.200.30.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fabea5a-a8fc-4cb0-8ff1-fadde4c1ec8f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09a2386-d7a2-4c88-b1e3-b3737e8a334e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.223.85.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc02a5a-2db8-4673-9030-a7ad3b72dfbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.224.31.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde83317-3648-46af-8f17-bdb52fca4a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bb2f91-d830-4e07-819a-c604819ce944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.94.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368d2ca0-e82f-46f0-afbf-72ab3049f16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.107.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79054bfe-637f-4d91-b669-158a58eb0fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.225.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9067ddf1-5571-4a01-99a0-54746c79eff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.31.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b4cd3c-e401-44cb-8928-e529abae4f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.83.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd970c62-18fa-467b-aff0-af95a86fd1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.97.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2607001-4601-4215-9338-802dc95bd1af", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee2852f-8b83-46ec-877f-684c21797fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.150.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a25a2c-fa2e-4cc8-b666-65bfa3a83587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b84d8cf-e9ba-499f-b6c1-a463a3478b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.240.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce545433-c830-4b5b-9ab7-fbe98701a702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.238.183.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5139db-1546-41de-83a4-f93076b64bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57911d54-f8b3-4be6-8008-6a6cf8819eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0ef0b0-1ca5-46d0-807e-a259cc23fd2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39fef24-295d-40d7-8760-f9abc6c18b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.37.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ed76fe-d973-4849-a0b3-33f983611fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.46.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e767c371-b3ae-4e2a-9f00-9433e3544533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaac1822-6126-432b-8e70-594ca018bd91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.164.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5accd039-f710-4e8b-b543-ebf5aa8528d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.177.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0beb2bce-028c-4545-b6b7-6f88b2bb4a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.194.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab4dc99-fccb-43f5-9db8-ec37b0c82f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.2.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b01bafa-f4d1-49ac-8836-7411dc132e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.203.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d18f8c-d442-48d5-8bb8-ed355c9d398b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.204.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d290ec94-4a2c-4f1a-ac6e-26744a9b68b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.229.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7dc481-9991-437a-bade-cce124bf6f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.233.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79389a0c-2ef6-48c4-b171-bacfaeb1a92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.239.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89ef51c-d746-42fb-95de-306a72820c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.246.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75be8db0-3848-4984-bb00-0da4fcfb2151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.35.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf775347-25f9-4dcb-b0b7-031320764dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.84.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6b8eff-c500-4069-a3c1-b48ce8de3d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147d7885-56c1-4678-a074-cd5eaed5796e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9f57fb-7781-4e8d-b7cd-deb42e1f5644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f39a0a6-3bec-4126-b2ff-9cf43e7ff8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.181.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb9cf74-c64a-4daa-af4e-c228f6221c67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.252.191.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86425e1a-b98b-4012-b36a-7a043ff1016e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.252.191.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acef370e-9288-4029-9395-f126f1f00619", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.158.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc3d20d-8a42-45af-bddc-78896346ebc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.30.167.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bae397-8f7e-4b70-a4f0-62565c18386e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373143a3-61ab-4f56-bc8e-ee7cf3e7298f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.107.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda5e784-665c-410a-b4ea-5e6205dbea99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.107.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f661b2f-c057-4739-b9eb-5f099c975f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.154.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce58150-c052-424c-889d-2743e2fa8de8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.86.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fe00ec-ea76-4786-9caa-04717e84fc99", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.124.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fecc8ba3-2b00-4d77-bc0a-500f98d43a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.182.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02478bcf-32f6-4d3f-bf56-04f2b29a0c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.182.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80dafa0c-948c-43e4-aa4f-d0e099e99774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.219.125.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e4dfb9-89cb-4d1d-a48f-bb88fc6835b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.240.29.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525230d0-5496-455f-a1e0-002661e9aebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.245.146.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9555a312-7e9e-4008-a7c9-2253f9902900", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.37.191.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee44aa7-a4f1-4a0e-b06f-cd75a9499d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.43.103.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23dd54c7-bc63-4975-928b-3560de4c2972", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.52.171.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1198db0-7352-4bdf-b2e4-8820277ed31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.54.224.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2d761f-bd16-4574-8cb7-ea242ad57409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.63.100.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82379b70-c5b5-49ce-9c75-b61a478b1059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.139.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a4c254-42e6-4c21-927d-27c81a9862d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c741a8b-cbd3-43f0-894d-b6ccfd860284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0970b1d-f51b-4185-8229-d19c4f8a6b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88be7fc5-d102-4b8e-87e6-314d12cb6a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2b951c-f9c3-4e76-a659-0314f99638b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8de16b1-9e43-4de8-bf7b-f92812a7159c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f714505-b06c-48dc-b178-af558ca025c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0a8336-ad7f-4401-b76c-836ff32991b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af43f16-fe3d-48b9-ba99-61ce8f1e7bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be632545-a51e-43b8-890d-4aca27e181bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a9143e-bd98-418e-974c-80f6fa32c4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.154.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6375c4e-0a8e-42ab-baae-90103204e7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.169.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e8eff8-e266-41e9-a7f6-6e97543207d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.172.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01045227-25a1-4c03-9cd1-bf706a8f01de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93004a7a-126c-4092-88d3-114671378854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f90fc9-42f4-4bf7-806e-c6d3969152f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.184.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e6910e-d9bc-488b-9772-a4a733f13192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.185.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f8c0dc-ecf6-41d6-a809-8eca85b5ceff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.188.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1b5e42-f3ec-4a3a-990f-e3b53f28b665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686d374b-9aca-4470-87ea-a037105b7b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c52b83-2a2c-4430-9d18-d3fcb7221472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f3cad1-ebdf-40ba-9f4c-19699b28ec11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0e4b4c-d2c7-490b-be8e-4306c21eecca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1c68d2-cc5a-438a-b4f5-09eab423fa73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.222.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9903f86a-7354-4560-9810-8bc522a05960", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.92.154.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20955614-cec3-4229-8057-12706fd5a374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bede92bc-4611-4fb6-9d48-3fea555718c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcef51ff-9d53-41e9-bb55-599f19a21e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5133530-a7a0-4942-a176-0a5394bda97b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a23af15-295e-405e-99de-92c1c2487be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70126fa4-62d9-4138-a360-3233616a4cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7c1059-0aa1-4d71-8284-bc9bea3c08f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1878da-798b-4f15-b5ea-8cc7d9f3a061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ad4810-721e-4db5-ad72-1c6ec41d75c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c2475b-f904-42c7-a0a5-838763dd9db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cb0a3e-3ba1-46aa-9a8d-2e9a65063986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533b2ab9-7470-4a34-baba-ac42b770748f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6674da0-99fc-4c61-add2-20da93f0d2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235f0766-81d1-4aa5-acda-6f5e399183e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7652e9bf-8157-40e8-836e-19487a38f9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55bec290-755f-4889-b02a-7eb197beba3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1edb22ea-e690-471f-b126-e0cbdac78b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e34b4c-0977-429e-bc90-fe7afac64b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a88c51-731d-4e5c-b7ca-be0a7af118de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528cfb49-496c-421a-88e3-126f06aa7bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d32137f-5730-4e08-a803-d3e0b52fa977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a357643-9def-4a0f-a1a4-2c7b0d006276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0199cfe-41cb-4ac4-a237-d2a0bdf402de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea1c48e-9142-4cef-a711-c5a9e0a9e501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfce209-6e3a-4538-95ab-adf0b4055211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d1e8d9-e401-42be-b3aa-69089125f1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5978614e-3104-49b2-b05b-ee07609a6a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dbfc113-ed1c-49ab-a916-a00cc739bb71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a143b3-5e0a-4de1-9206-903af8abff40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60cab8df-e29e-4bb0-8b80-4130d2659d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327baa1e-8dff-4b29-954c-3b6a91b3d538", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.7.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943af817-43d4-4af4-8c36-bc44173541f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f9d448-06d5-4a39-bca4-f9ea21292a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649d0379-c713-4cb8-a695-d72467391f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db08574-fa68-4a23-b00b-27759cfd669a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a690d3-d538-4ff0-9c8d-19d13f49cc5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be0b6b1-0a4a-49ce-a64a-d88f3c1adea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa59bb1-5cab-4e0e-8df9-6cf5cd37d301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc38854-e821-44c1-a3c1-7513ad038e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f566f2-a85b-4d74-84e6-7893b3368902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecf0d86-bf40-472c-8a9b-49ee47100d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1b31d6-3182-4336-afce-7980e0a316bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb49d73a-6eef-4659-9e7d-c75fbf4905aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f2ba37-3d9a-4349-9b72-e37c854bd13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523f9880-e014-440a-b2b2-50f6f9a564d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f67e5f7-7c5e-4613-afcf-f1ee1851b247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f54d4ab-f129-4f78-bd79-12ac4b1848a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755244f6-7243-44fa-87d6-e1c11f48b099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.152.36.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f27a1e-462c-433b-bdd6-e653b10b80ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.152.39.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a814f738-d385-424f-8f37-d8e1a1d458bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.152.44.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91a7266-470c-4aec-b82e-b8b71a9306b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.152.44.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9c5175-e6e4-4432-9320-422c719321c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001f9a88-3742-41ef-bb1f-5714bc7e675a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.23.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d7a91a-6f48-4b03-863b-0727b3051736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.247.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b5a166-a347-4c06-b06d-4cf20433675a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.3.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c046ec-96d5-4f84-8c02-aaaf64d443b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.88.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a403943b-2460-4e4b-be98-d2f980f97773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.95.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d412ad-acb5-46e6-bf56-19a084cd7430", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.10.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8785a4-709d-4978-a0b1-b94727f2e552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.122.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ad6948-cd79-42b2-8a87-f0d1dc33d84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.182.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd4be47-0e3b-41a1-8cd1-fbe2b09320e6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.83.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f0389a-6484-47d2-8bca-1dcc98cdb62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.85.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9513e2-1c37-4ea3-96f0-d9bfdb05a1bc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.141.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8755af1f-37e7-41a5-9238-51bc140247b5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.40.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416ded70-6fb7-4e65-bdba-046b63e12965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.81.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cacc35c-dc1d-4586-b259-17479e3c2a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.90.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1874bd-10bc-4381-8f31-d54b2efed1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.242.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3472922d-8fda-4bea-a10a-3b05581e11ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.244.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8bb1ac4-f82a-4e3c-80bf-9e0f612b32a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.51.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e655dba-81d9-40bc-ad3e-0d4132fcb2b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.8.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7137a2-eb13-4841-82aa-9471e98fe4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.20.86.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e76aef-38d5-4178-adee-e0199730cbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.6.145.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7190cdf-46c6-4a4c-8826-20225d99cb49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.23.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb78bbd6-fd70-4b45-b13a-29c756b52930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.170.28.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8d18af-52d5-41f9-834c-e6dd699ee454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.170.42.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47dbc0a4-1cfe-40b6-9432-8cb206fe89e2", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7d5c21-3c37-4d57-a8d8-51ceccd0eb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.2.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbecff95-e952-4b5a-a281-f5a98ceca587", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.63.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db03893-8a3e-47bd-94f6-d6959b0a4f81", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.35.22.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6ad689-8467-4c6f-8da2-e9a3536d5968", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.8.93.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16aa83a7-7126-4700-8db4-30e838ce377b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.100.14.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5fd878-238e-4bc2-9ea1-88550eab0014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1994a631-49c1-4130-91db-22480f2cd0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e4c05e-ba27-4125-a8cf-8847b7ecb3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a76eb6-aa10-4387-bd41-a0e2764f41a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6212c3-5eb0-436f-a577-47e5cfdc2e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd08d17-9b39-42d2-8a0e-7aad175b1a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f70161-01d8-4558-a9c0-c35bb6ecb22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c50ef8-3c6a-4cdf-8226-1db7cf7c17a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d09e56-727c-4678-8c25-03e590c4da22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86b640f-a474-4b42-a5d7-efbf0808d701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a650f82-1d7f-4bc3-a9f8-7099bda402ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a275c0b-d746-4024-b629-33ff5de27a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e551c52-e9dd-4ae6-bc8d-0bffb2947442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09a35de-ba4a-43ce-adb8-f7e550d319f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a989c47f-be0c-4cb4-b6eb-55b34d0cca85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba77390-8183-48d1-8d9e-801e248538ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d4dbd8-c3c8-4cf9-8eb9-63713e3f52e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1484cd-8eea-412b-b004-4ac6e86afcb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b99b14-b6f1-4c9e-9eda-83acd8b76c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa047f88-57e7-499a-82a6-9a015d133b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990016d8-3fb0-477c-a849-259bfe8c346b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc537e59-6023-4f5f-bc73-e9b2191343f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d8abea-6908-49a6-82d2-8caa520c294b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c287d891-8b4e-434b-833e-5524040271ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ffdbaa-c16d-49fc-a051-af33fdfd4346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497467d7-9c60-4da2-897f-9c5df20f532c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ada5a7-640d-46f4-a3b4-94582b49efa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3f330d-5c13-4e57-a148-bc2a27ac6c57", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.107.140.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab242e77-0b29-45ec-9c24-9086890032ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.237.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac06a0c9-7b7d-4b1b-b3ea-7c205a649627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.238.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e210603e-0585-4c31-915a-1ad8c55cddbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.125.135.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41f3f5a-d17e-47da-9496-5c648255e0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.106.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2da703-f8dd-4b57-9eb9-b04d37fafed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.180.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769b88d4-0e0e-4f41-8327-16145fa6b423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.211.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240d98da-98dc-4394-9b66-dfa65595fb63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.206.247.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c7ae55-9025-4cb9-953c-cf0306c1e404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.207.174.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab697e8-2c39-422d-a404-13c941764d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.236.86.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637af056-e821-46ae-a9ff-52b79fca6cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.237.96.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef12499-4f8c-4e97-aa5a-7ad64b086b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.63.134.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c75e8d4-0d4d-43e9-a324-caa9f8057635", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.91.4.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8349f8-79b6-499a-8de4-171068ecf936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.92.130.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39d9e1e-05da-4c77-beb1-80c39c9d8b8a", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '10px;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bb4701-b4f3-4309-bef9-3daa6b020274", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.10.176.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105450e5-3a83-40fc-bead-d8b3acb93b59", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.225.255.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf3e1c1-94cf-49a2-aa63-5b5bf8768adb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.238.115.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b52f232-f97a-4933-989c-3524cb74b2e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.24.36.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac23756a-a8f2-427f-b8b6-2147998d7c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.32.121.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3330ce-2076-43fe-943d-368be5649872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.35.12.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f17930a-9612-44c8-8253-2d1a9d634bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.42.32.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca6c22c-833b-4707-a5ec-66d5b7eb9b70", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.42.36.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f6a087-adc0-419a-b5ca-24df31b1af78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.42.63.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5967c167-2913-4202-ab6b-d3cb6e4071c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.87.158.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34098624-9a5c-4b8f-9a20-d773d593a333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.87.174.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8395e3b9-fb69-4a86-8ad0-da0e60c1d0e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.10.175.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31148e76-f270-4144-b999-c0e2dff23335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5341272c-ae60-4af2-b028-75a28da3cc96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb8b4d7-b4e8-4f3c-8f20-7c4331b97d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ccf75a-42ca-4b38-982c-efe86702bc67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.119.236.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ec51a3-e8c2-4491-9720-1cb769875b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.127.77.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768300df-d6be-4c3d-a82c-13c842abb9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.170.172.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bc2dec-1889-4e0c-9074-006df0727792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.170.22.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd18b2a2-93b6-4619-8c69-50a03bfa0730", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.178.127.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67caf4a-2528-4ba9-b3bf-cc91437c4493", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.228.48.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a89c8b8-4a8f-487a-864d-55af7e1b580f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.229.143.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbd54f7-8791-4fba-b8f4-0175f82a63a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.253.190.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da741d3e-a1be-4761-965c-b6af7b156527", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.26.6.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c621bb5-ad88-4d4b-a701-54328f583439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.26.63.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36936ad4-14ae-46fc-ab18-10453beb431f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.40.50.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae640c6-c17d-473b-b3ac-ee63298ab5c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.42.60.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3eed7a-674b-4aa7-960e-d9b2c8866708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.55.74.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8c4dbb-cf4b-4ebb-81da-06c116f82646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.7.96.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0cf2c7a-d244-43df-b5d5-ad3ba3f2b8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.92.88.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d43d60-3686-43ea-a91e-490d1289109d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.204.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b8b7a9-9d0b-47ad-9124-e6e0c902bb6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.112.234.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f7c79d-6a1f-4742-adad-0ae24d4e1bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.132.212.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984853e2-2a24-47e6-af13-3d5e4f2f6dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.166.31.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cff5e5e-a62d-4590-9d97-f8085a06df37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.170.207.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5eb3e95-be2d-497c-899c-09f09ffca826", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.18.123.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d9ea91-27ec-4ec7-98a1-b880fe01dad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.238.169.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203ace76-fb91-451d-9f01-f74efc7ae962", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.32.138.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe12c581-7fe3-42ae-8878-a44a5c62a371", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.32.139.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01f3fbc-452c-4dc2-96c7-dfc5f815868d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.216.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c6d742-b6f7-4289-a9eb-618cd630b1d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.217.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baedb7ed-c2cd-48b6-8c2e-5e3b85768b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.217.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e51008-445a-4d8d-a494-8ac13d9eab23", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a07b409-e409-4d15-8210-945d7d3c2eec", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ac6212-f571-44f9-b791-8c1ea786b2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f1479f-c0b8-41f1-a785-eff2ba411ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7159622-c936-4264-bbda-90bd7992ed3e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2fd1c3-1b6c-4795-b615-3477373d9b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d69d7cc-a5e8-43ba-b9e2-0996c8f4d1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c956687e-48f0-4d93-81d1-e99bc94fe381", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0c93ea-2002-4c0b-b678-cec51f53bdb5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da564f94-162b-4795-b945-c1fd86d95930", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f305b1-7317-47d2-bb2d-b2de8f884aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6136183e-10c2-4740-9161-12b773299081", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49317fcf-bebe-4553-be6f-b867c38088b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2687f565-38f5-4476-8d79-9c731b0d402c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eec08ea-e535-4df2-ae1f-2b08376eb6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d223b239-87e3-474c-8e64-a13e3ed892f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4108a5ea-ec25-422e-9e63-ff03f7247aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.51.27.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcc656a-a9e9-4395-bae7-49479d003698", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.74.242.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a08806-cffd-4ecb-98ff-3ac8df1d9996", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.81.45.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8efe0e-bc75-467b-a7b0-e5f1fc71b084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b85b530-545c-4522-aa21-1135f9e973f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f262466f-cf3a-4e1b-a647-56d15d8b36ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.253.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc8a51f-97f2-40a4-b93e-a4aec3e318f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.98.217.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d559bf-2c79-42ba-907a-87b0795d3c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.12.252.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c9c816-93ed-4a7f-a7b4-c633e5b825e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.130.223.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7335aa8-6620-4c15-9612-e646369d0af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.131.125.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f558775e-98e8-4d6a-af59-da749e3719e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.160.186.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b14673-6ec1-4508-ae29-4984a262dccb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.164.66.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbdd4d8c-2f52-4597-9375-6a41cf361f69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.169.148.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93de2704-d5de-4131-a51a-d93a6b814053", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.200.121.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119b8d56-748e-4a90-b248-18c9a862c74a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.200.174.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde278fe-c7aa-47c9-80cb-ced8cb195e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.206.180.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b63a11-9d20-41a2-867d-91a9e44e2380", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.207.105.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64963db9-57d8-490a-9b6e-9500c4b4d9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.214.18.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ec0bf5-0bed-4002-9cc3-7d78b0024b66", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.218.139.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808bcc38-7a2b-408d-8494-d2ce5083223c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.221.97.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510f8b92-5ff3-40ae-bb2b-24f4475ae967", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.221.98.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c633d5c-a231-4dfb-8345-e5220ec025f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.240.218.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e548831-2ed4-42b8-be03-5f359b528bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.46.210.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee6809a-ac64-4330-b2d7-386fc23d6d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.56.193.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b239bf-3909-4bcf-acb0-78a489e918bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.57.185.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5b2b29-63ec-4b13-8ae9-5a598d8a2ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.57.187.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1888e6-858b-4c4f-9a34-af0f4cd2b433", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.58.234.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e86714-f26b-48bc-b409-250e7d0135c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32473416-1305-4114-a3cc-1583b0d93e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.199.173.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f56b4ec-ff7e-4327-b89f-fca34d524844", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.216.14.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7287f818-5225-4ba8-aac2-e9c86d78d2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.225.246.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95342172-76b0-4611-afa8-8dc548703a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.227.50.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1fdc3f-48df-46a1-b013-75bf7c521e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.239.97.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb986bc1-6c46-4ed5-ae23-80101005bd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.12.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cecf6cd-e8cd-4a8e-a641-39d3828d3066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.40.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2eaf742-72b9-4d1f-abf8-395754ae96b0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45df0a71-ce45-47af-a845-3201584c47b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.55.166.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ba603e-88ce-4938-952a-3259a64fe9de", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.66.29.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8e7d1a-a463-41fc-a725-661d7a5a0699", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.80.34.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5797d40a-22c6-426c-9f6d-92787b46988f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.80.35.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825a4f30-77c4-476d-b56f-65677fa7c7ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.154.133.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa77f533-7513-49f7-bd25-f5de399042ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.179.102.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9708e5ed-6d63-42fa-a331-f348260f305f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.115.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416a4bab-c1a3-49c4-aa61-1b6d09c14bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.140.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a686822c-8a7b-47e1-811d-cc7fdfb45895", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.188.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e6124b-add9-43b6-95b1-746554c7237a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.192.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd14a00-88a0-4357-829f-67f45264f423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.244.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d8139b-ed3d-47b2-bbf7-75611b0589c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.46.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd5b8e4-c174-427f-86c3-de7debaff1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.54.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642457d6-2626-492f-885f-5387dbb59fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.210.48.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a833233f-d41c-4615-9af6-dc38eec0f5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b5421f-efa7-4762-bcc0-992b3dbee8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.239.27.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58e0a33-41ca-4f9c-9968-9778b130cb6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.248.8.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef17513-bb21-4430-9184-30aceeba3f69", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.42.66.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea51c4b-43ff-4941-a98e-261e66e96963", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.50.5.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3c419f-ad99-4013-b04a-95c18f73a897", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.60.145.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1b8478-02fd-4562-a954-e221a3c60879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.0.54.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787f3f2c-2651-4b55-a1fc-4d521fdcd29f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.156.0']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d6a779-5d54-42bc-b1e8-2d036c0de906", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.221.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fc83bf-9c94-47e4-a4ef-5e32f0eaa4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.118.49.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9cac4c-619a-4493-9aa9-39bae2b14146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.168.74.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86359b81-e874-462c-9aac-a82fb20a0505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.172.200.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb51f26-3867-4d2f-8136-fdb9523f7c48", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.217.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f74cef-e5b8-4936-a67f-d25a1241d973", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a2bb21-9225-472f-847c-3c18884f8663", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632dceab-9b32-416a-89e3-9fde83044ad5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58420e44-c5e2-4cdc-a304-21347abb1a4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.37.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d44ccb-0666-490b-8539-46c0dc8e3bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.198.232.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ac0c4b-7ba4-4b53-88a9-eee8fa683933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.204.186.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bb9398-023e-4685-92c1-6a0c03b8642e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.206.125.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b32f01e-e43d-4a66-b697-3db49e41ce8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.249.227.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7a20e5-2948-4c16-8657-78c0bce66d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.251.217.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bd712c-72bb-4018-95f1-71ee62f28a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.55.72.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85175c1f-534a-455e-8456-aeb48bb92a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.163.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2e53a8-52f1-4ec6-b303-03b3a09ddd73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.167.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c27479f-f0e8-4091-9f7f-bd819f5be368", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.171.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9259621d-1ebc-4c28-8a8e-2a84249d27b1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.173.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f31aef-9ef4-4aa4-acf3-b11356d24824", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.173.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbefca10-f406-4346-98af-95bd96004e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.14.148.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e72be0e-bb7d-4ab0-9e1a-c2aaa1755434", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.150.144.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7db93a-1b6e-4716-97ce-ff9faa4ca2b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.158.156.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c2d89c-7432-4e8f-9bb1-1354064aa2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.191.91.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494f09e5-d5c8-4e4d-bdbd-7eb627148137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.205.172.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4c05f4-2931-41c4-ba0a-487ce0e803a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.232.85.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2401815b-6819-48b3-8e67-8735aeb0aff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.247.76.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb15a4f6-8842-4553-82d4-69d33a34d2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.250.115.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3122f87e-9b79-4e54-80c9-7c2494cc8126", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.251.207.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaef9080-f320-4bef-8d4c-12207c0deb79", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.63.5.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad180ad4-78bd-4e35-b960-e381bfdfd516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.67.151.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbafa28-c95a-4d8b-b25e-cb03e8e692a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.68.74.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740b8fca-8329-4772-b0ab-59588201d950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.68.74.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5078de1-82e2-47e2-ac3a-c4a6cd3fec70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.103.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a448623-9222-45c0-bf2e-84fde1426405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.154.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f2e516-f0ff-417f-b318-65d74636fe59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.80.234.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2b474b-5082-445b-9c42-fa86901fb7f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.107.220.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811c8046-839e-4b8a-8d50-f62a201d6d62", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.122.147.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f785e7c4-8d89-4eeb-ac1d-56b089229b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.104.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9298fefa-abe5-495f-9d4a-9147aa096c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.116.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8424e582-12e5-4ce9-8e86-47fb23be6cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.131.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b075d6ce-6269-4c6a-89a9-47c0f72e4f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.228.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c07a6ad-743b-40b3-a7cb-a426ad4e46e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f74e8c-bbc3-46a7-b2d5-43609913e403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae90ce7e-a883-4b37-89c8-c6f83c5467fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f353600b-673e-47f6-8229-5f72740a0916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.35.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f1d932-199f-4518-b9c5-163bf8a71d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ee39ab-13ae-448a-af55-13914766f8bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.38.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8009347-b041-4027-94d8-0a6bd3e4cbbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1746010c-a562-4fe9-b68d-0ce36290cd2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d92e309-9b4e-4dc4-8c8d-ab4e62566f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e870232-799a-4560-a2d5-3eebcd507683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9d42fc-b692-46b6-b5aa-ab748fbbb25d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf00965-4d96-431f-9597-8126907e6be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bf3a44-2708-411e-a00a-c761a9079c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6001e1fd-1d42-431e-8787-1cb8e6d95535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e523e950-f58b-4174-8be9-138bd1efd15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052e1ead-7a4d-457e-8af3-02aaeb285db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904c168d-9aac-4238-a296-80c924d02517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27afb64c-716d-47be-a071-1fc95205eeee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d432717c-ce73-446b-9f3a-c9581be8cf94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e6543d-4451-4f8d-8ac2-f8287796188c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69a1564-51ef-4c12-a1b6-04eed4c9b738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d532afa-745a-400c-ade1-da0fe34f91e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61bc00c-c7cf-4aea-b4f1-290ab8ed121c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25668331-e8c3-4f30-82d1-6cb54605b57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15c0770-7088-42c7-a55c-94b2db7abad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d81c6eb-94ba-4f9b-9816-480f2ada870d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b22eb4-c2d4-4b5b-92e7-d86fe756424f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c1ee48-7019-40b7-8170-66194d664681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33314f39-c849-406a-b3cb-eea48f54dae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f20fe51-e1b2-49fa-bb22-77e138a4417d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cddf9c-070e-41bc-b3bf-8eb0b94d4bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bc808f-6488-43a3-a3f2-1ded0529734f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6ef1b3-4334-4e2e-a171-963735a5fcd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f821e2ad-39f0-41c2-9f8b-c6c9d7ced074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a09cea-0f2c-4f90-ba1f-783d78489a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672ab2dd-27f6-4978-abbc-f4b4b4f6a3bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c7e872-ae10-4e1f-ae88-4e83d4c4a861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fec396-ac7e-4566-9700-3fbdd8ab0bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c09814-24aa-4690-8df5-76fb9015b851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.68.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966d5334-1525-4f05-a6d8-d21a160be867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6173e0c5-7cc2-4b98-b4b8-a2f3c3dc2b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f72af27-bb59-4739-b93f-490703914b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.73.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f98d02-19c2-481f-88d0-00154662bbcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae60eb64-db95-4bae-bdb7-8e8bd41fae8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73685fe-2b58-46ce-aea6-bbb9b0e4a79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527c115f-825c-4d12-9cf6-e3881dc0fb9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0841972-7f55-4f15-b686-5898109a9337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.228.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6137b31b-f3b9-4ce7-a116-3dafe63147a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.228.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac570957-9bb0-4cfb-bf5d-78b3d5e47680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e885f4ff-4e20-41a1-8d4c-9f7668e7d2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0546d0f0-ea2b-4506-b554-4ae534cf622e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228df503-00d6-4ab8-b1b1-57b2785d42d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe464260-47a7-4f7d-ade9-8678cd4c83b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb2f2fe-caec-4793-ac05-1d60981dd528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006e200c-5ef3-4778-a56c-96cbd4268e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04bf457b-d0b4-4f31-b341-e632c70a5d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.238.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8b41f9-4293-4a45-84dd-0bbb3fd6d6e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f5ac98-95ad-46ec-904a-8b37a56d5b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96772d09-1e77-4e13-beaf-0145123f7531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cd2acf-a855-40cb-a807-fef0cd71326c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476da04e-88c7-4436-9b06-9029b7eaf9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf8db54-c141-4504-8d95-db58669f56ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ced61f-a24d-44ac-b0d1-6e8b88ad6320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ecd25e-eefa-4ec7-a14f-5ccae19b3094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58046917-8b87-4db7-8566-1518eb9945fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6989014-3df1-4dd7-9a8b-7045c4d52950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b5bc3e-f61e-4430-8470-fb72c33e2b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa4baf0-a0f5-46c1-879e-a56940fff5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29484438-9020-4afd-b51e-45f9792b650c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd79bbe-5090-4ce4-8049-670672d8ab9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.38.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57f1e3f-1e3a-4938-a3e4-0b6f613bc2f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.64.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c85ac1d-58db-40f4-b4a8-a8c6700330b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.120.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65f5eab-9fd8-490c-b358-24070f107a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.121.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72056fc1-b16a-44a9-b54a-b2178b158981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.122.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946d6285-06ed-42c8-bc75-f049811a03ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.122.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f068394-423a-44a1-946a-0aff22181d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.123.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91207cb5-c2ee-4882-8ceb-95335fc41f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.123.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c38cfb7-59c0-4418-a4f1-77117d04d68b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43f162f-1daa-4931-9a4a-403fd0fcb2f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee02a11-235a-4715-af6f-2d111effac46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa181bf-f4ae-4b51-9fe2-6b7a9e6e1d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bb32cd-2a59-4fb7-98bc-a5ac87b8483b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcccb30b-520f-476e-9213-cf67eb21664b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd627a11-9cdc-4522-b88b-2ffd0651e1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2071f139-2164-4675-85fc-a953f6b22f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aed3d62-7d4e-499b-b3ab-e020a4e070ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92833d21-9e1e-4344-bc5f-9d37850229eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441b75ec-01b2-4e43-8708-30ad7baeb7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1146857-8352-4def-854e-874d4e1c8ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.31.7.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2994551c-abb7-4f2e-9acd-6c9d637169de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.41.137.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68e910a-27d1-4017-b5f7-b738197c5ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.70.116.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3957eea-d432-43a4-8725-b33aaa2a7426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.70.182.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d80933-b840-4769-b5aa-f4d586e652e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.81.198.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db12992e-4aab-40e2-88fa-6dd789e00429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.81.201.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f33985-4ae2-4bb0-94aa-e0024d715558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.81.206.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb92225-df5b-4fd7-aec1-a9c242b446dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.160.215.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc128adf-102f-4aad-a47c-6de547f8e910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.160.215.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18520ef-dd00-414d-b779-509293af975e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.206.113.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fae331f-7058-4113-93b8-4b3021e513b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.209.12.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e3ab69-4944-45d4-81c9-133f520468c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.100.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6b1ba0-eda3-46db-9b67-b7293d536665", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.140.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baef56e8-fab0-442e-8270-86acf4b92fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.5.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fce26c3-ee06-4392-ada8-980943714aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.243.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cc180f-cfca-44c7-8210-42f1fbe23d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.42.73.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d0b39b-4a4c-4d32-baba-1cb50a8f7b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.45.155.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb524a72-e7e0-4a44-84f8-19b75b8ca8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.45.248.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582d2f3f-bc49-4e00-bc92-f581ce9883e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.48.135.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750075ab-8692-47cc-9af7-ae15546d7505", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.91.138.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b23ff22-1704-410b-a4b1-2c0386a8d50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.99.166.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e9f2a4-0822-404c-8311-e5e31a4acf43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.220.172.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3664af8b-f28c-49d8-b841-e9a2af15bbd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.229.124.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c172d7f-843c-47b5-afa6-6df16bd56218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.229.159.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d197d09-3ac4-46b4-8b83-a18fbbba556b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.235.173.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d939d677-e40c-41f2-ab30-20ade0d846ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.240.155.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a658f513-2954-4456-be2b-aa5150230965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.26.46.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad941dde-a6aa-45ae-a35a-241f388b6c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.139.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec3bef8-338e-4793-814e-f85d092ef097", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.194.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4c0a86-2c9c-468b-a615-aead43992087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.219.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069dfb74-7535-4716-b309-601540f6daf6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.32.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aadcab9-1e0a-4685-85f5-14dab90a5297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.32.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a692d16d-e2a9-4494-9c57-ea110fcb1064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.84.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcbc245-4410-4087-8e5c-8af5f0152f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.55.190.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee78bcbc-92f8-42ec-9624-9e0838622f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.76.158.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1950c1cf-b786-4845-948c-63b946844ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.79.99.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81fcebe3-1cda-4d2f-8278-21ca3190bc45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.89.66.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd1cac0-cea1-4882-adcf-77d8d0a6c2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.92.105.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79ab9be-1278-492f-8b4e-a9aee910b858", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12000;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5170f21-e5e9-4383-910d-257340da0106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.148.184.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923b1b96-c5d8-458d-a082-11219ddca130", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.163.76.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9faeb8ef-9ba3-4e8e-823a-0ea44cc58bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.165.106.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7f0719-1f85-4fdd-af9f-8521cee57375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.204.147.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cdb459f-09fb-4b93-9b63-b3f952488d15", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.239.2.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f61bfc-9605-42de-aeab-a4540dd76ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.41.230.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479694d2-da66-4429-ab29-46f8efd59eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.239.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a650422b-08e3-44c7-a73c-f42c4b919052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.57.210.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb57002f-2c8d-4f79-8c64-606fb29cd873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.63.195.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781d0c6d-07f4-477c-bb0c-d3918ae6723d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.78.125.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f36ca4c-d97b-47c3-a8a8-061fc2efb2fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.114.241.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0590d3-573a-4b10-b6da-281786e9994b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.172.245.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf2458e-75a3-460b-9eb4-d4876bb14f40", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.176.20.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97d9678-5221-43e4-b646-4665239b4f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.185.26.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad4827b-860a-4f54-a8fa-be8c0a4b7abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.191.115.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3852f5-1e76-4e1a-823f-0593292af803", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.194.9.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935c4fec-caf5-411d-9129-d28557820212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.227.108.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b93eb01-0dcd-4692-91a8-f9685a122343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.227.174.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1814c5-cdcc-4912-a33e-d791987db44a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.240.161.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79f5002-2cd2-4418-bbbf-6880221739fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.242.4.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa8bef3-e0fb-4e6e-a495-f7644fe8fb25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.246.28.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94d6d77-5485-4108-8b7e-15a340634434", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.3.106.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955fb76f-42a2-499f-b8f8-c94dfdf8cced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.5.126.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8f6f0a-7bb0-40f4-810c-cd8d03d11ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.51.207.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc05600-eddd-4547-bc8c-b087bfbeeb5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08cf13d1-f5c6-43c1-a0e2-a07c28ae891a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f14345-746b-40ac-9ad2-2d9f4f384354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37269baf-7cb6-41d7-bbcb-4589872b7728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.31.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88517455-3353-4f69-8050-f09ef3aeccc4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.48.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddbec57-50c0-4d66-b07b-ec45c507c5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.50.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c444e7d6-8e45-4856-895d-97407603b9cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.138.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be3cae7-4e69-4f3d-831e-c32caa81628d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.209.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165f1d6a-0ad7-49c7-b696-39a114940674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.10.58.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a13675-8e05-4077-934f-676075340088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.145.17.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb2c522-e5b7-4a07-9ee9-ce68819e8442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.145.8.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5443e883-91db-4e26-bd44-88a64495eab9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.147.84.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e22c62-966f-42e0-9475-67a46795b855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.233.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569c73bb-ca59-4bb1-afd9-ee194c7abdea", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.165.81.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3fedf3-fb6d-4efe-bab0-a78508ba45e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.166.135.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0953b6b3-3e21-4d77-91e3-553246af77f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.172.56.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f33782-5284-4808-9709-6e6fdf1dc445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.189.141.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5914a764-ce09-42c1-802a-e199c026f147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.22.88.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0966322d-1c6e-4ec9-80d5-7b2062bcff56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.241.8.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4bd382-77b3-4919-b761-4db913bf8637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254fd1ee-e982-4a1b-b96d-9af82addb883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aaf8251-f724-4b46-9ea4-1a23ee5e8e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.253.61.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0340aeea-74ea-4ffa-bdf2-e8fa6cac69e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94893b9-ef83-43af-998f-47fc4d96e1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.49.38.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c3e435-e304-4eaa-a712-5d6f7e22aa41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.54.216.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9e1a89-0fd7-4677-aa7e-d4701bc76f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.57.130.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7a3184-7ff9-4b6a-8bfa-80b1d0cf7450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.57.181.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7a7435-dc1e-4539-8017-9ed0c77caa5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.196.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee80129-f5b2-4cbd-9454-8f1f04333ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7ed844-021b-4b61-aaf4-cbaf3e01762f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaaa7daa-688c-45d2-9168-def6356b2c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ce348b-5757-4d81-be2a-f743e6dd191b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3883023c-9efe-464e-a476-a0351ced7efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759832ff-d9de-4c09-a5f0-62904f831d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac34ba2e-bff3-4a14-942b-366acc68dd16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c77e721-08c8-4ced-96bc-bacd3f9294cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807b4996-1beb-402a-83f3-635d0b8bc606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.209.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b8db82-ead0-477f-8ba0-28497fdba89b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c544c69-3803-4e45-adb8-289299fc330c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a818e9-0b6b-4c5a-9cd2-7802899b3b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.106.67.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56391c1b-1d87-4bc1-b7ed-e5b0e6a11f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.122.134.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b46f24-ebe0-4279-8371-aacfc2848c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.122.138.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b57958-6f38-4e98-a669-447af0c005bd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.122.63.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b98e943-e4d7-4df8-8fa7-7dc6dd42607e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.226.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bf4da0-50ac-4db0-b969-a51fed89fc7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413ed1de-782b-463e-b44d-9fa62f5d1769", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.220.233.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380ae454-5872-4a89-8bc1-6049a9ba9718", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.221.138.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881ce6da-b48b-460a-a4ca-16ee34cde27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.112.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebadbad-d67b-440b-b3a6-2d57c0c04889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.165.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdebb845-045e-417b-9596-17b6e1c4a2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.227.31.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51820e1-d71a-4ab1-9d08-406222ce5c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.253.95.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c168dea6-3ef0-45be-bf36-39cb07e4b7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.29.226.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b330ba16-860f-4e17-aa09-8d0c4cbd3ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.29.226.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354ccfdf-1c40-4a56-86e4-5fbbc5a56abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.31.105.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f9ad07-4030-41d1-94e4-118cb0000392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.31.106.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49dfa4ef-ac2f-4a82-b229-428925bb444f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.71.56.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae1d34b-9c29-4f42-b438-45f626728e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.72.224.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661d9e30-ee7b-458a-9b9a-fcc244db33d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d0581e-c450-4bca-8eca-86f4958b8cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0917f26e-599b-4cd0-8879-a724d9d87b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fede5bc1-616a-42a2-b504-df0bd6ebc1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.90.53.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d575667-0a52-46be-bb77-ce309245b07a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.109.50.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50b2377-8d81-48d1-a5dd-9263e7d31a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.142.37.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d43869-e0b2-4f0d-8337-20c4046ca2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.80.213.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a20c56-73cf-409e-b221-ca87ec8ed5dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.93.252.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1da659-3bfb-4143-b21c-4d7fb81da040", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.94.244.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29995291-1f57-4eeb-bfba-877b74f08ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804d6cfe-37cf-41b8-8d14-e87f3180068c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd33c67-19e9-4c5d-ba19-663ccda51386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9580c25-52ac-4e0f-aa10-46c14d6d8d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.46.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdb47ba-c39c-4b67-96c6-a2deabf8f464", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.106.221.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4477274-b530-44cc-b712-2e8e8f6bf7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.225.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a962da90-6fe8-481d-892f-cdaaa3cfe66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1274a3d0-f58d-4257-bc46-e5713d4833cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0618517-f922-4e4f-aefd-dd7bb62b7226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2097d87-e664-4107-8215-eb77b6805ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e44b11f-818b-472c-9d9c-662fbc601be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b485d125-10dc-4ce9-b318-8023ab411c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1f2124-6099-412e-9bc7-5b0f17ef5e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5439b48c-5352-4aad-ae16-140073a1fc3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370afb96-e8b7-493c-9459-d15879850724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f450ed-8f1b-45b8-9663-8d12e1e3fa6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367955bf-3ff7-4ab9-85cd-279593cb4e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a732d89b-7fec-406b-bbef-f441cd50e730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0189e280-53a3-4d92-9870-6a006f079295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b44a35-c0f6-4066-8ab8-432b270a49a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.225.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549a017e-014d-4191-a945-194c9e402bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.255.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6f4eef-2f31-43bc-861e-11013ce8041f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.201.118.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3fa64f-a845-4379-a2c5-14ca550f9e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f44f17-fc4f-49ca-a324-33b4c4485cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9304f34-0a1f-4f4f-aef2-01a543d4c266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e67db06-b7a7-4396-9afc-24e5718307ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.202.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38413ebe-d5ef-4194-8eb6-996761f29a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.203.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc561aae-c874-4f7c-88d0-4b5eefa939fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.203.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c96392-6e6d-4bf1-8784-b8ac4ea6cf50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a09b40-4856-4d38-afde-d3bae4323081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8cec46-37a7-4ef0-b323-84f3f3561120", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.251.36.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fb0165-a36b-4e12-9de8-ccdff79f8ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.8.124.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e77234-4775-417e-949b-4f5e0dd72317", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.146.163.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63953d35-dcd3-4524-a606-550e98573e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.146.176.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff556ade-34f7-4069-ae0e-cb6661e28604", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.146.180.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885cbf68-4885-45c3-adba-0faa8f005646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.146.67.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4911e31-016b-44e7-9a33-bf950ae31269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.150.45.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4aba3a-3995-44ed-993f-5e4e879cc4f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.150.55.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea26a87-aac9-40eb-a485-aaff804d4116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.152.31.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef22fc6-8ae7-4bf4-8cd5-7e4ba26a821e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.153.100.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b954ea01-fad2-4bbe-bd6e-8cc603fde331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.153.121.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160b2430-a107-4cfa-9429-92850fa21214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.153.211.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3937515-ad52-46db-9823-bbaeb1241dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.153.222.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3c64df-b548-4fc3-9761-fa98934e9396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.154.206.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f04779-8ea2-4cc3-8079-d98f7c532bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.154.225.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504b7fb8-4a9b-4b7a-933c-39b06d603147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.159.139.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912b32c5-6c39-4f5a-91a9-0f21e55373f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.159.242.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e572e8-4530-42b8-a9cb-dc12ebbfb17c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.213.106.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ca4dc7-4866-46e4-859d-756ae8849c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.222.172.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a192bf-eb6c-41a7-a03a-d2fd3c35bef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.232.165.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1903a65-e33d-40f9-b4af-040a203b4569", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.28.84.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bc5086-ac45-47ca-b325-8bfdd2b7118c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.193.46.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4eb7c1-e129-4f45-b5a7-c860d916923d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.212.104.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f184c151-fcab-4a1b-a215-741af4af933d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.212.204.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa0bbcc-e1a7-480b-ab73-66ab4eb62266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.217.95.0']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a200066f-64f0-47bb-a788-996271f29151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.59.6.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd4efc7-3192-4b6d-a9e5-0157ce212b50", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.71.109.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8d41ba-6f2f-4ea1-90d9-f3652058b4cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cf4c21-df33-4a88-b8e3-6ca32eef5c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f008513d-bbd3-4d61-9616-62fd96a9d2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.105.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba775fbd-1b9d-460e-8213-67824c0e69ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.105.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d06a81-df76-42e6-8630-655f92acd684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.106.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420a22ae-7950-4d3d-a69a-e1f1fc487024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ef6f6c-2cbe-45be-b145-2c6276f91b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e40e081-75f2-4be7-ab64-abdf529727e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75df38ee-011e-4cf7-9615-cd853d3c3dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1bd95b7-a496-4bd0-8e7c-1c0b2fa40865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.117.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cce575-7a74-475d-978d-4b99562c2be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.121.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bf4282-0e74-4d3d-8360-2ac771f41ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c980a8b-bde2-4174-b8a7-7c6c531fca60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7954a17-9693-404f-b20d-c55f68a0029a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8b84f6-99d9-4aa6-b9a6-3b6f36289909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb32d26-f69e-41ef-9904-c55b9b4111f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38819310-6b3c-40cc-a085-775808f8f46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07304754-d9be-485c-9932-fadbbc42b1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be6e1e1-cfe2-411d-a729-eb63e4d2ea52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671c8fe8-4032-4cb4-8a62-0782b7be2d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef15276-9236-4597-b2a2-d9847d2385a5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.90.206.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3123f282-cf2b-4f3a-80b1-e47485cbc384", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.171.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3315a6c5-2bec-4db1-ae69-2d2a9014b53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea8017f-39ad-48fc-b7e4-e34046524f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60feec86-ea6f-49fb-b583-53a40f61f784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a5c3a0-847a-405e-9001-1f7f4aab7ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac36f789-74fc-4837-8964-27623e9dfdd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4c6d7f-8f7d-4995-a961-396294628971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.163.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143697d6-e3a1-469b-a5cc-3f765babbc29", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.162.254.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d4ae16-c0c0-46db-a2fe-5981319af229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.209.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434ef12e-79c3-46bd-8443-38a3bb1c2087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.52.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9a2d37-5ded-4cf7-a3c0-89a934384ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.94.105.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d29fcb-9831-4857-be85-d6a2ebef1c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.143.214.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ead788e-bb85-4bb0-9fc4-164c68d891c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.143.243.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871a6196-551c-4b0d-b620-75be8094e34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.255.203.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be882dea-69c4-4251-882f-680c3efd3975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.72.173.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1263a933-c514-4a48-88de-8d47fafcc0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.145.27.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f61b16e-20bf-416a-be0f-e6a658a2f290", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.145.81.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0472d52-9e4f-4baa-83f5-b0338e0f22aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.196.42.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2767a2b4-d111-4077-a3b6-13a103908e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.196.99.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a07569-cdb0-486a-a443-b7892a3fb05f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.226.212.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc383712-2bfa-4c33-9a40-e9438663683b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.108.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a8043c-e7a2-4b4e-8edd-687b08630a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.113.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e7cf9f-ea00-4daa-85b9-ea32e4fe9036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.118.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3241afd8-aae3-4a74-8259-6efeaa3c11ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.130.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab5ff32-2de7-4029-92b1-5cb24a6ef155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.19.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698a021e-48d2-4464-8546-f7e777b70485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.78.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699a625d-00c7-4808-b6b3-a2d0f59f8672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.208.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90cf2fbc-4205-4342-830d-272885e59fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.215.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb5d092-b7c1-48fb-b528-af3fc02f2b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.219.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89fc70a9-f6a1-4077-99cb-132923cb675b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.233.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd84708-be0d-4917-8661-6ddf727c2660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.237.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b94e38-c91e-4584-b084-69e1607f6f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.11.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68927d44-69e8-44c7-bb30-d58c6329cc31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.168.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96a6b7b-9627-4850-ac62-4707fad2e1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.169.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037065da-e851-4c48-9c64-3b1ab98a5ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.20.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32151a85-fdf0-4002-8a82-0b79b218cd09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.233.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bd0943-2629-4519-a18e-dfc297680671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.27.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50051b1-a41e-41bf-bc06-8788fad6d519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.70.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e99ea90-8340-48a9-a6c4-61de1f53e48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.73.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7858e022-30d3-48b6-a58a-ed7190fb3d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26199e67-16bd-46eb-9e01-195eb4ad7e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d91d5a-0524-4929-9c6a-4bd37e1ecbc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d174eef6-93b0-4905-8ba3-9811cdd80726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905fb3a7-9919-45df-810e-435f380e36bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ce6e20-5264-46fc-8aac-9e7a45bb7789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.237.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0a5886-42cf-412d-b02f-606445a5f46a", "name": "Malicious Host", "description": "Observed: OPENCLAW, WEB activity. Sensors: cfglobal, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.27.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:openclawglobal", "protocol:openclaw", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7811e7-b7c6-44ad-8904-4004fdef8392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.88.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfd0613-cccf-4862-b359-038f1d6b2222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651aaad7-dbed-426d-af2d-700394294ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6597ce5b-7d4d-4d17-b62f-34c5314e725c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573eef06-a4b5-4bdd-8335-bb1a46ae944f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca0d611-e3f0-4576-ab36-7dcfba8d1c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.97.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c02a02-b6a7-4b86-97e0-1f6b608bc6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.97.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecdf1d84-5bb6-457e-8688-7186f951cc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.13.10.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c99ee4-3a69-492e-9fd7-9cf01ca6cb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.13.10.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d18b8a-aad8-4f80-944c-151f48751a82", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.13.13.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0d0a1a-3ea5-4035-91dc-5bab07339e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.13.36.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fe32d7-21b1-494a-9051-f0ee9243b658", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.136.19.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2c74b7-536e-45d0-9862-537d5d2d7b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.182.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127c7df5-0b82-45e9-9af2-ff4694d78e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328b8873-65ba-4519-8b0d-e3f6d2a10b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4418914-765d-4828-ac77-f2f57a976952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.232.224.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af78dbd0-29f9-4bd8-824f-f7a75a92ddf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc9205d-629f-4e1a-9318-d32f734a8350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.97.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5505b910-2cf9-43c3-9971-a1aa7ac9c9c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.235.197.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57ec120-9214-4b13-9fb0-a8c301d32514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e77902-5969-400d-ba26-4a360da96fba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7878be7f-9eed-4a7d-af8d-f5bdbd145c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04ee859-abaf-463b-a6f4-831f093b383f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f232bf-3494-442e-bd49-0dd6928b1baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c0018d-22c9-473d-9b8a-edf9871c5894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d9708c-737a-4e77-8d8a-60487569947a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b56c29-9a21-46ba-89d2-cf7042328abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d215e7d-733c-4227-be3c-184a315b6f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b94838-dbd4-4036-bd51-2850d8bc9978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed54974-d713-41e5-883e-09c2254a6451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a16dd9e-251f-4bc6-b3fb-c860894a20f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69db8007-e71b-4681-ab16-e81a6a55f315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee3377c-8c5c-49c0-8b67-3ff059d59aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4792d62-5eef-4986-8220-7168052e3dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830775cc-095d-415a-b85b-e625c6252c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ead8b1d-4148-42cb-8fcf-7ddd2b1b3d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a704dfd-5a6b-496e-bac1-ceabec24731e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d8c909-a943-48a9-930f-d78db18fbcce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2a2757-1dae-432a-a92d-fa53608661a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dbaf191-7168-42e1-a18e-77487841eb01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc66e03-3eb0-4d34-9891-d2eeb5771775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041de66d-b67a-4cfa-bfae-8c53c1e6ab36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d694ed-4086-4e7d-ace0-f51895a94eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160bd8e5-3af9-40c6-822d-484a6993e336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee20deb-390b-49cd-b138-92154739bdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c02757-7347-4cbd-980a-1ab3ade8f356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8782eff0-064a-4d28-aac0-c221e283de06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e62c59-216b-4526-b8e7-229287a5df1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88b880a-b772-4f85-a3cd-686ae8848881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1d5885-942d-4a9b-932c-06fceb200310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851b6887-9aaa-4dca-abaa-13d46cc68234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe11899-db9f-4b1c-a4fd-d5f49085071c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abc697b-1515-4f31-9124-dd6a0dbdd11e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee6b16d-b02e-4ba1-b353-710c91d57711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36dc2c3a-4bdc-4186-8587-cbbbcdaf93e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80592685-f6bc-425a-aa46-0f5f4ef4bcc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5d6e7e-931b-4a4e-973e-2b5c64d9483d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86ad4bb-39b2-4185-b551-4b621372b1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c720149-dbac-48f6-a08c-fe28d6d73bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d2d388-2821-4be8-9083-fb6f40a976b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee38fb6a-929f-4a9f-8ae3-e81a7b9dc594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aeb044e-c63d-43b3-8947-6df5b26bcd59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc221e7-a87f-49b5-9548-70270c753fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d4ef1d-013a-4b1c-8348-ca4b78094413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead4e1d9-8037-421f-b9c2-0d5af5f9b241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967ea697-87ce-4b16-88d5-6afbe3cd310c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb082f2-d296-4d15-b18e-d48511cb7dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff1a877-eaed-468e-86e4-f194747f507b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa4061e-bf8c-4f58-b869-64cd4814d590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9c8377-33f6-4401-b4c6-9b089d3a751b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4b105a-869b-4689-868a-f4947c9b80fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc53ec65-ec9d-4fd6-9e8f-f9f822266e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.81.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64744f0-7cc8-4c95-ad50-2f9cca87027a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.0.110.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517abd19-317c-4ac5-9ba1-5b8bbe729681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.109.153.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609b48b2-1967-4f42-b37d-2fa069b59ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.119.243.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deacc9d3-1895-481a-b8bb-635e5c81ae4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.143.176.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae096483-679d-4f89-8ecd-11175312b1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.143.177.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889e3ebe-256d-4550-8a10-7bf0eedfb6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.35.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4b7ade-3326-441c-86bb-1d433e80b822", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.228.161.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e6c60c-5fe6-45dd-90c3-34c7d5ca84dd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.232.11.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539a4de4-6aaa-45d6-9ebb-bff56e68c7df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.248.124.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cbb80f7-4853-4f9c-a371-2ba7569d4618", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.131.15.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd84b3c9-19ac-44b7-b9e3-70495f7a8058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.175.101.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4758fa18-51e2-494b-831a-8c7799d7852a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.175.67.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289d2014-de21-4cff-8e64-c9247af4d370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.175.81.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797b8546-715c-491f-8cca-a41737be4de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.1.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df5e268-0357-4298-aed0-9b7679be2656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.132.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b1701f-06b0-4e4c-b2fc-af0d0d7ed7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.144.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ec60e8-af53-422c-9b24-06ecca68cfe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.163.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce3963c-ff2c-45ec-a6d5-1aaf57f273e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.169.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5283453-fa29-4b22-a39c-98dfdbbe7324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.25.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8872f015-aec3-4fe8-affe-7c2f9d898a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.27.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8939f714-6d33-4f11-a11a-2f3bd8f8854b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f22e75e-6a1f-44e3-ad9e-b19c39ed2b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.5.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea3b8fe-1949-421f-8fcc-bd77dd9cc382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.70.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2dafc55-78ec-4591-9593-4512208fe2e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.85.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ebb902-852d-4b67-aaf3-f2717205eb4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.85.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646dbc4d-32c3-4b28-b5c2-96e737d115ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.220.55.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da271b25-09d1-4141-a4e3-13817661aa14", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.117.176.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c93bed9-bda1-4247-9749-b674bf1be1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.242.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4bb54d32-9b4d-4f3f-b83f-5f3c4c9f967b", "relationship_type": "indicates", "source_ref": "indicator--8c93bed9-bda1-4247-9749-b674bf1be1fb", "target_ref": "vulnerability--8b5b2b1f-fb27-486b-9fac-e36c38c998bf", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08030eac-775a-49a3-ad31-0f94e1a8ba4d", "relationship_type": "indicates", "source_ref": "indicator--8c93bed9-bda1-4247-9749-b674bf1be1fb", "target_ref": "vulnerability--5f14d94e-a9d4-41a5-a46a-9cbbcd04ac20", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5be32ba5-18d4-4f72-b11a-d5d607fd9ff2", "relationship_type": "indicates", "source_ref": "indicator--8c93bed9-bda1-4247-9749-b674bf1be1fb", "target_ref": "vulnerability--dbe0c875-a6ca-4a1e-9389-d09f6fdd66c9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c8ceef-5c3c-4a4c-b8d6-1ba7d82cdc7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.141.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b34596-2e92-49a0-97d8-c3698818a9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.146.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c738f76-aed0-4100-95ea-1e294f5ec051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.15.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa890eea-7742-46b9-a5ec-1bd6311fc546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4aeab50-7e69-477a-bf0e-87b8bba4931f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.191.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75cc2dbf-b369-4a73-bc89-a0a3d63ab877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.216.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9465fbc8-cd73-4f36-9190-3b4a50639065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.29.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a40b002-d550-4996-9d2d-2bfefd0176cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.47.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e35c1f-6894-4d1a-b087-1dc5a0510aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.105.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071840d2-1914-4816-9437-810c2db8c09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.113.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f68e0c-8ed7-4549-88da-ff5ea15e61c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.117.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ec8ee6-b707-4bc2-ad86-8d6bd564340a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.127.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64bcdd5c-e34d-4802-9ec2-6d198a1df05c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.232.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a3016d-0866-4221-acb6-cae629a5a2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.232.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0654dd4-75ad-4cfd-a056-06cba1368330", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.239.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e316173b-f1cd-4c1d-bd80-24d06f40945d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.69.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c81e2d-a4cb-42e9-abb9-e0e68c06adab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.78.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc89fb6-b5c4-4388-aeb2-795907e1dfaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.90.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777441af-5eab-4d16-a6d6-9478c1b10f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.94.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb0b66e-4e40-4b55-b78a-483bfaafa44a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.99.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36acbbb2-2f4e-427c-9aa5-7ac2761d59dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7b4d72-4b26-4432-8ef1-cdaf0cd48df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4448eff0-9f41-4b61-bdfc-ec00b1455c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d02adba-e5f9-459a-999f-15078a72e1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.246.253.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf49a90-2e46-41de-8288-2ff2acbfb43f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.252.249.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555b9190-bf23-45e2-966f-5f9a9f476fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.3.218.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fadaac3-909f-475e-8cbb-870d72f3b95a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.59.131.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e1a537-3350-4f99-a80e-316db97fe304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.153.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6394332-e385-4915-9f80-d7716dac2d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.161.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7163c9-35e2-4c24-b8d1-15c656c60aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.237.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82484cd5-6db7-4772-85dd-f7b1fa5681c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.4.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62953e5f-56e1-4a17-9a8d-11df0d7ad3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.45.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02939cd-cfd2-47ae-8c10-888ab6fc21cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106d23bb-0a7a-4177-bf00-893ee7a00d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.87.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2532fd96-445c-498d-ba85-58fcf0ede5d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.42.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fdbec8f-1a86-4448-8f42-81a0dea62d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.44.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c4e838-8e5b-4099-8a1e-02a89cf4d99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.59.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe45b6c-fd2b-4de2-ad2d-bdff2ce555cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58acf598-a9e2-4559-bfc0-cdab96ad12f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9520b76-b8fa-4090-98f9-dbce6b9f7a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d637ef6-e9a0-4beb-ada6-1533e304bff3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.155.127.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10ffbe8-2eb4-4e73-af30-745c10869d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e491d88-19f9-4826-8885-7e4607e7a167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.116.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9527878-86fa-4c6a-a21a-4de81b5c897f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93af0b4a-e79e-4860-84f8-4277011935bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bed0d4-8d84-4c15-ac9b-292c5695b663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.78.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e9a795-5965-406e-8c70-f4ef278ed9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.72.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85eb9892-88b1-4550-ab23-b4b6bf48f362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.72.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae52aa8-edc6-4007-ba71-ba30957085d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.72.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5620c8c8-ed9a-4c4f-9de1-ac22bb767bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.73.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da5eafb-df5b-4399-9a0c-8fc55f559156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.177.194.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca642fbb-dede-4d98-8f1b-aa6e8e5054e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.180.213.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97d8288-84a1-4c66-9491-aab85c627ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56fff7dc-9750-428e-b8f2-0e07eb5c02a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.196.103.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5195c16e-1432-4695-b771-5fc18007102f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.224.132.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebc3271-1eda-48ea-9169-6df4a6dc4d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.55.248.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2152db63-692c-4ee8-99ac-9d936db56dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.104.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a38597b-59e8-4a97-b384-589e1b862ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.11.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87dbbcec-14df-4647-a12c-4af1cd37e4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.13.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169d101c-636a-48db-99cb-c572326c1d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.130.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f877694-459e-44fc-b454-d2e8c77119ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.130.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6390dd6-2c4f-4a56-b275-76cbc8894e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.131.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b15437-dd35-471b-9187-a1acdd52e35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.156.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b069f9cb-3d2b-41a4-b659-ab7d214cf857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.17.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e56e464-1384-4d39-8039-33cb9fa9d5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ace8ff-e600-4bdc-ac0a-83a029f4c8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.22.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747bdf26-22ec-4e5d-924a-2760830a3b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.37.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92e756a-be13-4b29-b3df-983d14aa3850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.41.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05924385-4168-4c16-8e52-20916bada32d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.42.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdef6094-afcd-452c-9c31-d382681cbdd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.58.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dcb3e63-cfaf-4d2f-b6cc-981615710315", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.59.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103c9e1d-ebcf-44d9-9b43-e5ccfd18b80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.70.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df024336-7edb-4a93-a17a-0da2961f0c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.92.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999e7b1f-a889-4292-b773-0e147f92c699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.18.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087bc119-ed49-4eb9-b902-cdb210723f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.216.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9b34f6-a973-4790-aa99-123092d3979e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.107.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dca07b3-b0f5-41d4-b9b9-4e3d89822769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.107.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be90e88e-9cc9-460a-aefa-a120640e6c92", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.112.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14311db-042d-415b-8cd9-111358894c6d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.112.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c08e06-1587-4eaa-a798-7c2a6392bc6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.114.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64dc330-2f27-4964-bba0-60c928009294", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.114.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d85a656-c32d-4b07-909f-3980120cc6e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.116.0']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c231fd32-cf2e-459d-ba64-f4c56f5afed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad39d143-dd7a-4e09-9154-cd55d2e3980f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.120.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed22ac73-92a2-44a0-8afa-57e123f8a432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.123.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31dde4ef-4f7d-4781-aa33-b5347943dfea", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.137.238.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52222ee4-2918-4d7e-90a2-301f434a049d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.143.8.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e212f520-5746-466f-93b8-75ff8e1a229b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.143.8.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5fc6e3-66f9-4d12-b7a0-7dbef37adad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.143.8.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b7f301-f029-4804-a986-5882c70062c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.160.107.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429a0d94-65fe-438c-a6a8-f621abe4d9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.163.144.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96dde6ad-f702-4fd0-9432-a5cbffebc130", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.169.23.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3295b6c4-2801-459a-9ab7-12efcf226494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.170.154.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ac1f8f-f9e5-46e7-85b5-bef4e00f4b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.173.38.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c07a09b-b25c-4459-b874-559270669af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.186.41.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689ce541-999c-42e8-ad6d-753aa0edaa40", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.19.197.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb895ce-c4fe-422d-80c1-132e1e54b286", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.191.164.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4ac6ac-476d-4897-a037-37c2f93abfcf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.132.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ac1b45-72cf-4c8a-9245-4656b2d679ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.170.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca8f1e7-4c6b-4b77-a864-e7ec51c7e00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.238.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6743daa8-d8b3-48a4-b74c-fc31cbbc15fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.23.124.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0699f462-0ffe-423d-89cc-56c4e4d56e23", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.231.202.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a351221-c91b-4a30-aa9f-a67da04f4588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.238.9.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5258ea-49a0-48aa-a11e-ab7857fba734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.197.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f181abd-8336-4927-a2f7-044e6d48c650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.52.46.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2e1aae-4a47-4231-be6e-e713924c35fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.99.193.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eade3dae-4605-44e3-a7a7-5fd747edf486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.112.30.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d83870e-2087-46a5-a9c9-0755345c5538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.143.159.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb574704-e6cb-4828-937a-368074cf1601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.227.120.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c4033c-cd39-4397-bcd9-3b71d6357304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.233.190.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3163b87-5ae3-42f5-b7f6-6ed48df6cc77", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.235.1.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87dca58e-fee8-4581-8485-df27e1e946ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.235.11.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d856f45-00b5-48df-afda-fb60304e6865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.235.142.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0483446d-049f-4588-9639-6131792f5a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.235.143.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1808d1b-26ce-4a84-8505-07712a08ef6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.237.44.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51cb6a9f-c1e1-4a89-8f29-676dc264789d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.138.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5114a2-c83d-4131-bebd-e3b0a25aa54d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.153.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d54dab-4604-4333-9985-3495d77dbf08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.25.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a37ce8-3224-46f6-839b-ca61011b7fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.28.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a87e5a-3342-488d-90ee-f9e2c9daf8d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.245.100.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6154a919-2874-4258-aa2e-9145c76dc6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.245.108.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5076ff-19b1-45d0-b6c2-6d2d4402dad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.245.118.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe817c39-c962-49da-b5ed-e32e47280b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.245.38.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d0c6e9-8e1e-4926-87d7-8a4e45e861bc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.245.45.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2386e8a3-e484-461f-a9ec-9e75b4c0c80f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.245.47.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e04675-9b26-4858-8d72-67ac64955e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.245.51.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28be1440-8148-44a2-acbe-28ca8e989e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.83.86.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fc7d45-aaf0-42f7-a858-47ef30ff4502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.101.98.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2acc6978-0ef6-47bd-b1c9-c9c6fdd6f6d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.105.68.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd256c26-d554-431e-8ea6-b6b045195d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.219.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28040799-062b-47f4-a5c7-397b83ae2ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.238.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c47ff4-6940-4305-bdd8-ca408652d32d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.25.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0301f961-a2d1-40a7-a302-ea962d1635e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.42.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea862db-c05e-4e95-bf6d-3ec2df3f50dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.46.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75f899d-a888-4db2-a8f5-560d88ab3f75", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.145.218.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef7c31b-7ea8-48a9-a415-be2e69160731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.147.173.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84030b34-c47c-4238-9d94-fca9803575e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.148.173.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e75ef3-0a7b-426d-9e29-d15fa471f57a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.148.201.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bed59a-d09e-4444-9845-67d893001e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07eb0871-2663-4b11-8ab1-b4685d9617ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca43ddcc-d81b-4e04-a6f1-cc345b6d9236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.9.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00ce239-786c-4f95-8f7d-39582a1103f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.9.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9312d272-9e41-45f3-ac10-d57164834cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.11.214.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1f2965-d89a-4f81-bde3-172392a60c05", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.147.97.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f940ee-0ba5-42e7-8dd6-d5bb46fac73a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.248.139.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cb0641-29d8-499d-a429-270f81eae9d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.248.151.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ca95ea-5456-4fbd-b0bc-2db8fdfe9a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.247.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70460eb0-1651-41fe-ab9e-62e84e6ae162", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.103.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b16fcc1-9067-411f-ac51-62da0e5a201a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.99.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e354c1c-979c-4bd9-9313-6a7032a74f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.101.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93efecd1-2e9e-4157-9672-798b37282e31", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.123.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d4e25a-d811-4c22-8d76-a53b43b1be11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.146.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c530ba-9ded-40a0-a085-54a817d834f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.147.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ba1800-c773-4db7-9e05-ed611510c53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.190.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5b0bc9-dd76-4b19-a89c-713b5b193532", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.2.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b82d20c-39c5-4ac4-817d-12aaa123298a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.20.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7462043b-7562-4fd5-8f46-bec33b76b4f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.200.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd887c3-5d56-466c-a890-9801c962d568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7b7982-74c1-4e26-abe6-b57aa70905d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.44.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939b7c8f-d555-4b08-a392-30a281c546a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.56.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ed404c-3039-4904-a930-e4d61f23070d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.97.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648c6a52-b8b0-4e33-b93e-09e8c9057246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.149.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7e5f41-45b2-4165-be20-a725dc04abf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.175.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef88da4-4548-4ef8-92c7-1f910bafe830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.182.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0697cd-9c05-4e99-acd5-26d0dd94293b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.214.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99b347f-9905-4848-8ac7-7e1abbcb542b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.222.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccddcb19-f72c-4f59-ade8-fde6ac0460e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45e3dea-e20c-445f-b1f7-0665410760ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.115.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1eb63a0-31c6-4800-a76f-2e2db23f69eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.116.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca72f30-1afd-4677-8354-be06f06ad612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.117.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4646ff27-745a-4fe0-a4ae-57d2203a24b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.149.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63951d8b-f395-4c8d-8127-754eaaa96ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.153.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e714d8-89fe-45ee-8f36-5ce6fe57b70f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.161.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413dec4e-4ffd-4ddc-9faf-f52d076d1bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.216.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6649cf0-b3f4-4b2e-94a4-632dd944997e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.39.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e64988-42b2-402c-8ff7-5a4c3b65087b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.40.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--078d37e9-e70f-4566-b00e-84053ee8a379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.44.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87de29d-f5b5-439c-bbc0-42ef284a2a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.20.112.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904d6aaa-881e-4de5-86eb-1e36ac659cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.20.49.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e6470a-2ec9-416e-80a7-1249162b1940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.129.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08bec26c-d801-45e9-8fbe-70ed6244f3e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.144.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5d366c-6043-4c88-b4ab-e0f8566b708e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce9a618-50f7-44e1-b8c6-7f3e9baaf99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1771e1c7-5ace-499d-b79c-07a4a908597c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30575b1a-3499-462a-b561-7904d8555ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb9d8b0-b0c3-4e14-89b6-aaa56e8fccfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5442914c-c4cc-48de-98e8-07fa6e32e0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d21d50-fa9d-4084-ac2e-e9cd3991637c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f29977-3ffe-4b51-bfc1-d42c14597eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea9406a-7b92-4000-994f-39a35f54be98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c18532-0a0d-4d11-8ccc-7294a43f938c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74da9e8b-a0dc-4f5d-8551-5160bdbeabbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad71ef3-efb4-4ed6-bb95-8a59ed55390f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bf1acc-83cb-492d-a69a-f55fd5ed64ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf760244-fdec-449f-ac9f-8d271e6e0f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d22d63-1b01-4c35-ac22-151d93acc00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9956f5-92c9-47e9-9cdc-1bc4b2986d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d06ed73-56c6-4ebd-89ba-53c5f69ab374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a652773d-e862-43fa-8cee-ae09002b2a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df86c195-e73b-465a-80fc-a1ec1f14d1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f34c249-7f88-433a-b438-63a349b9647e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa3e3ce-f696-4f29-9b4b-65a16f139ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef11e70-fce9-4799-a2dc-4b45390f4e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.227.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9923a3-e2a0-4c7e-905b-796f70c57e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.47.244.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6daef584-229b-4964-bbab-63771c25848d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2991077-2e81-4a2f-b18b-37548372781a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.77.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583c1761-ec0c-42ba-96fa-ca938f908905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.124.222.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4d71eb-ff06-4b24-ad99-4a4de839de1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.124.222.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb93217-2adc-4db9-a24a-3d3f2cab4c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.219.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702d54c1-3602-40c4-ab60-22f0935c9694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.221.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b9ce66-d3bb-4bfa-aebc-c5bf527db359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.100.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04af5ea6-479c-4ca7-99d3-f0bab624ffbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.104.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67816ddf-9bd4-4566-841b-cd52a7c9bcb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff44498f-a9b1-4a0f-91bd-85e1fcf3eda1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.135.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572f7749-b13a-40cf-9d06-560f2162669e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.161.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7dec67-ea86-458c-8169-b2519294e7a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.72.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726ed5ca-ead0-419c-8995-ba98c08578ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.74.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57b343f-7467-483c-b415-f9e84715235e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.95.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3f473b-08c4-468a-b4a7-d31725a23d99", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.24.86.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8064df03-a011-4688-8f81-51bd86ece729", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.24.90.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e48e827-21ff-4f55-b1bd-56f573d77015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.24.95.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42937583-5713-4b8f-a92f-6302351474de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.24.96.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa387df-0f90-4f0d-bb04-71e0732f9f21", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.106.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bee9246-d6d0-4ef5-a874-fdf55fcdbcc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.34.225.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62045c07-6bcf-42c4-9e82-4fef9997aad1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.34.233.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90565f4-f8e7-4da3-9cf4-7f5350cc03ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.34.234.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d418c00c-0ccd-4fe8-b828-736b129c5514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.34.236.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82ed9c0-aed9-4f3c-8ad0-76a91a507fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.139.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688e4ecb-479a-413c-a104-01003469f6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2021-31207. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31207", "external_id": "CVE-2021-31207"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--744e20cd-1856-4990-99ad-30dc4f70b22a", "relationship_type": "indicates", "source_ref": "indicator--688e4ecb-479a-413c-a104-01003469f6d5", "target_ref": "vulnerability--be10e45c-5e3e-4783-a578-e8cf127b8e61", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a01749-8775-4d4f-ae5b-523fa2dc0ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.121.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711351b6-4463-47e8-a696-18d7e98ca325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.71.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc0c762-222f-455b-99af-ee8e869284f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.132.99.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59e4a34-3408-4172-bb39-891017dc6501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.148.28.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1255220-e635-4b80-b506-e7bf00599871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.19.125.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4970c0-7009-415c-af5c-a07504b5a905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.115.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b69e3b3-419e-4f2a-8a90-77eed81ed6c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.115.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279c4e57-be5a-4c73-8a5c-63964a28b71d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.129.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6b86f5-1b38-4b0e-a953-63e1306b1fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.209.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e0952d-20dc-46ca-93b6-e424b4ea6e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.21.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874f2f7f-60cf-439f-9f15-1a77c483440e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.246.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b70a828-15e6-4897-a2f0-421bb6d490d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.248.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d974b7-4727-4d51-a9b2-dbebe86ec71d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.249.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cffa1eb4-7249-45b6-854f-fb1398824458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.255.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0826a287-ea60-4fe2-b862-bf3560432bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.255.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa3cbed-70e0-4fd0-a289-71a2cb05ce55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.41.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78329191-3470-40c9-a569-86170aec3d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.64.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acaa944-0873-4c14-8627-7ee8254c9953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.73.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56657793-2223-401e-9cb0-3b9ea3cb6118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.235.197.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c52a7f-9fa5-4a4d-b9e6-836f5fc32cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.235.212.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bef4980-a98d-46e6-8473-7685ac68d34f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.101.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8dcb7c-1a77-47eb-ac91-644c8248a561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.96.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caaad08e-5f0e-48bf-aec2-80f6c1386641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.168.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd165074-b1e1-4eb2-ab5f-0fb039d85dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.168.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352c6efa-3917-4c39-9ef1-8c462bba7f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.193.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c371c2a0-97b8-4c3f-b54c-122121d4e788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.196.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c18fe29-8240-406f-8823-98a48e912d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.211.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc73745-89aa-4d5b-953b-f0fa99b0d676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7df8c94-4822-4c18-96cb-9d8f4fb7605e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722098dd-2764-4e0d-b0b4-480dd6dfb275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf83b35-b139-4043-a0ce-7b986c649acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2e0f36-2117-4113-8fd3-c895e573bf3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.129.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bb18c4-6963-40d4-a0f5-1028e57cf95b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.129.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2fd692-982d-414a-aef5-ab15b1d86eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.149.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbc6841-29b6-44ad-82aa-76f9f0c4f0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.149.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9811db59-f348-491b-87d2-c35e76ed2159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.154.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b4d94b-021e-489e-b0d9-9a0900144540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.158.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e4b2dc-fa2f-455e-a465-ad3f2ec73240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.183.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1353a29d-1c17-47ee-a59b-b913b6e1187a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.183.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e493bb9d-47ef-446c-a96b-4fad018f1efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.184.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73954999-71ed-46a5-a391-fcf8fd03b0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.210.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefe96c7-feb3-47ec-8cac-a4f2ec9b311d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.222.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c1cf1e-9090-46dd-8a4c-551324ad39e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.231.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0858f285-a4f8-4ff0-8f02-328281b6e949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.244.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38962b5-ed18-435d-845c-e6c2a4acf424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.249.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b5c3f9-9fed-4b77-ada2-58947af90c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468c9b28-d49b-4cd4-9d68-1baf3ce7f3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8043a15f-3843-4c1f-a4e0-aa60590dbabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2939163d-7621-4211-8848-b5afc347eeac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59153e7-bdaf-4ea7-bd03-748db2bbdc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a110ced-6f94-48c9-9ab9-4d6d984080fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c34a5c8-76e5-4fdc-9090-021a766ff758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d66044-3114-49c1-90fc-24cf0a0831aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f90fc00-1807-4ef4-84d3-aeb207a0540f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f55783f-9316-40e6-b665-486cb8690199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86dece13-477f-4a52-bb64-ccf4c4efb1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e15417-c28c-44c4-9f0c-699ad3cbba5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b48233e-bd64-493e-89d7-62758930cb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a63365-b448-4411-878f-46e1869a73b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4bcb99-fdb4-46d9-8ca6-6ab8bf580b37", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92134b0a-589c-4aaa-a3e7-4e43c1a51ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60808395-55a9-41cf-b4c3-5bdb365b1772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd39de07-e391-4fad-8b47-49c1a056d1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba8618d-32c9-4149-ade7-68980310ec8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a3d088-0911-45fc-8c63-a514badbb728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d68a27-59ad-437e-93ef-e602f49c77d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da6dca0-0e78-4758-a6b7-ce527157e887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea60fda-dc8a-45b5-9892-69c3d3c76ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f29522b-3ea2-4853-b604-aca2cf838c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827cc809-da59-433c-b806-43c4e82f0138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4464fa3-941f-4ff4-bba5-fc9bd5cffdfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715f0e9b-4dbc-494b-bb14-9ef0a3d0ef6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52335f82-1858-4d29-936a-fbde85a745ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7911839c-be3f-44f6-935e-003776cb6d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8365a7-1895-4f38-bff8-acd77947b97f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b39f83b-d62d-4ed3-979c-cc9d72de81b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71ea352-d766-4705-8547-fde7210d6b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74dc8823-c226-44a9-ac20-62e23c4dc269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9ba46f-4905-4cca-9d21-50f9f22bbb20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0735512-4750-4398-9899-54b9f726cd78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c61fe5-0ea2-4315-9a20-3dc85c0bfe57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f602e01-de08-436e-bf1e-43f771e46d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf885b8-2c54-40db-8d75-917e99724445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c02f96-4ca9-4d1c-91ef-65781d185b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eed3daa-c32a-4746-91b8-367a9bbf1ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1431c5-c3b4-437b-a585-739404f5cf90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb347ae-0ccd-4b64-99fb-2f9d5ea5d304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f6512a-14a6-4d2b-b8c0-5d6580e733c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f8ad70-19e9-4341-adc5-0cea29dfea89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71c8b07-c1c5-49e0-bda7-01b39d860d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b359527b-07aa-4adb-acb3-ffc86c88bc02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18d4bc6-62fd-49f4-8cc3-83ce462c6fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca86c92-af79-419f-9577-ba010efec1d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3ffa3b-6cca-4709-a098-f41187cb7d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe1f9e7-6560-44a7-9ad9-2a0c81525f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61350a24-dcfa-40e0-95db-5355c052627b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7022fa6-bb61-4e5d-91bc-8e634ba25c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14380d9-748b-467b-8659-5b6c7bc65f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fadcbc0-8db9-4bea-b070-7ab605acb6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b816ce3-88e4-449f-9128-10028e5760bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14f3560-434e-4778-b2c9-1ee1563468fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b35ec4-9fd9-4a39-a93a-f987f56c23c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e803d17c-680c-49f2-b3e6-533aeb1a2439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642b0bfa-41e0-4d76-b5a4-11d70b960a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2360e7f6-4dff-410d-943c-387793bc624d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e006baa-b2ee-4c6a-adf5-69e481f002f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd837a9-f475-4790-8e6a-7dc957b20b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70946062-9542-47af-8378-6b495cd47bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ebc27b-6cd8-4002-9088-90da1d9ab37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3ee5eb-db8e-4ca5-ba3c-8e4624ded7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c989923-67fe-411e-a667-be0cffb7178c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622affdd-b449-4787-9c0a-cf0777fbc426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fc9e42-22d1-4637-90bb-041d3064c9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9909a7ab-64a7-46ab-afa6-4d63006cac45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49c5bf5-4169-4a8f-bde1-7eca725b60c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5ea77a-35c1-4439-a73c-f6567edd54e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afbf9c1-6848-4baf-b3f3-a8b186552e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3928c4ad-50d0-4c60-b1ba-b9f4bacbbd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3f6321-358d-45e2-a7e5-999a4fd7739e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80779c3b-7c23-4cf8-b791-74f9c01e7644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c75bd6a-4a25-4e9a-beee-e42ba5ea2cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569f8a9a-a8b8-44c4-85c4-58a9f4c33c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf2694c-28ec-4dc2-b013-8266f7cfbfe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e1cc3b-d593-408f-aec9-c17f3294a204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05734903-e69f-4e52-8638-36b551439cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5852ea-c99b-4ec9-93cd-4d6f33edcfd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ec2c0d-b968-4ebe-b385-6f0f6459065e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c211a7b-b8d3-4c00-be18-fe5b7bff4e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663e1f06-9554-48cd-8f21-a1455c3f60a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4901bb95-5775-4ae6-a352-447a0456ddbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bf37be-8499-4ae5-bb41-a44e6c0178b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2236b77-df25-4bb0-94bd-949cc70d238e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8bdf1c5-2567-443c-88f8-4353519aa2a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b85b357-ec86-4756-b92c-1479331c34d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42639094-142c-48f7-8883-59293ce8885b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ccf266-82ad-4af2-855a-db2c005e2c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac4a324-390f-4157-ba21-a8b4f34982e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689c2a72-d1ab-45db-8509-b6f1d73f8176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358c58c7-4de8-41dc-b556-578fd3b9032e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef768b1-f9d8-44d5-9d27-8b57d8de5e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc60d159-4ced-40b9-a400-409b19bd594e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe6b909-5291-4543-96e0-47c62f5678c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2997c85-2470-45da-b990-507dbf2f0002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baaffc49-74b5-488a-941f-1fb22d8135da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5ef63e-24fe-4f8e-a79c-3bdf5862aefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfd1901-9a92-4bce-85ce-d7a799c94f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd070a80-4e9d-4b64-bba5-d2134b4fcfbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0026f245-98b4-4cd1-847c-891e07411914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e016cc04-9785-4976-a672-92bff3de2d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe787e6-344f-42a1-ab47-f670f14503d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb63d60f-3c0d-4d2b-865c-6b48077871a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598026b0-2275-43e1-b2bc-c1dd3191bce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d264943-514d-46af-8ae4-47310cd511a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d7115d-42a6-4a0f-ae20-bbb59da9f424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40184c69-d841-429d-9ba5-8982ef34509f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf45b05-7415-447c-b80f-c7aeb800c5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598f3727-e502-4cbb-b85d-8440644b712b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f5989d-951a-4b98-87c3-812ceedeb9da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2e99ee-ab8e-45e0-b0b7-5925650f55fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55534ded-b9cf-46e6-a0bf-b4815ed329de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2028f12-66d7-4894-ba4b-b195c092dc89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682754e4-637f-41ba-9734-dc739198c5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3647544-b479-413c-a0c1-94fa8c216df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d1026b-e98f-4628-9302-abffa8fb95fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ba7dcc-181c-413a-9313-8a8f022b6c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51d2439-7562-49c2-b0cd-b5fc51daaa75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbece38d-b98d-46de-ad14-1ad7c47a1676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5380c4e-7301-4317-81be-0fcd55fc7897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7fbb5b-eba6-451b-9cba-4f0d4f157936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48683a6d-23a1-40ef-98a2-76283123e846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b549b0f-29c4-4a47-afcf-8e54171e60bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f530bde-2f5c-4d7b-83f8-cb16d7e91cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a7353e-7d46-4899-ae12-7a98739b1d2f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca87eb26-e373-4c1a-a873-f4afde257df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5467d30f-dd96-452f-9cba-3b9681e37330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e342a5f7-ca53-427b-b30a-a4d69c8df04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332e35a8-a776-42a2-8178-f721b77786aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae4a027-c1af-4629-ad4b-80453c1b54b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be268ba3-b0a6-4c5d-a197-fd27513791d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9eeeb8-d210-4c80-aa18-6539431d7529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d20c2d-0179-47ea-ab91-3fb5440707ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995ccb51-e37a-4184-a651-60953899147c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e85609-d7a7-4902-bb98-db7f0a106b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a0ea8f-dbcd-48dc-b483-171d8072ce2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7201948a-0a4f-422b-9d6f-e25e8c8c5422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a15befe-f3a8-4a5b-a094-05fbad6b3bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c56b039-1868-4b18-b5d8-b4fee598085f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f078a722-1bf0-4ee3-abf6-2ec82c10eb58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1504f795-dd59-4e8d-8cc3-1d08029413ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a8c7ed-31c2-4a02-9535-c5c67d9a9001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5572e47d-68bb-4ec3-b097-efeabf09fdc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295f3e59-2a1d-4344-aa32-45f7330bafeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6dddaef-de2f-486e-8eba-ff29e11c74e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6f183a-4e8c-44dd-b905-5a6770f2a183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514ac2a5-da9c-4d36-8266-bf4f10e074cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c855b11e-c3fb-4fe0-9bc5-e6616ac4b8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cbae5b-5254-4617-a2a7-d9a1d5d94773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8485dd-8fc9-4d7c-8aca-92d5846bc898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660135aa-093b-4c52-b4bf-f28443591a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182cc7d1-5ca6-46bc-92c8-c5fb8a2f2853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7628ae1-3449-474c-9539-3c7b9a5dfba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86dfc53-0ad6-4ac8-8cb4-5319e1122070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce85ac66-c99e-493a-9be5-e286237d1258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7cedfc5-51bc-4e00-a3a5-c7156fb0dba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b11b0fb-85ad-4e5b-b027-49b80a38fedd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d15859-6c07-443e-bae7-6429d7e73899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a2c140-9343-4297-9e10-c274198b7235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ad66c3-14eb-4e80-963f-8db12714fe6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8964721-5021-42d1-a761-9054594aa63b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8086f5-3665-4452-9708-758a7ce12940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4914434f-999e-4104-bdee-b16c90bbca98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db252601-0086-4d4c-87a4-cfb29f25db50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195510c6-fc2d-432f-9ede-0600b3481347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b49323-3f65-4775-af3c-79336b192ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43016c85-0f0b-41f0-b52c-37c98cc90d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa0f188-85dc-44c6-ac41-083ddb094642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91108bea-c6cb-4bdd-9b45-cc75cc556d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df095d66-bd1a-46d7-a1db-c756b9764467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99df6e7a-54c5-4973-af57-625ea49c10e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce452347-2b26-4e64-b2d9-73c93c62e476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146ce873-bc47-4728-90f2-3b11c9cdfc92", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2f005a-3095-4400-a028-c86d1ed84fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ba2b26-2109-458d-8b80-a6284b68da2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b41556b-d527-4457-a2cb-9d6484ba52d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2bc5d8-120d-4d36-84e1-286886e4c9a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265ce838-0304-4461-824b-4d25cc3722cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb01c331-726e-4c85-9237-f877053e480d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b972e5e-5f71-47d3-a45e-714740352592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f198c9-e21a-4a19-a1ca-4bb4f3e164f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3925f78-7b4b-4a82-8191-47f4349b41c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c273115-5de0-4f41-ab48-5aca6b420570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c96e10-c25b-4a5a-9d87-608b4509dd9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85d8e22-8769-4966-a6d3-defa908add5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef89a4fc-6855-4b88-b567-a9974386a426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483619bf-7e87-4883-b0c6-173e79cd9a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950ba760-d853-4d8d-b62b-440c2912a904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64812f06-e4ed-43df-a81c-19a55c6fd38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033af0c4-d914-4b2a-a308-742c9054f3ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade60ada-c8f3-4544-b90c-c6b8449079ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e2fea2-a03a-44d5-b68a-e0676e9db56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69865246-c4dc-4280-8574-8133e6bd4fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2978ff-00e2-40d6-bd1f-100461d6f08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17699291-d21c-4032-9885-e8d07a258199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a6b596-50cf-402a-927b-96c2d3d89973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.0']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db87a1d2-b4e5-4e50-9626-b74a57d7c6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc55c2e-5966-4465-a3ec-4ef52bb1c12e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edf1a14-7ea3-44f1-ba9c-2a92c5b38460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8e8f10-698b-428a-b11f-eab7718442ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39caa479-e986-4185-8d93-ea9f008abc83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915b2e5d-ee03-407f-ac8b-bd7a9b2f1d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ade8132-030c-44dd-8876-066e898578c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecac53f9-bc4a-46b3-8170-23ea6144eb9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eadc2aa4-f5ad-4dbf-a833-a94360980128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa4bba6-d8d4-43d8-bbf3-9d3b69feb752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd9f6bd-003c-47fe-ae7f-62fba9ac7a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4704242-e302-4a9e-97d5-b417fdf24470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2130cee-a8e1-4737-be70-1d7564e9da4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d2e6b0-471e-440c-a148-09448e219bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3516da-ca46-479c-ac37-166ea2debb5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864f163c-5bcb-49dd-84bc-33dd56480776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7775cde4-6c3a-48c5-9bc2-ae2dab9bf7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c62ec09-73fa-485e-af93-808e1d0eddab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a004ef-0087-454f-8fcb-386230d14f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014ec143-f662-4dc5-871d-681a53d95d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddb2e38-3323-4f67-b744-e3d04ea0316c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec105bfe-5480-4b7f-9652-10de628f554c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1419474a-008c-4aa4-b926-a24bec5c4545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fee812-f14d-4683-b970-aa4197920697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922ddb65-3e8e-4969-bfe9-81a765e34294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7103de2c-246d-4748-aa30-e5f3f1d1c658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f11f474-bf8c-4ffe-8bc8-2a55c040a4b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634673f5-41a1-42f7-b005-b37552956477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2ba465-50a9-4062-ab10-c55b9dea03e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3668f754-1e2f-4a59-b2dc-be19888dc0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521d275f-8011-4d99-8e30-ca18b49f0559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26fc5b3-0b0d-44de-b5e7-619669e2a525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00709f7-7ed8-47aa-85e0-a6877f69a808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d06ee8-7261-48fd-83db-316537642ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1fcbb6-2a24-4929-87df-5a31cece7a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1211774-c49b-40ed-b04d-ccb5b231c028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafeafa2-bf1a-4426-9af7-60d437e82976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b92822-9683-4d6c-a53e-182c3076bd48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2290ddca-1d5e-4430-b47d-1cf85f4cec3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35598d1-7810-4370-be1c-006f7696bd9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89435bff-2ba3-4ae7-bf39-524521ef2aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291948fb-1d1e-4aaa-a838-faa55b84ff73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4676ae28-a6b3-4b8a-a78f-563825c2e6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e43a16e-772a-46f7-8b74-545091511be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31a16b2-6ff0-4fcb-9cb5-f7b1a4dda336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6326e386-0aea-443d-ab0d-eb824a17a54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57afc5d-b08d-4957-a437-80f9c519543d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1b5ecf-c52f-4ae6-b9c7-3a6dea53689a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bedb8ede-6407-45ad-b80f-1c2b86a38c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253f043b-5c91-4e51-b4f0-e7dfba99d46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e635d72b-1d61-43cf-b0ff-e164066bd773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e583c8-f992-41aa-985b-6e605388ed55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d7cc23-c0a2-4ad6-b088-bbf25137a3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e49feca7-3b4f-44d0-8028-a8b4492a29cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b51eee-27ca-4b2c-b56a-ab46baf1936c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e359c03d-f3bb-4318-96ab-94220076234b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c2758e-a4da-49b8-9f51-d191ecdf5520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726ad914-64c1-40fb-937e-de116be8a908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d04cd9c-6787-4ef0-b0db-af82c79fe457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f260cc-d6b6-4465-b2dd-5eddde9d6201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f80bcc-74f5-42d3-beae-bf34119d94aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e78cd7-15d8-417d-ac13-fe695889bea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85236e20-296f-4b8a-9a4f-ab77dac0cf2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439a7a75-31b5-4d5c-afb2-680de36181ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5980147-374f-40c0-aad5-d373dbc55ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ada7cee-39fa-4834-9411-2597816b83ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84598477-9cfd-4444-9800-8cbeeff64576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e6711d-7201-467e-bd3f-dd48fc66ab5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61da13cb-0dc9-4745-be6b-964c1966bfd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bc9613-2f46-46e0-be69-2ddc0489ba52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad06328-6bb8-4d98-8a2c-30aae6df7b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde1c44e-f782-433a-923d-664041af601f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d174c7c5-c4df-46f7-a3eb-153dde121255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb67540d-2d71-4004-9ef4-89f2b9365a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55dd941-dd99-4165-b5aa-12e62e4deed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9d6543-55b8-47cd-8be9-a86addf4c00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e261cb-3b39-4103-b122-7a174dd82725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc33b448-709f-4de0-93e0-6933cac4b242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5aed551-8fa8-4299-8c1e-f6fb233405c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477235b4-71d1-4abc-910f-e206dc407961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e113296-bfd9-4aac-a696-421f9af97c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559eee09-7598-42fc-9459-f9f3e08a79c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc5ad8c-c7d6-4f30-9c08-7b040ffa2b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb7fe15-9e98-49be-832c-15dfbaf94239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0ac627-7d3f-4930-a967-b243c54e9e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8502fdfc-4d22-4420-afa6-faa94899eaae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da38554-9fef-4654-99e0-2b12e7a2c034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e549260-ae0b-4baa-8f60-d982b2e9b939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93671cb0-1e0e-4d1b-93f5-40e27648c106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d933f14-ec53-40ec-b85f-03221b76a966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee377d5-30f0-4c82-b5f4-9dede0682fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd45eba1-afe9-418a-a91e-949ab7ded00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1863b2-5ab2-438c-baeb-bcf59dd10a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60b8648-38c0-46a6-bd85-ea304ce2e0e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437ac834-0140-4439-9170-bef4e90ce083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a027b424-bd99-4b4b-b3d1-918a59c43629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e1d3b1-0fc5-4e41-8019-ff47cfbf784d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b66bde3-3a07-4a6b-bf3e-dca171c89290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0dce64-42db-49a0-8784-4b4b37722931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f665dfe0-d5f9-46f3-8d78-9ca9b8f21603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4f52e9-af4f-479e-9206-7111baf0ebb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9198b4aa-6376-462e-a6b6-5d7f38fe54cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83c787b-5ec8-4d18-90d0-a39517b8e47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c915054-6967-4ce9-9a31-7e25f77f8d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9bf059-028e-4e31-ba83-168c958dc267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c7d20f-1f0b-458d-bf92-e005eb18e518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1893b0-30d3-4c6f-9ec0-77ff47141b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8cb3b99-e764-4414-b95c-0efadf3322be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b555df-366c-4a56-a25d-c758f7bcb45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614610a4-4458-45fe-8c26-acad355b0d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c58c8d-6574-408e-ab24-e8af0a46cb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10ac620-ed45-41cc-b004-b735d938e2e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6465ea-932b-440e-9fda-41a05c377483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c6a6ae-f58a-4d43-a3fc-2ebfb8db8485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243ecf53-34bc-4115-b65d-044513c7c366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2994fc7-2b60-455b-8f0d-6d98d85b5f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce551ac-8f87-456c-8fd3-d485290b2d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d555ed-2265-49f1-a66d-67ebb1f101d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f0c717-0086-4bf0-9665-6818e4e2d022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4577a143-8158-46c0-b53f-6d83b544641e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e564ec-0512-4f65-884f-08c07b758b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bffc2164-4d03-4571-addf-e2422b50ccb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c10a4aa-aca9-401c-8947-cf9496ede244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1155b1f0-4fc1-44e1-a490-dc7483202a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9a7991-e360-4da6-b598-d7f1e8c2b99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d89c57-dcfa-4d71-a063-b601eccddf83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3479bd6c-de2b-46f3-be54-cd71b380a660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53f12e0-1b3e-4efb-b8b2-8f795497db26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33dcfcdf-d63c-4d87-9974-68d103c003e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e08eb6-efcf-4552-a5fe-f4d1cbffb2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce32997-0aff-4b40-8912-5eb167c04227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a71dbf-173a-4560-a934-c4140d5ae367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5763bec8-d30f-4277-940c-2d73b5046275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6193a2-d044-4d3a-aa19-9e0302dab3a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb4c425-4fd4-4312-8f50-85d70a8b063a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c87110f-020e-474c-a7ea-2de6dee85e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531ba4a6-e091-4ade-9645-b47bdc9675e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3e76d2-8d33-42f5-8816-fa500790510d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ca9898-98fa-4ffc-873f-4f7ed60a6375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade2952f-3f21-472c-ad6b-61c05a6cd258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22027364-a10c-4dd7-8c5b-084dba5d07b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95de966f-e5a0-4a0a-be8b-5ad89f1c6868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bf0d60-7f83-4d2a-b51c-1f79f172dd8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2185522a-99f4-43e3-97d0-7dbe88988cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f303f4b0-5732-4f6f-aaae-6a5b17ce35dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136c5892-4120-4918-b99a-561989cfeaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c12d7fd-9a25-425f-9144-7f62a1e606ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d71da4-8de2-4136-aaac-c1259b577254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3132f3fe-57ed-495f-b728-193f1c19fdfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50d3ab3-3fbd-40b2-bd29-36e1b30c777e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1da4f3-670c-489b-bced-0e7dd5f31c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90df885-5177-433f-9f4e-4624ea3fc5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80cf379-376d-469b-95bd-3016213fbacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5578085-01b7-4840-9f66-31c7bfeefa1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2976d001-ea6e-457f-be74-afe633a48b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95cac632-157c-4991-aa2b-ba0086fc79d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65964e8b-9242-43a0-a1f3-076918a27107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a92b9b-62c6-491c-b3fe-bdd3ccf42c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749a94ff-1ab6-4125-9c5e-85e650f838ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266bc309-636f-4052-a169-5842b064d482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582fffa8-bade-45c6-af3e-fdab510e7d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06cfeed6-cc6b-42c7-878e-35a9ee641d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1226d9f-79f7-4690-8df5-458c410c344f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7512c883-57b5-48b9-ab26-c6d061178f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1468ecf8-44b5-4a2c-add7-c9e643ed9919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7bcde6-9c5c-4514-835d-1da6bdf90439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3047ce64-37c6-428f-b9b6-dba2007004cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab3abd5-0d56-4b7b-9146-43bb537ca768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a26c529-afcd-4793-9d12-6da43fc83cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d778b24d-eb1f-4b97-afbd-5ae98ad0b78b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c90757-9016-48e7-afa1-98561849df52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5ef1fd-ed2a-44d8-ac75-6612de82677d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7919c4b6-2269-49df-a46f-8a13ae9e308a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ddf07a8-76bd-45ce-874b-ab759ed6e584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c62f281-a6c0-4668-88d8-0ff8a7b607c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21261335-befb-4b33-aebc-60472c4c25d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adc5a88-51ed-4270-8a0a-89505ed92d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595e4bf1-6f80-4b91-8277-315199b49af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0b8f15-6d01-49ce-843c-39db60efd7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88427d09-3cc5-4900-81a0-7b692ad9c795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.112.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e9f9bf-09e8-455f-9cb4-7e5a8804da7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.199.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f27974-c1e0-485c-bf0c-50e0b657e6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.211.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f05e88-2721-47f8-90ea-24947cb80b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.50.255.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acd8adc-4d17-4331-b764-5bebf9e3ec29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0500990c-80ce-4681-90eb-dea3ddb591e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.183.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a67d4e8-9da2-4abb-90f8-651354732b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.190.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69138d7-364f-4a51-8a17-cde747d98ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8687caac-eacf-45f0-b166-5cb8f64dc8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.135.43.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929fb1b1-2de3-436d-983d-f27c787c2e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.135.78.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5457f5e1-6104-46f3-861d-ad498f9327bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4919b8c8-5b69-4f23-8a48-3deb40c0a3f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff27550-1f44-4098-bde5-81b0f9994129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb7f6cb-0492-4af2-8538-dabbdcfbbd2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165ee0af-60ce-4e73-a6a6-65cbbbdf63cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5e2a90-f017-49a9-851b-8eae1b5f0de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.245.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beefb9d6-1b0f-405d-a630-f99ec43c9d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4641193e-c9e7-4516-b5ac-07dc4b8db36b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4573a0c-b3ea-475a-bb02-9e390b48aa72", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.66.132.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08470a9e-8699-44cf-888b-7e9c30dc00f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.102.232.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be91e8a-68f1-4a12-8f5b-d49d8bbf48ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.104.121.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03e3b74-44ec-48f3-b210-6573bf18efa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.104.25.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5472e0fd-403a-4d18-9e72-3ba3aac8b3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.104.77.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7dd477c-ae03-47b8-b657-7b2d4fc0d072", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.104.78.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54968270-9ba1-4b02-b64f-bf9e4ea4b8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.104.83.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8e362f-a366-4ae8-b56a-c9e3fa555a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.118.148.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58bd99b-abf2-4cb9-9e20-bdf3dab3f9ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.129.193.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b6c2c1-a70a-4257-8496-983c50a90f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.22.91.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5ec899-7109-4384-a4fc-1ac872c92213", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.248.77.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1638ba3e-b17b-4bfb-9255-3177aa03aeca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.34.198.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31dffeb4-410c-4009-ba72-154b9d1ed618", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.57.180.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf20e97-fc1f-4da7-bcde-70b08c93f722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.122.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc8d51c-41f5-45e4-aacd-0256e471867b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.135.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1eed55-6e48-4a06-adc1-8028c637b754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.12.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b693a52-15d2-4c46-8b59-710efd32485e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.165.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd76bcd-5834-41d6-b665-8e1d11f8371b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.184.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093b1062-7bc7-4698-b0b5-1bc901fb2334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.114.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc082faa-69fc-41b9-a883-e4cf6c076f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.162.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3390f50f-0d24-44fc-9366-24d5d2e46c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.169.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b479be96-05bb-4cb3-82a4-577bd75cf806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.172.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd117a0-cebe-448b-9ea7-20269e4c781b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.218.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a69474-0adf-407a-b3c9-07739339e915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6b5125-3b88-4a9e-aae3-781ec99f387c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84113d7-fd09-4ab9-a94f-a4c6a1530c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975e348b-7fa2-4810-a1e1-f3d1505bc95e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78bc188-d78e-4e49-bc90-7721463f6290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c42e61-16df-4c44-9cfb-97041ab35be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41f21ee-a32a-44bb-a651-eff9acb84e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d019e094-4f6b-4852-98e4-328e2ce78c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f751b2-9f97-4dfa-b3c2-f177efdfc667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b8738f-3658-4679-a98c-59ef5c0cbdd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea5f274-97a6-4ec5-b478-0d665e4f2aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd33d78-8a8b-4004-9585-54afc7dbd518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcfb351-61fc-42cf-b703-7fab105f0e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d250c1-33e4-4148-b476-8c659952b938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e9bc64-ce7c-4d74-b41d-d971d1b90cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439a8eda-82a4-4d1a-af8e-9b1cd93d3a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4479219e-a243-4ce6-9b9d-846c1b66b8a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079fe049-3f22-4aaa-b7ca-8ed2ae3a8cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e384a9-6fe2-48e9-bb85-b025b7e15f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284284d8-9b14-4183-93cd-a3869ff345f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7655acc1-e9e9-4d44-a634-5416e5f663d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27e54a7-99e7-4240-baaa-5081b5b522b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2bb04e-dd8f-4328-b8ef-ed189f1099cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80bcb0f4-0a48-4501-8615-42cde5acee91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb5ad84-e1c4-4494-b144-41cebd1d959b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b217bcc-d768-426b-93d4-cc70ab1db134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d597dce3-3e0e-4777-a627-cb31113f99cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a975c818-18e5-405a-a507-d36fd56966f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86c0497-96fd-4e95-bbfb-8d907234afbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5c0cc9-37da-4255-904d-31d8a46e8dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e769d10b-36a2-4f0b-a345-15e700d6acd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3978fae9-db0d-4f50-8311-daa219bd8099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b369bf-19c0-4b81-9975-2cff4514efa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab49450a-0b14-42f3-9d5c-40337ffeb4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2147772-0731-4009-bfc1-0f12b58fbaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb36c73-34e3-4667-a54c-4c05ad9afa9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bf8907-8a2a-4d98-ade8-1e62ac4c2aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9f8e1c-0a76-4cfd-8f93-b58e1b14e217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3196258-8adf-4b1d-83d7-72304c7abbc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c443bda-7245-45b2-bbc8-8df574d56f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab934b6-475d-4ce4-9315-e11621029096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3982b92-9402-4d05-af33-19e17d34fd72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ff081a-4df6-4b91-a052-33c20a675759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f5948f-a844-4674-a4b1-3e21c9295a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f39f8c6-a035-4a6d-9477-654eb0811c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799803ab-3d24-4545-896a-b79ac38fd230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9979c663-8812-4d68-b161-86723d4bc1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7557ab5-b728-4976-8d11-135fe8377963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a89596-10b1-463f-8c18-ec7b55ac77e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2701fa5-1845-4247-8d91-419658060e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a4f26e-69e9-49bf-912e-675e4d892bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563152bd-a3a4-4914-b239-ccf7400d56bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8016f941-ac27-4b21-9e1d-33235a83148d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adff211a-cb26-4153-962c-9ff2a195b30f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37d1fa7-a97d-4f27-a7ca-7d5ef37538ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5cfce7-f8ba-44f0-bf32-e7f361b95a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde339d2-5739-4444-9d99-315b88fdada0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc725edb-de04-4215-ba18-815bb86f7f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05cde682-f752-48ec-9d21-a0ae70c1677d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de9bbbe-5cf0-4bf8-82ef-b66eb2fc3cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9176ecc1-6eeb-4faf-af55-ddcf12481fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5bde51-8ba2-487c-8a97-35967e05b4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210f0cb6-155d-4a42-a24d-c3299bb7a9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb67191-fda4-4d5c-8ddd-d98364037098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3abf66-1781-4ed4-bcdb-ece1779cc941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369a8b8a-984e-429a-b55d-16c24cae8f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d678846-e51d-4ab1-8a69-e7d0e48da823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4f2bab-0a97-4336-bddb-2fe162805dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b6f99f-8d96-4a58-8e10-9ad707bd9621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.104.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19099c5-a9ee-4f0a-862b-2789d32967b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.119.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b532e3ba-95e8-4d62-95ba-1d9dbff37cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.197.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e3f608-32db-4f43-ad5e-e46b857a3137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.21.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf17b05-df1b-45e0-a0c0-b52ebee36ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.136.234.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81698486-a6e1-49b5-9b9b-914b59b1fe49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.230.252.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc53b76-eacc-460f-9b99-3c53d5e18fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.230.27.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55697847-298d-486b-9716-bc3eb0ac5710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.230.72.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079e2037-3559-448b-ab21-49341ee4d3c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.40.176.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9216ddb7-32d8-4292-a494-cd5f265b403c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0236d93b-504d-4229-b8f1-f0d66a97444f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.95.83.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5262ed89-9820-49bc-9811-2f8f32314b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.115.63.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32df108-a42e-4d41-b8fa-b3f3d658e168", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.145.75.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58708c6a-fdbe-4efa-8fc8-f08791a96035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.237.79.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbb71e6-6be0-47e6-852b-6af581583fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.238.98.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243d40f4-1874-4420-8b45-b95ffba239cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.45.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec909ecc-8494-4f13-8271-0d92df615cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.241.128.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e052495c-b899-46f2-9c09-a08988230221", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.229.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d853c0be-45b8-463a-b835-3d99763f1d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b8d1c6-3bf8-4f7e-bbb6-50d855539d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0da7ab-b6c8-483f-a9c1-c4c4a336ba99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8138a018-9516-4fcb-8d6b-9ce04dbdc14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e6e785-d05e-4f4f-a078-1c840663c12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6978f4ef-f766-4f9d-914f-e6380055d456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bd7dd8-8139-4b69-92fd-95ac853069a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c07537-e89f-4f0d-ad43-4559e16297ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28b55b9-49ca-46bb-b7e2-8c57b89847ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebaa5411-f26d-4810-831d-fdb6e26fca4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e73932-6b59-41eb-839e-e2d1b2fb9b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aeea9a9-1f55-4416-b4b1-7d55ddeda6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511e72ba-e819-4450-b7a0-d4c9011b2356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26eaf4c8-6584-492b-a21d-dd67ca628959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0829245f-92a8-4f28-8e59-2f4fdbbae245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c3f37b-2c97-4698-b48a-3ef807fe18b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152bfda4-b597-43ce-8afb-b19c0045e82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540fa3d1-b683-4b8b-bd45-1be7f58f5d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e84aad8-f663-4933-91ba-34a5ec52becb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0453bbd3-3535-4ef1-8bcc-d127508399bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3982bc5-744c-4a02-8968-ae6bab7f3be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e13ca38-5292-4ca4-b542-e52abf1cdd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbb6b33-ba01-48b8-a4b5-e24be4122cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e95a35-8afb-4778-98d9-adb64052c14e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad869dd6-4008-4981-b592-127c4998ad4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d450089-e792-4cb5-abe3-0285324b18ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aee888c-9ca0-4803-b831-5d621747d134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50b3950-542a-4054-bf08-8aba28de8c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27fc4b6-cab5-486b-987f-008021445309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a8d6bc-bc96-47e0-98eb-e313427a15f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7358be0b-5680-4fb5-999c-88b9a0dd2c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4970aee-31d6-4fcc-ba53-98dff41d3090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a902e8b-34bb-45f9-8f5b-fa54d4d8a050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10854bc7-de2b-4779-90af-45990e666df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632eb023-82b3-4f3d-990c-6d9939725f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6b15d6-e437-4457-ba5a-3abcc2383897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cdd1ec6-0ef2-42b9-8220-fda6a00244e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133a311f-b36b-4ea8-8e69-8bcab802e51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4de42eb-501b-4ec6-9316-d5040581c42f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd65eb8-dad0-4c72-9b09-24a81a48c339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74537246-bbf1-4867-bb45-1741d5de006d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1980335d-6b31-42ee-801f-609fcb74d326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878c747d-3b40-4221-9f3b-aee49b74b290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90678c8b-d547-4271-8ea2-2be2d4f7e0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d61dab-24e9-418d-b1c4-86258567dee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2630956c-7d8f-42c1-bfc9-2dca357b43f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a42093e-12cf-4fd6-ae86-db3c8c4c9c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0189c906-8c46-4423-8a7b-3457b3e1387d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81a595c-8c57-4652-ba17-9c62b7b2ae05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16ae6be-3fa9-4b27-b682-ed4803aa3c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24d74ee-a940-4691-aea0-4e894497df49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc93a795-9269-4b86-a19a-27d38e64472b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34afb275-3ed9-4638-b412-4e32bd7b964c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f770bc6f-6858-44ca-96a7-723f886a18b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.242.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8a3a36-c17c-4830-a127-aa3467629998", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.245.106.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ba0e75-c020-45ae-b998-abf7482b3756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.40.171.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9243847-ec33-4a4b-b6c6-25a1aa9193a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.80.35.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f384bea-2e33-454b-b7b8-570d511abe0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.84.223.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b53ace3-0c04-4cc8-8d8c-e6f3dcc7be28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.136.188.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60377bb0-bc93-4f11-b020-d884b0f164d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777b467b-3306-42f0-894b-a6a49e795d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13714c41-1bb3-4f38-99f5-9aa704f12562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b58f31-17fd-4f05-a6e0-85969efdf294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c114ba-6c28-4d86-bd1d-9ccc52bdd9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddec2de9-f3d5-44c5-a434-f2ee1a3f952e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8608b66e-293e-40a0-a23d-db2657fd49de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73195875-15b1-403d-939c-1b773a401bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d31906-1ff0-4440-ad31-f40234726523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66676ba-68ff-444e-8850-ec85e46b8db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a9d52b-1ede-4044-a1ba-499d73ac6318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4e1304-7071-4508-82c2-7ead0a2533fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a841cd-0e61-4d36-aba5-96a961bd7a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.138.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e180dd6-f58f-40d1-b7b4-94e87d049d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c65e9d9-6646-4824-b0a4-e0fb74788fe9", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6497e35-9f6d-43ef-b331-22ff25dfb3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27fb04fd-f452-44b4-b0d4-beba3ebc8056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28df47a-ee8d-4a71-b775-facbf5966919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18248881-2c4a-49c4-a258-3af9e2b08e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574b0d77-4adc-4dfd-89fd-e7a35be3972b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbca4e96-7185-4519-b10d-34818a23d512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ee57ad-233f-4342-b667-eb94047e2232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102e22c0-4e86-420d-8f97-04fd907362cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72910b9c-328a-432c-b8a1-819d2e81c42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712552e3-ffe6-4843-8f0f-2d9212dbb88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0a8cd5-1a52-46cb-9c86-435e3fa6099a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4b5f5c-7655-4f7f-b5a1-e3ffde589892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3002713a-f727-4e68-9fbd-7c15838fd191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68c74a7-42f6-4850-b13d-1b16ef74b3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff94fae7-c08c-448a-a8cc-f73eb2493b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286bac8c-c577-4423-8a74-829008871eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd00bda-7c47-4cbb-ad8f-a72b6e16135a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cf88d3-57a6-4a41-a425-e411010268b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6df5508-7869-48a4-930d-42ac5f717026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b2f165-4cc6-4669-9a36-542fd4ee77d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62611f32-80e3-4059-927a-bbee34fa1385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70cca4cb-d905-4db3-8872-35e2c1f0dc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756d1e1f-9ed8-4e74-b006-a3971699040f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe7b31c-d96d-4b05-8778-9da72b400227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df1ede2-2db1-47e6-8f2f-696f284d7f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6600cf2f-c07d-4c8d-943b-bd1febcf00e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d13ae50-8402-41eb-818d-31ea79b0d35c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96581b5-b4f7-4a2e-a490-4434bfee550a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64e3c75-af85-44c3-a3a2-da972e56121d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b467ebd-785b-4d05-8803-050a7e0cee38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240a894d-266b-4dee-8e61-2878841e8a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52c1b40-0b60-47b9-9e8a-c2c2bf67e120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9296f7c3-8eb1-41d3-ba8f-ff590e381605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f2b7e4-f7b9-42c5-b18c-bb0744aa3329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bdaea6d-8054-434a-82d3-a22dfaa81559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6286ff1e-3054-4f18-b712-030f7c438300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa7e7fa-83fb-4a06-ae5c-fd8c3432d661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557fb7ca-6fc3-4fa2-958e-933f6cbdc81d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf7e06d-3071-435c-9445-ecef7dc1803a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a2293f-2428-4b5d-9d93-71f946423d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19040342-b4ae-471d-baf4-d2e9c6e0bcc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3e1917-c122-45c3-947a-d0b6115c6e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.160.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04175f99-863e-455e-b40b-f5dec20ad327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30eff1ca-4041-4e2e-b3f0-4645b92a47bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053a3294-b520-4679-93c5-d6f50aab36a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa39e0ce-7997-4948-a5bd-f856dbd78cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c319c6a3-b6df-49ad-acc7-21f46a876c7d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a948c75b-3787-4023-aaa0-33b56ec123d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.172.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b2bd14-8529-4f76-99db-8f59c979727d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.172.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06fbef23-96fa-404d-a004-19fe452daa40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695ce78a-b24d-4704-9c6e-c608f65670cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.175.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875d5dba-2dfa-46ee-a7b8-6b33246ca67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3160071-790d-403f-af2e-ac10680726c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f66b61-c41a-47c0-aedc-8f447cb9b1d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898840b0-f144-4935-860f-62243a157ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7c863c-5552-4492-b823-cd54de6e3837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd205d3-bd42-4531-a50d-2b8fb4b6df21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a130b6e-345d-4db2-b57d-d7e68a5c387a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7193d5f7-94d8-4eda-b4d4-1b3ca3b4b744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8857c690-07b1-453f-bf01-3ec0e2fca964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c6b510-e71d-49ff-9e96-b0d9ba7f25c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18566262-5ae9-4918-bce4-46b79a2ac551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a9ca51-38ac-441d-aae1-0e11477f55b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2497b120-9de2-4a65-95b1-f0ebb16d394e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ea96f4-b13c-47bc-a5ff-eb412317c1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81dfbcb6-e10e-4482-938d-648a93510ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.191.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f217cac7-3b67-4e66-9047-c26190e665ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a45c42-145f-4ff7-b64a-fda041563d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a810c2-2b33-4f88-a84e-df8e478232d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de51412b-ebc2-4c6c-bd04-4594db7d596d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db34d338-059e-4f14-8cb2-a4d1641559af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91557861-07fb-4e08-a119-eb80263cf772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--defbe104-44fd-4ea2-a7af-5f6f20175ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871acdec-a182-43a5-9c14-68a30e8271bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4aa110b-4bc8-45f1-88bb-21337787c888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c29d40-80a5-4e62-8308-26612a77cd36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586de1b8-b864-45c1-9f1a-a0bc7d510666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ba8aed-fd62-4fec-9fa9-88b011b0d02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2fa386-0c16-4110-9f99-b1493fe5c959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b7dd71-fcf1-471b-8eb5-4546e72473e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6756378d-3d1c-4545-97a9-6e17f3349849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0140290-bbc5-4f3f-a195-4f8032de7319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e109c2-3409-4c7c-a96b-d6da71247e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5aab7dc-54e9-40d1-9e75-fd957fd7e894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.204.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480106f6-1993-41cd-8b2b-0225e30ede1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400026bb-d414-4bd6-9d3d-b63591ffaab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fab0cb1-682e-4490-8184-0613cc37f100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2af356-2217-4be1-a87d-07cc142f63b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c60a1c-2682-4be5-81a8-edf0153e2b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64140a88-6059-4c3d-a61c-978f9844726b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce36858-7572-4992-8050-6463f7e77ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71149890-2a19-4d12-9a06-5baf245842d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86b48e0-a30a-416b-b775-5b0042c835a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78d67f8-91ad-4a92-bc70-335824dacdaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51b4705-1c7a-43a8-8388-102cbf122b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1e731d-2eb1-4343-ad21-3294c94aab0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ea7ad9-0b7e-423d-a9ad-8bbe11f07254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dec5189-bd26-4ddf-b50e-061102376c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64fc0460-ebb9-4656-872c-01b46717ffdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b5fdb5-3350-4e20-8397-6c9a3b8c6424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d3ae94-6a1f-4b2f-9e80-decb8a90e527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cb8eaa-3b4d-4a5c-852e-07c17bf24c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab10c03b-84e8-43a5-abed-e91c6582a2d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13fcee9f-8636-4852-b31b-4993e79b387b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3209ab34-48f1-4449-bd5d-ad36ed780afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29cb38a5-712f-44e9-b595-40640d5ec8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98491f13-72b4-4fe0-aa63-0bbbb4e90e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90eac0a8-6705-4c41-89f2-7f9874fd69a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.209.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfd6b11-e602-466f-bf95-88234fa51dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.211.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03456744-a973-4014-8f4f-790cf94510a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.211.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a35548-4894-4240-8278-7648a9fd4215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ceb1762-8cc6-414f-b8cd-2845ee03f9d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde8b014-a575-4970-b5ce-30c38f05bd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8272e4-acf5-43b7-9c43-8dfa88073ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f621db8-b183-4a7d-ab20-d3297c2b3cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec75248-68dd-4b8f-aeb7-411fe2e5d6fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e172db-8421-4531-a331-8f8b91b50420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3572b0b-c92a-418a-8c1f-e17d364ad9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9204d962-3191-45aa-9169-7d06f28c47f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9775f629-2392-44b6-b685-cc741eb6e4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0ca9fc-c787-42ce-aab0-91e6a31ff809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.219.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c53a36f-0392-46e3-96f6-2a05467573fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.223.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e65f76-73fa-4dc4-9573-234498fa5431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb98a146-860a-4349-ad05-a865b1f30453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6915c86-219e-4528-b389-ca39aa74f577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c74b8d-ff18-461f-babd-4f6d9e211111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5ef546-f280-483e-aa48-f2a3773a462e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d10bd8-421c-4ae6-be33-889d40aff7b0", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66f480f-d8a8-412e-8d86-a04a0108e451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b7e0a1-4783-4c01-8fc8-bac622979778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.228.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67546002-7246-41fb-af17-fa5f0a1c2acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1ea1f7-0e70-4409-aa16-d09b9173fb24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01e9da5-cd62-45cc-a452-8a2c163b0693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b67940-eed9-4bbf-9ee4-6ee6904539e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a323749b-1b31-4ee8-ad24-88b36c44fe9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddfb89b-6031-4772-b180-e2be10899015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe5aa46-06ce-4ba8-912b-ddd55dbd7f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb03d3bf-4ce5-4ab9-a318-30fb5e723055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521a11d7-4497-4891-b2a0-0828f9f45ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a256a3c-2d1e-4899-bbd2-9e2db4e207ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c727b1a-7075-45ee-9410-5e53039e5f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3d02b5-ccd6-4189-96eb-5c84df1dc84f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bdae2b-8d6b-4201-b02a-61b4294f2500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d43b18d-28ad-4852-bb31-7a6e5530fedb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6cc32d-29fe-4354-bc6c-e880391bf1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec7a964-ca91-4bd6-9a3c-15a9d013d2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cec54a6-cb5d-4f45-bc0a-f07c2f59cea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431e76de-364f-46ab-aeae-2d20e8f279c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9124b201-71b0-4a5f-9b62-10aae61870da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.240.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09fd1c4e-a3d1-443e-8749-4ddd528d07eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6d8254-d24c-4545-9308-d992a4474059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4b49ed-96ae-47ce-acb8-e5a1d2e273da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1281511-bae2-48e7-86f4-128676deda3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9313f9b-d44e-4504-8d09-160f87893b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c8b7a1-e973-4523-b6e1-4e405bbdb0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202406ce-3a96-4e49-bd12-9322bc2297b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4c304f-ae64-4821-88c9-359cc7ceb705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851e1a6a-f8fc-4cc8-81a3-b8ed13024221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193df2a5-596f-4d4b-8926-3d3ded7db8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.250.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7817d804-1cdf-431e-855c-b741a42915eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.250.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c64937-8df2-4146-a320-c4be7843841b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.251.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474357ba-39d3-4639-bcbf-8aa6c6597b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f5f8bc-f783-4313-8d9f-61dc37dd62a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1357fd-4c8f-4519-9db2-cb0f49c9966c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.255.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ecdc62-a024-48ab-87bf-8c9c6d154722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.134.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c172ba75-a71c-4c8b-a74d-a7f92c4c17af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.212.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e95dc58-31ed-4846-a5d3-ce8a900ba681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.228.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee185c57-549c-478b-b349-279c3db49210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.247.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffb5ea5-620d-4ef2-98da-77e6debf6d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.169.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b73026c-d452-476a-a0ed-b4b0853b41d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d78cfb-3eb8-434e-a5a5-015c6ca80f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f76b5a3-f478-4800-b809-e22020582e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f19caa-c496-460f-a828-34a6a6ab78ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.33.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5194b0ea-b688-45be-be2b-0fef84a4f247", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.53.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0170c7da-972c-411e-b114-800ffb705a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.67.197.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5499b3a-af5c-4473-a018-21669fb8ec45", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.67.201.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f00b74f-5887-4175-815f-17f693381b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.67.202.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d206a7a-61ee-4cb9-b607-5c2a40ee1871", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.67.217.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ee0612-192c-4eb5-a967-25d84e056179", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.67.250.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4f9f8c-eae2-4c49-9f60-5a34820247c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.67.83.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161d8cab-10fd-4698-943a-4a4bee7f63cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.69.198.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e39a15-f429-46cd-8235-b35aa21015cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.69.204.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1d30e4-72cf-4e0d-b97c-29e0949d368d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.69.207.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c717484d-7c7c-4643-b9c2-44a6de04026e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.69.226.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bbab253-72ed-4ccf-8e5a-854606dd9e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.70.101.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caaa07cc-d1d7-44b0-b393-f76b1b8be13c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.70.101.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c35e96-1ab0-4062-984f-15b99b0fbf8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.70.103.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95e7832-2e5f-4cc7-99b5-8dfebdde84f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.70.86.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de0d326-94db-40f3-b90f-724d8a583693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.101.163.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dbf6c9e-b07e-41dc-a35a-a0aa90249e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.33.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4120edf0-7548-4579-94dc-fb227d4f7caa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.121.70.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af20ad67-5c01-41df-ae15-afa7b8374102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.132.246.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2952f90f-8916-44cd-8b2f-ce655be91691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.67.91.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cc8464-70c1-4f7a-86c9-68025a3c2f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.75.246.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7336b1f-ee67-4124-8270-62b9d92cd379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.75.251.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f290ec40-cb64-4f4f-9cea-7f3e9289fc89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ab4448-f6ff-47e8-9ed1-57670d840b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.12.176.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf147ca3-ebbc-4eb8-b523-96406e8c8bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.12.20.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa27dec7-1aa0-47d1-98d9-489cc4d6ce89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.12.41.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26838fc4-0d67-42fb-9f25-81495a82d856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.120.138.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b8cd29-18cd-4149-b094-9a83a7bac97a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.14.23.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88cc18b2-1bb7-4cbb-adb9-76ce00d5e92a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555edc87-a947-454c-9b2b-f3bbfe1eab70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.119.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368a7e81-509f-4651-8c0d-df04c2840550", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.146.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf1cd1e-90a7-4131-bcba-b86976ad8342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.17.16.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4dce9cb-b429-496d-8f2c-aa5806a06f67", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.17.19.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61fd4d8e-d6c6-44e7-8189-8df290c2402e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.17.2.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6c35bb-9657-4ac5-aaf0-037446c62fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.17.22.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d09c41b-dac3-4012-9bb8-5ec66c334505", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.17.232.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ea4124-5960-4b91-93fa-d489db264eec", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.17.234.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab596db-8e2a-4070-b018-19904a0ba63f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.182.52.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2870227-159b-49bf-9cce-6561dd523b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.19.185.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a6356f-316d-41b1-ab6c-4a2fe770ec26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.19.241.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fed5d20-d46e-44fe-bbe8-7a9d40fe50fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759de2cb-5af9-44fe-8b15-0874018aa2b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3447ce-1170-44b6-bdb9-3ffcf1f68428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6d4792-cc21-49ad-a591-ad156ce3fab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee90dd50-4605-49ac-8da7-8cbb911296cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67356af9-521b-414c-acc0-92c0d0a2e83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c552d1-7c80-4d21-90f2-56cb2744d82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2bc2ed-14f8-449b-9433-5f668f371927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c218d6d9-a717-472c-b6a7-7e5173deee1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7c4702-4ca5-4d6d-9b41-8277e79d2840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81a916c-dd08-446f-9093-979c3ede2ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.201.73.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ee97cc-76fb-4048-9b1c-cb866a11cc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.201.75.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f34482c-9e73-4ced-8441-a47a9ea18d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.209.140.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6316d2e4-c283-4130-9150-f7dbb069d642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.211.2.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb921f6-13ca-4019-937c-014a2f71b3a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.219.103.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec56962-76d7-4f93-9266-9dbf8a91555e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.221.20.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7340e454-a214-4684-8140-79aac1f6d8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.241.44.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7511b43b-30d0-4b61-aaec-1c6e2a08a590", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.3.37.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702ac729-e890-4a19-b788-bace9beb8765", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.31.118.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f285b1a-1ff4-438a-9cd3-738af541b842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.36.183.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116e31e4-b897-4154-a344-3f23380a314a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.40.45.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8180d75d-8501-439a-aae1-4f92c6e917a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.43.52.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa15334-b4ab-4f0a-9db5-8d1dfefc324e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.44.25.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5666f7c8-717f-421d-baa3-f491b77ec6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.53.164.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ab26b8-1e83-4555-befa-031e86614cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.64.252.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f60d776-7190-48ad-bffe-b7e851167bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.64.252.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d4dfea-7a2e-4eb6-8b2c-3fbcd3fccf80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.70.82.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4763f3e-39e3-44b5-91ea-26d7b008b7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.81.36.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95483a24-2582-47d1-94c5-080168aba75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4f791f-bfbe-4853-b447-9630d6590b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16195958-8838-4e98-97e8-bb7d571daee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3409c82e-f7ff-42af-a984-4da6bc1272d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6b5fc2-d861-49f2-bf54-9c8825b213b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0540c8d4-f5c0-43b7-b255-06263e1652e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b4a470-b6ba-4e7d-a931-f86f71adcfde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d697113-db1f-4093-95ec-033d5171fe35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd50882a-8cf9-4269-bae5-89f4f3eb9daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28e3351-8439-41ea-ae43-06688d9b6935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4587e2b7-b458-41d5-b4ee-bf8cfdff2030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2b4a17-bc50-46fd-a4e0-f7522b3b55d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7dd770-d60e-4580-8723-564c00c3c4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b82527a-ca84-49e4-bd44-efb3276d69f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43ea478-ad52-4186-b0e9-1985b7199994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99859c0f-ac23-4069-b3f8-3ba5b46cb64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339476fd-1965-4643-b218-cbe6c0118a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6eb70dc-db41-4afd-a448-1087fa30b7eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff05af9-be57-4d73-bbb7-00046aea8413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f5188a-d40a-4cac-8eca-3240be8e7f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8017e543-f02b-4e9b-b299-cfe6065b4036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f172b3fb-cdea-4b03-b559-ea828185a28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222a4749-dc2a-451c-a8da-185acd77d81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9ec8b6-9fea-46d8-bd4f-297ccd7b00c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d0b199-1cee-4144-86c5-3cd10a122ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c05812-951e-46db-95f1-36b4e25aca66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb1a351-314c-4c0d-858b-35062c21bf44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca44027-ed8a-4e66-b91d-3654012665ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79493a6b-9931-4a11-ba0c-51b07889ba69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701ff55a-94a9-4ada-9e20-6b33f6766456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548699aa-df53-42f1-b748-a51e50532f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83c8681-562e-4592-ba33-319dd7a6945f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd01eb55-cdf3-4b93-b5ef-55c0b23f0db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa46e65-7c6d-4db4-a2d2-130f7c22c2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9b4001-5309-4575-b168-0dcfece09e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5948f02-ad90-454c-905e-5ead90e81d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f27af30-06b6-4d4f-873b-f50578f0d5fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b85ce82-a4c0-4649-9670-4e84fa76dcec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6afb66-4edd-4258-a667-82d83f2da21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6e6879-3c4f-4732-bf8a-28845befc018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f216363c-ce4e-4e45-a425-5c1834c2f888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed98a24-e1b5-466d-abb4-11b929afd45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60598241-8722-4438-9425-65b6eb9e97b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e573381c-6bcb-4753-8f07-707f9d1d80d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7900488f-174b-4236-948c-9ccd9cba5164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440a49ad-e83c-425b-bd86-436aaf12844f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bcf1d5-c272-461f-8b2a-fdf594618c78", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.84.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1edbbaf8-2555-46fc-92b1-c4445cbfeccb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.98.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99104f8-c194-439b-87fd-bfedf1109384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.98.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ef853e-998b-4672-913f-944b326d6607", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.92.23.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c270b24f-5bc7-4095-a889-20d483037c75", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.93.84.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6258888f-1914-4daf-a0b7-0ba0bc127b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.13.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a3c4f1-52a3-4ed2-8344-820a3eba058f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.19.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b69ec33-aa29-47f2-83f0-80b6edcc5ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.3.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bddd725e-2f20-48ba-bc24-ac8a79b7664c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.82.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7dbab50-084c-46bf-ab5c-5e1c15e32c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.87.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d582d369-76b9-4aca-810d-52964bc86a37", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.2.191.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47104720-81f1-462f-9517-daf03db35aab", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.248.213.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e862bb-3d70-4b8c-9123-6ab932c79f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.197.162.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b565b430-69b3-4a5c-9186-adf7394a0b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.201.253.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222290a4-c863-45e6-ab3e-cd596ad54fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.28.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f1def9-5559-4f6f-8ce4-eeeac84c0833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.226.175.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523bb247-d743-4a73-9150-c1754511fbc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7825842f-679c-4bc8-8ae9-df0c0dc99179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.16.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5225a62-d653-45ba-856f-2f9de50015ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.231.140.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3881531c-4f8f-488b-b258-ed595e466006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.231.140.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afa2c26-1278-4c74-9a6a-2c7ff8b366e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.232.100.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acdf8aaa-1610-4402-867d-c679aed5e13d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.232.88.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c05a10-9e53-4de5-90ec-9e2f14da02f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.13.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a5c76f-56f6-4146-8a22-c4e58a5e0ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.41.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa99e4b-a3a9-4b73-bbaa-e046c06b0a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.41.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801a540a-2596-475f-a7f5-526cb174f419", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.245.144.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108837a8-1da0-4275-bfb3-92aa074726f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.245.144.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48d7cbd-c3fd-4f54-b5d0-5204243aba0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.245.236.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f215213-3c43-4ae0-955b-e37b0a152dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.245.246.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c7e51c-a28a-4cd6-9a28-5ba8d32bc35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.246.95.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7664b50d-bbaf-40bd-b38d-13b5e2764034", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.38.73.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e0b20f-357b-438b-a124-9915a33eabe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67aeeb32-701d-4665-bf35-841ba783160d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.182.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fbffab-f2ce-4eac-a872-266d3f8dbfd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f0493d-9b60-49b3-a98e-7b476b8029c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.148.128.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b846ca9-c0ce-4f04-922c-3abc553ab3df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.8.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6409b069-79ce-4f86-b6b1-14aa9bf6633d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.173.100.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9297bd-938b-4b4b-a6aa-2620f972b671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.20.211.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9af42f-aec5-48b3-a241-12a5d5aa87e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.101.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36071106-aa28-4037-bc1e-2625cdc49ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.111.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b64ac7c-b54f-4725-a774-e540bfdd89b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.112.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da4806c-1fa1-49f6-b720-0ca9f16ff6c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.129.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a592a90-c7bb-496d-9b79-46c51c084216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.142.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57140f36-b08f-41c6-8ee4-6c0afb1051db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.167.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5acc85-6a58-4d65-811a-6851489e34d5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.18.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c74d24a-fed9-498f-9fe9-bd5564af212d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.190.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9436ce21-b5fd-4f3b-81a3-f27c33df3efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.21.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e5f770-b118-4ee1-8639-1ec53b9dc521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.224.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bb9fdd-bd73-44f8-b237-fbc25fd06875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.238.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430be606-47f2-42a4-bcfd-7449fabd66ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.26.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4068fffb-4b62-4dce-b618-a2032633ef62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.8.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eeabcf5-0270-4fe1-a279-711ee4e6950c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.95.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3646c46-3f78-4aa0-afcf-4b7bd7da102d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.99.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846682c3-587b-45d8-bba1-1639b9744795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.0.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a264d42-6e05-493e-a2d6-d08b9bd4ebf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.143.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd97879-b7c2-4374-9c63-bb8c34ea810a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.220.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db046462-0e56-4130-b2d8-f9d35008ca6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.55.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9a5f2f-48b8-436b-91dd-4ac04580cf7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.73.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce19359-f729-4fde-9950-f4e18678c8bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.140.173.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263dd325-2c51-4416-bc31-fbaea2d37b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.140.173.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1298a6-f141-495c-b081-9177f151900d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.21.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100cc191-12be-4089-8077-8ba68731c7c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.77.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37d3f88-2542-4b08-8415-cfb03afb944f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.77.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175036ec-b78d-4b1c-b1f7-ea1f0f5ce3f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.197.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba023a97-bb26-4d7f-b910-53b00ba5bb14", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.247.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537df253-b8f7-4971-bced-c649032263e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.247.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f39e4ef-5f9b-4c59-97f1-2e94198b1f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.179.174.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1efda2-f3f0-469a-8e92-93b21e3c3978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.180.77.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4adf4ea-8748-4676-b3fb-fcde66ae64ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.86.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af8c21e-10d5-4405-89c9-941a9a844a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.227.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefec799-21ba-4efe-bb2b-215befba576c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.208.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0afb5c6a-9ab8-4ddf-a71a-65c9e86f2c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.209.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9c1449-923c-4b82-adc2-aad9ef0a38b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9571e959-e9c2-4c84-9771-b943fa1e6d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.100.243.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f28df8-2829-4b15-9716-1489e8f2d9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.138.149.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f20b03a-ae68-49a4-a680-81de035cca8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.138.99.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d355d73a-452c-488a-b244-99fb68868b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.22.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c3fea5-2d4b-4df5-b6ba-7449493252f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.55.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad52ac50-37d0-465c-9bbd-696a9ca8a503", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.59.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e20ce58-2259-4b62-a3a5-dd5e9c7b31fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.74.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20de76f4-a3ed-406f-afb1-3610d08e8219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.11.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22cb0c28-8c0f-43fe-85e8-e14c894a2cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.134.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262ac9b2-0428-450d-99f5-ba3cba5c7aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.15.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bac5713-e8bc-4791-b57a-189fa60049d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.176.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9987336a-7634-44d2-a217-9dbc32c9d41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.178.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50ccd26-26ff-446a-821e-f6deea3ae0b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.2.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0e3699-bdf1-4f02-844e-8f6926b035c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.27.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1fd02d-53c0-4fa5-815d-96a7205f0f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.28.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70bacc53-872d-4b0e-89e3-d15906fd8e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.3.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d736c80-91b5-4c25-adeb-f3ccc8a36468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.44.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12332ca3-1c7a-4da7-a340-4a89e050b34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.0.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c04d6de-e245-4aae-ad11-436204a54462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.111.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b84946-4045-4640-beed-2fea16abbb8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.122.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897c6e91-56b5-4356-8c63-404670e484ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.123.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66eaa3f0-2d16-4576-bb04-4d2e23022e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.150.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa18bb6-857b-4ae3-8e25-0e595ca48d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.159.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9ff659-6d24-42f6-9f85-ebb1eb7455be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.199.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07dcee0c-bd9b-497e-bbdb-4d0cd4614bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.214.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db48596d-4425-4f8a-8121-72b4d6bbd53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.238.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a3fed5-b1a4-49db-9821-82f2c739845e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.238.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a003e6d8-95fd-4eef-9165-62e529620b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.54.165.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e209b78a-271f-45d5-ac90-44490291682f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.145.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75327798-df3a-4973-b729-fee964ecd29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.155.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af72073-f479-41ba-896a-b2af27647d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.161.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5562f043-ae9c-41bf-b52d-86f85cf3b462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.187.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7990fa-1332-4d54-ad9e-e70feb43bc58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.191.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f01b5c-0c4d-4f2e-8e8d-099c669f4eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.228.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf20076b-cf25-4254-b574-ef4cfec88b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.93.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b673cd79-cb35-4606-af80-c2f0d222a068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.111.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9063989-f2d6-404b-9aae-b9674272cd81", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.12.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5319d4-145d-4f0d-b93c-1f594b9f20b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.226.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee54ea9-ada0-4975-816c-cc348aeba878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.23.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd20dea5-9c72-4534-a858-9faeb98f55fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.30.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f7c5de-f613-4d13-8401-6dd16decb6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383de37c-f3da-416c-8b18-ae769da67804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--febf458f-1c31-47ba-87ad-f6cb3c4f67aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.58.56.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ab9d61-ba53-4997-98db-43e4199d50f6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f98ecd4-a8b6-4454-b09a-aa28fe1b6f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89668b4e-8090-4e83-a45f-1e406682278e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6cfba0-0481-4803-8cbe-f10fa7296cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b39b55a-ce77-4515-93f5-12e049e0d5b1", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08eaa5ab-3c70-4c1f-a00c-6631e5a13320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c701fd3-f6d5-4ca3-a287-5ff71bb08431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.178.133.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d162f0-0e7b-46f9-8c71-906af6ac807d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.178.186.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3dbeae4-8685-41ad-9167-69bc7a00aa13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.187.40.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258dbe51-34e7-43b9-8d10-d0d9840d2b78", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.242.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c32223-1d05-4ab3-9b72-1e2b8273c2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.202.47.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9141d28-8060-436d-b676-e1393f692a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.22.160.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aae6b46-8bd5-4414-852f-db8f89c04420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.250.129.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6240c50-6738-4422-84bd-1d1631166a31", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.142.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf7a612-3a20-4bcc-ab4c-a801a0836606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.118.210.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f184cb-e079-412a-8e34-9d146adf3467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.123.249.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ca3c03-bcca-48fd-aee8-faefbf5b3b08", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.129.35.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421cd5fb-f047-41c8-846d-0d4e0b50fa0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.52.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6828d6-9072-4a60-8d79-6d593ed554c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.142.230.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18dc19e4-4345-473f-8ce7-7e03fa424830", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.18.250.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a2699c-5f8e-4a16-8ae2-158f46ae3549", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.33.91.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7d3ff1-8440-4e84-b079-42079f00ed54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.0.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b33c881-f0af-4717-b0ed-5b22abfe118f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.13.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97924823-152b-4069-905b-5b2d38051211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.14.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baee5f9c-0f1e-4e6b-9649-09e1e67a5335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.163.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73081a3-e58d-4b77-b71f-4ba4985fc807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.173.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a55b35-4e1c-4fa1-aede-1e0acf6a666b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.190.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba286473-48c8-4f61-9cd2-fd31590d51a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.191.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de48038c-89c7-4488-b733-e289de715dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.28.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3033a8e4-a4a3-4ef3-a5f5-3184a040b4c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.70.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e280c9-b120-41e0-9cf7-f126991a1241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.87.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71200d88-a4b6-4606-9604-fdfbee9b90cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.81.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ff692f-f524-43ea-a1df-b7e0c933fb1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.158.216.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f4faa2-58fb-4419-811f-254b9e5ae8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.19.153.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9580e0a5-423b-4cd0-987c-b2c858751067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.210.245.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047da2df-1bc6-4ba9-b0bf-4100a2c0c9db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.211.230.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2dd7a28-ae39-492f-93c2-c95f124fc7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.99.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5a2205-21b9-4aaf-bc4d-d27afc640e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c66e45c-5e2c-4e0e-a174-2bc2521dc232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c541a29-4c60-40ec-9f23-eb42b6f5b00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ffc306-6513-4456-b84f-c1c2400c402e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91dfea46-e123-4d2d-be19-931cca9e0908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1a292a-b8f0-4f12-9566-ccf536894097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74291c7-04a0-4e0a-b0da-c2fd71f18bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ca0a2b-31dc-423d-90da-33ae419ff865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bba7e12-9560-428d-b8be-9c582570fe1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87aa0ac-0a35-4858-a2a3-1ea7dcf428e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb939a57-b60b-43c8-9dad-a0e81cbcb495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e916b6-5962-4d8c-a6cd-295229653170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd613ce-ab57-4cc6-81a4-cb502ac23d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85fc30a5-a4db-4df4-8b02-c0d93f4f42a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d7fff5-820c-4ac5-b786-c641f69281a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17264269-2c1f-4d64-8803-676b0e4772e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7e66b1-f9cc-456b-92d3-09a4a0c49b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2241f2d8-f5f7-43bd-afbe-664ccf313ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e8f294-2d74-424e-920a-fca0cc3b58d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207daaf5-76c7-4c9c-ba34-a26875054011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54927f2e-3426-47a7-8ed6-e55e1c803275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6b851b-b98e-4fe4-aa48-734e956879f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702ac903-4c70-4593-bf7e-419881bce870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0814f18-9b98-4643-b8fb-3fb86f14b551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106d3143-f3c7-45ae-90a7-fc6889268317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035625b7-2d44-41c9-8fe0-02b6b463961b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820497f5-d0cc-434f-adcb-c95dc5924154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d33ab43-8a6a-4166-8ff1-e5336ccf87ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802b84d1-bb0e-40ea-bb1b-aa08142f6e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a443ad0c-cc2f-4752-b2e0-5e6aed15d1f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc4647c-619f-4fe1-8d6b-bdc47c4ef7c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad6bed3-14d7-45f6-bddb-a3646a201051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5cede5-6c54-48c9-b22d-c0fe970994e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4280ffa-bd6c-41ad-be21-4476d43ff508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f5f1ab-f215-458a-b070-80424a5ee319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7e36c6-6631-43c1-915d-665f19e1105e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9325164-187f-4f88-846f-3eb203242c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce41de73-bee9-4f98-a8c6-989b8209aefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666743a9-0292-46d4-b3cb-289436582618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557aee89-967d-47e9-bb31-b1b32a5dbe43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82ae163-31ae-4407-80b7-0c0945bdafc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b85765-bb6a-4ac0-80e2-5ca991e094a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dadc947-68f6-46c1-8084-1c19115061f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1478d5-0021-4a29-9198-ce1e72a6d169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfb8c09-d2e3-40af-8754-a12442ef2343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2335626f-6484-4e7e-a18b-86cd501dbfde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70de726c-21a6-4a1a-a07b-38cd8325aa7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1978f3d3-c027-4a78-9390-db5f27fed2c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a850f9a7-3506-4410-a5f4-44b6b37de6df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da995b3b-2295-4537-88df-001bf28fd496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966fafff-cbcf-41db-8217-103ca186ada0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7e90c0-5b3c-4217-8200-e4403c1b023d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435a4e94-9f9b-4cde-bd55-aa0c4fcac46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ee697e-2c59-477e-b7d8-8ec26ee1920d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161f2ad9-917f-45dd-9b14-8ef1826c2053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6556d920-d83e-42b4-a4ea-cd6e5fe7a6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1b9a5a-bf7c-4798-95d3-41d5f7424675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8371f821-4087-4d6c-8f5d-ad6363085d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f908acd7-0435-42a8-b4ec-6a7df2bb6b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a69487-da58-46da-a3db-357793ca8a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d61c07d-961b-4c44-aed6-a08b2e0faec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10eb7db1-84fe-46c3-9e7f-93f6bee0afa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1786dd-d6c2-4ceb-a47b-d078bd73f457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10dec763-bec0-41fb-9969-b63dad48784b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03218920-3791-460f-9db0-fc7e187852e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a5769e-ffc1-4cf6-a899-4fe7fbaa52e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f63370-62ef-445e-a079-e44eb9eafbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c60211-435a-4060-a33e-9e966dd41380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4a754e-8d1d-4b35-b711-3170ee0ede3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce54d1ac-2b60-4b5c-a135-aa71b91f1f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0081405-afb5-4a79-929a-9eb79e7c1d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9877a9f-4849-4c1a-a073-173b41c77bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6caf56e1-934a-4848-a46e-77b885cad029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7d9a75-7cee-47ec-bc42-71862f63ea45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561d6f56-605b-430c-8c92-a5005c252ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3618b41b-7ff8-4e6b-addc-923984349a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377ee82f-000a-4bd7-bc0d-28daa72dbd85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15105ec3-0fb3-449a-a8ee-7e142ae6e6ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9dd65d-2c68-4aa7-8544-e6fcf4ec681e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8e0a8b-03ef-4a44-af62-6937e195b157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1148a63-d433-4517-b67d-50c98887f9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a4f37d-3aae-4ebc-8ecd-2842f6c34de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e93ab1-da88-4621-afa6-ebb355cbad95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b46277a-4727-4056-8fda-ac92970a5e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae718e35-a09a-438e-aa2a-5756fad75259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6f936e-31c1-4805-a0fe-5be537e28075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06934a5f-8d95-4f4b-93e1-ca2e119a19d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc9c2ed-1ccb-4fe4-a21c-093c50b8c101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d32f28e-ed50-494d-9b8a-f806a1204946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5abb10e-5a07-4be2-83ab-65e7708ce48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3c6168-1894-4d51-96e6-789b89229470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5048c835-f274-4d9c-9009-0cd29b7a5357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f2e9db-f3c4-48b5-bc5c-d8dd51e13cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2db50fc-ff2a-4516-bc44-906e35861e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237734a2-e833-4dc4-b6b4-1dba1c1108e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7817c52-fb74-4eb2-8cc3-f1659d49dd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b060bd-4433-4e8c-a9fc-1a2bf6e2a1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e203df04-5e0f-497c-9c9d-05bf03daba6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f221d70-38f7-42d8-a7a1-7c02b717f7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47c55db-9f7f-461e-ad10-31fc3c806ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b070e48f-4614-4424-a4e5-733351ce57ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e7c2de-2e90-4317-bf7f-6507b1b57739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3375f787-fd47-4ee7-9ff5-dc8c00aa55b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46d109e-1114-4de6-b09b-40767b839a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad20f55a-dbba-410d-9099-ac5a969f8579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3efa062-6740-4e0b-9d7f-cd4c7dfe3417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39b195a-4503-48c9-9029-3137b619d504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e078f462-dc9b-4b93-8062-0b13eb8efa55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c287b4-8048-47ae-990c-5ad226a0cf4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535069e2-30a6-465f-8508-60f10fa81d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc11569-4218-4039-bc00-89b3665d6806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2e55ef-d0b2-4ba6-9303-bacc6f4f6d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71ef5c3-3d3e-4da4-a0c6-e250246b64d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f0ae17-f820-4651-804a-b1a9d8f0b21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824125cc-d1ff-4767-bed6-57c814b63ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5a32b7-ecf8-4fc3-a880-9fcde2e9a5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85706cf1-90bd-40ad-9ac5-43ed354bea3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd34baa2-0121-49d9-a4a1-38faa7c705b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c694354-9067-4a96-be0d-437dbfe6fbec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e17eb4-1731-4e1d-a30a-0ab0e87be4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a1fc05-199f-4266-9e87-80e8f2f033b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64e06e7-c3a9-44d4-99e4-56144ddc0ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56926b7-77c5-4471-96bf-5f3d6ea96b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16efdf0d-4186-41de-b839-30ed499d4064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9491dc-9e84-4342-9f8c-a29ed037cdcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca97be5-d16a-40ab-aed9-6ca12c7b9963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bca913a-c747-46d8-929f-dc6cb45b2875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af383f1-561a-4d62-9ff2-327edc8133e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a310630d-87e9-4cf1-bca6-b7782dc0abdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75b8e31-5358-41ab-b362-2e622cdbcb28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7e7fa5-f304-410e-9671-c1a1daea87c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1cfabf-e327-467a-8029-a3bf00f87433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6fc558-2b3f-4da1-800e-b39b76b8ae57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b49899-6705-40ba-b276-1618b4021bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028e434a-1a4d-44c8-9fd0-3159e101d93e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df34fcfa-7af6-4fcf-84d5-20e7de489864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e55977-922d-4a7b-a4a6-06b77585a51c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81db7418-ff15-4c06-8979-85c6abf046e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e19395-7fa7-4206-a9f8-b62a041eb229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97dce87-346b-4b1d-b0f9-5eb4933553e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94d36c4-637c-480f-a02a-7a29f4b54a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ed8bcb-44a2-43ff-8970-0fd0f36ace69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ece85b4-a093-4451-984e-50d3db2d73e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8489bf54-7518-4135-a794-34998edc4e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e24978-f2a8-4fbb-b840-f5a51f93c172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059e706e-b14e-4b00-abfc-6c9b4c5e3cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95978fca-18f7-4cf9-932f-f44c12df5936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b726cfd0-e11d-4d3c-b2b5-4ea91184587c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3eb7de-106f-4578-9888-53b0ce94bbcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abdef1f-1ff9-41b3-98db-9b68b0ad2091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c4629a-2c82-4a37-82a8-051f9e7f6f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528e0b19-3535-4b9c-a2be-84e7c0c272b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e599fd15-4c45-4aca-ad27-5370315715bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a58bd08-cd85-407e-8e2e-7a045330f660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74fe41f3-bdd0-4962-b6c2-ebd0c00e538b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112cf322-6b34-4eb9-89ee-fd8194f998c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3258881d-0aa8-401e-be7b-6a4faf098a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abb608f-dce1-431f-9fe5-33131abba778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3fdda6-2fd3-4be2-b920-e6dca657c7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21a8a80-53fc-4013-9927-91e333a51659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c73dbf-b08c-4c55-bcb3-e75f8ba56d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f224fad-60a7-4921-9595-844eaf8a7307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31de2e60-93a1-436b-95ed-6ee7efe6a686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bc58c8-55b7-4af3-8d76-ecd69841a8fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407b00c6-0add-4e96-abd4-4c36d79b8cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4a45b3-d17e-444a-a4a6-3f3f06396c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5694d04-15d2-4378-b202-d301fcd8f2fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d44811-6a78-4cf8-a9bf-23f74c351b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9281772-735f-4838-9812-fc0c9d3dc963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9edb31-6823-4714-be5d-df291f6ce472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7380577e-4554-4da1-aa32-a4abf7e5583e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455f2844-dd7c-48fd-b291-aa7e1a8367ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63f123e-507c-43d4-96d1-86351dedf899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f56d79-9a2d-47cc-855a-1060c13941a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f5a12c-0609-467f-aa8b-3b4c6b730f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101f9932-2243-4a74-a390-5517d9c378f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569827a6-6dcd-4d57-86fd-467207752574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d458a4-a898-499f-9cac-56cde51fb117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c976fe-8ad4-46eb-a045-2bbc04863bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0755a02-a0c2-4d3b-a2b1-ae5d904aefb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c244fc3c-2664-4c53-8154-ade0c7461017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b019f0-145c-4c3d-b891-f25d70326cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4b66e1-8544-4d87-ba4b-17e090b80421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1286b457-60f5-495c-bd13-f81fb52ddefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40f6370-1fe5-4f8d-8a40-0462d0e3cb91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7ebbdf-278e-4a9f-9456-09e7d03811a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c3626d-b563-446b-b2e1-366762cf281b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc6eab4-4bf4-40b1-b37d-cc1a2123e2db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf637492-6ac2-4554-85e1-a1239dbcffc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43186266-9f8f-426a-be4d-4848a6d757dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9aba04-b973-418b-9487-714d45914563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f65f6c-b5ab-4421-a117-55742801676f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2132d278-fad8-4584-836c-f25263d49b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85041627-f9a9-4161-9d30-b1d2baf7b426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ec6794-7d72-4ca7-9af8-c14927178e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8081b013-477a-418c-9886-a9da06f313b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91199ff8-e283-4b84-af38-cb6ea662174b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1807efae-2423-4e65-84fa-60c486160147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9993375-32c2-4102-9cc2-affef9422c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac3ff1f-996f-45b7-9b03-5e527b908916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80bfe43a-0132-4f79-a607-bdc2d48288d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1b73ec-561b-40a0-a726-159624777aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0e4e3a-491a-4233-8460-a0fe9784c5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3dd1444-245a-4fa0-9cd6-f606ebb7c0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f868b175-3f99-4e03-9811-52856aecb98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79358fc6-a1bf-4f45-b051-bbaa713e3726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f12aca-741c-4317-8069-e42a835e25e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc55be7e-f21d-4b37-b8cf-19ea255587dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f00d5d-babd-490c-826a-554fef17d1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9fc6a59-19de-4b4a-9af8-11a066ae117d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3933e0c2-1147-4a29-af7f-7ef14347d12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c613de27-6dc0-46ff-8809-7614db649708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65eabc4-f7cd-4948-bfdc-d309b1c80797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26685b5d-983f-4984-9cf9-756300f9195b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56340d6d-d67c-495e-b9ee-8686931addb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17202cd2-7baa-43ad-a03e-ac1a27dc706e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103ec335-a872-4308-b583-a111fd7c34d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3faa7d6-7563-43ec-9730-9fc7eb3b0846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e49763-8894-4403-a5b8-7bd8223ce5fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c02b17f-f550-4dd3-a235-ae4457b61f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ea6af1-9479-45d2-8d47-4944f104671f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7da0ab-32b6-4dfd-875e-3fcb1c5c5557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23fc500-c239-4e63-a0ad-cfbffdf2a203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca27a20-c373-4550-bf0c-4fb23c631acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178764a1-0cd6-4d0d-ae8b-b7ac374d8b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc22840-1054-488c-ae08-e8675584fcd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0238ed-c127-4979-ae14-66de9bde1526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00ef87f-0fef-4956-813b-3d399f390c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e576a74-4c8e-4083-b234-6c59da10bb23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ba4965-2e5e-4650-90a6-073286e7da39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbba2597-1912-4659-9f69-f1e31e5d2242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b24790-e9ae-4563-b349-dd14e10aa664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73184276-69a2-4a03-be8e-e41d3cae1660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985ca424-a4f8-4ad8-b998-b7ac52635fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335c7b5e-efeb-40cc-894a-785c6220e65d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e201a1-9014-4ffc-baab-4083139f4e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60654fb-d472-4cdc-b823-6b8584333f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24f69fa-ef08-4917-ae33-fcd403432c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad0911c-3218-4a6a-a800-47203f29b9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb227c1-23da-41fa-81f1-ef719a71fe09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17706f0e-b3d3-48d3-8bf4-35646bed19d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64477047-7765-47f3-84b1-4b9de2f3933e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09394bd-3e1e-47cb-9fb0-eef43e284076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbbb152-4bb7-4151-9c61-d054ef749d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07241afb-b655-445d-9afd-16db6de4122c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7171f2e-0f0e-4c86-9c8b-5f26206e750a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71de4124-2681-4b44-85f0-0ae63b43900f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2aff1ce-173f-467f-a1ff-5f21186ded80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc713d7-5a27-4cf5-a4d5-8094f80f9963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6174ce0a-51b8-4675-8855-90496e225b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0641a1d-42b1-48a7-a285-0423feeebb4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1275c23a-00f2-4f9a-995e-9dcc6ce4bac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66fa0c84-e484-4e23-b922-b41ce8462bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7dafa78-8c23-44ef-bb93-8f3d5228b49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645005bc-ac1e-4572-93b5-67de10800376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2535ca6b-1048-4304-bcd1-200efd03dfab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b883723-a515-4248-9ade-09af2df2a36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404065e4-f18b-4aca-be74-c44500e35a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d39fcd-220e-43c7-bca9-941dbe55e0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4ea7cf-9388-48d3-a6e5-31063f209d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750312fd-1bc2-4b5c-8ae4-dc2faa884a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cf2e0b-2b3d-454e-a875-008c18b12552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644a4c36-f602-4443-9f8c-9e49c24fe57c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7517c4e3-07c4-4c88-ae32-4174b480ce82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31104739-6290-4be8-9564-36144e194d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471de689-1ced-4a25-b197-375201d0690e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c44658-9f2c-4324-8284-f63ba3988d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504cc505-0363-4a6c-a9cc-153c22e0d9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec3d6c3-66f7-443b-a3e0-9e110a19e441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5686ee77-1b9d-47c5-85d9-fd1bafffd8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50fff339-9218-48d7-b307-7de3c054be00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ebf9018-8e6d-4652-844e-eb2b5d6b333f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe907e2-9baa-4f10-93b2-3f09979e51d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c5605c-e5ab-45c5-a45f-73ac01cefd47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ceb172-499f-4132-ba93-bfccfab3d5c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2486c64-a270-406b-b5d3-0103469871bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1285214-13b9-4faa-8023-8c5f45dd4632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61849ff0-d731-4482-a1bc-eeedb4b72022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d577c2a9-9b63-4195-bb58-d60f35254ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a844ce64-7723-448f-aeb0-44bba830260a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5773c1-5782-4616-aeca-ec3aef75c587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1f8a24-3877-432e-88cf-62df0d6b43e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3439fe46-1834-4788-a45d-4f5d75cc44d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d5d98c-8122-4b2f-abd9-5569961dcf4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4c9c6c-a9f6-489a-b6b7-fba8cff48e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ceb0998-9bd3-4893-ace8-85b1bb5bfc3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe17639-829f-487f-8b86-8a87f1d4c3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9545a37-616f-48c5-bd06-d22a76652b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24e8bcc-0680-4bbb-909d-be7daf7e468b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b51c64e-3cca-4328-93b5-8eedc5674b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6747e4b-bdbc-4c08-93fd-013208b84522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9234fa94-f1e1-441b-9411-910d6f91da5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b67f49-ef7b-4c88-8880-494f9ae44634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a9a72f-7c95-499f-af42-682ef9ffb445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a4f0db-50f6-402c-b4d9-192cbc7b5eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b5919a-73b8-48a9-a704-475b99289e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee008ee3-ba81-4de4-bb0c-cfd626096855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bbf108f-7f89-40ca-9038-2ed656437b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22d6472-a98f-4fd4-b4c0-1dbf1a64b2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245b71ba-5486-489b-be3d-3bef1506955f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe41d0ab-1400-48f2-aa04-dcc45248ab0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce92ef37-daad-4f5a-881a-1212ade079a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70cf6ee1-bd8f-47ac-9d70-f8418dec85ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68561b0e-921e-4ac9-b3f6-b2ab1bcea30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ab8527-cadd-49c0-bd0d-27ab6097866e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecaaeb9d-7635-49cd-926c-df72d2a1c9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67378a45-ce4d-4f8f-8780-de7e3e88a8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67a26f7-43ba-43bc-9af2-b43287c574e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30605c89-b78d-413b-8123-7de0db08ba3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0723305d-60cc-41b1-8000-a4e5dd85b520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0636f501-6c46-4913-b914-0289f7a705c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7dd0c6-22b8-4d70-aff0-acb8abd1b293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3642c1-634c-47fb-b1d7-d050397b62a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f3236a-781a-4d74-b345-46e57e82936d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20187aee-9765-4218-acde-f23db31dad95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec2c3ea-4ffd-4682-8b98-28228ec4cbd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05331cad-1b27-4922-90f5-a689c5b17614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbc63ca-7f6c-4e7b-970e-409e16def28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba68edd-5d50-451e-8ce9-fd9987b0022d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc0b685-b9d1-43e8-8a47-7164678af094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d4e613-4be9-4282-b4ae-0db12aa64760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a5daa5-4745-447d-868e-e6d8f3378273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f51ecc-af0c-4677-a51d-f2186308ae61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ebe307-70a2-4c4c-b35b-1719115b6d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6af2a3d-047f-4542-995c-2d46fa7869e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b64a14a-56dd-4100-aeb1-02906c3a8b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2fbe8b-47da-408e-b916-9676d5b2f53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74439513-408a-4f04-a5ee-908e772fcce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6533452-c67b-4edc-addd-749f50d03830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64bddeb-919e-422d-bc06-540ff62f289c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4baf8d3-b105-4fba-b1dd-443b3d216af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0817ea2b-1db7-4b9b-ab4d-55037cf73241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3aecc68-93ab-4cc3-9d13-a7e599b11322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7ca631-c297-4620-be7b-8dd53c2c6a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7f769c-2eb6-4d24-9081-0c30cab5d3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d4377f-3a12-470f-bbb9-559a23937568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fac143f-18ab-4fca-a59e-b91f6f4fea21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbe56e9-46de-4180-b303-5db72363de94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab188254-dc80-450b-9147-b1d8308ca874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3450f6f4-d85a-4c77-bcf0-4113ce46e239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c458bd0-4cee-4834-9bb7-3e9d95db89dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b97e43-af6b-4f0d-ab34-c1c1ef455781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afdd6ab8-d480-44b5-a244-c9d9bc9934b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3f617b-e0db-4d33-b2c8-b602ee6944b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f4e7c5-4d1c-4369-9a39-231019b7c87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4e1837-2172-49a6-ab76-0d8c1da8841b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793dd867-a2ff-4cf3-8e59-b402d7a13b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f41098a-ed67-424e-aa12-3ce1f9aebb61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d32c846-9658-44d5-861c-dd0c5d602617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--914b60b7-5d3b-4274-87b7-4e3dc6e98757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2073f0a3-8792-4236-a5db-cfa0b1ab0e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5cd520d-9780-47df-9cf3-cf89296bb7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2b7482-1dcf-4116-a2d8-98e3fb3e176e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7874b377-c601-4118-9215-f6b76552a82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1806f88-4bbd-41a5-9bc6-87b0534f91ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1dd2362-5b0d-4a34-94a3-6c300e499b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3661453-258c-4ef5-9ff7-184e2a12ffb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f294cb21-a0b7-4d1b-9e3a-5758c683fb38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b2ced6-3a47-4ec2-b326-929a98ccafc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6e9e79-a1c9-406d-8dcf-9a507525ecf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac11526-3e3c-4b9e-ac33-d1b6a245e99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32855dd1-c56c-424c-9cdf-3aa3b06c7244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.16.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a235ea1-f204-4a0a-8488-c659f8360225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d73305-60db-4d5b-94d0-1c078170df6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be08fe5c-6994-4756-ab3d-866337031be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff977e5-32c3-4ce6-b7f3-1c275087c073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2847c264-cf80-4a33-b9ce-65c24a9b3222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.116.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daed682a-04e4-4731-a8ab-efa371beb754", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.147.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2921fede-9ca5-4f8d-8052-12126d1d8077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.174.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e4ec73-549a-40cc-887e-0ef99b792626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.254.141.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5268e08f-780e-4487-ac19-04fb011daadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.4.163.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ce7016-c62e-4a0d-bb1b-ad20b06636e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.213.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a55c846-7206-421d-b750-630d99486b2c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce79d878-8177-4010-a0fd-8848468f0f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.192.50.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421215db-075b-44d1-b7b3-efb765af9274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.223.54.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c5114c-4bd7-4472-9c8a-7ecb349729c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.223.8.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b117ec-8a34-44d4-b2f6-3dd2dfb886a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.5.210.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89006b5d-79de-4144-981e-43257f16a2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.61.208.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3fdcde-2f84-4dca-8233-37f7ef747306", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.61.30.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7a518d-0845-4b45-bda3-1dff29d5e8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.61.30.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b28558-e2bc-4376-86c1-9e4a7ff2822b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.152.39.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619ae033-0436-421c-b1dd-38921b40cbb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.152.39.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da29976-eacc-4153-b913-4f180cf2e6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.163.98.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60fd0d42-ed80-4a0c-9719-642fbbddbe02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.215.103.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8de6f4a-6de2-42ad-9384-1927b8fe88c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.68.108.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32f5f0a-0649-4b41-b75f-57c4a87ef206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.138.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581880ea-6707-4169-8b8b-3e9a3d74c75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.190.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a381d0-b86b-436e-93f7-bdcea37485dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.196.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b82003-76de-4dce-9f23-d08f1f6d8c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.216.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d6e1d3-f9c6-4c7e-a0b9-077593d14d80", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.233.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c10dc49-ab55-4f97-bb24-037ee717e64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.237.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e0bdae-a45f-47ab-b8a1-3bfbd51d5ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.117.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a01848-ffda-4e30-b7e1-2b5da7d785bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.150.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d8875a-99d4-47b7-af2f-f1ba133ccdd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.161.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a22890-5dd9-48a6-947b-6d76a096a8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.172.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c10c83-134e-48cf-94d9-46da55313c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.173.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e5ec19-80a6-483e-8a21-1cfbb63f7c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.186.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d0b015-6d8d-4407-9151-b72301ada982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.206.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3c425c-9070-4aea-96a9-7055cf634ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.232.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55feeb29-9aae-4c45-be96-74a206e59f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.233.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694513ba-8505-4f9c-a40c-41b41b11bcdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.86.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aae4dbe-8f62-4f5e-9826-79bb44503ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.1.65.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac27b892-4101-47f0-96f5-f139a2d1785b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.140.240.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2047fe2a-7cdd-4469-b88a-daa11af002cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.140.240.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662f3398-7f8f-49f9-a850-559eec341e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3563dbc-3eb5-4669-a353-83d311dce208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d43d74-3e23-45d5-9347-615a7ae69f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660b27ee-748e-48c6-a96c-a2599590d7d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd81e989-eac5-455f-96ce-f2d5f4f7b29f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47970b3e-5863-42f8-a42f-d7e9a2b89c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f918df11-9a3d-4ec9-8456-339814e8cde1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9dd7dc2-0cf5-4b5c-bd1e-550b561ad9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eff680c-1460-49ab-91f4-2eb6fe865bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e56f3a-9924-41d2-aa54-cf0e23f86362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3230241-8bc2-4a80-8a38-3db0c77e6198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92627e57-8bc0-4275-bf7a-9258766a2392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0201681b-da80-47b6-aaa6-2901c1fc6cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d7b58a-6e04-4992-8eea-05afc7f8ee88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0d604f-59d0-4fdf-a834-7f4e7dcdb4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.118.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6aff2a-0ed9-4716-9a07-deb9664245d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98004933-de65-4529-b9c9-64e300e5ec11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91592bc2-2e76-413b-a4ca-3b58463ee5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f601661-32bc-416a-bd62-4a5b0558153e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932096f4-e825-4525-82a5-156cfa0c76df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c516c44-b96c-49a6-aa69-e2ebc6d705d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c3d16b-9ccf-44b0-a5d7-aa63562c4a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f687c9-b25a-41a4-ac52-e1632b439e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef0d961-5ed5-44fb-af2e-593b5b8f5ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988a00c7-8278-4f69-847e-f9fd4c4eb4c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67873d7f-0c80-4788-ae6a-946d9ffec6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed551679-b355-4c53-b036-7ead01a336e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d722f10-1ed2-4567-975a-b04f47b0bc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4045930-2dff-41b9-bb49-6fa44bd39956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd837846-f62c-48eb-a667-b9e94730159e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9629faa-59e5-4788-9169-06e1b9be3664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c741086c-aeb0-423a-9d5e-0b17e26edeaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1affaa77-81ac-45a4-aeee-90477e0099a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e809e2ab-b87f-46b3-8866-588234ef442e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a9b480-6ab8-4f57-826e-bbf3149d0ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b6120f-1e19-4a0e-99e7-a1cc2c04e06a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a3faf1-57e2-4407-a16c-17c273835662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbcc52a-6065-47cb-b3c4-fbc545515cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ecff90-76e8-478f-ad8a-8fd98e3124bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc91264-cadd-4691-9388-720d6497dfc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3538879-a482-4c4e-9558-ae4a792ba519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef22a6ad-ba6e-4aa2-bc92-b8bdbf8a486a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88c0c76-50b1-4e39-b8b1-e5d090ba8b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498541f4-8378-497c-abf5-d984a3700b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376408cd-194a-450a-b2ac-2346c3fd2c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dee34d2-bf11-4f5d-9ef4-896332c464ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd0c7b7-30e7-44c2-b9b3-82b5c6e96908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e8ce1d-c259-413c-b3d3-61b8fa00b0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edf2aa4-0a26-407a-89b1-fdcd8db3f3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8884443-1045-43f1-8838-2a3623ac86eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71444b57-7c47-4a1f-8389-39f21934bc72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ecc28d-3993-4f21-8cf3-b1c737fd39ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fb8abd-438f-42bd-9d1a-e8771d9aa89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7daf59d5-910b-471a-99c4-1b80e30b178a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0719fd16-3fb9-4a07-9dcb-7823255e8039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcc798b-e18b-4d08-aed6-579987208079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cecc42c-7787-4578-9655-f576b07ef929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4546f2ef-1805-4449-b003-e2cadadab39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c83a069-6de0-4e17-9e64-cf37db7022d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.136.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bff5fb9-8dd6-4e03-bd88-ff88e866e9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13373555-33a2-4c6e-be3f-8e2b526f0c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d81abef-756d-488a-adf7-f561c5d6c777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96b384f-fdda-458a-8b96-8520a699b0fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d717809d-17c1-4708-aedf-853dd7b17c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428651e4-ca96-4b6b-bca4-c0e1d1ba1374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692d4cb4-620b-403b-a6b2-0557fc83c47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829103cf-b9d1-4c5b-9669-481041f16fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c065f3f-154a-4367-8082-55d6dc65dfc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ed3796-89c9-4d90-8233-fc4341fee255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.152.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6167d3-eb41-4285-a715-d6ab8e7e9b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3000db90-b878-4488-8d9c-84310075d80d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfffa7cf-e320-4028-b8a6-9334ceac3b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6175cac-1648-4d37-8e85-65d84ec219f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11bca54-7392-4222-89c4-0819fd2f288a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8db3d1-3eef-4553-9636-8dfc49a40e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43e5592-b8a8-49eb-bee8-c4f136ab1a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc93e2bb-232c-41d8-a6c5-81aeae78b4fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60089624-544b-48be-8fba-d3dc79c80b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3f3644-d1da-49de-afee-2557f69d81d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bb9ad8-9858-48b2-a225-26cd298df51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d55ff0d-075f-45a4-bb0d-607cf0dc6d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6500ff-8e58-40e4-848f-2b03077e5a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25964940-945e-4d54-b094-606cde09a2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad6375b-7735-44ee-bfb9-8e975b588c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec77ce77-709b-4c96-b756-83c7026d5ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eda21f4-a11d-4259-b03a-4466d104c67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1169f8fe-fe9c-4e19-8e80-3feb9c40701d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fb3ed0-e3d4-41ff-bef9-c889f1d7fc37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515e2cd5-f77d-4c63-a20f-b1c35ec98efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee58f6d-fba9-41c2-b857-2b36e55d7065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd09f9f2-d62e-4075-84cb-9729624388a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b38a639-5b48-474d-934e-e670f2a438b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d509ee2c-bbdb-47a2-98a5-effc006f13f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67794f0e-1a12-4387-9e8f-6405f512d66c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ccaaf8e-413b-46f6-90de-cedaf8c08265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84edda3a-5e71-4174-ae27-e6625515964d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90204c2-fb25-41ed-bcdf-e48881325af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ca1b35-c066-42dc-ac55-912570d68a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdf4fbb-b3de-4721-9f63-a6ee22884d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b6414c-f52f-4bc1-96b3-db76780aa442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71dc97a-7a20-454c-9969-8b065f5b0d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0fb78e-f1be-47f6-ad9f-623c1672e74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4e7e68-393a-414a-a35c-e2bdd3eed0e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7589f8-91ac-42e5-ba5d-ebbad487f0d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374ac8f9-a8ee-49fb-b4f7-35778bd74728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f00a5cf-378f-4f61-9174-7499dfaf503f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1d4867-1333-40c0-997d-95e77acfc550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bdc4396-a049-4a4d-936a-94f0ee32565b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f730ae7f-1f72-4626-a99b-b49fef94eecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d77eb9-b656-4302-afe4-62ecb3f2bad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1d2e4a-bcd3-4f8c-972e-db785f84ea2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02da55d7-9902-447d-a689-cd434a3cafcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7014b6d7-3dca-484b-96f2-664ecb17e740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11210af-6cb5-4d7c-b154-62517be76a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc53ec85-9821-436a-959d-15023103569f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924f3370-2aa1-4a3c-b74c-1c24671e9e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1a302a-356f-4d56-bac6-73fca2f933e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ad0870-7894-46e4-bc19-6bbcd29803bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65f852b-4e1a-438f-bf25-99bfd8d851c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51bf81ff-42e3-4ac6-9cf8-36a4e24e7a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c1fe2d-2184-4e66-bda8-fd57db347c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911c8824-de6f-4fba-8d14-ad51949d7e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2789f831-b0cd-4e51-bb3c-9be05210217a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca99678-e4c1-4023-858a-b4bd4f40b259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1904d2-749f-4aeb-8fd1-e3ea5f0ed845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32b6467-65df-41a7-ba50-84d2e15967a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a13f60-292f-44fd-9cc1-275b394f1ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e40d4c-7e72-4584-aa4d-c730de8255b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1820c454-b6c6-41da-9ef2-ba747cd0a177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4dba1c-9c0a-4522-a1c2-cd8f37fd0a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4826d11-ec78-4d66-9772-74ab37cd7e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45acb781-f4ad-48b8-9f4e-e5671792c554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bbd361-d769-4e39-ba47-780aef4191bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c844f6-5874-4daa-8a10-bf2988e857b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6dfeb77-6415-480f-ac08-c349e73af173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424fc716-4b43-4d50-90eb-a5e1b27f316b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae98264c-d9a1-4a93-abe5-d4b7371f5f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed533683-f1d5-4c4b-a355-403c711e602e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa46f07-3f62-4189-be8d-4251e3e9fec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3a3d75-5231-4b17-8b04-a2e236983943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a0b138-6f49-4b47-806d-405a56a041a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d295756-f129-494e-9d51-f44885e8c842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c00e1e-f629-48ec-ad4b-7738393f20a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bceb9bdd-0106-44dd-ac98-4ee872ff573f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6eef098-d08d-49c0-9ecb-cdda0fa63878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4607bbf3-dc54-410d-be13-9bd852b668f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fac6c04-6d4f-4799-be80-19b53590c66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccecfdb6-0424-469d-bc26-e6a139be7943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa68044-4d2b-440d-87b0-a91ff7e6c085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a392cda7-051d-4848-8605-de23dd5ea806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81967e86-fdf0-44cd-a9e5-816c0b06b8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5c8b5b-e182-4157-aad5-6b09c14b0dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654a6609-00fa-4924-86bc-147b0e56437a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6563d1-a15f-474e-8b0e-42800c766bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b4d377-00fe-4e0a-a77a-4fedafbcdc26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a70fe3b-9bf2-489a-8592-b5df06efc533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7894a4-56a8-4ee5-b130-3551339ada62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cafc41-e56d-4ea7-8bbe-68cff803843b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1dfa85d-000f-484f-9b6f-40e94cc8ab20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b295cc0-1ebd-4913-a1aa-b591a002f54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cacded1-3637-45d9-86fa-32a8ab03af2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b784b1e1-0c1d-4f93-a50d-e0259c6dfbac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca8e3f3-9c1a-4245-a355-cb54e90802ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f21d7a-ebc9-464c-9556-35569afac929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924f39e7-3681-46a5-b3ba-dceca713e0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce414d90-806a-44e9-973b-49851730640f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e08085-1684-49f7-b7ad-57d9b5ebbc95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b88d785-3b96-48e8-90b4-a3d20535e068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b049d62-45e9-40ed-8860-7510cc3b023f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68cc05f-fc75-4583-89f6-883f67711dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdb91d3-fb7d-4b6f-a3cb-c359ce258925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc79d28a-af7c-4162-b32d-82f7ac00e1d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21423e11-3560-4f24-8999-49f3be89ecf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3108fb05-7a3f-45a9-9b2c-a377d5be369d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d145ee38-9995-4af6-8a54-d3b58120f282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60bfc391-7f1f-4d62-9d1f-36ff87f45b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5bd743-be2d-4f48-97ce-8ecd52f2e051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1a8f9e-42bf-43cc-8c75-e745d15ad08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.179.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0865223-a132-43ee-a9d1-6bcae95e6627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db8ad9a-251c-4938-9e42-ab6d4422f2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164e3aa5-ad98-4891-ad96-6ff5805d87d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef224fb-3110-4f10-87f0-ce974d023ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fac3dd4-a93d-4978-abf7-dc815c48a774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ccaf15-d7e6-4635-95e0-808b9b45fa36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52d141e-d019-42da-a353-ca53f553fc42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9a9375-ecb2-45cb-8104-cbaad941d835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76427f82-b7ea-41a2-8a2e-1f7ac80e7945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf68aaa0-9248-45f4-91ec-2f541df26668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbca3787-ee1b-41da-997c-f0cc5c495285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5ccde7-dd8c-4675-bdf7-76404f0e5189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927ca40d-78ca-4e03-8d2c-a5f3721bb77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422c427e-4ed1-457e-aff6-11f1e2d58a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07415d33-2972-419f-97de-7855a93f6ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314fa0d0-ac6a-446e-8bf5-ca4702b2573f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18a3182-cb35-42a6-ab7b-da4e1dc1532c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0526d110-e2e8-4191-8912-7fe5ac9b783c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df80821d-a01d-4af7-bbe9-8a43e5afd960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512983e3-5343-48c6-baba-8294e7482dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586b352d-0a93-48b0-9078-2cee29f5fc82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337794c2-ce93-45dd-b92f-3bb12b0248f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee123cf5-02b5-4979-a7cb-f97852fdfaa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf355b6-2ce8-4177-be63-a31182f4a956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95d0750-ba79-48cb-a3ef-56ab4db5dd6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5c227c-5104-46c3-8687-68e3e8db779f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f67548a-dc6d-4b6b-ba5e-52547ad44dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2b59dc-d83e-4fa2-b94f-b30505f14081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac29a7f-ca57-44aa-a924-c2acbb2e8fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74268fd-fefd-4a13-8853-aff47ec47e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2a3368-75bd-409c-8f50-2d30710e3e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e87ce0-4f21-4815-b0a9-1c06588fe536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82de6cc1-d34d-4ed3-b3e9-bde0cd4c122c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f2d5a5-6632-4922-a4a3-9ee44696b80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193b5be1-7da9-47d0-b280-9ada2f2c833c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eaa1056-2764-4b49-aa79-f68ec0451115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff67dec-3eb1-4056-a71b-8b5fbc14f75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffd57e4-f472-4fd8-91bf-a0452cf0b4e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57658d8d-7a24-4a79-bd10-4d940175fe4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a7c094-4328-4176-a2d8-c4289e4432b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d32da8-8eca-41b9-a3bb-162f1a5bc9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faedc300-3dc9-4678-a78f-23072706f597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee24d056-2afd-4a18-af3e-7bffca715c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b4a9c5-a131-4c46-915b-5d53a0cfe8e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6569c58-88a0-493d-9782-36cceb7ff9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6d11f1-dc1a-42b9-be1e-a29f0bf7451a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a0da69-c694-43fc-8a6e-816e88578f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678aeea6-6a26-480e-8e59-fa6c6a4dd507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5fbb1d8-32c8-4482-b5a2-875bf2ca5227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.32.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5ba841-30fa-4e38-963a-1180281a0faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c388b81-64bf-4aa2-857f-4e49289b07b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795ac4e3-3172-4214-af5e-82b2057e2bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b7fa9b-7760-4281-b974-582bbd05f9e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b87814-bc16-4ec4-9c9a-c3d452b363e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233be00d-adda-46e3-be3f-23532a3a623e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d51a66-9744-4e14-aa21-71202cb02053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc01e0a1-f159-4bcd-b8f3-5f976cfebc14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14f6c55-68ec-4085-b1d8-921c11365791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5580503f-987e-4475-96e7-2793ea641286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55578979-2f1d-4568-a380-03703c701720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daef8f22-da15-4e0f-aa54-29de6b2cae2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02b641a-fe64-44c3-8474-48fb3948660e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db32fbe3-ce43-4d2d-9281-2611532f7da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a35e9a7-a066-41c9-9c7a-21b65181e47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee07cd6-aef7-4828-93c1-4811fc6fbe41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b517e987-7d8e-4477-b532-464e1e170131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a1f647-5225-4fd3-8f17-0f518f807c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba2f842-474a-4f7c-9018-7318461539f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d28ffbb-fab9-4f30-adfe-c7a34ad65fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6401fcae-ce45-436d-8741-ce14df83195d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0eeafd5-67b7-4261-8ad5-a5fb9efd916c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2d1e86-59af-4c9b-8a36-65de4ecba521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dadf5195-6be8-45da-89d0-3e630f5ae501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7315bc4-fbe2-46ef-9e5f-07f2cc3bb0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e0293e-f7c8-47b1-b257-825b38862ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe946049-baab-4558-bfaa-3fbc8b67742a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a390248d-b954-4120-82a9-21f9307e9c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f285d73-17a0-4d97-95ab-2be9643298d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6ee45c-fa5a-45bd-9c63-06580fc0966b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1608cd27-fd34-4684-93f0-189e4b6319f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b766c7f8-ebf8-4539-b23b-4e45b77d1b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70eb5de1-e60a-47b4-9b74-cd95dce4d799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db32bc52-5add-40ed-bda3-bfe63077e4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.49.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1563ae9b-048d-49dd-bd04-79cd0693982e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f883a06-ec0e-4513-bdb0-592f645f0684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29295e7-c0cf-4d54-beb1-bd91f2494957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1fa07a-274c-4b65-84db-e81dfa4dc17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc7a445-0fd9-4a85-845d-1a630fceee28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df15eeb8-5e2c-4ea1-a716-1d2e1b2b13a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6dbdfd-8f9a-4ec5-93ff-3b16a0e42057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5e6851-f8e9-475c-925b-9f05b9820e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0be993-8814-443b-bb38-38a24714a80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a8f477-5b2a-4549-bf67-b32964752c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8dc31a-d5f9-410b-ad20-a666c771fdf6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.101.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b52e8b8-a3f7-450c-8c07-f725b121ad59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.207.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0956db-d7b2-427b-a070-d21c2d60a890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.220.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dff1cd1-e7a6-42c3-85f5-87ff13ce2903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.236.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcafbee-3c22-439c-a0c4-c18e1d2b7c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.44.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dfa770e-9c1e-4d83-b622-bb5a82a8919f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.45.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c72f64-f110-4975-a71f-8896f46a154c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.57.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1e9881-a097-4848-a4c7-6064b8fc036c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.60.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9a5738-fadb-41db-9ce8-e5e426969e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.187.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0076fe1-2527-4ac9-a62c-0b09ad05ccf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.209.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c98e7df-c970-4f7c-9aaa-92623ad72a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.47.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0400d53-b8ed-4a12-b10c-427ccebbe076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.85.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b54f42-72e9-4462-9b9f-ac5f4f5d1628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.107.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc4e94e-5da7-4d3a-b8f8-9786f906d28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.148.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e672678e-e986-4472-b50c-96cdfef7da24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.153.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82776f36-8b7d-4e63-83ea-11a5a517b6c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.33.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86060329-a048-4f60-950f-2a5c3d4c3e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.39.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183a9b86-7601-4f97-88e6-66087e4027b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.67.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629c5ae2-5da4-439d-9483-72ff8f74d9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.68.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5038d4ff-0829-4897-8b35-e21f4e0c037d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.73.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae000c3-986e-4eb9-8b82-972de7adeb4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.240.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d5ed27-63e7-4bb3-8cae-a6b9f8cf4f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.246.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4cc155-8920-4960-85b5-244e77145216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.248.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5a3b62-2627-4846-9179-23e64718a48b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.248.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c09bba1-fb16-4d0f-b81f-ac8ff0cd729d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.62.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ad2ac2-a90e-486f-a388-f0f39d7943f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.186.196.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe2a6a2-e4d5-443f-922b-903088ef36d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.88.41.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df1568a-5a97-40da-ba4b-b2ec497ee5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.104.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63b306c-0b4d-44ee-b44d-ea6110b4f85f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.108.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe782d4-e717-4c80-870a-6a71ddcc4aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.143.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4590147f-fd2a-423d-91c8-46f255d19d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.157.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277891c2-ad17-4462-ba13-4ba8a3ce2b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.189.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3366789-fa0c-49c5-bdef-7210caf24c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.23.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0104fac2-e0d5-4ba6-bc42-7970564bd1b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.239.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da3c2e2-7915-44a7-9de5-2e1029597c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.106.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012f9ff7-fd0d-4e09-94e0-2ba0d219039f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.111.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c821925-c677-4a44-830a-a25acb2463de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.135.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e77a59b-fbcf-4691-9fa7-ae4e932f3b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.142.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed61c1c-3f2b-4b34-afb7-d45a61c22895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.16.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1bdd1d-c6a8-444a-9f56-c2cbd79fbde1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.179.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccf8d28-84f1-45dd-84e7-aa735ed14ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.236.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fcd96d-2d27-47d7-b9d0-8a6257c5bfbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.239.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59f33e3-64d7-43a6-8df6-2b5786e48ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.57.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ccc7b43-e8b6-4980-b90f-713f7fee3337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.73.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c52638-7b24-4590-9064-d66b19537732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.75.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f72683-7b44-41eb-ace4-d74eab1d38c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.111.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041df810-6e07-465f-bfd3-f665a2fb0780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.70.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e10416-2868-4424-b896-66c440ed3950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.89.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef0fcb6-bf81-4f04-91f4-9adaaffba7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.165.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e20687-09bf-4adf-85ae-a2917652c232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57085a02-d71b-4a18-a230-c90e0bae79b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db31bdea-e49f-46b2-b824-420bbb01e0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1374bd9-61b8-41a8-ad6c-9795aefec460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db3b27f-7cbb-469b-9a66-40857c0002c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477e2190-f816-4cbe-9aec-f5e24793fe77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3539bed8-ef91-4920-a50a-6c995b2b61ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd94735-421e-4d27-a975-cab55c05af39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f7049d-869f-497a-9f2e-9e54817c48be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e266b073-45fa-46ac-838e-a4b9cd9d9312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9ab897-f89a-4b26-90b6-5b0b5a274ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c710300e-a478-4981-9492-96a678bbd6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61298e8-80fe-4688-bc90-902450f40e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13335c98-f8a3-4cd6-8040-1d79343cc718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859ec0c3-0640-40d2-9a1a-c4dde183b528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e747d7-a988-4ca6-8302-089d5bd1441d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d07c96-a0bb-4228-8ce1-276679f31b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda1eae1-41b5-46c4-9238-400ec7ac622f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294a7e09-b085-4b26-926f-76ee534214f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21a07d7-cb4f-485f-a444-b00ad311f460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2644be21-f8e6-4e25-a56d-69af4c5cc0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b2ba15-6860-4b62-ae0d-9e798809b7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e299fa91-c922-4d72-85cf-0f7fdb59f18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f904afbb-3efc-4c55-8007-6bb286409821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8034dc-1224-440a-83a9-449d3e2cbb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c24fee-83dd-4031-8485-1668658f87dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92205957-573d-485d-94ae-3c75e6b13f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d956854b-ba31-4772-a24c-a0e8b1f4781a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27f689b-60a4-4d47-87cd-fc9b18e38369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d91ed1-f13b-4b95-8de5-0d03fc55a925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8271db8e-e13b-43fc-9201-472eee6824ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82dcdac9-aadd-4364-af97-fc86c12ec9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26977f82-7d55-492e-a63b-fa8efa44c37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6143834-d28b-4409-8c4e-6ca4c1086f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47545f33-a1a5-4b31-8e31-b0a703d8ca29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f9880d-f20d-4959-92ae-1f6fec326754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8941d482-d5be-448a-8f0f-142a04378ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c6db73-f2c9-4027-9e7f-a94291775e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808422db-57e9-4a9f-ac64-2b419edc7cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd18cc7-089c-42ca-a33e-88497c17d573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8e7538-13fd-49de-b9b8-ec70054a8465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048ba179-ad8c-46f7-a8b8-baecfdd49055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b835c2-055a-4443-80b3-45ef62d3ebc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f771e09-b2f1-4aae-8e35-e01b9f0ff3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dafd04a-9aa1-4d57-8f46-6d1bd964ce46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5278a3-9b82-43df-89f7-d2d884de843d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf444a8-8232-47ae-8e79-da0a51eaa2d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f966202e-fd7a-40ff-9e25-a18c0c7a064b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a83701-9379-40e4-8686-bd8ce40262e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f2fb33-c35c-496a-a129-894cc83123b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b6e8f6-247c-412e-b7fa-12a85e8db0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f1e2a1-c90c-4bf5-a67d-1740df448e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81ebd2f-886e-42f1-abdb-bd1493bcb204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab345314-108d-44f9-b5ab-1b9b3860544f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bfe08a-16de-45ee-958b-9660fe262fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3757fd-bf9f-47b9-80bb-e752b82c482f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30c8e6a-7a98-4e8c-b684-05c41cb388a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08014f74-81ad-4e6f-862b-9c19155da909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322801a8-3ddb-45c1-80ce-2dada7ad6481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e165c0-aca9-4be6-8a8b-163381a93858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242180e8-88aa-4d4f-ad4b-67a038535bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2bc135-d7ba-4ff8-adc6-2f7b1ad0e5d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a049f6-b212-41fa-bc61-dd32d8e5ce66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.1.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d564ed7-97a6-4028-9d09-721c4f0d2b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.158.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdc3907-5d73-4afa-a6da-46d5ba7eda66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.169.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6622be1d-1d3b-4cd1-b5b2-9ca04b551cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.188.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819cafe1-1730-44b5-9093-d0c14ad5b196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.191.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac96b6d9-feeb-4b7b-93f7-3956d0854251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.221.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ad26e8-7564-4d0e-b3d0-503725a38467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.231.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2303a868-e040-496b-bdb9-16a4cd6335ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.72.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479b0987-0295-47c5-8014-4b0c28d272cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.93.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440ecbf9-dfa7-4426-8a3e-bbe781ba32e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.95.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328cd119-f3d6-4f37-a46d-03d9049c1be5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.107.4.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b25a16-0686-4da3-8224-a9512d74d03c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.107.42.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1383a4-bd84-4267-a712-07cd4cc653c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.107.51.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dae336f-4801-42cf-ad2a-7675f1538030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.103.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa0f792-782d-4cb7-81f9-7a8e509fd78f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.107.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e0c760-5bbf-43ef-ac09-5756635009ef", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.116.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92cfa28a-51dc-4b42-bac2-93c87967eef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd84f8c5-7294-4d42-8d6a-b74cddbd40b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.204.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9fe7d8-3527-4a93-8a6f-624058070506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.58.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8adcebdc-88d6-4ad7-9acc-c85d6fd52fc8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.61.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd93f61-88c2-48b1-bf65-e8b1279b5b42", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.166.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babb39ee-34ef-4ebf-8733-51e01e1d3fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.177.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557aff06-d5a4-4bc0-aba7-47db9a173281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.177.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4711821-04a5-437e-a810-1268295c8e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.24.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3852e773-d4c9-496c-a39e-dfe47ab9b4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.52.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526abb35-86e0-43f8-8ee7-bdbbbe83ff05", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.79.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46d6fa0-e71d-4120-b4c8-607effdec102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.112.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a505e60-afb9-4721-9d75-13cbe0ba564c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.112.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5fa0de-07b8-4a29-bd2c-45fbe31809f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.114.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3524dbf5-d44f-43eb-9f63-05520681bc0b", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.115.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--facb0ce9-653b-4955-9b53-031a90a903c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.116.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19e8e61-def8-43b9-b23a-7cf157a4eacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.125.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9d9ada-e420-4892-8989-389ceef6ae0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.146.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca01ee7f-a4af-4a18-b7a3-6080165dae06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.146.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d6d1a6-9f2c-4b13-a0b8-99291582e6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.147.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35475fc-03ea-4ace-9405-d818f51248ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.149.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d374d296-050f-4ce4-90fb-9e7e2b9cc789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.149.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f24f1f-3ec8-4c64-8ff4-04960a733bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.151.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae216851-7cee-4a3e-b116-5b47bce418fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.151.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b738442-7b31-452b-bfe6-65a6ecd936e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.152.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df5e042-f28a-4932-9902-f489f8dc1f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.152.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067104ce-8fb2-4377-b4f2-cf18fbf7a2e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.155.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ed3c81-997d-4390-9fb6-46ce7290afce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.156.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef4dff2-8363-4f1d-98d6-633bd5281b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.159.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e02a048-ba52-4c32-95c7-4b09303598d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.159.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abb4115-2f57-49fa-ba9b-eaf74aadf6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.185.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982c9041-6e7a-47ab-8d00-834c03b8559a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.186.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04491ced-9f39-4250-877d-e1105f2534ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.27.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecad8c7-f79a-45bd-a8f8-e24a8af55eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.29.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d09ca33-ffe7-48d4-a6e5-589a659f68f6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.45.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6892633f-6496-40ef-a952-9e51ffb9a40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.67.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e9d41e-a3a7-4e29-99ca-9d90857da440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.67.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727c5cc2-ea85-44cd-affd-a4c7c6fa936b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.81.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05186be4-e132-4719-8c1d-a75068c925e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.85.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155d7cca-7f32-40f1-bdcd-aca71713c805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.85.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0bbde7-4fe6-4d4f-b7c2-71dcc140e6cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.95.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ba35df-bc77-4d36-9535-019f40031373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df263a06-dd8d-4c82-bedc-c2091975a4d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.197.250.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10470f0a-f65b-48f0-b3f0-bcd27f6e878f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.75.110.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2830b0-3e70-4f4b-a184-e55f55c83957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.76.20.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b85b29a-f803-4abc-8970-00acb210e461", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.150.201.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06629b93-8da6-460f-944f-278ae0659c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.150.231.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2e66bf-47f6-4e22-b417-0d7362127cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.197.113.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78063c0e-5771-460f-9f05-46f3e22fbd14", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.212.47.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03fd0d1-e4fb-4ddc-b36e-ecd1626571ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.239.181.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f15d6f2-6192-44fe-9dca-9aeaf3406d00", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.40.102.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816ddee5-baf5-48dc-ba50-000e84ed5afa", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16px']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee5846c-2652-4ec7-801f-d79658672135", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16px;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799bb22a-32f3-4766-8539-cc200cfd4161", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.105.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973f1996-2d6a-4e0e-8702-c0841d6e12e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.143.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42da5c11-23a3-435a-acf5-3691d6268ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.187.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901ae4f9-a3bc-4ce6-9954-e85264618002", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.73.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51dd48ec-d4ce-4d2d-ab0c-1651c076a601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218486af-b6d2-44d1-a9f1-8c658f3a93a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e525c0-9794-45c8-8373-cbb0797b5d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a20180-fefb-4f7c-9f90-4232f99e247d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e54240c-8fcb-4767-8b92-97d10567bc28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ca30bf-036c-4ccf-a174-a510dd79bfc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a65a958-f960-4ed1-a47c-de6bcaf3a678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2178095-1a31-4390-8f06-f1033c73cfd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36050f7-ace5-43f4-8f93-64625a1683b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.249.217.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77625a34-5307-4ef9-9941-8ca781a9f08c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.62.100.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d277ca1-779b-444f-a130-a1eafccf8bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.130.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a8469e-7335-4ed0-a347-27d2401da7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.134.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f164b21a-547a-48cd-80eb-ef62358c6129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.137.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd26090d-274d-4d5e-aba2-ebca74165dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.167.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0f13c6-6e80-4644-8963-494b2745d6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.84.23.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6380945e-3d34-420f-b156-7f7ca1400243", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.9.16.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e650a4-ec0f-4b78-a1eb-7f92120e8bac", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.9.225.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be537a47-ee2a-41bf-bbc9-314835ab3353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.113.140.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a0460f-551e-4210-98f5-c285ae0c5ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.224.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ab9a69-3fa5-4006-93ca-cf833d70aece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.225.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad823a5-1f75-47a7-bc60-2873e35456cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.229.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b5d9cb-f7d5-4afb-bd13-94a6e41d1fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.12.10.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d335aed6-d8a5-448f-a46a-6dc78e93cc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.120.37.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3c630a-c4ca-4796-882e-c69c09060309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.120.38.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f3d66e-226a-4bd9-8887-f45b6acabc2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.120.69.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3d78aa-987e-45ae-9b0c-7797cef76c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.221.207.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4a7020-f079-429c-a257-c56b860086d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.177.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add6ef56-86e7-4b61-b32b-e94d137fb8bc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.191.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6b145d-6cdb-4cca-863f-9ba048878d1d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.193.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d188f6f7-c2a8-4c57-a85c-c7d61ff500e1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.198.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ccd8ea-8d8a-40bc-b224-ba8016d7c428", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.158.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a683f06-86a6-490a-9a54-334295da1991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.35.134.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b75711-cdeb-41cd-b625-510a0964a590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.36.7.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0088bda-086c-4503-9886-e73738fd5ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.83.252.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed664f3-5501-4ee6-b05d-10043a93e8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.91.117.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa7a707-ce9e-42fb-812f-67b305115d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.97.179.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b51e5c2-6bf1-4d08-a77f-e474c5a37706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.97.87.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c48f1ab-d416-4dbc-aebb-4cb18c73b37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c793226-7a69-4862-a4c5-34fd4007193f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.100.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192e0251-de41-4768-9f80-cb8f58fee6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7b14d1-3191-49ff-b854-74a123b38788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386b2f4c-0d26-4be0-94e8-1e5c3f8a576b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b27cb1d-df7e-44bd-b925-cdeff0f4d6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6e50d5-39f9-4e60-9eb0-bc0021fa6361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fcedde-f044-4359-b62e-7270f215391b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6665a4-5cb9-4615-93f0-7cf9119edff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57d575d-8650-4820-968a-286a33ef11f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9bf9f0-14f4-47f6-ad1e-eac8a5d8c1d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7737ae0-c965-44c6-834c-7542787aab5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd29508-ded6-442f-a55b-e976fcd53136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41c2863-c21a-4df7-bf11-e0e9d1114b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a36a47-adf3-49eb-b7ce-4ac76b872588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f407cc-5524-411e-90a0-f66deef75bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e139c7-7115-4f4c-b142-979693bf7ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c1daa1-a4fa-42e7-95df-693c54ccffff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df350b5e-1d5f-4aab-aaea-e8351df9da40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab29075c-ff66-4cb0-a96c-6e5026885f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fb21ca-41c1-47da-a571-59cebeb64f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ddff5c-aa57-4696-bc73-b89305dc8fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.209.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecacaed-a564-4570-aa69-1d8fc756deb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e8ad64-2ccb-4347-be7d-562a54a91e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.215.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29823620-787a-4eb3-87b7-67a5a51b613d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.215.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fa43fb-9b58-449a-b100-0f1b8d23a9b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a615de1-6a76-44fb-adfa-22cd77ad0f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df9439a-7e38-465e-bce4-a7f355b38498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8c188f-6bed-4236-9d04-4d4c747ec240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14cf6be0-7198-447d-8756-86541521abb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6c03fc-b706-41f5-9d1a-2d8edf09d5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1b71a4-e928-471c-8872-cae22a20522f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3109e6-8a43-4a59-9bbb-593f71f3a901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac16dd8-a978-4d1a-b07f-c185a45e0f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68150efd-fd1d-4127-8c2e-8273ec96a50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea1f633-e9ef-46bd-9295-849a4661ddda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d6d997-0023-45e5-b808-b5969239a397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d800c2e4-699b-452e-80be-672b0f10862e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8f287a-1294-410d-bb22-dbf6a5b7edd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12199e46-3442-4d86-b37e-368b8f67786a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9b44e4-a25a-4f8d-99cc-ea6449bcabe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481bc477-a535-4bbd-94b5-2aa54703420a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b536cc-7946-4104-b452-317cda78b434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.93.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aba3fbd-f8a4-42a8-a602-109cb360c394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca143e1-5de4-4f8a-b5ef-41dfcce58ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f803dbf3-502c-4b4f-a210-7c64f39c37e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26fd1885-dd86-4b3a-800f-0259df001616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.17.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b83228-a204-458a-a761-26d66886bd50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.197.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c696bc5f-83a4-4612-bbcb-845436e16398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.40.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e61aad-e38f-4f55-b9af-ab21ed345857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.219.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2f1ae8-ac17-4cf7-a91a-e71473db6de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.221.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655de51a-9297-4db9-bae3-380d813dea83", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b985cd7-ead9-4d72-b8a6-3915ab757864", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0972d1bc-a655-413f-a0d7-f3bb4cbdb11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76378e1-e700-46b9-ad31-58c3633a086f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0accca65-bb5b-43b4-bd5a-1a267ed495b9", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e7d50b-c125-4c99-822d-3733051d1403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.171.241.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194f6d0f-7cf3-4604-a061-462f60b62895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.132.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f1f233-ebd3-4aba-95a9-44a21d0ebc4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7457f712-aba0-4704-bff8-9f5d096aa30c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.225.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99abac7b-d2dc-4b2c-912c-1638dff602f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.250.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a31343-8340-42eb-a2f2-1acfa3f719d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.72.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf18b35-9057-4e57-9980-30fbe4d18976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e2628c-8a0a-4b21-9576-e214700eda81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c47058-beb9-40cb-8d4b-3df628337b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.118.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7008a68c-e275-458f-be5e-0fc0c515a8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.82.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ad887f-dfe0-4454-a02b-c49f45fc6208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651f855f-e4f8-46b9-b53e-4afc39b77eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.179.142.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14260a87-4719-4408-939d-c9999ca94fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.112.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be95516-2ca2-45c7-9847-f2be09df5607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.191.171.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68988554-fd11-4c4b-9693-ed0da44c02b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e553f1-4bb8-4987-8161-8fae2b9689ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb24e96f-e494-4937-ba8b-4a5d7493b720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.105.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebbb123-5b6e-44c8-9cda-2ed5bca8058e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d10efd6-ada5-403a-931c-69da25220070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.114.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af98e25-6f8d-4024-a3ec-4f1aef6a9688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e4da04-82ce-40b7-bcd2-15604efbbfae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e715a2-6789-40ed-b8b7-45564dd67aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d751746d-99a7-45d2-8068-aed8273b266e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746d1e12-b7c6-4992-b9ed-f6e37a8b3715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168a788b-74f3-4f13-b988-41be0e7ab047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f20827-87c9-4f60-861e-49d7b0dd1324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb507b3-5710-4bb1-8145-4942df93a56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae56c96-2cbb-462e-aaa0-e39cfddecf24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951625ca-66e7-424a-9041-dc86b0444a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.216.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c967bd9-a91e-4926-a4b5-82777251f761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.242.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253b66cd-9977-4d94-b13d-a320fcc604e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.244.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecbba66-9d58-4539-82b6-5848b46efc12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8add02-fcbf-4cd2-b2fb-6e2878793ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.248.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67cabaf-9425-4315-9e4f-080f30c48610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.251.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443a728e-775b-443f-900e-409e39abb971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.225.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2340e9-e70f-4168-9758-f1a688233c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.227.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa6b152-3597-466d-b218-cb433f62d864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.49.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91072a7-61cb-48f4-9901-0a443b1e3c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.65.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845f9be9-e446-448c-ac18-3b18c84bba3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.21.75.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11edc5c1-6cd9-4059-9b9d-5ee0bb96815f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.81.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1346cc80-1b77-4cc3-a0f5-708ad0aac9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a408298c-886a-4f20-9dc4-7b6f1c8c1bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.201.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444867ca-c088-416d-a723-9fe28b8e0913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3184025b-b801-4afc-8955-23a8d2d40e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594f11ea-a2bf-4e53-890d-237f336a025f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.144.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efb236d-4f31-44ac-b4c1-b43e0e03f946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e035787b-8af4-4534-b624-acee5736e747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24578ec6-28b5-4726-b9cd-caed785542ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc8fb51-8d30-40fc-b7b9-2c15decbeff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03bc10e-1359-4581-8b44-6422c5b7a444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.137.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41814d8f-a89b-48ad-a978-199699e407c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781da563-ea88-45a2-a5b8-3550286efe8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c937675-33f2-4e81-9dc2-02a0a7ab301d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.104.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba8d9c0-ce21-40e0-b0c4-b135acf28e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fea3bd-d557-4f44-9ed5-45b3cc8c4bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077b75db-646d-4c84-bef8-ed4ccbfbda22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3fdb459-a095-47b6-b665-51ba445ae885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcce8085-9b0f-4ca1-bc4e-caf58881f793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9a6e0e-cd55-4428-a47d-3884d58440e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec1b9a9-9d5b-4f66-9694-0f797409671a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1242ee6c-394c-4c35-ae79-983c9cd858fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.217.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b41f07-cba9-4c60-a784-0e06cba19fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217f1cb3-9c92-4cd6-b7d7-30a05e36daee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d381ea-7196-4788-b202-45c8a059321f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73abcbdf-175a-42bd-825b-911d02e6d447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a62fae3-f726-47e6-96e3-b3eb8f75a8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cae8a7-396b-4f09-905b-93ed36466390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab01083-ce01-40ba-8793-ab77e84a818a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ed087c-cc03-45d0-9a95-8c5c727dee21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2efb49-dc93-4fe3-a8c6-cc3b4c149b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d61881-b5ab-4a50-8d2a-97ba0202697a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156b829a-32e8-44a7-ab42-66469d913096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.40.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58cdf83d-9eec-4213-b5fc-1de183cc8977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32496645-1f65-4275-9fba-8724980397b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba6a419-d175-491c-922a-ab380379daba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e9fe27-44bc-45d2-b5e6-0ef136471960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648b4ea0-cd6f-4582-899a-a3fff232143a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee87fa4-29cd-434e-a65f-5b4566dd290b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90407b79-325e-41b4-985c-8edd662d392f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b26da89-8ab4-4426-b33a-376468afc1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5917d584-0c1b-4a4b-b985-eacd089ac444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702221ab-a5bb-440d-99d3-ebdd2ec4bda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f263fe-0aaa-4fb1-bbec-03548dfd966c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7d2688-ad25-46a3-bf75-e1ec2fd3e901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9732e698-1aa5-4523-9e13-50f43e4ee469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bb515f-76dc-4a23-a37a-0edcdb01c2f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da02d5f6-bb28-4374-9a31-8cd5d7e27419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a667e4da-4368-4e7c-bcad-64698d76b50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501535e2-d7bc-42cf-972f-2cfe5dfd63dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.254.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0975fe8-7209-4efd-84d1-b6b694643e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c065215-a27a-4b46-b858-b179a66b1454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22175c4b-af9e-4b2d-8eeb-6caca2a21528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeec2f5f-a7a6-404c-a8fb-ab3df0b74493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7bbcf2-6c99-4dce-88fe-48f5e5b280ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebda886-1c69-4e38-9662-b0321de45be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64e7209-d180-4938-96d5-29e8313757f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08930e56-dea8-45ca-9973-04a65a50d6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777893a3-4a19-4227-bca6-80f0a6982194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2606e6-6ece-482c-9cec-db2fc124604a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a3fda9-cf86-4805-8856-acb875486f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.80.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a21687b-bd43-4c03-8653-658844919059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c89afd-0f4a-4d82-826c-62ad5c4be4d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a630ee1-7e20-44fb-9bc4-7a31e22285a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684bb15f-cd95-499c-91f8-ff3794301831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab7a6ad-1bea-4c7c-b318-6161e83184b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb6f389-95d3-46b1-816e-ed7fbc2bdc94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab7b3c4-5600-45ff-a0ca-66aec79f1530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35105fa1-7692-4f70-a56b-706137d9028c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4099359-4472-420e-b5ab-4d94ab4e276a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d45407c-b612-4fab-ac6e-a47bb1344c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdded5fc-cea2-4e24-8fb1-51da8aa03e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa17379-ad59-43de-8437-302645df7106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.16.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28818104-40f8-442e-a81e-efed04da45f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.18.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1de42da-bd71-4199-9b46-dc8166c75635", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.220.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7407c1c1-abac-4ac9-8771-2d3b4728d6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.225.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8021ecbf-0848-4cbc-b40f-672d58e7f43d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.59.217.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb2559a-63f6-487f-865e-577ffeb41b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.64.192.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae7b789-9089-4c90-ab47-87b1b281054d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.68.229.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e17073c-7171-41db-86a8-e9600e30fea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.68.229.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d9fed7-7f54-48ec-842b-4e7f8698aaa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.103.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7af28e2-e5aa-40d3-9622-57861880b1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.106.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70c5d17-a2c5-4a4c-ab5b-6e862690d12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ddc8e1-2555-4f7f-b85a-b3615bfb2b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd96ed5-d531-47e5-bfd0-554b68ae84b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b1911b-e5e1-4c0c-9635-163f59144925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c4ea02-7ba3-4148-82e4-b8d4cd106888", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.96.161.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962952b3-ab50-4eb2-9374-7a6f785bece5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.96.172.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94eafe88-64a7-447f-a7fa-dcb85c5fbfa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.99.149.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d62aa2-a4e1-453a-8e10-21df176006be", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.197.14.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b4fba0-b0ec-4cfc-a966-664b6ae51c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ad2aec-3609-41e1-9d9f-74f1efcf7342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f8abcf-ef83-4135-a2fc-dfd144589caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.135.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce9ca5d-e007-4192-9688-04a40deee44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b369e1dc-9d01-4c9e-8afb-e61bc5feae3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.201.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5283165-841c-484c-a9cc-6bc3737d7b79", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.240.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7a713d-0d71-4f64-8bc6-a31b9d3b6d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.240.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e86298-f50f-45d9-bab4-8736b0c1991f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.254.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4f6990-605f-4b05-bdbf-1a5296979e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.254.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dadc1c10-ede3-4cfe-928e-69ee61af1394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.254.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42bc60a-450a-430d-b0bc-fe01af56f9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.254.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe59a039-1a40-4644-85cb-4e57917b2c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.254.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f007297a-ab1a-4604-9d5e-a3b4eef68a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.254.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55073bbb-58b1-4e15-9059-edc9a0933938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.254.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acf1432-9d13-42de-b176-c1f4f06404d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.254.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426209a5-12a6-45da-a0d5-ddee444cd03b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.53.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d8a17d-9fea-49c7-aec6-442271ecbc4b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.254.213.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30894d80-6a69-4f48-a043-f9a493de4cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6be8b0-540d-4249-ab57-61993fd036d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.212.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37c27ba-28ad-4177-8de8-149993a97a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33aac237-ecc4-4782-b73c-07878bea711f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dea1653-1b43-4e74-8927-f489cf348ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a760aa-3ab2-4b6a-827e-13805197a13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13740471-1ced-41a6-b12e-a207149c9df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae219b6-3605-4c23-98e9-c9cc0b04459b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f98a04-98a7-4b3f-acf9-3ebcbde575dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6acd1f-45a2-4f24-bf0b-2d9d111f9346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73184ea4-025c-44b3-b108-43407fb9a02d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00bd25e-5f7f-41fc-a277-f851a7faa662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ca761f-9cf2-4dd9-95dd-b4c4edb906c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a3b813-6223-48e6-92c2-b4d86b57331f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82793b03-9bcc-4260-b0e4-0b88f6e615b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46756be-d21a-4201-a82d-d72f860f29b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a6485c-42c4-4c7e-828d-8fa32bb1b315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.231.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54cc59b9-98ba-482d-bf07-ef59dad698fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.231.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdf28db-b286-410d-afa9-c26bb1f8ac33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.232.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14696538-3adf-4862-bb49-02393c3bef5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.232.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c406bb-194d-4ed3-b44d-d9a6c36871ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.232.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c0c692-eb8f-4d76-8b93-be4ed506f1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.232.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba74b428-f517-4e4d-8147-00891c3fb285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.233.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befbae05-1d34-4bfb-b543-1f71d5f773f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.235.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938d433f-a196-4244-a18a-7d087708880b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f80a0f-eb26-46ab-bb3d-41bf1fa4f0bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718c7ca6-5acf-4f81-9f68-8017583fbd8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.247.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a91b6a-7183-4bfb-a9b5-f8a62c3365d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.17.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ee3cea-8643-4bc6-9858-e6f328a98d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.36.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726e4ccb-81f6-4409-9f91-6a0f3b5df457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.68.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa97c2b-08d9-451d-bec5-7769a76a7850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf1a180-059d-4a5e-94e4-e88abd91eebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.92.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d1e6a1-7d4b-430c-94f2-51a68755a5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.35.25.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d78b6b-6de1-446d-b155-82289b0776b6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.10.86.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954647a5-d591-4576-8e85-697cb1f150fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.208.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2277d1-84d5-4314-8efb-1c257a0d9198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.211.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4066a5d5-4f06-48fe-a82b-39cfefe1f406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.237.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d935bb-f20d-4335-8c0c-7e2d9d4e6279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.11.242.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a916832-0cbd-4f38-964e-d07914f2ca69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.11.89.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08b8383-412b-4cdf-ab8e-369c78bd0017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.153.167.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c83a0f-41e7-4eb9-9c0a-7e6032d58a57", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.153.92.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6149d8b-4181-4979-bba7-e86c0bd187ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.198.30.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf48fa7-ec09-4a63-8e93-bf67645bc307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.200.104.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e430a9-b069-4ccd-9f88-d939f8fd6d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.209.246.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964c979e-2ef9-49c2-a892-b98bd3edd25b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.27.163.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd066bc-88c8-4dc1-9844-b4f99ddfff1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b15c164-c052-4180-bcdd-bbaac37c46a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38138c39-ea0e-4a25-8d0a-8ac8e07a4417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977007f1-ebb2-4ff4-a1a0-54c5df848476", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.112.128.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2e668d-2470-4697-9b47-af09a82d39ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fafa0b64-288f-4c3a-9939-801cac428f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385b059c-3458-4d1d-b573-a4216e577bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.2.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3981003d-49af-44c9-9169-b9d415162dd3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.124.133.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cb910f-e970-4294-b211-2185b0406257", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.125.252.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920d828b-9a2e-4037-8f81-932ff6f0189e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.211.19.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d82f68-6955-4d08-88b9-7ee581d4b845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.213.138.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025992ce-459f-4ab7-9c04-ef4f52e092fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.232.180.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c735ffb-0d0a-40b0-b699-c77f8d4e83b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184ec7d6-9d41-4a8f-818e-e70ae7bd4b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.39.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061c57b4-91ab-4596-b757-33198f80fe6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9dbe497-4bb5-4838-b700-bba5bc7b7f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f7fb27-2662-4943-bd7e-06198fb4f8e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa914d26-18cf-4876-99fd-376b37b3cacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da96876-9a1c-4baa-8462-982c81c8682d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d87864-be21-4092-9225-e857330f046d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4eb32e-ea05-4e99-ab00-efe1e90c529e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f508dce-3473-4d34-8d18-9b47665a9736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93233335-3bce-46ab-95aa-84c43dbb61af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fec940-ce00-427f-a5d8-8211fb1dd28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9168535a-b5bf-41a3-aa69-8ba8a493a1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d00a94-00bb-4581-9f1c-774cab18bb91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e133c83-8823-4f70-828f-5d257f7251b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7cdee3-37a5-4fb6-bf5c-d8b7eedc290b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2f6b04-fcfd-4583-af11-8bf19be49d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367a70ea-f6b6-42f0-85c0-54889c585f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28c532f-27ad-4b40-b7b7-f80609522262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88cdf381-b510-486b-8fa7-bd164224573a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b69cdea-208f-4ff7-85fd-34117ce47249", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1da94c9-cfdd-4e33-a42a-70c630c4e8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47987ee4-fc32-4d30-b211-ea06ee1cacc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.144.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abc9d7e-47fe-40d3-8ed6-557cf9519afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02362480-1eea-4f76-9cb6-2c5de2d071a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae8b646-948f-4a26-9bc9-b0d938963f69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e740c5-7fc8-4dd0-90ae-0808f5626442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a782703-f859-4153-97aa-355de160a151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4fcf33-7e68-4c6b-8fb3-2601bda98fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e9a128-6f41-4b89-94b4-b7b129c8a34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d55ad1c-0ec1-4741-b986-c3a21e310220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabcfc9f-0ac1-437f-8b2e-d35b1ef8e296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd87a7e-3b41-493d-8f13-d769646e93ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6380c3b3-2954-4f6f-b88a-5897299030f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6462ffdb-db6d-4649-b7ff-3822bb23ec27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8cb1ea-8581-44e1-afdf-17262030340a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd7c3b2-9c0c-40bd-98b5-aaed06a9012b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c103d446-9b1b-4e63-97e2-b1cf75344e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969a10a6-7ae1-40ea-bebd-7f884386bc81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb565316-6f73-415d-8040-f0ef43b56ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c269fe4-f5a4-4f6b-8b04-7a8ef58d945d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13d0d7f-ad15-40d3-9296-6608b628a90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3a6c6f-c3e8-4f5f-868f-76b838ba8572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372dfab4-a2cd-442a-9a3d-ea1ee334052c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9f5306-9c4d-4061-94b1-7ce8ab2a6d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91896a8-7044-4db6-972c-e644471b58c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ce04ca-9116-4d32-9080-dce119211d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.104.199.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5525228b-26f2-4c4f-b386-1f5e934b2fdf", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.11.210.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ce3015-9836-4b71-aaa5-528e7ab1d25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.124.88.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030feb6f-a321-46be-b752-7f199c4c2d48", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.129.252.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7affd0ca-9299-42dc-b6c4-92ec56e8fd16", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.136.32.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80cf4d7-7460-46df-a987-9447916fa42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.152.130.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10174e0b-f5c0-4a48-b211-03872b50c608", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.194.10.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06cca34b-0f78-43ae-88be-cfb6b740630e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.22.44.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95333e63-7ddc-4e2f-ae73-1e6e6f7c8c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.69.176.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d88364-e92e-4b73-8fb1-0a208b7661f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.200.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7ae10a-7ba3-4646-b0ab-aa56d18058b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.121.60.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b579c983-ecaf-4152-a3c0-0314d4a91639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.124.12.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f5ee41-46c1-4ff8-a812-e2b0a9b6633f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.147.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e005d09-720c-4fc0-b70e-10a59f433475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.173.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0f1d50-395e-425a-84bd-feebca4a43ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.200.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16edc762-d7e6-4833-9f86-e081a153bcc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.214.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bcbd967-5a01-49c6-9fe5-ef811d046c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.40.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8046fc0f-96b5-4eda-8932-74bdef539acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.45.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b20be02c-ebf1-4c2f-b654-6f350559b668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.84.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963a8fb4-419f-4e6a-9e7f-60c739821d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.95.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c598c8-0af3-423a-a6e3-8b8daa37b35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.52.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173add55-088e-48f9-a670-5f3e32ccdaac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.52.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76dc083-c91d-40c1-b6af-6915c610ca04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.52.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96519e4-7ba2-4a66-81c3-bbabf8903814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba38a928-7de8-47af-b9b0-39451b1e9870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b0845e-d3c9-45e1-adda-fe74ede103d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271f2f73-3fe9-4468-afd6-8ffe417fe009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f95256-f931-4280-8265-797e20caa7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e9fb52-31fa-46bd-b909-1615abab925c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34141c6-9efd-4d05-9b6e-0ed0b3a37c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.160.203.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e485fc-7907-4b63-a1de-14dacabcb481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.177.40.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8c4f9a-1553-449b-b9a0-5fd91617bdb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339186ef-475a-4051-8cb6-93f380a73fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146c993e-104b-4c6d-acfd-efbaa08fbf4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65164687-d0b6-4138-bb94-bc0d84067e56", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a96a78e-da56-47a2-8e2b-7311deecc609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.206.237.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b029d867-c05a-4620-ace0-6eb4774e36aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.215.165.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abe2421-db6a-497a-b47a-dc402afe2d22", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.249.209.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fadd87e-4a98-4f52-adc6-c7e3b5f111cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.121.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e7ab08-fd7b-47a9-bdb7-b1b02940910a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.194.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ce4351-760f-4e9f-bc78-b927a67665e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.199.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f65369-4a37-47e7-ba16-c94c02a2942c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.208.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f400b98e-762c-45b4-9f32-b3f7bbb9066d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.216.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c69da1-20af-48f1-92ef-c42014082b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.51.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06a5327-85c4-405d-9a4d-1442853173dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.64.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cdf9915-d291-4dcd-9718-85cc021ce34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.83.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089761be-8627-4625-9fe5-086bba6d71b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.96.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3519379-3f14-4be5-9e8b-9aaac2ea985a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.71.207.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42567f40-e06b-481e-a8c7-aa7ac584353e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.73.210.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5885fbee-6a18-4cd3-a39d-b00764d467d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.26.157.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57800277-4674-458f-b533-038b37a2b52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e01c3f8-7fd3-4379-815d-f3992e02085c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310c7883-5292-470d-8ec3-8dff650272d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.150.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb8d93c-11b6-48bb-8695-4592e705ed09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.168.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc39ee86-bafd-454b-9d6d-22263edbb2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.137.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d8f21b-44de-4998-be4a-25d5c0c398b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bc24d5-f0bf-4a3e-a527-3335a1a4103a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6907a361-059a-4752-908e-4da6ee420d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba62c69-9832-4409-9607-7b57a3224880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.199.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39486cfe-7548-4b0a-9de4-43b0be3e9ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.143.235.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8d50dd-84cc-4023-9c94-9e830aebfade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.183.252.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6f4991-5d16-45aa-a2d5-856959877928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa5582b-4af3-45b5-90d8-feb2bf35f6f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0655e686-f887-4728-b12e-e911c682eaa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.191.32.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad8abca-a144-4a91-9f7c-8061632fd5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.234.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce5ebe6-6833-4067-9f4e-e7f6795a891f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fecaf04-9013-45a6-a133-7cad74a214cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.219.222.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6818e5ca-268f-44bb-b08d-706335a68523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.220.136.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb0d3f6-2759-4be5-82ff-cd30ebb7eca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f0034f-fec4-4f07-bc82-7f731a22d9c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.222.36.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cc62e4-44fd-4b05-a772-49ca6a86c1c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.223.187.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af59fb6a-6662-40e8-a0ac-433e74cd2bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.223.238.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5720a419-e934-4daa-8e8c-f181802290e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.223.44.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832fc0b1-4ce9-4dbd-b048-375d65f575a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.19.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a190ab-a199-4116-a734-b64ed32384a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.106.7.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d691097a-58da-4fed-986a-ef54afc40c31", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.106.83.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f6b780-0ee4-4f90-9d76-c98590ea1c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.116.219.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8d7a93-1a7d-4ffd-9bd6-3d0ec971c618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.140.190.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ad42fc-494f-4568-b9e7-e9620e218661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.141.31.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5622b010-7116-4456-80ec-31e75f75f00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.125.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21ac1c3-bc6c-4baa-91ed-a023f34b8dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.125.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02af2f75-6bed-4ded-9e4f-c61ae3b2babb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.125.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef0b66e-517e-43f6-a3e9-dfc75452296f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.125.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9d20f9-ca17-4aa6-9478-9097eeff0de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.126.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41836347-b26d-4fd4-8334-148dc646dcf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9177ac55-7b78-43da-a54e-f8988e5182dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8fa7196-ef22-4a92-ac95-3f3262017b14", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.178.56.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2916f3-f280-443e-af41-42dffe4a4385", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.178.56.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb111fec-70ec-458a-acbd-1d4c1f0b5ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.178.56.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10797d1d-ac92-406f-b8bf-67dd268373cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.178.56.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644c6ff5-1034-4bed-b1ab-a411bd910d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.178.56.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7dce8a-86c6-4a32-9da4-6b3c13c59124", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.178.56.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38581e66-db79-432f-acc6-86ab287b465d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.182.228.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f07bc5-5601-4321-9378-b324ed852127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.84.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1d8c75-fec1-4b58-8095-98d6e3587208", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.190.203.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f316c16c-d1ac-4fbb-9fd8-b81d372057cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.190.5.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fa5e70-7024-4bdf-a4d7-e325992c1712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.211.96.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abbb1ca-df74-4901-9e2a-407b08214a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.232.31.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a13e819-cda5-48e8-9560-b5b873bea838", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.244.187.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715f6447-9104-4397-bcf7-cfcf74975ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.247.100.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83650a0-c078-42b2-b3a6-72f45b89331d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.115.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17302d9-1172-44a0-a4a3-681b6fdbd87e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb9df77-55c3-4a73-8da3-95e338b853f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.185.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121576e7-5e17-4510-b9d2-6a2c89f2ffb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.194.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b065f496-c1d6-4fb1-a576-920aacf7b76c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.234.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06e3f7f-b1cd-4eb8-a720-b59fa545696e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.57.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbb9f21-6209-4913-b90f-c7bec37d289b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.98.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b013b41c-80c0-4d6d-9f4a-6631622b96e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.0.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1c33a7-7d51-45ab-aa1e-7c8269c267d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.247.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b05ab6-0b47-4d4c-bc6d-d5f78d9ada88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.238.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ccd69d9-875e-4eb4-9350-d9d4cb873b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.97.242.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5a4b6d-3205-4e64-8989-4c5056a1c544", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.192.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee29476c-e557-48be-aeb8-9a5d60306108", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.116.220.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9040932-85d7-4164-b3d4-7a9b6481a02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.122.154.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d08a13-05e5-4914-bf7a-4e0a1bd8ab12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.122.68.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf91f11-8c8f-4503-aab0-046b998be6da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.129.41.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d24825-6afb-4a0a-8979-b039340be25b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.173.250.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569c698d-fdc9-4fdc-bc4c-9a60e2421cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.215.6.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08194c2-535a-4e8d-b65b-ea955fdc157d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.215.65.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b58c910-334c-4c7b-b317-3fe4c08722f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.232.183.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d357e2-fe58-4360-a8f9-417ada2c60e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.225.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2041e11a-665a-4e0d-8692-dd8933ca12a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.229.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1719b847-64ac-476a-ad7d-7936dd9a3f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.123.43.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a81143-44df-4ba1-bace-b2eb03685e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.127.176.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f25c74-7759-465c-abdd-78c3f4b357ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.13.96.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ec2353-ecc9-4866-a348-9730977d59bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a7053f-38dd-48c7-99b1-0794052c9ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.16.3.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbc6cb4-e56d-4c58-9fe0-941f5f41beed", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.183.129.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e3be26-af7a-4257-bd52-b3f4af9da5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.190.216.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d4548c-6564-49da-9c14-9c91fa4b33cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.237.2.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af399420-d4be-4a27-aac8-072fa4e070c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e43ff9-d199-436f-b2c5-d821a00d220b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.247.255.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ecccc6-120d-4ca1-a14b-cb8fc3c34ba0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.254.194.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209f630a-2302-460a-8189-8a77e0778fee", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.40.103.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7f960a-9a9c-4196-ad20-de6d6c78565b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.68.167.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944ce636-b266-4fc3-8994-8aa5cc44a02e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.73.186.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8f2c76-9fa9-4b7a-bb40-2e6d6461d2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.73.186.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccebcc9c-b3c5-47ba-a112-e67c28496698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.76.176.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f868546b-b999-4c02-9187-2f43628c5698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.88.236.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add17ee2-3da5-4908-8e35-2b68e028f58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.92.181.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121605ff-2f48-423d-a533-2ae6f82ce6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.93.50.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baafe5c2-fc5d-48e4-a14c-3b04baee0c18", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.162.110.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b104f963-9745-48e1-9c3f-504d0ff97907", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.222.14.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275817d8-d544-444d-9650-81b887b1a2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.224.219.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400d8513-1b0d-49d4-9548-11e07229ae8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.232.3.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0b952c-3d8c-4173-a62b-97b3bd93398b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.241.54.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4266cbab-cf11-4967-8ca0-1cb0649dc356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.26.2.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c165431d-b6e4-4688-8b8c-2d68eb1250ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307f44ac-0ce7-48dc-ab38-2a643b257993", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.6.4.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a03d82-5aaf-4e00-ae28-b4a80e0a0cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.66.138.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84e7c7e-4fbc-48af-9ef3-c673c499f356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.169.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c54655f-94c3-4e01-ae5e-9e12a78b3ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.35.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a48ec83-2d39-4507-9e0a-3a8bdfd9f6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.107.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f049deb-be2f-4e77-8726-9548dbab3fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.98.7.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff506e1-6e91-4503-ad33-f4194aab9e74", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627502fd-3f7c-41a3-8007-67163a6d1dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d572cb-adfb-4ba8-b0f0-e1716d0562e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06569522-910f-47c7-ac87-7f37d1f447e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d39150-bc27-45dc-ad73-460d540a608d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242bedf9-0482-470b-891e-c0559463d92c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b463db56-e2f7-40bb-a1d0-334ae61ca0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f68c57-90e2-4137-870b-7f28fc64ab8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719c4e4a-c9cb-4179-a3d7-47a491d56507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad342436-7ff6-408a-8eac-0e99eba9960e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1c5f91-3e5b-44ad-8109-606767e03f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1441ff92-0e32-4dd7-bf07-68927b0bbb8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b50ec0-1b66-4885-8e0c-108b635ac014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd57991-6c6a-450f-b351-35e27c597559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdb78b5-61d3-4a23-8483-315a4262f287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d611fa-7961-4234-b543-a78d88384b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9449e71-2afe-4c81-86e0-13672cee8cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6629c92f-be27-4bd9-a4c9-cb9ab29f9848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdeae5e-8ea2-4bfe-bdf0-3afabd94cff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b559a7b5-83a3-4156-b38e-52df6c7efb6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193fcc23-5b4c-4aa1-81d8-b9674ded00bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb09747-06dd-4aa5-a429-ba5ebf3562d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2957bdd-a76f-4af4-828f-c154825b794d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72353380-1d0d-49aa-8701-ebe20fb1deac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737e5736-a476-43d2-a5fb-bc9d27caa5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e113a740-d774-46c0-8cd1-ffbb5c20a264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ada47c2-a785-4850-b152-d0121533de11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf21e99-45e8-4a6e-95e3-2ee71d6dcc59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b0c6f4-e204-4fd5-9c89-9c13d538c831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17842c39-f909-4912-b41b-2cfd2f8a187e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e441d748-743a-420c-ad40-a733986f4333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac452ae-359f-4aaf-b233-87407d3e7715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a44d6a-7147-4d8a-9c4b-a73bb4d112f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7b063b-839b-4c19-839e-4450acbe4dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ff6853-94b9-447d-926c-ea703f5dadf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2adaf30-4cda-489e-9088-1a6acef883f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb03b7e-7e6c-4121-b71f-9dbd450d50cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1873eba3-d72f-4b79-9d41-fd8d248e4c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc7280a-1630-4ad5-a03b-d5a1374a24df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ae3453-6052-46bb-b603-e9210ac1735d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de2fcb4-e098-423e-b80a-857acb4c873b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f650c33-2fcf-40c4-859d-fcdc9332d8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1d7159-cedd-439b-801a-a212543b114a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafe59b2-abac-408f-b42a-917d962e505e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342eaacf-3880-4417-b7c1-ddae7b769e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a510456c-31ed-42ac-a3bc-db2d311751ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d878fc-accc-4f4f-b50c-7c36db8d22d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aafeb85-6483-455c-9a02-c53aacb39262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10b45fb-f757-4cfd-9462-f5366ce1d8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8d18f7-5cf4-4910-aa77-833e0a1863ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d55007-aa0a-40b0-b071-7f0db88921f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34510b08-8db2-41bf-98c4-00871056ad4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09808320-9750-421c-af16-feae0ce0219a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b71781-266b-4761-911e-6d9e75dbaadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c744901b-8f41-4a91-997e-b190155d80ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e318fc2e-85df-45c4-8e5e-68e541c65d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3645e05b-01ac-4430-b448-3dc8fe5ded3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bbeb3fb-ffc0-427e-8c68-6f37a4b69c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de6b52a-a142-4b0c-b090-d13f2006d7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00839277-54a4-4711-9deb-9011d41c3dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752e25fe-d40b-488a-8544-bc565e57e3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.157.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc67187-79e5-417e-8ce3-772a03d38120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5308c6-2c3a-4086-8871-34d827a33755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acfbd08-fdd0-4e2e-9723-646d16454d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.112.101.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea34c46-d7d6-4b7c-99d1-3fa526c3f6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.112.59.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7340932f-6bec-4aa9-9aea-f4e58db74641", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.117.72.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ab0dbe-4090-4c22-97b7-2d9cecba8859", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.118.133.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc787098-8173-4036-8c60-452efa8bf8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b209fe-25fa-4ca1-a536-971a67ae55ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd5756a-4811-4b71-adde-5f033702507f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.132.187.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da0628f-aeda-43af-94bf-b376f3bbd1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1cc6085-d5e9-473c-9701-4356cc919307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e70a35e-99f7-4f80-a920-0fe9517a982f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9d6cdd-14d1-4aa2-bd43-081cd8afd786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db94a6de-6b5e-43ee-a489-901c017193fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480fc2a4-c5c0-495f-a5a9-3e48f3f2d71b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.14.47.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbb5a70-67f6-440b-abaf-8347fa460fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.14.47.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24403bb9-68d2-4c4b-8ee4-2b1853e6536b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.140.241.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c3af4c-2135-4f61-aa65-f0a1076f7efc", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.190.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147c412c-ac21-4089-9c9b-84e943c35afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.151.146.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9718ea65-58c1-46e9-9871-1a3aa36be559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.16.39.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f8cc51-56df-456a-88f3-5c265713851d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.168.194.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92dac8f2-3f9b-4509-80fd-61a1ba838aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3004070-bb80-4e36-96d4-06b8703c0607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d95cf6c-556a-4882-b28f-b210ac965d90", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.170.153.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135f25da-567f-4e70-8e35-7c3c1c226959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.175.59.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fbc8d4-4453-4618-af4d-c08d9be7f64f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.176.94.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a5c6a7-d06d-451e-9bc9-760b1f8d1f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb489eac-1fe5-46de-bda0-176b83bed736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9acf67f-feb4-4a58-865e-2d0ebdb1961e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff630bc8-febc-47f9-95a9-bc69fe06ce3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a83241b-21ee-4c5b-aaf0-d43413986e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9a254d-ac93-4055-80a3-d6b90f4e1290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559936ef-1bf8-46c6-afc4-cb781d5527b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01584855-8dda-41f2-8e01-0b4f6f06ff66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.181.8.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd2bc65a-c8c4-4c7d-b2eb-f4457b4b34f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.184.223.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79864ba-a913-4536-907e-05624876ef76", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.184.68.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8106d82d-3767-48d5-9dd0-77dcf752a2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f753e8-71bb-431c-8035-c41b1c09e9c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.188.249.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcb60a4-1723-43d8-b1ac-034b77b42487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.14.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3812dfde-212f-48ee-8466-ab9249b8f468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d70caf-87a2-49ae-80da-8a54c2d96f15", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdda179f-78e9-4905-9476-b70fae5ba3e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d09b7ae-c23e-458d-8c35-205eba280a1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2135f9ae-f71b-4280-9700-137b585aadb6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc2aff8-395a-4e8b-8710-7fc14b27a911", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2aef9d-c605-4a5c-b957-a73d9696a9d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ae9503-a16c-46f0-b96b-3ae1a3219f20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0de5fc-d1cc-4507-8a7d-7f81c355dcc0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49129857-6321-4ef9-aee3-76c6ad522716", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b97adb-797d-4266-a991-7ff0a84a78c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22160b81-afc4-4c77-b0cc-ec2154b8cf16", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae15a92-f7a7-4bc3-88c6-217c572eb243", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06ce5be-d187-4ba8-9a19-1393f1d54ec4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b60572-dfdb-4e68-8eb0-4450b6d26136", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db80fe6-9fcb-4fa5-95b6-036cf9d6fa7f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fcc0998-f306-47ac-b890-221ce921a4d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7376f0-9e93-4fe2-a0ef-9c04461e1932", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2d0896-78f6-49c0-885d-10872e4bf14a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc477abc-7519-41db-89a7-a2f5d7460356", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da46a131-10af-4765-b078-2778f5b0e7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322a0bbe-d28a-4280-bf49-4d57dfd657b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d502a9a3-fd31-4a02-88b7-bb5df7fec470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84b17a2-4fdb-41e8-8e0e-7b356a9d0e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6eacc3-9430-4970-b8cd-e4d2f1ee0efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405686a4-90a9-4e07-9d59-a9f15784721b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c81a88-8eab-4867-91d0-f7ab0031149b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74ee920-14d1-4d67-9235-b5db731116f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76966a23-ee1a-4678-9028-dad8a7457955", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.209.196.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a472df-4059-4d39-938d-7413ba913131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.211.94.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96db7194-7494-4677-973a-d23f32cf2e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.213.174.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44747194-425d-4553-9f33-95f08f0baa3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.213.175.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0630bd6-ae4e-408f-8fbf-94d820f5b008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.215.164.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06d26a6-5ee4-407c-8fad-a413c9b9ef25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef0f744-6bc9-4a2e-9dcc-3ffa6e0a95c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9a0124-046b-436e-94f6-781c693a001f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e764dff-1d31-4eb5-be6f-d5eb9c46fbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.5.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5e2bff-55f3-4100-9645-085cb64a1b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.237.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7463069-fb1a-4c8c-8863-c4193d1aad20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.222.138.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722f461e-d917-454a-b170-33c94988e3bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8cf8cc-9d7f-413f-aa98-55b256719318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d132f04a-e653-47ea-8a12-600270081162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13c59f9-054a-4814-8609-e2f022eee932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15da90c1-04e5-456f-87ca-61b18c028ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adced7e4-4343-4780-bad1-3ecd0d7fa6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9223eb33-4060-4941-84f0-29a9890ce134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e871dba9-1097-44cf-a628-7c82d7caf63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd371bb1-fc43-4491-9f6d-69298404a0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ebacb2-9800-48a3-9d0e-c8638768365d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26eb1b0b-4e56-4fc2-96d8-a15a0e75ac7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2171f52e-9946-4f7a-9b61-1975e9e736e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81197200-1430-498d-9b1a-7ffe28e358b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb099ef9-be7c-4178-a134-fcc83f8636ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161772b2-c8ad-477b-9e6e-cc6f9b21a015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9867a8-127c-40b2-9064-acfe75a8cf70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c17bb0d-f081-4f91-8fb5-7b599f9bce66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8c41d3-200c-43c2-b24b-f41caffbd0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea39efd-20a4-4d6f-bfaf-8e44739777da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e8130c-5d86-4eef-8b15-a20fdb59d088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef231e7b-a567-46cf-bed0-91eedf70ad11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c80ee5a-c9d3-4c43-a956-c30d9431310b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fec191-6044-46ee-bed6-8e2fa2f4d560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6921bcaf-d491-44f1-b866-658837a789c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0d44c9-a105-44af-be44-09c412dd430b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303568db-6a7a-4fc5-9202-26f4453a1674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b42654c-c20f-4f63-a8e5-e2a05d2c5c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3082a2-aca7-4c96-b0b2-32ae92c31a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99f36b1-75b0-4abd-ae3d-7f2bdf9ff882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d673b964-bc90-4574-b209-d45df15a8904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7320dbaf-8e97-4b31-9529-c9c1feebb1e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8eab79f-7252-4332-ab81-7b9386bd706d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9dc999e-9dd0-488f-8419-f016e1412b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e70d88f-2513-4494-97d7-cc14ebc19b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b43cabf-423d-457d-a54c-fd862f87bdcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f454863-8d42-40a9-85db-954d7f312718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4a8c26-895b-4497-9862-84dfd263f2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75620661-aa66-4424-8ee6-df3ce68997e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4d29fe-a4f6-4dc6-809d-ea63c6bb88f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ae0f35-9462-407d-983e-19d7fbea1914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90149aed-80ee-4e0e-ae92-412417bbde54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639453bb-7b87-4c98-bade-6a3f43c55243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c35e99-94af-484a-b680-5c66301b0da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25007d5b-7acf-440d-9f8a-b54580bab2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f8c148-3602-4e18-974d-76f040776abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1849f988-02d6-4697-9034-cd995ac57844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e77235-8ee8-481f-82bd-8c94dfbd3c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19cdb150-a99f-4df9-9bb3-72828b033972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726292c1-686e-44fb-b500-af224c3573dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34ab641-4918-4572-ba43-30f4b8468230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf87104f-2fb4-4573-8c46-f9a3bd4ce251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45bf7e0-340c-4ada-bcf3-58c0b8a45dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c588ed6d-bdb5-448c-854d-18e829aef27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde6df13-dae7-4efe-9e79-e806ae43c515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8cc498-3508-4a22-a17c-9a326641d750", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.92.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac830069-7411-4b17-90dd-2a73495f8e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.229.223.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cd7bb6-19dc-4fec-876d-63b987e55976", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.233.208.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc76dc9-1598-4bb9-9ac5-78c58801be54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.231.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ba3505-bb82-4485-afbb-e240a53e35c9", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.231.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411608c7-594b-473e-930a-a2d19372e7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.231.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadce57e-58fd-4d64-aae9-427fbea831f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.241.208.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7023fc-318a-4f3f-bb17-a9ec340f3260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f487165-6f80-4ee4-958d-2109743b4a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f91430-bb2d-4600-b58f-1c6d3c4198ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d960f2-73ee-4732-8eeb-e3203a8283cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9a112a-f433-4cf8-bde8-830a590baa83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46f6b73-c9b8-4294-8667-6f379ae6e9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c06018-f7eb-468f-9096-cdb831bf821b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad75f573-2750-4744-8519-78e5555a9105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d0ebc5-6d62-4956-a52a-5969a13e50bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514d56f4-ed39-4757-aa77-060d21048e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18367bb-bb88-4e7e-94a7-2dab1fb3e37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77db4d79-6a9d-4564-a388-5d75ead06fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8d71b3-3cf6-4138-b616-506d5e37c512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77003e96-e184-4f37-b0ff-d43b7c818087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4891b82e-a2b1-490a-8d90-697e8a3946af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4876963f-63bb-4f96-8b0a-68e7c872bb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f17e19f-e132-4aa8-b32d-4e29e50b6055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b091bdbf-dee8-4e0c-9846-765f0d41f421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e17645-6aac-4c31-9997-e10711fbc54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0d89e1-9baa-4ff8-8916-eac1f780a9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed41b2bd-7bf8-48fd-aa5d-53e2683af4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c77d330-800a-46d3-883b-919d0b34a8a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b778cd-34fc-4f05-b4db-d55622f2616a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823444d7-7cb3-450f-9a53-b09bef91c605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd214d28-9b6f-4fb8-bc1a-0bd579e63399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87fff037-930f-4701-a5f7-02196e9995d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456fdda6-95ae-46f2-8ec6-8bb09523afee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896f83f8-5985-414f-baff-66611240791d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c95a78-8763-4f8d-875e-daa80b987083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e701eda2-a70a-488a-a8ca-da60f940987c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2b4256-2681-45a9-80fe-911d08c94a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a73361b-5f15-4d93-9e5d-f326d5b4881f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51a3dac-2e7d-4e17-a1fb-373305ec2b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.216.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c1b366-605a-43d3-830f-091e1030b38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7280d8ff-3ed3-4fed-807d-7ad3a4e2beec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519384f1-68ec-45ee-81cc-3d671df9a039", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bc2aa2-c2de-4f36-9817-42a95401f2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.244.208.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03cc2c31-e77a-4e4c-bc20-4d52ff1456f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.246.128.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3646a11-8b63-4b7f-88a6-2ee833a866f0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.248.85.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e567c5-f620-467f-9248-752543b73083", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.249.74.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a815ea85-cc32-4692-b3df-a77196b8f3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.253.162.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92fa99d-74d5-478a-a921-f0084ec259de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.29.10.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0925a0f-dc68-4bed-90f8-dec0685092e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.36.81.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80ca00f-5bbc-4afc-9525-75753ceb00b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.62.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f614b980-e696-4134-84e6-5d1b3fd1fb41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.45.192.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c715626-ec1a-4495-9767-34a8a238e0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.53.211.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5965149d-1d31-4266-bdab-b21e35509475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.107.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e43ac3c-f41d-45b7-bb15-6ac45114ab24", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47bd703-c198-43b3-bc7d-1ecce9f3ec34", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d665131-8a1a-4e55-aeb2-8cae880cb746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e879c630-a8d1-4a1b-aefc-add0785033df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c306580-d160-4421-a2fa-948f6d86dc36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfc6aa7-a0df-46d2-b1f9-de15fb04332d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.94.111.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6251f627-bc71-4435-a54c-712d40631cc7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.10.86.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77151da-a0da-45d7-b3d0-4dc21b0cd8f7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.123.162.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9a2a53-864a-4537-8ad9-3cf4c7778bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.17.122.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d287c1-f6d7-4e69-b5ce-77aadf961f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.204.20.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e3ed37-821a-447f-8458-854429412d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.227.49.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b908e9-7a14-4def-af02-0f9839b6f2dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.233.184.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06293238-5999-45bc-951d-cc0eee08ff00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.4.216.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c2af64-1fcc-441f-b9de-94d0d1d20848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.71.90.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896c5d8f-eb1d-4d0e-b013-c8d1335e9d27", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0db787-b233-427e-b4bd-3e6ff15b3412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.17.224.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d523a3c4-1c63-4d45-b1ba-ca66f0d6130d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293521c1-e832-4ff4-8373-43c42d7cd5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.194.19.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1b166f-f28a-47ae-b24f-eee57bdc62b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.209.100.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d3f10e-1d02-4662-99a7-84fb22fe8748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.226.40.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ac1051-17c8-4379-a698-c7c68d353ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.234.100.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e34cb2a-b3c9-4611-b004-dae2c044f1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.197.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ea46de-4e42-4bf7-a4e0-1ddc12824ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.199.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8956200e-a73d-4007-8593-07cc5f25c355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.32.48.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6c59ea-d5ac-4761-be79-4644698ec0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.34.131.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cfc122-cddb-42d9-8821-17f8a616cb63", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.62.89.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ffb0dd-12a8-4988-9b01-b9cbc2b700bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.157.143.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d03895d-7ddf-4876-b545-03896e17c22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.109.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2610b0c8-fb4c-4b11-b7ac-3e5691519a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.12.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea044ef4-4d0c-4b75-b126-654c687e2ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.147.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9cbba4-8746-4ad4-819a-b6a523c98e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.235.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2984aa7-6943-4706-ba4b-9ac84f112e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.44.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933e124d-c625-4f49-bd06-f50012f6c449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.66.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b620c1e-df49-44d6-9a06-03e885c8a63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.69.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8bb939-171c-4d77-8e63-92180f1dae0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.71.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31be8d36-1233-44b7-a774-e8b1c2452478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.80.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bd5ba7-34f9-43f9-957b-ee704442a08e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.225.57.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e570ccee-0341-45cc-bb2b-3db6118c7108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.239.19.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c13ffb-0e94-46be-865a-cd93402baeef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58d5877-addc-4696-9dcc-d296e11846db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2066baf-2340-4161-bd21-20ea36c0a319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb1c78b-388e-4753-bda5-cfb4800892a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44648622-5451-4a32-8bbb-1fc91db398a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf403cf-4153-4415-a926-4006f2a14f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ec7c57-cabc-4de0-9a99-ecf863922ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.255.247.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e8a6a9-07a0-47b5-bbd8-902b25e00361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b749a2e7-4bf6-4043-b8e6-ffc14ad42114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794c52df-94fd-4842-a40b-e2522683efa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9eacbe-6041-4b84-86a7-1919a2b30341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842c385e-60eb-4747-84f1-0a18daf2a577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe552dd5-43ce-4bad-a270-772bc60cf796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.49.126.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956a6890-7baf-4dbe-9f3e-a62186ed5465", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.95.70.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd330786-c946-40db-8754-2d7f38918c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.131.84.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17eb47ff-232c-4fee-8d9a-cb5e737678fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.146.234.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d38b45d-2251-4de3-b2fa-c5e61fd84226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.196.23.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61e924c-65fe-411a-9a95-553084e5ff84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.238.110.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92ac4e1-e2db-4562-8b2a-59b708a61a35", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.242.148.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c5ecd5-9c29-4d3c-bc4a-7c543bd4e6c9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.248.175.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d285083-3e5a-45bf-86dc-9a4b8f8f2147", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.41.19.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33db07df-b0c8-46ac-bb78-327c5474619e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.90.38.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db136f3-cf2c-4c48-b4f8-26e38ace2bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.94.215.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca0f3e0-8e49-41d1-9a14-1e973f6358ba", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18px']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794acac1-9ed5-4fd7-b041-0885454f9225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.119.187.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3dcd85-51af-4da6-aa9b-72d621f46cda", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.129.122.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cea50ad-bf81-413a-873a-a21e69ba0081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.120.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84579b28-944b-4d47-b405-ea81af57cac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.67.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86db7fb-32fa-4f9d-8b65-4febd58fa00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.181.141.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50de232-e76e-4d84-b558-4e0ec9ec93f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.181.27.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c23faa7-39e9-4cb5-ad02-4b3f069b51de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.202.149.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4335aa7-4fc7-4285-b439-51b6d19cc091", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.221.50.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0082238b-8e20-4117-8851-cd09a53041ce", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.244.39.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059cd58f-33d9-47a2-b9c1-78e448f4b93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.64.151.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83b166f-266b-4d47-a0f6-62ce29ddac87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.64.65.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885636ca-a439-4eac-b8f5-12248f50882c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.92.219.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12512e4d-a32d-4f35-8c43-4cec54475d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.97.249.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51418dce-efbb-49a6-b235-7c6b945e7930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438caeff-42e5-4403-86e4-a4245f5de054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba4d1ac-148d-43e3-965c-0cc2eccb001a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f183c470-3dc5-40a4-b82d-b7cf0aff55d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.241.76.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88cbab6-3f6e-4381-82cd-35e6d80de252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.40.100.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0845293f-d702-4309-a29f-27300f81595d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1532e3e9-1075-4e73-8d15-0acfb8f6a8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19a4ea4-9c41-4c2e-9ebc-8bf72b3ec0df", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.129.221.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc11b97-e406-46a0-9213-0c10e25e405f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.129.241.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9ee46a-d272-4a9d-9faf-c9df645433d0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.2.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f6a7a4-889f-401d-a57c-32d6ae72a694", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.28.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aecc71d-47d4-4b2d-a723-3dd9a896e4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25897b48-d3ec-4f5c-91d5-31e9069e8490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a69689-2867-4fe3-8fe2-31a2b61bc380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063c13bd-6c6b-4a2e-b97f-7bd065785697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a9769f-02ab-47c0-9838-c828bce8f80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209b94d8-9a58-4799-bfbe-b1f18ed453cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad362f82-ef66-4fc1-b8e8-b6f9d6b71b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870d8f7b-20f7-4a9f-8af0-63ecb0eb0a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20f0047-b52e-4caf-9d21-8158ecf50513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44e50aa-7fa0-42bb-babd-a5d17fddd085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6668ea-62eb-4a9a-8375-79446356b2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2965bead-8d55-496e-acc1-103f6981c22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf58745-26bf-41e7-b332-99582c8f664c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.91.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f234a7d6-c4b5-41af-8910-62bd3ead746c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.213.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abcb5b9-8ee7-4544-b9d3-3812a2212d85", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6680fe0c-1b15-4aa6-a7ff-4232595c20e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.18.129.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c068f87f-d07d-444c-88ec-f8b24fe38119", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.18.139.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e4f6a7-562a-4a3a-a6e7-3c24a53deb11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.194.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9669d2cb-4775-45ff-8cdb-3dd406c98c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.207.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1bf20c-dbbc-4d69-91ae-e48b2083125b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.217.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ad4e6c-f189-40e8-8908-3b99ffc81565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.220.50.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2b85c7-33e9-4b63-ba83-cee9604a4b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.220.50.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b1b071-d2c3-4661-a4a4-18f8930d5a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.220.50.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1476f1a4-360a-4a2d-be05-fa90ad1ee164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.210.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbd0f15-ead2-4c86-aa6a-f793ea84aaaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.210.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b384d126-8048-46e4-81dc-a716d744264f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.229.85.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab449f4-e543-46b2-8dde-c3c5579ea029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.238.137.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd22f05-6c1d-4d74-810c-e305d84280b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.135.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12d3ea5-08d5-4e5d-a1b1-5a7156f239dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.138.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da276da7-35f7-44aa-b1ac-7c196309bfdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.145.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3411a24-4586-4437-8048-8b33c1c6bcdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.150.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42e8c80-084e-469f-9568-6010e51d6741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.150.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399800a8-c586-47a4-a99f-a1c5740f248f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abc80ab-61dd-4a9e-aaac-454033fc5901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.127.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995a64c0-0a8c-40b4-aad5-631f33576400", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.141.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0ce1d2-b16e-49ac-b790-858a9e5a8ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.150.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121ad4cf-cb0f-4142-8028-81a145f30e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.153.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cceea8-1138-4f8b-8b68-53c38bd348b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.16.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d6bb15-8e6a-4b24-be37-6fa1c2c1823c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.206.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76d4c30-0f53-41b5-803a-faf8b5c2c17b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.219.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b48d41d-2931-4d2e-917f-5d0c8ef204f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.91.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a1ef3f-9aa1-48fb-9395-cdaed5859830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c60388-c9b7-4710-80ec-08fc15908064", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd5cffc-21a8-421e-86b6-bfc3cdfbd0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.53.123.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3aafb9-34cd-4a5c-ac9b-6c3eae4f3f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.53.123.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3512508d-d12b-4a94-8c29-21a19dfd62b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.131.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e8485d-63e6-4cb5-8c22-85df4656f61e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.217.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8d94d9-cae5-4b8e-a987-1e4bdcc1db6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.9.224.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8b5791-fb86-440f-971c-a748fda7074d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.9.227.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f217525-5d5e-4db5-aebe-b125f6cab800", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.9.231.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59478eac-80de-4e4d-aeb7-8bcb38ffe91a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.9.232.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f926805-d4db-43f0-86b4-c85c1a77e7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.9.240.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99062fc-1fb9-4255-9e6b-01bfe188f150", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.9.245.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21654ce-a79d-44cd-b856-cbf2966d46da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.9.246.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a484244-0893-43d3-8cfc-22b5fbbdf8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.99.6.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3ebbca-2a97-4885-b50e-be47bd095e84", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.112.175.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5a57b5-a3c0-46f9-bea0-6428d2c7039c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.122.117.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd2ccce2-7983-4605-b366-ca76837fbc91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.123.225.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc9f8b9-53c2-49db-96e9-ecb5676b57a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.123.231.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa30d22-cf96-4796-aecb-9c0a044d1192", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.123.243.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248145b2-794d-4f00-9da7-ecb83c250ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.123.246.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5311056e-978f-40e1-80c4-c47aea6cb72e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.123.253.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4113ee4c-547f-4dac-8334-71073d6b424e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.123.90.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead68767-d64c-4dd8-9261-e069e2eecfea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.123.93.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3963a80-b193-41a1-82db-1e36e23a68d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0fdd6f-dbad-4a24-877c-d147ada68309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bb382f-1cc8-40c0-a1a1-ac0cbd4e06cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c12bab1-a6d1-45ac-87f3-2687ef6ce8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcccc036-e483-44d1-990d-34f41a8f711c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697260dd-1d77-4074-acc4-05d113de59d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d97b99-41af-4e50-a5bc-a3dd47a40c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50aeaef1-fa52-442b-83ef-85cadb33a8e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438ad929-195a-42be-a2e5-7bf18654c83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a74f0f-baed-4c27-aba5-19ec999c230d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea085f40-7fc1-4779-b374-c1d9a7834387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293cdd06-224c-4e20-8e30-4b8a9c384359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559dd129-63f0-4468-b33f-6ff58c9406a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e8f38c-7ef5-4dde-83bf-f0848ba5013e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1fe51dc-83a6-4e3a-8635-61db4c8216c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc05174d-fbe4-4bfe-b9da-94602edd0c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95c0537-35e0-454f-bc87-5cf5d12f3581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105b1527-3cfe-4d72-b74f-a20735f83fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a797a85-8c39-47c3-8b2a-5bc49c9f3b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c38fc37-6d84-4013-b9d2-5ce13e389893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91d6a62-45ec-46ba-ad2f-9ac9f39e97cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc38eeb6-cc7a-4a06-a167-3ef9c853c548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c19a69-d8b6-43e3-920f-c1d4a557f0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a103a2-d99a-4dfb-9c6d-e210afabf38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fb4d9a-4d41-49a5-b08d-dcf216de4715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.43.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7633ca-602d-41d8-bbd8-77ca9e7e5468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.148.63.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63247f10-825c-439d-a5ea-1e87db7e3b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8bdb33b-d1ae-4449-bfc4-d2b22b5875d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a458bd1e-1a8b-4487-aaee-667a671f574c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b6f082-d82e-4d7f-98d7-067f02bb3a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b508353b-394c-4a4d-9f78-d116c97369a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971af5d8-731d-4f03-9196-687c35c58ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc156ec-f65d-4e79-b436-c1ea7c79e6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958b168b-5793-4e5c-9575-4e1c738fa27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84f6d84-e021-4a82-ba8f-8b0d8059c5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--facb1abb-3677-4fef-8c3d-c62eda0ffc3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--543d314a-495e-42d5-aec0-d77adb934208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a449b28-1be6-4fd0-acbf-e5052ed3a586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870f5f15-08bc-4707-b403-5d7bd49f999b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7f05fa-d837-456c-b5ca-7a4afa031fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf95832-7290-46f3-a7c8-352b4f9f2dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff533348-dc1c-4a68-abbb-b80019f514a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a06141-3d37-428a-a996-816bb361e2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a39457-f28e-4bf0-ac5f-c9ff4e73bced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e921067a-7438-4da6-8052-2dd6e9e5a683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f075a60-61e5-40fd-a61d-36b3ab4e90eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6aedcc-8af1-4961-b2a1-94e42743b1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40331452-6c48-489f-99c1-40277c0a86ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d32477f-d293-44d6-9e1f-26c67d71cf9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19e75dd-4363-4e65-8c36-58134596e7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2f8df1-9f36-41db-a740-29716297e36a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c65ab2-1aaf-44d3-984c-b539ea4753cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2d494f-f251-4408-813b-f2c6e5920d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9113f94f-2f84-4c4d-9398-6d0861680e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b847d91-5fb9-42c2-a322-8b592242f77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98fa0576-af3a-44d8-b399-64bf11bbbf8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230db436-31e9-4b58-99ab-aca19fa892fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2f7c87-7c8d-44be-859e-d513e9295aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bcca0c7-fcf9-4d98-96c5-2b007babedf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92560ec-87cc-4493-9876-91bb83a1f2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02cca31c-00d4-4a00-b722-efe7eba1a5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb156f71-64f9-4381-ac7f-b9a7c6402861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1663dbe2-555f-436c-8cc9-2adcbda67587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38ffb06-62ec-4cdd-bc27-e3b7b7a23c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a1d937-6d74-486f-8f61-368feaf0af97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ed22d3-c149-4f18-b5f1-e7e6854f74bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06015445-d1de-4ce2-a871-833949e5e967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925a2b6a-c50d-4b38-b5e0-b84c1de4cc2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b290c3a-01ae-4f3f-931f-6678f3e45cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52a29e5-8105-45ff-bea5-3f0cab3eca12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2afe98de-de0c-4f59-9ec1-782abf936710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57c3e01-3c44-4925-a6c7-71d4de304b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03cb925d-b012-41cb-93ba-fb9bdffb9729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de8c6b4-7978-473f-9b3b-e01f120ddd31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8cdc43-a270-43bc-a735-e547da3fc7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c0b2e2-f2ab-4801-ba60-e37c1522fd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a8131e-7e88-4c6a-8240-96e07b5c7ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b0f3e7-6bb8-4bf6-923e-55d92a645a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4afed4f-ff55-47c1-95c4-289bcb77f374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134df95c-967e-4b37-98b8-f9c85efb105e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971883fb-d600-41a3-b05f-1297f86f0851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8feb3372-58ac-4213-a726-921a50a31deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77627cee-a0fb-433c-9d42-3ec4c08c217f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b8155d-3f77-4322-b107-2d358d3786bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb239db5-0cd4-4e6a-8275-82653734c251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63be1d1-1527-47bb-aac2-c37e774670d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc4703d-88ec-46bf-96d7-10264acd8717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a6ec36-21b9-4322-b814-5156dae9ef14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a0a116-72be-446a-bfa8-314c51648963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22d9310-f5ff-4bc6-8330-c98fb998e626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb56877f-4155-46bd-89eb-5deb533ad1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a94a6d5-2c1b-4588-9259-3114b4e2972e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a161bfd2-1b49-40d0-abe4-9d109b08c6e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e680e907-c399-4da4-9f15-9486d9afb568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9613d426-e170-4a95-8db9-2fbce3b4e074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149bba78-a4f6-43c3-9999-d3ceafe0e68d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c2f740-fbb2-4fe8-a358-a465d91196ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bc7299-9c70-4f56-8366-3d7a10eae938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd628d2-fa03-4d5d-a8cd-13e3d4daa0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06111d2b-f1c9-4689-9045-663026ef71bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e258218-7794-4fd3-8edc-f56c392d1326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9426fa94-5a1a-46e6-ba1d-337a7adfd4c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e64403-8429-458b-9adf-75d3398179b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a262023c-4897-48f6-a1da-9eb099aeadef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd4ae94-6ea7-45fe-bb60-8c52b61ad7f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656a55b3-2985-4481-b82d-d088801f1b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322b2949-0d40-463d-8873-3f60b170f1ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481f5ace-c354-43d8-9d8f-c9e7f04b0c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbabd18-4208-485f-bfbe-6640a6b1b98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3bb19b5-3b0a-4658-a7ff-221233bd50be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc58a92-f2dd-4f32-b670-72bc6ac9e2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b599797-a88f-4975-a77d-ecb1eaf79c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5635b0-d4c2-46e9-9442-ceb9af326ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbd7be9-88eb-4191-9638-a16b5b35e68b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d21dd64-418c-4737-ae58-8dc7c33e86d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37fc0b0-3906-484e-a57b-85975713e1d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb9eb6c-daff-42c9-9959-21ff657e6651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606fb21f-9a84-4c21-964e-634fbf0d52af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4434de-4ca6-4722-998a-a5781319be66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9afda6b1-037e-4654-a505-4d1f5685b069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692ee1c6-cfd8-40a7-9022-4b91d29d0593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf96478-8f96-4028-8bc7-352f4bc8b98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ed1543-c9dd-4a94-b849-49c86a20de10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1148b22c-9f49-4322-af8e-2a0fa86a161f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337a1038-4b09-4601-903e-8ef2c890ea9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737d637c-2bec-4c55-9b51-3b14c8bd35da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b91111-4f53-4f1a-abef-8851cadc7a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b230ea61-113a-491b-9e93-d0a8104dd8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d980f5-0260-46dd-82dd-35df1a7ff3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce02da3-fe0d-4368-b699-221c95368402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771f0e7c-aa0d-4a22-a010-39243533dad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9231813e-2209-45db-9229-5169b0f4ec3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c13237b-4eb0-4290-a349-a1fd13194a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51117663-fd87-4a96-b7fd-543edfd814a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7adbd3-b8c5-4b9e-8cf6-ac61e6817a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723f3383-b790-42a5-88b1-ccd06adfbbe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bc0a1b-0beb-4398-bd48-8ce3d672d6ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.19.109.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67fc98a-9b4e-43e6-baa0-20616d05f440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.19.109.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295cdc04-3ac1-4c64-9053-143d13b9cce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.19.109.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7636bbf-7cef-45eb-9c0c-1800726b8690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.19.109.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64ee25e-fd6e-4cbb-8745-aa242727136d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.218.200.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7480e21-a24e-4578-9c33-e28290b9ec54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.147.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0b2c5e-f2f2-41da-99a1-35d3428b05c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.123.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628193ac-c3ab-4c73-a2a4-7584bdbe218a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7284c8-1dc2-4bc1-bd14-d5dcbee1a54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b35164-306b-43ce-b198-f7d2cb3d79f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a13a3d-24bb-4dc4-b38f-7b0593b77193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0dd47f9-a7ca-4ff3-b547-788f80b3bc93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5560cea-3323-457e-b529-9c7aafc1fa38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2172fd20-9eb1-4fb3-ba64-c422f4469171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92850f3e-3955-4362-b60b-258aa16bcfd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d3b9fe-3b24-4b89-a394-70a536007b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f6024b-2f89-4a14-88c2-b118514d0af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdb8378-a4e0-4065-975a-836c5a5b51f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d129f57-6db8-4202-8227-f112540829d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3edbb4d-9e3b-4113-88c2-d5a5f5f6ff60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4fe5b5-6be4-45cb-994f-2d35fac81955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.127.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0119697-5492-4410-aa95-bbb6e0901957", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.127.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8b98e7-66d3-4420-bd5a-031cbbd5300f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.149.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936191ae-9188-4142-a4cd-858c0083dbef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c277b1b-c870-46de-a655-8ac7a10125fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8082f8d4-4d0b-41c3-83d3-18407abe4940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3135a469-26db-468c-9877-636058096736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.248.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6529281f-22d3-4d35-9a9e-99fcec1c8f98", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.249.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a5e788-315a-4bdf-b253-37f97cfa45ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.249.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b41688c-1be5-4976-b4d0-c610ac99ca0a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.36.85.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9b580a-9c01-472d-8798-84f392561f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.70.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8b8b23-ff9a-4ed6-a006-b035f36721a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f272b7f1-d5ba-4469-b969-3774c2012dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.8.186.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a40c897-8565-40fb-a3e7-d26f07269569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.8.186.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc83deb6-dccf-4746-bb67-cabe52d404f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.107.115.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b7344b-d9e6-4bcb-be0d-bc22f7675982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.233.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a78595-dc50-4e35-a93a-dbaf39ab4949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.120.230.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1085f95c-068f-4f92-9836-551e6f7ad848", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.124.210.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ed01bc-9af3-4f0b-92c8-f678c93b4958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.13.81.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47c8d06-097b-4ccb-9ec3-b5f39f68c058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8d9b98-52a5-4e38-8127-c091fd2b1e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.162.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e78630-9779-44dc-aca7-75b6f53632d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.173.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f763b85-8348-4f84-9ec5-7e2f62111872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2056ed3a-38ac-4bd5-b83c-47c33a91c979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ea4c5b-19f5-4969-9f8c-6350fa32e85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837a9027-fa5a-46d9-8c49-85d3bd48dee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.203.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e520c989-3d3b-4dd2-8cb6-58020522e780", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.91.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779b1595-8850-4011-9cfe-0d0ca996c81e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.92.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa068d47-c959-4c0f-ae71-45acac32d6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aafdca9-0795-4af3-bf14-c7fbf988dda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63db6f6-94c7-43a3-b143-454f59db288d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a067cd91-d1bd-4d5f-a0a2-8ffe85fcea96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb63b72-b724-44aa-b13c-ddfb7b9df61e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.170.189.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9719f40e-6eb9-4f2f-bed1-329d53019464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.176.108.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83854e8a-0889-4ffe-8e70-b9c603142ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052b8e3e-d76c-4b24-80fb-c1eb76579243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dec8b8b-178e-4dbf-9395-8a22f3853a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d938733-eae9-481b-a4ce-343911923f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a36ccc-6c0c-49d4-8022-55c08ca2baa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f736810-480e-4cf5-aedb-6f548b0b1134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0026237c-311e-4182-b5e5-b54fccf1bd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe2bfe8-869b-4461-a039-1ddf0c4cd359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d153c6ae-b8b4-4681-9361-599ad1abdc7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5638a98b-01df-4c7c-ab32-9ec687dec38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f5ad3f-9171-47a0-b4ec-66b3e443bfe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5d7455-8ccb-47f6-ba49-93b4f5ac72ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f544a023-b6f7-4382-932f-03b7bfba86b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d821e5bc-1009-455b-ae0e-103fde4a56b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c7aef9-f5de-4b90-a9a9-3d4a9163e025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.208.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d15727-da11-4ec4-8eee-48d91917018e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.210.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee03b28-58fb-4251-af5a-5072cff879a9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.78.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea9e666-32d5-491c-919c-49ff3fa68760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.85.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb82b18-4598-4026-998b-49692340946e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.48.251.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8345330-750f-4c49-9a6d-44bdc87745ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.5.155.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5fe47bb-5c57-4896-a53c-4587e7b533f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.16.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508bc9a8-875a-4eb5-be0d-bc156ecd5613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d12ff3b-0e8c-475e-87c5-80c1e673bd38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3d4045-319f-4b57-afa3-952bbfdcfb53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.55.12.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840d96d8-23b5-4735-95a5-6d605061d232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f3b155-5b72-4b98-a50c-dd1084953dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.62.29.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9be75a-7113-4996-9038-dc456ef85d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.87.250.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5de9120-3dcb-4c7b-bbad-5bcc67e4ff7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63aea80f-ea8d-4536-a38d-62ad6dea6543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d8f950-c63c-4597-b4d3-39c8cfc1809f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba8d6f6-52a3-4c08-99d0-e144eb73473f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83daff4c-2093-4231-8550-78a81d09f264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc62623-74cb-448c-9084-201a6f94fdf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88b88d6-61b1-4879-9aa6-c1959919d495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635d05df-b8f8-47c9-aaa0-fa1ed5ac2463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11eba81-052d-4684-a680-5784d5cc6fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ce7c37-6720-4985-94af-766714b2537c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4645ef-ed81-4203-a4b0-2d5f3ec230b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d96059-a247-4b66-a3a8-212facc38f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7827a153-0385-4534-979f-d135bf34ddfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325e10c4-f56d-4509-890e-2a853ba19d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546f48d3-1a13-4ef8-8340-c4825f8a700b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb29d3dc-8dc9-4d5d-aaa1-a9584e08d7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b5dc82-0740-4273-88ab-5004d5477bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc65a68-63d9-4b6f-9b09-e91466bbd29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712e601b-8704-479f-a406-47fd39a4df2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30db2cff-4d7a-49e0-bf30-99a1b5d778be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32f9829-2e15-4802-a1dc-8b8cbe0604f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7916c7b-e4ec-45c8-8de1-a74dfd3e1f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b46eb2-08e4-4ff8-aa83-6de0d36daadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa3f3ca-a13c-4833-826e-adcfb08abb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2521f5da-6c2c-4ef8-abed-5626f52def17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850eb8eb-19aa-4b06-af75-54acdf81a9c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3538d2a-b902-4cf3-96c2-37f4bfff8e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40c7617-874f-4619-a18c-e8fa4586369d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72999e3-3cfe-4494-94bb-15ef9c62bf04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852b6210-d86b-4021-b91d-340720799ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fecb3558-a36c-41b0-9daa-102e0d24e869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45331235-c587-4b1c-b0e0-d947962e9539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a38cd0-827a-4d31-b755-99e7ecf84c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aaa603f-9c6f-4bac-8521-d2eb0cd106af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3549103-d411-47fa-a967-4ae46363e95f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a59518-a536-4cae-a9b3-67689daac752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ea27c1-7223-4949-81a9-1b7ec75f5f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622a9493-1aa6-4d2b-a589-5be1639e20a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdee08e0-acbf-40ea-a283-671747d31625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7f59f4-d6ea-429b-a33e-79c65c21e847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.0.136.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ac9df5-803f-4828-8dbb-a3148d502124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7f2e55-dba7-4a99-97e1-e564229aa30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.142.112.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352b5ff1-ef4d-4403-8ed7-429715d5873c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f057cad6-04bb-498d-a17a-7a0f3e9dec91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f46c80-181c-4714-a7f1-f8b24d3e560b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881f3918-505a-41aa-b92f-201163077fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d4fb10-87e5-4dc7-b634-c366b43c3e3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4b436c-2e62-4cde-b025-10049e522802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582e3ad3-2592-46fd-abc7-a37fdd7895cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286ea5a3-897a-4df8-8148-899662c2578c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962e1de1-089b-44f5-b859-d3323d4e7b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8658a3-03d2-42a4-a131-9878fe1bea26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85249fed-f85f-4857-b277-e4a4891890b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bbaa242-a750-4b3d-9867-6b1dfc65563a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439626c9-599f-4c80-b785-f8579cc73cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40e22fd-3b51-42d2-ab83-4b8e82b47ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4666b98-2f80-48a2-83b3-9c3e5eca6c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21db1cb4-68e9-47ed-a810-6d09a60fbdce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0c0c87-d4ed-4e01-ac51-1abc62dd6428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b210dde-f329-4f8f-9536-1df8a0634e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd170cd-01dc-43b0-8a9d-6ff41297d6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e397795a-69b0-4dc6-b8b2-b287e7266308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9adb9364-80b2-464d-907f-7da422f549e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b9fe8b-4cc7-409d-88ab-e40875c7f8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a63d979-11c7-4061-a2c1-a95367120fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7873ae2-c1b2-4d11-8839-bc93e94dfa11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9c9495-1663-4c91-839b-97244f9063fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9450b7fc-db20-4617-918c-2d6b4eea1314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592deb6d-541d-47a0-90c4-14e0cba444d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c78700-98e6-497d-8d1d-161f42290b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e3acf0-d0bd-414e-8530-4a91140d8d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ccb8f4c-0720-432d-bef1-245f75fced64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfa9fb4-d40a-449e-99b6-c4171e6f2dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3555ee1-0809-45aa-9f9d-bbfe1a9f340a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b87859-19a9-46e5-8ce7-f158d007af0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2e70c1-a1af-4c0f-98af-a02ada8cd18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26465d7b-600a-4e26-9391-3c7e95d26fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3044649-e0eb-4d17-bad9-f7fbb95c9856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a576bc98-ded8-4ee9-b3f8-91fdc6aedd8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c41306-7cce-4546-a6ac-68c10fbdb1c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade0818d-361b-41a1-85f7-1d263eb05253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87acb68b-76ff-4374-850b-77cc2be1a43a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1fbc23-1439-430e-9f3e-90c83276107c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9f9c53-9828-41d8-883e-1c05e313f1ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d9f088-5556-4fd2-84f0-81e0bcd6bb0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dcac4bb-80ef-4594-81fc-858a961f1e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a45a53c-30d6-4bcc-92f6-1ae5914f0bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f64c0e5-d329-4663-9693-3f181443f0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef09d1a-b154-4cc4-a91a-efddd7ef8a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6b8d98-2ffc-4711-917b-e6eec504f367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aadb69f-afcd-446b-b4eb-c3db10031723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd70264-c0c2-41fb-a76f-b6be7fc5c7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b32a65-1e8b-4b3c-8f1e-6ba77ea156c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fcf1b5f-562a-4c62-adf3-b1182a4126a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--badb24a9-7ca7-4183-8811-dca088868132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9de293-790a-4b9a-8673-ee4f7498a4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd282454-3e1d-441d-afc7-5effad729b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3682c38-4d0c-430b-ae95-5bd30f0cdb05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b49aada-7d7d-456f-82d6-c4f0fd5aaca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980ff2ee-651f-4847-8416-135e91244b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25058b3-7f9a-45b4-bfde-66739bab8410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acda41cb-b860-48a0-a897-05834e7174d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb7bc5e-ddb4-4eee-80bb-15e10d7d40bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ca80ef-3459-4e4b-88e6-0a3bc3797bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d17423-2977-4dca-9e47-ff45f82b6c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f278709a-3f1e-4373-aede-36112a9fdf44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89917256-cae9-4da6-bc0f-29c2ecb90643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808eae2f-66d6-44bf-ac5f-f11430318b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd37055-6f3e-4dc0-847c-477cf5b7d6d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5036b766-21ee-4e84-97df-6d0d79811e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84aea28a-fc0a-471a-9dd1-59934b0c5852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e07dc33-4e04-463a-857a-92804c360e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1060c7fa-ed89-4443-8021-cd09c07e8f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b9ef05-4f93-4987-a8c0-4066ce118343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2bc7e1d-b46e-4ea2-ae82-63f7c5e6bbd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa0828b-932d-45ed-ab0a-510da87c0f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90519595-4d9f-4af4-8ebc-4d2c9c499eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6aa52c3-8f1d-448e-9fa7-e7befa7e6232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dccabb1-ea62-45ca-8e1b-7d1553f09446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0ec398-d770-4ee6-982f-b1057ab739e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107eaf9a-4df9-4139-889a-4ddd694c889a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6fab76-d105-468e-a3d3-f8c73a7af122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e1267d-a3a5-4347-9868-845dc6c43366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a3b4b6-e077-4446-a1e5-43edd38db4e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.199.210.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcf6b0b-8cbf-4c01-967c-5d3a8e33fa3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.201.140.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b385222-c4ba-453f-add2-0f084332818a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff07feb-ad94-4c51-8a13-d1cbfb99bd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafeb0d2-01b8-4747-b840-3f61609845a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4c6557-e37a-49f8-991f-22c093796611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5ef7bf-a8a7-479e-ba5f-52823b6ce8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6c7c90-83dd-4f8f-8803-dcbf99d990dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439b6303-57e7-45f4-b76b-597344919e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b1c677-f905-47f2-be35-14f3bf448eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdafa78f-2d1f-495d-a8d0-834156bcfc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a61a5e-9c3a-472c-81d6-e9c7e99a69e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6186bf-bc8f-41ea-aeae-26f868290ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44558cf3-8516-47dc-ba58-a08554e50daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b182c85b-4da6-4c41-b439-f70703061988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe5950f-9780-4b42-b2bd-4b42a30443a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ffc794-035f-42c7-8ea0-c07166681bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6668272c-39ab-4e1a-ab9a-ed58d8ae3eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.18.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9320b0-d820-4e12-85c7-9ecc181ba17c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.87.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d042a7c7-6b03-4417-a539-348d6dcdfdb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.54.179.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7067585f-ecfb-4121-8283-58e7f7910a78", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.58.58.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76337978-2687-4c19-a91e-ca01941b538d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.64.243.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e9c2fb-94b1-4836-b32c-09c36f2ef093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.89.78.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdc9dc5-91b7-4833-942c-9f40900a84f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933eb70a-ab0a-4b9c-8e28-d28144543ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c024ada-8b64-47e8-881a-65043f45231a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.188.57.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb93868-5141-475b-aacd-cf3109a0f360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.191.104.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc281d4-3615-468a-8644-8d2b3ca60833", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.196.253.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc560db2-f8ac-4782-b5d4-5d5a9b369ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.216.93.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cddec9b4-251c-4251-b3ad-1fea854c0c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.221.145.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ec24f1-ce18-469d-805f-dfef49ccdc54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.240.181.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff4cfc9-5219-4462-8d21-04197a267cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.155.134.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4a7c65-7134-4224-ae99-d24ae851dc5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.188.231.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8e91cf-dd09-4411-978c-4bb29b2de8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.235.16.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc58ab4-474a-45d9-bf89-60f3c7014b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.235.16.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64011e87-a5de-49bf-b441-d86060006f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.31.52.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23fdf89-9b65-4629-8b5c-0c1a466e6608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.177.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c9e1b6-9aad-4380-8837-56a599e3ab11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.178.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09867f0e-f8dd-4546-9e1b-c567de80398e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.179.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ba4c33-ea1d-4678-8598-9756dcf39f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.180.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daab4d02-d705-4ba1-a670-c2a350fdb949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.166.25.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c0c491-8fe8-4c97-a6be-2823c04ac585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.176.50.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0816bc75-3d2d-434e-bf8d-af5bdaf0d396", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.176.52.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cd996e-e0a2-4ac7-8d57-e32931977ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.176.55.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10ef2bb-5e98-4ba3-9db5-3b6bb93341a9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.176.55.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0158dca3-4120-4ce9-a849-1837762bc1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.176.55.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4792267e-7787-4891-bebb-484e076d3d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.176.55.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81cdbece-64f6-4179-bbc2-607d5cc6db7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.106.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a94851-114c-45ae-908c-067665d3a0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.123.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314b9040-3b04-4595-b31c-a2dbbe3d1c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.99.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7de57f-a8c1-4040-affe-19e58af2cb17", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.189.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803373d6-3da1-446d-badd-59db2d1a3034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.190.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a59622-9256-415a-b541-d5261dc70d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.233.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f85718a-2d2c-4c51-be01-3e7aa167928c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51477b62-f374-41ee-ae5c-e1557cf1fa5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6a2d23-211c-418a-9480-8b3c122b0bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5498c2-c108-4800-80e4-eb24456baecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee39ddc7-f43b-4a14-b0ed-f4be182f7682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1604f7-84da-417b-955e-8151221dfa34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715d42d5-8348-4035-a34f-de4b6e47b070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1acc04c-deb1-474c-9a07-3d96fce88d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13de28a1-f3c3-43e4-9a07-00111207cc46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c344d328-92f7-483a-a3d8-9ae128005b1c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e39ef4-a74c-48a2-a66a-aab10ef200d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72842af-02a9-49d6-82e8-dc91d5413772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180da26d-5cc0-425e-8334-75baa1833e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f862666-84f9-4708-b1f7-4aaafdc59b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41230bb6-46de-4fd8-8ca0-f19ccc020568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbe145e-f76b-4a4b-b21e-822ac01244f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236a50ca-d36c-43b2-aeef-796ff5c7f5b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410eb209-8a54-4c65-a2a8-b4e96c99578d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c2db9b-f78c-4130-894a-aaf9e2010b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263be5d2-3f72-4980-a5eb-2d8f13ebd998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147cefda-2e50-4990-9cbb-83d45d35edb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ab825b-6fe6-41e7-8b30-da94a16848db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65c34f9-1241-4e94-b928-164e9bbe26af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18b5c07-96aa-444b-87cf-c1442545b2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c32c6b-dae0-4c38-bc6a-d9627c0be413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b03b3a7-5818-418e-8038-6215ca0714a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c010006-986b-4db9-819f-ed37820bfb86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eae93c6-c785-4769-aec7-b63155429a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737aa3aa-a9ba-4996-9414-d1340713e33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca28f660-e7b8-46f6-87e8-19415d271052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c6272d-2904-4ea6-a7b0-affc27f3456d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e875ea7-d33d-404f-b0fc-fe3e451a1b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d916b2ef-9cdd-4b83-afbd-9895bea80daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108ca366-2504-4919-9da6-fe88eea3e85a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67424ea5-d4a8-4736-9340-a754ca84b473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb7a218-388b-4b71-9e05-00c54674439d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec97eb3-631b-4cc7-b4f7-f1d2f0487e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3165541-3ff7-4641-bec0-9e5b51a6a101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bd56d7-f1ae-4a9d-a71c-6be5242ec877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4d69a9-c734-4300-8ec9-8af959efb316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b38862-cf63-462e-8235-d7a2a1426eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4af467-d241-478b-9900-f0536d6dd93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0c5cbb-9811-4528-960d-45657e2d14c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5cd9956-9a92-4452-894c-82b88f026bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0efefa7-17f1-455b-be1f-9c4481e60fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c83486-cb84-459a-9b7a-ea1d41509361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f7c069-e456-422a-ae5a-c25cc5583786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb58138-0677-4dd4-b2d2-e529a9067076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4682a54-6bbb-4735-ace1-fb1e5e664980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff57b18-bf11-4d3c-8c86-1b9e676f67b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0597ab-91f1-45df-ad8d-bafc0b6aec50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9071a696-5de3-4b13-b7ad-e3590ccfa5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3e4723-3c4f-4267-86ae-78a781c4988c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9929a1f9-ec54-4dbf-97b5-7971d1219d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc95b83-b2ae-41c5-8e9c-649ed84e188d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeebc42c-6b64-4cbb-9512-88e37bc5b794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494c948f-2335-4b61-8a7f-f49049926824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc1c8c7-3d9a-4ed6-bf19-a439176cc175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120040a7-5e9c-49b4-9c46-67b4bd77da84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b8d00d-1fc5-4f04-b595-d2e1d0678bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d992bbc6-9801-4f29-8ad5-7d32c12a76f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1742c319-ddfc-431c-9831-0fcc3eb4a6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e6d883-330e-4eb8-b5c7-ec62c176534a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9b31ba-afff-45c8-b020-2166e6cd7e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa306947-63fe-4d4d-9c96-d46ec2512f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8912360e-4fcf-4642-9b4e-fd81755c97d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09886c8-9109-4cb2-9839-2f468b2cc96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b4a657-b6b5-4558-8f7d-0d422f77f59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292d803a-eeeb-4f8a-88cc-1f1fd3b6e8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df812cd5-7092-4a4c-a05c-9c93aa706bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1d5a7a-17eb-42c2-a16f-4c5f7375b893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a73d45-9ec4-44cf-bdcc-e95518ca06af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de15d720-a237-48a3-9d74-47226ee214d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c87b33-fa94-4ade-92ce-6564b1d319ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0682bdc5-05d8-4c7d-a559-be02855491b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987a4588-3113-4c07-9d8b-eb082ab165bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d78fbaf-b885-4632-97be-b747eb7f676a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ff2a52-f177-4c85-949a-d693d9338060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164879eb-9e47-4e3c-9d1d-23af04d02092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ed21b5-45f9-459a-8574-5db3312b2f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b91795-87f4-493d-823f-4f5318509b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2973f454-5eeb-4bb3-a529-d30d37baa7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8478324-0182-493b-be50-127fc7b5f5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e5264b-19e1-4e6a-bbb7-73c8fb890fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc8720a-279a-4b77-88cd-450a22499cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b98ab2-2b37-4e3e-a011-ca02dbb793d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330745c7-b6f4-47d7-a536-a073773e6d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b552f2ad-9e50-407d-a096-fcfac6737cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4dd0797-3f72-494d-90a0-f119d46d3db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6aeb38-d768-48a4-ab37-1571dd546ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e45a68-48c9-4c2d-8718-cac6dc9527e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025d4d8a-1fbc-4bd7-aa8f-9a0e383c3b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f4cac3-fa50-4723-bf74-219a63cd374b", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90cea41-7f5b-4592-99ba-53598bc3b360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882eec0c-b16b-4893-94dc-9deffd709fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9546cd7-25f1-4d1b-a3f2-ae6f43b17623", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bc0b5a-5258-4f4b-8762-2d07505fce45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c372e4dc-4c40-4098-96e4-933bdf960234", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430a3697-2397-4d15-9a9f-5f803dce144d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4ee041-8533-482c-9709-422dc4ad3b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2f6a72-2ceb-4c31-abcf-dd9df7658eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83cdcec5-4e3b-4e7c-9f49-2ad554fa3119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20eaeea-78f4-4270-8602-7512bb9558b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5be1b2b-fb01-4a87-ad16-9efffd2ac903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93083d7-a12f-4515-aec4-e5f352543857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1a5dd5-25b1-4c09-9abe-f3e1bc851b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e48749-4e92-468d-8e0c-82a514100af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7322f7d5-b59f-47eb-976d-baa549723bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bbf73e-b4af-459e-9188-49046ef47392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24050da-4f07-4d68-8c4b-399492c762ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f2f035-6968-492b-b4d1-2984374cae22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e766aa25-b62b-4645-ba48-685461b27295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9fbe654-2348-42f2-b610-609d283a4279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7365df30-7600-4243-a56c-3009b1eaffcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e25b31b-ebc1-4918-92cf-3db7eee8a546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb4263e-7870-47f6-9089-2106209e5e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2d9840-f574-4bec-b1a7-9e092dc4a61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7092ed44-3154-4f9a-bccc-a2bbea02f23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fa89e1-a57a-4f8c-81ca-649ade3533e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97bd410-4bc9-466a-bfc6-830d09517052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fe30df-4673-45e7-8e21-32f261bce9b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe29d330-788b-4d03-88ff-94d7309253b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7848af6c-9a55-4ff0-bfcc-ae932fc37dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1bd7f34-63f1-49a8-84eb-d3bc286f506e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fb0792-51ad-4a9c-8d87-ef79a7a41c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a9430c-7a59-4901-a9d3-63a841f201ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99faa02e-7bfc-435f-9fb0-c0ccb71bb76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70933ee-83d4-43e2-ae0a-df56cde94a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd4b5e4-8884-4e7b-9d37-4f8d584a5cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802a7806-6959-4683-a004-98bf1228e647", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d708004a-2112-4784-80eb-00da46f25198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a8663a-a2d5-410c-adb2-e98307ef0bab", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d3ca78-ee9f-4b5c-a2bf-0688932e0a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32bc75b2-8e27-4c92-b6b1-a42ab06c85e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e826be5-4115-4391-b125-9a1d75c465c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0cb6623-073b-4035-9d61-b561b47c037b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1136d07e-ca84-4776-8c16-6c592056e217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa43b9c-2ab6-465d-b681-4bccf93d9b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec72d3c-417b-48ac-9a3f-7335acbba6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98108fe6-d8ac-41c7-b203-065cd1b3427b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504076ed-fd78-4866-8b9c-37ed4e95591d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ff101a-a55e-4f87-a7a6-808300231a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f10ac9-f9fb-46f9-a2cd-1b8e4b3e7620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77134067-6f2b-4586-960d-f128535174c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07615c46-e231-46f2-b800-bf21e34d043f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d9535a-e512-473c-a83d-0976128adc78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3162db-c17f-40d8-a395-24d32461ffb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b542671-7c99-400f-acf4-dc4d9e62d80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e7b8a3-1b3a-4d47-b7c4-4f365c0f71cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fbf221-b116-4865-b8a8-e6656751fb89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57850bc9-09f4-4cd6-aa8d-a9c64fa2c4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61dededd-59c8-4271-8a36-2b3593d8a52a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86eb17a5-77b7-45f9-957a-4a6ef832f56a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f42ae73-82fa-464e-8ad8-0f3f00345b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54593630-1b51-43ac-b7f5-759671e3dd14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0200cf4-e71c-4c8c-afbc-ffafa674c0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588f8e00-c669-437e-8035-04da343c7963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018a1a0d-39c9-4ff3-bae0-17c356625493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07be5d81-9a37-4d9c-a463-a2f1a7a23059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052a7313-3b7c-4f9a-8951-909c9decdceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8522d785-276a-431e-b915-79281964ca65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc5bc94-9e6a-4435-a7ef-79cc7b8cd4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187ecaac-16fa-4079-968d-6864435fe917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0def017d-c1a9-4d12-8be0-3add0f4c445a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b12f89-a6a4-4fb6-9bae-213bbae3ccf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d875da-9165-4dfd-9d59-6103ccb3836f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662116f0-cdad-4b63-b05a-a72f440e127f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1758dbfb-6afe-45eb-ac3d-33c43dc5b5aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.244.240.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe35744-f0e7-4988-9116-30780c566660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.134.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2315312b-63d0-429a-bdb0-b03aa1283a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.138.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3554af9e-8a63-4d7e-858c-4f6ef3efdb67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.199.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560df764-5d1f-4cc8-bba0-a3466982234f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460247fe-6e4c-4eef-b6e4-8d1cca6d18ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b03e9f-2463-4970-9b18-98e26642da7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8da866-fab9-41cb-bfc0-ce8b2d7bbdd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb5c4db-7c6d-400c-b0f0-41c40667a58d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686a4716-28e7-455f-addb-8e0da6bac105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2164ad8b-93b5-4a04-8ac6-5389312f04f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f041113-1a9b-42b1-9648-42ee8d817913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.59.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c04264b-6ee4-4f4f-93ec-f641867cf9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.59.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9283bc-f8be-47b5-bcee-912f7de45780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.62.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf74777b-edb2-4faf-ae28-c77b2ad93d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.62.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1770949-a2b6-49eb-8ed7-7300765e9607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.63.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3c2b88-30a0-44fd-bdde-1100767db4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe07807a-e927-4f5d-bae2-7e8a34f815c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c403fcd-1133-4bdc-97af-7af056857643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70e0d99-c602-408e-9a96-326f50890554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba11f89-9f49-473c-93bf-7d3f94ba6308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98b2cf2-b331-4ca3-adff-f86e95aea505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc8ed28-c91e-4558-a2de-3770e1c650a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ae394e-d918-49b0-b9b9-c20edac5a0d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364805f6-e649-40a6-bb44-64555ae1c1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b619af1-285e-43fd-be23-3fc33a265b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f8266c-2981-4a4d-9665-6bb598b0763f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--543e06d7-5b7c-4aa2-b0a4-dc88ac0a3b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8338bbba-d90c-4364-a485-c7862c20a5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9fe11a-66bc-49e0-a46a-c44d0d75b7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa7eea0-50e9-47e3-ad76-82496a3162ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f7a8cc-f58f-4c40-afcd-afa627491b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520c1ff3-3f5e-46f3-9cb0-af7c80a51419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5670b7-537b-4936-861e-cfac4bb311ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abdf1a8-4bb5-4752-a711-155dbae93215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583c8f51-18e2-4838-9f64-d16a12285ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e91610-92f2-4824-ac1b-1004a2c9b32e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd884758-1ce1-4d6a-85ee-ba879e0dea1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c709f9-f930-4855-91c8-9fed66f3d919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77350e5-feb9-4a95-934e-996a9315ad68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04429c83-a1c1-467c-ae53-875a3c24e41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5fa490-5521-4076-b414-1f69631a0533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ff9a42-b41e-4d0c-b7bc-321e5a38eed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462dee51-59ab-4255-9baa-747f46f14b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e86c76-ec9d-47a2-887a-124657b7d17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e45785-e338-4641-a426-30a03c0e7556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba49f4df-67fa-4863-a148-2c7970cf81f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e76b647-5281-4e85-ad71-62a4e3e370ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057b132c-6743-4dd8-80fa-3d22a4a394f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a2e9b0-4c95-45a6-97c1-88a17ca6fe62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4ae3c2-49c1-465e-92f6-bb9e0602b2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fd486f-ed27-4ea8-954b-f505e98fed04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785c8900-155b-4bfc-bc34-b7209d1bd742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766ccb07-bced-42fb-bfed-9be7a75b8f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac563e8-86ed-4564-ae23-08d4f669ad31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c389aae0-ab1b-42b9-ba94-43a1e3051be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d9c441-0b1a-4da5-8071-1b02f33d1f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c2a3b9-3d29-4bda-93fb-b02a8d820200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd0abd6-6068-4676-9d72-7a8fa05cd459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d6cadc-09ca-4a89-b7bf-7a8f00c1928d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a001bc-0ee6-4df8-978b-571a1caa08a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c00031-38df-4561-8016-7c9197bbebe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f62db0-e293-434a-829e-06b182e1d421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb71fcd-57a2-42a8-b467-b40b28ccfe94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8668bf49-3d8b-46a6-bba7-e31b38b10e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61745ebf-d6b7-4954-b333-530c1941cd8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0f2f63-20d4-4fd5-adf7-095150850867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec457a8-b7e4-46fc-81a7-650d6032cc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f01def-87ff-4b58-ac96-d49df6ddd1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a12b18-35d1-4134-a76b-8ccdc75a1884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6cf4db-4268-4bae-8456-298873a57774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b9fe07-0cb4-42b8-9945-a43b2ba810ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e050392-19dd-4b4d-a08f-2a6b76590788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b781ebb9-35b7-448d-b2e9-efdd7c968013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95330bd-bd72-4666-a97c-e284edb63e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa48d2d-fbcb-4b9e-be6f-25a7deb5f07e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.47.242.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4935d8-a3e2-46e3-93d3-1de371d6d18e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1px']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b87147c-8102-4ed7-b3c9-926745b78cc4", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1rem;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d22ca6-28ce-415f-9f20-140f52770804", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.134.15.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e00c879-613c-415b-8638-d92265eecb62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.179.195.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--706b107f-33d2-4833-831e-370c712ce5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.128.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651f2dff-5b75-4c58-b68d-8117e13cae0e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.164.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87deb6a-6a59-4d97-8a69-09793e0714c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.241.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c937fd-e39e-45a6-81e4-484102badf25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.248.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936df916-15be-4f30-b5d2-24faee57162a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.224.169.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d9e74c-9657-4c1f-923d-c956b7b8c602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.72.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086bd5a9-4cc3-4bad-8188-8966330cdf81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.56.245.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a38ddb5-52cc-4759-acfe-33932ebb70f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82d1d50-22f7-4274-ab51-fe54f642e612", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d22f26-0086-403d-8f26-e571cd4ce928", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88286650-cd5a-4d81-a4bb-eacfc05a5b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.58.196.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf18226a-f297-4f06-86b5-3374ea0a8bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117b31de-8947-422e-83f2-04dc5fa8b61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.105.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef63dddb-07e9-4b54-ae6c-195f22c3a140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.108.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeef7aa6-476f-4748-a8c1-8d485b847fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.116.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe64c3a1-71fe-4624-90ee-89010d292648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.40.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d05b02-1c76-401b-a542-10d7b2a99cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.42.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a59951b-acec-40fa-9d47-6c006d73d615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.46.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2c7bb1-06fc-4434-95d5-66e12e8965d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.88.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d8f0ac-bc50-4737-8dd4-d07abccffedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.92.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f7201b-11ae-4343-8aeb-78297abd3e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.104.198.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d3f0b1-1315-42e2-b84f-06cab6ab6e82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.104.205.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf3dbe3-570e-440f-8d77-d41374761680", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.104.244.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf3d2f2-273a-4b59-a011-9d6d2b8b6b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.168.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fff50dd-d67a-4900-acb2-90d3c0075fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.17.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ab9a11-f2f5-45d9-8e52-bd59bafef507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.186.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e0b59c-5328-4757-9682-32ec611b36f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.186.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd4c2bf-ce41-4d70-acac-e5184a4bb135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.195.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944afbdc-388e-457f-9e2d-4704bd7373e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.196.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2477fcae-8f09-4d24-a2ac-9e1da63a2e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.196.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7827b1c8-2d66-4e27-a3fd-1ebd8883bad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.32.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81259331-e3b7-4e0d-9dc3-edaf252cbd67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.32.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88facbd4-db31-4038-96a4-45ca7f24d12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.33.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a6d39c-1071-48a5-a335-e06eb0a8d63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e421313f-d599-4e5f-86fd-26038762e5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fde035-746e-4453-897d-cbe9f708cfc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1d6214-d839-4fa4-b29e-33da6702397f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.112.233.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72c1e53-c3a2-493f-a755-0ee3231191c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.114.31.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc73e281-713d-4f35-9b3c-31ea001af720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3bd178-718f-4e31-bdc0-7bc74481fd4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.202.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0cee009-f531-4988-baca-b8b71b0f184d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.208.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d38c753-d85d-4100-b1ba-8d6a969843c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba45166-9d28-4279-9ecb-689a40a0aa1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbdfd862-ca93-49be-b0ab-714c2a9b3d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36dd867f-9eda-48b5-89b1-a704c3ed1b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.232.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724fa564-9f46-4fca-98f9-5916af26a7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.240.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb42ac8a-e22b-46d3-a32f-0535235a6a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d63e4f-6f02-430f-8455-187aae3e0740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f4269f-5d9d-4b7b-abd9-ebed1b4428f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f07a731-b0f9-4261-903c-ebbbe4768625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f8b3a1-0b5c-4b81-9bd6-e0640465c39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e97b92-d8b8-46c6-94be-36943ec905f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.103.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b7720d-7d0b-49b0-954c-868ea567e18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.72.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17504300-ae26-43af-ae12-891a2bdd6f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.74.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005de425-8c08-47f8-adce-5d12dbcf8f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.86.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4d065a-9af0-465b-98de-7a26e291fa85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.87.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78612445-03ce-4785-8224-8ce758f800f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.99.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f952d9-29e4-4861-ad5a-5cd7951464ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f732e4cb-4640-4af2-9fb2-2bf9068a8763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.123.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce729cf-4880-4745-8af1-74d53a6f1396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.139.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733b1bd0-f39f-43cd-8e6f-b1178267ee65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.46.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fec94a-b18b-4a99-8001-a7c4d5b2ad83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.152.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9ff5cd-8f3d-445d-bca9-2f27ee752ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.153.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66497916-b2d9-4331-8cf3-e09a644d4f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.170.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a01d26b-fe35-4a7c-9a70-cefb77880486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.185.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6feb0ed9-2c98-4dbd-a463-83d43277e91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fe83f2-3754-4740-8b9e-0206fb466b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.204.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8441d581-06eb-4464-99a0-6714e40f1e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.210.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda5ad36-d8e6-4ce8-8826-6dad8340b64c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.218.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474703da-f588-40ab-b3ee-a7ba1aab4abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47fb06dc-45b2-42e7-9d06-739f6fbb8e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.72.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6f18cf-9097-4cd0-b7c2-8b8cc2d34778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.72.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609f160b-929d-43c7-83f0-8416dd341c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43eec82-cffd-4de6-810c-4fd0dd03f1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c721469-3d37-4d19-bff5-f69955484f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e559ca6c-c22a-4f52-b364-a898b920263a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49776d21-35fd-4786-ad46-11504c5f15d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7a85e9-f8fb-4743-9b74-6074dad9717c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c177976-7eeb-4c6f-82f4-19ef6a7fae1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.75.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10100437-5d96-445e-a743-4b100b08b06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.75.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd40eda0-6aa2-4e47-9b76-0f8e4f5fabb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.78.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28748851-9920-4ec3-b7aa-a6fa500d2d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.79.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2438be-3825-494d-802b-da99682d0e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.83.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71dfc2d8-04a2-4595-bb60-d348ab0b14b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.89.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc55ec4e-aa02-4479-9f60-e5d4293edb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.90.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78bb1b66-5a72-47e0-a341-48bd964d6e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42989c8-3899-49d7-af1b-ae95eadd7ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdcd47a-61be-4c2d-8226-63ba5a33f50d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19551a88-9ad9-45a7-ad94-d74fc4ebec86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36cb2015-c4c8-47b6-bc66-5cc336abf194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.164.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd8c611-366c-4824-bb7e-bd9361820882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402b3cd4-5ce5-4e2c-a9a2-f7c0d63deb32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.201.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef495043-4291-4673-9850-5062fb93b8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531a0a71-1c2c-4eec-9bdb-2137899a787e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fe97c3-f11a-4aaa-bd1b-a454268bf185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673f366b-cf2e-4385-9d5e-23a927e9ed2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6f22c6-d80b-4a8b-af52-8ed55f7eaa7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e627a0f-c3e5-4764-b571-8ec0c43ec035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4841ee8-ebf4-4249-b0d9-695a6eca069f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.194.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae43fe80-efd2-4f91-a0f8-1b2a892707d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.195.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b034f36d-a25c-41b7-b7fa-44f194356e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36444c77-2ebe-45b2-a6c4-7a5d090a1be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60b6184-a92c-431c-9ec3-b266e675013a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d2bc5c-589d-4593-9563-6235c083bfbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39594b7a-8de5-4b66-ac00-d552df4210f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad56256-21ec-416c-9f5a-492fba57f79c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5ce1cb-f6d3-4f66-ac96-055c657aa694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d7eb32-dbd9-473b-991f-7ff4901bc6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656d8dbc-0dfe-415d-8a1c-d9e147bc0098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5703ae1-a5f5-41c8-9ab4-94b051a9c26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff8e753-fce5-4ff0-a771-4afc25c23c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a610c449-f7a7-4f7e-80c4-fd8e860afca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b084ed-ba87-4e58-9a2b-1d6b88cf7634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87e0b6e-2b7d-4379-99fd-f1493d917a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7530cd3-bc0f-4669-881c-7043e0c22837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b758c7a-bf58-47fc-b12f-7cb05aec2774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f175ab-d15e-457e-828f-7a294e01afae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b78a60-a3da-4a39-a995-d44a1ba3bac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2949a91-3af3-4723-b43f-b4d9ea4549cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.16.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7dd9a0-46fe-4021-b093-9b01de27469a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459e9db0-9e99-481c-96b5-3599e77dd2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3000aaad-4e01-41f8-aa81-5db78d4c4e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060c48dd-411e-447a-bd7b-0ee2fa286981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37ff75d-50d5-452e-b985-8b8f8e35620f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d09b818-85b9-406f-b7f3-3b16558826b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.20.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e87073a-6cec-445d-9967-636673f4deab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.25.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee28f15-49ac-43cf-b90e-53548d5c0836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.26.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74498a2-658a-405f-a047-85b25a285447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.27.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970f143b-848f-4e75-ab79-cacae4002d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.0']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62d67fd-66e6-4aa0-b068-ce845365af7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627fbeda-6961-4fa6-b42f-cdfbf6b0aa22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de781286-a6de-402b-add9-3fb0a4050e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef079996-d96e-4648-abf3-1575a68194bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a11715-03bf-4014-920e-237ed7f6101e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.4.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581ee6db-0268-4464-b6e4-a44ab142d3bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.57.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ded6f02-7eca-4843-9484-39a7667cb006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.59.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fffdd11-80de-4b52-940c-627e1e3ae2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.6.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92033a9c-0594-4ece-81fb-08e03d7be0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c370e87a-ff55-4c7b-80bd-c5715196806c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3fa1755-5251-4902-86db-bff93199b400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17295ee0-5b9b-41d2-b2fb-1fa81ea35f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eec9b70-2934-4869-9931-6f28f602d8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106c38cf-6c03-490c-8f4f-3bddc6f43c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8ae825-7339-493d-be07-10d71db96fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.8.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1a6f98-953d-4140-a36a-bb0960bbeaec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a9860d-83ae-4c33-9ccc-00723c43aa23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24d52c4-3372-4f9d-82e0-393467e6e8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.107.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e8c8c8-d2f9-4a97-9713-1a8f33c6d968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.116.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebd8f35-c332-45e6-960d-e8b0349770d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6a751e-c5e7-40cb-b781-56fef397bed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0a72a3-a92a-4f54-a7fb-924be19cef94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf2ad34-927e-4066-95d4-d6f816b8ee50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52f2808-7500-4ecf-8228-19124d9567b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb14c709-049e-4136-9b47-00012632e591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b35cbc1-b77e-4f2d-be89-7bf7f9eeb858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb6f0a1-56e2-487c-a753-5df830162dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7122b39f-2875-47a8-8565-9cda3bae8374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b93937e-43f1-4130-8a37-2034ce63d21e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6197b2-4a1d-4e66-9dad-931f2b99adbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fec8e9-e2f5-4969-b1dc-cd07ddc3d16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7df5f7a-096e-4a3b-bde3-c3de6846c684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012de7c0-7c69-48e0-8f98-6c850095f3e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7cf7b5-4d9f-4b41-87ac-7502371b83fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d22977e-33d6-406d-a7e9-1a6b67263d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4b3818-56ae-47c6-a355-2a7bde5b4d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e760fd-4642-4626-b8e5-76391f77cc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b992efc3-efd2-4069-86ee-d8dd604c1ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6319f92-9c80-4f34-8f97-822b6956194e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40cb3d0c-cc07-4f78-8cfe-829e434d2b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78660c93-37f8-4240-b264-e93d4cb7b332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.0']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b57301-95d0-4d9a-869b-3b2068ffee73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a64b01-ebbd-4926-879b-ec821c516cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aced61ad-bf97-4bea-815e-11b7f5daba7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d887580f-f1eb-411c-b101-290465e08a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be15722d-daaf-43cd-a7b2-328dbf83fcd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252464e7-a23c-4cf4-966c-177f13d13184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a56320-11d7-4ffa-96dc-123ba6afabe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.13.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5900ab94-a109-4311-9c0e-5557711410ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.14.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93baaffd-c36b-44e9-88a4-86224ad87958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5c471d-48b5-4ecb-9abf-67c6914b18e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f3cc1a-bd92-4499-a87c-d5555c379bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986eeb48-3eea-45e8-a1b0-76ba3c9100b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc854c4b-9f1d-45aa-a6a7-b3b43b4f4fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7deeb656-700b-4944-a414-914ec55f5a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b0d5b7-4617-41d5-87a2-f53f7fbbd91c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3364945f-a1a4-4ded-afdd-dd049516d220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d7a443-d77a-4506-92cb-f0fe1b1ce1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b6a9d0-e4b6-4593-b023-79bc32802e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f64168-18e1-4471-b985-524bcf861565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607d386b-54d5-4350-8e6d-44cfa5e14550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956901d1-249c-4916-ad78-f8406005ec2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afca054-5b47-464c-8155-18a23b57f048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1349da26-c8f8-47a7-a658-8ab3f77cd8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82b5d63-8076-486b-b98e-81e40d111411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34727166-4f39-4a45-8107-16ea9ffe9739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd95d671-089e-4f9e-b7ac-9f115cdad4c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.8.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db350b3-f74c-413c-954d-8c692a63c6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.99.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ffaf4a0-0945-437f-8493-5cefe001b9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d029c8-9768-4e83-b241-dff638e40ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2682b6-0130-4ade-b30e-c85ae1f2fe73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0221fef6-7541-4c0a-9728-082df71f879b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc08a7f-bc6a-4a3e-be5a-7966383ee6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241077c1-bb78-44c5-a4e6-6db244e84b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe8a212-00ce-464f-9354-f304be22bf0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fa047c-8e86-4239-9f64-1d7b0803c52b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91c1bac-7313-43a3-b055-8f84922c4d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95580cc4-5f0c-46b1-980e-cf1a33f18cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc64cb17-989b-4f04-8bec-30390b688f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069eb601-ddf0-4588-861a-2e07056bde75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4c3bdb-2af3-4be7-9320-6bf8ec909101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5b81c8-21be-466b-8fd7-fc315a5c4fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1228d7a1-ca5c-4587-9bb6-ed5314dd6ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb53eb6-5dc9-4d51-bc67-0253def0861a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf8c0b3-396c-4d65-8767-d13224c73975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b424c5-3024-4a1e-bdaf-7fddcb0300e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa9b5bb-c8a3-4ce8-b12e-8ed521f7d8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddcddf72-4e8c-454b-9da9-acbc93a5a721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99397450-6749-4584-832d-57c26a19d6b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b888ee-6a1d-4a9a-8602-a5b069f8d192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5203eb-2752-4afb-a780-bb4cbabc904c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84fb6a2-25fb-482c-bef9-fb50f6c0ec65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e384f8df-f9fc-403e-84bd-9df8de4dbec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe07881f-09ee-43fc-ad33-c33cad7dff6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c998b71-0ae7-4ba4-9144-a9896f62438f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b963062-ebbe-497b-b953-5572a3874fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad81f782-3a8d-48d2-adb1-e3ed46add3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9249c8ae-f6e7-49b2-9a4a-1ed28cae125a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc140c2-43ad-4d3a-bf2b-11d5f8cdbb10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9512207d-1992-4ae2-af39-1ef528175aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da339c30-0178-40c4-9020-d73d9a5aa620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d746692-e2c0-4c97-a84f-78190c9cd2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313529fb-2f97-4452-8546-b36211e9e394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7749dd84-dfa4-4202-b192-9841dc459e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b404a0b-017a-4c2f-b36f-7b6cc34c6f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.51.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fb6181-052a-45e0-893f-9a48236949cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d874167-f7fb-462a-9a32-babd51f0ae51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521965f5-d29a-43b1-94eb-0f9f96dd7a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.80.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2a876e-f120-42eb-be85-32d4c82431bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99fe7af-f9a1-40d8-9acd-e8f36e620eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c798acf-a89d-4624-88d5-5d659a260515", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.88.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3808901b-47cc-4985-b9a2-a3b056cbaf9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d29523-dc08-449d-b8d7-509ff1947417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110f46ca-feb5-4d3f-9b6b-564e0935378d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4192c960-b742-4672-9e11-947b1e4edf61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363a34c6-17d8-4621-a037-c73317e937bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.28.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66348aa9-6c3a-4115-81bd-7cafa3a3cfc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e539d23-2db0-4304-904a-96e0f9a05cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2d8fef-3c18-41a1-9204-c18d9fb61fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a400ce23-d0e4-448e-80f5-f06ecac11c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816b14a6-f333-4a6c-a61b-7d8af33b7162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0c59b7-14d7-477a-86dd-d0234b16f1d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c57cf52-619a-40fb-811e-2bf0416cac59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5a15ef-25bf-46b5-9247-8781a088635b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0f8b13-84b4-4034-b10c-012d9682ee4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71c9df5-8fa4-46a1-a1db-b08ec409f6f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.9.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007603dc-7c8e-465b-ada4-1cb8d08f9b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.70.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fe4ef7-786d-4f61-8078-7dc0cfc8600e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.192.24.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96523f51-2b64-4d3b-bf27-94a0bd8cb947", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.192.28.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b199a6-f391-491d-bedf-e326e0609deb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.195.24.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1133fdce-1e97-4784-af76-5ade4e823656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.12.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dc764c-9b5d-4ca2-954c-2c61e6f20240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.203.102.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa365427-9f9a-48a4-985c-fd47096ebd1d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.204.136.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348ee22a-c1da-46ba-8859-b37a48d51037", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.204.148.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8e727d-2aa4-4ddf-b23c-9b315b07db7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.206.185.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e18cb3b-9dfa-409d-98a8-4a695ca970b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.207.203.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29702ca0-19ce-4a9f-89e1-77a1ade917f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.217.83.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c950ec9e-44d5-47ac-a35a-18a7b3fe6464", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.219.60.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a686548-3cf2-4d05-b5fe-c7a34b0a4c05", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.219.91.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68a1b94-1de6-48b9-a986-20c0c3e6f166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.56.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50ec27f-8be1-4c72-9575-9b2677bbd820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.57.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c51f22-4600-4696-ad66-b29d2bcd5a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.58.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7fe2b0-5b78-4f7f-80a2-11fd2106fda0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.66.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69473c9c-3a54-40f9-a0ec-5d19fd50b0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7f19b5-fd30-489f-ac73-72b6e666643d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.69.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de596edb-49b0-4920-9e85-3d9b911a5388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.232.163.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b918ab9c-260d-4531-a1ce-e6e295f836f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.81.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec458ddb-1b18-4ca7-b50e-c9de71af3391", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.95.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8749c6-88e3-4880-9d0a-bd9913da5392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.255.249.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8eba86-4e17-42f4-b459-d2afe90777d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.19.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331dd4cc-a5ab-42f3-89fe-cf6fc0af9419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.19.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0797eb3f-3866-45c1-88f4-99399a0e1a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a76f298-b2fb-4fc4-9690-2fdadce66615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e03ca67-bdbe-43cd-ab39-640d79af3cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8999efd-d418-4db9-8fe0-699955d41ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81635049-20ca-487b-abca-2da624dfd1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84f81d8-059c-4175-8994-d388f2ea0612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4503cf7b-1444-4c8d-96fd-47a176e47951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95212c5f-5d75-4b00-ad53-490736c2bbf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.56.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a48c06c-6b13-4890-b71c-a65954073bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa03a340-ca01-463b-be76-8281935c48a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.33.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebaf2ee-2817-4c86-b719-fb1b8786fdc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.37.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95242856-35ca-4f0a-af00-53e715d08531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.45.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e10069-0c64-45f4-a5b1-b9b96bbeada6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.208.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4c215f-49bf-4513-8f54-f313606c6620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.209.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80255f7e-68db-4e3f-9773-ce6d731cf319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e3923d-8d13-45ca-8e22-e54ce86ca7c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36520153-2a09-4c22-ae54-08492cb9918c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91b7766-d01a-4895-953c-238eec13e89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.108.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0472b65-dde1-46b3-958e-2afa514f8db9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.43.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424774a8-1791-45a3-87e3-1405fddd21cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.95.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc71f96-1278-4e00-a3a7-997912416c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.225.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0924614-d3b6-44a0-891c-9a264109bd37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.231.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd4403f-bf60-4b2e-a93f-b08aa2400250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.244.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37cd0e07-03dd-4084-a070-7a65d29fb077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.251.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78ed885-8760-4b93-b239-05ce403906e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.234.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbf27ad-4a08-4e76-a18a-993f03202442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.244.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23e2472-2059-4901-a3cc-1349daa23417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.245.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5bf01d-30d9-4cb5-8419-4385c2c4c808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.2.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7819400d-9384-4a8f-a5ca-4ed610187310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.29.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1242ea-6629-4c77-a90c-7908b078ecf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.3.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1a76dc-be01-4341-87fc-1dd1f7ccc1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.35.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac396b6-a9e2-49a8-84e8-0a20c2801393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.36.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fe6289-72f5-4705-b5b7-24b74afc05d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.4.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f98854-c0fd-4a99-ac22-75002b4f26ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.42.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95bc9d69-591c-4058-9abd-1dd9e0ad957a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.47.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e868f8-8de4-4baa-9c99-89167ae5264d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.50.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64cadc68-1340-4aef-9e7e-cb0ffe101142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.72.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e367a9c-7297-4a9b-b8e9-7c4966e1b988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.88.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49730cb4-5dd1-416e-adf6-a4d513d6bfab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.62.207.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e61ec6-df32-4bf2-bdba-355d53510a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2daf69f1-b386-49ab-98dc-0f5cea3f0e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81310f98-a8b3-426a-bc1f-3ab5f1dc80bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9d22c7-7dd2-4b5a-93c5-0be2d3b7d711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c2f5d8-7759-478e-a607-6f67a59f03cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b95916d-c414-4bbf-a143-2eac85063f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61aaf0f-deac-4946-b204-ae84b63b8f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fb9f1a-5111-4a34-b48d-536323bbd175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0368c25d-6800-45fc-b5b9-b1818f6bb293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669ae1fd-4e8b-40c1-8db5-019ed76bee2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b7fd42-8e16-4da9-a704-bcb5304f3210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b91326-2972-4822-b7ca-1f5a3751938b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8409ad5b-cbcb-47ed-852b-28648f4833db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed5fe30-3acc-4aec-ac31-b64849782fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b0343a-415b-4147-a31b-2fd4d30f6dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7c7972-c0ac-4baa-89bb-5161931384bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33654ced-9d71-4118-a10c-4991a037f5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5e87a3-d527-4d3a-9aaa-016ff3e9be39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba4555f-a688-4049-9b74-53b07c19d250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07263ebd-47ad-455b-ac39-b378c6940795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05709633-44cf-4b64-b757-08cdbcbbfef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8716238f-9c8e-438f-9925-ab7376f4d76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80153370-f786-4c3b-88d6-1fe498d196e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ba083b-5eba-44af-8efb-432cf61f4728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0173e8-b366-4949-9196-e3f3aa0fdc9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f7ea2b-e52b-44fa-b286-06306bd1d3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f59b3c-ed05-4ae6-99b6-cfe793f07896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b06fd5-cf88-4239-9858-74b303ad0116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8a9439-4e55-4257-a43b-4fd72bd4cde6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8080824e-2259-4bdf-9939-091395c6881f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38f9f47-106f-47e3-b1cd-e6bc11da678f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388f0493-ffaa-4b47-824e-83c571cecd7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf428219-2ddd-40c4-9f36-3a8315a7b417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255ef8e2-c9fd-421f-9210-59b1a2b6dc80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f66b63b-cebf-42ff-9bd4-3eac99309580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7834e22-8fcd-4eee-9dd9-b561aec9c594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8011d41d-b3e6-4c58-a082-8fa723ee6c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf68021-5e85-4b6c-971f-7624e2bc4411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5776a0b8-c4a2-463d-866e-7ef2fcbaf74f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ad74c0-ee6c-4107-baae-cb5fdd210291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a85bcae-46e1-4705-84fe-6a82f713a283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.145.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1178330-d4e8-4445-a3f4-ee583919dd65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.152.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1252bc1a-605b-40ec-a9cb-dab22d0c1085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.152.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc151cb0-43cd-4f92-8668-83193d85f4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.153.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad4683a-ac60-4016-8095-6cc3fa17d4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222cf25f-e590-45c3-89cd-c4a28423f0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce545f4-fa70-4de3-af23-ec72c4dfd0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59bc9dbf-5e55-4fd1-b61a-f35d9d9ef706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0f820d-bf62-47e0-872d-c7476432e2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d1da16-a9a8-49cb-8eb8-9e3ddcaf5fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba9ad2e-baa5-47c3-b327-6fef29a25da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8689b74e-8ed5-48ae-9476-130ad78aa586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.178.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31265fff-0a6d-43ce-a830-65cef47d9edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.184.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93dbd1d9-47d3-4589-a7f4-f396ecf2ddde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e157a826-43d8-482f-b263-3e5f5e168a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c168ba46-1733-4848-a5b9-2151e71ab99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1cdd0e7-b171-4b05-91c4-58a354632373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a64d022-37b8-45b7-8c74-edb01186b5cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.0']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de193e3b-0bb7-4bfc-9baf-a71eb7d122fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a02505-a195-499d-b860-48314d5364d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286e4412-6970-4bf9-8eda-c93cd8459980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af43f976-6808-4aa7-9c47-c5f92c219f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a2c6ef-af7d-41ce-8715-06ee44bebb5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84709316-5b56-4961-b5c2-e7ee8af9ed89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7727e8e1-124f-436e-b8a7-396d0e88d234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b810f98d-1fe1-4017-8fd2-020a8a8fac33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2076ed5e-2424-40e0-8210-11d439efab6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01273cf-e887-467a-886a-7016bb3a4fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69123683-2367-4cc1-862b-d814cf3f70de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb28bf6-0b0e-41ef-bd0e-ce08b81fd875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48bf286-628e-4521-9c88-0647d8472acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede478b5-1e0f-4cac-9042-7ba8499e8617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474f26e2-8b40-43cb-a551-8e38ebd675de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d871c61b-efee-452d-b88a-c2bc88a9ee61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57310e96-933c-4c2b-af52-f70f076ac4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3318701-af0a-4d49-9a59-056ff1290f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39572d2c-911e-4f99-98e0-00b39422f906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f452a8c-7430-46cb-99fb-30843e214e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6adc32dc-cdd6-4c2d-829e-164fb1341ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ef7e9e-8697-49a5-b0d7-9aaee3383b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c737e9e-149e-4287-888d-1ffe2f4fb915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2830b3b-21b9-446c-ab4b-3a933ad4d0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f3b3ab-a73c-4625-9aaf-a9c39e87db6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65436c62-ff68-4a48-bcd1-6a5b66ea7971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57373ee4-762a-4d2d-8ba9-c2e6a56c1a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3aef62-64d8-4c50-b002-9c93a7345292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c298c48a-00b5-4ec9-82a7-4c39f99871ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf307210-492d-4744-9754-70d077eb2d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f857ac2-1726-4013-8b17-545242b39720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf2e780-4d3e-4914-8bcd-5e37d7267ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bd35dc-2df7-4a3c-9a53-eec5e95781d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c57c7d-3aea-4daf-8668-c8df8c23f7cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd17a39-ba4b-4776-9787-37d3e90f94c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114568ab-c34b-4381-92a0-476bdead0fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6cc5fd-7dc1-4c5b-b942-b1db5d859dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6192dd0d-e0bb-4d27-9db1-d8a8c8eb4b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24f0a21-8b40-4056-ada6-7c123350b7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed80a632-3247-4014-b4bc-119ac2fefe29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398af9ef-5a4a-4437-9dfc-b817018e88a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4d02f6-d35e-4852-8c35-78a9a27bc4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c3c37e-50e9-4730-a9ff-d698899fa3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4847a9ac-6cf4-4366-83d7-8dfe60acf0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--665f18bc-d747-4928-a699-6966e363beb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500b265b-9823-41f7-a3be-c377e42d38a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6876a4b0-d911-452f-a815-89a1c8ec6bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ccd9cc-e4d5-4c1d-8b5a-0e06ac1ca612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324d72c3-c1c1-4b89-a851-5acbfe8e9973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c027542-67c0-4705-bd45-da39261b62c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b24f582-251a-4e4b-ae8b-e79d5a232b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de37a914-868d-49b0-b6b2-0cd314fa1b5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fc5e44-1eed-4ac1-888d-ec5998c8107e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ced657c-7642-4103-a510-2f1d697d275e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21b9057-b59f-40a8-99f3-01b11bc0c41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8427c6-d160-449d-a836-66c4fd355423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46c4a3e-19fa-4f05-ae52-84b8d5e836ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baebd091-c173-4de9-9448-93688a970316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1a79ab-249d-4204-a9d6-04433bac1b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840268e5-0663-4b70-a349-97b1b9f7b46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58623da-943b-4f60-b5e2-efc15279677b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40eef7e9-6d46-4c03-825c-eca700060699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec16e55-ca31-4cc2-83e9-abd8d10ce6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975ff407-964f-4ff1-8fad-2811630e0bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.224.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8dbe7b-4b65-43e3-8661-3071cf1a36cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.226.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1eddc9-2c08-48f3-b839-6732a002039a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.104.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e46132c-b67c-44a5-91fd-677679a26e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5c51a4-f785-40af-aa7c-9e031efdb638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50920943-a720-4c6f-9a00-1918b5aa7f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde74456-d4dd-4dd0-ad0b-4edf9613adb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.72.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2770ef52-4a55-4acf-8e95-349164b59525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.82.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14095b08-c62f-416e-a582-3a8fd851cb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.83.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4714096-eb0d-4fdc-a577-089967c3f387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b364578-c26b-4870-a033-4ea5eb2dd46c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4430123-ff8b-444b-81a8-5c3780c4ca54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180d7325-9d72-40ab-b68b-03f4c241f5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.47.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6967671-cb7a-428c-9b84-b74a02ccf906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.82.185.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0f4731-9c56-4368-b923-924c76a7453f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.150.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5d1d95-4952-4b26-a5af-8141556fbe1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.165.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f14b18-04f9-407f-abfa-9da8931be118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08a60cc-0168-4b2c-8711-67635aa2325d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294219d1-4c24-4577-a224-3be0d993d713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.173.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50be6176-aa7e-4d7f-99eb-e9fb123fe1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.48.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89bbea0-61ac-48b4-a3b8-9457d05e87b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.49.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb74caa5-5290-4647-9b4a-54c8e085cd88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.117.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69529b1f-7df3-4560-a8c1-d0ee03206469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.118.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f4c5f5-9c76-44f3-978e-75bd1e1ed5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8a00cb-1b37-4a27-941a-cef22e38e917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e709a10e-3896-4876-bfb9-9b6119f95ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fb5d32-76b6-4a61-8e99-4cc672399da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697dcafa-77ae-4256-bb83-d1fefa1fe272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.41.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e409b4e5-6a0e-4212-b692-5b494d64f0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.60.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5820b55-8cc2-475d-9d33-a6f9228ab8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.61.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1223a6c1-4f37-4bf9-bf25-b8b5fdf58bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.85.246.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1fde4f-9d21-4ea7-99a5-6f7be371bc70", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.89.118.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597e9d0b-c76a-42d2-ace9-7fbed722a7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.128.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882ef3cc-f590-4619-9599-943d01c128fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.128.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2f2007-4bf1-4716-9eeb-23c6e3a6d1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.137.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b755a704-4b78-4d4d-9bd1-7fbb6ab0ef5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.152.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0f84a2-d049-4912-9d1c-4a3696390437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.164.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05234771-9cd9-478c-8e74-2d6f2ea82d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.164.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42ccdbb-d634-4120-b818-3f34d6bd6093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.165.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35571936-4681-4cf1-87a6-adf4fd10e737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8685dac3-73c2-4fdc-aca1-2270d67abd53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.23.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40803ae4-d3b4-491b-a0b8-ae0f33cee964", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.129.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5553de1-52fc-4946-b99f-127a4b12a5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.196.50.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40bd14a-7b82-4ca0-8fe2-26bdf317c744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.3.27.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07861cba-6cdf-4904-bb9d-970b4ee5a32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.48.2.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551944d8-793f-439b-8b15-ab9affc7f418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.56.131.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28854bcf-5f0c-490a-924a-7e567ba40d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.75.4.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04b8b24-b73b-41f7-9a6b-85a41c219a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.105.31.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6cd1f6-e8cb-4157-881b-7e048d312418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.110.14.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea519e21-bb5f-4cbd-bac5-3504163e6e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.140.123.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e087387d-9ac8-4b08-8849-15aa85dfa29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.186.33.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7bb309-e9b8-4c8e-b00c-b5bc7814e377", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.243.82.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d59411-4f82-4be6-be7e-e3753451cafa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.249.87.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ea0562-3205-45bf-9954-f687e3eac6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.249.89.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d13aded0-4ebc-4acd-b5ef-45df7066535b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.101.73.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97499ebe-1c00-4c08-88ab-829b5caf4dbe", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.107.234.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7459bc5-9961-4155-9f8d-8463ebc31af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c2bad7-3b64-4838-add7-ab5b50e7eeaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a96d98-5e3e-4e55-bd6e-648faf90ed99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.143.110.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cd57e5-4ab7-437e-9f4b-7dfe063e0b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.155.152.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab9baf0-b291-4fe0-bb46-5d6d4ba7dd26", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.189.15.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f67df0b-a0e2-4589-82ac-7c5fe60ce7ef", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.189.5.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeeeae3d-7d13-4208-a69a-a4e3050d6754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.4.115.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0d1698-25ac-43f3-9ea9-9d212bbd757f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.47.32.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99dba369-2d32-45eb-8550-cb5e4e407898", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.53.94.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b853ab-a88f-4fad-8edb-dd4b5af88375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.63.207.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6265017a-9f14-4a0a-b309-75f96f66117b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.70.139.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8cbf41-0d99-466a-a13f-b2ce6b661e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.71.141.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8d4a1a-096f-40d6-a3ed-89b56fa14892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.72.245.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b863c22-d189-4435-bc37-c188c50ff613", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.100.66.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cbe926a-58ad-4988-9106-62bc9903a11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.109.124.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c57bb3-fbaf-41d9-85d3-23c397a10c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.134.214.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de26baa-4399-4767-8c65-3ef0e73e6baa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.18.158.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15adf90c-12b7-4021-b4dd-1fd5000ebda4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.190.153.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc38af0-2901-4ebb-b1fe-d8c1b408ebaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.25.223.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5de9825-5000-42e3-953f-3d8e49518a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9a967c-5754-48d0-a476-f131e487b256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b860252-aecc-4939-822f-32467298b655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99119071-bb69-4f05-a74c-64a177d3e2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.11.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8263454f-7f7c-4532-9fef-dbe6c491ed28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.164.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f1da36-9df2-48cc-bbe9-4f0a4447d93f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.88.119.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab92e3f7-9c37-407c-8dec-6d89658da441", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.91.72.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245ad358-f10f-4a5a-8443-e29e6c74eb8d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.152.216.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3e55aa-ecd3-4714-932d-9e0f83336dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.44.101.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b543f6-280b-41c8-84da-19346fc21ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.28.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63890165-e58d-4d12-b190-6cd0c2b0bfff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559b9b8a-d73e-46e2-ad37-baba1345b92a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f349ff32-6bca-4754-ae37-3e58acc29079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc5361b-3e6c-4a1b-9d3c-352da57e4d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32687172-e7e8-4676-a930-a5ab16425bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506598dc-bfe8-4ac1-a526-12fe5899cf17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5236bbc-b66d-47cb-b04b-cbe15f356bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e147531-59cb-4483-8114-e03af4c998da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.125.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c167cad7-bbc2-464c-b978-932f7e471fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.186.64.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d1c7a8-ffa0-49e2-b86b-8235b32be9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5125ac9e-81d2-4d86-b976-26fcd9b7d378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1142b5-51e7-473d-aa7a-7ebe599c7992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448f5f42-ecd5-4d2c-b61f-cc48b7bd291c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9481c526-f9c9-44de-bacf-5ca7560cae1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd95a41-064a-4b7b-a3e5-a062d2d98615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1648f5a-ba45-4562-832c-0337c18c9965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ece04a-cefa-4084-851b-ae8248c08239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e0a1f1-b0d3-490a-a57d-9f800bda0aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e3d717-cf1d-4f2e-8215-b6f04081e54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e188c7b-c4cb-491c-a785-49117dba3d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8021c687-7e33-4096-b951-ebb274ef1633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbd6237-231a-4083-9dbd-e31a1bf7a469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb6d653-67a1-4ad6-898c-35e0a2af1e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a6f34b-861d-4e2b-a260-1c20bc0f844c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b823ac-51f2-47e1-afc9-008a90eb3d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6302ef4d-ab35-4cc5-bcc5-d0bd5021f15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2a3efc-b419-4b32-9fd2-7775872c6028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c651ca-50a6-4b0f-9999-e216f4301d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08a1142-0278-43d3-b997-b8a8d8eee9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca47724-665b-457a-9c2c-47bc70f2efb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b075e654-e238-4fda-b462-482561aaad67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee575d4-8b14-4917-be03-cb4e8c91e00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48b0569-6fd5-4a49-b9fc-017bf05ea5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539e03d1-b82a-41fd-a336-f29d9c68d214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88639d66-141e-43ab-97b6-655a4f451aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56378d58-07ae-4c4a-ad64-ff084225e468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14862245-3ac0-4a25-b636-9bc8f93fd2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1510ce0a-bbc9-4133-bd4e-08572db63032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1d6920-b641-418a-b353-10502104cd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1b0e3b-5e27-4edb-8497-181ff9dcee3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e1e5a7-84d5-47dc-8b25-acc94134e668", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d935ef78-23b5-4abd-84b6-e246620c3737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f989c042-fe14-431a-a8c3-d0410692916b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f2bc5a-84ff-4763-a8ef-ad6e5be08a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109af669-566a-4b2b-a137-d7f2598a850d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cb1409-ff8c-4345-b6fc-34f7b2733243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fd6d94-06e8-4758-b415-2cf460c7ce29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9816678-e205-448e-ab5b-acd4c1676804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12801a6c-ac26-43b2-b364-9c78fb91c140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9a473d-d632-4c43-b639-291fbc32e112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1775501-15c8-43b4-b7a2-4b73af11aa91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aeed6fb-e97a-4b07-a6af-bea7ee256f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ee5d69-d3a0-452f-bc24-637cf786248e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3b9c65-63ea-477b-a0a9-7972b106c7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812626ee-699b-4288-a32f-09205fc775bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3380aa48-22a2-4849-a185-d82a022e7fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44188fe-5531-43d8-b427-2c03f28922b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f39038-6403-42b8-9963-052920531df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c122033-f3bb-487b-8261-62e978e882d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85642d50-a3d7-42c4-b165-ee83fc731f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c94d45-70bf-4b7a-b288-13e10657dc35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057f51fe-d871-4ab8-aa21-414fc7ad39af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e544a5-8dac-477f-8da4-7ed922939c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65210c6b-ae36-41b1-8839-ee048da0d5df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8abcdd-b624-41c9-9896-48fc6231f864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087099f7-4206-4598-9236-1594d6564167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec296f2-3b71-4a86-8931-72e593f3d226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73dbc099-7ddb-4e5a-b644-6c717840161e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d028ac30-8c00-4f61-b986-7d2883078e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f676d92-8bac-4d5b-8fc5-705d4ba6d44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e92a444-2dd2-406f-96bc-136504504446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18127406-9012-4ef7-9a2a-c96b5f06c4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350b24fe-9df3-4d9b-8a36-5dd7befd28b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e071118-b995-448c-ba25-45dc101a9d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80196f41-b290-4579-9e9b-b8d7206b70cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ccf427-49cb-4546-9879-1f595aea07ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abaeb17-8352-4993-a586-81991ca7ea8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8ca1fc-99ac-4c3e-aff8-61996120e367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6827172-b387-4fd8-af27-5975d943d8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0788a31d-4704-4e25-a2d4-0e63b2266aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1878ca9-5c32-4a82-92d9-38f191cc8f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbf2714-67ab-4fa6-81cc-9ef0237fa2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f662ce4c-7912-41f6-bacc-1eaba689b1ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c96ded-f693-4be0-bc68-1402405f21ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af71ec2e-76d3-49ec-bfc0-b4ebab85e6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8780f81-8610-466d-8720-cae89be883d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f69378f-f61f-4ed7-a552-8ad2a4f2bad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03339770-d50f-4ba7-94e9-89beb17520b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbd0c08-f5ad-4457-ac16-c063d04d9efb", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83446bcb-9cfe-4bf4-a487-7bfccf499ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676fb5e1-f79e-4af1-b8e8-3d7626d4ab39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23f3e9c-e5c7-4f59-aa77-67947b693ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdcd250f-e998-4b8a-8256-1287a560498d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48e9455-cd46-4185-b084-c96d7d3f291f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d918491b-a580-4252-b39d-8cf4ae23882e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd54bed-c1e0-4337-97f0-85f11d71b955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541dfbd6-fcb5-4933-a177-3b6ad3deb3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9c7c60-5e97-4dc9-9b57-7bfe176c043d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6429398-5a72-49dc-9f7a-680b56fddbbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acc1d6e-e339-406f-8a35-958a87dcb0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8ac91f-a41e-4aed-bd11-7413af9f55ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed169b0-e840-43f5-a052-e4279448e150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24e83b5-a2b0-46d3-9541-ee70b193c966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efae24cf-669a-4077-8f3d-3327b807bfbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066b2692-aec8-4a7b-a32a-9f144012a49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf3bf53-e23e-44e6-9fab-708eed190f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c083254-c0d2-43ca-84c0-229e16ef8683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35249453-4ba4-4e6e-ac81-9bbffb682eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f41f32a-7bda-4996-ac2c-448736943e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02dfcc1c-edbb-4e05-b88a-27473d62ceba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481a0c05-8532-4ac1-b37e-969f58400842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5934ee24-3f04-4f87-9628-3a6a33762379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959a439b-d5f6-454f-8039-5e6d65a8812f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66ee8f0-a558-476f-8527-876c8d6be957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1762b849-89ad-4184-8f66-af6f37f50f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c94ddf-f3e3-4ca5-876c-53f7d7320af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46b3df0-4137-4a16-ba3d-8414fa0a9c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34053c0-d0d5-4f70-8192-9c5eaa376f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a58365b-cdd3-437c-ad77-d4850fc65641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8a9118-fb84-4cf1-a3cf-2f31300cefa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8604c7d0-c4c1-415a-850a-3d1e442a660f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805a2d7d-eefe-4ec8-bba8-89e29483e569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9f8bfe-5e0c-44d7-b17e-26a170485ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e4c372-6ed9-4bb1-9981-5c344a390986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08070a68-3544-4805-b7b4-2790103167ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d0d4d7-da2a-4fbf-ac98-0089ea2a564f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ac7114-3557-4c16-9a9d-29b229e1136e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d756783b-a521-4074-9d60-e85795f54346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2772fac6-76b9-43d8-a1fa-d53f6853bc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a562d287-432c-462d-b2dc-6926e2615c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b0a1fd-29a0-420b-8344-6f5656054f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b9e1ed-2117-42ff-afcb-9e5dc59ac492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1993ea27-d472-45a5-9424-2df5a0f54177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160ae6db-2552-43b1-ab87-b2eab8c237f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafd0b2d-5edd-4eb0-a0a8-b28d552450ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d839e6f-42d7-4e45-b4b3-d1424941826d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49a43ad-d297-4385-a005-17f9e90972cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ecf778-b9eb-47eb-b1ad-9b34b7c15812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d6a43e-4c32-4ed3-ad2b-f19fe5a339d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b78289-16b4-4bd2-b9f0-e53e5534c8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1abcc7e-e23d-42af-8415-def5aa6a8272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927915dc-c168-4ce5-9594-f9fdd11b2e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93030c41-33e1-4b17-b9ca-db9fe124bfa4", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4500d3d-e4e0-4a78-98e0-099b673dce0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207e2e54-595b-4f15-9119-8e7f97110e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c66e45-afaa-4f18-a189-29009916f042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863c0e8d-ec2d-41dd-b025-d1af5c365382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90f66d5-b6a0-4abe-a900-1fecd144571d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294600e0-98d2-4000-9a3a-bb77d861afd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdf11cf-fa74-4966-976f-8807fa3f5b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1dd58f-13a3-4590-a3f8-e5cdb4103c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a0cadf-33ad-432c-bd2d-284e6361f6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055cad51-5d1e-4675-be6e-e927410d7da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7940c1b0-0f9e-4b78-b288-83aefbfeef5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a00e0e-d9ec-4bb7-a28a-9f192fc6a119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32dfd6d-5381-429c-9e76-14aee00fe73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a769ab7c-2b65-4bc0-a427-e4644e6f65ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21fc464b-358c-4ebe-a83c-d078cfd0cf37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599af747-37e2-4d0e-af76-dad1ca159cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb08bc4-75a4-43d4-978d-5b332452f5e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead3d34a-7ea3-47c4-bc17-0841a5d84a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8f060b-c8c5-4917-b6cc-0bbd393cdcb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549491e6-53a3-43df-9888-7179fb793550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531e3c85-8605-4ea5-bf7a-4fd60683d079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce76947-bc36-4a0f-8355-9118bf84d238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335af512-1a25-43a0-a4b3-8b74a0b8a356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.156.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d898ae16-197c-488c-8517-ce72f0d88b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.183.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558b42a1-42da-4577-b409-9dba629858fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.203.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e1e7ae-960e-4376-9c17-189793d4de66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.218.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a70d75-9381-448f-bae5-a8464fb02af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.220.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be09489-aec2-4af3-aac6-e583ccd9a8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.5.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d0e389-9647-481f-96b0-0ed031d98ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.212.244.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c2fb5d-2ca7-4e16-8815-a1678fdea13b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495dfb73-aaf3-402c-ae0a-1c9c801fa2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.223.236.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b36850f-7c3c-44e8-ab60-f43b23029ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.19.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e6c559-7995-4576-aec7-072458199b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.82.6.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8240e3-9671-4598-bab6-541d931fafaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.195.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9605882a-01d5-40fa-b8fe-2fa90e06688f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.196.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed31feba-2bfb-464c-9ada-d2a553307f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.198.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462106a3-4c86-48a4-8f5f-1a106919288e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.199.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59788c07-863b-4ed8-830d-88a3bad5d98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.224.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0d4066-4f18-4306-87aa-58b4decf59bd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.20.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c2926b-9d37-46a7-81f0-225b09dee326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.93.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f4d203-a89d-445d-a5d5-b7c37f0d29f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.99.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0857cc3c-6d24-4c88-8da7-9694070f4f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.196.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95adbba-9a9b-48cb-b45a-85fe4374815e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.225.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf924bf-f67c-4950-a5dc-6cd0329ace1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.211.157.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3379f563-cabb-4b1a-94f6-f1cabb3de364", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31d588a-64cf-46de-a0f3-172c3537f072", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.56.229.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f735d3-207e-4a03-b11d-83c2dbaf34e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.57.132.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd50c140-3f7b-4c69-a199-10139fbd3390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5acc10-e4b1-4040-8779-3c1655c4818d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11737bb-d280-4734-8874-d8130dd502b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef19a9f3-cdcc-4154-bc8d-8dca54a56c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c53ad19-233f-4df4-be3d-9781e53d3b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949e642e-464c-41e4-9b84-234e3bc5ac09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb9a9a2-641f-437e-8f9e-f5f3281599a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.68.180.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1964b98c-09a2-4866-8a76-5bd1a8268708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a899651-53e0-4cd6-83cf-08137fbd1584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b51c2b-f04f-4c43-ad80-a25b743fbaf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50824338-af8b-4bc1-b805-8e1f190a45c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.126.4.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb647c1-ee15-4009-827c-043e786bb9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.33.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f03757b-96ad-4327-b243-690cda697b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a75d3f-4a47-48ff-8868-aad017d5c9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.57.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97847eea-9032-4534-9a89-677b05d22d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.159.153.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b542845-c8bb-4b56-a8e2-49d2b143ff8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a814db4f-dc90-40c4-b241-0e1448a89351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.98.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c005273-2aa1-4824-96a6-872b2f1d5a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.248.1.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb57823f-bf40-494d-af38-acbb75f3c8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.248.1.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9148d8d7-3ea3-4977-899c-e9a8bd11805e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.248.45.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee73bf1-8741-4961-8893-8fc4be0f6aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.111.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf92266-61bb-4ce0-a667-329f036577b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.167.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089b8b79-31c9-4102-bde3-2878bfd33f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.229.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b81bf7d-6a13-447f-b76b-af3df22ba5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.233.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6a8185-e536-4e08-aabb-2b8ae4ba411a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.32.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ddd384-20c0-4a52-8653-dd577ecff27b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.34.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f77409-ceb9-4abb-9df0-9bcf6e21f963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.43.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036779aa-2b85-4f72-82ca-a9fc6371e6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.67.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cc36fb-b280-4b20-b333-11b78fc62b79", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.74.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79db3f61-8020-4252-a079-e4595c85f7fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.87.169.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b8f3eb-2367-420c-94e5-d8748320f13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52e8b65-47fe-497b-86ec-d8f3a96e2baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d0560c-a969-4396-9bba-dcd2c80384b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dade76e1-cc55-4541-bd85-59fe5c8e704b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f719c7-537e-478a-91b9-620933f04749", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.170.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf97203-c22b-480a-89ef-3a8f33c0b5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.185.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087c3085-6a19-4215-abd7-eb8f8823eb0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.185.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b319a47f-c326-44cb-9ecb-8cc5448f9fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.185.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4ddb16-5720-4e52-ad9b-fd660b3a9e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17de240b-25ca-42de-87a3-5d773b04a8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7b0db9-c155-4442-a999-f83e1a329fed", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.189.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890de0e0-6e0c-4652-9fc1-b3497c76b317", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.190.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ccf58e-f6fe-413f-a990-8ef0f69b64d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.191.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0c96f6-54a3-462d-870e-a09995b79d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.117.212.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b60bcb3-495e-49e6-b937-f6cba5715e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.192.94.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4914d6-b294-4926-b2ba-763f5fcb2655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.210.155.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584b746d-0daf-4055-b371-d59df48bb4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.211.122.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8cd9e8-ddbc-4d1f-917c-be081089e019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.6.0.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869c6492-5442-49d9-88bc-b716f8c83f49", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.87.110.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ea02ce-a555-4888-b8dd-8b30f4fa3f54", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.97.60.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecd33f4-8c88-4739-be02-f3558bde4efb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.143.176.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcf910c-ea8b-43d0-8f12-556f76bb5cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.145.38.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05567894-9eaf-4775-8ac8-fbfb43d49787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.145.38.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c2e659-fd5c-44da-a3ad-1f6f4ac623bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.157.179.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823d9f27-63d2-48b8-91be-1ad27eff1ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.178.247.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43e7f27-01ad-42d3-8cce-8b5d5e622579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c1fe86-054b-41e0-8931-be06a28688bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.199.165.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d639ec-3f4f-488f-ad48-3ac6dd219ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.216.58.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ec2ebc-5c46-410c-977f-825fee487bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.223.41.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39116a14-4df8-4f97-b9cb-051c5c901031", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.248.212.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b8f2c4-6df3-45b3-926a-8dd8e60e9780", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.253.37.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42aea78-9834-45ec-9ae5-c12201e2c156", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.35.209.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f83716b-f95a-40b5-a9c6-d2faa2cb0265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8cd0f9-9b83-4623-b636-903f93f025ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.97.132.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f3282f-b763-4f66-be68-3b5217637571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.100.184.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3948425-1efa-420b-ba24-e21c2f72af2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9ad69a-6230-421f-a4be-91c6f78ffa29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.111.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6fa204-db90-4a70-bb0e-01ed8582b8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.127.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c180b8-c9b5-41f4-a1a7-46e1e0398e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.135.211.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481b95c4-ba98-430d-8472-639a99d04a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.154.154.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8f6970-2f99-4108-92b2-39128d2a2ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.216.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd5c681-7313-4158-a3b8-61876afb8433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868feb7d-5a6f-4942-afe2-0b2e18cf2b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.119.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6037bff2-f3df-497c-ad0f-190e57d1665f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.140.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d103610-73c8-43a1-9351-45467e0b73ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.247.156.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a00258-7b2d-4e15-be5f-ce57b5712cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.252.17.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c784fc-66ad-4b2f-8c3b-43133891b1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.47.65.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff953ac9-f15a-4594-81ae-bfe874df1dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.50.231.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100b5b33-efaf-48d3-abb2-f71fd1135789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.111.148.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d410b922-362c-4b4b-8456-bfc82c98439b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.81.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435ad33a-77a1-4504-803d-96223ba01e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b390e80-9116-4f06-9ea2-ea1326aa76ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09fb0b8d-72bf-40cf-b0e2-81d8a066b6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e940e4-b1c7-4a1c-8543-c01d2a5fa2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c11061-9317-47d3-962e-4c5c1bd210be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0b9bae-dc8a-4d02-aae2-0941813852c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.179.69.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6d96cd-03c6-40b4-9546-18c2c5394463", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e0668a-31c8-4524-af9b-bcba60684ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac0598e-62b5-4b2c-b3fd-d1c6d8390dea", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:openclawglobal", "protocol:openclaw", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6702c043-dca4-462b-9c2e-40249405702e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94ce43b-1ea8-4c6d-9e4f-489768d4d64e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff74145-07f9-44cd-9449-defc506cda4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821f8cf8-c8df-4ee1-ad5d-f282660c92b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.22.72.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1132fe3-0f33-440e-9ff6-8b4129a90dca", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.43.19.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d264752a-6330-485e-9b0c-cf70747cef80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.236.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd23860-7f3a-4b61-968b-85c7c3729916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.239.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3759590e-a620-41f8-9a62-28f8d8ed68bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.133.145.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0dc866e-356e-4ce1-962d-1df692b9b7f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.146.31.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f395017-fbb0-4b63-8a7e-701f4558e31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.172.183.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93132ff-f3fc-4966-8ecf-c29cf95aa3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e116106-1315-4fc7-908d-ded5d4b1a880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbb0486-2d5a-41a9-932d-b1349580df0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.183.230.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6931934c-e413-46ce-81dd-c68a3aec394f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd15b3e-c9c5-464b-8cd9-6bb77cc28d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d707e3b8-0f9a-4c3e-b0a8-37284ef9d595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7da13bc-0dea-40ff-9c67-ba2812869b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f1294d-e776-4c86-9032-98e097f7f056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdfa2fd-5f2c-4d1c-abe1-00a0cbec9710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5349f3f3-b05b-4cbe-b643-e9818efaf9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66f96e9-bda1-4497-a5cd-e75b4ab1f511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e4683e-08a5-4628-9441-625dc2a52304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab684675-63a7-48c1-9290-a5818ac5072f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6994e3fb-e5ce-4e75-b682-21907223b476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f614811-e7af-417d-aef5-38518550d984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4505fa62-bccf-4609-be8e-eca916e6775f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7baa220f-3261-4622-b429-2975064db0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530666a1-c1fa-4f9a-89d5-5428a22a9153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a217702-f132-4c6c-a49d-af27425ea0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9f65a8-a2a2-4565-8ab0-9ffa00a2cbd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c976d1c-0479-4d20-a83c-e7c4b20906a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4989d45b-1c52-43a3-b320-ae2765bbd8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee03bf5-6f46-4869-aded-5aba6ba9a622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2040b28-19ef-4c9b-b9c2-0c3d10945d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40732532-8fcd-4ed9-ac12-ea4367866987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ff8697-0d54-4346-b61c-4cd70c65fe8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a53ed0b-346c-4115-a624-6919e8029bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b038869-1e94-43b1-8844-e9ea00bec8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92aeac79-b4a5-43f5-b380-b4cc4289c622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce0262b-95e3-413c-a420-3af693e71ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604b39a9-991d-4e7d-8a23-b95f20afad75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d6d02a-1f88-4bf3-b762-629a18ec197a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f809dff-671c-4c94-8254-c14ff5174dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6c5f8d-f07d-4711-8129-51140ac66942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef80807-0c56-4253-bd24-f8cbf3f54bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e5d862-1e18-4c16-b7d3-8e337cb634b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d802a2-f39c-44ba-acc2-3e02e58238c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebf880b-7a22-4a57-9054-6508b15c1dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa8e6cb-26bc-479a-8ba9-858709894a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe50204a-02e6-48cd-b548-c253067956bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0c1fc7-a2d1-43af-a295-9dc6b8fbc340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0d273d-8a9a-4e69-b355-8c4a44e7c4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.225.206.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9efe7bd6-7b45-40b8-9085-e50ab05708bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8a7082-c4b5-41d9-bd99-5be87fe748ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d170d97-30c9-420b-b42f-253094e40ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62822c37-92db-4a33-9bb2-41b7bf2b241a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.23.94.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c086dc0e-a5ef-4dbb-89d6-ea4229393093", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.83.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ade922-f8bf-46b4-a52e-3f53e8775eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc109a1-97bd-4257-b3f7-62bffe83eaf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d03deb1-f290-47c0-a6eb-154ca6e15016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3ce935-e42c-46f4-9f31-4da92075c3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7845008b-6049-4079-bf1d-ca6bb9fcf1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1357ad-eb65-49c5-ac1a-a2149883a839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ec28a8-4d59-4125-b3fd-b4325f1f8266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f3148f6-9ff7-4e7a-9979-7caa187f8b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d083ec-71e4-43c9-94cf-c924f964b49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8db3f4-4314-4e68-828a-92a7fcd934eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4956d6-8109-444f-9668-1556d2d87466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440d7542-a2b3-4a9c-9543-0bfe51935662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846ed58c-38cc-432d-bdbd-c0f303799aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41aa3350-5e60-45ef-944b-afd17e812690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c27df85-dda1-4ef3-8388-8f07ad3cad3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736c017f-50f7-4d2a-812d-e771c823aac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46bc4b57-6ce7-4428-b9f1-ebc1c39dc275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78da77e4-1989-459c-bdf8-f83d3751010c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6886c053-739b-4180-9c39-f6e45bc639fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b9ad60-1126-47f5-9010-e16bbc0209d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e61989-4918-413f-bd6e-6d4cdaab9cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6901aa52-5fd7-4b7e-a91d-e996fbdd3425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be7780b-6125-4707-a7f5-876dfa86cda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c666683a-4795-4b9a-9c1c-cc6f60374c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099d74fe-bbb4-4ecd-8008-4099e61e5e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593a949c-dba4-4e9a-9d0f-35cd9a142270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649665a7-5321-4fd8-96b0-1ca13f9c3201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94eb91e2-3c08-409f-b46d-eeba460e9f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f575a70a-8c53-4e20-81d2-8196faa9a6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6318f2be-4ebb-4639-80d3-b97bc08f0856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26e65bb-003f-4c91-8e23-da54381ac790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899f6977-ccc6-40c1-a29e-c9768d6dffa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214c1fe5-806c-4859-9415-327298bcfb12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4f19c9-b3eb-40ad-a254-4d29adc09d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2110c982-791e-4211-af0d-eeabe3d6dc4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6236ab96-3fba-43fa-9290-53f163f4a3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912f7de4-7885-467c-b516-bf651cea8d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ef0dc9-ee9c-4e84-9a1d-15b416a1f0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bdf5773-3495-4ed5-a678-6e82be5c5d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94cea1c4-e5ff-40fd-9674-3a0a2a0e05d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a621d562-1b93-4bcb-a85c-3a05da6c69ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1b35bc-e0e4-4f1b-a12e-ed1ab7f2451a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab95d2c-bdeb-48dd-863a-20c497a26d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6f3e1b-8fe3-424e-a99c-4fed0820f958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9bf276-787f-4113-986d-f441f2ad6e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f28ddc6-bb1d-458a-b7cc-54252845d5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f6236d-ed30-4797-a06d-b195edc168c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bb40f6-e880-4222-9c7c-ced92635a50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513ea32a-080a-44a4-ae38-c9443b4b556c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4544985-3791-449b-862a-22a14b800605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb30dfce-4057-4e48-ac90-372b7ad50748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee40834-fee6-48f0-918c-ffe0a5fc2999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f124c0-c846-469f-9b8d-0fdb54eec7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c457ea4-6106-43d2-b13a-0208d7d1ddab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5677cf5-25ed-46e4-a5ba-4e49a3d3a035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d28ab9-1acf-4ee4-84eb-36f7377761cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bfa6ddc-1d52-44b2-a938-1b5a4678dfc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739b9067-7270-4eab-8002-2f8487337645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205b01b9-1246-483c-ac0a-98f0f29c5d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb65b14-c666-4f7e-92da-0171afd73a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20544d71-6d1d-4cf9-8692-700c4536377d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3492cac-bd1c-4567-83f8-a8441def85aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3782ab2c-1611-4d5a-b449-e69f8b4aaa26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b07f646-be9f-4070-b0b1-1d988af7a6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107816d6-ffd7-4bf3-bc48-7155f0366113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3caf92e9-4f8f-424a-a362-212bd7a4bc51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c931a0-b179-4062-8c49-a199ced143e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555e409b-bbc1-455a-95c7-a5883f71295f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5c0006-a0d9-4ea7-92fc-7ac63de3738b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b012b5-5c33-45c5-99e6-7ddc7067b700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54666791-91d8-443f-a74b-ae2aa583ec97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c770a5eb-bcb0-45fe-9743-26c3b7dacd38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf691ca-03e8-4828-ade5-71fd80f08286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6380402-1c2d-4007-b95e-b52e556ed4fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9d2f82-a077-46f7-80fa-d4b964f0827a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750723f2-1ea1-4c2a-a7ac-1fad929e4086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.250.97.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0147ae3-73cf-48bd-9696-f4a2dfb1839d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.38.48.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7175866-d9dc-4d3a-8ce7-0fafc96f22ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.40.86.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b665110c-f168-4c28-b642-f21f928e03b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.40.87.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d944bf-9cb2-44f2-8f75-1224e74a06c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d09454e-a3f0-4656-8643-2decccbc84b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123acad7-3066-4772-a43f-5afd91763638", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5916c2a6-9427-46fb-ac2e-216c19794dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.114.4.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35fcc0d6-5e5b-465f-951b-9412e3c9c9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.142.184.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b0c284-33e7-4b53-93f5-d9a0bc5ceeda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.142.185.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec89b42-90d0-46ca-93dc-9c4f498fc10d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.142.227.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce77e79-3eca-42f9-b9a1-48d33a1b93fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5bfd9a-8e2a-4379-b84b-7879c24f4c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.61.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569de541-84fc-409a-9918-8670e1a8e9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.95.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46eb79d5-9684-42c1-a881-bfaf394956b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.156.65.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e361bf5-3f0b-4ef7-bcdf-6a80efc82825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.177.44.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc71de0-f2a9-4c63-a8bb-311c3558dd28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.179.7.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28075ab-a620-40ae-a51e-33ebd41a1fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.197.225.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede696fd-309d-4c8c-9bf3-0bc86dcbe658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.59.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364e745c-f126-454c-b1e6-b8c9a8e207e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.217.248.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5e205e-e2b7-475d-8569-d122192b5430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32bd1c40-4525-4c16-80c2-e36c78ddb2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.245.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7fbd8d-c02b-45d5-85e2-bd3ef0bafa42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.64.102.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e355c48-e403-4845-ab47-6e686061dce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.70.186.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed853ab5-177d-41e1-9911-bf5adf71f65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.76.55.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c989785-9220-4bac-ae6b-d505f407899e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.144.90.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d00ec0-ee11-48ce-aaf9-0a90dfe5c479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.159.8.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f851184e-aef1-44ff-a7fc-13d202e7d094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48c72c6-bb3d-466e-99ae-befbc4495f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.188.154.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d3f5c8-0599-4a1a-ba71-25c781469d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.201.14.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38d577c-bffa-418d-bfc2-54dbfbc3a870", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.22.183.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071453b1-88c2-4d0b-a8d7-b35e6243f4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.51.148.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f73ad8-de17-4b17-8178-d9996daa6cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.59.201.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c704d8-d2ca-463f-add1-a24b0db6d298", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.62.15.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6a7c92-2a27-4e70-a993-32f2aa78158a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.79.229.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e80f2fe-dd27-4cfb-abab-7dfe2bac28c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.9.233.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a27174-14ca-4453-9179-cf4c04e285ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.91.33.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e2f396-a297-4e0d-a918-98eef09d4094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.147.30.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a4b156-daa3-4aa8-9312-7a7fda10f96b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.150.93.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94cf84e3-b09d-4d0a-a630-b025e22cff0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.182.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc872dc-9d02-4189-bdd5-d25de7761462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.79.144.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b270d0-af17-49eb-9f7d-47d40f66f617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.232.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd07762-8e3e-45f9-829f-0533ec0177af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.233.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed82908-5e92-4015-9801-5fe373400f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.1.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d5ecef-6d06-4c54-9e22-6ad6c66c6078", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd267e2-2555-4f74-adb3-c88ead26eb46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a822e26-774c-4aa1-8460-aceb7f7e46e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df44cce-a19e-4cc0-acbf-c721f2d98cc9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c90022-11f1-40bf-a3d5-2493e729f5f0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73ac764-788a-4112-9a80-ef6e4a0a2c2b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30fccf5-26b3-437b-b071-bcc4a65d499c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ce5662-1703-4d2a-84a0-6b1ea70353af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.51.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ead4ea9-9962-4536-8d8c-7c4886047ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c66d15c-a4ad-40ed-b1da-fd2a52871875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e91b1f-a53d-44a9-82b7-2765acf61af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d55c00-26fb-4c49-b705-c85ccc73b701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6923b812-17a0-466e-8ce8-9360ea7aa3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0b64f3-927a-4050-afdc-0e29b959f45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.10.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084d90bd-c753-47cf-a19f-22ef16541b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.11.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43a8d9a-0f31-4941-9483-2892de6a1901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.11.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8698b379-12f6-4412-8c8c-26cf0064a611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.52.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ee99d8-db09-43e2-a616-f9459405678e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.80.223.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebdecb85-60b6-4446-ab11-111d5bea8f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.11.4.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ae5441-0eb9-42c0-874b-cfdb257c51aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.130.29.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c766ec93-12e0-4e6e-b13a-2f35f3455693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.132.29.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b05859c-a231-4663-af4f-3a3cf0168f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.153.9.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c376dd-4e58-45b9-9b3a-acb30936efc8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.156.126.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470012e9-6777-46a8-b61a-9a3f5664c574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.225.59.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd49032-7925-4afc-b889-82b70dac0b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.232.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f025efc1-ddc4-491c-96fe-096255b041ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.229.106.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd5a253-409c-4b91-ba09-559db8d9dd3a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.231.222.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f7b6b6-1bad-4f2c-8a37-efaeedef6aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.233.119.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0ae77f-0c04-4fdc-9b2e-77e56a819757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.233.51.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2db2b2-1900-4510-a2d3-6173aac4699e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.235.139.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c21007-7e2a-4d49-9565-c64bae2837bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.110.14.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048ec40b-fd55-4591-9cf9-afe36b422994", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.110.147.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898d6879-f45c-4c4f-91f4-60627fc3af71", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.124.101.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef12bf4-e403-4875-8276-154612b27134", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.127.60.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da80127-7971-450e-a792-56148d3eb0be", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.41.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d0db43-279e-49a7-b624-fbc753fcc2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.48.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf86e64-110f-4a20-aef8-96fb2fb52e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.209.184.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926fb297-c9a2-448d-86cb-7f816831beac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.212.154.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f461a0f-a813-458f-a339-4d21b23bf06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.212.83.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7d4dd8-56b6-4044-97da-06942ba02af8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.219.131.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf30f9e-70a3-4388-a702-e88f37f84cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.96.44.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d961a76-2fa1-4949-8daf-6036448e34a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.109.7.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1af6aa3-6873-4da8-a933-b02300e4f917", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.42.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ee7957-db1e-4d96-9f79-e2c9629063c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.130.154.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce0fd08-49fe-4077-9c71-005b01aa1a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.151.248.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427dbae8-3ac7-46a0-9f8a-d2d55a335ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.151.251.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eeb9230-52bb-4231-967e-82f307d7641d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.151.254.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a0ac74-dd1e-45a2-8905-85f0416a7714", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.151.254.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9c7803-d234-4b67-bb24-d03ca79a3c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.206.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3529df7-93c3-42e3-93b8-e501e56042d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.85.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada8eef9-0d87-4bb1-bcfd-1f276c461800", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.197.186.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62782686-ae2c-4482-b86e-0da342b16805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.204.234.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2132b5ec-7ef3-4890-ae02-8dadc892ad15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.235.84.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdfb507-0dae-4aeb-b909-72d80c1a32e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.27.139.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d1b4bd-f1c1-409c-91e7-43fb3436e51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.68.7.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc027842-2c7b-4e6f-a25f-e7f17d5d001f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.70.67.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d9fab7-9122-4695-9c42-869550095337", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.80.102.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103f0f8c-ad00-4bf7-9045-5b8ab4ddfd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.83.130.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f70128-2e6d-428b-b3eb-3adef2a502cd", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a630b5ac-8341-489f-8d22-59b99d1e7a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.127.184.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca149806-821b-43df-a7ae-9daaab5f8d13", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.141.52.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be0483c-8448-46f4-ac29-e85dfeab4c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.141.52.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1443ea-f1bf-41ab-be9a-bc012ce1bd11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.147.172.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f7602f-6c0a-48b1-b314-8412a6d4b2c0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.148.24.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee73e12-e64a-45ce-885a-5a2b9376ae5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.156.152.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec9470c-6722-4986-add7-121fa3788048", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.160.161.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce92b82f-9672-4f2c-832f-21cd15031120", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.166.40.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1316ff2c-544e-43d3-b980-8fa7cfc12937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072336f4-edda-45f8-a18d-03d305618853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11fab77-1710-4cf6-b906-434ddbe6ec01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.180.136.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea82219-2e3e-49ce-9c99-7949f9e0ed25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.185.168.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd04609c-33cb-49f5-9c06-abab7682c42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.224.93.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d507f076-a085-4535-b68a-d21df925de4e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.101.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c20ccb8-07e0-43e4-a83d-456801779d76", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.109.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51aa9d01-67a5-4801-addb-2b698ae91c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.74.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e938df-48dc-4803-843f-66b219275600", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.75.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b31889-4f2b-44c9-8386-fce647cad7df", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.76.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e345c3a6-e194-4aa1-bba1-2e462c7ec4a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.80.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e349f3-17e7-4983-884d-0567dd4aa75d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.88.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7356e3e9-2916-4518-a1c1-e1c444e39c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.91.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed7bdaf-b23b-4540-a2cd-6ed204e2178d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.188.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2da509-4e04-48aa-a9d3-d3602a1078e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.238.26.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298cd8e8-aeee-4397-a2c9-86bc8e7c3bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.238.96.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7705c570-f1e0-43a6-9a2b-0c71f371d815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf0270e-6aa1-4598-80ba-ae28f6c4e035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40124fcd-4699-4cd2-be01-9183040d8b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e104e315-50e0-4a50-b059-28d787474af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390ef16c-5036-47c9-a728-6605bd8f8574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8734b409-e88b-4888-ba60-4da471247582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7470fe3b-4a15-4496-ac26-f26143784dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44acb86d-4489-4e8b-b9dd-d74edc9ad743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.96.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de2b9b7-2733-4d27-bebc-e09147dacfce", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.249.16.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11dc5db9-812d-4c74-844b-d9072dcd3f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.249.18.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e317b88-75bb-45c4-b69d-4973be280409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.249.25.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41eb1e1a-fc70-4404-bac6-47e7fb4bb871", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.249.25.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3817a84b-a837-4ba0-abf4-0698a0349fec", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.249.25.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16fdbac-8cd1-414d-a15c-2aaa1fcadef7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.249.25.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5063cf-3703-4c9b-a72b-262f6323e969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.204.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700a0ebb-1823-461c-be91-e1b88e7aad14", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.221.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a53bab-a98d-4347-b15b-5362bcecf9e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.80.80.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2be193-8426-4c50-abfa-ce9e0ce63137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6dbe4aa-c785-46af-81ee-37dcdd7143ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6af6b0-6ccc-4d2f-a506-e0f49a3d4d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.20.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad74e846-9bf7-4532-84ca-83724f09a721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c75ae1b-1d33-45a6-a6b3-86b415934766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7365777e-3e5e-46f5-be5f-81ec274424fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.112.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083b70d8-4451-4b14-9eb4-0030e1e2e04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.14.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20cb1b2b-954f-455f-a03a-15dc4570717d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.200.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e831738-b164-4235-9143-db0c95f7165e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.229.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5e04df-3086-4f45-926e-edf1ff825334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.252.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f0da09-b72a-4f0c-ae33-00763d6bc68d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.27.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c514d7d-7da2-483e-a1e0-33bfd036c5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.29.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ff7f29-8902-4888-a6b5-39689b6383ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.81.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d3ff86-4fed-4d9b-baba-c4171bf60c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.92.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfb3b53-e5d4-4cb4-95f0-cee535da23f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.117.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213e5c06-a60a-4d24-86e3-7aa4c709aedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.137.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4add3936-93cf-4c51-b90d-8ebe1be42151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.217.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76e1bf4-bf28-4553-894c-47e714898651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.35.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c7dff6-e8ea-4949-a909-31de36c9b008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.7.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0cee9ef-28b0-47d5-80f2-38117cb82b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.84.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b751385-7934-490f-ab24-d3d5995fdb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.97.62.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa989dc-7c31-4bbd-acc0-608beda6c9ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.122.136.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb70266-97bb-43b9-b947-13a284e97978", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.105.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6d3a4c-e740-4b18-a4b9-c160de64294e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af494a42-aa1c-4aa7-885d-97edd1440684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.106.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89d5d33-40ca-47ed-ac24-a58eeb32bd54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.107.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14667d2b-0c79-4b1b-a4a4-6dffb6f7118b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.233.3.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988a3b71-0b06-4d67-b37a-ebecee0e403b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24px']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac588da8-be96-4e08-98ce-52ecf673094e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24px;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf4d4fa-4c70-4339-bad9-fb731c5838cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.124.91.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f16bbd-d98d-4ff9-a31a-33ebe80621c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.150.188.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384c878f-8ca3-4d47-917f-f05bb3d6dfd2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.155.92.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e1bd28-4021-4c72-b61d-26014e70741c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.17.182.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96383eeb-d865-4e9c-a767-6d8bba6a822e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.17.242.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8c7f75-a932-491e-ab63-63f31095ffa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.18.130.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a76d13-c095-4192-af29-1457a886ab8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.18.250.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652e0cb1-ca24-4771-809b-cf572c8e1f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.18.70.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b9f7d1-42c3-4d8b-9957-9d7f72357a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.19.213.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a808727-aad2-4c41-8686-17c3e9becdd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.19.81.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72993472-9e2f-4471-b985-b6dced41b084", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.192.166.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a15e05-6581-4383-a0af-e0dc14f782f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.216.215.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f222f27-5a7b-43dd-a7de-e0d0daeee438", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.22.62.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9a1dcd-d955-4310-991f-047dd6faee35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.25.67.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c908ada-bb1a-4258-bfa0-fe8a9fb80f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.45.244.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a4d609-9d9c-4ea7-9a97-4b21c58909f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.71.230.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb09eec-2fd0-4bb3-bf10-bd8e7c550327", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.41.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f32a2d-b603-4256-9012-f3f899d73875", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.41.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de09cc34-8f4f-444d-a0e8-bedf85223b8f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '28px;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37262d8-26c2-4d4d-90cc-3a031229698b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2rem);']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff068cd-0f52-4b4e-90b0-6c2f9b113db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.129.187.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30676323-af3e-4996-9a84-873fa4f0f544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.220.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c970d6b3-dc5b-4b9a-bbd5-70268cd6539f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fc7914-afb2-4593-84bb-f0f607b19abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.132.26.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0094b34e-4b1c-4b3d-b3e2-337145f42f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54d4b58-e24e-43fd-9d53-7cd1fa31feb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.144.190.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba236a5-0352-48e9-9117-c910db485884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.148.156.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c37e1d5-66e7-488f-9802-6f04aea42ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.149.23.0']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82167688-f9f2-4ae5-ab1d-4d99d0162e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.16.70.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72951a5-c0bf-4d07-a9f2-331be99d6db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.21.234.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a2792c-3efe-45ae-873b-028753d21ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.225.44.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879a1a8b-3329-478e-9a3f-8752b15355c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51bed1c-feed-4378-8d5e-24f0cd0afabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.77.221.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83039b6d-9ce2-42b3-b40c-1ca8e9a1d4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.77.24.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2d6f26-fab9-4372-b2ad-89b8f1624abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e90ad06-0a5e-4e34-8918-3a76d73a1f2a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.93.198.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be968277-a1cb-4f94-b463-bfd6046ab432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.90.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c115321-378e-4e5f-8976-c02539178b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6a7198-0316-4796-99fa-882acbce9f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c077769-6817-45d6-96fd-866700f18758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f02daaa-fea6-437f-a8e1-c9eed67861d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76a3df9-9b12-4242-80ff-5547caa46dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc030695-23d1-4a04-8388-99edc6c3e69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de914405-faef-4c97-a602-318fce43cbde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29035e45-fae7-46b4-a65e-a1303d510ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f20b05-6d53-431e-9f08-d409affc0848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9d8220-9fc3-43b2-a2ca-cd4480c85e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ff4329-0153-4d4b-805e-e36253a09e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea0596a-6736-46fb-83e8-fef63c5f3f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c45e22-0f24-40e8-860d-81b0d7d740a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.169.53.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c631caa-2a34-460e-aee5-1c2c63ef5f1a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.173.247.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b382ff-68f4-48f3-b54d-8a620b6ee1d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.22.91.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588cb43f-8608-4477-af2d-7eddb6567a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.176.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eebb200-b747-43b2-b80a-4acb60b2bee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93896c3-6d6f-41f9-86fd-45d0e17cd048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275b5f73-0685-4b71-96ea-4b42d29e8810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01574972-f03d-42d7-b195-cff748e00290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d3605d-b83f-4e27-bb59-6c112067d1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f08a917-551a-444d-b0e6-6000cde0a13f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fe7417-7713-4864-ba6b-e2d50fec531e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.84.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6baf4c-bd66-4a98-b313-ea4ef86a7e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.184.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6847b93-84ae-4e89-b764-75f8ee8f17e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.184.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171da56c-875a-4bb8-a42d-73561ce07bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.218.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7668f295-3369-4eb8-a594-e4d1ca802581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.118.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a78bddd-51e3-4153-9c62-49f9073514ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.160.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5af488-b049-44ad-a090-f2fc2edab195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.91.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e272ef02-37bf-4684-bbfb-9c78800fcec0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.76.27.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b8499b5-c9c1-4598-91b3-a6e2684afcc6", "relationship_type": "indicates", "source_ref": "indicator--e272ef02-37bf-4684-bbfb-9c78800fcec0", "target_ref": "vulnerability--8b5b2b1f-fb27-486b-9fac-e36c38c998bf", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--161677f9-888d-40e5-a521-32869955369b", "relationship_type": "indicates", "source_ref": "indicator--e272ef02-37bf-4684-bbfb-9c78800fcec0", "target_ref": "vulnerability--5f14d94e-a9d4-41a5-a46a-9cbbcd04ac20", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cac0921f-c335-42af-9b0a-d996ff184403", "relationship_type": "indicates", "source_ref": "indicator--e272ef02-37bf-4684-bbfb-9c78800fcec0", "target_ref": "vulnerability--dbe0c875-a6ca-4a1e-9389-d09f6fdd66c9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0f9532-292c-440f-8b12-46a76e8e1fcd", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '320px;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505c3496-f159-4ee8-a4c4-6880a0f18392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.107.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3bb448-8c72-45fa-90db-3e0bf70c5327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.12.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daeeac09-ba0b-4dbb-b9c1-1ff233a527d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.128.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a921e9-3429-4ee4-893c-102bbe1132c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.163.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8b626c-f30c-4827-92da-ff869943e3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.175.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2295f7-2def-45e4-a942-9180b1b69c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.180.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329f7283-10eb-4697-a288-b81b9e126a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.246.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579464c7-b5f2-4d5b-b616-48e2ed17f9a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.77.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702fa37c-e221-4599-bcab-573ce52c8e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.104.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06aaab37-e5bb-401d-bbc4-cb1c4ebde523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.124.208.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1131d132-2feb-4fc9-9511-5c8a39e9bab0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.125.119.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d6aa69-393e-4a35-a70c-642f6e41d564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.120.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9922d1-9e76-4b87-aaca-30a3e1ce3466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.174.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933340c2-f389-4166-b886-77852efe4215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.138.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b767ea20-b4fa-4f0c-b85c-995a66f2ef71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.131.251.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf5a122-026d-4a88-af9e-9d40fbf37555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.132.194.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f857cc4-76b1-4081-a80a-6994cd9376f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.139.66.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a94853b-15c9-4d0f-b71f-74c35fe08d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.122.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f7876e-01fa-4ebb-98f4-70d0535b8db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.165.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343f3744-5ab9-4839-894f-a571e0ee5cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.77.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d49696a-8a53-4748-bf8b-fb86754a1a4b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.12.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33768eae-9938-4f91-83d6-d2e79b518247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.129.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6fb883-e95e-4612-8840-2a1b9f826080", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.189.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d1263d-a81d-4008-98e0-908e0afb2930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.217.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c4c442-d0fb-435f-a7da-be361548cfb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.35.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148a6d88-94d4-411d-b2a9-9e06bbdbf570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.143.255.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e0446e-5341-492f-8711-c16586554814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.150.163.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c0be19-8fc6-41ae-a35e-d70d4316ce28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.150.29.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821888b8-e588-42b1-8c80-17011ce82aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.110.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daefa025-791a-4bfe-bfe0-74ec0f6a2625", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.194.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cc4aea-3fcd-4e7e-a85c-7d55cd725c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.239.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c641c86-0dfc-44a4-886b-1feb26287645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.250.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4053c4-50d7-48fa-90e9-90188c24f176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.59.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8384b198-ec7c-4945-96f2-e5a95cad033f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.7.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b026fb3-9e17-46e7-94d4-90d40f789b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.158.223.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550a1b0f-428e-485b-828e-12e057a0de20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.16.144.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae55f90c-0985-47ca-8d6a-016a9ce5a0a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.162.117.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6472152-ab61-40f6-8074-12c7631d5cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.173.183.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc334e4-ab10-41d4-9605-7c32b1d93a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.177.102.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51534715-0236-4132-a419-ccbd54942d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.178.84.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e483a833-91cb-4cbb-ac35-f13f016f2dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.181.172.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03db8aad-38ae-4fb0-8f37-56557ec8e47a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.182.173.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf9eca0-55a1-4823-9c9b-351c88fe91ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.182.95.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f076c3f-d086-4d7e-85b1-a8168699fda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.186.52.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9f62a1-c07a-4e92-a37c-a3f27c066451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d551fda6-27ec-48c4-8d0a-e09857fbd144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.212.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499002af-f2d7-4c54-a025-297074b0a901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.80.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074e5b0c-3ed1-4c49-959a-497bd09d70e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.212.124.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17cac058-5007-4fcc-99bc-48c40c464cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.213.242.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774719e1-73c6-4712-b73f-db5882a90384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.120.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b857ffc9-394c-4a68-b991-348ef265b09f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.230.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765c2342-587d-4b48-b614-23e40f805b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.242.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d969820-2da7-4b15-8ca1-12218475b5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252609d2-4e15-4be3-a5b7-b7bba19739be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.24.218.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113c4f1d-c90e-4fe9-8a4b-f0367ffcb657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.24.60.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a391c34b-b632-4e10-9828-69f0996cb37d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.24.82.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6b3974-8777-4746-8fd3-585d39b9f791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.28.111.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27be7aca-18fc-43d4-9eb3-1df29cbf8db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.31.137.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aae80e3-6993-4745-b1d1-e755a38f48b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.31.88.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1089bdd-b187-45f2-87ef-cd1032ecd836", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.178.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0eaad2-399e-489d-85ce-6a1731f58f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.195.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567c1af7-82b4-4751-a11a-618fff0126b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.216.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0563e0db-61ef-418d-9586-e2340f90ed4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.24.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed8c05e-5fe8-4107-8577-b49341dd1329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.37.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae79011-806e-4b75-86c4-2fd769fc649b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.80.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c52e8f-bc18-4e2a-9f1e-fd77460a2f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.41.146.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1defb4d8-01c5-4bd5-af37-4d503f3eda38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.42.70.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf0c9de-265c-4c48-969a-aadaf8281dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.45.52.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2e113f-16e1-4650-932e-7428a506fde9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.46.150.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a03320e-2053-4ab2-9a9e-7cfa82e80253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.46.43.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f242125-8353-4fbb-8dbb-1700164195e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.48.252.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7acb25-165b-4763-870e-5d86f16d856b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.50.174.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d23172c-4c91-4696-b7de-0b4fe49663e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.51.186.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9995468-2311-4132-9efc-d40710dcf5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.169.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9dd38f-74dd-4bc1-8df0-1c2350d12a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.162.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21fbc7ba-0634-476c-89d6-1f2163b9bc82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.174.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be25cd0-0b8d-4a83-b4b6-9a436b1c32c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.55.12.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad55071e-99c5-4ef5-a9ff-ca76dea7ba5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.55.216.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdb94d9-ac77-4381-bea5-f2f47f2dedf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.6.139.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac84593c-e77c-47ab-8188-9e80fbbc4a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.6.148.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1f5e02-c2bd-42ca-a797-c7e5034b936e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.6.222.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b47a5e-6a74-4414-adc7-406e59100b33", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.15.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac2c7eb-c10b-4019-97ff-6b1bab7a3e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.158.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62291007-654f-4278-8523-71e9e2ea1163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.187.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed9cd75-91e4-40ab-bad7-ed8d297c0bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.253.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab597a03-d482-4894-8220-cc73bcde966e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.5.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a6858d-486f-4cf5-9650-a459b9e92704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.64.69.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3a3c71-261e-4509-8cd5-6b909b92bc99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.106.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7848c957-a119-4185-acb5-331282a7b14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.66.129.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505ff148-f11e-4591-8465-dac00c910ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.67.197.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53917a88-aa82-4fde-b5d0-9826b8b40c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.67.52.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcfdf4b-d638-4803-8f06-b484fafb0a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.69.229.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eba5a70-3b5f-41d8-bc87-53cb98f31066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.7.160.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064a0808-387f-4e9a-bcdf-ed436ddf2180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.7.190.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa46640-4d89-4f2d-82bd-5b3f7f3742c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.70.237.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bb2522-afe4-4240-9bc6-e321152fe36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.74.247.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92826c32-db19-44cf-915e-ed08487d8090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.75.154.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b0df49-e7b0-47ef-91ad-8bf30f6832bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.75.157.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2007f09-f3a8-480e-917a-72182601f3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.75.49.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de5e450-454c-4235-8a9b-3c74b953b2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.44.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9093caf-d33d-46f7-a3d0-5c182aaad6c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.0.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f68527-1fb4-4c07-9eec-da337382b953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.201.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844d7581-2832-4847-83e5-f91455047c28", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.189.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5a7a7e-4ab8-4bb2-8102-ed7235777637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.243.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5ba644-025c-404d-be16-81c9aab7789f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.40.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fc9ceb-6190-4ca2-bb1d-99d6b17c8c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.54.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05bc00e-2879-40f9-8792-ff7102f56125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.77.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a2f796-1310-410a-aa22-0ff4cc14b5ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.151.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5241ce3a-4d2f-4f18-a327-748ed3e832cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.155.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f1872e-5a18-446d-a3a8-a411ecac6309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.93.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18705b54-cc34-4365-912e-0da7727aed2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.80.215.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e918195-3ea8-4c7b-9e02-6cd51908c318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.81.160.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d322215d-9eae-4dd7-8799-f0d7770c2506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.82.105.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a2e5b1-7cf9-44ad-9e53-4dfa236167c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.215.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf4dcc8-18e7-4774-8d1d-5abaabcd35ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.9.44.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b914ae4-5e65-48a4-8db3-e516437a0595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.90.181.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3ac632-4633-49d3-bf3b-79eff1dc1f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.92.151.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353f0d36-c408-4185-9547-76b26b486b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.92.35.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4ec654-1c80-4bf0-a548-166a1228074f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.92.69.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116f8b3b-c098-420e-a0ab-1db10c32e5bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.93.81.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ac3f75-afb7-4717-bf15-fa1d792bc93b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.95.197.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6750dec-6373-45b6-aad6-fccc71ae0932", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.96.249.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc017d7-86da-4d6f-b8df-0f8955a89623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ce640b-a756-4546-ba5b-84db4f2a5ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.185.237.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4f24fe-5d66-426e-b47e-28c4d24f72cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.118.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac673ac-388e-42a1-9e27-a71cb028e198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.162.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44e8cc8-cfdd-45c5-859c-237db07779fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.166.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9fa749-c0a4-47cd-8461-d072edfa4840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.180.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85842a05-fd20-4422-90ab-a8385641a4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.45.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5385b3d-39c4-47c6-b0e4-f4290f69d891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.9.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc1a9e0-fb1f-416b-81f5-3e4f2714d8aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.192.232.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841ba471-e915-4f3f-9db4-7b36dbab2234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.194.190.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889db58b-2874-4852-b013-85ae8c331b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.212.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1995b5-7f71-4a9f-b0ac-c8acdcd0853a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.81.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efe0eae-3e5a-4fb9-9716-f952968decf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.197.176.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9123ea23-90f4-454d-94eb-9403a4bf253e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.198.139.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f57354-914c-4a3d-ae1a-32470f656a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.200.191.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea9ab53-7c6b-4440-80c2-8c12aba9a283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.202.9.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c21624-09de-4323-baee-e898ad86b98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3aabfe1-c3b6-46cc-853f-360bf0cabef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9002234c-8866-45f2-bca8-161e6db0fd4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cad93ea-07f5-472b-993f-28a6449f1b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fca93d1-77ae-4b1b-82a2-031897a07353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e84bc0-241c-423d-9873-f7bd6a199e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd2b959-51b5-4a31-a012-50252d4803fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958fd933-1ec6-4a49-b340-2ce31e00c69e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e757ee9-5b41-4612-8872-57e6e0e51425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0f08e8-3c28-4683-b6dc-2a9e22b0460a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc94c76c-6fa8-45b5-b12d-e581c785cfc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8fb32e-bea6-4747-ab81-9dc3d0a79c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d49cf5-7584-4ee8-abe2-07358004bc4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e12beb5-a42b-490b-b9e4-d443d20d3b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4972144d-a6b7-4e20-b59b-1e53460ac1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9245d2b3-b77f-42a0-a4c0-290113c0d048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90b7878-e1ce-44eb-9f03-8885dc539cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1e2ff1-ef17-407d-a585-5dd6c2acdf02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a289e1d9-a326-43a6-add7-11b41c4bebab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa5ce79-180e-44ad-863b-5b04aa291818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6f331d-c336-4941-962c-f572c1896bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79b8f68-7cc2-401e-ae64-3d59c4206641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41cbffee-5444-438f-8423-a7c422dfcf1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4989b981-e9d5-4f39-9f8e-52b920dd9a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd01f9a-1e1c-4dc2-bb51-fcba140b17db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b4b0d9-76ce-49dd-a124-a793f958d4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb08cff-ce6b-4251-be7b-f73d0d79764e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cda3e2-211b-41fa-be9f-0bc60f9af4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b36f772-6fed-4a21-8a11-afac27956f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b80d83-426c-452a-92ac-3cfb96cd2a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c58e4da-db87-4d5c-808a-b10cd402c66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ef6bab-9ebc-48fb-9570-fb1cb7904c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19374939-028e-4873-9400-0fc136f6f5dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad8935e-f4e7-42fd-b71c-f067713885e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42707ba8-62aa-422f-ae94-a61fefbd2749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7030c3-6dd6-4c67-9e29-1f27ded76529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de89664d-ea20-4fe9-829c-2507b9c6d144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f8b919-ec07-49f6-94ea-1e5613a79147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3d8ed6-583b-4e59-b886-405960e1f44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72396ddd-8fb9-4d16-bf5a-ac976503d78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50a5001-154b-4ab9-9d85-8f6acb5059db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d8ee8e-1f38-43e6-bfc5-88130b122cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d48270-4490-4c1b-bd4d-bef7815d5220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e2cb69-165a-4649-8d19-9cbe5557133a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dadf66ba-66f9-498f-a94b-a0a2e33484a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a471ffc6-a902-43c6-88ef-6d854ab2d922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834e2a94-de46-4de7-8b1e-5124a0c606f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4172e0-d340-4157-8cec-290ab2b1468c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324b6a45-7f23-4966-ba16-ce95628d1fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcd715f-7e3b-4c1a-8c01-938eb93f4c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b13cf9a-26a8-452a-b3d0-431a7a988730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fa926f-2f9b-4a11-9274-7461433d42d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b20871ee-8837-4858-82be-e0b90823a71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ad4c69-28ca-433e-a101-1d92ce992ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac22504-b753-4dee-b97f-9812c02770a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af246acc-6a1d-46f6-bde0-cf2e6c0a53ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7806b23-bf7e-4852-b62b-6aa2181d464c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2caaa8c-9588-498e-8eae-3d3cb7ce0382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766b93ea-f242-4e63-8244-baf23322e336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbb55fd-a4d5-4874-8729-870da6a88dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e605d3-8273-464d-93e2-c20daf670c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8836e4-0c82-4bdb-b5d0-5f380a84ca48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eecb5d6e-a8be-4953-bd0a-31b97ddb374c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3905d50c-8f23-4628-839e-f1d6e035f3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d843bf-bb5a-4b90-9446-39c9bdb68f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668e4738-2c55-41ed-8ef8-21773609b331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d148e196-9f51-45ce-9d91-7143e2aaca44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb8458f-dfbd-4055-b270-c7e6c2fda619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0546af1d-442b-4d0f-962d-9426494662ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a541cbb-e745-40a5-b214-a5812ac0b98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5debe8f-21c2-4672-af71-1869c70fe699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd2fa61-bda4-4e66-81e5-2023675ffe40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c569b2db-ffbe-4ba4-9b3e-df644d5cdbec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41cb31f8-f51e-4727-bca9-0608815ca658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41cfe97c-4e0f-4552-8a5e-5063d2caedb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6417d76-120a-42f0-a486-07a47963d944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ca8885-e609-4a95-8f90-fa6cec12bbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f81a00-ecb2-427b-baf8-1a6667e73d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dcfb8c6-7fa6-4813-b8a8-309295f83e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b165749-fb28-4015-8297-56a2fa4baede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b20a32-451c-4eff-b2a2-14f46dca53b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e0bd6c-f241-4e3a-8753-3cd8d097692b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2af094e-583f-45d0-a271-1445151e4ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546cd97a-c040-4c3f-a2d0-8329e49ecc76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db0743d-12d1-4c61-b4d3-9da0ba896101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657d3507-e978-4ebb-8d41-c00043cb88e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f7a290-bfbc-4779-9672-6ed9511c5570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9160c55a-9c75-48d7-962b-407ecc18cb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99d2dd8-1ff8-4e7c-9ec1-68a90c8b65cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bc6218-27fc-4b99-8563-f3a6f98d31dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3dadf0d-43f0-494d-89af-ea77102a3cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4010d9a6-62b9-4571-bf18-a7a30dbcf88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624e7a31-ff4b-454d-b4bd-adc25171dc35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fe6b85-749d-4ea5-9b22-f7ddd2ea3867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf1c848-ac12-4378-b5b6-90ff62e76af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3067381c-edaa-432b-8d60-6403a70ef311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0179fd-fbdf-437d-a41c-cf6b98a0ba03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b425ea-5ebc-43a2-ae19-042487c12396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea8b851-d70e-46c9-8449-1e0ea7c8f3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec77c98-c93f-4daa-8494-f2d97ed6c35d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac039d5-4360-4bcc-94f9-8e5231014ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2d1cc4-9599-4bb7-b12d-cb9452bfc3ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d961b8cf-b5b3-4ef0-ad3e-5b50021ffa05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e046a02-7369-407d-b2ff-7e6221f42ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bd0b5f-7418-4a78-bf73-ced550f40683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f676db-643c-4d31-9b41-c62f74c3d919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34dac270-0a10-40ed-a377-10773605b9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b293290f-9b9a-44de-aea5-fa08774a8664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c489c24e-9086-4d73-aad8-35bc3a988a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81225c3-40a0-401d-aff2-0af09b4f67b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889ee700-9419-4c09-bf2a-ab1e8d8d0150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba80647-1d6e-49b3-a6c0-323fb3122447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0affeb20-1039-4a1d-83b9-df0476f4c56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e446fc-af4a-4af4-8330-54918c554f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398fde07-781f-4585-b86f-b275c2a82587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b817bb-f5be-4206-b4cf-0924be1dce88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4af933-7c97-48e4-849a-3f70e5f6b6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae7d8d6-d401-4c1a-8d90-1040d45be189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd002bf2-e9f6-4b2a-961b-a4c26a08b106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e4bee2-9037-4ec6-981e-63b43256f834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec952a53-c21f-44b0-9107-e5e1375e8c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956213fc-fb63-4dc3-8d10-3204de97d8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfe525a-c7a3-466e-8e58-af8202840975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092de6ad-4536-4ebb-b89d-e385833a55ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc4cddb-cd2b-47e8-94ef-ef00c3218c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616ed128-272f-43c7-a424-e23d1ed9d1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5840c6a8-96dd-4118-a6cf-7f3aade75390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252be129-2261-4989-b3cb-d0343b2b7dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24f519f-0e74-4ce4-be0a-f7107bfa43a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea3a446-01d7-4344-81ee-a037740d42cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19938167-b394-4203-91fa-6a7442107095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce6680c-f81b-4a9f-9afb-15f930bafab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e47c6cd-60ef-4e19-9cd1-eb711fc0087d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99070e3-e36e-4ae9-9044-e973228b30c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d7a06e-639e-4db8-95ed-6da9e8d509dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3234ce88-01dc-4989-9702-dd324269c362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8ef70b-e75f-4ba5-b2a3-4543421a0322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62feecda-88b9-4da4-9c21-dc795990ae86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd02fdb7-7731-4b5c-aaf2-718e36260d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8874b966-f1c2-426b-94c6-ffcb3744809f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2776d45c-bf19-4cda-897a-4a4543821266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5af11d7-3838-4c78-b53e-26a1e3504b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77fbc5c5-7dac-44db-850b-a2b4a32d045a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb0b185-bc89-40e1-a786-a8c9e86bc059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1788e05-4f50-49aa-b732-072d549047c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad85e04-7777-4bf0-b46a-e41af69df40f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7415bce-ef95-4e40-84b9-228dfd553f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b956bc5e-990b-4e6a-9ccf-e0d19afcb466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a258d398-b9c5-4097-8261-7d1ef8f8c8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8575c6c-89ae-4d57-967d-737eb9a5ec69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e4c0d6-2097-4c41-bd85-e48c931b8bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba79e23e-e8b7-409f-85ff-d34d112ba7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40149f2d-4504-4109-92d3-4b6f1f2f31e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5943b76-7612-4dca-983a-b47e748704eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfaa8aef-26e4-4167-b3de-d4253fabcefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12f4556-4e96-4dd8-80cb-041c14fff48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3db7a28-e2b2-48f5-b0c5-b9b6303c0ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8826229-688f-4cb8-aec0-0f060c81bd09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e133d93-a86d-4026-8f8e-7623dde87764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ab0d42-dac8-46f3-bede-2a9dd6ffd489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a6dd6c-6516-4a56-a55f-70217e34642c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1c8f30-b601-4eb8-bba0-fe7e77193016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58069044-fabc-4a1b-accc-1f8674618a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cba73d-bd63-460c-9ea7-731162b65828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df78ea8-9e13-4ea1-a895-e196f4c005f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a17620-d3ee-4e0c-a4bc-65ed900b1ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb1bf88-157f-4f5b-9db9-24ee50838c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307b66b5-94e0-42ce-bcb3-84ff78e349a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca601ca-0986-465b-8162-3fa5cc2dcd72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4805b902-e6a9-4b0a-929a-6abcd329d94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d90d2ff-8fd6-44bb-9092-02a5378de2ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5743ffd0-f4c6-44d3-9a6e-c8ddfab875cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f64ada-b06b-43a6-a0be-4791f5274d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f956178-5476-4137-8e64-9a258fd68823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd47b590-8453-4c20-a140-a0e409ba0f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8177253e-d125-42a9-8190-21d8e6fce301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0ae06c-ec86-42d9-affa-8466b88cffcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c95996-347a-4496-a70c-18d9c2587032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f36138a-575a-40b0-9109-68de631bc0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9dc0a5-24cc-4ba9-b659-049a7d56d1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17569247-bf33-4bbe-a017-e5eabe266e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08afadd-743d-4888-9f79-c9a389f06d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26564eb-2ecb-4f6d-b3e1-8a20c0aa8f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d41406c-a7d2-4e04-818b-0e8c697a088b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b12fd19-6656-4d71-a114-e86811c10c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8269326a-7b87-45f8-80db-9b8cc3a0c721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a07d72-b166-4012-8289-a5f572203893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027047b9-a7da-421e-8be6-f80b6422c3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b01aed-f364-4933-b821-7caac593db4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f73c6a-6915-4d07-a84b-9420c3e36c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5084fda-918b-4aed-ba97-6e8e1a0c52c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80842cd4-d53c-4386-8222-0a3edd639909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de2aeb4-823e-41d8-8abb-58ec8ea25ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eaf6429-b4f9-45b1-ab8e-445779423ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a83260d-518e-4b80-8f84-5b968c29db0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1110a57c-0666-4a04-8d89-8160c159fc85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c70d6a-3c41-4bd0-9eb3-d0f694a39d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065cd74e-3fc2-44fb-ab1f-c00445225812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddb681a-6986-4182-9ddd-40083d2f5758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0511ee76-491a-4a82-b527-98b9866f8880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d7636e-6515-440c-8c52-4bd43c63e4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0750aafe-d128-4416-8414-474768735840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2b04c6-8e46-4201-b6a5-5eb185d93635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcfbe368-f65a-4c10-a6b7-7c4476fbde2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8f2ab0-1ba5-4bb9-ba2b-c2bcffb415eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1aea4a-6ff2-4cfc-87ad-31e2aa89e37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae90472-4b91-464c-ad0f-a187bb282afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3375cd5c-ec66-4819-b7bb-fa8b8fd82cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455ba2c9-c699-4f57-b510-cb8625d77f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f41375-8265-4d99-91c1-4d24b5ac0a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a898859c-32f1-45a5-8f1d-a3cce07f8508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd60c657-8ce0-4246-8ebb-14f047694f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f6b6b0-696f-447b-9615-7343d8bf3796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbeca9c-7ada-4d26-98e6-29a6beeff514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a70436-d8ae-4a98-967a-699801bb8622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0088a4f8-4746-4d57-8d7a-c2c413eaeca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855c26d6-9682-48b4-9f47-68b7cb70f776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aff6839-3460-4335-8277-9f6b36580930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a3471f-ff0b-4bc5-9904-e81c22fce838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3ea9bc-f0a3-4df2-b22f-1c591bc0d432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f7dc1c-6eac-436c-ba6e-9d15fdf79734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca07b97-dbef-4426-b24c-2a3b8b39ac52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d1e8ad-4388-4f36-845a-70d057d1da33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81d7012-3695-4373-b1e8-91ae3c473a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e293f30-7334-43bf-96ba-7510279f15b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a486598c-3ed1-4984-9ed4-b409742a0601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811fda90-db2d-4e2e-ac22-f414a9638ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18042159-a612-41a7-981a-2b68fad70b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba824b8-de1e-4262-ad46-8694661397de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4420bc6b-ed6b-4d5c-9c60-d2674a2cf1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc02096-874b-4b0f-9679-e8bf00626674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86913e1-a096-4de2-ba85-a5ca1338abb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176ef8c0-5eb7-4cd2-93cf-c66cddefcb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f0956e-6a48-4a3f-981b-8faceaf59382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe8bbe8-ae9e-48af-bb05-19f625273b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343da24c-0066-44b8-a370-9d996c0fd6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ed7154-14dd-4f27-b9d5-a2ec3721a964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e26f9a-cd41-4ffb-bab8-8b893b619fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02c9d20-0009-4da4-b812-c50ea6394f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc01063c-400b-4d17-b221-ac7deefd9c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf14872-95b2-4557-b3e0-0824ff31b8e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d21654-4bfc-4efc-98e6-96f7b96530a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc246d5-cf3c-4c1b-97ac-412bce25eaa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4510d9-6139-477d-9439-0ae6a3dc7df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1c2210-9cef-4044-ac63-980c4cea7114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14018bc8-3df2-4e4a-b3f7-94d31f8a4f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb83c15-5352-4f71-894f-53c2ea91d0e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f54a6e9-08be-477c-a243-d9b417465c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51c78b8-cb5e-489c-8c2e-de78946259dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93d9749-1c39-4eb7-a36b-a8dc5572c92f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94022a26-f13f-4cc2-9ea4-eef8a7f88f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5f7616-0b6c-4587-a5da-139d0dad50b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7544f1da-0ea4-4e82-94dd-c9fd58c56cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821b8a72-fef4-4426-9618-afe27974ba75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad98035-87d8-4da4-bc0e-9814d210c4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fbe7f1-6080-4f51-b31a-c19186ee549a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a49fe7b-e66a-45cc-956d-db3bcce5cb1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42566cc-1084-413f-bdbf-e48a1d8b1862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb72eb3-a2df-4fa5-a3e0-56720def5187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08cf089b-5eee-469f-a077-aa990755e50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6f9a7e-fca8-4c0e-85b9-6b704723523d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72d1507-bb8e-4b2c-89ab-5889f5c33bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3e7cb0-69ab-4a5e-aec6-1d7bf396126a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425b0b1a-fafe-40dd-ae7f-1ef78eac236c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841d64bf-4f55-4b2b-97be-3dfa1eb7294b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d128ed65-898f-42e9-b5ac-ed2de7ec345d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e837f5d-70c1-41b3-9548-3474e95cc6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c541072b-09a6-4ec2-99cc-953232986788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2080c0fa-f3cd-4259-83f8-eed9c15e3dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebb8845-4599-41fc-af8c-991415daa0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7783534f-9d75-4973-94d7-87570f24221c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fe1829-e133-4bf9-a644-4d7e9b60cbfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9422948e-86f6-4e5c-bc01-666a2eece3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2957a1d7-8d48-4b3b-9ce9-ade0afeb45ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d159075f-e702-4623-a96b-48797ff9773c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e50d81-3a10-42c5-a89f-96918e402ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf4b344-3418-4013-9118-790b20aa4ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac430321-09ea-437b-a535-91a076b88274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71bfffdd-a9f2-42cb-875d-16d672cca7ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfa4c7f-0ff8-4f1c-b6d9-f8afc23cfad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f4011d-6c87-404b-8a52-62cc9bea6015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14b3687-d45a-418b-bacd-8c598654201a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4ba95e-dfb9-4380-ab8a-64fee9c1587a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591e05c2-0118-4a26-bdeb-01ff9f34df45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87d3823-2540-4671-90be-accb7203bd7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c47bb9a-32fa-49ad-938b-cf0dbf79eb2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70d86f9-70ce-4b52-9fb4-b26967b2f1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8eb748c-46e0-4b15-9d54-ad734d865f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d40805-44b0-4445-af62-389c07c35cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbc41e3-f6d8-414e-9e69-dc0ab4b4bf80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c769f5-8a93-4199-aa60-f1282d10e0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc55f4fb-3270-4bc6-9e7e-3814d4906d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90fa3e8-9f3b-4283-a106-e9ff90b84d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514e6d5b-8bf0-4120-891a-3bd78d2fa6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0c690f-ec10-4fec-a87a-6ef5fbf88c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c9239f-74ce-4482-9c33-dce763947f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546b646f-ee6e-4bbb-a169-04b56cb35999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c34fadb-e7ab-476c-991d-ce7a2d824b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef749e4d-e3dd-43a4-8566-bbfa616a77f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25886636-1072-4577-aeb4-e20137863144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc263ed-23ab-405d-ae31-d0aac9db2019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2d6958-9d06-4b4b-b21f-f5b1be9d6dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3122812-d4ab-455a-b679-890858df3a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac78594-94f6-4d17-b62e-3ae2657d8633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0348c7dd-7b81-42f5-90ec-b56a383fb761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64a7ad9-b6e3-4497-9845-9a4fb4ab645b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e444ba-3cbc-4c2d-9446-f22bea8410cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86dbc65d-1273-42f1-b39e-32ff3ab44707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94b3b12-06ab-4d7d-a2ba-a9043be2b29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae83f5e9-7877-46a4-a81b-d13bde10a8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9ba38b-3916-4831-a8e7-5e0bac844ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ffa2ee-ba66-446e-a18e-206541a56c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013376af-6727-4d0a-a978-134278a3aa7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95228fa2-9d4c-4703-a546-1f8fada3f697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efdb938-769c-4302-9533-0ef9bec6eed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff174178-4ca0-43f2-b668-e55da47702e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99fc8746-c8c5-4935-afdd-0a7f15b80588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b17ad3-2830-4278-a4bf-9649249e4284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f48bf6-d1e4-44d8-a4e0-a11ed33679ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--914c4c39-200f-4bc2-b9d1-19dbafa2cac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269e3f37-45fc-4281-bd75-99eb4df9a2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd60a11e-d7bb-4648-8715-818fd9d81ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2471d5d8-7f5f-4407-95a8-116a5fa33e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b59e93-ea18-4026-bf80-06a6f6d662bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3d44fd-83ca-4ba6-8614-93728bb4879f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eadc629-e991-4121-8567-1883d2101e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc10c1e-6c0e-438e-b27a-fd7cf7bcd084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff1e902-47b9-47da-94a4-4f9ee83ba642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7df5692-aa38-47e6-b6dd-ca3badd428ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6935babb-ea50-4da3-a1ca-c8942422f28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ac531d-a01f-4c8e-b262-fa01218a2a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc354ef-079f-4fbe-9229-a2db8e8292e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d431560-8bc5-460b-a7ac-32e640387971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01de35c1-d99b-4f15-86ac-14f0b52e7572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca4aaea-c16b-4cde-8d91-2930e2fd229b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a7991c-edc2-4b67-8ff7-fd8c2a250791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d93b563-2468-421c-8c28-133c6c56da43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00075a1b-8764-4f5d-a7e5-9538612185c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b945b34a-9e00-41fc-bae5-c80814c20286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce2975d-711f-4a61-b4c9-0715975cee2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34329f36-ddf0-4a3f-a6b1-2080d874b8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88729b02-2684-4bb0-8ec8-ed4bfb861971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b38e4c-3647-4e8a-b1dd-d952a676dacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb799f7f-bcc1-48d2-aa8b-796d0d9cf45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3457845-01dc-4c22-b448-6619bff16288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0084ac7-1f4c-403f-87f7-a4577eb783b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f356406-1d19-4f64-85d3-a26576289352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be90095f-88c1-4707-a5ac-a9d2b3018c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6827fa2-e02d-4f42-91fa-f923e91a3568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13101242-c8f1-4599-9ca3-e3a20bdea6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f78b87-9b04-4480-8b6a-6f2a401761d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656dd607-97c9-46db-b1a3-1b85ab253048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa331eb-12b8-4d2a-bbc2-33ad97e8fa86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26013c60-85fd-41f2-9c8f-9c1243e5b7e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88292789-b90a-4cc8-a42d-be0459bb7377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f30bc38-c35d-4761-9cc1-9c9c70b83f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b699f566-e4bf-4895-8548-d2c73f68e2af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.118.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa3451d-0b1f-4aa3-b0d7-8f435beb6863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.125.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc4145e-426b-4065-b86a-ddc3e9283161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.152.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0efb82-d54f-4472-a9db-e0f38021ee21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.208.226.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b9119f-f02f-4272-8fcf-574d87ea8336", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.147.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfc62a0-0327-4990-a7f9-6d3b90fabce7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.161.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c42e353-0b90-4b23-9686-ada044e908b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.177.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c320e51b-f56d-4cd5-bd89-35711bc9e92b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.179.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fcb06ce-f2b9-46b8-823d-ad1d95d98c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.189.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21e323e-be0c-48d3-93e5-b1e600d32370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.195.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9618df26-7542-4b43-a2b1-7badb820eeb5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.220.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8cc5dc5-10ee-4520-bb5d-b6d1908688e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.231.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33fc1b34-5fd2-4a19-b4f6-1ae325e78b03", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.236.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a3cbcb-4a52-4e9a-aef5-f62ea4d212fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.237.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bdb798-83f7-4a94-a55c-91c6ab2327b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.215.162.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f54443-d926-4b12-ae0a-c49cec55db17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.140.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be4158a-9de5-4507-be61-623416c17ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.144.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2de12b-f277-4fc5-8985-b184dad93f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.172.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c63bbe-7ab9-49b9-90cc-6cd04ed8959f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.201.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a925084-a30d-4b20-af66-8360e7ede239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.220.240.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d1f55e-0ef8-4c78-8808-a9a9ee503626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.221.123.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6084f512-8a32-4739-bff7-08d466ca3d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.231.117.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4facdd7-ca56-434c-8d27-77db050421d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.231.180.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d24251-a7ff-458b-b501-a7937977c5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.109.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ccbd83-6377-4957-bd71-fe3dee1d0df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.113.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67fcaaf-9607-4d47-bed0-7c41834ac5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.19.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef2895d-f352-4292-99d2-fa7e5117e347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.62.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f80820-bc1c-4423-ba5a-67aa3ef05cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.234.17.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f66812-46ea-4ae0-b762-b06eaf677634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.236.174.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9db67d4-3123-4ff6-9e51-5582dbd6a4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.236.81.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105ee3a1-8172-426f-9125-360a114cfb7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.237.73.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c388b59-c89d-4028-a43f-fa6c4a87aa80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.239.152.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08968989-9728-4294-9dba-da45ec95c6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.239.226.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7da3fa3-2e7d-470d-ae9c-2d6200f290f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.174.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5459f2-4895-4100-acb7-9302f9d5fba3", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.3.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ff6be4-f9df-44e1-b049-09bcd12c6a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.130.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e1c4dc-c14b-4284-9e4b-effe1205f5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.166.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ab5d9d-67b5-495e-b36b-d03eb998642b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.202.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70d125a-c9a1-410a-9229-d1925feb6ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.243.168.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9323b011-deaa-47b2-bdbd-17b61036c08c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.243.248.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db67d79-6453-4ae8-8607-f7608a309787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.245.83.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1d4017-c5a3-4bef-b7b3-972370ab5e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.247.128.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd1abd4-f322-42a2-9ad0-f55e4792cd72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.247.21.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a156c2e0-56b2-473a-8dd1-c554554ab9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.254.238.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66436dad-7e7e-4ab5-90d2-d4677bafe499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.78.161.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669db1fb-71b3-476f-85b8-870907e3c2e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.102.89.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75dc9abf-d362-4543-bea9-b7da4f8091d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.104.144.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0f8cc6-3b36-47f8-bfff-fbbc4f950ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a11809-f123-47e1-8cff-dd4b8c7600c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8862d292-b5f2-439c-896a-9153e8690b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd1c587-9483-4d12-93b7-61c512e720c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff614c5-2a17-4fa0-86ed-ca96a4b07ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.234.146.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3865bd06-dc81-4fb0-bd2b-bf816441fa53", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.235.147.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c23d45-0afb-4199-bfa2-ab0b4da5eea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.236.215.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df41093-04b7-49c8-b38e-953155b986d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.24.136.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0000c0f-b87e-4505-8777-2d6dc3d4ce80", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.249.2.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e32552d-61bb-4fe6-a1f4-eb73bf866295", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.250.104.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa52ff6e-e68f-4f58-8227-d788311da990", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.220.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5117af-6ec9-4511-bc25-a67abddcb913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cb0774-7a54-49b6-91cb-373504c58105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.39.206.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f93f01-334f-45eb-b771-fb2ee6384bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.64.14.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c97cd36-aee0-405b-b35b-bbaa5028b532", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.70.231.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f446da75-fb35-40ca-a0e0-7303c694c2d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.95.14.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9dcad28-bba7-43c2-83ce-a16d0529fcf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.48.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377acac3-88d5-4f3c-802a-a4f95beab7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.49.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28573035-f254-49b6-a2a5-eef9c1dabbfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.49.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b27a8c8-447e-419d-a55c-fa9a6d946253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.120.213.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7204f921-b660-4aac-95b0-a0bf522c70ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.19.221.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5851b5-20b5-4cd1-b9d4-bf125e6d0e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.19.221.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d590b3f1-21f6-4730-915b-69f40c6cd898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.216.252.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd444f0-c70d-46d7-9372-e0f643300e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.233.85.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8adfc8b9-5555-4100-a227-e8d3e6b568ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.48.253.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfebc01-77ca-4433-8e88-21232ebadbb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.105.24.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456af535-7575-4747-b959-bc9f51a4a65e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.105.26.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fb0427-23d5-4b3a-8870-445efba4f284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.105.26.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995b5df5-61fa-4903-928e-64260e201e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.129.138.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa1c290-d1d9-47c4-a274-5e5f628df726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.135.24.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c02db0d-ccfa-4829-be5f-ac676d8641cb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.137.33.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4ea500-be73-4579-aa22-c90891548d85", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.150.12.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c099be2-c75f-4fb4-9174-36b6f68c73ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.150.12.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7f8d73-b538-4667-960f-ab4796e91c3b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.17.138.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527b3c8d-73fd-4fd2-b163-ddd4d4779851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.17.177.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587c4d97-90b3-4ed3-bf80-32890b0f6df4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.171.84.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f7ab2c-d8df-4001-8580-14eca6220713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.175.195.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae4c97f-e289-4f6a-a253-14df61f755f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.175.195.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be40c78-c102-46ca-9832-66233b987410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.156.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034bc6c4-2b96-442c-bd58-71d8faa79240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.190.210.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8a59d7-9517-4588-b38f-0c7d9f1510ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.207.172.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6e1cbc-4f04-420c-8df2-17ab7cc16aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.246.112.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb493b1-9f01-4027-a162-88250ac13d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.246.245.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d266c3a8-36f8-4433-960e-6a82edf1a9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.246.246.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b80ce7e-a5a7-42ea-8302-ea8bd25bc4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.246.250.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b538873e-625e-4269-9bbf-0a59e6232952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.172.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc420143-2afc-444a-a4a7-11c5760f3672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f8d62e-b0bc-409d-a7f3-d8c61888e366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9053373c-ff2e-478a-aa25-0b7f17bc6655", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7fda0d-1930-452e-8de8-bc3faa59c55f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6b6449-3d15-4da5-89a5-7db8525f84ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc938e5-f2ad-430f-bcf3-90f27588d76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb5ad70-84dc-41c3-bd7d-adad7d8e3454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f84a782-3838-4fd6-9eb4-5ff58415df79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23c31b8-1193-4cfe-b1bc-a1955e9edbac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09f17a5-5753-4f4e-93ab-d6422b7df79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47e07c5-4a9a-45c5-98c8-f6499f55880a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3246f537-905f-4341-9a2c-a54766b1a11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764ff44f-a336-4091-a066-159eafab60de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420733bf-e941-4356-a53c-cab30c8e428f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.45.71.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e13928-d90b-430c-9320-11ab37c4c9ad", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.49.45.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5c5536-9e25-44f5-a7fa-b86fd8f2df65", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.54.122.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa13a5bb-fc5e-4944-a9a8-da8d39cbd960", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.55.108.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687a5583-269f-41f1-ad2d-8ecfa039e948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.60.190.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc409742-c501-4cb8-8f66-35f7214f2375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.162.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81553417-9f96-4b5e-b8da-5e346d29b145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.179.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc87b4d8-87c2-413e-9e1e-d69a34702fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.203.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff5c29a-b1b0-430d-aa77-d2a72bbf021e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.206.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a754ce7-213d-4556-a4dc-37157cadd4a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.93.206.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdead1f7-cf68-4c76-a8ee-e3423759241f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.95.121.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b57f88e-31a1-49f0-9be6-fade7a7f8521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.104.63.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b14cca-f1e5-4f52-9fd9-e0c499eb25eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.104.64.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71609737-f4f6-416e-a75e-515a3d5684b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.105.212.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f49de6d-7375-4760-85bc-9d91312e27fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.105.65.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77621c57-7c8d-4e4f-a97d-57390e3b6c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.107.55.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aecb69ec-5983-4a54-b32b-cee9bd4f87a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.115.195.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40d5f48-6b7f-48d9-b667-3ff7cf5d2d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.129.31.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d74309e-50de-4bfe-ad8c-11ca4c839fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.164.41.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19a9ac6-c5d9-4a38-b3a2-f4d229d56137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.174.42.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e5683f-5b6a-4493-9004-9f15368eefe8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.185.15.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27c51a6-013e-437e-b717-83927eb60493", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.185.67.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f558590e-c12b-46ca-b0a4-b7ed3f8b5216", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.61.52.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2aad1bf-a3d9-4787-8a88-4fdb3a7d5d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.78.140.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f543ae2-ee9a-4a41-b15f-0eea692e55e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.178.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47e82f9-2362-4e24-9176-c67159ac54a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.195.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c33d06-c037-4aa8-be0f-a0e604bb1c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.97.54.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccdbd78-3554-407d-8079-eb6efd3b0397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.99.212.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ea7bb7-9045-47fd-99e1-4186de044425", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3px']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5860600-06f1-4bc1-a132-e962acd7364a", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3px;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c8c624-0b92-4448-a3ab-2f437c5e8dae", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3vw,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff13ec6-a26a-46c5-aabc-1af9ea2b66f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.190.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b9fdf6-ca81-4a79-9542-0e0a45264c69", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.201.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c51cb6-a6d7-4f05-bc36-aa7cecd1f3f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.188.232.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7be174c-3543-45ea-97ba-9b249411f404", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.188.233.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500efda0-64cd-4c12-a562-5f954dc307bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.213.137.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace5690d-efa0-412a-b967-81712df3061a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.213.154.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a073242b-219b-468c-8978-fdb1402aedb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.213.183.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa25a217-2ad3-4efb-ae74-36a6dd893a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.213.7.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4048b138-4ad9-4edb-bc05-d8fd27c5cd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.216.84.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389e2cef-7965-49d1-b365-a3b47329b92e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.177.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b2e05c-1c7e-4c6a-ae7a-229649d7bf29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4977d5a6-47ae-4a69-93f6-f025c3d731b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba444a0-0afb-4bd5-8c68-5dfbe7dce751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.179.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53bbca0-6cde-4310-acba-94e1e3aa9438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.230.5.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fce0fa-8ac3-463a-a390-bc9077951a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.236.164.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57f5c77-293c-40df-ae8f-b2fc22a47ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.28.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58cf7ec-a683-4773-a0c5-f535f9997899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.32.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dae58e4-3ba2-40f1-a014-75bda9c3ab85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55507b7-b147-44bb-ac97-25fe8aba9b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.41.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca505e4f-462e-4c8f-9a93-8de934acc5da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d862c5-d2e4-49a8-833f-a057c7090647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.46.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469cb907-c099-499e-808b-59f7d8ada5df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5ababd-d179-4f5b-b059-76ed7216842e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.117.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9696ffa9-ae53-4da2-9d57-23803306f1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.119.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209b7409-72bf-4167-95a2-b04f28189634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.168.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5384be7a-f9c2-445c-8bd3-e3229851dc78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.168.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be9ab6a-ba8a-4b14-a885-b01390cf2285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993ccbb0-f50b-4219-b42b-d940656f5571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76517790-d1a8-4634-9235-fc7a1f57f855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448b3a84-063e-419c-bef5-f57bef05fab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5165c4a7-0f5b-4b2f-a90e-1d3222dcc7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe66f9b-4476-4213-8b1a-9971360fbc36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82287960-12aa-4bf8-ac4b-a228b200e3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef225f0a-8194-4fd0-b2b2-fc06e67e27b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217dfe9f-a28c-409f-9e13-c254193a1473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27892dc7-9d94-4d46-af4d-2eabe572a95d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab00c3f-27ae-4f21-ab35-5a8ac20518a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1deb16cd-bb55-4ef2-9cea-cbb74df6841b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f43f78-b50f-45ba-835d-7a56412d9c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29eb8dd-a529-4eec-a7b4-acf5315473aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331d09e3-c574-4c66-9a9b-8d35f72fd8d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053ef829-339b-4b1b-b06f-057cc7b41775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26f9a97-83c1-41b7-84e7-8e69083c8e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4a9c17-0f0f-4f08-a783-7b27c541ee9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ce9cf2-d803-4242-98f7-357c56c98d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e28dedb-a55d-4597-aa80-3e534b6499a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e48bc0c-45dc-49ce-a52c-8ec0f3fd06e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3e02f0-ed43-42f7-bfe5-cf525a145ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62248302-37d9-43a5-a07e-5399322d0a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916a78ce-3eca-4ae5-b583-4704d07438ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24bb46f3-0713-4615-bfb3-eb5655879476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29666d19-c51e-4450-88b3-08459632dde5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbd7ec8-6ee1-42ba-936f-d19072bf51db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fdafd7-8b3a-4492-a83f-ee4378254901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c7be7d-b974-424c-9242-bbaac586bcd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bdec5cf-734f-42ad-bbfd-7c893301d834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6614e2-368c-48e3-b9fd-9d92e7c11c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dffb43c-6b09-49c6-9ee1-fd5aa190455a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7e0463-5cb1-4220-b5c0-a251241a807c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7114cd07-08c7-4f7a-a671-00afcf1ab19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.176.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23706d31-912e-4568-8df0-b2dd5f0a21f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.178.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1b4edf-d27a-4d62-b204-f18541353c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf8dacc-5c78-4315-8725-05fb2cfb3d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.184.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0f42cd-a8ed-40b5-ba9a-342d182d4efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.184.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc16d78-3e98-4ebf-beac-581be6f98c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53149f31-9851-4530-af77-22d1635c67cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bde10e1-8ba8-40f3-9250-0404ffa19d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8657f53b-6f5c-433b-a5c6-14976c1ca256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.81.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0912b0-79a4-47c1-85aa-193a20898190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.233.121.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906f1b9f-6d8b-448e-90c1-f4fcec011e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d0616a-54b9-4b2a-885a-557a6804bf32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.208.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc77f450-2c6c-41b0-a6ba-528c622683ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bb0043-15e5-46e9-931d-c346ac7977d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f90d867-47f0-44df-a124-b49cfcd12927", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee1e664-a510-450a-816c-2c131e226371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.125.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da76eea0-1bb8-44f9-991d-3d77e27af777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16747e94-ee95-4e78-b28a-f3674f8d907a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.250.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f3e6c2-dd07-4a5c-aa5c-68d1a1e40658", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c8e5e1-529d-4da2-bf82-20ce31e41ae5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fd43f7-15fd-436f-a012-738b6b365a9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1d87cb-54a8-4b5e-aaba-43f326462426", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c1aaae-ff40-472d-a539-e085a528a189", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33de5752-c32f-4422-815a-50448c9ceca0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e4f705-b7db-4f68-abb8-6db1598e24b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129af828-b6d4-4b92-a9e5-8b65aa5fabfe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb85cb9-bd2d-460e-878d-d2ec7ef19b3c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e2e621-7593-4d3a-8886-8ed6eb789131", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbd35b8-f7c3-44a6-9796-1f7e7f4e5f15", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a39d6a-3849-4d68-994e-88fcf1df2a7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f0f0e7-2fe5-4af7-ae4c-c50113175c61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbc239e-6aa0-4cdb-ba42-69befd9f9cc2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f87b5ee-c506-4c3f-b3c8-1ffd378a4b59", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0d9be1-b314-4a18-a812-394efaf36eed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08e5d50-9f79-4c55-bd7b-a3f9d348b288", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07cc8897-5221-44eb-92ef-f90c27cbbc31", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbf00a8-d9a7-412e-9466-d140d0b18e5d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c3c473-6290-428d-a0f0-67380ef1ff5b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87e571a-a88f-4c38-b2cd-d4baad656250", "name": "Malicious Host", "description": "Observed: WEB activity. CVEs: CVE-2021-31207. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31207", "external_id": "CVE-2021-31207"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e427047-f3b4-4d35-8a16-6621d55e8987", "relationship_type": "indicates", "source_ref": "indicator--c87e571a-a88f-4c38-b2cd-d4baad656250", "target_ref": "vulnerability--be10e45c-5e3e-4783-a578-e8cf127b8e61", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f26b8c-7d7d-4e45-901e-9897b23d8531", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b80017-2dc2-44ec-903c-9471e89131de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4172a8ca-c84f-4a9c-8d9f-9b050e8148b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ead82d7-b3c8-4a0b-9437-d8ba3adad9d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c189da5-0801-49d8-bd87-175a28b780d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63e4195-5ca8-47d9-87c3-cd9cbbe95ad2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d596b4-d70d-4775-bfaf-2e103c6272e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d6f836-6841-4641-a872-dab8b4be2eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.200.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86556e93-89d9-4cfb-97da-5ec1c39db53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.201.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9704b846-49c8-4b45-b612-6ce2d990e8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.206.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d828271b-c3d5-475b-97e3-bac25515642b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.207.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025be138-4a39-404d-93e4-bf00be8095b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.81.230.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e2aafa-e262-4889-a02e-4ac89a0c8777", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.111.172.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40100f49-10ed-4a69-bedb-8bc9a27f7cff", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.128.181.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7199858-63e3-4145-9162-959c44e907d9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.141.229.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41884057-6043-4e68-ae68-691c2c00f0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.141.48.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c7ec07-b2f5-4aa9-8582-90024be45efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.162.56.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea1063a-455c-4f87-85e1-9cedbad04eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.226.106.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea7150a-2b31-40b0-af53-126b56c567f3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.242.115.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39033878-efeb-4b96-bea7-5d1f3e4be7ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.242.115.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445a0f7b-d7aa-4ae9-ba03-7c7dd1ab358c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.25.40.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f28187-a338-459f-9c27-7e9e4d3ffe05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.33.58.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9b0469-74f3-4c72-af46-ebe0859ec3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.36.72.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46f16a9-f657-40ee-a7ce-03078c6b99ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.39.146.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2196814-51e1-42fc-a39b-6587ad881001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.42.242.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2da020-8c50-4e80-821e-f22b8e889cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.60.235.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2831684b-a746-4770-a549-3c210675429c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.60.248.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e98af2-c535-4c56-a0cd-41623b1b457e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.65.107.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a59481-ed9e-4f07-80bd-da34daa493f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.75.114.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be962c55-c344-4b1c-ab93-1d46ef47a80b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c40891-bbc1-4ea3-9a6f-229215d20c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.1.65.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d6b7ce-1397-40aa-bc36-bf791cee0165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.2.97.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f7402c-a7b7-458f-9988-bde1d0f0104d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.200.66.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523cd219-8d42-4ebf-9afc-b67cb674f48c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.203.111.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc279f7-b8d8-4281-91a4-a70e23260690", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.240.169.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f61f8d-56d6-4dd7-ad1e-6853435e599b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.243.129.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ff5b47-6b3f-47a7-968b-04b7188893a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.249.170.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0e8e1a-39ea-4c9c-a584-de82efc577df", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.87.103.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0252f128-3521-4170-a49b-bddb60334fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.96.17.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7936d4-17fe-4d43-934c-102e4fddb58c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42px;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1c60b1-f983-4125-b84c-fff09f079d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.110.37.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b9cfae-90de-4d24-a3bf-a692b1b0112e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.102.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d6704c-c3ac-4980-9bbc-0c726c6cf33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.110.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390cb91b-86dd-4c6f-a060-fea7f7943189", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.131.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f71099-f791-4ebb-9e75-ffd1f57f4d29", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.15.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea61e26-fde9-46b0-8dfe-a933cecf839b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.33.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880dac12-406a-4c7b-9e84-b3e6bab53016", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.7.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7366e9d9-f1b8-48f5-b079-9f37273a4d76", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.74.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6559ca0a-85c8-4dfd-a600-aa027ef2887f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.132.181.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707d4971-190f-4b64-98fa-42a0e10c542e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.253.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8819ca39-8215-444a-8473-ba1922ed85da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.42.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71202aca-e62e-4d7f-8073-043f2b75a385", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.61.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e68bf2-5256-4705-aaae-0ad94709507d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.69.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80c704b-bae4-4373-8f0c-a614934663d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.91.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806feafa-8683-49d5-9abe-78b4d6906bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1124fe0d-05bd-480f-a105-7bb8f51a9e5b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.177.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1f2bff-d461-466b-ad2a-0645c8473711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.98.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b568542-bb18-4ce3-8068-b91ac9a86599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.133.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9283d0ff-e686-43b7-bc94-d9623ca43061", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.135.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd97dfcd-89eb-487f-8c8c-56d1c457f311", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.182.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee6f606-7635-4890-8f35-f97021db07c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.136.88.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24e3d08-b397-4f61-a39d-c4276b86c967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.143.254.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd68781-b2ae-48d1-b10a-9fb5ff083990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.135.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84383003-69bf-4a4f-a8f2-106edd1a5a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.26.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192cce99-e370-4e38-8bdb-422503c0c794", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.73.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2f371e-94c8-4f98-8c98-5bf3d3bd6f5c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.140.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f99f11-4755-44f5-b9e6-cc0a5dfbd601", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.109.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fd51dc-4612-478c-9edd-2991fbc31e2d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.129.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac84a80-a57b-4114-8a0e-641de4067594", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.188.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdee8804-1131-408c-8564-1abdf118cf0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.113.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2b516d-daf1-431d-98c8-f80f4778b81f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.47.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5995272d-6727-494d-8b69-061f1ed37486", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.60.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e67649b-ae62-4714-9740-b3c0a8f5fed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.71.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2be1f7-cf8c-4679-be99-cf9cd19dae99", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.14.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3d9362-e7fa-4e4d-adf1-9b2d1147cbf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.149.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c73889-e77f-474c-8a06-2c69702fd9d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.175.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9be38d-3a99-4d82-b2d4-026d26a9d28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.179.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5eb326-60f1-4a63-92cd-3714e34e61ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.180.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f8afe2-cfb4-476d-bdf7-2a8ad95d3e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.46.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07f8987-546d-4dbf-97ca-3d2bf0fd94c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.95.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d925ff-a4a3-4d4c-ad32-e5832245c89b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.149.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4961da34-1afa-4f0c-a862-ce4a3dd302e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.177.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90233711-965d-456e-98f2-d3a2d72ce7ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.57.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60e6808-d7c9-4cb7-b309-5c2de6bf37ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.63.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11dd652-da88-4f27-9b18-b60bb30e0d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.207.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9edf8b-e1a7-4bc1-8d93-50109e4fa89c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.213.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a5e2ad-4b76-460d-8fd1-c57327117e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.217.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59bf4cb-4fe6-4a94-bc63-b2f4db403fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.103.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e5f8ca-136a-4792-a895-262b00be0afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.103.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55514283-b76b-44f4-9c4c-7d37fab87142", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.114.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b17592-71dd-4a35-9c2e-dc9973e17a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.107.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bf6a6f-e4ee-4cf4-aab1-957c5896ccc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.113.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bf3a92-8d16-4552-be1d-08e699a40511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4a4476-7f4b-4b2a-a983-2e15eb02288c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.0.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce8ceb1-09f0-4eb3-9f55-4fbf436e658f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.1.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55cc2f7c-a286-4824-b1a0-9198106bebbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.129.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d49e4c-7d2c-4d56-b7bd-41319b70eacc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.167.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cb47ae-5052-4651-89a9-f9068c5fbe32", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.180.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16458c2c-5a73-40ac-8c14-19b649116b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.197.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--badd880b-c6a3-4872-8bab-77d0ae2a2c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.2.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60197518-c2c4-4d5c-9128-9ce87b0d0774", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.62.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c70018-5593-4f45-ba60-f30ab03a38bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.7.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c99b3f2-50cb-4244-8ad4-b990cd6a9cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.7.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30084f5b-d987-41be-a074-4070dde81cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.131.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e65beb-770d-4582-aabf-8c0e2f4c40b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.132.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce3555d-52eb-4ddb-bd47-e17ebb877583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.134.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b118c68c-57a4-4601-9914-4e927ee41189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.242.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503d63ae-50d5-4c07-b62f-1232c380accf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.243.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7804dc04-d8a6-4f2a-ab6a-7eadaad6ac23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.250.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3410d5a-630a-4e11-8c1a-b73fa0e5f748", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.7.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33026e7-fa63-4f45-979d-ce9b4711f7af", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.171.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d628add-a7f8-4e22-87ed-d54d4fd73cd2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128766fb-c26c-4521-8840-378b8edbe359", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00db9a86-0fc6-4915-93b8-95cd79cc0244", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5abe323-d2f9-4af7-9939-a071a6e3aa19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae5e32b-0b02-449c-8fd6-0f42372de19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.90.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c974a13a-23ef-4e5a-a279-e57d1fa0f1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.207.68.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0377a8-990c-4a74-897d-faccab5b63a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.224.126.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2356353-9087-43bd-a049-a630632564e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.36.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2613512-397a-4f3b-b318-259f54deb318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.37.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13105c8b-faa8-40dd-9083-a970802fbcbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.44.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fc9bb8-393f-421a-898f-76453383f31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca8103a-b4e5-44f9-821e-bc3d0dc3af06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0dc73fb-f659-4bba-8e23-47de99d7d02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf80ffd-a326-4d9a-aab5-e9cf3605c348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d780e0c-eade-4873-a4ee-1a80033f377f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d39f1f0-77cb-4d4d-81b8-aeea05e46b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3169974-2d34-4b06-9cbe-96b4159609a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c77b3f-b2d5-464c-86b6-3072bbb05cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b1d1d2-ebdc-4340-9028-30ae0aa9b64a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ff0179-0f19-4c58-9d2a-ebaa0507c536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2841108a-2581-4879-aae3-de8d0c222dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab57121-0774-472a-a764-390ebe538ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf39edb-650a-4cb5-924d-c2cc67b77672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77bd140-9337-4fb0-aea7-5a0facc9bf6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c58ec43-8d0a-4347-ab41-e87ad772884f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ca17c4-4456-410f-8a8e-40ba0ab6365e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82ea29d-e2a3-4ed1-8d59-d438dd5971c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779efa83-09f4-4b6b-aeef-971b87a740d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1550418e-859b-41fe-8619-36f010ef6468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5881f60c-4fae-4a9a-8662-0a2d620afe87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f467e20e-fa1d-497a-999f-1bab122b8b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcd7b2b-c5b5-41fa-81cd-3efbed7aa7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.229.132.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e528d2-8518-454e-86cf-f874ca0343f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.230.28.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce4a9b1-3e31-4375-89b3-003c44d70794", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.193.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679c169f-a608-480b-b470-7d1faf97bb40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.10.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9797222b-4e40-4d88-a049-ebb0ee3256d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178f17a0-3f99-4784-a2f0-aa49d3bda543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129f616b-e039-4fc3-88f7-f5a326482948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.249.230.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339bc5f0-abc6-4db8-9ad6-5726545d99ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.214.7.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb22f49-b99c-4667-ad9a-b690fa8a7d31", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.188.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82a4454-4d37-4d7f-9c33-b2f4963e35f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.226.196.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d8b32d-1a21-49ad-84cd-0694def0d541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.227.45.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4531292-829c-404c-9db7-46d969b3a213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.233.198.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f224710-715a-4e46-9d51-9d0ef149d41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.247.181.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2772a81f-1f79-49e6-b286-be867aed6271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.57.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c09bf36-76cd-486c-9d8f-a252cda20dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.149.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c0230a-a80f-4b38-a2ab-37755ef899bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.118.146.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547d67bf-6407-4ec1-889c-9f9f6e40db8b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.129.228.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6674ac-db93-4806-b053-950d247fa20e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.129.242.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48464cd-7731-4e86-9d1f-8be2e993ef2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.130.127.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e136f221-d0e9-45be-8236-84c12a91425b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.130.254.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d568804a-32ae-4e02-886d-0857f4d74388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.155.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0428882-9af5-46fb-8e6b-0ca7cae93c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.46.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873414d3-b745-4d5c-8872-7b3ec29f5baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.46.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8c8615-86d3-441a-a6aa-01cb24d7dd56", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.118.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659c3d55-8ef8-465b-8de5-6694f0bb22ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.74.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04709832-c798-4d94-b8b2-c279adcf91ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.142.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ed4449-fca3-4f3d-8785-cf2a6aac991b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.212.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57bed24-9b98-4de4-b318-33ce03a1aa74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.212.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5b66ed-3f82-4ca1-885a-c191b28c6c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.82.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510e0358-a3c3-470f-b826-901848746efa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.119.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1af4db-9e2b-44a6-8afe-74a891b9624b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.161.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af3ea8d-10a2-4360-b0ff-4c05bf6c1b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5a7017-f3af-4108-a48d-f4b589fb4dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c142d45-1d95-40c6-86f6-aca561d2c4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07c8e65-0295-4e69-8dae-eb4e84c705c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25d6dab-25f4-4fc8-8ec3-b6df643eec36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314c8ae3-18d3-4b13-91bf-c9d4f6111e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98298d75-eca3-4d5b-b5de-2e30be9b456f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567115a3-79a4-4c88-ba30-0e00f47c074e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c186312-cc6b-4d8e-bee1-d6a9aef82982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521355ba-b5db-4d62-b1ee-e3501d3d1288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2635ec2a-d1e5-43ba-88c4-8b16172b37a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfd4bdc-e5eb-4fe6-aa56-969d6a0279e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a25dda8-6271-46e9-86b6-a8a64175b2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be1a1ec-3400-414b-8453-32a9d87c7a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23598b6f-e4e8-44be-83da-5fba12d75448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac5408f-84cb-4f09-a236-0fe2a9de431b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acc23a3-2aa5-41e6-b611-f82a4c557998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c8b609-217a-4727-a2f6-33c6e8035527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814365f8-2d0c-492a-b772-e02a8f38f7ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757636ff-3a7a-4dca-b5f8-b607ef2b33f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6b0c3a-56bc-4ced-81ec-23e723603fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f58d44-c2b9-4917-a209-cc527233aa55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee969b8d-5b3b-4af2-aed1-6a0f81369e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a698cc0-22c3-40d1-997c-9a1e60013884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86928469-2dfb-4242-bdc2-c2000145ef68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9fe9bb-147d-4576-b89f-36a0d3788c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637df97a-126f-48b7-ae7a-07a14bcc7009", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.198.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c415414-9cda-45c3-80bf-1d4a958eb314", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.144.136.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7b38be-c4e7-4589-b441-0fe19cd85db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.144.212.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32abae95-bf27-4030-81d6-72d365014b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.146.54.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c92b8a-077d-4f07-9c32-31749058c5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.146.54.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f2696a-17f8-49db-9a5c-27e07b75de9a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.147.50.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b79837-67c6-4220-adac-dd1e75ea0bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.147.77.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a727fda5-8c6c-4301-8945-0e61f88fe9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233ba8ba-1717-489e-8a15-a3ef1f9e4466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb8568b-d7eb-4cb6-a1e8-acaa2503ac8b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d18d86-1c7f-48a4-8a53-1914199520f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1964b8b-97a8-4079-a8b2-cd68cb8db3ad", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1f6375-ac66-43dc-bc97-b9278815e358", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5ddc13-8ee6-4b10-95fa-7e879590ce44", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba321e2b-fcca-4d35-a32a-6e132b1e86ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902a1a04-8e94-40b4-a5e7-b46fab64cdac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1148b7-f3fd-460f-95d7-6ce20b1b2b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f745c130-9939-416e-b1ef-aca29a2c5e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869ef8be-acba-4214-8ffe-ac76c9a6ea21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acbd9549-fda6-4a41-b4c2-c20330ef317e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.146.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3545af-c113-4de4-9e05-5f3271ae63da", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.152.66.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bf6620-722f-4570-bda3-e72b9d4dba94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eeb1273-0813-4e57-a619-51183f2da830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c65e0e-c97f-4ccf-9e23-c34416e0de70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee358eec-b77e-449e-8ef2-3f43eac657ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3126bd70-ca97-4f29-acf2-375fced386e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568e5a79-e378-4372-bf9a-dd4134fd50f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be6dfe9-9eb6-4ce2-8788-7e556f3feb1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284acf69-2a08-46c6-9d84-bbf5cb1f5a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.98.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d927a337-029e-4b43-8fbe-4575637e0ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aaa66a3-f481-4c38-b028-daecf4b31d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba22e87-9ee8-4c0c-9304-902de62b2a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518098f6-7a41-4f59-a026-343aac3d5478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4586bd1a-1003-4e42-9969-7a70ee06695f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7c06db-0598-45e5-84ef-47c2f8502e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e1195c-2f86-4ab3-987d-21448348c8bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58ffa01-50dc-423d-bddd-e9fccbcda9f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36ae332-472d-40eb-9c57-81f968ff8d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2cc33be-a7c5-41e4-be1f-4e917400c1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a714ac-9adc-4eb3-8e9f-e81726619193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d5218f-c1c6-4014-bf53-9832c2d50a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2dc12a-3e49-447b-ac0e-f3535641c21d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73786266-a9b6-4204-81c4-a42b7d7b2a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900f7df6-53e8-4424-a430-0d825f241a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a11ff1c-8233-41b0-8d54-027001e3a437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052d8581-146e-4fa9-9ad9-27d31c1d79d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4b526b-110a-4dbf-bb04-6c18b1dd727d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e37e94f-1c9c-4e30-bbdc-40d9ac0642b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62047692-34ce-4557-b19d-88e7add21ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782de1eb-a65c-45ae-8699-6374c3a289c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc21fa5-caac-41a5-bcf6-506d05725043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62461777-66bb-42b7-b085-35855b7bd1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901af7b8-bc04-444d-9523-1baa3dab8005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a3ee90-4c92-430c-8c98-41dddb01d166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bbfe99-b4a5-4294-b020-90ad44bad131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b98888d-2419-4acc-94a7-7f445d96d741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156f5476-9341-488b-9a0c-9d9bcfd545f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278943ba-b968-474b-865e-9254f41505e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9611d17-e1fb-46b2-82de-bdf091266f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9035d20-8a04-47d0-a702-9ca1addd1c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afec554-0cf9-45cc-a478-2393a7dc31f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018b35ec-3b3d-4505-b9eb-4cd650a0dda6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe39a74-dd09-4249-85e8-af214fe9e387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac02464b-b726-4e87-8b8a-2a315de11e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055d9f30-f501-4316-819b-98780df9be0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57029ad2-b367-49e4-8663-03cd1409a171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c26d1b-7f8b-45b5-ad9f-feb09d759f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed06e113-55ba-48a6-b5b7-14e595070798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb7c95c-1775-46e0-abce-c95fb57fe13c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07a367d-da5d-4ad2-997c-1d661bea63d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9f7f10-6d34-4dce-8391-30ef9973fce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a67e20f-4bca-4ecd-8c44-9dfcaec445d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75da4302-417b-4f10-b298-3c78bb9e687c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2352614-ace6-451c-aa53-e0b502c21047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893f2fbb-3825-4277-aff0-e945d46a08e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c10eba-e397-4fa9-8635-897047c8cc25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20bbbec1-99f1-4107-9d91-82b41a317a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6196b19-3cd3-4922-a7a6-7415473d7b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9caf931c-32de-4e99-b23e-aa430ae6ff34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb55f24e-d324-45d3-8cfa-39e026bbee12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c07c6e5-948a-46c1-9d40-e3dfd28a0e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef9b130-45bb-404b-89ec-b0d5600ecb04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e245cc-223a-4a51-8d8f-c49f7684d204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b898d648-d7b0-4496-bdf1-145df733115d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc133361-bb1c-4b6a-91d7-2b8889f04f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1dabef-0c90-4914-ad56-eb0c2f109e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2af528-9bba-44c7-aa1a-5b510e13782e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e38fad9-4744-4888-a537-dc8a696853c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63256f4e-7bf3-411c-9083-658b0c0e06ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a34285-ff40-4d1f-8ef7-6b89f7015763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c651e8ac-01b6-455f-9342-666093c0f4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f65465-abb5-4c61-a5b6-3ad4dfd5b277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a902f36-1d39-4b00-a64a-2f01e72514d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.166.184.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefe3d11-c410-4435-b151-941fd7f2a825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.171.132.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e31d3be-8701-4349-a713-8662c5612804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.175.123.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a7e1aa-ca6f-47b4-88d9-c7ffec30feae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.183.247.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eabb3a7-536a-4d53-9cfd-c0679ea76df8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.209.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff987bab-a817-4724-81bd-4da23b84330e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.190.168.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36b546e-4696-4773-bb26-2653e7cb69da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.184.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe21987-b04e-4b45-a510-d7159d410a73", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.196.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97f0e96-72ad-43d1-a04d-5a4da92aba5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.197.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be12d884-aeec-4c17-b670-b2893e9bbe33", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.199.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f0a419-745b-44ef-a592-4cd1f0b6249c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.200.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f36418-71bb-4216-8b90-e73fdb902f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.201.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf3efed-c857-4d2c-9f02-93a6a2513ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.203.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6a6b19-865e-4421-95cd-e9149437047e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.241.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36d7ee2-afb7-4380-b378-4c11a52c6047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.249.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5905a025-bc8c-4e28-b4fd-f85eb1eea96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.59.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2044cc9-25ae-4768-a417-5e8798a06ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.66.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae80d657-6c86-4c41-b96c-a9ba16429eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51c7a9c-e2c6-4333-ba15-700e1ed18b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e0dacf-e97b-44e6-ad60-2b4f43bf9e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a51aac-5746-4a22-8780-10c7d1777db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933c28eb-38df-4338-8b0f-a7f40b42a85d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f112912-f868-4bc9-ba6e-5b01a8315443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeaf38c4-56da-4674-9034-04890375434c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa9ee8b-5e0b-4ae1-9827-39aa50972015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cecaeda-1242-4092-8010-f68d17535c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0287cfe2-3226-421f-bf5e-bee4c42eea13", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.195.250.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe42be9c-9709-4160-96cf-9d96198eb4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.196.218.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6167a9e1-7980-4cdf-9f36-241de7c14142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88594ef-9d2c-4c81-b381-bc6b717600ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39ca357-2512-4dbe-ac79-77410389e1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--914c7d4b-62ad-465a-aafb-06e3e2699506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4881fbc-8cd4-42de-8bc7-a7dbb74d6830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3233d686-fa20-4955-8bbe-410ce522729e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e507690-cf42-4580-80b0-e1c97b70857a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be65a4d-55d2-4955-98b8-32bc75e8b563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f161fa5-7a35-423a-988b-147dbd90d57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc56afe7-4639-4fb5-99a1-87de66dc04bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf165f4d-6106-4c8e-bb68-a417096df6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4af3df-7be3-47fa-bb4b-38feaa718ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--748e8a26-e83b-4212-b72f-d5598da7496f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe12123-53a6-495a-84b2-c1933bf7cbe3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.202.246.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b660d001-9515-47dc-81a8-4be93619ad30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.202.248.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fd3af9-3376-424e-b26d-6d1424156175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c333b2c-1647-47a6-b7cb-07260adc371f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29123450-6612-4959-89ad-20619444a554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cec31a5-7667-4fdc-ad9a-2b821cc74cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.207.159.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48996ff5-39e7-45bb-a495-133898b84530", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.207.201.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d087928d-62ab-48c0-9da8-c89cb909c599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.221.115.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5865d4-9ae9-436f-92cb-0ddd0873b1e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bec8548-5bc7-486c-b877-3eeed18e0254", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.226.126.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3042f2a8-3191-40e8-bb64-0e087a9a9700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42718263-5ba4-4c92-bd7d-8a3cf9ce92d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32dbe9b-a537-4e1a-ae45-2c466ed7b70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2fec01-90f3-4f89-95e8-40010f862a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfe05f7-1405-437b-b324-e990ccff0ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a578a7c2-1772-4d2e-9bce-3351d81863a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.232.75.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c4f969-1b40-47a9-9959-678a61fedf93", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.238.108.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880c0b34-86c2-4598-ab7e-bc481297cd63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.238.132.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ce2e2a-066f-46e9-8c70-7cbd8b31d0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.238.242.0']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d9ecfc-ba32-463d-ac61-6e1ee4d204b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.244.121.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d92ac97-c924-44b0-bc91-63c43cc9ed86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.10.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2e3d19-f8ff-4644-a458-7cbcb77bfda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341b9c01-eb93-477c-b7df-fec049c488df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcc5f72-23b2-42cf-a31d-c43cc935b321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03480bea-8a55-47bf-aadf-de815482dd92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.250.238.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0b9ba9-9301-403a-bbb1-f900e45d836f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.252.188.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00fdf19-b397-4125-9967-21602af483f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.32.44.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2027e5-ea15-418a-aa75-80a44865538a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb1253f-8a22-4b16-8dae-b085e89e1091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb71c0bc-ead6-44c3-bbe6-59423d81582f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182ec172-e1d2-46a9-89ec-f5206c360f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0d8587-8284-44c9-ad19-84d521ce9d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a80d3c-30ef-4a53-bfde-014263a4df94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa6f37a-cc37-4e90-b4b3-ed6f059661b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66324b85-fa51-433a-9e03-67cef7c57cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.113.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673047d7-9047-40cb-b45c-999193f3d2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36ca548-c307-4db1-8333-acfa562e91a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb62a52-6a9f-45b6-a4f8-0135c43bf640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002660ff-bd89-4eed-8a02-ad322ed908a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c522b23b-4322-4a31-a056-42082d86257b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7824dc-4aa5-4124-85fd-1013c4cf268c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bb7d61-c4d1-4a78-aaea-7f907cb94164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49d5e22-8351-4609-b2e1-4ac1842086ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.46.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8889325-a5c6-4d91-9cdb-979d29b9369d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154a0a47-bd4b-4811-a525-e5ae41c8a719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.64.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d775cc5-fd1e-44c1-a641-33e789e21766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.67.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d70abf-db0b-4c4e-9366-68ed508b6634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.68.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac530e7e-d74d-48e4-9c89-81fc37f0a80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.68.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24437634-8ba8-4dc1-a31f-bec3ee10fbf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.7.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23811ea1-8920-43be-8ddf-c6cf4eec086c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.73.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6e6c46-aaba-4b3a-8e6b-05c230f0de0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.74.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22eea4f-4691-4c8c-af36-49ce1eb44963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.75.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f69a6f-8f11-424a-b97e-0dbd2c14ecf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.75.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2acdbcea-b672-444f-96ba-7471e0226b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9079f33-7930-477c-a3b9-b2e1f951c205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.80.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ad092b-cf77-4dd3-af87-4e39f9c1a595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742a8062-2fcb-4431-ab09-961af9be84ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b867496-3552-446a-b1b3-258f144772d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87bd9d7-7935-4e58-bed4-fac53f38d5c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8fab8a-8f7c-4616-bfef-1d684d3d3516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403dec0e-75d0-4991-9671-a5c850ec7ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6f7b97-5537-48a0-8db3-cd84b03702f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ef149e-affa-4812-905f-faa453eab237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e18cd2a-177b-427e-b519-4fa8db712172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.85.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5860cb96-05b6-4574-9c35-809f5bad646a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.85.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045562f7-f4fb-4980-80de-4c33df9930b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.87.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e00ec6-0421-4c70-b824-fd10a043cea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d44623-f5e4-4b2d-b09b-00e5b0c5d050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544713cd-30de-4358-8216-904cab38b791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.91.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f63730-92d7-4725-bbf3-3666f0ffdde7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.91.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e716e06-1da7-4796-a4f3-815091782dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.91.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0062fa84-7b8b-4afb-8f99-cd8433580f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b2e41e-3a28-4a4d-8d28-65c2cc552dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02891943-0859-42f3-b029-eb1a3131c3b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.96.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2a9d09-f975-42e3-900e-d524e735e048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.38.190.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266bc75f-e162-44a7-a22f-da31158ef612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.38.210.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe97ec7b-dedd-4fca-9d49-b2f11f20f9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.38.210.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d0fa3d-9c0a-411b-b482-48e094929e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.39.199.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcd1ee7-1905-43c9-b912-7a62a2cf0a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6280d8-2654-412f-85d7-46d9a6ed4ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fcbce16-1806-44c0-93c4-15911f2183ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa849a96-86f1-445b-bc83-9df086ef4bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.55.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32195ae1-24e8-4e66-b037-e78111b86533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc44f2bc-98b4-4b50-a9f8-01d7ac991de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0953ae53-2758-41cd-9004-91dc1599abf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8513e876-1d35-492b-b4af-61b37382a28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717684fb-9b7c-429f-a601-d000d76d09c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ffa4649-7efe-488c-b502-3e103bf83eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5da53a1-98b5-41f8-bfc8-e77fc853f7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9934cbb4-585d-4796-bdf9-0991b8feab37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29beed55-5523-4639-832b-caa770ce4eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9fd43a-8217-4922-8ae3-86088a585913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b016294-6eaa-4d87-b147-631b955140a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd702a5c-677f-44c1-b3d6-ef5237d3ca04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922bda74-76f4-4e5e-97e5-e601d9a5889f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5d2df7-abbb-4d8e-9f5c-361f4fde3e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f875d93-9a73-4f9a-8030-841154f7905a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4111dcff-559d-453e-93ac-912a636ab3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbfeca5-5f7a-45ac-94e4-e82da399690f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0746b9-9973-4a2b-a0e2-6c9a088ff47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.102.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42d1765-791a-424c-b341-ff7b673f82c8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.228.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e0b2bf-3c80-449b-8b4a-716c87776e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.138.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309846dd-a44e-44bf-818d-a1c8ad72f353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.141.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87b2d5e-43e9-49c6-a7a9-2967ba820de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.158.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5dcfac4-07fe-4226-a6fa-cc2201bef630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.185.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde87d97-fa9e-4fe6-8611-242d7763616f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.53.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62023460-381b-404e-96f3-33f0dc7c4dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.80.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5fb289-998f-4981-b2e2-89c03cb34269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20dd2297-a791-4a75-87a9-53476fc38e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e52dc5c-2e9f-4e14-b173-a91a5401b4d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.79.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd648b13-6635-408f-b2a2-a130336c388a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d87d0ee-551b-4e72-a328-a3f14803bb66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885d2eff-7e62-4b45-9263-530091532839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ca9baa-2d22-4a30-8d4b-c096ea9a8214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad31729-ba7c-47c9-8400-ded804bd2e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4389c5bc-fd38-4e0c-9092-9aea8aa0f1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.6.87.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ede73d-d806-4b9d-88b8-d42c2054e96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.66.156.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2792e5-02e1-4c2d-bb40-5c4d97503019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.59.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf94695-7a57-4367-ba81-b3ca74387f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.7.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e9ec03-0ed5-41e0-bfc9-ad4aa35ff4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.76.235.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6308fa19-7d61-467c-ba51-e35775d797e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.187.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55815590-7a91-432d-b767-e4ae774e9861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.78.54.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9b828d-86da-4410-9f23-d98f79c873f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6714a33b-5d5c-4b91-a545-54e06ee78310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1fe4ba-7bf0-4ed6-b784-444e8c73e22a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9109cb0-bcbd-4797-a722-928092b12d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3d467d-0d54-42b4-8fe9-287fe27d190e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbfda93-70ac-4006-ab47-f5dafc69f409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.110.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cfecd5-d2ed-414d-9de7-9e7e6c20ed97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e48986c-ceb8-421e-9335-8b067c7622da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe9f2c7-e6e9-4e67-b77e-19f58302809f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b56fc0b-7eb6-4ca6-9eec-98c3e6ef770d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf48eea0-246c-41d6-a363-b9da47133251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75675666-d2d6-4593-a451-737be6c36565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c48a66-f1a9-4546-bcf8-53dfe4011c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedfec62-6ebd-43a7-bf52-a41245849f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a417eb87-063c-4170-b953-3a04055a0840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfce631-8e67-4b11-8177-f40cdcad25f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13fbb436-5597-4561-aa84-dce5a4906f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200a9572-d2c2-4aaa-aabc-4c83a6492688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84982542-77d8-4d0f-bb3b-852ed86163bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.134.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93616c3-0fec-4d34-848b-2a6fdbcae1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.134.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6e554f-99e8-4ef9-8824-0c151c268718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.139.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a5adf2-7518-40a7-b697-23eb532ab79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.152.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3652965f-306d-4edf-91d8-5adcf2987542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5271b044-d09a-480a-9fbb-81d129e05823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8743b76-e52d-4f99-8497-9c14f476cf7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.160.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909c3e22-a139-4072-92d8-c10213817051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.160.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01fbffa-3f54-4458-887d-21de80fe8491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95634c2-17b4-4ad4-af2a-6e5b3446ce70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ab5ab9-288f-4bd1-897b-ad22a33801a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797f5de1-bf11-4512-b524-7222d05569ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a83dbae-f86e-43e6-883b-7a6620b9f679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.168.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722870fb-8175-4d57-8e56-643eec8029ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae89f506-fef9-47a0-9554-6f65da97dca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.180.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0851bd-43e6-4743-848a-a599b00fc9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.180.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094d7ada-0e29-40f7-823c-b2a5ac4a606d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.180.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3ad1c3-6fe0-457c-9fc5-1c451747574a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.180.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fbb112-9762-41db-855d-a8e44353aa6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19964a80-6a72-4995-810d-3e43b4c96969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417be66b-368f-46f7-a31c-81d7c480be8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4c4f9a-b86c-4dc2-b179-0486fcb02aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53125a33-f810-4f86-a7b1-a46c3bcc9ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae4106f-4964-41e8-a481-85c2b6767264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728d3eb8-874a-4744-9112-29f2a6d387e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e23230-0ce2-4b49-b06f-b1fad51c852d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b14b88-7acf-4d2e-8451-56a62c151609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d48884d-bcd1-48af-90d6-6d98bb163805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f49f51-fceb-4437-a8d4-4cf1c6db9c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7869848-985f-4254-b5df-197301662c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc2d4ce-0619-4880-a237-a09f057430bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78687c1b-6e56-47fe-b0dc-df56975c5715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e9a81a-51e6-41e4-8639-6926583b0725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110c47ba-bd6d-496d-a374-08270b90ce82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d39d312-69e5-4d66-99e9-80f6e30d62ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2645a8fd-9670-4edb-8df4-bbac2c66ac60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea6a69a-8518-4ece-998f-02bbafd60a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c601b9f-4c4e-48b9-b5d7-455b15363ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b5bb00-f609-4963-bf32-fd73475863cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354d0f8b-f9b0-4529-b502-43374d194e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47500f82-9f18-4a24-96e1-b4d9c2168109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c951a790-47c1-4279-a530-891d8b987c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc11ec1d-02c0-49ac-91ab-c5969d1833ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.214.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1d3597-30c3-4aa3-a425-7d5511a8a4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.214.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b439aa2-919d-4a11-8b76-50c18b4bfd60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.214.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c64c35f-23d3-4fb4-a705-1288e62a8d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde6b99b-e5d2-42c7-ac31-ca3dc4348220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.40.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3549ee-7844-47aa-9775-20e92fc51cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.5.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab9adab-fdcb-4655-ad60-975b42379e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daab30a5-509a-4055-b5dd-ae0d165aef15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.7.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a14d23-9f36-482c-a841-9aecb0ed2cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.8.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78a50a9-aff0-4705-aabb-b988019218e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61dbcf26-b029-4639-b396-bc4e59f0bedb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95eadbeb-ffc8-47f1-a8bf-be4e46b46ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa54eb27-cd48-4a2e-b07d-24ea00632545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.81.23.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3a0846-3e5d-413f-9974-87a3c5ba435e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.122.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e3812e-a817-4f4a-9358-89ed89ff2410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.56.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc700f3-f6af-472d-bfbb-11222b9534c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705a4d5a-fa68-48d3-ac11-e6799ae5dea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400ff906-c8e5-4090-b0b9-9a9fb2d52c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196cbef7-8d7d-4243-892e-ac39d85ebdec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6dade41-f7ea-4078-8127-efa37a598be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9af639-c14d-4257-81aa-63118076c13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ea93c8-3aa6-44b9-8b75-c734e1e8beaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ffade33-adac-4317-9750-dc880c9de2a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bf4be1-42de-45ef-aefe-8807d9751594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c672a90e-cc9a-46ec-8f84-d3df4d7cd17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b96f57-3714-48be-affe-5f2a010105bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb86c61-d3d1-443d-9694-0189b2998cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd4dbdb-e18a-4fa4-b916-4be1238ab25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400e9d71-6758-4e03-8591-c6cac4141fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b79415b-dd1d-4a6b-a326-bffbe1d44b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752ebecb-a92c-41a6-810a-353fe035d825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125315da-84a6-4d6c-bf11-b62cf8aa4802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5bf07b7-7161-420b-8d53-350e6ddfe638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e454bc4-42ec-446b-87d3-154817fd0027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e41c6d-b607-4a9c-9e6e-f48040a8d61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9204316f-82ed-4fa6-a752-ac5051b268d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cd58fe-737c-4b0d-a2b1-09c6abe2362c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13597d14-00e6-42a7-93e4-902aac90489f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9417f82-b674-48b5-80c1-737776d7056f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5014f1e9-e6a2-4024-bf76-0f898fbd033d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76aec92-4355-4733-bf50-bc02422d5570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f900cb-819c-4c81-9926-1b44f1896886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b89031-40aa-4ddb-bdd0-5d3eb9ad3e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52905c71-d667-4be6-ba6e-cc3c9e3ccd0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756f7aed-be0e-4355-a57c-7a207858af0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02cb0ab2-f7f6-4a19-8a79-d9cd530199cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b118a297-33f3-4a28-9e4f-354a682b1062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183497fc-90f0-4190-94ff-6a639827f0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f58dec0-13db-4ae7-9bd2-7a5d1727d148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd17de3-e9ab-49a0-adae-a18d1b069d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0288146c-0e36-4a5b-a3e6-2759db1767ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5c6806-e6f7-4e32-81a5-556989943606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586fcd14-7d2a-4553-be5a-a4e109fb4ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20c68b1-d086-48aa-b1fb-e0548e6a67c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff402e92-1515-4b17-8062-d26ad70b37d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.153.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a479eed6-36d5-4006-857c-b6d5850193f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.88.186.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae210df-4088-4fc1-aba8-6350ac3a1f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac19e807-f3ea-47f1-9c49-29e6dad35350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd41f4b-0e83-4255-8429-bb8643409633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8316512-3b99-4a8a-afd3-b904fa73c72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.94.217.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67078610-ea41-4bd0-8bbb-515fa67a6a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.95.212.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c371bcb8-b826-4c4e-8a9a-ec2547c691f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.150.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00259b9f-0b9d-496d-bf84-b20a5ed6ed14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.161.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71666a9e-f4c1-4844-ab4c-54fb42cc2ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.173.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d370c6-5bf2-4312-b551-924e7334bafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.191.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4f37e9-471a-488d-805f-306ed723ae9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.193.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea19d91-0745-4a34-8d3b-9426802b82b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.199.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c07655-a548-497e-a040-cc2c4d8bfa49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.229.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1176337-7b33-439e-ad69-60fe4e91f89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.89.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f2a0b0-ba03-45c4-a4d2-3c2106303e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55dfa43-92d8-412a-8f37-5fb85ceed348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b300d0-327d-4e9c-a333-a97ffbe689f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.116.227.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace19b29-6789-417b-aebb-7f7dd3db8a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874a7005-4b71-4c1a-9aec-3913fbfd49be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea22d6e6-67a1-46fc-9fea-548876b6e630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.161.50.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae134db-7391-4b62-87db-0ceb06439d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ef8b16-e78b-4105-984e-d40f7a54e625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.250.235.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f207455a-78e8-410b-af77-dea2f7c9fd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.38.239.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8889dc3e-a0a9-4f25-a333-3c21252dc61e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.9.215.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6403ac0b-bf9d-4019-8448-706fee3e5406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.101.11.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db782fe-e752-47ab-ba24-c681af05d2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.101.137.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f43ef24-889a-48f5-8dc5-c6465d2d6bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.157.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e67d211-cb64-416d-a247-1d9642c50740", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.107.84.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980d29d5-1778-4436-b02c-5ac92826cf60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.108.129.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d30778-a326-4cab-aaa0-0a5f69c20271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.109.203.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56c9b8e-ce64-4c43-b62b-86ce9545ee5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.110.149.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9dc9105-6ddf-4aa6-9bce-b8d9939a2010", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.112.97.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c993d901-a185-423d-a594-8e35ce425e55", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.113.107.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8388409-69a8-4399-a42f-c8b6198fbdd6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.113.231.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca29850-0245-40bc-bfbc-6c13731fd931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.115.231.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7b41f9-f656-4adc-b18d-d5dfc9b392c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84da2605-fe7c-414a-9afc-9366164a1222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.223.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704b8feb-e28b-49aa-bcce-b07f995d735f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.130.108.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139ccab3-1c6f-41b8-b3d1-e9d6dd5b0f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.166.209.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fb4bbb-6edc-48f0-98ea-6a2949f7ab9c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.181.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac37308-5201-43b5-8cd6-d0bae6c6b030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.198.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e07c08-ba63-4fb5-9d7c-1fa92d2c7f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.198.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62704d0d-3774-4c0d-b564-6b73df51c98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.252.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8905925-92ab-48f1-b0b7-095aa100a2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.42.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ee1f49-4f97-4581-9cc9-42d52d7bd6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.90.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637ac878-a7d0-46f6-aca2-b63ca124b711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.100.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d169a320-6832-4609-a7ff-d774ba7d0edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.2.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cabb29d-41eb-4df3-87ac-1d212f7556c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.201.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29cecb17-16d2-4a0c-96b1-fa1cd283fca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.221.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685161a0-1c84-4622-a975-123b017d4f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.87.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347a3fde-2b54-4554-a1d2-4a3e2c734cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.238.118.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d11cf5-5fcb-4d66-ae3f-d93a90e6adfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.238.121.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f1f385-626f-4f91-b945-2f7d336f5ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.239.144.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c4bcc5-2363-4a18-a19d-78ae926921ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.239.218.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455393a0-1d63-4db2-89a2-08c6325f4d94", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.241.108.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e59ecf-645e-466f-adb7-a9263c51080c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.241.126.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352ea5c0-7a84-434e-8a73-bba6a8736d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.117.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90e6c76-bb20-4257-81da-a74253fa86ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dadcb14e-88bf-4024-80c6-5245c34c3f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab56d40-1c61-44ee-b262-a2544ca65c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.130.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39bfdae-730e-4fdb-ad6c-ddde0a9e06da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.131.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085c98cb-047e-49be-9a1e-5cbfc2ead72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.133.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b1bffa-41be-4b22-a392-cf99f304925e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997f1f4e-c9b7-4437-b908-7d1ac6f54170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56858366-b41d-4275-9b3a-f521fc9b466d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb64a94-775d-4a7d-a96e-8612b14a3900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c933a61-f3fd-4682-af3f-737d2f15a262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48815b58-1b80-41bd-ac4d-bb17c0e1e350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed34a531-995d-4d05-842c-ae239b93072e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0082125-e3e0-4d71-aaee-4fc11c620013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03c614e-a312-4649-a1c4-ba4fa362318a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c0b2fd-dd16-4da2-b9b8-0e010e652283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7800d7e0-87f3-4fc6-9a93-0c21f077565d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8d8e33-40d7-4575-8a6c-f434b010f3fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff8371d-ab6a-4ac5-9f61-0080b664f4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca0942d-75ab-44f8-8c19-21ced6a126eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5541482a-e857-433c-b850-512cfd26a6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923c0d99-5972-4a2e-9e3e-7bcd5af8399e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06cca7c5-5bfb-4093-8178-bcf4f4138761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bddae882-a477-4208-8ef1-87d827ade9ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41cdf602-c46d-4132-b420-6042dd245910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c30529-7f4e-4d52-99a4-a4df292eeaec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc81e6a-ee12-41a9-9c0c-bffcaf2f1d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d6180d-1a83-498c-aea4-4ea03b74755c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2e6966-6720-4d42-8f59-0b0bc27a4a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cdc9493-5e94-4326-a14f-53cdb4afbdcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d1fa86-a686-43cc-a5d9-d1fec197af4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e470ca4-9bff-4730-a77f-7906a75646e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612c3fb2-d8a2-4484-90eb-dab799f62095", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.40.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977481b7-0a5d-4196-92f1-d4c9aada4515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca49c4b6-7e75-4415-827c-2d9acfb7855c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.56.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b674fdd-afd6-4a51-bc70-a2ce92380139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.96.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfaf756-d923-4ae6-ad1e-ec3f20af957d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.112.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75bb494-3279-4750-a7d6-902f0bfd30e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.112.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e14aef0-1adc-4d6b-b9a8-1e8cd227a45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.114.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6dca9d0-a5d3-4341-a275-5c2714c328d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.114.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d314c9-7809-4753-b9b1-7c759ad2a210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.117.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec6db7e-539a-47cb-8863-fe0bb5523374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.119.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf06584-83b6-478a-8416-9ec8dd5a56a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.119.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34d7624-88c9-42db-8466-b411bfcf0130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.122.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3954175f-2cce-46e6-8e96-22db949ade13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.123.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709bddea-9f22-426d-9afc-709baa75d426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f0741e-e10a-4124-b84f-2225ff24f64f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efa4182-e72d-4340-9a14-fba7ee5d8c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0d9f02-191f-443c-b1fd-e0907ec3edda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba3b597-9bf8-4172-8f86-ba5f8b80d996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.128.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00739e0d-8105-4002-a555-7d5969966b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.131.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a610c81-8bd6-4d77-859c-22151092303a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.132.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c7a271-d5b0-496e-a9b4-472e55fb9bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.133.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08262f5-f112-4873-822e-ec2233ebd701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.134.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19939286-b78d-4ffa-a751-26e1871d0730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.135.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66c09dd-cb85-4cd1-bd1d-456c7db376df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89a9f75-25fd-4f7b-accd-495cf3f48615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f202a55-3a89-48e4-8fe9-20faa14e58a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ea90b1-e63c-4c91-a871-529eb71b82fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da423672-a267-4670-bf38-0c17fa831b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.152.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79edabf2-9e69-4bb6-93c8-34a394574227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.155.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331ab90e-a56e-4608-90e0-0e7452be170d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0876cb3a-e97d-41e7-a254-8464a118aa46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143c7d44-ca14-4d01-b42d-95ff5b7e6650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399107b0-732b-4581-8b72-153f19f2eca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.162.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11251990-03bb-4bb4-bc3c-65cd6f24735b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e73d03e-9949-4236-bc27-bcdcccb4bb82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d226c8-b2a1-4670-b52f-23ce5faddfad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068a29ad-b591-415f-a174-2513e3fe952c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.180.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaabdac8-342a-4a49-a28f-b1dcf4b91048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.181.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abacb0b-b990-40e2-b617-b865ea2713a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.181.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616c013e-e5ba-4890-883b-cc71f439a964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.182.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5caaa5a9-8139-4e2f-9e03-f58bf165d2c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.185.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6de07a-ea79-4cb1-856b-dd3ef2fa567a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.186.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba6108d-e8e5-481b-9341-801b9c880d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.187.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44061600-591f-4689-a34e-59cf7dc6b24f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.192.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d681fb75-41cf-4321-9e78-e92932cf1530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.36.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec58cc9b-741a-4edb-bc4d-f5e7973b2ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0d77e6-8c13-4ad7-94c5-231e77fcb648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7824bb10-6ebf-4561-91bb-b4bca18626c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.46.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cabbaee-de68-437e-9660-eb2b393f5c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.49.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b2311f-3e6e-4b11-9b31-267a64a9ad22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.54.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e56fee7-f013-4eef-849a-56b34216edc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.54.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fe5ba0-6dbb-462f-8fb4-9becfb024389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e3fdcd-9306-4f72-a7d5-be31a4897183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fdd20e-2b54-461d-8cc1-c24fc96805a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5106a8e7-72a5-4ebf-b66a-4ec9f7f5d193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364ecd37-6037-4f3f-8740-ee7e4d522ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.84.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e19ab0-1b8a-4215-9cc1-36ec46932fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2659e67-d959-4f4f-9515-97ebd28b279f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.86.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f6c3d4-227a-4c2f-8f5f-544f36879202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.87.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0678ed-7394-46c8-8add-4120ef483bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.88.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd9c59e-2cd6-4835-90f7-2a44069df6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fd443a-5ccd-472e-8cd5-9d3b055cfa7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99527a6e-f213-48c5-a699-05fcf8ab627e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4567bd-6bd0-40c8-bb2b-075575e058f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7232c5-2cd8-4924-9192-381f6f742f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4c9a53-c989-4324-be72-e24733e2f8f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc49263-fe00-428c-8933-455bbba1dee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31cb3487-5fc8-45a7-a0c7-db107da6e38d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.1.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94baab7c-9166-4749-9682-45c55d45606e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.103.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f2c440-9778-4f45-ad3e-33c2c0cb9fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c368318-406d-423f-acba-d27e200f6aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.106.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ef0e77-19f7-4309-84b2-ff6f9967a69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.107.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e34ea4-8c1f-4502-8c61-d47ca33ed984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.108.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188df2d2-1680-4d38-bccd-b206d48d9a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.113.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dec7d05-0729-4d9d-b6dd-fe1cb7524555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee7ac90-6ceb-458e-adf0-cc894cc047f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6c539e-5f08-4851-8326-14e2d253023e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.119.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744195ae-7f66-4dba-b85c-8971e85d7771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9450616-6f31-473d-96e0-f28c696ad6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e798e8-a50e-4f79-a026-693d4bbd793c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7149f30e-b1bd-4926-8fe1-476c35f70157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9cacb4-5dbd-4860-9e7b-809d84559003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd7cc4e-5367-4e41-abd7-7ed95c508e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15db485-553b-4339-93cc-8dab30c9b401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c243ec-8bfe-4000-9068-d95e4c0e5f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.142.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e103d94-c832-4977-b748-504037c69c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.143.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92470d61-b9c4-463b-8392-41abe378438a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.160.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711f270e-2861-46b2-87eb-cdbc1d6a4df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.160.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45711e5d-f714-4acb-8257-23e6cca1a8e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.164.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbc850c-ada6-4299-b2a5-bee4de4e7a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.165.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4e8db0-e84f-44bf-b042-5fed810f07ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.167.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72887d7-d23f-43a0-952e-32bad749d742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.168.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120ac067-b2a2-47de-8faa-4e6cb833e0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.172.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ea1dc8-a876-40d8-a76b-5f365d13c9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.172.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e750790-b435-4a32-8428-75ee6f307d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.176.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed66e10-f5c5-4d30-9f05-103e09fa48c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.178.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631267fd-80e2-4001-b772-67946b446d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.180.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd2ab61-ad2f-4444-896a-eeb3c07f9f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.180.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d456c31f-4d74-4778-b5c8-1bc871cd9297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.182.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c9a264-90d8-43f9-9181-ca69804d5a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.184.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aaf6c6e-8207-47ed-bd80-2a750bb09ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.184.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8774ce-bf7e-4513-98a5-423caf09d08e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb84955-b42d-4822-8b35-e0a1892fd4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0790ad-8d6f-4d14-b1ab-680625dce035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8a431b-0891-48a5-a2d3-4ad8ec58029f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d3abee-818b-4370-95d8-d6d95aa291dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1be681-a03e-4651-bf45-636f8f352ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caab1aea-27ed-499f-9d5d-971f83a59c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422d8b99-3ec9-47ed-b8ea-994ccec3b4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.19.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27213dcc-cd96-477e-bffb-73016baf8bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbc0bec-c6b9-416f-8d24-4f2aa1e2113e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3f0d99-2bf8-4c58-91db-407802d8caf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4eef8b5-2b31-4035-bef9-e3f04af082f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.245.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a21d4c5-db97-4d0d-b427-5b49de3f3a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.245.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80defc47-f5d5-4a8f-9507-fd09bb568c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.248.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39791c5f-6461-4008-a768-8d547b711af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.251.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec572c6c-26e6-4af2-99f9-ba4f0bf93f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e96f67a-8469-45e0-8114-92bfe93d4558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.253.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849be1f1-53a5-4813-985c-1b47133cf151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.254.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e746df-d050-44fd-91ac-117280674b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.255.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4191c739-123f-4a91-b319-16f7f8c2ae7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28564ec3-7b17-4044-984d-399e550c7110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.29.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58fcd9b-b0ee-442a-8a73-3a708d78bf2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953526d4-040c-470b-b696-5924d03cba22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.33.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5a35b3-9fad-4b4c-ba1b-b64519967ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.38.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e1bc1b-3381-411b-aadb-78ccf6837f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.40.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ce3f48-5bf2-4e08-8afb-2e1542df2aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46742b5d-3504-4288-9fe5-596c999432a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.48.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde7cf25-71c1-4f3a-837f-0f36b109e413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.48.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3272c3e-3f16-4a5e-b73b-dd5fe561df92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.51.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538c7822-1113-42f0-91d8-5b18bb59049f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.52.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1de787-7683-4df1-ab55-8718a6531601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.59.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45afd71-076c-4bee-b59b-a3ff9e34334c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70967632-553b-4566-9cc2-1e4b526edec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.67.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61293b9f-b89a-496d-ac2f-3fcd5c1e613b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.67.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60624236-2003-4073-8b93-d0191bf1e9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c751e872-d10d-423f-9a8c-21dbb72ba2fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.71.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff932755-9f70-4a74-b241-3ac3284ac6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6cc617-853c-4fce-b71d-4302c709823e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.77.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ce7e5f-2c99-406a-8fce-db3105c1e4f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e472c4-c25a-47cb-a099-582f1321355f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.79.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7533b2-8a09-40ee-8dc5-9a41d6586e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.80.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cee1d44-3449-494a-929d-2caca5ee5a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f366f14c-1cad-4cad-933e-b6df4893898d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa4911c-5189-4052-88e2-d1b641d99ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.84.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150ea138-49ae-4a1a-a4f6-c51774a852b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.86.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1124d931-6070-4507-82a6-de82ba272f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.88.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abdc78c-7069-4f6b-889f-0881fb78aa6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.89.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951de68e-28fe-4617-8cbe-8b869d6a8683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3200f981-50d6-459f-8bf3-88ec652751b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e0ced6-5834-49ff-9dfa-309a1d1ef7dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e07748-53bc-44af-ac8e-708ded92631e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27afd8e6-441d-4a95-9a69-b00db6c2602c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480b9d75-68cc-4097-ab73-ecca2a5e40ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89945762-9462-447f-898a-44e740fd2876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5880866a-e34d-46d7-a509-737052ca6bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.252.46.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb0d644-e625-4f5a-92e2-ca8960340722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.156.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3e25f4-900a-49c5-af07-ac3530c9915a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.218.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c74b5b1-2f61-4f63-b789-6a7ed201fa27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e64fbf-f76b-40d8-92b5-8d6e06c4cd03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.146.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a41ec1-ada7-400b-8768-8bf78c4e02a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.148.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4df8be-5466-445f-a4de-121e44aea996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.148.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db3bb2b-a19b-4776-a12f-7f85e2907510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.150.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8be48b9-661f-4089-b02c-34e0647cdbb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.150.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3056238-514a-4b26-b096-c3a710ba61e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.151.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868b05a4-6b82-4515-8df8-9192343129d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.152.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f741b5aa-c543-4add-b064-b3413eec3484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89854fd9-b4f0-439a-bdea-b8b20b0a1fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759caeb0-2149-4469-b8f7-c41e41596c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.155.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9493509b-9c33-4e95-8f72-b44e88ce3f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2328d7e9-ae98-4e6e-aca9-6960a7d3e73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.158.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a59f37-5346-4083-b965-1a0985930d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.158.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7876d28f-dfd5-4a6a-974e-8b4647ba8233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.167.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37df105-a2a6-4489-8434-2998ba4cee46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.167.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c120d8e-a36b-41a1-801b-6a9cabd14f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.169.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21425a1a-8e5a-4438-b527-5607aa3a73f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.170.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32741ad3-4933-42c3-a583-d68b50933370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.172.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb803748-1bca-4f94-aa3d-9c70562f5a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.172.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a4572e-ba4c-49b8-ae4e-3193fc44c7a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.173.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7568b2e-0548-4006-bce1-a3c1bdc4badf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.173.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89bb053a-dc7a-47bc-acf1-cec7b80b2189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.184.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74083945-6ba0-4091-88d2-2d7bcf1b9a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.184.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda2ed03-435e-4664-ae0c-5ff34ec82103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.206.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec0a55c-ff96-4954-8ff4-f624ffb23ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.206.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0fec44-d8be-4a96-b66b-86d01cebc08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.214.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b02d859-23b7-42a0-9923-18280cf1087c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.214.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21218c0-d102-4c06-8bbf-4d8685dce85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.215.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b5e777-1771-4179-b80b-c01a3ea5a1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.215.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63f24e8-0fb7-4c1a-9d02-a14e0c5e1066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.229.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d77d9e-0ea1-4a0d-acc2-2591a0b435d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.230.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe10dc8f-0276-49df-b72e-df1ab6d80545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.231.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c574c74f-e8c9-45cb-b4f3-27aa91b53985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.234.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c4470d-1ee9-477e-ac4d-437d5e74c586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.238.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ffd450-89eb-4e0d-bed5-f8d6cd1d579d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.240.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4704c2e7-a803-4cda-a09d-bb739fc14c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11f5b18-c26f-447e-89e5-ce268b4e28b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.247.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4e046d-ffbf-4d76-910b-f75855f80695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.249.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de103c1-3e9a-464d-82cb-1f8daa7ba35d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.254.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aeaeaa4-7c6b-4af0-b968-8742034f058c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.28.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8635fbad-142f-429a-b77a-d77b12eeb051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.32.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320ff3e9-a1ec-4fcd-8f2f-e89288da8765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.36.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09f31b1-ca04-415d-be01-2ec0815e5db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.39.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a36d0c4-6bcc-4185-98a5-e3144a8cbdad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.43.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ef04ba-c791-41c0-9179-161582ce739d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b60044-16f6-46b1-8674-1ac4ee1e776a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.56.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5889ed3-35c2-48c0-90e4-65cf727590c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.66.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87b401b-6a14-48aa-92e1-c658c4d515ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.70.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519e5664-a23d-47fb-883d-da67eab7524d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.86.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17dcbbc-ea50-4da0-9d64-b24f4f342e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.87.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c92529-489a-467a-9606-1ec1f63e7cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.90.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881e2da6-74f9-484d-8d72-268b71d9cc8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.1.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a50b4d-dc44-4b0b-8489-9f17bc583736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.19.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c598cae-71cc-4f40-bb41-e0f770e46ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.20.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d97518-0cdc-4f79-8c7a-3a6be1bddfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.213.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166a3ff4-7f47-487e-80ee-e13252ee16a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.4.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b33fdc5-fb4a-4a69-a49c-5d3a96a58d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.41.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc7fe08-4ec7-4664-b784-465d9f4a5cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.76.71.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3157429d-2dce-4772-ae16-e7c5133ce815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.76.84.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b780c575-e372-4019-ab6a-18f3ff1a5724", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.180.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7481e931-6b3d-4b75-9a66-d3a4e70769d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.192.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9b2a64-2ac4-4cd6-ad5d-58afe3c24e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.214.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea3c315-dbfd-4541-9859-61157577c84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c4b8d3-8b5c-457b-8076-e15aeea73085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235b530a-c7e6-4290-95ed-3cc5a09e47f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.216.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a363bed-66b4-4293-bbb5-326c838ea7f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.217.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7884b4e-fb18-4d53-9926-a55667d2e12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.218.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1faa4d46-7a30-43e9-b5f3-bd06090482f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.218.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903551d1-cf1a-49b9-9a0d-b25d4418c424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.219.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1c3403-60f9-4221-92b3-cd570d08c897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6f4689-004b-4a66-93e1-5feb93a72e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f00e44-fefb-4c44-8374-ea5b0639d71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47fc0115-37fb-403f-b2c5-4e1038990531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.224.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16216c2-1ceb-45f7-a630-140f21c68d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.224.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6f599b-8959-4209-b879-c79f2e79bfec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.225.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6dedcc1-52c8-4050-929d-2a95fbe8d15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.228.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2424d436-8e19-40b1-9d1e-c91ed0d15bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a769a773-f1db-4f36-a3ee-e3209597495d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1d2502-25e5-4e74-abe2-dfcf08dce932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f830b9ca-393e-4dd8-acdc-b8446a53cf77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c9e2be-d2de-4894-8725-2fc569d76150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2402db7-7eb1-4c8e-ae6c-b60a0961d08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6a95fe-b2da-48c3-bfe8-a0726c6a2112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a5c83c-1135-4e1c-be73-5d498f9db2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce98f253-de2f-4afb-9fa0-b029909c0975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24604a9-d31f-4838-8222-bd90068dec68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.234.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79dfd0e0-2588-4ed1-8d31-a6f0f6ab05ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4140dc68-f6c5-47fd-b36c-8887b9c45cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.236.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2895a16-ffd7-4cf5-871d-449eed4ed994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.236.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f114547-53d8-474e-b211-77449c73138c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.79.41.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3a328e-20dd-449a-bed8-8da7bff616f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.80.63.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe71038-f92e-4bbe-866c-a19c0cd1b122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a90b095-2988-45e1-b89d-e77779f7c859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd72fc8-4708-446e-b9a0-2382c693a9f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde0d8b8-6f90-4504-a2e5-b8eae8c84145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd90bbc-f82e-4809-b549-cdc983940274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7203710c-0d0c-4e01-8b8f-b678ec3d89d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3a4113-984c-4ff9-a9d0-5d6676d51ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13d9bed-12b0-4adc-a83e-39da8443ca8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0363721f-b891-4015-89ac-c0f2bac9be57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71299134-be99-427e-9e11-475bf9eb02f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af44736a-f8b2-45d2-91e1-84a119be8eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfee3a0-0019-4a2d-8b15-386f638baa9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0665da-6b37-49ae-88e6-b821e9edb3be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a36cdd-d219-4f39-a522-dc2812c50864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8fdc3c-ba67-40dd-92a4-997fbbaef609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2be0c07-4f77-4426-9f94-7cbac44d1173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e70b25-6901-4168-a60f-783dbcb9ffe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a250323-761a-4a29-ab97-a7370777995f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02725a8-a0ca-454d-a76a-9f795c578e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e8e9c6-78ec-4814-b22c-92a453538f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc2dec1-3b64-413c-a946-dd194e580278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa9c147-f9d2-4f8f-bfaf-a0e78808fb0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e95b61-5d03-4654-a561-221e5b285879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f449b3-ce3f-4cee-90be-aabf60ea36fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.116.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d49ae1-bb98-45c7-a71b-d780d05866c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.116.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac98382-5b1a-4fc8-9359-fca94ee544a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2245bec1-ca70-4e1d-9536-50eece3114a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee7141a-16cc-4133-88ac-fcd132755e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57a4c6f-f7ea-423b-8d65-444104f6c2e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88532e73-fd40-4608-8425-023238b9efb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a9c3b7-f579-4d7b-85eb-0f1b20ddf988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b87e28-9598-474e-94ab-b1abfb4e4aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ec3ee4-a63f-4793-b89b-bff4e1d97178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714b93fd-32f2-4911-af33-898e5b1dfbb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9d7dff-ab11-4dd8-b054-e586327a3ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39b7252-5006-470b-a2fc-d50d84fab00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1971828b-74fb-4b00-8e21-96a164be4a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b7488d-e45a-42aa-a022-f65897daa021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78fba46-8ecb-42b0-9682-8c645d2fac7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44c8424-6476-4d0f-a2bd-a745a78bff1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b7e82f-e632-4b1a-bf7e-5675e04f48f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf839e2-e7a3-431d-8d02-98ffa45aa721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1256f4ed-c6a4-4dbd-ac93-fc2524dfd6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b86ec6-21a6-4dd5-8135-8c406c0eaada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a1ac5f3-e7e4-46e7-99c2-f6d69d5e90ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157d1991-a62b-4db8-b21a-d72fe43a58c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85ad375-5871-491a-8580-fb691cbc0280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a981bcc1-3979-42fa-8c2d-7ebd4782900d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b505e1a2-3660-4caa-b160-2693f81acc0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30897747-19d3-4d1c-9436-24b86bbcde9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809dd58a-8ab0-45cc-8898-e426be3b4f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71cb4d4b-7405-4dbd-ba13-a1cbc8ce4e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78641046-450f-4ec4-8cc6-1c415dfa29f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.176.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc9f9ba-56c2-4da3-9504-2df1863d3f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.186.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928c8b7d-58eb-454e-bf05-890b8a15e1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.188.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00caa5c3-cf48-4da8-ba38-a5cbf5244f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.190.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df89542f-5602-4260-9415-643577008694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.191.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d28b5a0-fb07-4416-af9a-0dc3042c8357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.192.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49e14c5-66c7-4a78-abbb-8c5d584d56ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.194.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e513eb0-7126-4328-9d51-103d7240b67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.197.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09dc0fc-f46e-47ba-8808-e1bd5e6730d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.200.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd673dc-575c-4822-8f17-cc74391c2bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3234bbc-fa88-43d8-b936-6690693a5aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce829e14-147c-4c24-93b0-c2669e0b46a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc094e0f-4e7b-404c-9d71-b28731893df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c263b7-fdc7-4d4a-a4f0-d526201455d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37f33f6-be57-439c-bb47-148239ee341c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e06b61c-d8c8-4424-9c9d-0a5a009bb6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.43.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7032147c-a570-4bb5-971a-f8ad3ff7783a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.8.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae7e4fd-2aaf-4351-b2cc-f369d7b1b9f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.10.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf7beee-db26-4bf9-bea3-fcf1913143b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.104.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfff1c54-1e51-47f9-8894-ed1ba78abaef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.15.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e6fc29-05e9-40d2-b565-d4d3729f7c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.35.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72240df2-bcb7-4d4e-86e7-556ab942f68a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.48.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0f5aea-21b5-43e9-b55e-591c6e945b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.58.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4901e4a5-140f-4fef-a22b-f581ec6a0c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.8.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669c7b03-47a0-4e7f-a194-72474f8a3599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.84.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db91262-09eb-4a05-b8bf-2e58a1c7ada9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.86.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa4a63c-3394-4c93-865b-3a94dc5a644e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.9.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1190765-22a7-45ce-9969-4caaad7d79db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.136.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9676af6-34ab-4069-9188-25abcfe0dc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.193.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9112e636-e968-459d-a920-42a87ab65ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.231.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c676a7-bc44-4822-aad2-6b7413356c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.244.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19187989-1a22-49a4-86b0-0d206ee1d171", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.10.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df545b2-8bbc-4189-8326-4ed9c607a73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.18.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52a5ff5-74cb-46f7-813f-206aab9d6ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.29.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5756a59-76e2-4ec7-b8aa-7fe205aa6542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.31.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b39bbfa-f7f1-4392-b8f0-37a8b2350e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.65.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963e7ff9-e6b8-42ea-9e54-883a19a49745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.67.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d48b9ee-f4fe-40bd-ab24-af6d40f258f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.86.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8d3e8b-bebb-4441-a4a5-711503b21501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.99.161.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0f1b35-4eff-4966-930f-03a86c3de6df", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.99.240.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5b7a8b-20dc-4965-a38a-513702e7ede5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.211.211.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bdf43bf-7cb6-4ff6-81a1-33b2573dded5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96ecd4f-a23f-4bdc-8340-2ca37ce6cdb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6105ae-d107-4e75-9255-254c62083029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003cc25d-7844-477d-a2d8-353e59da5b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b21e5e-22a9-4d38-a7e2-a8881d29ba50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.218.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b50f861-cab3-47cb-b2dc-6e93e945ea91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.243.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18715ba-d663-4341-9193-c8da923c4eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.82.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261ab93e-9eca-4ca8-aafb-7e6b135d9f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.87.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c947f743-874d-4d0b-a257-2a139e14fd18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.115.217.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ecb8cf-a85d-4649-b9fc-f55c5d065753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.204.15.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab39062-b5e2-421d-86d1-e2372e96c77c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.205.183.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c276872-7d21-45c9-87d4-97965217a15f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.207.40.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816c5922-fa69-407c-8dd7-e0476ee23d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.213.153.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf65be16-74b8-4396-8e85-50006b3f6061", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.229.102.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c653ce1-0618-468b-84f1-9d2b37a83730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.229.28.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec8a2d8-9730-4b5e-9ecb-9114001f4606", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.232.104.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6dd480-3358-40ad-91f9-be9c8644ac3b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.50.66.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f84cab-08ea-4b3e-9eb9-2f601f60697c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.141.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419df18c-d58e-4964-a093-908bb27b74ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.204.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b585188d-ef22-485b-a208-daab885f906d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.245.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463a7b2d-0a3e-46c9-bf4b-42302edeb04b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.38.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f969e50-7138-4ea3-82f8-43ff659e7f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.86.248.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd99a67-48a0-42bf-af08-f41de03fc4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b81cc3e-22b7-46a5-a5fb-539ba0530fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.129.182.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517a5b22-8bb4-4c2e-bb77-2d819c6453b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.129.252.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a992274-5fee-4c76-9302-b3144747bee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.192.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459bd539-aed9-4c99-b213-9bc584c98e35", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.178.101.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723987b9-602a-4cf7-8368-21d6cf60977c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.180.253.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24317af5-612b-4ca1-89af-677d9605a3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.50.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6932b952-ab22-4714-ad77-ad7ae60051ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a893e6d-ef8d-4d38-a3fd-4c4ef2b9115b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fac6087-7fa5-4993-8325-1e6c690baa93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9600be2-1f6a-4bc1-a0e1-e15ccb5d5cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81760ebc-2444-447e-bf70-a84ac63a0671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182c251d-3395-4c33-94b4-b5565d3b7417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712cf886-0ebd-4956-9ac2-d12384652d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.132.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--665b0655-15fc-4846-b832-377fa9698084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.182.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd287240-9a53-44df-a28d-be1d4180113c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.201.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4611690a-63be-4335-b6b5-cf658b488d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.191.246.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fad405-9f67-47a6-95a8-2c1419310246", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.193.206.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6335bef9-857a-4607-8a80-b9f4efa6c0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247a9489-e6d4-4ead-9677-ec12085cf239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac9d4d2-57e9-4998-8fce-a9049bcbc80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d2666a-8409-4a1f-b736-25e123427fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65051f30-2b4d-4c25-8451-4f8dfe8907f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bde2d1e-3c04-4e58-97c1-a32db7773f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38785fa8-56aa-4c9e-91db-431a5b55d066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0c9c44-d65b-4af9-829c-29cc58b2a38d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21426728-7c0b-4b35-ad6b-bfbb87d8ad44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47579d14-4fd9-48c3-b51e-e3919c4b23da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8f74df-0b1d-4643-8527-e3faff9d4940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.231.70.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e58d930-ecf4-458e-b986-1f6e7df006be", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.232.144.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc20d87c-3384-47bb-b97a-1cb245309b08", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.81.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b30175-d9c6-403e-aec0-c7c5cc5b7f26", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.253.36.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44d1956-3783-4e3d-9c91-c21a52ca54cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.124.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424f1257-918f-4ff3-8610-844e84515160", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.39.49.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f237ef-f4ab-4c8f-9a59-de24178b2d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760d64a5-abd0-4a19-ae1a-85e4909d9f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bde6398-ee8b-4f2f-b31c-a2c84b1e752a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2023-1389. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--868bf992-5e9b-4a6d-ba1e-64d5ff7fbab0", "relationship_type": "indicates", "source_ref": "indicator--8bde6398-ee8b-4f2f-b31c-a2c84b1e752a", "target_ref": "vulnerability--14747ef6-d470-4d66-a18d-42ccd89ca08f", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6b6f13-e65b-4ade-b01d-952fafc3a1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730b236f-0ebd-4ffd-b63a-968ffd017d6b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.62.74.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a58e34-24a9-429c-bd9e-12a417d35850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f783e63b-0a00-4c6b-bcc2-556d3c34f9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afdadf3-4aa1-4595-ab32-9dde26f77752", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.5.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2eaf330-b4e2-4b9e-bc71-4519c17c7734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.23.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f765e7-7793-4f3b-a7c4-20dc5908a985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.26.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48545e2-d4b9-49e9-8083-5754829bd4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.32.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a69e46-c3a1-4b6a-b14a-01ba2fcde43e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.44.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea23e91-985a-413e-a4ba-f752db02b441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.44.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1013d5-3dc4-4c4c-9c68-5d5161034e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.49.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33841743-f6fc-4bfe-98b8-f1e68f802d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.52.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430645f5-660b-4be7-9173-c5b7d853f57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.52.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8925f27-b094-4ba9-8cab-06db017daa89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.54.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f58e18d-155d-483f-9963-b64c0098adcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.57.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56399d06-6421-4c9c-aac5-b6bf9d22e1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.58.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4655cd3-da1f-4a89-9a1c-73fbccc653dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d145a3-c9ba-4853-af5b-408a38e0141a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c8af1c-8542-4759-b9bf-9f5b6f028f62", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.72.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f567eeb8-ec5e-4f24-b78d-d6fa7f63e113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.72.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05939be7-3efb-461d-a5d5-fdc9d975dff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.16.232.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6fec10b-8a4a-42b8-81e4-9295f1d764e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.18.90.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d6211e-916e-4917-9915-b6acbdced596", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.46.141.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6af416-2c94-4627-affd-b2c08d04c7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.197.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449b03b6-edd6-47cc-83eb-1780e7a78ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.127.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a566521-8d93-4897-8a7c-3f73c6df0196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.233.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff8d435-8e1d-4742-88da-27f412068e16", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.34.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56020710-9235-4111-a379-25fb5dd663cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.15.115.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4ca7bf-881c-42d7-918f-e369b087b202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.173.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2027b4-23b4-437a-8691-6515bf4bb2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670c910f-917b-4868-ba55-bb59459978bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934d6dbd-8ccb-48b3-b15a-ae096a30c642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.128.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1deba3c5-32f9-4111-8e37-7ae0f21f7ecf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.65.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894a02c2-5493-4ce3-9838-4bba65048dce", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.114.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86821754-6721-4071-aefa-64d5c080eb31", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.222.40.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ab82dd-b1cb-4b8b-b63a-831bae04215c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.222.96.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9e6825-d95f-45d6-9803-1af2bdbe44ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.105.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b43548-4d00-436f-ab42-6e3f97557816", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.254.113.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ac430a-6de3-4474-80a8-8578e4607fd6", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.66.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c2654a-460e-4636-a0d5-daa4fc587c05", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.165.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea16d456-b25d-4dff-b7c8-179bd0886814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.243.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5e6cbd-7f00-46f3-a527-7ab44bc3e159", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8eb9fd-060f-4200-859f-52a87e284127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.203.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0a374f-7715-437d-9c0b-a86ebb86e6ff", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.226.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13f07e9-b382-4b88-9865-fec41e8c3be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.149.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561dbee3-6e97-4bff-97ea-5a35905b3b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.67.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e92a927-397a-41d6-9d2f-039ef6660014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.83.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01de78e0-aa84-4f96-892e-4ee923017bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.99.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a3e50e-4aa9-4d78-a46c-19039ab88557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.209.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40dff9e-0fdc-4da4-b90f-8c5e8d8bf160", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.10.35.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e37d35-e7ba-4a2e-968b-9bf8497b28e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.117.120.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a889f46d-4459-4290-b1e6-d4de85192f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.117.124.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0ce616-97f5-4012-92a9-b7efd16fa593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.14.238.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f7820a-0b93-4414-b447-2e4fe5e5fb23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.89.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9717c48-b859-4284-b35e-6a5bca21ae97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.90.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb66f5c-3ec9-478c-b8c1-2ccd76118f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.150.16.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3b95ab-f6a9-4d9a-af06-afa6fefed1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.150.28.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60bab0f2-d561-45b6-b4aa-37e1049b1210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.151.196.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9892da-dbc8-4db5-992b-fe666dfcee6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.153.175.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53154471-c0fa-4b33-9c1b-bda7c7a3cfb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.154.19.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a662b979-f69c-46ed-b3a2-7f07cb345376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e632feb-73d7-44d9-8491-31251a6bcc17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6521ec94-e9ea-446d-886b-10c1f40f17f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fd01ab-e45e-4512-934b-00e1cdfbb7e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38da739b-e34e-4f13-83bd-4a4ba9b66bc6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db4ef29-8d0f-4a77-85c4-5d399bfd55d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820c25bd-f534-47ad-9c41-309037200198", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf88e6b-8a1a-4a20-8a3f-752f5b9e86d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4611970-8356-4bcd-beda-0bcd9e328779", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67616bd8-9b87-4b86-bc39-75c94453389f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136719b2-51cf-4279-92d4-1cc9779debb1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b354c2a2-08d4-4615-8962-99f7ac464ed3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe88bd5-8d2a-443a-903a-c1d88c2fdf0a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ebee19-1752-47f1-bdbe-4eefc41080ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121609cf-c2c5-4aa4-9a94-d551add304e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad423be7-167a-435d-b7e2-3c27df0b129a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1187ec2-c767-4cd7-a1ab-b613e61202a0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69cb49e-c03a-4658-86bb-c8474ba67eb3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030e24ce-2e1b-47f0-a201-59a3d55ffde1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bae8e01-de4f-48c0-b433-6e72fd232a97", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47362136-0e9b-4e29-b1fd-799ae24a2613", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ff4ff0-21d6-4927-be1e-ccad182efd5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba6f5eb-0c0d-4aed-9e43-1899f560e450", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1c845c-e628-4326-b2d2-cc696bfc1d3a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420dd294-2580-4922-b2ce-f57ad76fe3f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56086ab-4d51-4dd5-b453-1899a2d85441", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90979a12-07ad-4755-9d96-d2066d6f9ff8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3b3911-b664-4741-b731-8811af57d457", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf7ade7-6c37-4bcb-b561-d43271076b36", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62388ece-27ba-4d5f-be70-93611f5a7692", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b1929c-d51a-4e23-9d0c-524ff96d299d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b28bd41-68e9-437a-ba27-41e71dd77ead", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6308626b-9093-42e0-93c6-a0b700483393", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437230ac-bf77-426c-8e4d-e4400323490f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c2ab33-9168-4a3a-b064-9b9141214cf7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d33611-ce9d-41ba-aefb-2c6ab20c16f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e9a759-9602-4f6f-b9a0-619b7991d6fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ca5cb0-71a9-4296-abb5-e0361927fa73", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd274bc-c497-47f4-a188-39de2741571b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b998f07-1562-4a52-89be-afc53716c930", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10996eeb-eb10-4b59-a08e-92740709013d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409eacda-75b0-4650-aace-e60ab927ed7f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a551808-7e9d-4bf2-8816-8bb2095b6a5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d1b820-731f-443a-8441-569999a21f37", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.172.164.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f01c9d-2704-49ab-a51e-23edf96f79d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.172.206.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e946ac7-f700-40e6-a43d-5f8f9b308cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.173.181.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3c5016-7a7d-4b44-88d1-e053c4e0e05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572c2a2d-74a5-4a1f-96b1-d97ddb6ae17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d870b9a-885b-4aa8-be2f-e599798a026d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.145.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a89612-06b5-41a0-a835-1c8e693acbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.145.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f894e73-703d-4b88-8da4-011ae2a15115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.146.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d90fa4-1baf-45f0-8893-bc65ddb4814b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.157.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5a0aa7-5492-4128-9ee5-7703fef58a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.157.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac44b92-bb55-4e09-a94d-5a6f69cd3336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.171.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3808b84d-14bd-493d-bec1-f94588deaf10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b8a21f-09bd-48cb-9f46-9af2b2ccc5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.187.92.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6d0984-fb69-49bf-91d0-bf76aa4e2373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.224.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0083b47e-4333-46a2-bb00-d5c55f8e2649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.227.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad808fd5-694e-4dba-9c04-16b860cf8c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c66a062-654d-4fa8-bc3e-cc1f0b79e410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.81.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2064e6-6811-4094-84db-2798e3aa1041", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.199.81.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7331a6-59f0-4ef4-9b80-1cbcf3c6ad5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0029908-9ff4-4352-b40a-b70d77fac709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.200.76.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acfee0d-66ed-4b3a-8d5e-fbbf6ef91397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.210.234.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f09f99-a418-4263-bd5c-0a4033f4461d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.221.221.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029de962-77ba-484b-a6dd-242e2efe9261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.224.241.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6da4c7-3fe8-431a-8dfe-ddd50f7fd4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.42.138.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142ba771-ffbc-4480-b803-5840f65e8067", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.42.96.0']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82c6520-033f-4aac-9625-dedbc5b024af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.53.248.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb4dac7-7f61-4426-ad54-cdd9f32f5a89", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.116.121.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af71a24-acd5-4829-b38e-05462c9b07be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.144.112.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb8ecd5-121b-4005-a02a-89da8fa266c4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.180.163.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aebbec8-26c3-464c-a918-b65108677d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.77.198.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e10712-803f-4c9c-9f3e-b4de7c1b7ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.128.184.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999eb537-5410-4978-b258-62d78bd7f3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.105.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3c5822-d776-4380-8558-975be94da69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.106.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465f891c-2b2a-4043-b0b8-688f9e7ee857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.122.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b98eb85-f257-469d-9663-32421a766a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.129.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2610861-a4b8-4c01-8b5e-726387d89cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.152.34.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8659241f-f0aa-42ba-9829-5fd55a699513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.154.241.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b76297-c134-49ad-b6d2-7f4a4c935bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.182.87.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef11243-e2d4-46b1-b8c0-7a46bd3a273b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.10.231.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2841be9c-dad5-4cfe-84a5-6bcf5492f7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.11.157.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49519489-b51e-4248-afdd-c3f0091a706c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.152.42.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9389977a-5025-4ca1-a750-ec8bfc29015b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.176.247.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30b22d4-61c4-4130-8eb6-d3e69c27d80d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.105.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4af5bd-c310-49ab-a3cd-e6a0c8e9068a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150e27fb-7813-4eed-94ed-ae7d0b079a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.220.236.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34179d04-42da-4113-a6b5-019606bef673", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.221.60.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2b8c31-1b75-4ee0-9c33-2337381ae57e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.23.204.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07ecd73-a597-4d8b-ae24-e6172c3543d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.47.107.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa91edb-8898-4df6-b98f-a22cd16db041", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.47.120.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1dcc44f-2143-49fb-9cf2-1336575b6c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.69.56.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d91613-d025-4074-887f-4d3d67670107", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.110.154.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f50f994-3eaf-4be2-9764-f3dd94f1ef81", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.110.228.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecbd687-de17-41dc-9f23-95b079f331bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.120.117.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3335a4f9-0e26-4ff9-8b35-cd78eb2cb68a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.203.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f06343-8868-4025-ad82-ab3932d357b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.173.123.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25858c24-e59a-48cb-bfe2-b93d85490d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.180.157.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5ae756-0f8a-4700-b0f4-0cebbbab8b11", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.23.3.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a990999-dced-4377-9316-88a4aeb20762", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.31.223.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3630d4de-7a03-4d15-a147-245fa722f8d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.36.18.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d203e93-3857-4f8a-bcb7-9c3a4155e7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.37.42.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d885d7cf-60c2-413c-be1c-3a46df6b95c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.47.190.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc8d34e-e36c-4af7-a256-9a9409e37d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.101.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12425c75-ca4e-4939-9401-b68a0b39d9c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.101.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c368b78b-975e-4b93-b3cd-006b41953733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.103.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a29ade-cd9f-49c3-8d0c-e403860560bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.178.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4dc26d5-0b10-4757-b997-71162cbc03cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.55.66.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c780cf-09b7-4b65-84f7-13e1df841865", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.98.70.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5744bfca-bfd9-456c-9012-47dfc201479e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.13.6.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e529fe-8f48-4a63-9e2d-074fa7337485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.13.6.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59abd04b-a3f4-4626-ac17-74fd257c101a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.13.7.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84656db-f90a-4e80-9486-20b54f48a751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.192.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975e9c63-4d47-46ab-82f0-0d057eb26d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.200.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560cb89e-1066-4cd0-9218-33f3869b8017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.223.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae14fb1-5aa7-4fb8-b201-2f4eecafabd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.166.82.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf24a4f-2d62-4b68-a907-6d4d09cb2af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.166.83.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f334160c-97db-4bdf-b338-1733610bde55", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.17.33.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d6bf81-ae41-4c65-b595-a057346161b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.186.30.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53388a3-2dd0-4c00-9018-9a18bdd67edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.189.233.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc0517d-5696-4442-9a32-9af115d8190a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74420016-67f5-455f-8dc9-e7c6861fc728", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.205.246.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89130451-b189-466e-a121-911749475b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.0.226.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17f32ec-66ad-41ef-b3c7-f987fde76904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.126.17.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d77bf7c-8ca2-4ff9-b822-53717e37a029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.136.165.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55777f67-0672-4c98-ada3-4326e991f520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.138.113.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582d583b-c125-419b-a0c5-e742c8c669b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.178.209.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5cdfc3-8a11-4ba0-a244-627444a0f8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.178.24.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac6e4e6-a07e-417d-b882-821391045c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.216.77.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64723c4d-2e90-486d-bf78-569e7b08d51c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.223.1.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75923657-9dbd-4665-8de1-5072e8615390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.230.115.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe858cd0-3087-4859-b3f1-0b2ead82579e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.242.144.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b835dc08-060e-477c-806a-1ac1b0f364fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.244.180.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b3a0de-35a2-47ff-aaa4-13d8c09f5f31", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.245.11.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416fbfbb-811e-4241-bd4a-fe2c04b4a288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.49.60.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993089f1-a638-4021-a1a9-9346bc80a1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.76.136.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e42ff9-f5e1-4c50-8146-33afb890de76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.62.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26182dc-bd36-4bfe-b599-d3cd4a2708f6", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.141.63.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b17d7d-ff77-48b7-88b0-69a0203fbddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506e01fd-ddcb-4aa3-ab09-123ea693c186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bea877a-6423-464c-98be-8b3d96c89a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.85.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91b7d03-82dd-42c7-ad2f-5f0a1eeb36b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.142.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7099da43-2e6c-4a00-9d41-cfad3d991959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.189.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37cd08e0-9277-4bd7-97f0-efc17ef47082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.207.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37187018-af2c-4835-8e5e-f5482374e067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.209.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d362d7-3611-4413-b3d1-3e6c5a7e3ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.212.70.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21c1a44-6af7-4c67-bfe4-0b8c9dc81319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.228.126.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412481ed-5762-4d8c-b0cf-e047ba094a52", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '63.141.240.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1531f0-95bf-4dd7-8682-ffd96953c84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '63.70.5.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60bd9a2-0af7-4098-a622-dcbf2febe26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.118.134.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa59ef0-5111-4e75-a647-785737c17cac", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.118.141.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5ae67f-6e40-4a62-a1e4-5caf181ab1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.118.141.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--defd535a-9218-4470-9cf9-b84d77f8ecf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.118.157.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdd0810-6444-4fe2-8174-04cad9ee4f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.120.95.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6889281f-ed35-4845-9b5f-26979c4289ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.137.188.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c49a1d-d602-44eb-9360-71dac5090d28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.16.164.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f8cc61-4c49-4907-bcfb-f62dbe8c6e53", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.186.225.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53334cf2-bce4-4eb7-8963-8dbf68e35bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.186.236.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6ce498-0937-47fe-aab3-556883252dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.188.31.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29771100-f0e0-4708-9fb5-ba7d88fb7c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.20.48.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee6c42b-7381-4428-8d42-6311de187a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.207.185.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778ef9bc-72a0-4eb4-bbf5-0357557767e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.115.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa52481-5fbf-49b9-b983-b05fc35530f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.102.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abc74c3-9f61-4431-a8d6-62206acfb206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.98.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ec82bc-c8df-4eaa-853c-ba9ddc90485d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.0.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11efdbf6-afb9-4657-aa12-04374716d78a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.106.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065dfe60-f1fe-4a8d-a297-1be7aedc15a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.146.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4280dec5-8197-4638-9629-25f5d0aabab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.150.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9ef0a4-0a08-4503-ae95-bae0a9ab806f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.154.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475f5944-21b4-4319-bcd2-62172e09b1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.164.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb75dfe2-eb39-4123-ba70-589cbc194d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.173.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e594724b-b8dd-4c84-8ccf-5764c2585f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.25.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7eb5536-69ac-46f7-94bc-e88aee815ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.35.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f95639-3a44-494d-929e-acbb7b5680f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.36.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63a112c-c509-46bb-9769-33e103d2fbc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.66.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e91b3af-1392-4e4b-bd62-9157064d6bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.73.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b99ab32-b2a0-4323-9c3b-7efef5794f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.82.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea1f8d1-df68-41d6-b095-7a7480b1b440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.90.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9679fff7-5131-41d9-a6d3-01fed363ec17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.180.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037c81f3-a5b5-4ea6-93df-1b42a1241252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.255.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993e6f61-59d7-4a60-b9c3-1bd5d04db18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.31.53.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0bdfc18-11bc-4e4a-a9ab-fcb1735c9f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827bd085-ee1e-4682-a2f4-e63de33d952f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9c83f5-5e1f-4dad-93c4-60a00c2a1e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f8ed12-5305-46d1-bfa0-3fa5931809c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3bfb60-3669-40bd-948b-a9c4d7726f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e688455f-6e03-47de-834a-cf85a038feaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7526c96-4f51-478f-b9fe-6098a8770415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c31291b-efb7-4e85-afbe-30d4f9c4c80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61c555f-12ad-4ccd-aa4e-9298aa1c66eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46540003-ead9-4bc9-8d21-df9df9912ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f22c0c7-c711-4e52-9434-158a3d373726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0976843c-9352-4f5f-91f4-6ca8711cf5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ec0c96-80b9-46d6-a4c0-3c6641d2433b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ff11a9-40a8-4aaa-a011-28c0bce325a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d39011-f4dd-43ed-a14d-647702a7cf63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390d283f-4437-4a68-a0f9-44f8a1eb62c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d980e1-e4f8-417e-85ad-0eb5a7494fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6656bb65-12e3-42c4-a2b3-7d37dbea4109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4ab13c-75ea-49a1-99c0-98b3f6af95a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34023d05-05e8-4725-b28e-05eef1e4cb06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4dd6849-5043-4306-af6f-02ec3b182e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8d0e2a-ad40-446b-be40-ef52874815be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5d587e-4f87-4141-a7f4-d6cdaf3c04c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5f318d-787a-428f-a8d5-0fc9d7b8f6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9893c47-d63c-4c38-bdf4-19401e4a4424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9dbb509-ec64-4756-8e5c-35a15556a41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2638063d-7801-4aa7-8186-1b570b68cdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24054b2-d597-4b96-b7b3-fd11dc2446dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3f28af-4ee7-4be5-b0f4-aae280339385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901ef543-1cd6-4c61-a897-35f9022b1b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f21b0b9-eb41-45fd-ab78-489810e64963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68d1f75-a7ac-47e2-b22d-d37ed17c250f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6425f7d5-44a4-4a51-8225-f9cecc4d6f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e47aad-d072-402b-b1d6-b9310b5ab002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7614722-9273-4016-816f-7f77dc72a429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dccfd99d-110d-446d-98aa-0d7f2476c5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef49024-4fa2-4451-9f2a-f608f263f1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1bbccf-2223-4fa4-bc1c-ec9b2df6c941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d083717-8ad5-40af-9412-038b952919f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071838b8-a092-486c-98ab-d629cb5d8b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fbc6e3-0050-4442-b772-ac4754f83625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d4805f-98b7-4ed2-808d-c90daab56246", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfda785b-6794-4d29-a9df-37048b7bd23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8023c8-2550-438c-8451-96c0bc325d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc5d938-7a57-485b-83c1-fbaccb14dd4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993cba80-171d-433c-852d-700fd52d744b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cf2fc7-d7ee-42aa-9082-154b10c71263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7213d106-b287-4be4-88f0-8d2681c8d7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f553916-be3f-4a7e-8b4e-ebffe0f9da69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b535c4-5504-4aa3-8907-516668207f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141537f1-e051-432d-a4eb-22691056f36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9a0e81-f38d-4b84-8f10-e43fe810fe22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc4463f-9491-4159-ab9b-eb115fffa043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dbf9306-dceb-4d0c-865f-b3ce5cbbce5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5bc878-09f1-42da-bcda-4bb33a7aad76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90de9fc3-6e1d-4cb0-a16f-0305dea7fcf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d904719-0418-4295-b5dd-c33a9c44f6e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6f3d6e-6a50-45f7-adce-603bbf385567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987f88be-8946-47c5-af05-62a44357941c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fd799e-99ab-472e-adf7-41ee36bd3bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9780e3f-3c26-4967-85f0-6bb12a89f4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99321419-48c8-4dc3-8b1c-042968d0ceab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b4520f-4fda-4354-b1bd-13688aff22be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004d79c3-69e2-4b26-8d27-98ee8148dbf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b768b2-0e08-45f3-bb9c-4ca28fa8c872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60de55b2-5a1c-4873-89ea-937146977f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f563fed1-ac00-4d7b-b79b-eb88365c7c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fd74f1-2901-4a6e-a2d4-d8b8c890ea9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b640cc0c-dee4-4df2-8569-87f02d21cff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba491c0-38ed-4c4e-a275-f4a9861d5e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac021b4-bc0c-4211-aafa-fb8f505881c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8dcd6ac-5e32-46cb-8f23-b80a75a1e5d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10d8f99-90a9-4fa0-ab78-6b43af2f61ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd2164f-c9e4-426e-986f-e64ba29aa33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e53660-c510-4f2a-88f5-b56a4eea4869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274b51a1-a0d5-43f9-b7f3-89d7a1fee2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbb8b1e-1598-40aa-b127-c44d94b86737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed798022-0dee-4705-8c97-607a05a1e442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745c4863-95b3-4a6e-9440-c8c7d5663d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca357a3-357b-4ceb-a87a-0cfbef04cf9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce56c85-0f4a-4e44-859b-c620fdd71e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b66584a-95f8-439a-b7f1-b8a776f08bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d630e9b-7f5a-422f-9a8a-f8a7d3caed0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf535a7-4312-465c-996c-687b3977a7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154a3396-7ed0-435c-a901-80772be3ca9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e977ed6-669a-4b26-b936-305ceeb19156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81f64fe-a197-4d92-a34c-b3aba78b3f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d023ff45-728a-43ac-8246-72c526b25ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd46d203-b741-4714-8c4a-6c6afdc64ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396da883-c4c6-4299-b0a7-8f6ea7bc24aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7723f0f7-0e02-4176-9df3-2a7e7e41cdd3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4a704d-c780-4747-95d5-cfe84a079ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ecf25a-d916-42e9-9a98-ef4f9c6576e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44c7f8b-28cf-4b91-ac74-9da14bbc28c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d36394d-7cd0-493c-bc0e-6d4fa1fb0eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6336f07d-e91f-460f-bce1-5ffc1d3d0cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb50aa2-9d54-4b63-86ac-4dc213049ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f404071-afcd-462d-a294-94e65e62b8a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8b4038-0e8b-45f1-b4e9-15b3269830a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f07433d-f35a-47bf-9680-1466393fc493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff4e13d-0272-4508-b767-561697c82812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d402098-b648-48f6-a115-eaab5a1e9215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0cd00b3-d748-4c16-8ddf-9929c50d3db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efaa09b-8a7d-4337-b020-6af727c0602c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2975353-b8ca-46f2-a251-03a3951cef2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f421c82-1e3d-4381-b2b4-e4aa0708024f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2a7cd2-cec6-43b4-886f-a059c972daa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcc0772-fc8a-49f6-b490-507b217cf8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3751e49-913a-4c5c-b5bb-5a5ac42c2f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60582ee1-e13e-4777-8e2b-fe3e9a087329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10eaa980-bb18-4fcf-81f9-422496ee2109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a1ad7e-027a-4263-9e2b-296858efc598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8e8088-2b48-47f1-b609-4131bbcb84ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01731242-ea7d-4f2d-80c6-175512082ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d98d1d-3dc2-442f-8fc2-98a10f671b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d66ab9-2fb6-42e3-b812-4ef88bf2e201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eac6a5b-8941-4ddd-bbff-bdec220b9b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc56ffb0-5401-42ec-aa21-6a2b4b3a339c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e150715-f2ad-44a0-b9d5-190bfa230419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca50431-5e71-48f5-95a0-080602406855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0995912d-3e94-4cdb-9b07-3741b367a0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e374b9a5-bb48-4a59-86f6-a56785064c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110c305a-3504-4d3b-a0cf-510cd516300a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be2dc19-bb60-4c52-add2-9965eeb74672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a0b090-fcba-430d-bf40-1cb194f28a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7a4f73-fbce-4e7b-aa03-3cfbf7b8abad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d410fa-884e-473c-9fa1-7e2eca815548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9cdf33-b85e-4bde-8b06-417ffa047c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a67b72a-83bc-4e1f-84c1-e1637690157b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae893404-9d92-4ea9-9823-a745cb858c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83e7771-d59a-4d54-9966-78ec3fbd50fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f908ee8-9463-4f71-b8c9-085d3d1a29bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1853bddc-5dcf-41f9-b1c8-218ffd8adc62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482ffd9c-d7d9-4add-bc24-f9054bb7abe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f96264-d689-4714-9012-c6c8825e51f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a889ce-a619-402c-9e8c-44903d4f5e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec32070-4dec-4c17-bfee-47627305cbc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b6e376-ecb4-4d36-a95d-753478d54a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c2a886-4253-46b7-b538-a77e554df4b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d676e5b-cd03-4db1-81c3-e083eb4818ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0050d0c-c22e-45b4-81c5-151837862e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2dd8113-34e8-442b-bb8f-2712abd0780f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9329463-20ff-448e-9aed-ae439694eeae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9816579b-b045-4296-ae65-608d13ec8043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27806b0-6b53-4f3d-9055-8cc3c8b138a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813e7f5a-c385-4321-9eba-d773e55f9052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ec3dae-a966-4d1c-a286-bdb528e59d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2af4e82-2e43-4b70-8da2-10cfc216ce99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76efc140-470c-4a88-9ba7-ebbaacba98c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243377d0-bbcf-4617-82d8-9091435b4b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c485a71-0b16-4f89-a65c-33a8764f24c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a33bd6-d8eb-4e56-8b0f-371f3fb085e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8777e6d-e121-4edc-b631-b62f64563934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c90649a-8c73-47ca-9299-964813d07d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3596a5-7472-409b-8969-d75a7eadcf99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4c040d-dd00-4b26-8a5d-8b80b72d1afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c87a27-6118-45ea-8121-928c6c8c3d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526f1ecb-cf01-4a67-abd5-195d8434880c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99589f42-862b-48f6-86d0-5c6cd4ad902b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0ef036-e53c-4eac-b404-b8c919686a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907baa4c-0879-47ca-9f1f-ea13d488187f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0893363c-4f73-41ee-a0f6-a8f0a4477e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ff9529-034c-4da2-8b8f-5f2cd282752d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c795c3cc-edb4-4f58-9580-055633f4f84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42fd648-1870-40d8-ad4d-6bafb1ac3eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f2b53a-fe51-4315-a89e-3540efb7f03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621c7da9-a2f8-4bb2-8bbc-d64a2fb60763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78be3e6d-49f3-48b2-a467-e4bdcff7afcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b5f27a-04cb-42bb-bcba-83d52292666c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdaac1a2-dac8-4f25-9ea5-17370abe0db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383bcf01-8bea-4185-8a86-410766410dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21b2ea0-0ffb-4e8e-bf04-28c7ff23cefd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701dd3c7-c68a-42b3-9467-bcb383312cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24478d95-2356-42f7-8cbc-244b04bd2886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b257bb28-97c3-4da1-9cc4-58b7ea8da951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7314db-a963-478c-bab6-a651a95af34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925235d0-8b0a-4f4b-aa7f-3bf8785f3301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d24304-d5d3-4230-8951-88f7cc4f88b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e458a500-a513-4200-bdb0-0792975484be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d49810-f299-41d2-a68f-59f87ffc7fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe49d9a-350e-4177-becc-4058aaa8ba1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc95683-3e28-49d1-883c-ff922bc0f17d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3d25ff-909e-4297-b2a4-7f6a802ec068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0468765-cc24-4551-95a1-92aedbc73a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f264d15b-dbdb-4cbb-a6f4-9c987d49f7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30af9805-6276-4c5b-b144-d7dfe81158c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2beed446-b3b4-4710-81ae-ab114611ec08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad10a35-0044-4c5f-9b3b-7b5fedab9901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8708a073-36b1-4325-89f2-9cd11c98517e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5bf2db9-3695-45e9-90b4-3a91d4360395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3de838-bbec-4127-b9a8-d3198f86b5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8331fc2-850d-4cd3-ac50-b14108881e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c453d121-ba60-4be1-bd6f-db92d52e6d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc71d74-3a69-4fc8-a25f-2bb404db273d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41af6d61-a9f0-415e-8d3d-0cde1db4a5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10dc437-fb6b-4c81-a51f-af0d0197efd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def74684-e6c9-4c0c-b031-b8780bcb5dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871d116f-49ce-4d7e-bd10-e3c2d220fe0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d73741-a739-47d8-af8a-a7e9d7c9d3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae3eadc-f033-4125-94be-461a6f356f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1b4fd0-40df-4c20-8e75-679b37748138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106ce2d2-793c-4a1d-a9a6-aadd2a5d9f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46cbef57-7ff0-4a8c-8710-7fd20e4c0918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e117467a-139e-4372-8450-a145d2792573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0749a13-110d-4389-a17a-788d282c10db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96affa0c-b7ff-45bb-b906-08c9bf524e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82851a6-8047-4a44-aff4-88a63aed376a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55902a8-13c8-497c-a43f-b0cc35a06009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3654eb2c-eb89-49ce-a770-e3ee22a4256b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577b29d8-897b-42d2-afd7-1ee53a45bee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa5e412-89b0-41c6-8994-91f8600186fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08aad5e-1f42-4f4c-98df-a55fa6b742da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97f9bd4-ba8f-4e57-a664-16ade537344c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e275a86-427d-448c-9897-6a60883447f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c82f78-d811-4684-bc58-636bd3967730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9832af61-1613-42c3-8054-108ebf1743ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910c5902-44a7-4253-b582-b596fa01f669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3fe0ca3-dfe4-45b1-bdf4-5a6b6de17e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a15451-af21-4b82-aa35-f5ccbaf0f8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cfdd83-a8a3-44db-90cf-fa8151db0de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea991bad-3919-43a1-8980-3ffd74420e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8d063a-1a5b-4ca9-a003-24e5282f0085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81ec93b-3065-4412-891c-3c84f895f3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f4d1a9-e633-4b23-95b7-97c6fb7df45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873a7605-faa2-4b95-bf24-ff1e06442d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ca6274-11dd-4781-93c6-468e30e85396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800f56d8-b60c-4f98-a1b3-9b6a489587fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063148fa-0621-4719-a979-f644ee62c960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e016a3-d116-4d0d-baff-f8e618cfdc9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9bc578-2618-43da-8264-47e60c3eebe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07786aed-cc71-4ad5-a837-7a9307a9ae51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d174467-ddf4-4b85-a6d4-b2a5f50dd7ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a023d2-4f06-4359-8986-36fd3cf4a912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a5f67a-107e-4851-95f8-4bb7c815019f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c23750-d094-4d6b-aa31-f54b88473fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fbf793-8646-402b-851f-c1383475a33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab89c18-4105-4cdd-881b-e7cad892c452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3697f9d-71ad-4bd9-8711-ab0e5f7d8be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9a9046-68b5-4eee-b786-cf2f2da1d64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129fd37d-8491-43a6-8c24-fcf1db61f651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d42dd45-c9b3-46d9-abbe-b2bebe2f18b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a72c64-863b-4637-8e9a-0d39520c975d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83ecf55-5e9a-43c5-a8e9-65126178e1b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc899704-b559-4886-81bd-d722ad8ffbf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1b9f21-8968-4e42-ad94-2830e82f9030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1924c3c4-c3fc-45ab-b3d8-9f88c140953c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb685999-8613-4bd0-8a3c-ba66bf23906f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f190a8a3-e62f-43b1-be71-0bb42467d39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c53015-0e5e-46b6-82fb-c7b2f9858b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e54ec9-25bc-4e77-b3d7-2528d076857d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8671fe9f-0e42-4ba2-924c-6c875f1f8afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d637c7b-05b0-4c4f-abfb-e4dca82e0f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5630781-c678-4a9e-80ef-db885333893b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d07de41-4dae-4adc-aa67-57fa428299b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83822863-92ff-4567-bdb0-32478dae3159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626cd491-15b4-4731-835d-4e26bd003e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebdf7e9-5d83-49a0-93b5-ea09462f56d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a694d36c-09b5-4b8b-a1f4-0c8802999ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa4c811-d45c-4160-8450-68d8913383a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b1091a-d04f-43a9-a3d1-fe05412f9527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6829b38-f336-4037-965a-15537144a12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5decdc5e-0a36-4f3e-8203-e80414d8b3ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d855e4f-8b37-456a-ac77-f0d184223e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f46f18-c7ed-436b-8915-e6bfa0204e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c865d41-8050-4eac-9c9c-f8651949cdc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc87a0e-ecb6-4a00-bab3-e212eb3df4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6be0afe-f201-4838-a5a8-001a03755c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583d49bb-cdbd-45b5-a0e2-d2ae3b2af60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c134d9-703f-4c87-ab9f-78eb8ad429c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927a99d6-563a-41ef-869a-5149a41295d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.64.225.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7e918c-93de-42b8-9a79-45e390dcf593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ce970c-9790-45f8-8a85-31dbc6d994d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cad3301-b9ea-4472-8388-b6b241bc8f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88b2279-e455-49c1-9a74-5108e86caabd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2137f0c5-84cd-4223-9c95-28fca8333ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b792a83-0aee-451f-b73b-153bccfd6143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f53da0-0b3d-416e-a9ec-5252676ac71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfbc53a9-450a-4d94-8acc-fdf38df08a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46f1add-f73c-487b-bc9c-fe258b02c36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed09250-73f3-41e6-bf63-e0c6eb32d83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f49b886-d4da-414b-ba51-167415ca3cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ba0ad5-ca07-4df3-b561-c12b95b7fc8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa829a71-7a44-45f2-a26a-c9dc27c13305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07831ee-659f-4192-9df9-685185f30718", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a6753c-3813-4671-a89c-36b6979fab98", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6da400-1e1a-4c48-8486-a2737851e360", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6b4899-cdda-48cb-a50c-8ea78bdb169d", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96440f8e-2017-4c47-a52d-e2c38acf58d0", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac4f865-4ba3-4b7f-8567-fe371332aaee", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a91c306-d361-4726-a3d0-8d8a1bb3b17b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7010fe-4eb7-4881-97da-253a797fcf32", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c155893e-93ff-429a-a875-b00962a5f4a6", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f5e884-dfce-4081-b7b1-d316e29a4c58", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13349f76-568d-4815-9fa3-892a424e4528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a186c0-4b6d-4389-8f7b-d0e9bd79ecd3", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3031a8c2-7858-45a7-b29a-2a734fa97622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94468e1a-4899-40a3-beba-13bdddef63a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403ffe9b-793c-4b29-8879-ded9e8b50934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc007c30-8746-41c6-8f44-07ff96453795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd1b1dc-7f17-44f2-ba8e-1796dbae80b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea395c7-a6bc-457e-9023-b9d27ed6bef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e07bb9-4fc6-4fa7-8d5f-ab4f9c44541e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '640px);']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12b71f8-dc0c-4439-8def-8fb8aa0cf455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.181.112.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bf1954-7841-4e70-8b09-5fb55813e89c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.21.124.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c519e3d-247a-4f1b-869b-6de6789726a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.21.173.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c38978-6294-4f77-9eec-4b693cbba408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba393428-c93d-4e2f-b24c-f8968f979baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7ef12f-7f84-4638-8c90-3a96a5af2c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5617d937-23b7-4ef6-98c7-ba86f512b636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e955314c-4e6c-453e-9a22-fa189e6daa88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c261252d-e444-4a8f-b8e6-e08e0c588f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3139d61-aebe-4988-a2b1-5d8d524b2fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d71701-6616-470b-995e-a1240657b30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95765a4-bf42-4fad-aa33-c1a4b1c7ad4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11112f53-6187-4d59-9574-7a399a3cdde7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca99265-8e48-4b1f-8fb3-2caf6fd94cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4073b9d-a916-4f5d-bb89-3d4ed1e7c75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6b8d10-85e0-4970-b1cd-23f9d55517f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547ce716-97bf-45ed-b8a0-4556a43bfd92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b044904-53a9-40be-981e-ae4f9a5a7c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9440e868-d6fc-4c69-9282-925559850abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1db65a-66e9-4d43-b8d1-703900fe7f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8daaa3a0-4e34-45f3-a19e-0515a08a8729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7481b8d8-213a-4127-a01a-8edced3d6757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b4d5e6-6f8a-42ed-82a6-1be1653b9388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88169c00-078c-41e7-8735-4316f50d2dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fbc980-f9d4-4e11-8d8c-bad4d6b04887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd364fd1-6049-46e7-af63-b5eb4b6ad478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0e8ec0-fa24-42c2-a157-fb8ddab80566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68be3ec9-5363-48d9-b407-92d06ce76c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662cd7bd-a440-460c-ba63-557fb75aa5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c22300-6089-42b4-85fb-ca74274017bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6ee4b3-4151-4f28-b1c2-9ca62618ac42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1241b6-26ca-4cdd-ae30-47f400be494f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82eaaa89-49b4-494a-893c-ecd566ebfb41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa832333-e326-4c00-bb51-d0a1f0b08756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef6e5cd-ffb6-4de5-a369-baf7689cd24f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fdecbd3-ee26-4c2f-adcd-84baa1e38a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec78a1be-579a-468a-a672-7692e415c37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ee6b9f-e07d-48e3-bc8e-81ad8f6c0285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa826e7-8804-47e0-bcd3-5b63fbf7243f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47041caf-41e4-40a7-b825-973b111564a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481ddbd0-5605-4272-a820-82ffccbc4ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1772616-b67c-44ba-b3e0-c346a658327b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3457d827-2579-49e2-aae6-d50e50fd3ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1788779-3e51-4c13-9bdb-bc2ba6e2295b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b774ef60-b8de-4cee-b9a8-729448a987de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46511059-0406-45e3-8719-3e794e7acbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97117bd7-1f75-426f-9b3f-606024f46aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4d7f67-58a4-48a7-9db4-8e9dda71411c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809ca075-7935-41e8-ad5a-4dadad20048c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2033679-73a8-4e7c-9baf-2bfd5dc2bff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68517656-684c-419a-b667-bb6bbaf1e6bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772c645d-d6eb-4783-8950-2b45d2045144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630a9b14-30f3-4cdf-9c34-34089639fdda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55df2a8b-24e3-4545-9d6f-7c93afde47aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c093d4-acd8-4477-87ef-e27bb0877876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691166b2-347d-49df-920b-65db868bfb72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6583a0-37f7-4c14-b2ed-d365ae5362e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96038477-b9d0-4751-a8b5-8f1132f50e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08683d2-2407-4fed-816d-1068b7c24d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9fd4c6-ef2a-4cb4-a457-994b06e8f148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da4d10d-719b-4712-b4fa-9c19dd3151ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9460f2-22fd-4fa5-836f-203b1fdf9ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763a9102-44e9-4b08-bf3c-6aa7f4ff0233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294353a8-1b76-49f5-9785-33a34d150e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6538817-f312-4f7c-a04f-53f37be8df42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04552fd-b622-405d-9dfc-26851d83c8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2795d12-a8e0-435e-bbb1-3ef6bfcfaee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2813a9fe-e3e3-49f5-9ad4-eba778495282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b878d7b5-a125-47c4-9d79-3f94d19ced87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaca6825-6e1b-4232-ba4a-e0196b71f284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2175320-8161-4792-b206-a3b0ed4cd174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad69849-af56-4a97-af76-cf6aa1a77049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ece851-01e8-4229-9cd8-822789600201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d641e9-465c-4968-843e-542c9d67e381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebcbd89-e560-4edf-938e-1789739aeda0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b30272-5f9d-4d63-af53-2874cce0c98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8bbd64-a12a-4675-a312-d05d16ef8712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7ac6dc-ec35-4823-964c-8295e3e66521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f792f25-c1be-41d2-8bd9-6cf95244025a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccdd23a-74eb-4953-8339-0dbe85bebb82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2278af39-73a7-4ef5-8ac9-b1754c5367f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1733d4f-0c3a-4df3-8890-db625f1e486a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33979633-a956-4b32-9f07-75ced996990b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e359d6-927d-4fdc-9406-d0166a4a4435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5ea905-54e6-4dbb-a2d3-e5e3a7d9595e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37df1bd8-66e1-4147-982b-074972913783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0564b044-6c62-45da-b085-e7e05abf5377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19862f31-8d1c-4638-b471-272344cfa58f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb42dde-e52d-498f-aa7f-470b8a7b5d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebffedb1-ba4a-44a2-912a-8900bc2b4306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9a78d2-8dad-497d-bc72-8f0ab70baae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41281172-7455-4cd0-8fbd-27921cc5c7f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2245669-6a88-4f5f-88e7-9f4499aa0233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df53b393-52f9-4fea-90df-ac6b3e341db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1535ed6-4b3c-4808-a645-192c214c1cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c2b740-1164-45ee-8618-db68c6a2da99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04d4937-1de4-4cd3-b0fa-0bd1d52f63c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60adba8f-90ac-47c9-8d3f-d43706c48d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523c5b92-1493-4b42-ab71-81c28f1611c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26087c0e-ed3d-4fed-8ba0-1773532d1b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f66419-58c4-446d-b08d-9b63a184425f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86eadfaa-096b-4aa3-8022-9903bb215b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039706a2-7b6b-473b-af2e-d31ff90f1a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f33bd7-f375-4f69-8825-f3c900fb67f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef9d099-a56a-44c7-83b9-4cc04ca4fea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae11aebc-1d40-4776-9670-5e5d345959e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd646b7a-371c-4ac3-8211-59e431aa59cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff0fec8-0024-45ba-bd35-be7cc74ee7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2773c55-d7fc-4d30-bb9a-46f2e0b5033c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d066c055-6894-4981-b0c3-8f909bfda2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5834678-0519-4fdc-a6f4-618a21481711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10dfccfe-fcf8-425a-9b2b-a2f91d6ed47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61368bd4-5620-4477-a487-4683a863b8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f19f19-88c6-4ca2-83c5-63f2df1c536d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d984b4e-16c8-46f9-969c-09381b3e1383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d7e8f5-0e5c-4df1-bb15-0f739368f270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c93544-87d6-4925-9f7a-ac2550bae925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83595614-77a7-4646-bef4-56cd3af08d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6a52e7-0dc0-4ba0-950f-66fb7011c279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397d9e55-040a-4163-8dea-004df0970218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3e25bf-9b52-4668-8cd7-63a6f1308f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12caa140-76ef-4766-aed3-456ecd89840d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ffad8e-249f-440c-86f6-9744c5db7e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265a5602-8690-4253-b19e-c8f8243340e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f232fe0d-3564-4fd1-8881-da5b01b4a439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d8b70e-6c17-414a-9aa1-e05109cbe2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a44da57-8134-4faa-be49-c1f79e6890d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c2ac27-bce0-4c54-bdef-9199714d38b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604ffb4b-2e85-4435-910b-8d1874413973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc67316-5ddc-430e-9e7b-6b6c4dbd95ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deea11b9-cb40-492f-8b19-180fb5c97cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9626010-048c-4e74-aab9-2a52dde43f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ef555f-397d-4513-a365-433a50b727cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851a083b-8e81-424b-b816-355d2a326a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7a06b9-2c47-47ae-82a4-a7f385a6a44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f98cd0-a99a-49a3-be7a-7c11c71d37b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc19712-ebfc-420e-ba39-c36442eeb321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9239bd3-5797-427d-b4b4-0d43e5c9b68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d653ed64-f0dc-431c-b921-4402c35b316d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1c5b79-b120-4998-b524-5b46acf99bad", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2f7748-bfe0-4d17-9ed8-1e85d88b981c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d57f17e-1c90-4125-a0b6-b797e9368d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39579f46-de23-410b-9795-78a8b4585926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edef05e5-905b-4037-b7b4-736b682e301c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1e4a39-8cc4-441d-a657-ce10d5023d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08259148-15dd-469f-aa23-590f3da10b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d86d08-315c-4f98-ae04-c42cb892f825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d56d9ef-7992-4e1c-a909-8420d5fc70ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859fcb73-dba8-4cc0-8d89-9e3cb371093b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a71e04-8e93-44a1-a57e-dc4096ae11c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905cd4d2-2729-46ac-9184-2d79db9d9fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae17577-1381-4dfc-9303-516f66e92e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7cf80d8-b245-4c09-95d6-199c2920a617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8c503e-dd8a-4520-b071-edf9e1fe90f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c247f34-5783-47ee-9bad-363253566b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfac7895-12de-403a-996c-f55de25ec188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073dadaf-8842-4d8d-a7f9-7a8cdf559308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6cf794-9d31-4028-b3b0-a84b70cf9df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc663565-61f8-40cc-beb7-7f1709c50376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ad3296-d21b-42fa-ba78-900811061ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be88645f-bf65-4b55-b912-ba245dd7cbdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4e8b6a-a478-41f2-869a-2c1f1f05947c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae797ba-9446-44f8-b196-3dd973e6ff70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7eee86e-22b6-43ae-994f-470509970865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfcefa11-c854-4aa6-9113-20e4fe9484aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8250c368-5d78-439a-910d-18025f05e720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0765b803-32e1-4406-aa46-9517940af1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c1fd42-cabf-4320-97a1-70a2657d91ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36500042-bff8-41a7-bf0b-13dcd194b827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a399401-096f-4ca1-b9f1-f9a3e1c89682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e5b327-cef1-4fb7-935b-6f374cc9ab57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ea2953-fc5b-4cf9-9c66-87126f40ba6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af391333-1ba5-4293-8dbb-2010b844e6a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bef453-aab4-4879-9373-7f30d344ecf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cac336-e141-48a7-a636-8c81a74b95f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c4aea3-dd1f-437e-a15b-be3b95b226d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1fa640-8797-4e2e-9571-641016a4daa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657019bb-6f1e-45e7-8d45-7c07624d6073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e97144-f81e-48ea-955e-992d260c276d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19705ccd-c7d1-4c04-8b46-f8b19fc6d86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab871b0-9cf7-4810-90a4-8bcdb5705577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058c76ae-2a0e-43b5-a2e4-fbbe14a9ba67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5133c2f-47c8-4f18-838e-44527941334b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670c3d35-5fa8-48d3-87f0-b8f27a52fa1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3bd5a3-4a8a-41b0-96f1-2413cfb4bb32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912b37ec-4ce4-440b-8be5-73c2a2f4f890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b3567b-7615-403c-b578-b4c75282ca02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33842069-b80e-4be0-81c3-5268d56fdb80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38215100-9ec3-4ff5-9e06-d92755d42122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc288a38-b75a-443a-af89-86e38d361787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1979fb41-1136-4e35-aef6-b3afe9cfc38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61171d61-c52b-4f50-8016-d5959f9a7f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5886bb-4695-4472-9125-e4b415d1e5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fbfe62-adb1-46f4-a8f7-24ab48738b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e87945-2e8c-4f52-b3c3-7d0f4af18979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f043d8-4680-4f12-9919-7c04bd932b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7818e3c-d861-4639-af79-b0c237f2b542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbeb1130-3bd4-42df-b733-4e0339b52248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efa9a8e-ba0d-4f0c-9db0-dc575684cb92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf93357-9299-447a-9258-c29a5ef65400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc905939-84bc-437c-8cab-49e3ac12d604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198d5ac5-a8d7-4da8-b37f-31484f54b026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d55a6f-2c82-479e-88e4-588b41efa985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babfeb5b-0e89-447c-8cee-9b52112354ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7f1160-6066-483e-a58b-2a05b1b48fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e8ef03-ce90-4f8a-ab39-ab583e62b23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a0e3d4-6aa0-4667-b4de-569208839ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebabcbd-092b-43f4-87ef-63a0ab5edc2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b422d2d0-cb82-42b7-af5b-3139289788f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5ff320-ee43-4376-8b08-0f922d8877c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0a4794-fcb9-4bb9-add3-d232f562daba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f01a804-fabb-4388-bbf3-26b8a70e93b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.11.124.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201df878-32d5-4114-b3ea-347dec872e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720caf65-bfc3-4d67-8a10-0e2c7d410857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328f49be-693e-4fcb-bf13-734e7f87475c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d11bd3-d154-4390-8e07-bfa55361bd16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a915c896-dcb8-4187-a779-c8ea5a795b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befe0e6f-7cf3-41d6-927a-f0a7b87e2362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b41c9a-c45a-47a6-9310-05a9e92fcfa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00a70c6-bef6-4120-b87d-7f7df66fc782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e904a8b-092b-4aa7-840a-d2dd8f37a5cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e98507-0453-45a3-90f3-7ceb2d95dd5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0d5bdd-d857-482a-8201-2ce542c5f4e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526c7a54-9bc6-4f93-be90-d30b0e076d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c56b418-0b53-499d-9ae1-bd227f3d0951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a93c67-44d0-4e05-8f3f-fe8064befef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea245e8-a2a7-43fd-9366-d6c9b09f9167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd2969e3-3d43-4f57-888c-616f5c19e30c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbebec0-7314-4f42-9005-cb53a97dbadf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517ecf91-7e4d-40c5-86b6-944ea6f91934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b33086-b156-4cf9-96e9-dc8d33795f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc6e96c-3596-43c5-83eb-6dc561f0ab36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9a8ee1-435d-421a-8542-64e60f066a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1c3af6-7c98-4e79-9ce5-d76ce4675b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb65d9cb-498f-4b4e-b396-883efdb1518b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7dc4c37-be0f-4df3-b0c2-7772ae6196c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c4228a-a164-4413-a750-c2ee4ea443d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4c4b71-1bf2-43a9-abb9-0bfb2628dc80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d331a14-17be-417d-ab6c-2742c93d5e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee87cbf5-90b5-4533-8619-655dd8b5a501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daebe64d-25e4-47c6-b793-2c8bee7c6734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfff8070-f2a4-4d78-a3c5-c278f96c9711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbabe7d-31e9-4bba-b774-7ee76666e5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca26252c-22ae-415e-a1e6-96429a7795ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d974228f-5f15-41f0-93b0-50313aabb8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a330e6ca-57eb-4789-8697-a7020c8bdd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d30a3dd-1b43-48d2-ad4d-00d713c03b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b69162-029a-4c86-9baa-bbb9a812b82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33691a2-bbeb-4c80-bf9e-8d80152a0a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2bf024-bfbf-437c-993b-deb489fd0797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea9710c-6d2a-4c58-ac16-a6ff1ff2fa26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e719481e-d084-43d2-9196-f6f624fbfb65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035b7ed1-a993-4239-a726-4112502ae77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebff3bb2-759a-4c27-a727-1bf805c893fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a4e39c-d6ec-4047-b4c8-d80665df08e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfa9baa-a0ab-4b1a-ab6c-81d831460f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99abeb91-4cda-4f7d-a86e-f35c1a39b678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3907b7-63dd-4fc1-8ad4-b438661b6c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96458e73-28a3-451c-8213-dc09473b4fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50419b97-333d-4b20-ad87-00af90e46147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edacf8b9-9cb1-4cb8-a382-8f7c00e0581c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5a1f6c-6ade-48c0-9600-714faedd1d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4392ca9b-91be-443b-8d1c-649a7852dbd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245a6043-2310-43d4-835d-f314d356b54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0cb6c84-b0f6-4013-94d0-71bf715dd345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdd789d-9cf3-404a-9ea3-8dff80605e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a137be0f-8df6-4987-bf00-8510110cdd91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5dbf1a-cf03-4c81-b40a-42ad967eb1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae1a40e-55f0-40d0-af7e-7a1004278d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2add9301-2ab6-44cd-b6d9-22ab9a778b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0df660-c991-487d-956e-4f4400f31005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a005c5f5-78b6-4448-8b6d-725f0cfd0d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44decc8-a808-4e59-a088-c90672b62ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0f386f-5727-4add-b88f-182f31c0e397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631c98a7-c749-4d93-8b7a-eb229f5003bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85607c06-477e-4e97-b472-9b32bd1f4785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d84521-baf4-4a60-81e4-2461ad50267d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f25a258-c1ea-4fad-b61f-c6e1576ef6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc0e756-3f5f-4d3e-a9fe-bde50a920e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6bbd86-61d8-4c14-9774-a05ee8b9469e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ecf7b6-d190-4dfa-8451-0d74e09eb0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d73591-9108-4926-a715-46722525d64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9aefd10-e432-4eb2-915f-4d4d2e4f9bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbef9dc-0aaa-455b-9304-b75260bc1b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acca86f-37f8-45d0-a921-e07d03b77d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f548029a-42ba-4b00-a925-f306eecc6590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d611d9f8-d818-41b0-8dea-2a57ab739727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a3fadc-126e-4593-9e1b-dee0cb84d5a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07cf338c-e25b-4581-a111-e2659c36cac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7464df08-e21c-4dce-a6b3-bb2fe45b6309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2394b982-fb23-4130-804b-642fb3d35109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26078ff1-bb63-4a4c-b648-a7fcbc76d84f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62786ccf-a273-4a9f-ac87-699b572f49d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b2ce6c-5653-4c8b-b167-977da15b86af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d722f6f-f82b-48c7-8c94-2438dd640b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54dc4271-75a8-428c-994f-8463d2edcc51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365db47e-3fbe-414d-b881-08f3659cf85a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d46f025-2b74-457d-9c5f-d73a3e8d617d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55144f9-b778-45fc-8333-128701a156dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86a7a68-8259-46fa-8102-01a9392be620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee45cbe-faa4-4a67-b157-56e6bcfef98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e83afd8-8b3c-4281-86c5-2d58ed2d0d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a241fb-b57e-4f06-89a0-610066d41cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04c8cbf-62ea-4e58-9a1c-f0576e70624e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1c0ac7-6592-482e-b2fe-c92298bb1a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59152484-ce5d-4fe9-b64f-8d0e3384e7ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92cabe46-e6a8-431c-9703-deae49833484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bc843b-2b33-4240-b739-e05d6206bfe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f1af46-8e6e-4be0-ab4c-1a3662393b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe998354-a6c5-485a-a561-ea9528b8a765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e744555-0f69-4a18-a44e-837ccc9e3590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5902e2c-0269-4f5c-9a9b-5bfd29085b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a80bb5-468d-4f03-a93d-a96def9000fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7639fa5-b305-4f75-961f-4394d0b38382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e313d6b-4f58-4a4e-af4a-5628ec1698e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58be27ed-14bd-4e6a-963c-69ab88b00f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ecc0d6-2204-4b59-9bc9-03fab187dc04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fb253c-afd0-419c-90c5-c2b5cdd04e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2908cf57-fffe-4952-a9cc-d14003e5ca2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709dd53d-a825-461e-9ced-47f87d63b712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd73b46-03c0-4f55-9d18-adf635531f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342a57d3-b6fd-466e-8878-cd1c31349162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26074f7b-48fc-43de-bfd0-e22f6db10e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104a24b7-9c2b-4805-b7c4-04ae420587de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd41315-8914-4969-b353-8a2e54dffa8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7157c9-200c-489d-9622-887b485f9b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722b156f-dbd5-4661-94c6-9906181904e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f7a32c-1f3e-4def-8708-58ece88e6336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0a4c89-2dbb-4981-a545-bad7b02c242b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f356dd-6600-43ee-b824-6e4217a8da40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d54b16-09b2-4ce5-8b65-5318276b98df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b2805e-114c-4634-ba99-a22a0a2b9fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c6c160-5bfd-40c4-9778-a18d625b3459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df115206-f1de-4525-bb3b-e9f2562c9e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b27838-7338-481e-a21d-f2d6972b857a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46025911-c389-491a-8c57-61ddc74847cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b020b04-dcf1-41d9-9a67-4b9f570fffc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2af5bd1-c962-4f55-b535-43f38301a9c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6147a9b2-6e45-4065-8d05-fb42ec515326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9339aee9-a9ad-47d3-bb93-6cb2fe97d80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f0c49e-6631-454e-bc70-c3ff9f234435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bda5fa6-7dd4-4832-853d-bfae79ac2839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782ee98e-1b2f-4ffb-a6c5-66d848faf890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82f08bc-7e97-497c-a44f-024fe8b87a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c90170-dcd0-4d3e-b161-387087f0f078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a5c6b1-6c04-4a17-8de4-b1bea4897865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97f3208-f3d2-42e6-a1e9-1341a3ab40aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57e3802-51c5-4460-9e60-6afff9a3f93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abf98e9-d433-4af8-b8b9-ac79878d186c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2046cfd-fafb-441f-aae4-e9ed58d6f510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a7a103-a4e8-4f78-8f75-71b5c2b1a62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de6f3ec-d000-47a9-9196-b69f68f84bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968714fd-8d89-4b82-8e5e-0fe12ffb4e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79c32c0-26c2-4c39-b19d-b3ce43b2e852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44db7dd2-ea95-4331-aa43-d1847504ddae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d711199-62c6-42f9-a8e6-5df0cc685e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60176784-1968-4a6e-a1d7-8522c6d3927a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77c0d73-a1ef-4029-bf9b-3b151d680c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ad1076-dcfb-48a4-8dcd-eb537ba41f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa24bf8-0e86-4898-9af4-e72ebaaacb6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888624e4-3019-4b6f-a058-a72a9e9fb79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc21940e-ebb2-47e9-a69d-26cea368c267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b5715c-94e8-49e6-8b83-85dc8ec5e651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d97c29-e9eb-4d45-9d0b-ce4095720e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7da289-deda-4171-a0b0-bf3f152e9226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca230141-3280-4272-8f16-d23f121bc126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d5e9e9-c5a3-4a7c-b348-7af602262c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757c09f7-9fcd-4e91-a5bb-379e8163a274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee58de1-893a-4499-85f2-5c15a6837e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51531fdb-a806-4847-80a5-98b788c49b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83256467-6795-4c7a-88d4-8576ee9bd7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a7a656-bb76-48a1-9caa-1738734d7711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee42cdfb-388a-4797-b2d5-26cdb1a69265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75c33d7-ab68-40f0-9078-4ab47b214c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d495a93-a68b-42fd-afc8-b9b691881864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653f3145-2065-46d0-894c-aed4dd1c58e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7833e718-b81e-460b-9954-98bfa29dd499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed032b14-0b15-4b49-a755-bf6b59ef3ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c5a777-c3a4-4095-b500-42a1c713ef92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca028bc-e882-4050-849e-45c204cde5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e80d0d4-8d15-4993-bba3-25af4e801a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6814a84-7b8d-4d77-ba8b-e4bb315890cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b598094a-18de-4e88-88ae-b5c764b1c692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d910992-76cf-492a-be01-0b99028e0eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6701221-3484-4a4f-8f5d-9b690d0f95bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e24116d-0651-47be-bac0-60f69537216d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb21b193-b15b-4af6-8c8e-22118561141c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3a56a6-d682-4ba3-ae1c-0b59746be4c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7c2d2f-ac26-4924-a4fa-91102e2b64ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e451305-ba6d-4302-8a26-111e3b4d13aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5acff2-be0d-4c1e-8505-b0ad2b74187a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87dabd19-df6f-4805-8a97-a9573c38cdd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f2d1e9-7303-4079-9709-f75d65f79eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad535c63-d240-4fd8-8204-1f5af9bfda52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e97afd2-d4c9-4b06-8635-ac6d5f7b07c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460ebff5-1277-4549-8da4-aff7ac02f4d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54cc870-1209-48a1-b09c-b2abca296c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e48e75-e736-439e-a70b-6c2ed510680a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74cd323-8e98-4279-a46a-5f349ad678d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1539c537-a135-4058-a348-ed686289349f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2aa761-ddf1-47b7-bea2-bf16a20e7b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45964749-6acf-421a-8b56-a151c54dd48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d814469d-8447-41ff-9a14-280b267120c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af47a06-6aac-42ab-8016-5b4daae5bb95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f748f3b-8cfa-427f-b294-5b73dc601a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6241390b-ce6c-4267-b712-dfb67c7de388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b3d557-9b43-4d6a-81b2-ceab9a5d833e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25b77a5-f15c-44bd-a028-dd21811cfb1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2037f8af-4d02-4f02-bfab-a4c44f3ec582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93962aca-5362-4c38-957b-e4a22fdb18bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea102c4-f5ff-4d3f-99ca-35b49dd71491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96f517e-d887-4008-8fd2-85fa6b75bbf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d30c91-6a3b-4d91-8555-344a920802a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c58c48-a729-4585-a218-a0da17fe0b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d715f7f-f934-4621-9c05-3f35990dadd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a1d27a-d692-481f-bc29-1993d060f377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d137ac4a-ebf3-45ef-92ea-880b97dbc561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2154dfbb-5aa8-4537-8cc4-6c36cd2d4cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b22783e-375c-4ae5-b291-5ae60377df1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20115c71-a68a-4719-a0fa-7fd9142ef127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0583d557-4ab0-4307-aaeb-d933995d71e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032d1506-1c7d-4b5d-8e1d-ad298089742f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85450254-1946-413a-9d76-b11e8417a7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0717f1-0962-49ee-b0ba-c7be94655ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2a4030-0a76-4459-954d-05d038eaff55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ccf7d8-88bf-43d7-acc0-94929cf4084a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99694ab7-b7ed-41f5-9cf0-76a26a179db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1597e54f-f04e-409b-ab3e-93bf1d71f443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d82baf-cb50-422b-b14b-81273e391a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e80590-dc4e-4a50-9e71-2417a3860e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c8b66e-8587-46e9-bbc4-0f9ebdde8534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb8aab6-736f-44c9-a79b-7177126ed579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be340c8e-d6a3-4bd2-825e-c384d848dcfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513c1bdf-691b-4ea3-8f67-cf8e557d144d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3cad6f-88df-414b-af29-c04f3b206b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a55779-e86f-432f-994c-dac7681a3868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6509c2ce-3e1e-4df6-882f-253e0cbd21a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d164e5-7bd9-44ee-8f7f-79ab63e506c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83615040-d27f-4dff-8a9b-e6216dfae290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68408f2f-ab02-4e9a-a39a-59ae2a6ea3ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100752b2-590b-49c1-9a14-ebdfe39568d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c30947-65a8-4e48-9681-0d62490f3008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4a043e-f5ce-4d13-a851-15526ed1dc2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d209a4f-b03c-4d5f-a27c-16ad242b05b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca879f52-535b-4cfb-928b-cc7edc25e9b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ceff01-da58-413f-9e4b-728f6ba70abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f06874-961f-4c63-8a4a-93d12c24f766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38725a31-62a1-4000-94a5-df50c6e74a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320833a7-323b-4fb7-afc0-622527b53f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3811e5-7afd-4b14-8d7d-6b17ece91266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b25c37-abd7-4dda-ac83-ba05229ac722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f814308a-e5d9-43e7-a277-b6b5c39e792c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03a15ad-f832-49ec-80df-84236601d22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5572d7-bfd0-4faf-ba97-850ec955106c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01204026-e1d6-4ce6-ae38-b2b2937c3cda", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58250eba-00f3-4a58-b9ad-520a14b4a55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e581da65-be77-457e-91fa-c4146b22ea9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0f2aca-8cc8-4240-95dd-f801f50e6c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c0a494-322f-4889-a98d-f7fad2c01b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a34476-491a-45c5-85a0-47a311b55443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7ad4cd-dc86-42e7-9ba6-499ca5c3999f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a147df-7bb5-4535-9e35-cba4aca86f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9673386b-e0b9-4be5-8599-a16090e041a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291cc04d-076b-4e2e-8fb6-78a8b1688833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf9a3ea-9b54-43e6-a912-f8943e9ca4f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12ba2b0-2f61-4ab9-a52c-50e93e6e01b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4cd13be-b35e-4f39-8775-582859997228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11481df-3879-4abb-895d-869d66ae0ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9aa33d-996a-4f20-9af7-a94e19524bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4c5ca9-8d10-4760-afd0-d71cfbfae5fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdc3c17-5377-47e0-9c0c-cdd4c737f0ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0d7c7d-61e5-42df-8a2f-fd87382b2a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cd6c5d-9060-4a89-84c3-404164be5ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8bda88a-164d-4281-a030-767c6e2e23d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5679ce-6256-4e35-bcbe-d06501d4c8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa68d7a-c3e5-43bd-874f-ebad866052b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ce6298-5d3a-4386-b833-d9b56bc7d0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598a27f8-e2bf-4d05-b7ef-e70b8c99e5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9666c56-f80b-4b22-8052-7fbcedd8d7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae1bfad-591a-40ef-9a09-c43ea5009d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c72a48-87ac-48ac-816c-dd805c42b056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fe059f-beb8-4d57-b539-30c84ab00475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498f98a1-e46a-4a8b-9812-2636cb074b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91276539-7752-4c1b-b867-89399a76f56a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c511b7e4-e6f0-4f6b-a8d3-1202721a23e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884711dd-4e72-4d35-b1d5-cd88f856ff10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4352c014-dcd8-4e20-abc4-c9e63837a0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d6a65e-cac3-4ed9-ab3f-a984e5a04880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b647e5fd-e62c-4e2b-8aee-e181e5d1092c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9365a3af-07fa-4ad0-98e6-b45d79f6d51c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18086114-b169-4798-9233-dc329a63633f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9defec-2f1c-4531-af27-3d228a6b0352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c15a54-1f42-43dc-aa64-cc26910f2fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899d372e-88cf-4a4b-aed7-b65cf4deec18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b043fb1-0efb-43b5-9756-f8430a5dbcb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2178c07-85c7-4273-85bb-b3022ce240b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d517195-7ad1-40e1-99b9-d276ea57a30a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51eb6a74-2e38-4161-9e7d-2e9aab18b23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d106c6e-a276-4430-a8ce-ff197898b9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9bad804-3f4b-44bb-b495-e8ca8f6b8382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3058515-1238-4d91-806a-2d3706412ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85eb824-f711-4367-9286-8026d216fc9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ef5260-23f3-478f-a83b-3b67ec53709c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec94e2a5-6a4b-4e4e-9a55-7cdc1d0a8d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ddddc4-9450-4f7d-9b49-f895d04d48d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72796e89-bfa8-44cf-add7-9e6595515ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78db589f-e79e-487e-b7b2-3a528641be8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b11aed7-9820-4bb6-ab45-236bbbbe5697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d137a3-5990-4f66-8d1d-98ab3aad2bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fca31c8-e802-4963-a419-21b215510bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa0f12e-0ce3-49e3-93f9-0b45f42d5e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233f73f7-2823-4035-92af-beb081f9c058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10529f5c-c678-49f4-80df-402d23a5c43c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73dc0625-1816-4283-aeba-38728a586928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8504b1-f2af-4ab3-b1bb-46a2bf0fe9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f25c4e3-3252-4732-8520-952c6473b542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f7377e-dbe3-4465-9cf3-176a180efad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62605c8f-b88c-440c-94ad-defd0f4a9334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.210.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57519a6e-044d-4ef3-b15b-9b445b0f843d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.211.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48199cad-07f3-410e-b754-ba643c81e0c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.211.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5848d4cf-5dab-4fe6-9c1f-eddd61b93786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3764fcd1-0f1e-4323-b532-92024ec77d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af328c0-bcd5-4a06-ab69-08a19bdb177f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4cabf24-1c56-42e7-8642-4cba5a17d7d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d50fe71-6c9f-4c41-9eb0-8deb7d4dec8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2eb4937-bcc3-4bf6-8ef4-c1584837a748", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.181.36.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d697e52-1806-4a24-993f-d8d839045bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.212.186.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade72719-0d2d-49ea-9545-a4aec523b1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.32.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d2e52b-69b2-4900-b6df-d441c408630b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.34.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2e5368-ede3-41ae-b463-7b572902b80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298b0f1b-bc85-493b-8d3e-e2b05f05074b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53108a6-0c42-4f03-862f-3526eaee717e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2e49f5-d261-4d6a-ad95-2b2d06b7514d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.38.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454820fc-5980-4493-819a-28f6a7d8f7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.38.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8835d28c-ba9b-413c-a1c8-e050860a2ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.39.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ab84a6-624b-4938-af95-9866d1921db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32197a5-2d1e-471c-818a-20b93857e408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfbe1f4-2adf-4138-a287-5906ed7aa6f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4292cfc7-30d6-4530-afed-d317f569ab48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7903639-7888-434a-a7f6-cc7550d5b99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb893ec-5b03-413c-a869-bc3499bc4299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ff3fb5-28e8-4f36-8492-a3201b23d439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.45.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ac69d6-124d-4585-ae47-89191cf87e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.46.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f392a53-b6ef-4ab4-9f97-5c4ff69feed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfbcb3a-4251-4dae-ac46-8daf03ad4c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062cfaa3-644b-4323-84c5-e1fc114de69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9df9dd5-89e5-45dc-8ea5-8d8af23b9750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.50.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee7a9f6-f9e4-4837-aa11-e0814cfe0ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6a6a38-5e56-44b3-aa35-c6b03b799f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3f2d7e-b7fc-4034-addb-2dc233a772ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b3aca3-4f43-433e-bba9-393ec7d9846a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625761cf-4e83-4a14-ba04-5f2e84b6b8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7123ec-d66e-47a6-a03f-e8ff6d8b89d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17263a6-149c-477e-b7cf-77cd725dd758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.219.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d50bf9c-ee59-4c30-8ec0-e913033471a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9138c028-1aac-439f-98b1-4f3aad1452b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0354aca-15f4-4f46-a2d0-8c7d2fc4201e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e32454-d3da-4ec6-8d4e-55b86f9fb197", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.79.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebb6ec3-afdf-466b-92e9-9304069ec842", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.59.199.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3643516-3b3b-411b-a626-560f964c32a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.9.160.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9beb04b1-a99a-45b4-b011-7b8f3f522a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.90.98.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ba1142-5261-4887-971d-66be5cc54702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.92.198.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a732dfb9-d7b8-4ff4-b6cb-cf967948826e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.128.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed45e0e-d941-42ee-84fa-aec176c65654", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.154.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc49d56-e922-47f9-afb6-edf4028f946e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.95.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b2c3ac-e1ae-470e-b4e4-cc9ed174beb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.211.218.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736078e1-a751-49da-ae03-672c24ceb616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.230.181.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e81d1a3-d4ca-43db-85fb-ccd375102faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.168.31.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a717549-a6b8-46f3-b284-b7c411ca57dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.103.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb48ef40-0e49-4fe8-881a-0cf2e5c7a102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.11.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83abee1b-d004-4154-bcfa-0d4bc47fc155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.115.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7708700-39ac-442d-ad15-280ae8b72e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.130.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a85488-84d7-48be-bd14-f0bf433025b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.187.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2896f294-79bb-4db4-b1e4-9f09c77e6153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.194.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9963a9ea-b6d2-44ec-8fa6-c0adbca5b3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.195.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd03a87-451a-49d0-9510-5ae6b9c5b253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11988266-5b5f-445c-b572-c1266d41fd6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.23.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfab0b9e-5b17-4b92-a97f-a0feab42d2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.61.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b825f04d-e473-4231-8912-c313bd9826f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.73.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a706b1-c7b5-4311-96d6-eb7dde35b026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.75.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8867d0a5-e771-4b99-a273-b8bfce94d1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.80.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1f1826-cf91-4236-ab51-ba2f921f0d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.220.58.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b616ae5-f5b5-4282-9ae7-ac297aa11a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.233.100.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf678c9b-870e-4ee5-8d88-f1c3a616c900", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.233.116.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335db849-c15b-4fe7-9855-2cfa2a71996f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.46.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5193b9c4-17f7-4ee4-89d5-a5e85951345c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.61.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a04295-0562-45bc-b0bf-b867f88a26d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.62.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824aea95-5d54-45ea-97ca-0ae75fd9cb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.62.27.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ea7909-03db-4053-8fec-380ce7799782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.69.177.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f801a4e-a6a4-40a7-8d88-5eb14c9a9a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.10.63.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df47a80-376c-4e68-8606-4631cdf7f49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.210.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f611db9-92b8-44b3-bd6a-75de44f8dffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.212.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11483ea1-4e80-4457-b6ad-e0b0a6daf35d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.212.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793c8d5c-6113-4cb1-b2c6-314b2fb19be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e70ed1c-6794-4f3c-9a91-894b93962298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813a2cf5-55c5-4497-aea1-ae85b8c51f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bab8f8c-cf76-4281-8e99-a86c99fe5ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.216.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee844ae-f396-492f-82b8-44e397bf375d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0a691b-8404-420f-be51-4b29fed3b784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bdfb7c-330c-448c-8ed5-779fddf8fa46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07ce4da-55ac-4073-9010-421161a4bb89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.219.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb97bc5-b164-45c6-813b-81030e93b236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.221.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f1245a-3408-416f-868f-3a3f3a257431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.221.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ff331b-8157-450c-ba3e-eaff0ddd8fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3bbbab-9aea-42bd-85e8-6e8eb8124f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd4fa74-69a7-4b76-ab2f-4d3dba1284a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6ce57c-265c-4b1d-8d04-fc5fadf97fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed83b4ff-3153-4b33-b817-40f21bcb746b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e18e12-cab5-4a2b-8176-5e2419a0260a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d865968-2f25-4b13-97e8-9ab112eeaae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45afd6b3-e975-45f3-9148-ab4de9126e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c933e7b9-ba56-4938-95ba-8e72989dc4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42541097-5c14-4ab6-aea1-50c0099632ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcb9460-b8c0-40b0-a3ee-24cfef66a470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e92df5-2dd1-49a0-83f3-65d5342a77b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1f0d59-d9f3-461e-8b3d-b0d7bb1b75b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25db1c01-14c0-4ffb-b47d-bb4f618773ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e91eb90-0cd5-436e-8d05-6777d0b79aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623faa45-3c95-4135-b415-4206ca7bb29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b46d407-bbba-4626-a6cf-07d7cec55c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e15720-e0a9-48bd-ba44-09263c198a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f94dee-64e3-40fc-b8f1-56d3e1886a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda08397-3ece-4d96-87ee-5c2714b8c8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ac3f84-0cf2-4e78-aa65-06b306fd48a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3cfe23-a95e-49a9-8f1f-3db54ac36d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ee0018-b092-4a19-b6a1-4ef2fcca8d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855b3621-c656-42ae-82f5-7310ce021e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9765098-4523-4260-bd18-d472fac2b624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb89af85-4269-40be-b7e5-d6c86125d59d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d8e300-5dea-4b13-8a2c-4f1bc5a4e505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbf8552-31f1-44c6-bb91-2b2249a8f75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04c1c30-0230-4cfd-a74e-a87f73e42b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c878a10-3ed3-45e4-8ceb-8e3eeeb198ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83d76b8-89f1-4d62-b15b-4046ef2a94fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6181c4f6-2166-4777-9a9d-e120509f8d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5db36b0-513e-464c-96af-30d858925519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813650f2-14c3-46f5-9422-c188f4c6afcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5de02bb-868d-40b3-b712-59fd89572f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347f58f6-1cca-4622-93c4-4479b9a7be40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b93e812-9b49-48bd-b32b-c859a30a6805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62815eb1-b9f8-4318-97fd-33da77c76d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a80d27-3b9b-4fa6-a30d-a83d05ee8b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e53547-276d-4da8-b37d-fc571160e87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602cfe4b-ca98-477f-85bd-c3f68f1af710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7892fc5-a03a-48cb-8bc1-f9cf0b5620d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53cb2a7-0ce1-4f2d-933e-9be1d4dc9b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094a1aed-8492-4f39-9dd5-bdc279217385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72a5180-2e9f-4dee-a904-20fd661aea8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da79b3b-d36e-4438-a439-8b7487ab8bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7012ecda-d843-4ed9-9135-ab03c3aaa9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a733efcd-791e-49ce-9e70-d9d497d34ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4322f1-b611-46a3-9b5a-4a337261b8b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0136a5-9c26-4914-8744-7837834822dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae55c72-5f2c-485d-ad32-292c96b0dd36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3e96d3-b56f-4edf-8812-c51251d3a4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048875c2-e02c-4821-af7c-3443b6cb550e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b742a7-92e9-40bd-9ed7-6bc80ba33364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c141dd-87ce-40c8-9798-9f7ce18574f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ccfdc71-ea9a-4229-a271-3e91f58b8995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a096e8d-6817-4465-83c8-0bf71a31ac8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b38c68-7306-4f6d-9088-48dcbbd3107a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9981eb1c-8950-4c22-8150-1673b67121bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b78bd89-369b-4bce-b420-e155e96d9d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd5b873-21c8-4477-b332-17637bd95043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61621ec-f998-4ac8-975b-4c5c8a9c1505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ee996a-a200-4185-bc7f-10b5cb9ef182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe377d8-e0b7-48cc-93b9-425634b0320e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cbbf2c-64b4-4924-89f0-23ae52b4f0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cdc895c-af5b-42f8-b6cc-effb67f1a364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5072f2-3438-4443-b699-ea6aa8d96792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c40288-634f-455f-bcbd-591e2027207f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba3f532-7e68-46c2-9697-eac76e0db6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ed17b7-ec68-42fb-b30d-02bded0bea76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8261ebf3-65bf-4d36-8d01-db54a8d3c6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807ae1bd-0244-4a42-8ea5-dba67cc87c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03254029-b75e-4558-b410-17ba8edf768b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4034cc-280a-41d9-a368-7c16bcaf1edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676287cd-6f05-4aac-af4b-974184993b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05292016-428d-4a39-9d55-9410d043aa1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e46ce5-bbf1-477e-8c73-85e4ba3df4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097e851e-bd8c-4b0e-a670-7885782acfee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6216d40a-9cd1-43b4-bc3c-c6510d186d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b934a41-b9b3-485a-b8f4-e17200861bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f367ed7-18da-41d9-9be4-39e2d0a11d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c17ea6-60d0-4200-92bb-3400d5586629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ead052-4027-4540-a542-4b367b2e76a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d039e1c2-e686-4120-8b2d-95f38fb9f016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51abcccf-8e2a-40e4-846c-353884f5494e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb037dd-1500-4e58-80b7-a3cc752e64ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bb3c5f-b672-4a20-b6c5-9bf1af48788b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba5ffd4-5ab5-4f9a-8acc-c4d7036030ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8404ba4a-deba-41f3-bd5f-e26d0363d3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61853932-d3ba-401a-bfec-924e1b0b8be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874b4e8e-f331-4b96-9052-5a8cf745ae30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3da073-e80a-4af9-b8b4-71fbbde6efec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2266e27-c972-4328-9a41-718a05e5dce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1aa20ba-2a90-4c40-b60e-4a142128c437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1598112-69c6-489f-91d9-d7ea0c8c28f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dba57b6-cb81-4f37-a8c1-5dca1ad5029d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87de1f75-e477-4fdb-b5b9-dae133ed6d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ff5e96-d2ea-43b8-b98d-82263c1d105c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8b1b8f-6d31-4554-aac7-6bc8244476f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c93029-245f-4636-a1d0-b581b07e61df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36494962-4d9e-4587-9ee0-39519671adfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e688c1e7-768e-4e8d-a1ef-f01247a9bc19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b0cd9f-643c-4654-aef9-4979fa3b97f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc653504-583b-43ea-ada1-c31a5886be93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98978337-6c4a-4677-badf-2f435ee0459b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba75fb2-cf77-45d2-942b-0554b7b9359e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8a8494-deed-4a7e-adb3-08eab858313f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83e7568-824a-4d80-ae00-85ecb23c2103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76a52e7-5746-4084-bf56-a7d7aec55f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7cc9d5-b0fc-4234-a774-4691c6fe92ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa138cbf-4f2d-467f-813b-594d4775ce04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3a7216-e2e7-41fb-a321-ae27893c7bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fcb54b-26e9-49c6-88b3-4a9b799373f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33c41d1-4269-4351-8e93-60d8f5dc1041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c259d6fa-abb7-421e-a80e-d7b505b0c177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aceba1c5-2859-481a-b878-d4fcc216ed12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.240']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d1f67d-e9ef-49d9-83b3-7a62bdef07f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3150e6-0857-4181-8832-c198d08002d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a594ac-3c49-4ace-a168-d4183033da26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0f2965-3de6-478f-81f3-a4bf5a5edf31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62ca6e3-88a5-43c2-903a-2781ab03685d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2f0fad-8598-4ee9-835f-3963b2c6477a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd3405f-c8f0-4e08-a76e-81a5db09cfc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd5ccbc-be00-4134-995f-821c7529179d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cd4be4-fb10-48fd-a514-4c38395f4111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ad8e95-baf9-4195-9998-446183cedb85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f219c4-b0d5-4da4-8971-91f2aec7eef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfae05d7-6cfc-45e9-95ac-46a394c95c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b26b856-4187-48ca-9c1d-5460fc4c6601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bb9f58-b4dc-4224-9475-8bcad9617a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7caac8-13a7-490e-b8f4-2ad2e809f5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0c0d73-5965-4741-9199-88a9bb7ae9cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206b5d75-3e24-4965-b470-3b809a984792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b60aa0-03cd-4768-9a0f-80acf749b52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6660fc6f-d65d-412b-88f0-42f1fcbb08da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747c144e-f279-477f-b1cf-880fd6e05a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31cd00be-7802-403c-9496-0a02efeaffe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42206c7a-307c-486e-9acd-35bba0981655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2a851a-23a8-4bf2-88ba-0c04eed56877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df396cb-dc55-48eb-8695-713f4606f1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15697771-e09b-44c4-89b2-f14fadc81928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82d1aa6-834a-4c53-851b-11f8fc762384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa31e5d-a416-451b-b8a8-f47d407d6a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b28db55-f9b8-410c-8a15-0026c105e9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2a320a-779c-402b-a490-9976e73853c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbe8508-eacb-47ae-bdae-ca4e435ce4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc31dda5-a1e1-4f6b-8379-566185f40004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bef595-f369-4489-9823-2dcfb0e0e566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683f3b08-9d4c-455b-9b74-d5fb49532253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2efde0a-12b8-4b88-b5ca-1b5c04d5b92c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91dd2de0-0b72-42a5-bdfa-1c49fb59eb17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112a7c56-f7c6-49af-ae92-41ffd1a9d096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3116a9ec-cda3-4227-b766-58000aab05fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617ae18c-b552-4238-ad42-4787bd130fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59fbf175-e20a-4bbc-a0eb-fd6d6de37700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6351205d-a39c-4f26-ba28-2ada020ef6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f12a94f-11a5-4c21-a032-f942b71bde65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40aa72b-b6fd-40da-a48b-3c9f96c220bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311fb938-8413-485a-a996-65bb8f75d66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83f90d6-4884-4bca-9630-ae1de3483a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc92aad-22c3-43e7-a8da-957933c76f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10960464-9608-42b1-9a49-06e8915ae55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87b2da8-c802-4e7d-a887-389f589c190d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dfa2648-1f98-4224-acbf-c653c01491ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8186ec00-6b23-4855-9200-ba541867a054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec7b93c-8c4f-4e25-90b9-89a58da951e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e17226b-02eb-40de-a693-1eb848414c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d612b94c-9b34-4d68-b06d-9d850eb0cb63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1061228a-44d3-4bd1-b68a-fa7a92f92fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df9fb00-1e60-4215-ba93-8c48588587e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9554e80-3f21-4763-a875-2e2341d7e6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7676993c-32fd-4a12-8f63-53015d60a730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b239bd-ba4a-40e8-a1e5-954af9e30d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf974f64-59d4-4e6f-98c2-e64e3aed54c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807d4c1a-206b-498d-8315-ffc3e2e198ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb3ad1d-799a-4aea-af1b-10587ad1ffe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48dacb16-96c3-4e0a-974f-3e142f65f2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e05c47-f0f9-482c-8aeb-01569f143584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6214abe6-50da-44e0-bb73-0c39241b9ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3111f093-f575-493a-b4f4-75935e13a8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859e163a-660c-48a3-970c-79d37782bddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8f996f-d70a-4407-91c0-2fd42770afa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76e842f-950c-44b5-b57c-6d78250ad180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d781e1-132f-4b0e-b9f5-66571821364c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80131e32-a1e9-4fce-a572-836e4b2ae8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fa6147-302a-435d-a214-83ca6c5c9022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba7a2fe-0808-4cae-acd9-3a91bfdd6929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b57d709-5343-44b8-8380-c61a90404adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273f0fbc-7501-4e2c-b1dd-77e3f0bbeab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb72957-9ccb-479e-9350-88f106f8af84", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.21.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2faf753-45b4-4bf7-9ff1-359ce4718794", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.6.234.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20df63c-0d08-4e45-9458-6c8ac22d706f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.63.199.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccb9f94-3cc3-4ca4-8334-9082280f39b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.63.202.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd1a4fe-5da7-49fd-8f9d-a86f6a9809c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.63.218.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e212173-5eb9-4959-b805-b3f3af32b225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.63.64.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b8998a-8b70-4ec5-a2c2-89e50312dd68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.87.221.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23151f67-3d6c-4d9f-ac0b-2a9ceb9cdf79", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '6px;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d990bec4-dd3e-4f25-8a87-b54061aa54fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.153.144.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93524934-0b1f-452e-be17-3252bf81f739", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.153.145.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91659595-1937-4a93-800e-ce8e8c66d38a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.153.81.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5a0467-a501-419a-bfcf-b745960bac3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.34.253.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409fc7ac-9e70-46c2-9c07-3e0af3303cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.36.96.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1150eb-1414-4d21-ac86-a2f11ed5d849", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '700;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f69e22-b3c4-4c8a-84b0-252067de06ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.19.150.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c01fa8-eda4-4667-8444-496498312297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ba6093-53ef-460e-9695-14fec0bf8283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6b34f9-2047-4661-9b24-175c4b4e6f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a86705-3205-475a-8539-0b4da768b223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cb7e01-b077-4814-9711-0ba37f2ae809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56c8144-0e1d-419d-826b-ed84f6f3b46c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c22103-c9e7-41c8-b50e-6682db520211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439db0b5-63ec-4382-99da-e726f2a5f085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.236']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00aff5e8-3f09-4581-b41c-bc69f5609abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2bdd4c-d6e0-4cec-8c7e-085cff0bf162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31f051f-97a7-476e-838b-9821999f2d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbf1f36-822b-4429-ac34-682c1182f31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3939dce0-7bcd-48c5-b1e9-67a452c2d288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73510a9-ca41-400d-be69-44f03c9b92ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7503f4d-40f7-4b8b-a2a4-675a2110a4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30eec24b-ced8-4023-b373-e30423a0abf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1bc2489-7df4-46f3-aa32-d7186bc17bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4675927c-999b-41ec-9a9c-6a40acb768a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b994d62d-3c7f-4a4d-94c7-3f2fed4cf03f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df99afed-922a-454c-b34c-c0e3ee61988a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e1119f-0cc7-47bf-bac2-8f1d9a73a793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0428f70-c205-4e8f-8bac-a666057563cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a015bbc4-ee72-435c-a39b-00ff18ae1b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2095a23f-e70d-4f22-9b83-9b8de35f8386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6b75bf-1396-4c75-af28-0d2be0120bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db44693d-1320-4f48-93c7-06fb2c1f960f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60c2d03-8da9-4552-b1e4-d5aafd4b824f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54af4ac8-5275-448b-b6fb-ae6bdd09a4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f21eafd-0e7d-4566-a4ea-fcbcdd90b6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f862cb64-8a6c-4507-8dae-4e051dfc9113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4640e5e6-9d2a-4c58-b343-651e87d296e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33f0034-e746-4e19-b451-014e793feb87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ed6542-af8a-48f7-8c69-72ad18cbe5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c85a0c0-b876-4cf8-abde-2de71db2f6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ade97b-cac4-4cf8-9365-884dfef9e3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a636055-a811-41a7-aaa8-458d100cb1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb942ec7-03cf-4f99-8b17-8f4f5da581fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.134.0.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9213a104-9ede-4717-9be8-3cf6fd1b1870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.178.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67e2808-2f29-4578-a6f7-e29043404c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.186.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005b8a54-1d41-4bda-b628-eee40d830024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.54.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb895dd-0be1-4e9f-affb-6813a2af5ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.18.80.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c47431-3467-4b4c-9a25-11ca5baf9d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.18.82.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae0ff0a-e741-499c-b96e-e5979a75fc19", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.19.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e34d7ed-405f-4ad4-aa1a-4ffa4159d51a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.32.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ba2396-6c4c-414c-99da-ecf3ba73e3e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.33.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb87867-347b-43a5-b7a8-c8738c479ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.33.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef74668-5fd0-4dad-a03e-05961500b5da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.33.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea84b80b-050d-4f9e-9f15-08c0ad5a3a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.59.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c9dd77-a6a6-4c9a-8648-1729b38575ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.204.137.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a52d0e-b8f7-4001-a7f8-bf34ba44cbce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f8358b-376b-45dc-a519-13479de80f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.208.181.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806f7efb-0584-4c14-82a4-9eb115748f32", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.224.102.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67696e98-f434-4806-bed7-336c2939c07b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.137.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd1ee31-1e2a-47e2-a05f-ec306cb61ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.154.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4fb7fc-5174-4b9c-bbf3-e307835b0edd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.177.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f358526-3416-4370-ab2a-b66ba7842df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.21.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5d8b48-2384-4b3f-acd1-c7fc6419807c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.221.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f97afce-76ab-473b-9f88-48e6e8cc636c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.28.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9adf29ab-0fb1-42ef-8fd8-2d0a411c87db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521756ce-c6a3-4990-98e1-1d02b31198e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.104.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6326e1-f1c6-4a96-8524-d137cfd3f77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.117.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad2761e-6d5a-4dbc-9b57-34932d2b9069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.139.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d442053-e268-488f-8c6a-3277d1b71a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.151.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a425105-448d-4e90-aece-682126686478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.185.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfeb977-eb64-4569-a482-a2ee6d03e79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.188.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0039cc53-4b51-4ede-8b10-f8b85b594f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.203.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efe8734-b930-4f67-9ee1-79b1dd832beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.154']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4345451-d97e-4378-abe9-b602174d6c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f774574-c51d-412d-9c22-74d1d3b55cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c54d06-6472-4b7f-b5ec-7f2f80a2b5de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.177.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270937df-e35c-4929-b78d-959058797d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf4d354-5f63-45da-bcc0-ccbd0ee528ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d60b95b-4679-4dc5-980c-545d312ceff3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.27.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080d9c6a-4512-461d-91a4-d480d5850180", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.227.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e2e9fe-6961-4bcb-861c-a9861571ea88", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.244.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd285ba7-7645-4192-9010-bda9310b3801", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.244.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3cea5e-8d6e-4457-8e9f-b823ee819ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027ce95b-5cf7-4f39-a89f-329cd9507ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347006ae-a494-4c86-ad91-6f64321b83f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbfa266-7f1f-43fa-a3ba-31a275500ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851cebe9-b896-434d-a454-d46c70730d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0797f55-8ec9-46c5-a676-b3dbdf1c9a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca235b0-4519-432b-89f5-728d533dcfd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7237c457-80a7-48b8-b4bb-7c3119913cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42623d34-78eb-403b-b801-bc8c59ac2563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f103e2c1-6517-4450-94cc-0a3498650eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18773e29-d378-4003-b5e0-11c812e2788b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4d1f86-342c-423b-bba1-74789dad8af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0480e5a-be4a-45ed-941a-ce7432c3e86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c6503b-b986-4df5-a2e7-bec4338f7fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043c3582-cb41-49ee-a278-e5a57203fa81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a74b24-dd3d-4a21-bef5-8edc1b4e33ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6f9614-1ace-4192-9555-db17378a58dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26cd5cdb-9ccc-46d0-bd4e-b9e3a2b2dd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4148638-efb2-4d3f-9631-1e5abbfff65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c967b2-219c-4624-bccb-6288f6786896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a391ad38-f218-4c9f-be87-bc75cb0a212f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fcd54d6-99b7-4fc7-96a0-881b441648a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49f0e56-df34-4125-8e94-ff6ea5d2edee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c333c27-38ae-435f-9a8b-881c4febe175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bb3fa4-992c-4e95-93c8-4144463c578e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ff2e06-0024-4f12-91f0-47cc669e80fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5bd015-d82c-4eb4-a79c-a4356ea565bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f2e1e9-01c8-4d54-817f-95f145962c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c45998e-a908-49c9-b20a-5633274cfa12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5adbf2-22d8-4afe-a484-f7249951ba1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa38c214-9c40-464a-a369-1eb7efedd537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7067f8-2193-4c63-962f-25b9b954c66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95788535-8391-42d4-a450-539acb321634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f525fc-dce2-45ec-8d65-f03541679e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727506f6-203f-4615-9422-4b342ab8414a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe09f48a-4f22-4616-b698-56308a0a242e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2c8cbe-d9b7-426d-9152-3975c96c5a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da26bce3-2566-4aa5-85ba-98a48a245a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.91.127.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24746ee0-c917-4351-b257-d38d1e76fecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.119.136.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce26baf-d595-4aa7-b7e0-cb205287724d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.177.39.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6ae2c2-83b1-4712-8fe8-df25ca9075f0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.102.126.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df88f5e-a97e-42bd-b367-5977508f3b46", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.183.36.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f1dc35-05fc-41ed-93d8-b88d3cb43d38", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.105.161.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148c02a9-d196-406c-87b2-0f3cf95e56fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.110.107.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbed6439-fb56-4fa1-9363-c8e0881c62e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.111.110.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ef75fa-a5e3-4e40-aaa1-5c4500c4fcae", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.111.110.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4007a268-c11f-4747-885f-cb99cffeede4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.123.141.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc79969e-26ee-4163-9f8a-d34434c65b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.124.35.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bba87cc-38a6-4de3-8e3d-c0c03e693996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.31.90.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddaae9a6-467e-472a-9170-eb3f50f6e746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.74.204.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03b63a9-f024-4c24-a3b8-452c316daf7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.36.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3710855-1cd7-4e4d-884a-b0e372fd7d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fff97f1-0ac0-4a30-b067-a0305cfa1b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0e7fbf-e834-4ddf-bcf3-63574e8e36d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f97b029-d0b2-4699-9054-16930c2bb602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e9ddec-eb62-4fc8-8f70-b6f52c632486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3d105d-829e-493d-b72b-c7112185f519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd24e981-33a9-4da8-9f75-a6cd0547245c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41e8050-f076-41e0-9129-f644c1904c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd878a5-3573-4dfe-980c-19c4d895f599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779c2cc8-5916-4de6-9044-65fc67c5ac99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bac7e08-2d36-4119-993b-8152eb954b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.97']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768dbfe0-9aa1-45b1-b95c-d80c9075bb62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.51.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0e2914-e399-4930-b82b-5f85da6a8abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.66.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf13d68-953e-4af7-8c41-f9c0587aed81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0e40b6-00cd-416e-aa6f-c8ec948ef060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b910dc3d-1182-4373-b606-fff4d15378b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec0f8e0-caa2-4424-80ce-94f51b3ae39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.95.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480ff1b8-3926-4a48-a8a7-74931e6ebf8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.94.47.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211ce29c-aa58-4540-83d3-45252b438e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.95.203.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f7dba7-21b0-4f24-b852-8c65a1c2d7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.108.218.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27c0022-1541-4225-9e80-6e4b11b88605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7bdb97c-a29a-4c3c-9235-2b21c4ca2004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcabec61-f698-4624-a908-5d6ad34895eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8adc1f85-f5d7-4e18-8409-01f04bff8608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a26e724-db33-4c55-ba9f-da095d824192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b28355-765e-4d03-8411-f4e03ee27e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef8084e-fcef-44ac-8ed8-dcd2240376f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e5e094-0845-4f4b-bcbf-a586d0b6b91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995281de-1c09-4fe1-baea-87aaa1841a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07c0e1a-29b1-4d8f-8f01-3660645609c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430e5bd1-eb2f-4296-bca7-375ef3900a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc121f96-9f1c-4959-ae87-2556d482b33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc7e49f-ae11-4182-841d-d117307c6269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6541191f-92c7-47db-95d1-60e65887746d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59e7b64-7e10-411b-b300-d6f81f0ed2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6768333d-aa0b-4179-b72a-a852d5b380dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e75167e-1c2b-4a7c-90fc-af39716e45a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af010f8-7244-497f-89fa-26e9d84375b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.148.66.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7da2fa-3b1d-4abd-9bdf-29b93de47667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71bb8767-9b85-4a84-8894-9aaf506a9723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6311e3-462e-490f-9f90-865f59e29198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c401c94-aa10-45f1-aa2e-40510ca2b1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f415fdd3-72b9-451d-8062-033240873a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.252']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58267822-1563-453b-9e2e-b755016a3dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f0af0c-e6b4-463f-bb2a-2ddeabe390a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8ae8e9-9249-48c3-895a-0e181e074a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.186.116.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a95439-7764-4e9a-8b73-0f722223c22a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.80.34.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de85f3c3-109b-4de2-89c7-88f1f3aa4d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.83.249.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e126abb-c540-4974-a37d-77eb36922952", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.116.83.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15847283-0e24-47fa-a6ef-224211d0e110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b1230a-ac62-4b06-b868-f000fbe34124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11931fad-fdb1-4d44-95f9-1222880ab513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aacc7f0-65f1-4b9b-8d3e-95823a04859f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf5bd46-72a7-4cbd-a016-61fdd2c955bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee58654d-61c4-495d-9bb5-4d7bbfa91bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf85e030-c2d8-4357-b9ec-96d75492c111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0cd24e2-882d-43cd-9628-615e2aacb19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cd2f02-ced4-400a-9720-4bfac32b4749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed449133-3406-448c-8329-f69f87c2cbe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8f22e7-9601-412d-b100-aaf14cc64cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41dd076-dc57-4c8e-bf49-bf69ad983f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7230fdf8-8e63-465e-bac8-0e75598a1863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847342a8-5e2d-4fb6-b8ef-5a93cbdb8aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624d7308-a3cc-467b-8947-6c4767af1edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a797eaaa-ff02-4399-85e5-ba3178577f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20125ccd-457d-41c5-abee-0e8dc0cae80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a70520-92d5-4c60-b0d5-104f15b2bebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f66791-cafe-4d44-95f3-578bb244cfd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79df7ea-04c5-42f0-9d02-f60d87098cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819838cb-e9c6-43c9-b4e5-22ee529f6dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.127.182.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--174f81b9-5af9-49d4-b808-307873560f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.72.3.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6020109f-24b2-4a4c-ab4d-ddb0f16a0408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.76.38.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2179286a-bd34-4dcb-8a61-9fb0e90f11e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.98.27.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d77dc7-75c3-4111-917b-725d27ab1f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.130.150.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb6fcfa-8a45-4c67-abc0-94b474504ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.130.67.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ed5bbe-00ee-450d-add9-7cdaec37d5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.133.185.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ea81a3-1ce3-47d0-922d-7ef2effccbcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.111.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31253dfb-1a6a-4fa2-999d-365633646c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.157.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28015a19-594b-4bce-8c4e-1798a0a2b0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.136.149.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c70321d-b0c2-447a-b32c-9a90c948a6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.136.56.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efb101b-93d7-4104-80f5-c1597c95dbde", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.148.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83882471-73e5-4df6-a9f9-245f69277f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.219.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5732bb-1bc3-495e-991c-dccf7cbce03f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.140.225.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5454a5cb-03e5-4c79-a5af-6c808f01a81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.140.27.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5a0ec0-647e-4466-826e-0a63db97449c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.147.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51cf2b13-b701-4590-a918-a1fe7cdb6076", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.180.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210def63-502d-4cf9-be08-ad62f396355c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.196.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0600ea32-a25c-46ea-b5b7-7074990fd437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.152.103.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7b2b18-7594-4d6b-a3d3-d772e223d7f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.160.182.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1c6956-1a99-4976-9baa-c758ab50801c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.208.16.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ff6707-37b6-4f4d-a78c-d4af36cae473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.109.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f44b8ff-9726-4866-b451-35afc4352d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.113.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b03b05-9025-4015-b7db-b0d4c851e54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.115.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd22b0b-bbda-47b9-bc8f-806b31833b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.126.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed99172a-2363-4623-85f5-b2363287da60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.126.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f21f57-1221-406e-9eae-6b871e98a84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.209.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2fd0833-607b-4dca-b2b3-eba500ea534f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.215.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbc4422-890a-4384-aab6-1a852a6ce006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.229.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcedcca6-4ade-4bed-bfb5-bd4cf74198f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.231.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae2dcf1-ed13-4430-aef7-36f0d93b80cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc68b01-e289-4e24-ad78-558b0e777aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.64.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb038a0-2d8c-4035-a238-5005e635b2b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.68.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27ea5de-60ac-4398-a8a2-524b9b397fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.75.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421e10ac-0f80-4ace-82e6-c2d816af9dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.77.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d5bf1b8-f151-46d2-9ca2-766ef4cfd007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.78.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154178ee-e877-4b7d-86d6-cd3083f03c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.85.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bcdb80-6052-49a0-bda2-a442eab3bc63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.90.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38cd4519-f8c4-48aa-97a0-f45c9eb27c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.123.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddfd376-8f21-4a16-b7e1-704ae9de5281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.168.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16e4e30-bb0a-4195-b63f-28cae521170a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8a8c52-ecdd-4c3a-9252-ce6ae9134232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7416d7-826b-420e-b503-cf7e5b98a267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba7dc45-3298-4178-9542-a46be6f3ab6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7fba97b-a5a5-4451-b3a3-bf92590599b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.142.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2762691-9174-4822-95cb-b105d3542562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.148.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54faa44-b120-4599-9f9a-ae1e9a1f9281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.149.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e031002-1971-4347-87f8-e22f5b779bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.15.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ef9688-38ad-4581-b93c-8385118daed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.153.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55fe9db-80ac-44d5-8b4c-8a96f669b505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.153.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccfa03cc-f89e-45e3-af53-1267ec250a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.173.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58cbc39c-bf85-4e01-a2e9-00559fea3151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.173.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61244e9-72a1-41bf-891c-8ba8f70bbd02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.20.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b82f13-6e2c-44a3-a0ef-7a820cfdf2c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.21.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c9eefb-271f-4f69-8c01-535377cabf21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.24.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a967498-8a41-49e8-b4cf-1162ecbf9c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.25.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c7adf4-0483-4d61-a437-c6f3bc31c323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.3.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b25156f-10a3-4107-b1f4-8c4947182e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.30.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac2f4a9-601a-4eda-8ab4-873ccb242599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.32.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3424c0b-739a-413f-8778-3c883a3344ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcbdd551-2369-4e19-aae9-5eca5a317891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65c3c46-3af0-461e-aafc-3f494d154bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.41.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d9c2da-d789-46fa-968b-34c4b5122bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d31889-69d3-4a10-94ed-f5f286855e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d6cbf2-63c4-43b3-af83-93234bda6105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c939aa-fefc-4121-9856-4daefedaeea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3153988-0fa1-4a57-8a44-cf97f4884273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db95e7a0-f860-4709-a384-d624f7c37cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c856e3f8-032c-4c8f-bb40-1eab07a6b0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f330ddfa-f550-4eaa-849c-7d450d0c9974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.7.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a12c1e-1990-4474-8d12-075509d98712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4a5552-572b-491e-9171-f2631bbc5353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.1.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ae6252-1933-4e10-95eb-5372ca86e96f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.1.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c733048-3902-4fcd-8e8e-dcf8665bb248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f8e377-e0ec-4988-bf91-9f86fa7e8b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b269a296-a20d-4671-9807-29847c16e574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d29e886-cd77-45a1-8027-8a1352eedcba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1796532d-5723-436c-bd6b-0a3a2ae54815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513525aa-f0d4-499a-8241-bbb56e234bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22835f2-8227-43ae-afc2-8450e06f4788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb448e1-cc2f-4a02-9b1f-51854cfb1efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce014bae-434e-4a8f-a484-b91d5cebd3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bfad12-790c-46fd-b2c0-087298f71f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d53e71-1af6-456f-8c50-c83980c9cbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b65622b-5120-4117-ab41-20a3337d17ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebceeb5-4f70-4370-8de0-8fcdc0b5b7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a3b4fb-8783-43ab-af8f-fb19c3792d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbbb78b-9ca6-41b5-bbff-2fc952050d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcdb429-57d9-4f78-ba76-a97a32e48ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae58c83-9705-49d7-ae07-45498cc4a695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7ffcd4-fbaa-4432-918a-cd0d11b9265f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19ada2f-f0a8-4a9d-a3b4-e99831c29cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.216']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3050e1aa-d50f-4523-b798-acb60df91155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9fbb50-0cc3-4a13-80cb-d713a018b159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7323ab1-9f89-466d-95e7-d5c187466c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee33cf2-957c-4ec7-a7e3-78fd25e4a729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a141f08-5022-4d4a-9505-92793f0f53a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd17cf8-63ee-4e68-84fc-2992c895993d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5681253c-2dcf-4fa0-937b-12df3995ad27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04763194-d971-472d-adc8-ff79cbbebf0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace38ebe-3f86-4361-a72e-808376d955ce", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.24.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e260a5-a5f2-47f0-932d-374dfdbf5639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61e9cd8-a651-442f-930a-a53f22fd9812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4cea61-8141-4ec9-94c3-72aaee27a000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252968bb-fcb1-4501-9201-fa35aeb233e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3411561a-9ee0-4337-a276-a20a204fa643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07da248-3063-4a5d-bc1a-4c2f25935a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f305dfbd-a9fd-41c2-aa1b-251fa3b8e899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac350820-4ad8-4ad6-bf24-9f954dcc863a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092de35c-59b5-4a4f-bb0a-595d3debfe1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec438df1-5505-41dc-b08c-740be22dc6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf81302-0c04-4bdf-8414-d78da4786915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2d33be-69b1-44f1-8e17-5c41c774e24b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--543c7dbb-a816-4d84-8c3e-76e84a97d3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10a5f13-eba7-4f80-8497-9ca6e1c0b648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e73d697-9125-4f61-b923-538ca0f88452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e1aa8d-af62-42e8-9885-2b9fed5d22fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c07501e-bd98-41a4-8e42-9eaa99207a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6511c133-1521-4c32-b001-9b3b0c00989b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca821e4-fde8-492d-ba96-535a16312b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4193797-4d44-4a8f-8502-c116048b4285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b03975-3745-4d8a-a179-dc82faed1ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66b0a2f-a478-4472-bad0-645ce79f1257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dea320d-89cc-4a09-9723-865da2795fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb5936d-7b33-4d05-adcd-4f8352ca4bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e702ce-b40f-4df9-b77e-9bd812b8d6a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ac7101-4a9c-4cfb-b93c-bf68448c2a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ce9e9f-d0f4-451b-8fcb-b39369f2aba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c145fe9-d14e-45de-a20c-29bf524b733b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556fff85-9e88-48f1-9b8c-9c97bdabe8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59a9c0a-f6bc-4d48-a813-9494d1d6588a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fc49d7-8901-4ab8-94bf-66f23307e2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.84.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6ecba7-90cb-44be-8734-9339c7c1f16c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.85.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69912c1-a7cb-4161-b89e-48928359749b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24460157-cf25-4931-aa0e-31a01e78873a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf13f10b-5ca9-4be0-8a68-37e8afc7b161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328e6349-3a1d-43db-ab02-982599c766f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb3bd7e-734a-483f-9b89-54156decc61c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921f91fb-e167-4a2e-8532-a728ba762a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c2965b-724c-4085-bcdc-d5f3f6802a34", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.1.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1389defa-aef5-48ea-88a1-b26ea02900b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.109.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865fd6d8-aae7-47eb-b9f7-8cb765c4252d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.142.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598022f4-861a-411b-a3a5-9df4980fb028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.182.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10778890-6058-4c15-88a6-cac968828971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.237.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724835e2-d49d-436f-8585-0b13b95b5c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.68.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3557c929-5a9f-4d09-bb89-e8cc0771e951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.76.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca78653-f1cf-4217-b1ae-566b640b41a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.79.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41f1659-fdea-4c7f-9f6b-b7ab01771936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.139.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6224b3-3749-49e4-9068-cdeff57f5823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.140.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67963ae1-3c37-4ca4-9545-2e506d4b0495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.140.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a3d4c7-f74b-45a9-900c-2ab3d8de77be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.135.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b15fff-a5ed-4d73-a4b9-7d8799728ced", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.181.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b30859-d452-436d-872a-7911d629ce7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.225.103']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7138729f-0e33-4274-99cd-e4bf797be98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.229.50.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc885fb0-6ec5-46d0-bcd4-3226da56cbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.152.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6e0aa6-27ed-4a7e-bcaf-0dea085fd103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.58.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8910d4bb-0c5a-49b8-9b83-f11c691d2891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.103.63.136']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7633a6b6-5b37-4957-9077-0cec789ccd78", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.225.191.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e72c5fc-9a0a-4234-a81e-d33fce6f0e74", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.225.205.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a3df33-26eb-4bc0-8258-7e082348eee9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.24.1.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c304c9f-25d4-45ca-85ab-88229a3f99d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.249.180.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b08f780-2a6d-43c1-9e04-586d0c9750c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.251.221.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69650c53-7f25-4aa4-839d-734bac9161bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.66.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9df19b8-76b1-440b-816c-e3fe71b4340b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.72.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d38447-6b80-4b77-a675-b6f0d7a79f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7636d0-94b6-4fc0-b04e-3e1661e2f70c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c37a6d5-c661-43d3-907f-be3d95ab39aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.85.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e589e8c2-819e-46d8-9e09-b3419e8c8447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.69.186.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9592073-c24a-4999-ad33-b9c1d5ad78bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32827e43-ab4d-423b-b198-4f33a02c7f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bcab0e-97dd-490e-846c-ff3c4b1a8f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100af4fb-2d13-4832-8808-83b51dd6376c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8536307-e9d3-4162-aa9f-4c87b3466155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.85.84.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead5d989-3ee3-4525-aae6-a536f72b1964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.93.60.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b111244-173f-4ad3-9dbf-b9bb72baa3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dffa878-8959-4151-99e2-0be2d553abd9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.165']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae341977-c860-4ab0-a8d4-6ffff6e16597", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f41dc25-da26-449f-9c27-265fa3a558b6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb452f15-07be-4fa5-a07b-da252a0db58f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64baf83f-e029-43e8-b16a-cd6aab29b5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c3d047-afb6-415d-b199-d6f448589ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953e8ad5-beb1-4892-84b8-c394a5f9f001", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5a82e7-b493-477c-9473-83050d896f02", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4f6f71-6d41-45e9-a06a-20177beb2dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d545e5-7ad6-4c4f-bb2f-48fde46030f5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4dfe933-dee8-4361-90f6-28b269738aab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7991088-08d4-4b12-8b12-2e7c47ffb9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0f8200-9d65-4a0a-81c3-537e54070498", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.93.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d47839-e84b-48a4-89e5-b602684f7fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f5df81-5f04-4773-a70e-5e33af00b843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3469f034-280c-4d30-acbe-f18eae52b5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95cdeb30-4673-4cb4-b503-34a88b176213", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80px']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710f7c79-15b9-4713-a679-5875c6d03b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.16.240.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182dacff-47ec-4473-99d0-1b1033087ae1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.167.26.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a253ca5f-d010-490c-99fc-bebda936112a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.169.154.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a3e680-8a28-417a-b60d-e20a272f36e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afd7ba2-7259-4efc-999e-3d0031e682a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e4043e-b8c2-42ec-b8de-e7b7072bb373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93aa4606-b950-4bfe-b37c-ac79277d7cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644c35f6-1a7f-409a-adc0-b73450272409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b621fe75-dc96-4f78-aa15-20f4abaddbab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bff2ab6-0281-42c0-89b8-c134d52af914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002ba936-e4b8-4a02-baa0-886ed5262006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497d647d-ab11-4d8d-a3a0-dffa654881d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7e8bf3-7999-43e9-8b73-d341dcc41236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f447c07-3286-47b1-904c-bccf3cfef6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.120']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1498b7-f08c-496a-a4fe-a3b8717e93f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11013176-0117-4c96-9bb8-fe58ff4b78c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae62625-863e-48d3-9f5d-db2d1b8a384a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5fd293-93b7-4f5b-a7ce-663c5c04cf66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2825778e-d7e3-48c8-88c4-d6fe958719e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2812472-95f0-476a-be55-5542e996503a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f5c6e0-5db6-486e-8d0c-059c0679af73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0eb16ba-f886-412e-9826-b6e338b89938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c485c3-b199-4b7d-ba4b-f338b01465a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cce5dd2-d811-4b58-92b3-70fa1adc8166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803ec93c-a8cf-4674-87c1-829b89f1564e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b256f788-e491-4534-ab62-9209491b4865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35c4933-ae21-442f-a6a6-df1cf51e780f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd2e591-4b52-475a-86af-1e8fe112d49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8da723-0f49-4033-87af-dc311d756cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83cb8cdf-e233-464c-9619-412519cfa79a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.82']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b2b1ce-211c-411d-94ba-5f28ff314c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc66bd3-bb1e-466e-a9f0-ce00b3a72ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032fc1d7-62cc-42b5-8b38-a7c4f573d1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d8dc0f-d0c1-43ba-abda-026f94656fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.88']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31273e99-8843-480e-a71e-3eb291d961a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778b6d20-2578-4608-a9e6-7d5050c7a33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9d7a4b-09e7-4e63-8d06-daf596f8dd36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.92']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c14427-f36a-4044-b39d-f36eae677776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e51a3e-5ecc-44f4-9194-da7a1f52013c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3865d068-19e5-4fb6-8eda-249e3daaf271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81931e8-9fd9-4f40-ab66-718668f104a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50e6bc8-c109-4531-93f6-c85a4700911d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22e4779-4366-4d48-b8e2-418bf9f6bb2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5983b1c2-d43a-45cc-a3aa-2d51faf62f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c464ecaa-6eff-4774-8846-a6effa67df30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3caa69-d4dd-4226-aa60-d9e1001d6171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44b88f1-6a1d-4d65-82a3-1f8c3af18398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.224']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8f5550-4f4a-4348-9133-ef0fed620011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff8ad5e-c1fb-4cf0-9ce8-cdce87f115d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed6012c-347d-4ba6-af89-0d04e521073b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d431a01e-95ce-4f7c-8034-cf02a0da2325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.244']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bf50e7-44c3-4012-aa02-aa9105822361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.246']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eeee390-7f3f-4482-8372-2c0546f06145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a6dc61-dc83-4c65-b127-a9cb1795b2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e39f602-5ed6-431f-bd7b-0b85bf7c0491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.254']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3cf0b93-63b0-49a1-9c54-c34c9494dbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.226.129.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec69e36f-3ed5-43c6-ad3f-35124ec3badc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.227.175.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af8c637-b697-4484-a44e-841393e038e3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.27.98.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96369460-695a-4e90-a121-6c9a105a599b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.28.13.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91644da-722b-42ab-9ba7-9da31c953f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.89.212.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00939854-99d3-44b9-b8e8-249a568dd1d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.129.224.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca43d41-70ff-4da9-bf28-4e693e8da3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.152.162.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58aa1097-dd2f-40e5-83ed-b34039bfd839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.152.163.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d8a19d-c374-446c-9b75-4d50fe0875fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.152.164.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06bc036-202e-4e52-81d3-fe7e2adfba35", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.152.91.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15d5796-6e69-4c6d-911e-bbc6e5a5c63a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.116.86']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9533e9a-bf72-4a30-b19e-04de28c88ced", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.211.126']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0a9452-f1b0-4f81-b3c3-3d0be753bd0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.34.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073ba7f7-ab04-4855-8fd0-492d25781546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.200.235.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73a9d0b-d867-463b-9113-99e06bff2086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.25.47.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14de327-3745-439b-b101-15f6937d4e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.40.35.122']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139e43a6-31c9-4378-9d64-f1d39dff23d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.40.35.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22181a6b-02f7-428a-aa1f-502b54c8cf6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.49.235.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a6a9e1-1144-413e-8e3d-3a8bd8a4c70c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.122.72.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c471517-fd1e-46c6-871e-0429f890bb4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.143.112.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3faffda-6462-4b37-bec9-f80fca412d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.106.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b325390b-8a47-4372-9ca5-4102b1d1a766", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.88.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f0159d-3821-4a53-ae89-389e0eba5d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.88.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f20020-3638-462e-b843-c3e9e15b1a53", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.89.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80b6ba4-08ce-4a93-8c59-7f9e08ec8444", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.89.220']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568c847a-d60d-4af8-aac9-7f51d865beff", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.89.222']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421f67fc-3e20-4c25-8ef3-01cb1a132791", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.89.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175f1c75-c2f3-4deb-b128-9a1c4421c9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.171.100.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1504cd9a-a716-4291-ae0b-3c7717347db5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.171.226.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca0e848-e240-46c5-8be2-0944678b994c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.229.8.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5dce4b-0d65-4ba0-b6a6-5871e926cdb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.243.188.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30453dc8-a335-4eba-adef-bca9420b2ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.244.79.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850caf08-65d1-45b0-b0eb-eb873ec075ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.249.250.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4e9c12-8498-40ed-b690-f321790b3144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.235.246.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400b6392-4036-4403-9bfe-aac559dde83d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.187.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee70ca4-2658-4ad6-bc63-8b0bef5cffb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.3.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fed8c3e-fec6-4a8b-be5f-84e929e37ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.75.76.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0ff04a-dbf3-474a-891c-86e8e1155835", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.75.76.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f2aef2-fdad-49e5-8489-5c65ca473f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.8.134.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a465f5fd-be16-47e6-9ccb-bcf440e22b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.8.217.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdcaf7a-95eb-4f47-8387-6d512c57041c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bc8f3e-0d37-42ff-b4b2-ca04629693c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.105.136.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0304e037-8e0f-48bd-b19b-de5395673dec", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.105.87.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed02b27c-f352-4c5f-aaee-990d9e2cd8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5024af01-f74d-45d8-9769-b9a522b15abd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf65185-2ca8-4a3a-a9e4-a04479aeb9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57434f52-0cd2-43f5-a55e-27ab7f8188c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.112.201.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b396d7a4-8f8b-489d-a1e7-10938c11482f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.121.120.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb59be7-2bab-4937-9bf4-8903489566b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.121.120.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1057854d-b889-4a0f-944e-f76194e97998", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.121.120.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70eb9967-ff19-4865-bf79-edae819fb4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.121.241.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616de5ce-6881-4dd8-b540-a3ddc6ef7378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.121.244.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b8e543-164b-40e5-a050-fbf56f5decc1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.121.53.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e861f7-bf05-4bee-b965-5ff7fa5977ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.137.51.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfcec597-8387-4961-bb12-2041a9eaf1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.137.53.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd6bb5d-c824-4569-994a-2ce7fc024907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.172.25.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e302ef9-18b0-457e-8a09-0a5b6ae1ceff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.174.180.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4994ac25-3caa-4c7f-a888-dccfcba5d003", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.175.122.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae859db-f482-49e1-bfc9-a9e2426226c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.185.112.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d44533f-f05e-479f-bb34-a1616a275412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.185.127.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f017a5-39b6-4dc5-a5f7-c162a5e4c8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.187.237.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba14b098-bb89-4cda-8c89-7329de613a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.189.104.104']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1141ba-3978-420b-a544-80d206d63ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.190.238.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa4eeaf-e189-4ac7-839d-fdb6122a2646", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.198.19.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0213ae-17af-4f36-b3d7-d3c9be74df05", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba81b1f1-ff40-4491-932e-0357dd6a12fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8582ed40-3a51-4365-8852-29739386a8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.46.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cddf0c6e-a2ff-40e5-bf7d-b1b7209725d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.46.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb2f948-02e2-4b9b-9e67-6111784ae484", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.104.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e919da05-d5d5-4d40-9f87-a0eca50f2568", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b069c4b0-2344-4e24-8f59-790430255b94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c936ca38-8eb7-413a-8d05-73e4b560342f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c980f7ed-4042-4aac-bfd8-e2ec8b29b84e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af96e595-1ffb-4b8b-951f-754ea22555a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc89f9a-355d-4a31-a4a7-2f1b6bf48801", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8b048d-89ac-4b00-955f-fb230f6c0a90", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa441b06-0801-470d-b109-ea5ebb1f5f87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333ee321-4ddf-4ba8-b701-67b48ce69bc7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1195e1ec-2caf-428a-9e72-264296eeadae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4de0ea8-9bda-4a07-8962-b58d213e7224", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2443d4-f910-4d11-bf59-dadea77838d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5776294-dcad-4f59-aaef-ef416f36664e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10156fa-7acb-4054-b83a-e818bbe5e1b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60145414-3e96-4d8d-a1f3-060ef3a32e69", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92d731b-8722-466b-b838-443fa9b4dd90", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a59c246-21bb-4c78-ace3-20c1316959f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7375613-e084-4268-b712-541cf76bfd1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25f4995-e741-421c-b81f-c19a4a6cacd9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14152762-5560-4e31-b579-4d3b84fe169f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a4f320-f2f8-4191-9f34-c7dd4061bdb0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ca4513-18ca-4a40-8521-131139ef2535", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0945bd65-a50f-491d-9f49-8056abd11738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032f6d21-ff2f-498f-bcfc-9267599bbb1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720356b0-2e65-4e92-8599-200bbaaa6301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1637e0fe-fe1d-4fca-8b5e-0fe44f03229b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495cb864-64db-416d-ab54-11f7503e4196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3765c67-b683-4d0d-a410-c4682f325523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00b5165-3655-41fb-a476-18c912aadc71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b7c737-3217-4119-b832-62f5268ca15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f932a18e-2f10-43c5-92d1-68e514d3960f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1caef9d6-588a-45ff-897b-cc1a0813b79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6c617e-5ebf-40ff-89b4-5de894d662b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77d0b6b-5cea-4483-a3ec-2be406ded449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d08254-9c57-4f52-a037-8a441ef0db77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09624c89-d34a-46a0-a8d5-16d0a9c04f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f702abd1-8099-41ac-9d0e-35e6b435c6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2eb0a2-4f0e-4f04-b248-7ecbeb8bbf41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669d6126-11ab-45f4-bfcc-51ec122396cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b8ef20-8e5d-44ee-9a42-53b15f2c7735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88f2658-34c0-427c-8fac-18b22f5c2af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfebe550-6c71-48fb-b96e-e1a19e7abe08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2331de33-799a-4dc9-97ff-6e44948b4224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c889fd24-c32a-4ea4-9ae3-e4bfd62c44dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11fca20-b85e-4905-9553-5bb8156c1bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52091089-ab2b-4bea-8490-881d381351e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517432bf-67dd-481d-9765-69aa0c37d06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f457259-826e-46f3-9f0a-3316a6b191dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7837ee-2e26-4e51-8262-51854f93ca90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e36e7d6-f104-479c-8a54-eb387c92c2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ed1d76-82d3-48e0-bb99-358317d935ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed159d0-a7c0-445c-a43e-802cd2622151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31a40ec-0bca-46cf-b4ec-abf36f34c968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6f7080-619d-4e18-b29b-c5d1a5c1c67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b766ca-5f34-4ebb-b848-3efec88444bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baea076d-fc75-432f-8a29-90cd2a3b3828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e029a7fc-f2ad-4db6-bc35-b7d8856d8120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54e53e1-4fe8-4f2a-b6c4-68b5bc3d2eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec9a7d8-f179-49bd-966c-ea68d465a3d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe24c06b-ec9b-461c-9f74-73beca094827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f9e6b3-003a-409e-9905-45ffcfe60d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64f2368-43a4-4161-9d55-8b0f415db4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871028d5-99c0-44ca-969b-84d9b2760ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5804f3f5-4db0-44dc-94c4-6449b84e45ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2e0cf3-8572-4a18-a0ad-1ec9c1dda340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6423e88-7287-4d77-9101-77ff6fdbb144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38feea11-aea9-4c4e-8914-12e0204acf77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807dff50-ecaa-4f83-b404-6e66fc1a8654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7b80b1-95ec-46f2-9561-5c8f2a4836ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd081702-973e-4aaf-8a93-4b6675102f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60a5770-4e0d-4269-9c86-5bf0bd043b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bfbd69-a050-40af-b1ec-b39802026d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6729d7-407f-4e9b-a56c-7c8c1cc7cfc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.0']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbfb45b-fb49-49a0-a4b4-04a60723c1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765ba8dd-4243-41d2-adce-1f8d3fd93e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d35a925-c3d4-430d-882b-109f82bed08c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bfee1f-fb0b-4558-aad0-b95525b53c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e05f171-8fa3-4528-8b16-bd04b9d23319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7497c9d-c704-4107-b376-01ee89ebea0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5391b0-bea7-40ca-a2db-0f2dfb3278ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86127da2-f96f-45c3-bb7c-db461e129876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8412a2-5ebe-474d-8fd7-a0984d164c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d989f5f2-1314-497c-8d02-4874ba5e32f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e11c5f7-d744-4aab-bc68-ccb8691d046a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b961806-03b5-4615-baec-86f2e1c2e67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce35bacc-e867-44a0-b08b-985f366f5376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bcc500-bde5-492c-9789-991345882a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d55c79-f6db-414c-a925-d7713c4367ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78c345d-f340-405d-a0d6-2a3ac679dcc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe7b320-9865-49ef-a141-aff8c12a76a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd415e73-a78d-4a8d-b634-2c477487fdac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c8e870-3218-43da-a712-043439c9271e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f145befb-cfe5-4771-8caf-b99176b5c2e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b7cd3b-31ff-4aab-9743-c0ef5fcb7698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6996604-1da2-4ace-bb75-b734653b4677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f58c69-bc4b-4bed-bfe2-dacf3e295efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ba2f80-ed67-4f87-95a1-2f537944b4f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95483620-7791-438b-a261-43afb4d6a3f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d12c509-3b9f-4d31-a711-7e9a96c7886e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94f099a-ed9f-4329-816d-6432b08f8b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aed2c8c-19ea-4993-80d8-1a11d1fcd210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bedeef4b-ae93-464f-aa17-37e60dda5c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25b6d1a-5280-4ab1-bd1a-7911804a2c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210ea03a-246f-4047-8cee-937d0cc435af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8695f42-1325-4202-a53b-fe3a60e1beed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e3e9b4-55d1-4c1e-ad62-675ab2a30a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b3b3fc-ff8b-4676-a562-7b46120200c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f1b3ec-b1ef-43a2-95db-00a6242c75a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.41']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1709d202-2b6b-4751-999a-a4e02e60bc7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279f3555-382b-44c1-933d-05b9e9996e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.43']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6f63ad-585c-4f4b-852b-88fc33ee7d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b070bbb-a9c1-424b-8a18-b806c8c328e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458725c3-f0df-429e-9b7f-e68357ff1610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365f412c-7067-42b7-b942-e7dc28df3c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eaa0930-293d-4da7-bf3f-ce947a5e0517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e66a95-bff4-43c7-a6df-4e1569e70a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03ce5d5-93a3-4b4a-ae4a-1cf12edd6939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e4c003-fbba-48d9-9cdf-555a067bc877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8276425-bee5-417b-8000-04f4a7001b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502a1dd5-eb22-4eef-9f19-45010756f4a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652eb72a-24f8-491b-ae49-8dbd67e24350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e900d8f-f9e8-47fa-bf96-c4a24eb7a59d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1b94fb-687f-44ec-95b0-31826b75c73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb40bc0-99a2-45d1-986d-19531b3acbc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.56']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc1b370-1c9f-4ab6-90b2-fd10a1b0c02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b31ff6-fa1e-49ba-bc41-3180ff3e0f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362ef07e-6eed-4ea3-b1a7-6babc99cd2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275ef815-6f2a-48ef-9832-0da001c14b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.6']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f806ca51-c1ce-4c13-987f-ba92b0795035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.60']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd3383c-c535-4b2b-b8b0-fc9a3a5787d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.61']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb69cc7-b714-4248-b1bc-c8f229831cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aef2f41-ae14-455c-9d67-cd52bd5b01fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.63']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69129a43-b45f-4869-b583-f5b6eba0428f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de471213-e6db-4177-afc9-3137002b207f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2350b73a-8bc0-49eb-9b3d-a9d72aa036cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f6c240-f8e0-410a-ba2b-8905b1e785f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ac2ea2-4bfb-4025-8925-96a575d2af75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d578bf3b-e12a-4926-a0cf-47484e618af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963e6e33-be6f-4e74-901a-7aabb6e0185d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b205aec-95cb-4a13-ad0b-acfa90b24a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d484f75-a1fd-4fef-96fb-cefe8eacf782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934f69a1-245c-4497-b027-2858404d2075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476ee07a-3d4f-4442-94db-4090c2b5b80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b8f7ae-e320-428b-93c8-c44777927b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bf92a9-284a-49ce-a746-80dd0aa504ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709a36f9-8225-46f2-bdd8-8a88ce064999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecae8c85-883c-43e3-8d12-a1b39d1e6420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.161.80']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f28ef6d-35e8-4ad5-834d-b44d6a506b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19053f1-0942-47fa-b2ac-f445a1e75e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.234.47']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6d33a0-4fdb-4ed7-8051-cb231fe7371f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.107.104.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8e5ffd-dc4d-4331-84c0-cda1c22b805f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.176.100']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaec1996-e2f3-42de-8939-f22f2dc401e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c617dc-85d8-4738-beba-997fe01b39f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.53.161.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d6f84f-8bf4-44c8-b92d-554a7bf523f0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.53.162.232']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c923f7-9cf9-4471-9d85-7797474013a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af625ed5-9539-4405-8d95-d907fcc8f93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf6d4c7-3e3d-4e17-a752-c67057f5ddf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f3fd49d-6a0f-4fb1-a762-17f25dc4f03f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33be4112-87cd-4f64-b7a0-17aa22f0df28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093ebbd7-cea7-4b9a-8b89-efa36e09c81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65357923-bb4b-4121-8a3e-a588787ee882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.255.14']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982fddce-6f8e-4b4f-8b29-bec0d9a18c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881f0faf-c172-4246-b19c-ebb1e74ac503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.69.138']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86460065-5691-4a94-8b84-ba94cd43e059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc44e5f9-af91-4625-925a-8996029c1eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.108']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a19eff-b403-42ad-96de-509e770d0dc4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265efc12-899d-43c8-98f7-d9543dc0695d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8be205-8d53-4359-afdd-07916145bbb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2abe79-3878-47f4-aad2-6eeb7ed80413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a7bdb8-ba43-4e8f-a9b8-e67538e976ff", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.249.134.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267f8661-9e4e-4db9-a688-1039ecd5dd28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57b0eee-cd84-439c-bdd3-e8b33d447de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bcc3366-0907-4e54-800f-a0441f8ca405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d5369b-e5fe-4ff1-9ffc-77f073d7885b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e54de2-3ef9-4f24-b145-9b9f38351bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.79.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70492959-64a7-40ce-be12-a75bd943d3df", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.198.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a522dc68-4370-4d2a-a1c0-c79b8e1dc227", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.83.104.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455e7014-1863-4963-8a4b-682460eac3c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.83.105.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a688d032-6a18-4a47-8d56-b7d4e59d0595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.83.105.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc91fbb-c8fa-49ce-b444-1277c519043c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.151.33.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58720d7a-115c-4c9e-a5e5-282c95b089cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1251f478-9ead-405b-88d0-073812e28ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.22.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89b8b65-0347-42f8-9454-ff52827accc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.24.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce0c862-72b3-4dde-8c65-2e9084c6cb25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5e0140-8596-45e6-ad1a-75b8bfca13c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.124']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f46414d-da33-46a2-b36d-deceedd7a792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653b8ec2-23a8-4280-b99d-529899454109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0355704-ad76-467b-95f7-638c710e1e02", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.250.11.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fc73cb-e457-4bec-b781-23e5649e46d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.189.24']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb39482-1a1b-4cf9-b869-531e4bcf6c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.20.49']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9349cbfc-ab0b-4919-ae7a-f0142d12c5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.97.165.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc469b0a-055d-420c-9c76-ec62709588b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.116.211.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260af825-684c-4b0d-9dfa-75a67a89f7df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.117.18.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bebae8-d0c3-4c72-a16d-0771f99b430d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.117.55.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e48c7b6-87c2-4b5b-872f-d5f3839ae5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.134.210.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd516e9-87f3-40bc-8345-253c5945975b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.147.137.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc65c0b4-ee1a-4c83-b5d7-84bf5099b17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.167.56.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d35cb74-43a6-4871-a9ae-901d57386d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.169.97.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bc81c0-81d7-4199-a747-99d908c481c5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.185.27.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9b2cb0-fa9b-4a29-8372-c58732521b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeca78a3-55e3-4a9a-9961-26a268113767", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.159.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26682129-ac9a-43cd-8080-4e5db13f22e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.208.245.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b021571-5981-4d10-a6c8-77f82f956d81", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.208.249.208']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97fef8c7-1374-449a-86f8-d9c90966b8bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.130']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20fb60a-c223-4202-82ad-c25d9c62a132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1bc048-bbd9-4e9b-a20c-296c0b3d7683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509c5445-e460-47ad-80fe-3ceb237fd00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e7501c-fc4f-4fd5-bdc9-dfa7bf9619c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.134']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9711bc91-b2cc-495d-bd89-fb826eb44c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589f3811-97d0-4b6d-b9db-4ecd1d9d6b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55e700c-237b-4086-9c53-2a1572a0b758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.140']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ecc303-9f1f-4d87-8716-fd1833e4c2ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758228e2-32b2-4734-9eae-cb6c3811ab45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca3382d-5233-49c0-860e-e7d5d6ab82d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e44f221-a01d-4b8a-aee6-9bd07a1a5c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.148']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d047d7-558e-40fa-bfe7-95680bf5e032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b5ce15-59ee-412d-806f-5fcd4d7c81fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ba7821-a850-4155-9afe-24cd902310ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34b85ee-7897-42be-a64d-e493ec6038b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66ff0d0-bba8-49ba-b3d0-62416cf481c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d65374c-46bb-4fae-adc6-2839af53fe22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82c714c-192a-437c-83a8-dfce5d37338d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7123e784-21bc-4491-af47-ffb0e56cc597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4567925b-bdaf-42b3-acf6-e4b16657bb63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.160']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3dc421-1180-4582-b22c-5e23feb50b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.162']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1269a3d-3b4e-4890-bcf8-24c85c9dcf64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974fa4a3-0d07-4c3b-85e3-980c207067f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.164']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40487e60-5907-4342-a4f6-dc767d7c4d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.168']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d09006-1806-48d0-8282-6065e6105f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39605fad-f887-4d6b-a861-5d7cbe02794b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6baa27-805a-4d51-9375-6816456756da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74133e86-9dcb-49c8-a7cf-0a9a6acfa327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b3139b-56e8-4bdb-8d02-c380b53d8230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f8237d-9cd5-40bf-bb06-76b8272ad110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6721a6a-6f45-409f-b169-5f81ef1250cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1aa3f2-ad3f-4ab9-841d-d89a6d5c680c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.180']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00a0857-3ca2-4918-b388-d063098598f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.182']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8727b1-e28f-40ac-adec-a3651b3cbc45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.184']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4085920-3ff8-454c-8e9c-eab5dc24aff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbd49a7-f134-430d-a964-f8ad3d8c973d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5165611-40f4-4b48-a10b-cb97fadc7b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a10e6ef5-b39d-4db2-af5c-87d5a9129fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e411607-5963-4230-97c7-da966809eda1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.200']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a13991-fafe-4481-8557-9ef08aa50082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8813b020-5171-4d83-8bd6-6acca9f624cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6afe6c3-a3c1-430e-84e1-352314778c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a02e65-450a-477e-8139-1c4e7f461154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.152']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd74e86b-a336-4407-9a83-627c60eab9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c27953-e412-40b9-943d-9b159b52e423", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.63.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191e024d-a097-40d9-be0c-765c09773c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.38.69.2']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef37a110-2850-46c1-9902-ee16645bd742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.43.134.26']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d399ef-2b02-4e6c-8155-f151afddd20d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8px;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba24024-f70d-44c5-9866-2f68700fae74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.188']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446f5c25-d452-4104-be70-ab2f99a80531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.190']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb38453-8c3c-404c-928c-bed096ee32aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23844fa-8087-40e8-ae56-cbc85d44183a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.151.171.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28e41ea-f95e-4c15-8adf-8401e340d53a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.68.164.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b070d80b-ffda-4a1b-83a9-39010d5a07e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.129.133.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1fb959-861e-40ad-a816-09e03205b90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5703de-72a1-4fb4-a22c-023733defc2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636e26e1-6736-429c-ac77-1a512c808509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17218b1b-2c6b-4aef-a99b-1d65292d2dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3af078-1f34-4e93-a170-81f1c21ad41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352f7ae4-abbc-44b3-83bc-34eb6df7c892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83dc947f-016e-42e9-a145-5fcd8cbc000a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a67ddcf-8138-4f59-b930-d584c611e922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea47ea2-8bd7-4b01-ab11-70927733a417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e01b064-bb79-40fb-a4ab-667aba37d355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed30cffd-5574-49b2-83ce-aa01591f9b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c61a4b-b591-4518-bba6-24acf151d8c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251d3357-4a18-41cb-adb3-5f805c1bd539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c82301-520a-44e9-81ee-f84d2fae47af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161ee400-4874-4f26-b718-d4a50c6cf616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0e1d97-be80-4237-a854-eac34419d966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281889ec-8320-48a9-b730-a76fa4ddbfd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.177']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d178e3a3-12b5-49da-b8a9-2734694b2439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.179']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163b7d82-a59a-4951-861e-e862a57c120b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30118947-2c6c-4032-9b6e-deec44aaa2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad67a75-a7f2-4bde-98e9-f5069449c5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c349c9-5cec-4453-bb41-f4e848211eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ba5c1b-c09c-43ef-a134-f3e88fa56ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14d41af-3577-45c2-a6c3-af554de40c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9ee597-325a-4af4-b803-bda8b80d25c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ddb0613-e3e3-4999-830d-393c2b4884ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8a4b1d-2f6e-4432-8f64-761bd2fc9591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01779195-9f7c-49dc-b001-b4273ec1117d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074420f0-7277-4147-b21a-1d8c71d922e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53082518-3aa5-46ee-9a1c-029280bd1c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d9ead3-072b-47fd-b4df-bd21a66118fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dadd335-a3f5-441d-b10b-ba7cc0b48850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867f4b33-a342-4ef1-ba4d-575812fb9695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382321f0-5d09-4478-a8fc-dd3c2b0e7ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94dfaaf-87e4-4e89-a6a5-7f083b12ab25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4b8350-4ef3-4c7b-9ad3-14cd6daec547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a64f39-7e30-4ad0-a7f8-b02ca7fe9beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e44e7e-3021-483b-a9f2-db2576f918dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba1258d-e4fb-4d1b-9738-7a6597e84f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7364db4-1dca-4674-a1af-58a346d54de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b432c9f-5c50-42df-a1c3-e024d5513fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb1e0db-d1b6-4ffb-bb1c-689804e2cb41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33cfc0e8-7c0d-4c9d-9f03-0ac03e16a5a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.201.55.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bb6616-986b-4ed1-b549-09d3c259ad71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.109.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ee88f9-2d01-4623-8064-70ae1d70b0b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.184.128']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd561bf-4de8-4bc2-a9b3-dd59377316db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.197.64']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516b2abe-a1b7-4eed-babd-9897603b3f75", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.209.228.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e8da77-0f37-4575-968b-8ee024f86d63", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.209.228.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91009cce-cf0b-40cf-a398-12df85577e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.213.174.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b47d76-c948-427f-9646-429ed1847354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.85.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ca926d-08c9-4224-bf29-3b4ccd0ee803", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.217.139.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28496fb6-d028-419b-8cf1-61c938c8f41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.218.94.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3f1ed1-3ab5-466d-99ff-ea3739c0dfe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1948af74-438e-45c6-9262-d3fad0e83811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66851d01-91f4-4600-a477-5d69d72fc188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.229.105.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e756bd1-d125-40f1-8686-6d51f975a329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c529c73-212a-4c50-9cc6-1bbc18bcbfeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8738eb93-13d3-4deb-b626-488554073d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55fbfb9-3e66-4ac1-a0a0-5446006b7258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5ab87a-3886-4c3d-8608-cfe59412486e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61be938-bff4-4c20-9992-610d854b06ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f5bd53-4112-466f-b1de-5a5682c18ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e758a61-9f8f-49dd-83a4-8d3d61e81e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3661cc3-814d-4bf4-b704-2062722676cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b56c9f6-0b0a-4a5c-8541-dd0e360769a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75fe72a-da57-4572-b9d9-4271503891e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f8069e-4a86-4e94-ad11-3317e27664ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5448ec-cc65-43dd-9f8f-7260cab29611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce41183d-5917-4917-9e9e-e8df5b353354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16515276-a540-48f7-906d-0d55238cc918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd62daf-12aa-43dd-9d11-a72d27f2f3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37d002e-cb3b-416e-aa73-a082259d8f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c1fc8e-4492-454b-8e65-b97c5fc736b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd1c5a8-2b7c-4d62-b26a-9ea6918be5fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebdf9d8-a653-482e-89f2-ebb01ac0f34f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242a297d-b7d4-49dc-9f26-c3dfdd5873ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.163']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15290fde-7bfd-4db2-9c2b-ff0ee2c0af41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.166']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38610ffe-8a24-483c-8970-8bdd1898ab70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b560e9e3-3656-45e4-9eda-984367afe747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1d5439-a4bf-4cb2-b48b-212ed76e2aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458a130d-963f-4b4c-9f15-69a97af1246a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e53db0b-807b-47df-8bfa-1b1c3caaa47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4addf624-9d87-404c-b4a2-e8be01da60a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45a195d-af49-4a25-bb65-c6da87b8ec71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d78693-0516-4339-a457-480bf7bc8362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a40de2-be06-4d76-a991-dde083da51fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd85edd-e02d-4fd0-bbb8-39ddacc7bac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b08259-7cdb-43b2-94f2-415f1c1234b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c69e1b-0875-46a9-8cbc-f58bec058e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6ce87c-eac1-462e-839d-4aa8c7f85474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.202']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf4276a-802e-4c49-9b11-760a257acf57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1701d256-558d-4eab-a944-a7e17bbd8160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36999f4e-aab6-48c7-a7f6-80ac16ad23a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f4ee88-75a1-4e5d-bb5c-624dcbcd8c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26813b5e-a539-43c8-9afb-4269aa178731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3fa885-0a88-4007-a6b2-249e95f9a682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850d6214-ebda-4bed-8e19-1a9da8ba5c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63282f9-24b8-4d01-be10-9ead81b8a448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b6318a-eb68-4b96-84b8-82eae390fe0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10674195-b5a2-4afd-a818-1e43a2fdcc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168fba3d-193a-4870-ba4a-fecce4df7135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aee2190-07b1-4a28-b183-d137006f5a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519cbfc2-7944-43e3-8ffd-81400ca21a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc821037-243a-4286-91fe-b71a1f839b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb9be70-c2da-4e0a-b619-ff761e54236e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8356fc4-ce4c-497f-895b-bf4c01468e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.242']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317afa55-6dc4-4bda-a3ae-1cd268e982ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6ba7bb-2989-41ae-87db-208b969ab19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49263a7-03ff-4b06-9165-5b72601c6bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42931042-15bc-47e6-aa1c-a32087b133e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778ed651-42d4-467b-9c56-c22d9e52850e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa901d5-1d2b-4131-9e79-7f49f7837058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f28c8d-42cb-4b1b-bbd4-9c0aa6b8b070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1328953-3274-4888-8016-5518a4382fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f73fda5-a581-4c99-9be8-8114eb364526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a02f8ec-c3b6-4b4f-a968-f18e254734f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ce406a-395d-4842-9ef9-076ec60a5e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe209ef-98ec-42d5-b804-e5277c6df7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.37']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9f25eb-b33d-4cdd-a22c-e5ea224f5b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.38']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3739a99-2f8b-48ad-ad8f-d70ba79f5b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827b18de-308e-40c7-bb9b-22b238e7d468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61358be3-c405-42ee-ae02-058581c04e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328ebc20-14dd-4ac5-8e63-afda9acc66d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.72']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6e2279-7b7c-43bd-9db1-2a453c4e5535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bba8e8-9f2c-41dd-a946-ba3ec8d4b8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2d17b3-a5ec-4ffa-998c-42bfc93704f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0938e2-ef91-4190-b9bd-9ddf3b4a09d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12847437-0612-4791-a0b8-91272258bca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a85d9f-5e49-4073-a7cd-2f8b658c7248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82659594-0893-40bc-83ad-90b7b8d3ac7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2161fb77-54f9-416b-901e-afbe318e0957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65836d9-0e40-4d3d-bceb-04fba6dd8396", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.225.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13ed9ca-a20d-4fdc-8816-5288e5c9db02", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.225.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36469c3b-1a75-4b33-8903-c72d41e4be1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ab9d04-0b58-4057-b77d-d4f919e438c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e651b57c-d916-4682-9049-dffaa33171df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b70aaa-9146-478e-afa2-9953f075449b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c21a23-4388-46e5-a41e-fce616423177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835e3f08-48f8-4d0d-b676-1b18f14c9a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816377e4-4694-4009-83a7-c1a6f0fa7a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b34417e-41fd-468b-a83c-670a00db7a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85082373-ca11-432b-b247-e3be41584902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431ea978-cba5-4ac7-afb4-38c7b2ea4f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f26d047-18b9-43f7-a12b-89f2fe5e8588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2fbdf6f-84af-4874-b82c-351795c4000d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588f16dd-39bc-417b-ae0f-438cb3993025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96baed01-0fcb-4ac1-8982-442224ecb96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c57e0b6-89db-4941-99a6-83cd0baabf06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd79a8a-df1f-4673-a92a-cd1cfe3d040f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379b6da7-2c55-4106-ba64-8a1a417c12ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.139']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8f9e19-328a-4f09-826a-13e4a609c9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec66e32-42be-4c09-9e3e-aacb5e35746f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6620514-e63a-42e5-b4ff-22460c465386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2014ac0-1dd1-4e02-b2fd-7bf950431232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3f1b47-b209-4dc6-abd5-ea8e7e1007c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d89a8e-9f94-4eb5-ad85-3cb916427758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddafa96-1fc7-4e5d-8936-e48fbbe28edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8b1770-2c39-4e21-8002-88823cfbddf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a58526a-9b24-46f6-be2d-f0a8e623ca18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2370a5-f561-43bd-9916-bd3f579d7340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.156']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300881ae-c110-464c-9e58-df44bb2203a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b25a72-3f8a-4eca-a3ee-6537b109fdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85117e0f-26b0-4a6a-a872-b6503b16cbce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbdf024-ef78-405c-a9d2-a6dd875d0e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6270f0b4-df0a-4f0c-b2dc-cc21d471a1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4d79a4-cd96-47f2-9c02-1aa9ae4712db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10224eb4-c0e2-402a-9d45-8c5f66cf3381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094cd362-edb1-45e0-beae-1523f1349cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01fa3f4-97f1-44df-9b44-17a7c8769173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeeeeb42-7219-40fd-bdcd-e4fe56f12d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19cd994-caa9-40cb-a44d-9d513091799c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b601224-d454-4e7b-b520-4b4a273554ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e061c7cb-2dcf-4891-9045-4975456731b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4b0965-5801-4a2b-a260-47643b35768b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2143d9-53c7-4ce4-9e30-87a633ef8cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c53b65-93fd-4c22-b62c-bf59ac82def4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0d9fae-111d-4b23-9f22-cfba2885c222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14eec826-3bac-4760-bd7e-6401953b82b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d3b008-274f-4b97-a50d-ad119f647a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d88c16-cf26-42ca-a5c0-a4fab821356e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e99b8f2-aaae-49fe-b712-e5f9971bf8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455ed697-8f4c-439c-8716-88ea923ed64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.221']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35a2b76-cd01-4b6c-80aa-5400f0bf07f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a283355-cad0-4877-a0dd-5d4f47b66eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d16b9c-53a2-491b-ab6f-1f876bb27f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab053ea8-bc5c-4fc3-8cb3-4449094b2afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab543da2-8c72-4b8c-9b78-6047e9c45125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c473037a-47c3-4d9b-b8f7-c047673208bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f2d311-292f-46a4-b3d9-62c5e974ff7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c492587a-97c2-45bd-a19a-95469fbddd43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b0367d-626b-4a00-b492-f7d23749ed59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.241']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db744ad5-0cd1-4d53-beac-c86edb411cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f1d557-fd10-49a6-b12a-2cfddc90030c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.245']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af33bed-499a-4de8-89cf-15bd2c8ef61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.247']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3ef5df-5071-4e04-8369-5300a8046289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6689e14c-8718-4330-b114-4d6e909924a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370e4f9c-bcac-4934-95ff-d11d7730c618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236ae05d-6656-4dd1-9478-ad788dba65f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770cb876-1e07-48b9-a82d-ed10d0d60780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119553b5-aed6-4a2e-a37c-7ed0b2c126f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ef75d8-96ad-42d5-99da-4208bba1cb65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ecde23-1c73-4c76-bdaa-15f5ea467f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844b26c3-00d4-495f-a381-1d89eaa04556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.45']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9032c6fd-e6ea-4ec5-81d2-976a92d56d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75985efc-400d-4742-9a96-784bc823eb1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.51']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9e2222-d5a5-4e2d-86f2-eda55559d741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.59']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ddecf2e-22f6-4f2d-8cbc-fcce64ee7b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed651b90-54b9-4078-b9c3-a525fa940285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8825fe5-e72a-4aae-abe1-c4fd9293003a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e144e8c-2952-4262-af8a-4df827ef963c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba45cbc-7553-4645-aaab-6ffec6390e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cbf731-3c21-4c60-9496-f9a2b4fa66d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51d7b07-24ef-4290-8243-a0957d9783b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07649a1-bacd-48ca-90e8-ce85e292bb11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda82836-b17d-4264-ac46-d8778ac4e4b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca75173-4ab2-45e4-8d83-617ce41aa879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2befeb-9e16-4fb5-86cd-4dc50e5c4f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1477181-e028-4678-a2f5-8a1e3af24c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7b152b-f9f8-4a7f-a349-bdc49451e71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bac9a40-1f03-4f84-8105-951a36e28cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40adf280-28bd-4cb4-ad21-8a96f3a2c3d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.233.10.52']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d130e746-f838-4edb-89ac-d8456bb44caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.52.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbab49d5-2dde-45b0-9174-53ecc95d08cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.104.230']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32c2a6a-48d8-4153-a552-c2ebf95cb59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cceb1be5-3488-43bb-9bd4-8f0c5e9da23d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.246.14.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36a2c30-63af-4bef-b953-b64c7bdc2f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.81.151.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe068912-a438-4fe0-91ab-9484a5a34bfe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d676c7ea-0dd5-4ecf-9022-6da14f18a3c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.197']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165530cc-594d-4165-a710-7544f6c116eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e42c2c-ba7d-4231-ab4c-0160b696c904", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.11']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be74f4c9-e53e-4848-9220-ba6126085918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.116']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0ac61c-9c6b-4017-a409-2c1caff73c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.15']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0251ad7f-12cc-4680-a690-a455e70eb473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.18']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f859acf-dc88-40fe-9613-959d53a8bd69", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.204']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c57d8d-4e4c-437d-ba18-50b12bed1211", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.27']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23de2b9-157a-4eb4-877f-0e68678b8bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.4']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b606a4-a3a6-4f6f-ab4f-2e83a9c2ff6b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.46']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89b261f-bd78-42b9-bdbc-555b5c8c210d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50411574-1bd3-4385-bb02-ef1af3bb1584", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.58']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b5cd99-fe25-40f1-830d-8078427e006c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.8']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d97653-ddca-465f-bf6c-c1a119e9adb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.170']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2599d6-0026-4450-8cb1-b91e4460224d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.243']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c323f632-1dd9-4415-a6da-e0f472ce34d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.98.151.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332b7253-ac05-4997-8c0a-1d160b00583f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.126.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66313665-2dbf-4292-8c26-e6f9e44789a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.115.5.137']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a6dd44-017a-4c0f-ab46-2886c3f16e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cfefad-d390-47b6-93f9-29e8af0440ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd869aee-36ee-4324-b8eb-1646ee2abc19", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.128.149']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731389b7-e173-48f0-a4f3-e4812c93d91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.160.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437991d6-73a1-4099-a5b5-0f4381980a99", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.207.4.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945cb78d-dcda-4ac9-973d-9f30de338748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.39.60.147']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b564b10-7123-405d-8275-8b6bf435eef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.39.61.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280eaa4b-0327-4eff-a9bf-02f16f65dce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.39.62.48']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42dface-208f-4dbb-84a1-259cb28e2523", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.47.46.174']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070b9b86-402b-41a1-898d-7113785e9789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.53.64.192']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3666fe9-7d12-4038-a83b-081fff535cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d7e1a9-abce-4a54-8ef6-2d98201b2d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5fa49e1-c29d-4566-9a06-d605ac904498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.183']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c687b3-2437-4f05-9d5c-fe70d6c09745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb094d4d-abfb-4a52-9dd1-db9fa2215e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052d62ff-b47f-4374-9d4f-b986b05c2c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.101.132.114']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bb34a2-d03d-4d2b-9dcb-ed69cdd63174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d1eace-f769-4e96-9cad-838500e84e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.136.186.217']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f8b98d-8160-409b-9aab-76c2248dac87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.143.197.189']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3046a0b9-fcf9-4312-a99b-4cf362c21243", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.155.124.98']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1df89d-e425-43b9-bb27-69e42d568051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.156.152.234']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a726fb3-68e4-47cd-8afd-a70ff637ce00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8812a79-2c82-46ea-a447-1248692788cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.96.62']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abf8ebd-2d9e-4c69-b211-249258549586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.182.107.93']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95833b3-1fbd-4a40-83e9-e95c33428bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.23.50.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e60937-15d3-4682-8114-0121c4797d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35f2e54-536a-40cc-832a-8697875b363a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842a15fd-c68c-4011-972e-acaefd7ca327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32719c2-b9de-4b80-aed6-da0090529547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc6421b-e2cb-497c-a7ae-c7295b9cb1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.253']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc986160-c88b-4316-9a21-27878744006d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.3']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88eac1e6-d40f-4d8e-b3a1-16670200f24d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.10.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89304b4c-49c9-4157-acb3-1c66138e7dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32934f9-2757-4e89-af90-71f8fa236e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.30']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc5a636-f284-4f9f-93b5-ee589789ec55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f50014-6a16-4748-a16e-7c748664c436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.55']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4762b169-c309-4312-bb35-0885d4e9cf78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.43.11.19']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0479539f-eada-4806-8f79-3782c15f94aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.43.132.102']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34423330-6150-475b-a677-d4ed9c71e521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.72.102.118']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f5cdb0-ba52-4e1a-ac3e-bd8c4da5760f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.72.140.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4ed9f9-e506-49c1-9d1e-cf1505d44c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.74.104.89']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a53c91-4071-42bc-b2bf-35c0f346233c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.77.163.158']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d77f7e-71ed-4711-9c67-81cd0348d622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.79.7.36']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691718e2-86fb-4db2-871f-819ffd5572f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.134.244.151']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49892c9a-8e01-49be-838e-eb08d1910290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.135.208.173']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d1629e-1cb5-489b-b186-2ce5b24c44f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.181.190.228']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b9955e-59df-41d8-97b7-9d50237432ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.182.114.214']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5694a518-59c5-4939-ab94-e180ebbca60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.182.114.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be085b6d-eb68-4b86-b2bd-b581240423ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed50936-6ef0-41bb-b7bd-581e93da3d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.54.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d12981c-db7b-4fa3-937f-c5f8bedc8bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.55.226']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef03a107-4af5-4c15-92a7-165a50a916ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c58ac5-0d7c-4176-9eae-1ec8e4335c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.42.54.132']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400bc8e8-cbcf-47e2-89ef-111846ac584a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.46.211.142']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d8e5f7-56f8-4776-8e00-5b65e912f59e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.47.246.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c06152-c6b5-4c77-9e65-020043a96a98", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.79.34.101']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6926f97-a3a3-4697-a4a9-d59e1ca20a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.238.22']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28689584-14f8-4365-a3ac-d6e070cb7955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.107']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f394f116-e1ce-4351-8041-1577cd6929db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.31']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c115e3-6d13-4547-be64-06e64c3683e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.57']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474c9a92-6567-4ae2-bfed-fa30f650fc71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.68']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949f3ef7-e3a4-49c5-ac60-6bb92e59c1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32353e24-4147-4c96-98da-4cddc153e55d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.181']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5757de8b-2086-42b1-91de-85e907fa28a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.195']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa51f3f3-6674-4a04-99e9-a73a0c95a072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36f4391-48ed-4b6c-bd5a-ccb9a3f6600a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.238']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44e0d72-bf74-4f61-a8c6-0a9f196c2cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.39']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aeeefa3-bd88-4b49-aaf2-e7fd83838cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.76']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3f28f1-412a-4ef1-8ecb-46d3f889ffdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.110.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7deefb-b149-4afc-ad94-32f4290a0f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.98.20']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47bb12e-bc06-4882-9109-6f2532d6852a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.44.174.248']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acad9c06-99e3-4d02-9fd8-e02fa7f4b194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.128.161']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87b0f2d-6fdd-4d65-b0ff-32714e24a551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.128.96']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c184bdd-6505-4f4f-9bc3-bcfa69d57470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.129.112']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935fe32c-4444-4164-89e6-b925f362e7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.129.78']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb141ef3-7c0b-4efe-beb7-437471036f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.131.249']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bbbdb1-4465-472e-ab7b-ce7015da0b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.17']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7492f51b-a498-43b8-8994-b580d706b7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.186']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5240f4-0e34-4336-b8e9-a264cb8954d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.7']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e6b385-5405-4991-a08a-f77d7c39b740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b55b595-d48e-4700-a432-bda4c79f5df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.110']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df851a36-4868-47d2-9e59-6e6fb278736b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.143']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16be9300-bc94-427b-8171-557e09d02657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.176']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85105d18-ae06-41a4-90cc-3a8018e4f9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.229']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e71718-d9ef-41a6-99ab-a6d8383cf0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.235']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0deb962a-5d09-44f5-9690-a0fbd7f83ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.136.16']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc962dae-2e96-4c1f-96b7-59a51bcd2e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.137.13']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658fe5fa-6a8c-4f37-8748-1129cd60bbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.137.209']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39cd282-e598-49ab-ae6b-5e938e14d24c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.137.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf02bfd9-2b13-4061-ab34-fa609cf9f2d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.137.84']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b78af5-d491-4b9b-bea5-d6b105ddbd1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.167']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5934e9-8e8d-433a-81f5-1fdb7e17460d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.196']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577124e6-508d-43c3-872c-17b16feeafca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.219']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bfa8b91-c285-4d2b-8bb1-ce2fbe2c609a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.223']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfeb5081-2c2f-4451-889a-6aa39d4f94ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05d493a-71f6-4a1d-9e3f-dee621914f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.70']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ed2f56-e7f5-4d05-b5fc-89163c63acbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.109']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e822b8e8-3caf-45ee-9fa4-f11edc3a2a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.172']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86094cbc-fff1-42ef-a501-1640192348e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.250']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c489c7-3f8b-4dde-bb80-31c3c5840f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.28']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a954246f-9d9f-42d1-8bfe-8954e9f66398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.5']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285c8bfc-3b92-43f6-abba-aabf6b333904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.54']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4320d190-dc26-4a22-8f82-e6eca84c0d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef34204e-2abc-431e-af37-9b8013f11d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.142.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6003d6-9c1f-4fbd-9695-dde25b3a0f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.142.23']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2946fa3-3150-4fbe-9899-447e9570713d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.92.144']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3627e08a-6ecd-45d2-8974-10b13a924dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.142.247.113']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49fe18e-2580-4959-b74a-4ed94aa14b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.142.247.115']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b328054-609c-4c51-97ba-bf755695964c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.70.125.94']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b724f51d-1916-4bfe-a7b3-300fbed53e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.234.145.99']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456baef9-5498-44c4-9489-9b17992f8abc", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = ':']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97cb5b8a-704a-4353-91a0-ad2e4dec7901", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d870bf9-8a35-4d95-8071-0433dd55a391", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<!doctype']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa20f75-3fe4-486f-84d5-9edcc85f1430", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</body>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b7eabd-8451-4cf4-adcd-fb706ea27f24", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</button>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2e7b21-9698-4355-badc-74116e353f88", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</div>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a782b90-282e-4922-8885-481b3d63ea4d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</head>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709dbebb-4965-4193-90f8-1cb44db4bbbb", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</html>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f98d54-40a1-45d9-b4c4-de5e1c58505e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</li>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5640d293-78e0-4bfd-8516-eaf52ff786cb", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</p>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e0f47a-5003-4783-8afe-d3da25aac2b4", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</script>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140aa22d-32d5-4813-811b-2122cbfef08b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</section>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5a589f-792a-4c7d-a432-094ea7f18ac2", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</style>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594396cc-7d8a-43c2-b932-30fcbe2ee679", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</ul>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6c675c-ce1a-45c5-b00b-8672c1b72170", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<a']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fa620c-9cdc-4a60-b0c7-0cd71b305263", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<body>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89fee55b-eac3-4d8a-b94f-b188225b2a7b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<button']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5483d4de-d01f-445b-8daa-ca594d1f36b2", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<code>openclaw-app</code>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67475d19-8eac-4437-b228-398d76164c57", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<div']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389f5a27-3aae-4c14-9987-ef99c6532ea9", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<h1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adedcaf9-840a-4d89-aaed-504ab69dc2a6", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<head>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ccfbce-2454-4ee7-8332-9f2dc5c46c5b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<html']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6375007-baca-4b65-beda-f008795bebdf", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<li>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69891d23-fe29-4718-9f54-2685ddbd8a95", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<li>Disable']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdd9537-13bf-454b-a4e7-5f6d2146ea92", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<li>Try']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45faff4f-2afa-454a-8254-41cf8e70df32", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<link']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9807d2-d31e-49da-9776-2797fb840642", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<meta']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9313e70-6846-4065-a0ee-e76c04cb2ddc", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<openclaw-app></openclaw-app>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1369c4bf-fa88-4006-a4b9-d50a86112475", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<p']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20c984f-f1ae-43ff-89a2-e5b0c4cbddbf", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<p>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e483b3c-6c8e-491f-925a-f8ffa39f0941", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<script']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a244f730-be7a-4976-8b40-49bf35cf51bf", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<script>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da23b866-6f95-47c1-9223-c65ba445e84e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<section']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157e7855-9aef-4d49-9b76-013253e279f5", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<style>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e1c1de-f39c-49a4-9072-d5cf0eaa1822", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<title>OpenClaw']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b83583-ab6c-4ab9-b245-6fdae7331255", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<ul>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a4e0d8-e8eb-4515-a3fe-8498e8c00ca4", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '=']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b1bc68-d7dd-4879-b2cd-036e3452633b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '===']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7189059-437a-4b66-962c-bfbd9f029ae1", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9c19db-9fd9-4f2f-bd15-717f4b1a78ab", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '>.']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b9caae-8987-4994-9e9f-84e3a5138c3d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '>Control']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16b1f36-28ee-4eeb-8238-8aeea2b3aada", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '?']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e999253-4b02-4de6-b066-a469c15a5b48", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'A']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a904986-ba21-423f-bca0-4502affc5c8a", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'BlinkMacSystemFont,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a1a79e-4095-48f1-a40b-1a06ae00acd0", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'Boolean(']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7433f231-6ed6-42bf-9d97-bb051209255e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'Control']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f8ebd7-8f9f-43db-8402-b9e70869f238", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'Control</title>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cada4c-5e1f-4be7-a19a-e9d48c75258a", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'Inter,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30a6c0d-bbb5-40a5-b093-baa4d0ff0365", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'JSON.parse(raw);']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930db01e-7816-4040-8fe7-6005cb866589", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'Keep']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1997de-fc71-4eae-9a02-529161234f51", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'LEGACY']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7120cf8-66ba-4519-a806-ec859543e58a", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'LEGACY[t];']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30519849-22b5-4b35-9070-815a228aa6de", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'MODES']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509ca33b-c415-4c89-b5a7-1434435d9fe1", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'MODES[m]']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef753e7a-0bfc-49f1-8264-45782693f3c5", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'Number(fallback.getAttribute(\"data-openclaw-mount-timeout-ms\"));']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dafa52c-8430-4777-984a-8da86b525151", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'Number.isFinite(rawDelay)']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1101e39f-6fdb-4909-b745-40df3edca55f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'Object.keys(localStorage);']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e3c2e7-5024-4b9b-b8fd-b3c4b4dd3f60", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'See']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157202c3-1d4f-48ba-86ec-d40e962807b1", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'THEMES']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fec856b-0c07-48cf-9db8-842dd8ef60f1", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'THEMES[t]']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f10ae5-38c5-479e-8df7-66d9a1e0930e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'The']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066cf4ce-ef49-4170-982f-797f2a0dc2a4", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'Try']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b202a9dc-0e76-4420-83e9-7f9c1ab547ed", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'UI']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a340647-287b-498b-a96c-7e6821853e6a", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'UI\",']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fd8801-b3a8-42d3-9f09-072cb1a37364", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'UI</p>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25760874-5562-4c3d-9199-fbc92ad01c8f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'a']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027e785f-22c3-4f66-899e-96da95380598", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'a:focus-visible']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3f2798-3bfe-4547-8215-fd334b09d4e4", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'again']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43294f73-232d-4d2b-a7ef-e70a5a0f42d9", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'all']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6280fa6-70d4-498b-9e82-4157ddc603f9", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'app']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0c0362-3110-4ebf-81c0-2054274c4c10", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'app.isConnected']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9748bed-fc4d-4adb-bc65-20d64d0ace7c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'appMounted()']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac9ea0f-7ada-4ec5-9ff0-b2ad13142526", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'aria-labelledby=\"openclaw-mount-fallback-title\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533dccfe-1732-4b86-a81a-10347b3995fa", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'armFallbackTimer()']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9920ad-d591-46bd-8443-71f0a0f34c22", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'armFallbackTimer();']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c22217f-4d50-48e2-bc15-d2dbe1969fd9", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'background:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269ff4a6-c569-4713-9f59-4639c217e07e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'be']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f7becd-b526-4337-ba1c-a78dd5ff6b6a", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'blocking']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d7712c-1026-40a9-8df3-1fa9cdc01f05", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'body.openclaw-mount-fallback-active']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c53648-f8ee-4a2b-ae2f-acb5baf0ead3", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'border-box;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff0e6f3-f3a8-4415-beee-cd92d1895996", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'border-color:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafb4279-e296-419b-b058-a8bdd681c2d3", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'border-radius:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd0c55d-574d-4c44-9f24-bcde91a9d507", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'border:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cbe8cf-6b45-47fc-b1e4-ff46adde10cc", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'box-shadow:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933e3684-afd0-4192-b479-cf1757759868", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'box-sizing:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7c281c-a857-4e44-8a8d-347fea77fd45", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'break;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f145aa67-a3e6-4053-ad79-ed41e2a6e876", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'browser']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c6f781-f781-409d-afa4-e8f24c7e5efc", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'bundle']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a809a0-0ef6-484e-9d3b-34f2f3b01a06", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'but']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a946fe-d76a-47a3-8ec8-b921f2ce110d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'catch']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee288d8-b12f-4de0-9846-5d6522c1a86f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'center;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b9e048-3245-4f75-8bf0-75ce92c1264a", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'charset=\"UTF-8\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb72e7cf-ed4d-410b-a161-640f1cc249b0", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'clamp(1.5rem,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93642ee6-05d0-4ced-bbfe-80e3fcdd8b28", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'class=\"mount-fallback\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58ec6b4-ffc7-4b3c-a542-d4665eb49fef", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'class=\"mount-fallback__actions\">']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c61c1ce-5d4a-440a-8dcb-dc06a45a31c8", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'class=\"mount-fallback__button']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd6f673-147a-4d8d-aa11-50d86955440b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'class=\"mount-fallback__button\">']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc5f501-e25c-4989-95ab-9a5269a71ac6", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'class=\"mount-fallback__eyebrow\">OpenClaw']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe190a3-8fea-461c-bb01-c286b23aaa50", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'class=\"mount-fallback__panel\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b7e2b9-a730-44bb-a970-a522a6de5164", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'claw:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa566e4-314e-4dca-ad5f-705e3c90de9f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'clawdash:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2e985a-f7ae-4c4f-8957-5b0d6a7e8e15", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'clean']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277c1413-9239-4417-b774-3ac0064aba42", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'color:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7cf5a5-3ac2-480b-a89d-9dac48843512", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'component.']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a178a5f-321e-4b34-b024-8724d115b342", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'content']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680b3dec-a164-4827-b5da-9679c39bafae", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'content=\"dark']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6384e76e-4692-4517-b943-2d063c3f69e9", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'content=\"width=device-width,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8add73fe-68c9-478e-8d1b-d9c7eec49243", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'crossorigin']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab866910-c43f-46f2-a83a-ff4c0c1e1e85", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'cursor:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34401c61-2f16-482b-a8b6-e6a23fb0cd2d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'dark:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780ce061-c030-47b4-865e-92415afb1953", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'dash:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3985b6fc-5ea0-47a7-b897-c2e90811764f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'dashboard.</li>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6018671d-505c-4c94-9e49-97f25053f711", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'data-openclaw-mount-timeout-ms=\"12000\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f096332-9b0a-491c-b85b-b8eb4a0aa407", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'delay']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0826c27-f21a-4b11-9ae2-1f717dbbd6e8", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'delay);']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a436a0-0079-42f5-9902-2bfae95a5dab", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'did']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f7adde-aac4-46c1-9830-5302d6e3177f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'display:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc01c70f-d5b8-4fa2-b131-5f1705f4f91c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'document.documentElement.setAttribute(']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06651f2-805b-4fae-9cab-8d0ac7debe1b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'document.documentElement.setAttribute(\"data-theme\",']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f86c32-5369-4d62-88e3-ade1b00c1248", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'document.getElementById(\"openclaw-mount-fallback\");']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f729b41-f05b-4be9-83e3-2751ca2fe8fd", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'document.getElementById(\"openclaw-mount-retry\");']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0456b3-b46e-464f-a74e-aa03e48c7aec", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'document.getElementById(\"openclaw-mount-wait\");']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68353934-46b8-48d5-be27-85079eb5752d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'document.querySelector(tagName);']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89fe447e-fbeb-4ea4-a47d-dc1c6be0d175", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'early']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb9b22a-9e4c-47c5-8ffb-edbaadab7f74", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'execution.']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e96160f-b315-490b-96ea-c06ce88d2e52", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'extension']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa8a620-bfb9-4a53-a67d-dffa66951662", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'extensions']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22f5243-ac38-4484-b479-cc32afa94fe3", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'fallback']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa07af1-d686-4c62-b94f-80cea37f3113", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'fallback.hidden']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e4172a-26de-4d79-88c4-0c2412dffb42", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'fallback.querySelector(\".mount-fallback__panel\");']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d37b116-8f4b-4003-8664-65be89f1e967", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'false;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4668d01a-648a-4a27-81d4-893253137939", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'fieldmanual:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1819e47c-a307-423a-9845-2af7f4f1aa15", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'flex-wrap:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615f893e-e4af-46dd-ac6e-9fe1cb4eca12", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'flex;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9fe755-ed1c-4b30-a644-8503880ceadc", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'font-family:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b944ab50-600c-4949-84c1-87a9c12c8769", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'font-size:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f19343-4cd7-4520-8a0b-591d75924004", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'font-weight:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4135df-b825-4552-bc29-aa28c781222d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'font:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9f4310-8392-46fa-9a88-a89b80442bd6", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'for']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58358401-e403-4bec-a509-fec5a51415c8", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'function']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c82ff60-8eab-4959-af4a-0358b3efaa78", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'gap:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a1d934-3e2c-49d0-9e6f-8736a898de74", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'grid;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63bc02a-2249-45dd-83ed-0f885859b69e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'h1']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a19a03-47b8-4b2a-b988-f170f8fb3093", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'hidden']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20af483d-d11d-4287-8676-fe0f541f8133", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'hideFallback()']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f02371-20a6-4305-a739-a51c90a5c420", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'hideFallback();']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dddbba66-680d-4a29-adcd-bff691f1f6f7", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./apple-touch-icon.png\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da7c4bd-7f37-4d9f-9ace-b3254e2473c6", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./assets/config-runtime-CCw2hptH.js\">']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d0b0d1-89a7-4f3d-8e1d-99a8ec1af009", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./assets/gateway-runtime-CMyVbEq5.js\">']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d4b83a-5074-41c8-93e6-69b36ac32157", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./assets/index-D5N4Zoc_.css\">']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca876a2b-1b71-4045-aa28-ca35492183c7", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./assets/lit-runtime-BImxIzGR.js\">']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a07c4ee-e802-496b-b834-1ad0763ca6b2", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./assets/markdown-runtime-CUzFp-dW.js\">']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a979e546-2b53-4ef1-878e-5bb91a8ca14a", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./assets/rolldown-runtime-QTnfLwEv.js\">']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef00bab-c218-469d-8753-f45397fd17e6", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./assets/string-coerce-Dt6Kt5Fx.js\">']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cbb25e3-0e4f-46a8-948d-e06c2e1bbff7", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./favicon-32.png\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6709998-1291-4b58-952f-aeaec9dbb73c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./favicon.svg\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04965d84-2551-4d6f-a83d-4db1cc2c6cd4", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./manifest.webmanifest\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3150f4-4491-4186-8cf4-1a090be3d230", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"https://docs.openclaw.ai/web/control-ui#blank-control-ui-page\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db41b25b-f42a-4fa5-9d84-d4d987149cd5", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'html>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68664033-ac2e-4ded-b454-9777d982e8a1", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'html[data-theme-mode=\"light\"]']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0197425b-3df3-4d94-93b3-f783cc0e7910", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'i']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb8031b-4289-40a6-8dbe-efad2f826a97", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'i++)']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d06f590-a747-4e17-b082-fac159fe45e1", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'id=\"openclaw-mount-fallback\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b461f9ec-6e97-4f6e-86ca-fdb8278e3016", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'id=\"openclaw-mount-fallback-title\">Control']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963b1b4b-7bfa-4940-bd0d-64ced3a27435", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'id=\"openclaw-mount-retry\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb1f70e-7ce7-484b-9942-f836fa55a60e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'id=\"openclaw-mount-wait\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de0d1d5-caa8-4b6a-9487-f3ebce7cff12", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'if']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd530d0a-1c47-4c20-8890-d8ff375b846d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'in']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d920c2-29aa-4af8-8cdb-881ac887da52", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'inherit;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb9db4a-a3aa-4917-9452-31719bb34944", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'initial-scale=1.0,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f11efa-24c6-482e-bf82-c399912b7f83", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'keys']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81ce88f-668f-4c3f-88fb-79f7134b9e0c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'keys.length;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc05e43-f796-4d50-837b-8e844d8e1f2b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'knot:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba67d7d2-5605-43ed-ac75-3a4f770a699e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'lang=\"en\">']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcefcec2-dd6c-4fe2-88e7-b9f2317766c6", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'legacy']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40dda4b-6a3d-4e5f-b4ff-3a8666911122", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'legacy.split(\":\")[0]']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a914a2-a0ef-4404-995e-255ffee25b3f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'legacy.split(\":\")[1]']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecab68c0-a74a-4107-a1e5-d4f59657c803", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'letter-spacing:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dab65bd-0a76-4e20-b96a-6a5757f2e4f3", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'light\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1e0239-5fe7-4685-af09-0c44874aa492", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'light)\").matches']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0400d1b6-881a-49b4-b255-81cb01175df8", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'light:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f85820-d6d3-4b4b-b6ac-887ce2c80716", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'line-height:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe528d26-1c2a-4759-9bb3-fe81186f7668", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'loaded']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062f4ca1-6091-4352-95db-8bb416b5c4d6", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'localStorage.getItem(keys[i]);']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540a1e39-87cd-49b1-90b3-f455da12defa", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'm']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8000569-e113-43ac-a0f1-1944691e9b0c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'margin-top:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2c7d82-c26c-4268-bf55-a983244957ad", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'margin:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274aed65-1876-45ee-9bdf-6bcbf576a86f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'may']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72647c9d-0ec2-471f-8f30-373fd642a819", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'min(100%,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd78733-658e-4aa8-be02-4dc6e72ca62e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'min-height:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504d7bbc-16e0-41e0-bc41-8d5292311082", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'min-width:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472a4b7f-3188-42f7-8a5b-1626fe10a7c7", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'mode']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad2ea28-580e-4180-b043-3dec00f52fa3", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'module']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd6bc50-b683-44f4-9a47-9899803c49e0", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'mount-fallback__button--primary\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737c96a4-05c1-48c2-9f1f-1c41f09ffb48", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'name=\"color-scheme\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f403580-1786-4164-9800-bbe3e1d89965", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'name=\"viewport\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df141132-7462-4dfe-95b3-e4cb83bc3065", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'none;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621119ac-b3d0-48d1-af94-4dbcf8b70222", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'noreferrer\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ebc29b-a0a6-4625-ba7f-96a100b7b324", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'not']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d950ee-af32-4909-b645-d283a6fcfc41", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'on']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4c14d6-d9ae-4d32-9708-1e54f504554e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'openclaw-app']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac187a6-734a-4366-88d3-36cf2777c419", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'openknot:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebda8893-82f7-43fe-8677-1dccdab7e2ab", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'or']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8f9535-4622-4074-8826-33bc253f1b02", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'outline-offset:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b68e9d-a5b8-4400-9245-9807406a820f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'outline:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944c0ca1-4c34-463c-a062-3df84d713e05", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'p']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9116edc0-1de6-4756-94c8-7fae58119200", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'p,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61658d44-5376-476e-bb6d-b819ce5ef860", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'padding-left:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15d41b6-8d71-4a9c-bf43-83ae407b4557", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'padding:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f78802-1386-4b8c-9d48-f035253280d6", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'page,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7d81b7-3900-401b-a069-3775cc748d1b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'pages,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66166a5-36ba-4255-9bef-3556e1ac8ac1", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'panel']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ca5319-fc31-44df-88ea-2d23e8377bbe", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'panel.focus']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acfefba-9604-4fbb-ae5d-acb3ec5fd698", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'panel.focus();']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063519ef-69bc-4a06-b50a-f883782e82b7", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'panel.focus({']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be765ea5-e85e-4fcd-877d-9bfa568f694c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'place-items:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c78a1e-ba3a-4ea1-8a65-d241abf509aa", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'pointer;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2c1a52-4a4f-4b68-856b-350f753b48ee", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'preventScroll:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d99905-c407-45b6-9123-78f306e474b8", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'private']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b68339-9490-45e3-b3d2-0c6b048ca185", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'profile']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ad128f-c003-46df-8e80-7fa5237ee238", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'raw']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b31f01-7dfb-489a-89a6-8664a6fbcf71", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'raw;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4fb9669-c277-42ea-aec3-2c3b48512077", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rawDelay']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e56998-edb2-4dbe-a3cc-890cff1da1f9", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'register']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebd628b-fbc7-49fa-b49d-236c8ceed063", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rel=\"apple-touch-icon\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063eede3-48b4-41cf-88d4-3d9914747c56", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rel=\"icon\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4ec864-6f31-4cdd-addf-bd0c16786275", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rel=\"manifest\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c76763d-8143-42ce-a68d-aa414ab134c7", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rel=\"modulepreload\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9242a08f-215e-4eaa-9f5b-1b50678b5071", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rel=\"noopener']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ec5434-a598-4f6e-a80e-f2460d8e655e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rel=\"stylesheet\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22c1854-016d-49b7-83d0-28dd4af294ad", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'reload']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1168cd18-d054-4826-9566-c05a301da04f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'resolved']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec42f0e-0733-4ff0-bb0e-d72a271e5272", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'resolved);']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4928ed-396a-4c7c-919a-4064332df41b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'resolved.includes(\"light\")']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff568a83-d2d8-4b39-854c-de7c2e84e9f4", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'retry']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a3a82c-e2ea-453e-819e-d9790e4cae4f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'retry.addEventListener(\"click\",']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44bcd21-a461-4df8-b71d-824823533e34", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'return']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2d2054-cc86-415c-9206-5721a08365e8", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'return;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6a25ed-f638-428d-a46c-ecdfb978771d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rgba(0,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21bf37ca-32ce-447e-8a2f-b6059ebd9662", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rgba(148,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0710fb7a-351d-4801-b1d5-449b7d17d0c0", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rgba(15,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3fde3f-0f71-4636-8c86-84a14d21e5b6", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rgba(71,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92dae7f5-c291-49e5-b986-b3cceda6d539", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'role=\"alert\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c96f7a-8ee1-40a4-8e26-3bc50168a9b7", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'run']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d219f16a-ccb7-4b52-98e9-5393fb94ed31", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 's']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80abeb5-158e-47e6-8385-653bba92000c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 's.theme;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44727e73-e96c-4f0f-aae7-ab6ec2681dec", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 's.themeMode;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8440b68f-413c-4255-8332-908340791a54", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'sans-serif;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80581b1f-1cb8-496c-9e01-786243b0e912", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'script']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679579dd-8dcc-45b8-b1e3-e53c297be348", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'showFallback()']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf66895c-cebf-4194-91c4-9480ea3a9b20", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'sizes=\"180x180\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c452b6-afd1-48be-b443-d0cf5d548b8c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'sizes=\"32x32\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c427d4c-533e-4a39-9e82-f309c3502f37", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'solid']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8cec1a-b807-4637-97d6-015dc72fbec5", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'src=\"./assets/index-B6YtUsIL.js\"></script>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d557e01-1ba5-48b5-86f3-81a424caa9ce", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'start</h1>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8007430-3777-4904-8ff9-f4fc9aefb8ff", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'static']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0618f0-fdeb-4509-acc1-b2a5902706c8", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'system-ui,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d28d74-85d6-4e2b-bc7c-11cd17ad59b6", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'system:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0516675d-542d-4558-bd40-4d2279c55119", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 't']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6ea525-0ad6-40c8-a36b-cca3f2045f9f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'tabindex=\"-1\">']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f0ac4c-4da6-4914-b613-e7cc04541427", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'tagName']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d0bc93-c6a6-455f-aa61-ff24598892c7", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'target=\"_blank\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07af8e2-6579-43c6-a6ef-6554ea2994a6", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'text-decoration-thickness:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91335793-f784-42b7-8c10-d26ba4a52d13", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'text-transform:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbab5e4-8ddf-40fe-adaf-1387146b51f8", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'text-underline-offset:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f4fe74-33dd-4d42-9c6e-2d26c85d2999", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'that']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd8ebf9-0945-4929-a089-a6265a0d5ab6", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'the']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28f9642-5d4e-4b96-9251-291a98de52b3", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'theme']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31e2b76-1ef3-4a5f-9094-5bb79a368569", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'then']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0559108f-947b-4805-bc9d-822af80a6244", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'this']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b9e0ff-709a-4ee1-b783-0fdd2cfd48b3", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'timer']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b555fec0-2eac-49de-956b-7b715101613f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'timer;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d764115d-2681-4b31-a79e-4e694703cd95", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'transparent;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5c354e-70a6-457c-92cb-2a533c07d911", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'troubleshooting</a']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e3dfd1-a138-4b14-8f80-ec7493dd06dd", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'true']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1c3fb0-6449-45e7-a14a-0247e3c7af8b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'true;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1a2f75-2e2f-4cfd-9a16-e98092d6e462", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'try']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb6a36a-f994-4581-99f8-3a7cbeddbd94", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'type=\"button\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bf12fe-22d6-4981-956c-9878feafd613", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'type=\"image/png\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18dac20-5409-4b82-b36a-2a1ab1dd10dd", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'type=\"image/svg+xml\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7b92fc-a168-401c-a190-f6e4aa8a1e71", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'type=\"module\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a2d4b9-3330-4434-a02b-d5b8233616ff", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'typeof']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14596c19-d295-4407-8c13-31a2fbe73a85", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'ui-sans-serif,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ae2821-dfd9-44c0-999a-d06474d1c25b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'ul']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab11ec0-52cf-404c-b6bd-68ffd09b6f5b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'uppercase;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbaacd08-ef77-45c7-b7aa-0e6fb94c57ed", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'var']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d162ae-5289-4055-aac1-aca4fc8d3236", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'viewport-fit=cover\"']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f3a828-e101-4777-b587-b41de07cbe2f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'wait']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb568fd-ab81-4b86-a2b3-8ebd8df2c27e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'wait.addEventListener(\"click\",']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d701ffe4-b867-4d98-b3a3-fc76f076eb10", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'waiting']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee47285-797f-48de-b50f-244ede431c94", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'web']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6eea521-01fc-4eff-9a35-e6ae56461711", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'width:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b6a717-acb3-4cd5-a229-a6cc26f84b2a", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'window.</li>']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f7385f-e926-4bbd-a1a3-2f11ba2a9da3", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'window.clearTimeout(timer);']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430bdecb-29b3-42b3-b6f8-33f634901db9", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'window.customElements']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a75e9c1-ab22-4b5a-b24c-e616cb98167c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'window.customElements.get']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1243cab-8a24-4cf2-a5c3-49d866d7aadf", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'window.customElements.get(tagName),']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abfcbba-add1-4603-b58f-e6d5e2a4109e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'window.customElements.whenDefined']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3056c7-ff60-499d-ab43-e3a248831ead", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'window.location.reload();']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f93931-723e-447e-9ee1-0f1edd6c7b82", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'window.matchMedia(\"(prefers-color-scheme:']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7bede41-e7a1-4456-8b6a-7d8bf8e86d7c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'window.setTimeout(showFallback,']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a426e807-6d7b-4d19-aaeb-485643bae8ac", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'wrap;']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d57be6-e4b6-4aaf-8ae4-3ee77dbf0e45", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '{']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c9f491-68f8-45ab-922f-d5f70e58f2a2", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '{}']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29820acc-e268-463d-8f4c-ac219d7f9462", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '{},']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84c1d33-1cf4-43df-a608-044c5dd40fb4", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '||']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f569d7f7-d8aa-428c-9c18-df123513b3e3", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '}']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563782a3-b7cd-4e07-b3eb-a235289dbff1", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '})();']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7dcc4e-7564-4866-98f2-70b4c32948d3", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '});']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d460bae-076d-4156-9c43-fbc436015ba0", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '},']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b427584-17f1-46dc-b6e8-84bf3dce8089", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, REDIS, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '};']", "pattern_type": "stix", "valid_from": "2026-06-16T00:00:00.000Z", "valid_until": "2026-07-16T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-16-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:redis", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40888e1b-64df-443b-875b-b4e477482ca3", "sighting_of_ref": "indicator--41e3ea8e-9aa2-4c44-a85a-40166b0c2f62", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71399b55-7d7b-44a4-b3a1-9bb2dc0851a1", "sighting_of_ref": "indicator--8c8f9050-916c-42f8-bc6a-362fdeb84d1e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ec24cd-cbd8-4885-a45d-ad815f27ac95", "sighting_of_ref": "indicator--7efb33f2-8a5a-40ee-b613-2ad9ce6ad996", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6a47eb-f1e8-41ad-a28b-9f35c2f86767", "sighting_of_ref": "indicator--30f4f9ba-4e47-445b-b6a4-a75316ca7f04", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283e1bb3-a39f-437d-8526-e229edef53a3", "sighting_of_ref": "indicator--73124879-7167-4916-952f-fc70cce919cf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2882c088-92dd-40b8-b251-348d7e0b2adc", "sighting_of_ref": "indicator--5b89f651-80f9-4c5a-a30f-a9d229ff6932", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a06891e-ac50-4bfa-bfc1-360d4dcbeb48", "sighting_of_ref": "indicator--cbe93c92-5830-4421-9fac-9932a80bbda3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2baf3e4-fa28-4c8e-88f8-5aa072aca087", "sighting_of_ref": "indicator--a92eae88-7492-4f6d-89ab-b677d20beaec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da317a0-615b-4e3c-b70f-6784990aaafd", "sighting_of_ref": "indicator--db626187-7ef0-48c3-81c7-6cb45b4ea1a2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23037d22-62c6-42a4-aa9b-5a199afaf366", "sighting_of_ref": "indicator--48593fd3-73cb-420d-b6bc-c58a0d56b873", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccc0f63-9694-4c51-a971-0c98d742b96d", "sighting_of_ref": "indicator--bb4ed264-4462-4e45-adc4-652129b83b48", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61f0186-1f1e-4cd6-a01a-95131c48fba4", "sighting_of_ref": "indicator--c752ec58-a75f-46ed-b45e-914afc5dee84", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cd23a6-0117-42a7-a269-4b1935c540e3", "sighting_of_ref": "indicator--82885440-fceb-43f5-acd2-dcd573b54368", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f885a4-08b2-4cd7-9144-0afdaff03582", "sighting_of_ref": "indicator--36271ef1-c17c-48c4-9a5c-ddb8fb452022", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e49f378-a9ff-45d1-98b8-3272f385d96b", "sighting_of_ref": "indicator--6510502e-4400-4514-99d4-a4192179c2bc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d2dfa9-ece7-4d49-b2f2-c26dc7b81a2b", "sighting_of_ref": "indicator--62b20ff7-a746-4877-93e1-f78742035bd3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8060ce4-f687-459e-988a-c6439f4ab28a", "sighting_of_ref": "indicator--6a99e74e-0210-4b47-a48b-39ea4b740e6b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ad5972-8b3d-4ec6-949e-d657395c37ee", "sighting_of_ref": "indicator--449a21ed-981e-4d61-a0ae-172fb12b8619", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bcd4fa-a3ea-4603-8d53-b310d868cbac", "sighting_of_ref": "indicator--fe0f9c23-ff3b-4402-a420-494deb83ea31", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689db965-4a33-43a4-9f33-d267dcccd814", "sighting_of_ref": "indicator--114aac2f-3733-4e4c-9d05-5c10e752f963", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad658014-5231-4c89-a64f-4bfd065d1087", "sighting_of_ref": "indicator--b71dfdbb-c842-41d2-a978-d1715e9bf38c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e28257c-b085-4391-9121-fb9c8f14dfd2", "sighting_of_ref": "indicator--a2e1cdf5-3884-44be-98ae-594f1a036b56", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f47b5d3-bb70-46d6-809e-cd8c7e9ebc4f", "sighting_of_ref": "indicator--103abb78-3712-4cdd-aa7c-d44d15c2a27d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a306dbea-2285-414f-96cc-2b0497beae44", "sighting_of_ref": "indicator--980f6045-9b76-499f-a621-9364743e580d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99153f1c-0885-47b0-b1c6-4b5f501188da", "sighting_of_ref": "indicator--ff48b370-df68-4c57-84ca-7fa56f13dff1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78983cf8-f376-4b30-8deb-b353b49344fe", "sighting_of_ref": "indicator--cb7d9810-dfdc-4bf1-afdc-7a9374d6541d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36693eb1-f2c4-406d-8383-d6206fd54aa7", "sighting_of_ref": "indicator--5d965ec0-6d1c-4dca-aa9a-4560a9e4236d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bafbbeb-28ae-4626-b130-db7bf7d08390", "sighting_of_ref": "indicator--df0dc8a4-971e-4f31-85b6-bc17c9bfa2dc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8a7fae-075d-49d4-8387-5e445ae9702a", "sighting_of_ref": "indicator--a62760b8-3b41-47d6-97a8-dbddf0b592b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81dd002-e04f-47b7-bc44-6ccc2625d2e7", "sighting_of_ref": "indicator--136d6487-fdfa-411b-b331-e5f8ade81e9c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35839b8b-813b-476b-8fc9-ca5f13f53df0", "sighting_of_ref": "indicator--45ffeb10-2163-4931-8169-bd4538190489", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91075f47-53aa-424d-a216-8e525763f11c", "sighting_of_ref": "indicator--117c8b3d-ff96-41d7-baa4-96dd6bfedb43", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b561575e-214c-40f8-9c36-17a6382942e3", "sighting_of_ref": "indicator--c5cb7ab7-fc24-47a4-b49f-32769ae3e4c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf285c55-5a95-4cdd-aae6-822f1ebee483", "sighting_of_ref": "indicator--56f7ab73-0f01-4759-aa15-b7a2d2ef350d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b98ec65-4042-490c-b3bf-1f03832d5688", "sighting_of_ref": "indicator--75371e3b-65e5-4998-9e10-4d559dea18f3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017fcba3-f110-434c-a421-f930638c164a", "sighting_of_ref": "indicator--a2cf8322-fe81-4a01-8cec-c94a4acaf578", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b17405-3692-4b76-9951-73f020b88dce", "sighting_of_ref": "indicator--6037e657-e2e7-4ed5-84ff-d5e41a6ac6d7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58814ae1-8bc7-4f04-9435-94667d89a16a", "sighting_of_ref": "indicator--ad273149-86aa-4093-a098-7cd0b1aace6e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be9ce82-ed2c-4815-b9e2-9ced7b208b8d", "sighting_of_ref": "indicator--df46f5a2-a25c-46cd-a99f-0c9411ec847b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52d9485-bc28-40e4-9a7d-e3d2559ba510", "sighting_of_ref": "indicator--6f3d1251-35ab-4493-800d-bda8fb300725", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3f4213-3b6b-4720-9d54-c0ae8f02c11a", "sighting_of_ref": "indicator--fb95e1ef-91a2-4c73-a8d5-636cab290118", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1f43a2-fe69-49ad-ad9b-dc5e8ac4e4c5", "sighting_of_ref": "indicator--7a1a8718-6be1-44db-83c0-91076f61e7f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cf520b-5d5b-47a7-b37c-12d00ce90975", "sighting_of_ref": "indicator--13d319a4-c8e0-4f5e-8a4e-946b37126314", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e57bee-61aa-4da8-9082-af2a5104bd84", "sighting_of_ref": "indicator--982c7003-6f7e-49fd-a11f-e01be3e27f1c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1be6cc-10b9-4ef9-8647-151a1489fea1", "sighting_of_ref": "indicator--43a373b1-16ce-4386-9e22-031e43ac79c1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d495ed-79f3-439c-bf11-472268f1ef8d", "sighting_of_ref": "indicator--5528ea5b-3e89-4e7c-9e62-e858552043d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9ba4c9-746e-4919-b82f-a1d0f013e0fc", "sighting_of_ref": "indicator--b6829aad-bd34-4999-a56a-55bf01f575a4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8c8263-ae9e-42f9-afce-a4fea8aa7735", "sighting_of_ref": "indicator--ba60b218-4eb9-451b-8b1e-54cc7aca5709", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ae0f85-0bee-4bca-88b2-fc0cc1afa984", "sighting_of_ref": "indicator--7ce3abc1-8294-4411-a8db-48a22330d04a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb90feb-b1a3-4fdf-98b5-a7ad87402e37", "sighting_of_ref": "indicator--0c4addac-33f9-457d-b3e2-4320625e70e1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6564dbf-3b35-4145-b404-c9c231311e58", "sighting_of_ref": "indicator--f61fda30-e41d-46de-a34e-d13468d8f004", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922a733f-3ea5-4905-a8bf-5adcc8d3e868", "sighting_of_ref": "indicator--ff1b46a7-c63b-44ca-8d64-0b699af2fef7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc98bff2-6622-4d61-be45-33eee8d4c7cf", "sighting_of_ref": "indicator--8275e747-d3c1-4d32-90c3-01c2ae16e3b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f06299-03b5-49b1-8571-80277bcba751", "sighting_of_ref": "indicator--9d9651a3-005c-490b-8505-96428c302775", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4671b47-5847-4a10-b019-94409086c368", "sighting_of_ref": "indicator--9360bd3b-d7c9-4022-a059-a3a11d377b41", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94aa6de0-b3ec-467b-aacc-663c6c0ce082", "sighting_of_ref": "indicator--1b7fedb5-d436-4bb2-84c0-5c4f49fe81da", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d5976f-04c1-457d-a352-af64fc2a7565", "sighting_of_ref": "indicator--ddf57ea1-3273-45d8-b944-58ab1b936870", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e1e70e-c3cf-4b30-bf89-bf29ca2432dc", "sighting_of_ref": "indicator--7a640873-55df-4f10-beff-962762cf6154", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b15bab5-a8bd-4a64-97fe-588067838b5d", "sighting_of_ref": "indicator--de1373f2-c9bf-4436-b18f-04ac9a4fa99b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7160d957-03a0-4692-8316-7e4ad02c77ca", "sighting_of_ref": "indicator--52d2c1d4-8f45-42b0-8dd6-b6c18809f5b1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c035d0-24e4-4cea-830b-e07faec8043b", "sighting_of_ref": "indicator--9c44d00b-c1a5-4b8e-88e5-be4ee86df109", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d20aa28-3299-4e3c-b013-66e539c30147", "sighting_of_ref": "indicator--a7fcbca7-0041-4481-af74-3d6605fe56b1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca18761-2656-44c1-b5a0-072b635b7a4c", "sighting_of_ref": "indicator--7011c14c-289c-4c27-99bc-1128ae313369", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec994b0-c615-448c-9859-3a37498b8110", "sighting_of_ref": "indicator--7efc3b5c-af28-47a1-a4f5-317b54e8539e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80791e3-eeff-4fed-be52-3e74b3622651", "sighting_of_ref": "indicator--f284d55c-1c32-45df-87f5-137f204c291d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfaf72d-a486-4014-8317-a0cb9a0b0f1f", "sighting_of_ref": "indicator--f5c3ccaf-ba94-4d92-8191-3a1c7cd87984", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90cb89d-1ec4-416f-b76d-58ffbc2a8189", "sighting_of_ref": "indicator--c30768ab-8268-4147-9ba7-e450fc1ee90f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931e68d8-a522-4c57-8276-06b13ad76a95", "sighting_of_ref": "indicator--c69c0419-8f4a-4e71-bb15-ee5c6f80578e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4b58ca-9fca-46be-98c7-2a2037b65602", "sighting_of_ref": "indicator--0b19f3f4-1f86-4c48-97ec-7d8a6406c72c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee1d4af-4ec5-4230-b9fe-85d026b73621", "sighting_of_ref": "indicator--db4e76c6-6a66-448f-8f56-135e854cffff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e2ffab-bd91-4197-b612-d072e4a37241", "sighting_of_ref": "indicator--d9dc4eac-b4b1-497f-bd5d-607aac52a03c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214526dc-c09c-4107-9018-9ef9b1ee774c", "sighting_of_ref": "indicator--089a410a-f709-4317-a98a-d8235e80d649", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7770d972-baee-4c18-b3b9-076845eb2e7f", "sighting_of_ref": "indicator--3aadfa95-18e6-4d72-a9de-ba480a748f56", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5681c0b9-c5e4-4a17-9dc1-4b01670b8a92", "sighting_of_ref": "indicator--1c50c68d-19f8-4ca2-96bb-1c5cf9c444ea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3ef848-f6ed-4194-99e1-40a29792f63f", "sighting_of_ref": "indicator--997e9ed6-c942-46ac-ac7f-3f026b671c5d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2636ffaf-b62d-407b-92f9-30d0d493c421", "sighting_of_ref": "indicator--d71de3cb-1f71-4bd5-b9ae-b607bbc211ff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3275c52-d407-4500-bedf-24af58c44379", "sighting_of_ref": "indicator--1c312de9-d3b2-40bc-b3b3-ce13af81f673", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569ce708-a02d-4a7d-bea6-8c9a87d0d117", "sighting_of_ref": "indicator--ee3cbf72-f394-42b8-abf9-eda9b6f5d90a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a541171-fa5f-42b9-94ac-a30d35978437", "sighting_of_ref": "indicator--200f5abe-39a8-426a-ac14-aaba44d15dd8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902d033d-bfcf-4de9-bfda-385ab003a576", "sighting_of_ref": "indicator--0b3d7a15-dc50-454b-891a-2451673c1fb0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d04049-2740-4c72-9132-b5f35241cd9a", "sighting_of_ref": "indicator--a3d9778c-891f-4ffb-8193-ab84c07e4eef", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699a60ad-bc18-40d5-9bb2-aff650799a1e", "sighting_of_ref": "indicator--ab292990-0b21-4062-b4f0-fe9dc5dab592", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39788e03-f201-44bb-85c3-3e135949511c", "sighting_of_ref": "indicator--064f0983-3186-4960-8e78-2cd29c5beb49", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc76c5e6-cd33-473f-b946-ae483fd15dce", "sighting_of_ref": "indicator--60eec8ca-3c98-43ef-ac42-f18d8f457e00", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f278de-cca6-4a5d-89d2-cf673a925017", "sighting_of_ref": "indicator--1d61c91d-c8f3-40ae-b098-d15bbadd988e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc8f09b-a986-4dc5-affb-92394dc7ebdf", "sighting_of_ref": "indicator--accd1d65-7e13-4aff-a0fd-bc0ccd057b70", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ccf686-879f-4283-965e-04162b337d1b", "sighting_of_ref": "indicator--f494ecae-37a6-462b-8dbb-1de8bce09718", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3fa833-cb39-43df-a699-282ea31da999", "sighting_of_ref": "indicator--535d9f8a-d35a-465e-9bfe-ae9187399fff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9897d2ff-ef04-4249-9adf-18c5d60beb17", "sighting_of_ref": "indicator--147a6d0c-6bb6-4766-91cf-e8081c0220b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2171f87e-fdba-46d9-9181-07c36c591378", "sighting_of_ref": "indicator--ccabcbe4-9c47-4f1a-b89b-a8afce26a8ed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee3be78-c55f-46f2-adb8-3812250430ee", "sighting_of_ref": "indicator--ccabcbe4-9c47-4f1a-b89b-a8afce26a8ed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d149816-74dd-493f-b127-074b8b974bbc", "sighting_of_ref": "indicator--ccabcbe4-9c47-4f1a-b89b-a8afce26a8ed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dff7126-462f-4bfd-aee3-f4cd3595a0e6", "sighting_of_ref": "indicator--bfd6ccaa-02fc-4fcf-a0c7-0905535257ff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f267e44-4e1d-4391-a6bf-daf4c016bbf4", "sighting_of_ref": "indicator--7cecb74a-8a70-4468-b918-df93c439047d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21ba247-d4e9-47c2-90b6-e5a3985233a8", "sighting_of_ref": "indicator--bb7abf2f-3b14-43b6-8e42-82aac1e4b247", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0096b052-380b-494e-8307-f02a7661a057", "sighting_of_ref": "indicator--5bd068b2-8ac3-40d6-a9bb-7e5609a6ac19", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80939968-46e1-4152-97b4-8ba2b4603284", "sighting_of_ref": "indicator--d5dcbd64-c3cb-49a9-bfe4-a35416fae8a5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c44c63-40d4-404b-a1a6-4d3197f6a040", "sighting_of_ref": "indicator--1bce8f76-086f-4734-b122-d151c4065896", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcc52c8-b756-458e-9c72-a7f1e4effc48", "sighting_of_ref": "indicator--aad9cb3d-a9b4-4329-b1fc-e3081486b5fd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90b31b7-ed3c-459b-8868-881e06c79c31", "sighting_of_ref": "indicator--543fe7ef-7d2f-4d9f-a26b-a68d27004980", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b7403d-af45-41cf-baa6-e7dab41bdad0", "sighting_of_ref": "indicator--e9093ea2-838c-45e4-80e8-235d09e3b140", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4af27b7-8daa-4e52-8c81-b174ccfa74ea", "sighting_of_ref": "indicator--77c31750-fb01-4397-9870-8168007e8275", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e114dae-a4f6-434a-b809-492382ebf329", "sighting_of_ref": "indicator--8a6abcba-5c26-4990-8599-65a22f20d911", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e024cc6-0451-4dc1-9587-80e8ff8e748c", "sighting_of_ref": "indicator--8fd25c4b-5c4f-4d0b-9078-7504aec68e98", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a252aca-09eb-4d9a-8481-0dcecfb3a29e", "sighting_of_ref": "indicator--3b8979d1-a5d6-4b0e-b997-a9fe53b132f7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce326bb-9f0c-459c-8094-1b9fe4c9182e", "sighting_of_ref": "indicator--63939163-d17c-45eb-9e9d-dff775c7b205", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8193e9-6951-4806-a30a-4010f34f492c", "sighting_of_ref": "indicator--fe2ec1c8-d4a9-481a-b5fc-db63ddd11801", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c45f879-840e-49a8-94e0-61d3e2094f66", "sighting_of_ref": "indicator--a19ed70d-96cf-4add-81fa-22d5b823e57b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915a75cd-5dcc-46f2-8a1b-0d2f3f27ca05", "sighting_of_ref": "indicator--5394ff9e-3b4b-4aed-8ac7-9e15fc6135e4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c369bb87-d4ad-4802-9f29-324898eebb9c", "sighting_of_ref": "indicator--dcbdeed2-ec1a-45e4-bcc3-db071fc841c1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b06bab-16ce-48b2-851a-ca19ce83a4de", "sighting_of_ref": "indicator--43cd6eb6-d164-4f75-b46a-f5626a0b0e98", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c836d7-2a9c-4afe-b598-505cff060f8c", "sighting_of_ref": "indicator--c616b178-971f-4722-b28f-d6fbad322bea", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473f701b-2974-4894-9b97-34553c2571e9", "sighting_of_ref": "indicator--db1719f4-6450-4b61-95e5-94d9c74e48c5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793218e3-0cff-402e-b68a-336af652cbb4", "sighting_of_ref": "indicator--e4f072fb-d18f-4fd4-9331-e1ba132b785e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68663c9-d91d-4fb2-862f-e3e0012bb4cc", "sighting_of_ref": "indicator--52339e07-7b8f-4407-b41d-d6dea01b36f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c82753-ab80-4501-8521-b375937b4904", "sighting_of_ref": "indicator--0021ac39-8400-4173-96ff-32cf33fb7394", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1552b798-1a9b-45b6-980b-90689b7e77af", "sighting_of_ref": "indicator--0021ac39-8400-4173-96ff-32cf33fb7394", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f62eeb-b0f6-4b80-b886-f68125bdb4a3", "sighting_of_ref": "indicator--e623b18b-8aec-4c51-8b07-383851a9ca98", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f3d9ec-8f38-45cc-968c-cea7cf446713", "sighting_of_ref": "indicator--6bbf4dbf-d9e9-40ab-aec0-895730eda940", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad63aaf8-ca82-4ac3-b489-08085e06bba6", "sighting_of_ref": "indicator--6bbf4dbf-d9e9-40ab-aec0-895730eda940", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59395fb4-0916-4dab-9f1e-08e8061d17ec", "sighting_of_ref": "indicator--90702657-a005-4e7f-b6f8-cbedef55b5e2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648f2db1-5c9c-4eaf-bdc5-1292e53b2604", "sighting_of_ref": "indicator--90702657-a005-4e7f-b6f8-cbedef55b5e2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e75f2f2-ac8c-4574-9daa-eec98ed0b046", "sighting_of_ref": "indicator--f1ff12a4-82bd-4b36-80d7-230ac906dc3f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4a4a62-a664-43df-81ec-8b3556e6f997", "sighting_of_ref": "indicator--b91cd285-62af-404c-a6fc-8b043f896622", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bab58b-6cf0-4ad5-986b-50cc3e0bdbc7", "sighting_of_ref": "indicator--46c7d647-ba2e-4d0d-949e-fc37e2bb3532", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306ad37b-6c21-403e-9827-5b061e2c85d4", "sighting_of_ref": "indicator--ed37cd93-5858-497e-85ae-f2df8cc571ac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab79f6c9-40dc-4e03-9185-2618588eecf3", "sighting_of_ref": "indicator--92725058-7b8e-4cce-8cd9-13a8f5aea6c4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9cbd76-1d28-4e99-a555-8c08ddb1787c", "sighting_of_ref": "indicator--001cbdce-91da-45f6-af77-1339e5d89ca3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d13c28d-28e4-445a-a5e5-d4f44e4680ff", "sighting_of_ref": "indicator--86104b03-da43-483e-812a-a3a269b6f00b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1374b9c9-cc96-4ba5-b801-e74ad047444b", "sighting_of_ref": "indicator--d75c596c-cd6e-414f-83a6-fa010cc8ed9b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27502857-6bff-435a-bfab-e364b5de1ab6", "sighting_of_ref": "indicator--c4358038-6ae2-4f46-a506-02219679492d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b56ce9-3ca6-42ba-a861-80994e5eecff", "sighting_of_ref": "indicator--9030c3fa-431a-41ed-9d63-580320589b36", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe40f32-045a-48da-b701-270dca1704ed", "sighting_of_ref": "indicator--50585b3f-b78e-415c-a88e-ca244b0974a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376de0a6-377e-4fde-aab3-b6e05a2a2c9e", "sighting_of_ref": "indicator--50585b3f-b78e-415c-a88e-ca244b0974a7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f004bb-0d01-474a-b9bb-a3da6862bd7b", "sighting_of_ref": "indicator--6318c99f-cb62-4405-8fa2-fd063107dcea", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32c495d-1011-4830-a460-2aba84389ccd", "sighting_of_ref": "indicator--41d45cd8-bda7-414d-a7f4-abc901e8fc0f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2114cb6-f311-4d7b-9dce-8792ec8e2667", "sighting_of_ref": "indicator--9497b734-26f0-4aac-ab7d-1c592ff1511b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627eec62-e543-4184-b8f1-7aaec9fc59c6", "sighting_of_ref": "indicator--87e72229-a4ee-4c8d-a2dc-fc233cae4fbf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcd55aa-c57e-4df6-9a73-f3851ba8dbb5", "sighting_of_ref": "indicator--9f6744c7-11cc-4991-91a6-bb43b93bd4af", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97279583-a2fd-44b0-a004-2f90f8c46d68", "sighting_of_ref": "indicator--9f6744c7-11cc-4991-91a6-bb43b93bd4af", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d791e2a-7bd6-4312-9bac-0f83956120b3", "sighting_of_ref": "indicator--ffc84e0b-48f0-4a12-99eb-ae2c95a1639d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1886370f-4b5b-4b94-829d-91c1df4bd904", "sighting_of_ref": "indicator--85139cf0-e70f-43e9-b9d1-ed7a12426ba6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf6f8a4-ae14-435c-8da4-0c14d10a2dd9", "sighting_of_ref": "indicator--839f5412-47ed-4a0f-9fb0-274203e67a11", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d117ccf6-ccac-4036-9574-1a2208f3b1d7", "sighting_of_ref": "indicator--9c906d43-372c-458a-97b6-85443366602a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a104cc-53a1-4560-bdb0-febf4b45a65d", "sighting_of_ref": "indicator--838a859d-7420-486d-b305-6ee319a28b13", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b965cffb-1f0f-4ef9-8e1c-60a819484b8c", "sighting_of_ref": "indicator--84eb4dee-1a0c-4e14-92c1-d8e80c7af524", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae94b1a-2ee0-490d-98b5-1c6ff1b04561", "sighting_of_ref": "indicator--2f6e8c79-f482-4cfd-9ada-6f29230ed3dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa3f47c-25d1-4c6a-8130-6b8a545d829a", "sighting_of_ref": "indicator--2f6e8c79-f482-4cfd-9ada-6f29230ed3dd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641d0a82-b251-4539-a2ab-04a7c39309eb", "sighting_of_ref": "indicator--2f6e8c79-f482-4cfd-9ada-6f29230ed3dd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655edca8-e54c-44fe-a942-95bcc991df6a", "sighting_of_ref": "indicator--4070b22a-b571-4ea0-93c1-0a5a357c469f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05d4f3e-e568-40b1-9f24-51c79ce39c77", "sighting_of_ref": "indicator--4070b22a-b571-4ea0-93c1-0a5a357c469f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612a0033-696e-48ab-b2f6-32e16b7848b7", "sighting_of_ref": "indicator--4070b22a-b571-4ea0-93c1-0a5a357c469f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0d83c9-f155-44f7-a405-fdc2d371c5f2", "sighting_of_ref": "indicator--187aa118-fbe3-4e79-b395-c934e64baefa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55cd373-e94b-4d64-94ce-69ab199f4062", "sighting_of_ref": "indicator--242cf00b-3874-45dd-ae67-b76597ca9df1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519a0cd9-4b71-4d80-a07e-3492b5516f51", "sighting_of_ref": "indicator--b9aa5bd7-1d32-4d1f-9494-419afbf1738b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427990b1-efe1-4bf9-bf58-eff0d27bc54f", "sighting_of_ref": "indicator--dac00aa1-32fe-48ac-84b6-903b92dc80b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e2c163-6e07-4271-ac60-f2b1f0286dbc", "sighting_of_ref": "indicator--bf87441c-2ac6-41cc-a55f-a01251c6f54d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bc3fca-60ad-4bb4-8082-2c17ef8bd3dc", "sighting_of_ref": "indicator--98cf2563-3dd3-43ee-9728-26bba95eaedc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541d5bb4-1b96-4661-9429-e3557d8b0b02", "sighting_of_ref": "indicator--da3dc367-e956-492b-8316-02d421f12aec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba1cd49-e90b-4de9-894f-01a92abd4b4e", "sighting_of_ref": "indicator--417f599b-6ddf-464a-8848-f8ec45fa3790", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b456b9-acd4-4288-b341-765754131369", "sighting_of_ref": "indicator--8a3a5d8a-5f66-4659-b2b1-4c45950f17b1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173c7623-9ebc-4769-8fc9-f49dbfab9858", "sighting_of_ref": "indicator--b24e8242-784f-4832-a230-6879c9a70e94", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc57c584-8899-45a7-848f-8f08f8feefce", "sighting_of_ref": "indicator--402661cf-fe47-42c6-a4aa-8f2499ce2007", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c704b1-e448-4dac-b5ff-732896ea2f42", "sighting_of_ref": "indicator--100be4f1-f563-4fce-bd9e-9e03237b5be6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f035e1-598c-4649-9fe1-f4709abe4491", "sighting_of_ref": "indicator--6aa2a166-0ff5-4870-b420-a7b27f56dd50", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f0df89-ae4f-4f54-ac88-f1887e72cf38", "sighting_of_ref": "indicator--6aa2a166-0ff5-4870-b420-a7b27f56dd50", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22914c0b-a56d-45fa-b517-44f23fa22845", "sighting_of_ref": "indicator--6aa2a166-0ff5-4870-b420-a7b27f56dd50", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c8fe3e-99d6-48d3-8747-06428b7586da", "sighting_of_ref": "indicator--4826e581-b65d-49de-9ce2-053bde828e38", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022351e9-4db8-4b73-9e66-17ab2a5fab8d", "sighting_of_ref": "indicator--598b3989-0ea2-4874-999f-57215d86bd4f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1e9aff-fec0-4bd9-8962-020c13b1d487", "sighting_of_ref": "indicator--598b3989-0ea2-4874-999f-57215d86bd4f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045a1d8b-6639-4e9e-80d6-df4c6817fa84", "sighting_of_ref": "indicator--598b3989-0ea2-4874-999f-57215d86bd4f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd3da0a-c550-4b9d-a350-e43d199082c6", "sighting_of_ref": "indicator--2295dd66-9077-464c-a858-048f72ad8e61", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8aa30a-c57c-482d-8ed9-18a8a70bb344", "sighting_of_ref": "indicator--f2b90a13-c55b-4388-a47d-cd5576aa0894", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0322c3c0-2a2a-4de1-ad6c-03982e768dca", "sighting_of_ref": "indicator--f2b90a13-c55b-4388-a47d-cd5576aa0894", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7163cd33-c865-4ac2-9b62-97cc91a88d66", "sighting_of_ref": "indicator--f2b90a13-c55b-4388-a47d-cd5576aa0894", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709b0c10-4c02-49b9-80d9-2992d704657d", "sighting_of_ref": "indicator--6c397cae-708d-4307-8d9a-3cefcfa9fa85", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b53d544-6aa1-4543-8e81-eddd4fa75841", "sighting_of_ref": "indicator--6c397cae-708d-4307-8d9a-3cefcfa9fa85", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3e2e9e-53a0-49b7-9a76-0070705aae07", "sighting_of_ref": "indicator--6c397cae-708d-4307-8d9a-3cefcfa9fa85", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e50280c-29e9-442b-bac3-6a10a5463ca7", "sighting_of_ref": "indicator--02058c0a-5f60-4a17-90a3-ed760f2198f0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c67598-8009-4c6b-8522-f5ec2df61f65", "sighting_of_ref": "indicator--bc831f12-2afe-411b-bc31-255217f00509", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f46c73-92cb-41c0-a991-47a9ab839570", "sighting_of_ref": "indicator--bc831f12-2afe-411b-bc31-255217f00509", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796793bd-12b6-4a40-ad63-ae6c1d0f0e0b", "sighting_of_ref": "indicator--15f9be6f-65d1-4748-a274-b9eba0af7f9b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d40773f-235d-46f2-aa3a-6cda5076e435", "sighting_of_ref": "indicator--15f9be6f-65d1-4748-a274-b9eba0af7f9b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5caeab39-7c5f-470b-8890-1758214a130e", "sighting_of_ref": "indicator--c67aa13a-38d6-423f-a48d-1aadd9cad397", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca17381b-57e5-4c6e-b72e-50a583d8d9fb", "sighting_of_ref": "indicator--332c8396-2373-48a5-9cbd-b20cb154025b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0bc0f7-d7cc-4dac-aa17-688c4d806548", "sighting_of_ref": "indicator--332c8396-2373-48a5-9cbd-b20cb154025b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf9c60f-8096-4bae-a827-196a0ce526a9", "sighting_of_ref": "indicator--a422aa84-47df-4364-9d5a-322b643f0491", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50989884-5c36-4f2a-87dc-fd668c99cf28", "sighting_of_ref": "indicator--a422aa84-47df-4364-9d5a-322b643f0491", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cc1a64-f6b5-4bf9-afdd-e743b44c2a8f", "sighting_of_ref": "indicator--a422aa84-47df-4364-9d5a-322b643f0491", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95f7467-9ded-4933-8418-a200f936b9bd", "sighting_of_ref": "indicator--58a57f64-f3d9-4fff-a8b0-73ad3782d55c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9115b4-f6a2-488a-a748-bec161bf4bcf", "sighting_of_ref": "indicator--58a57f64-f3d9-4fff-a8b0-73ad3782d55c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f40639-0efb-4ff4-8b38-66f67e46801a", "sighting_of_ref": "indicator--6e120575-678c-4cdd-9ccb-778d920e9d50", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bad2f0-d318-49c9-af14-77ed50cc1107", "sighting_of_ref": "indicator--dece2293-4ece-4427-a5ca-0f55a27b8a45", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff03ac1f-c0e3-465a-8668-569e41e564b5", "sighting_of_ref": "indicator--23e1cc06-0d8c-4b86-9967-8345c24d8050", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a5740d-40f7-47fe-8d61-5840772d6a82", "sighting_of_ref": "indicator--800e0c81-1aff-4da5-bd68-989a02ebfb5b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f574fb0c-6a4e-4254-9086-a8aa4ab49df9", "sighting_of_ref": "indicator--a8a199db-3949-4947-94ab-c57092b17c84", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f64e24f-f228-4ebf-bda0-17c46275a48e", "sighting_of_ref": "indicator--b37b4c32-f54f-4daf-8523-94a9972167b5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5022ae-5e8b-4283-a6cc-58d136f90584", "sighting_of_ref": "indicator--b37b4c32-f54f-4daf-8523-94a9972167b5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82a24ec-83a1-4a40-b70c-f9e04253e11d", "sighting_of_ref": "indicator--2e154a4f-435e-4d73-a6ba-3a09d5369dfa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4d8176-c98d-454f-bec0-b5efa41ac932", "sighting_of_ref": "indicator--2e154a4f-435e-4d73-a6ba-3a09d5369dfa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2b3f19-da7f-4384-9e75-c7e666239133", "sighting_of_ref": "indicator--892ab55e-f47e-48ed-b83b-c18d5290c58c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fec37a9-1b7e-411d-8891-7dfbcac4395f", "sighting_of_ref": "indicator--892ab55e-f47e-48ed-b83b-c18d5290c58c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b478b2f-3cb5-4132-b848-3f2a21ed4e33", "sighting_of_ref": "indicator--d80f6d23-eba8-4904-b513-e6740b798e6a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fd5aa9-942e-4a0b-be0e-6c29ab7f2926", "sighting_of_ref": "indicator--d80f6d23-eba8-4904-b513-e6740b798e6a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d12551-1476-4f7d-aa05-be8b3bb3c1e7", "sighting_of_ref": "indicator--24db3e85-224d-4bfe-be88-605ac43ef659", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ed168f-b0ec-4fcf-8344-ca6c86985f18", "sighting_of_ref": "indicator--36c51328-c451-4aec-b088-c53402b064ff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9e873c-1a0e-4f7f-8408-36e2508dc848", "sighting_of_ref": "indicator--36c51328-c451-4aec-b088-c53402b064ff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4125f9f4-b129-461a-a2f8-02a0a5f2831a", "sighting_of_ref": "indicator--9f37520d-fb04-4236-9e40-6840cc4060f6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae6627c-7715-4b64-8735-158fcc1824f7", "sighting_of_ref": "indicator--9f37520d-fb04-4236-9e40-6840cc4060f6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8c1fe6-2328-4e9e-9326-01536ce3f511", "sighting_of_ref": "indicator--9f37520d-fb04-4236-9e40-6840cc4060f6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c77e4d9-de33-4113-8668-7bc6eb36ccd5", "sighting_of_ref": "indicator--ae8954b5-35fe-4fee-a6ab-cfc983577b06", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a55d06-c83f-401b-b3dc-e074fe672f62", "sighting_of_ref": "indicator--8b8f36b1-4830-4244-b9f2-645c62dc5d31", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28e6e36-9d53-4741-ac72-f46cc3296def", "sighting_of_ref": "indicator--7873cebb-e27b-45d7-b52e-f6eb8a8035d9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a2c2d4-9947-4a76-8db6-11d28cb0c536", "sighting_of_ref": "indicator--49482b9b-73dd-41e9-a590-6a8c4feddf5f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03d804d-8d4c-4572-91f2-1c33e0231413", "sighting_of_ref": "indicator--86c2702d-f53a-4e93-b854-5041a2ff94de", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38731ed-3b4a-462c-9d68-d01689fa69d3", "sighting_of_ref": "indicator--86c2702d-f53a-4e93-b854-5041a2ff94de", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81cd5ec-8dd9-48b5-895a-c26d0215d97a", "sighting_of_ref": "indicator--ee804043-f127-4ed4-a779-1bbd054d0859", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a164a53-ba27-4049-89ac-5f3e68bcd89d", "sighting_of_ref": "indicator--2877fc93-bdac-4405-8170-6e09b72ad017", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b765dc94-6b72-4a2f-97bd-b5f48a970113", "sighting_of_ref": "indicator--2877fc93-bdac-4405-8170-6e09b72ad017", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fd2af2-74de-4eb7-8bce-c6487b03af2b", "sighting_of_ref": "indicator--d62a8e55-a657-42a1-8f40-82334cce51fc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea92e81-3a98-4681-bb7e-60da589d516e", "sighting_of_ref": "indicator--f00cf956-1acf-4c6b-ad76-81788c206635", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7491ba-907b-421f-a2ad-b29d06bb3684", "sighting_of_ref": "indicator--f00cf956-1acf-4c6b-ad76-81788c206635", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e8fd30-9cb8-44e5-a1c3-f1ec5b403a96", "sighting_of_ref": "indicator--b4899a04-bae6-470a-ba57-1853786c5714", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b7e534-0a0a-4c97-bd7f-362c1e12d5f6", "sighting_of_ref": "indicator--2557875f-a631-4a9a-8bbe-daba4dcd574d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bec0ca-2835-4e63-a5ce-a04eea097dd6", "sighting_of_ref": "indicator--dc9fff21-97c5-48c8-be95-c0b3a9c1a59a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee24bd6-2c56-4bc6-a8ad-35ba5d3fe506", "sighting_of_ref": "indicator--cc5e2436-7622-4079-a848-49ad0b5b6548", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d96801-437d-4022-ab14-0577e3e9bb76", "sighting_of_ref": "indicator--e3bf5731-aee3-4293-b983-5a82a14bc273", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2064ec43-d862-428b-86fa-af27ba17d9ae", "sighting_of_ref": "indicator--b01686a1-ec21-4605-9433-faee048701b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24294853-51c7-46b8-b423-86f594ebb2e3", "sighting_of_ref": "indicator--b01686a1-ec21-4605-9433-faee048701b0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b83d45d-2acd-4fe8-a88d-d49125568ee5", "sighting_of_ref": "indicator--b01686a1-ec21-4605-9433-faee048701b0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220ee808-129d-467b-ab50-eaecb0c005c1", "sighting_of_ref": "indicator--90dbd131-8f9a-41ee-bfe9-42731aedce50", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089a39aa-41cf-4dff-9ea5-f779c653f62a", "sighting_of_ref": "indicator--90dbd131-8f9a-41ee-bfe9-42731aedce50", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb884e5-6bd7-4b88-b153-d4b359f0c537", "sighting_of_ref": "indicator--90dbd131-8f9a-41ee-bfe9-42731aedce50", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a8552f-a21e-4c4e-a52d-b8774f2fc492", "sighting_of_ref": "indicator--083a2909-6115-44d1-85f0-bb9f7fe0abb8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68237ee2-7da2-4f45-80f2-b1282985e27a", "sighting_of_ref": "indicator--083a2909-6115-44d1-85f0-bb9f7fe0abb8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9468ac-a7ec-4702-9661-7f732f027cac", "sighting_of_ref": "indicator--8ab959e2-3cfa-4357-8a3a-36c978e11d63", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3baa032c-66b6-45d8-933a-e2211ff19f3d", "sighting_of_ref": "indicator--5d67e589-b43e-4cdd-b8f0-2f4f802a59e1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bce1735-6bc8-425e-b16b-12e030988767", "sighting_of_ref": "indicator--9028f5cc-1a60-45dd-9a21-dd2cec396dd3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746c7f30-078c-4cf8-9c60-e12ddd74c2ed", "sighting_of_ref": "indicator--48f79a9b-2bc3-4166-9ab0-6b825a678a9a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48a2b8d-0246-49e6-8024-61988e5b73c6", "sighting_of_ref": "indicator--4ebe5059-8897-4934-9bf3-9e9598dd7d25", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498f6202-3863-47e6-9c44-efb89a72cf8e", "sighting_of_ref": "indicator--4ebe5059-8897-4934-9bf3-9e9598dd7d25", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0302571b-8dc6-4a60-8da1-49d3c803353c", "sighting_of_ref": "indicator--4ebe5059-8897-4934-9bf3-9e9598dd7d25", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764e3b8a-8ebe-4754-9492-37de66e45352", "sighting_of_ref": "indicator--0f67dcb5-71db-44bf-8bf6-923149518a36", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7736950-53f2-46b1-ab76-0092cda5238c", "sighting_of_ref": "indicator--0f67dcb5-71db-44bf-8bf6-923149518a36", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c64e55-4f10-46eb-b73e-f020579c1a0c", "sighting_of_ref": "indicator--e7397056-9d9e-487e-9120-200448bbd009", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a51837-414e-4a13-bcb7-1f217aa3956b", "sighting_of_ref": "indicator--ee6ad132-a90d-4b50-9cdd-a989ddc1f2b2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81dc7cd-583b-436e-917f-72a02cc4ca00", "sighting_of_ref": "indicator--6e3f5d0a-22eb-48a1-b322-44a306ebe6f3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb22c96-4ae2-43bc-9fd9-2da68a7d7d3c", "sighting_of_ref": "indicator--0b8a7345-9048-4f37-adf9-7a290e56e647", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e227b1a-afac-43bb-8be2-3deac49ee43b", "sighting_of_ref": "indicator--9af82d05-3f7d-496c-8789-d383f0d48b0c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a6571f-c638-4da6-a76c-93ae6f9609f4", "sighting_of_ref": "indicator--96c3ec56-59ac-4097-ac03-8d5ac02dcea4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d55857f-db06-4d5e-9853-7fc6f9f0533d", "sighting_of_ref": "indicator--925d1e3f-c288-4366-a1e3-d05a92bd1bd0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2c6d19-6274-42f6-af6d-db3139201f68", "sighting_of_ref": "indicator--c4497ef4-e825-4c6d-a70e-90e0ad6fe29a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e515ddac-4ec3-4c81-b653-417ed682daea", "sighting_of_ref": "indicator--a75a0ce3-8a5d-4f29-9970-87e143e5fea3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a763f2-429c-4b24-9b1b-a19e070c2d20", "sighting_of_ref": "indicator--83d3e2f6-ea2b-4e19-9a98-324eb542cbfc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c2285d-3b89-46a0-b8ae-e1cd35caefef", "sighting_of_ref": "indicator--5bbcf535-4015-4e1d-b06a-379df41f4620", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e2c563-f16d-4af6-b60b-8bd716ee7a56", "sighting_of_ref": "indicator--3b1cc0be-bfce-4120-be69-956d861cb924", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fab4e8d-6fbc-4d90-8658-de401079627e", "sighting_of_ref": "indicator--e4671f9e-42be-4f92-aa64-109ec431c5b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9eb72d-64b2-416b-9ec2-de8258113a1b", "sighting_of_ref": "indicator--e4671f9e-42be-4f92-aa64-109ec431c5b7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e807114-0868-429c-bdd5-24052df8e481", "sighting_of_ref": "indicator--a9c24faf-1791-45c6-a0fe-b2882f3659b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8cf8f3-1167-4a88-8e75-4641a1264025", "sighting_of_ref": "indicator--67e3b2ab-79a7-4538-8a8b-1bc88a253bed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c215f78-6bd8-4af5-9ee9-d760e7cf88fd", "sighting_of_ref": "indicator--609badfa-473b-4c9d-9f82-1ab5629b455b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f11d48-f24e-48af-82e0-71c8d46da15f", "sighting_of_ref": "indicator--609badfa-473b-4c9d-9f82-1ab5629b455b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e9ff10-bbae-4676-a3e0-e42824d46bdb", "sighting_of_ref": "indicator--609badfa-473b-4c9d-9f82-1ab5629b455b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcb5c91-95d5-4bb7-b74a-2ea806b5244b", "sighting_of_ref": "indicator--c66261f4-e8ea-4819-9cee-9514aa1a2bef", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be852fd9-0e98-4975-abdf-00078b2f119d", "sighting_of_ref": "indicator--7eff6012-2cc9-4b29-af35-cf688c14826a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6c9490-c86d-411a-b0f2-cc7bf92157e9", "sighting_of_ref": "indicator--7eff6012-2cc9-4b29-af35-cf688c14826a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bd3f04-1a82-460c-83f1-c40ce9621594", "sighting_of_ref": "indicator--7eff6012-2cc9-4b29-af35-cf688c14826a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5de6377-bc39-4998-b0c1-e91994696cd8", "sighting_of_ref": "indicator--b3753a1a-f69b-4f27-bb52-92b56f950168", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd0f73c-b20d-4a9c-9ef2-d12c21c3f772", "sighting_of_ref": "indicator--07c468a1-7f94-42cd-b420-786b9770916a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55368bcd-1051-4776-a2ae-46fe9c65d66e", "sighting_of_ref": "indicator--c38dba20-3909-4250-b07e-8fe20d4e9dd2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532f3b45-1545-4077-b5fd-698b0074ad8b", "sighting_of_ref": "indicator--1f33f2ce-17cc-4578-b652-455e38ea2149", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3910e730-3361-4a9d-95d0-dad02b652cab", "sighting_of_ref": "indicator--1f33f2ce-17cc-4578-b652-455e38ea2149", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51756278-437d-4493-a6e1-2b24ce3c7683", "sighting_of_ref": "indicator--1f33f2ce-17cc-4578-b652-455e38ea2149", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1ad2f6-0340-479b-a194-097f3c261bdf", "sighting_of_ref": "indicator--2428a800-5734-486a-a3ca-cf057c0b29de", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3471526f-7e9f-47f3-99e8-136749ea1f2a", "sighting_of_ref": "indicator--2428a800-5734-486a-a3ca-cf057c0b29de", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b88ac2-d165-4584-8b60-6d077592a389", "sighting_of_ref": "indicator--2428a800-5734-486a-a3ca-cf057c0b29de", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6edf12-749b-4415-a369-303c6ac7f9f1", "sighting_of_ref": "indicator--91244f35-32b1-4049-b8c9-53384c4f6b42", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818cc410-5ea9-46b6-9777-a3e1864faeca", "sighting_of_ref": "indicator--5c148d24-cd7c-45ac-a880-928b8b2a8a62", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccf549b-04bb-465e-b2c5-d93eba5af9f1", "sighting_of_ref": "indicator--0c161a83-2703-43bd-989e-30e423638ebe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22014dd-946a-4b2d-b195-4b455e64a3a4", "sighting_of_ref": "indicator--0c161a83-2703-43bd-989e-30e423638ebe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4986c32e-3ab7-4a04-90a0-47867d2e14d0", "sighting_of_ref": "indicator--35562323-0d0c-4b87-92f1-26ebb8a08b65", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddde932-31a6-443d-b103-97dd67383de3", "sighting_of_ref": "indicator--7988ce26-1b07-4376-8d22-0e542c146d72", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280baddb-4087-4a4e-a286-78dac2d4d267", "sighting_of_ref": "indicator--7988ce26-1b07-4376-8d22-0e542c146d72", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a91ef8-b035-4a38-8411-64a5470015b7", "sighting_of_ref": "indicator--7988ce26-1b07-4376-8d22-0e542c146d72", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07dbaea-bfe0-4d3a-97a3-0b12b0836a4e", "sighting_of_ref": "indicator--e2e1b45f-bf76-4197-ae47-9f5328e12877", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48c1b2b-ac2f-468b-8b2f-d2a672fe75b3", "sighting_of_ref": "indicator--e2e1b45f-bf76-4197-ae47-9f5328e12877", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--183b05bb-df4f-4487-90fe-8793907de018", "sighting_of_ref": "indicator--44131bdf-85bb-4c2c-9049-c6f11106eb2a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d49e656-0e33-4645-91ab-b05ca45cf9e0", "sighting_of_ref": "indicator--44131bdf-85bb-4c2c-9049-c6f11106eb2a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73db7daf-4c8d-49d8-ab80-2e35e335a184", "sighting_of_ref": "indicator--35a9b575-6ea1-4a7c-a26d-ab3cd9d6047e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d77e8e-10d7-480d-9342-6d601b723a1b", "sighting_of_ref": "indicator--94880a60-3e50-4ce6-8d1e-01ad76736646", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adc5958-6db8-43d2-ac15-42dbc9487796", "sighting_of_ref": "indicator--94880a60-3e50-4ce6-8d1e-01ad76736646", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e183d63c-c6dd-49b1-b95a-0357c6b7221e", "sighting_of_ref": "indicator--de35e843-a3f7-4c3c-ba03-9c3ed6478cb6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c9a393-b726-4564-88a5-8945f67aad3b", "sighting_of_ref": "indicator--013e9fb4-b3c6-4af0-b3d1-890818bb8062", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe782fd-70ef-4aa5-af01-bdcd4b1409bc", "sighting_of_ref": "indicator--047e9d53-7be2-4ed8-8703-5bacb95ea8c0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af842aa-4b81-4a9a-bb60-e744383196e3", "sighting_of_ref": "indicator--047e9d53-7be2-4ed8-8703-5bacb95ea8c0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7920e2c9-98f1-4ce6-b8e4-bc0d97aac395", "sighting_of_ref": "indicator--cbae007f-3f2a-4518-99de-b5f8b5cb5c3d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e56ff62-eadb-4bc9-a55a-1e3fbeed0d40", "sighting_of_ref": "indicator--0556e092-4974-4124-b3be-ba938fee4d01", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcc57e7-b83d-4f2b-862d-a2bd62ccee00", "sighting_of_ref": "indicator--85418e9c-f033-46b0-a573-97d32ff6faf9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3de8a34-5143-4ad9-a297-5cc7b37a66ef", "sighting_of_ref": "indicator--85418e9c-f033-46b0-a573-97d32ff6faf9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f99866-25f1-45aa-9795-10f5b1c93e31", "sighting_of_ref": "indicator--50d68b2e-d835-45b6-a0f8-989bd174e609", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7612570-b004-4288-8337-702d8d2f9c65", "sighting_of_ref": "indicator--50d68b2e-d835-45b6-a0f8-989bd174e609", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118ef578-ccab-4d47-b047-2e17ee56c447", "sighting_of_ref": "indicator--50d68b2e-d835-45b6-a0f8-989bd174e609", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ea11a2-cc5f-41ac-a00a-87cb43d864ab", "sighting_of_ref": "indicator--a92e0e10-adc9-4856-9b87-0d31d7d3ad3e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24558805-0bf2-4602-816e-56f91dbbcb97", "sighting_of_ref": "indicator--a7340b81-58c2-48f2-814e-d1751046ced9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f91aba1-c835-430c-851c-581ba422e6d6", "sighting_of_ref": "indicator--a7340b81-58c2-48f2-814e-d1751046ced9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bde20f1-cc02-423f-bb7e-0eeeaf55511c", "sighting_of_ref": "indicator--925e62a4-bb8e-4301-b7df-096b252ead8f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc0d3fa-53cf-4b71-9377-83e4fae10f0a", "sighting_of_ref": "indicator--c51dccc7-a10c-40a4-8973-69bcf2473564", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d22360-3fc0-47f9-bf5e-2353d32c148d", "sighting_of_ref": "indicator--287e2fb9-c1a1-44ca-9d8a-737b5cebd2f9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2592ef64-372f-4bf7-aa91-006dca5bce82", "sighting_of_ref": "indicator--45caeed6-f9a7-4eed-8bca-6b168970b4e5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f91d991-129e-4563-9c9f-0563eb780db3", "sighting_of_ref": "indicator--45caeed6-f9a7-4eed-8bca-6b168970b4e5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28718930-7f68-4fd1-878a-b9320fc29b49", "sighting_of_ref": "indicator--71704984-7127-4179-b64c-65f6232f0342", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abae780f-ae52-4975-b4f4-f4a520ee5f37", "sighting_of_ref": "indicator--71704984-7127-4179-b64c-65f6232f0342", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48072590-d5ab-408f-8335-18fc2ee3025f", "sighting_of_ref": "indicator--71704984-7127-4179-b64c-65f6232f0342", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e01c91-b319-4e98-9f75-6b57a39e0586", "sighting_of_ref": "indicator--8b79355a-3bc4-4ab1-bbe8-1e44300daec3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1b4e6d-a981-4e1f-80a0-ed2733964ad2", "sighting_of_ref": "indicator--369aab27-8434-4c7c-8bd5-af218e6cc5c6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7eb586-4977-47be-b8c0-363157619502", "sighting_of_ref": "indicator--c1b33d9d-9b7e-4394-a8e3-b3bac824108c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f58123-fe2e-4d34-8546-f60a53e29319", "sighting_of_ref": "indicator--c1b33d9d-9b7e-4394-a8e3-b3bac824108c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff15af7-f8f0-4542-945a-35ed04248b1d", "sighting_of_ref": "indicator--004bb072-c74b-47ac-a630-bc9681b53eee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ad19f1-b450-408e-9090-cddd48c48728", "sighting_of_ref": "indicator--004bb072-c74b-47ac-a630-bc9681b53eee", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b239e86-9586-4bef-9dd1-829c3a0821fd", "sighting_of_ref": "indicator--e234414d-83a1-4918-863f-813b7e128b54", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3e66d5-de86-4b79-8e35-6e848e28f87e", "sighting_of_ref": "indicator--62858434-6b1a-461b-9311-14d5c9830bca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0b7eb9-6041-4658-8d86-785a23d1e941", "sighting_of_ref": "indicator--dcdb549c-d288-4b2b-986f-e64b8f9d63ed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce7dbc5-7f7b-4119-a543-d27dd1e3c823", "sighting_of_ref": "indicator--23267d24-d94b-4d92-ae83-8d16a7f01fbe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d786cba8-8b69-422a-b867-bc77cd7756f6", "sighting_of_ref": "indicator--24c8c3a9-8628-4598-ba51-833de0cadd71", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0d3b2e-26f9-4e58-96e9-3c79f51b994b", "sighting_of_ref": "indicator--fd86ff59-4d4b-400c-b9c4-a3ef21bf46de", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb64fb2-493f-46e4-9433-515b337ab0eb", "sighting_of_ref": "indicator--fd86ff59-4d4b-400c-b9c4-a3ef21bf46de", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fdb445-2869-4241-9691-bf8109d08906", "sighting_of_ref": "indicator--fd86ff59-4d4b-400c-b9c4-a3ef21bf46de", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7947f9-0311-4042-a0fa-5f4f82ac5ab2", "sighting_of_ref": "indicator--cdcacbc8-7963-489b-9f7f-4771e73783fc", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bef770-1d8e-4ae6-889a-edb7023b8d13", "sighting_of_ref": "indicator--4ae6f1f3-7d97-4b9c-966b-85022f6b1614", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e480eb51-6117-4753-9666-6f2a29038cfe", "sighting_of_ref": "indicator--5bd05204-3c8f-4ea3-968b-5e0f10595ced", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f5fcf1-94a7-407c-83e1-f210e6f3a496", "sighting_of_ref": "indicator--5bd05204-3c8f-4ea3-968b-5e0f10595ced", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0ede9a-2e8e-4415-83aa-8fd8005b2421", "sighting_of_ref": "indicator--4d19a018-5a61-4579-a722-93322a19e188", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c236e680-0d39-477f-adb1-538a9e8442d7", "sighting_of_ref": "indicator--44c59601-7dda-45a1-8882-096197dd9ee9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8145ed-a69f-44d4-b2cc-e1f15ab09ad1", "sighting_of_ref": "indicator--c1863aad-b0a5-4ead-a26b-e15e9fab4aae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d269bff8-4ee7-4559-9c3b-4c9bbccf8c85", "sighting_of_ref": "indicator--d1df33b3-2f86-46d0-8a7e-8159f1e9bc08", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17dddd6-882a-4a29-bae9-cb786f567974", "sighting_of_ref": "indicator--a0d0871c-3a82-4969-844e-06f4cae5bf12", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9259128d-ccca-4bb8-a5dd-1964e59a5ff1", "sighting_of_ref": "indicator--fc732948-a6fe-42e1-b8c3-4617b61b6699", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed76016-7875-41fa-8ef6-3b4b99f59500", "sighting_of_ref": "indicator--738d155f-5c02-4207-8664-4ca0ca68b8c7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47bcaa72-279d-435d-bb3e-a74f523e0b73", "sighting_of_ref": "indicator--a75747a9-0b62-497a-8b2a-e54b23983e9d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0f9999-e377-4ad9-a96f-88a7993fa8da", "sighting_of_ref": "indicator--a75747a9-0b62-497a-8b2a-e54b23983e9d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e472160-3258-4e47-a4bd-90e1260462e9", "sighting_of_ref": "indicator--e52454c6-815d-40d2-850e-c98bcd5acddc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998c769e-b21c-4d97-8fc4-6e37cde6ac53", "sighting_of_ref": "indicator--e52454c6-815d-40d2-850e-c98bcd5acddc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f819082-f12d-4acc-8790-d72e90c8f2ca", "sighting_of_ref": "indicator--e52454c6-815d-40d2-850e-c98bcd5acddc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89844e64-bece-42b8-be0b-61233f8b6125", "sighting_of_ref": "indicator--25626b66-b641-42ca-b9d9-0e7e221f4407", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcab2ae-33da-4c29-b73d-3cd9f122acf7", "sighting_of_ref": "indicator--01c6a006-fd38-447c-8358-8d8b725ee9ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8df181d-4aa5-470d-84e7-dea7f6182b0c", "sighting_of_ref": "indicator--5dfb4495-a6f8-4e37-8f69-6e1d189e1dec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fe96f5-dc2c-40ee-b9b7-3ec316f24686", "sighting_of_ref": "indicator--6488c869-4adf-4e73-9733-8c6c351d81ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fdc17b-29af-4ddb-8713-5c7d4a633500", "sighting_of_ref": "indicator--6488c869-4adf-4e73-9733-8c6c351d81ce", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfabccb-a1c9-48ee-b347-e476f310ebd0", "sighting_of_ref": "indicator--ac3b3a01-6625-49d2-8186-dfcb67f24d10", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5cfa1b-3f3d-442a-b357-3f515eabc210", "sighting_of_ref": "indicator--ac3b3a01-6625-49d2-8186-dfcb67f24d10", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5f448a-2b7e-41fa-ba13-d5a18ced4110", "sighting_of_ref": "indicator--7ba973dc-b4f3-4522-8dbf-5e357ee05876", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87077bfa-0554-4c65-8b49-4eb8dd5d757c", "sighting_of_ref": "indicator--c4261115-4fd4-4482-a1da-17ece3379d67", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766e3c5b-eba2-41f1-8d03-99d66fecf4c6", "sighting_of_ref": "indicator--e18d9641-6c7c-431c-89ea-efb887ff735a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f6031d-85aa-4144-ba4b-827ba60830a4", "sighting_of_ref": "indicator--5a06dea1-0584-4a32-bf55-eff4329e1b6b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74745dbe-e9f4-4d86-ae70-90891e5b3c51", "sighting_of_ref": "indicator--e00ea1e9-09f5-4421-a4f1-147492995f18", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93652235-eccb-4966-83e5-106de5da62c1", "sighting_of_ref": "indicator--be5861bf-5fbf-44dd-8406-fa2ef86f843e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a43a2c-f8dc-4f46-b787-c6c3bd0d0bfc", "sighting_of_ref": "indicator--310557e7-bb6e-4027-88b7-0769891d6ecc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b4e485-7ef1-4743-a7fa-1755ca1bae4d", "sighting_of_ref": "indicator--5bf9b25d-7a99-4e9e-aed9-207200841c95", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6261dba-a37f-4325-8897-c8e009f29a0d", "sighting_of_ref": "indicator--5bf9b25d-7a99-4e9e-aed9-207200841c95", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e1e6bc-71af-404f-9443-d53d70e86d8d", "sighting_of_ref": "indicator--791f06e4-a4b7-44fc-82f2-005714a46570", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc3453a-eec1-4168-b091-a051d8a5e9c3", "sighting_of_ref": "indicator--ea4a38c1-f418-49bc-b1d8-167eeaf7b929", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65498ca6-4368-480e-aa2a-f8703d67a247", "sighting_of_ref": "indicator--968e242b-8bb4-46f5-91c7-690d83bdfcac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fc9a98-a0be-4033-b377-5744d54884d4", "sighting_of_ref": "indicator--968e242b-8bb4-46f5-91c7-690d83bdfcac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51453e7-c185-4f4a-8eda-5a48c06851b5", "sighting_of_ref": "indicator--968e242b-8bb4-46f5-91c7-690d83bdfcac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10675df-93cd-4294-b8e9-9b8343a1ce54", "sighting_of_ref": "indicator--998e5246-d068-4d50-a13e-2137a79b50c6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da66bcc2-3eed-4957-b278-fdaacf38b143", "sighting_of_ref": "indicator--4501d822-7219-4d37-8672-d3b1760e0f6f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159bb185-24ef-4d92-8f2a-70318a169dae", "sighting_of_ref": "indicator--4501d822-7219-4d37-8672-d3b1760e0f6f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5ee014-0ae3-4cf2-ac38-955e20a866f6", "sighting_of_ref": "indicator--9c847050-e677-40a3-a3d8-6c517a1ca4bf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d046f0-e46f-4aaf-9a24-0b89545e8549", "sighting_of_ref": "indicator--9c847050-e677-40a3-a3d8-6c517a1ca4bf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768daaf3-d97a-41d4-9e9c-21270583eca9", "sighting_of_ref": "indicator--77e835af-299e-4046-a7ed-d35672181f14", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195db8a4-cd56-4204-8f2f-7d6b9255e8b6", "sighting_of_ref": "indicator--bb45bb4f-803f-4896-b3ba-01561591c7d0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb517d44-1b5a-44f2-9af4-868da8b95f1a", "sighting_of_ref": "indicator--bb45bb4f-803f-4896-b3ba-01561591c7d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba66d90-250f-432f-bfc8-f7c2e59d84d1", "sighting_of_ref": "indicator--553c99bc-5f94-4d0a-a06b-11548223d154", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbf6294-2a1c-4c15-9547-4c6a1b3afe60", "sighting_of_ref": "indicator--ece01292-e161-42a3-bfec-aaed907b2ebb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19b4314-caea-4994-8667-ca18dc202439", "sighting_of_ref": "indicator--93b0d3f1-7f8b-4b6c-8e62-ab4b806f688a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4a7047-1668-4e69-b95f-66325bcde1f2", "sighting_of_ref": "indicator--86b2d083-079c-4b5a-8881-15671de0e759", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc4729e-b838-43b2-b430-58b17abb4254", "sighting_of_ref": "indicator--86b2d083-079c-4b5a-8881-15671de0e759", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da06ab6-909b-483b-8d8c-7fb9f569aa10", "sighting_of_ref": "indicator--cf775325-1ee6-468c-8506-ca36c89bbd95", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c36055-6a7e-4026-adb9-3a476c2483d9", "sighting_of_ref": "indicator--2dacb46e-9350-4342-8d13-bd577d2ed6dd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9109bf8-65c5-4a77-ac8c-70ccdc357e00", "sighting_of_ref": "indicator--b1d24beb-d8c2-4fa0-995f-b711bf5474ee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a9fd51-8276-4d05-ba23-ae7e0a6ed7ae", "sighting_of_ref": "indicator--d85ca3e0-c6b6-4015-bfc1-21f7106c4fb0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6676a8-24ec-49bf-9227-8706493f67cf", "sighting_of_ref": "indicator--d85ca3e0-c6b6-4015-bfc1-21f7106c4fb0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7dcfb2-c0e2-45b1-9113-ba18a9e68274", "sighting_of_ref": "indicator--d375c436-41d9-4e21-b8f0-576a152257a2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e8c597-6e54-41f2-9dad-4791529028f0", "sighting_of_ref": "indicator--d375c436-41d9-4e21-b8f0-576a152257a2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714a4120-3ac8-472f-9691-2319d9bc9bdc", "sighting_of_ref": "indicator--dc9042d7-889b-4ca0-884f-d41724fe1cfa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c106ef-ad6b-4679-9b29-adcc2ef0888e", "sighting_of_ref": "indicator--0176b42d-984a-4257-a739-d5cc940b72d4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8781887f-a392-4030-8535-17d09908d7ea", "sighting_of_ref": "indicator--0176b42d-984a-4257-a739-d5cc940b72d4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa770b09-025b-462a-ab36-1c1a806ee329", "sighting_of_ref": "indicator--0176b42d-984a-4257-a739-d5cc940b72d4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db846a1-3561-4d2f-a60b-d3fbadccc058", "sighting_of_ref": "indicator--2cd6fe85-18cd-419c-8ff1-da0a9db297d2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92df9f8-10e6-42b4-bdde-ab8439ab000e", "sighting_of_ref": "indicator--39a00d8c-7577-4767-9766-e71847ac9e7b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1214e1e1-9595-435d-8bae-ff91955099ff", "sighting_of_ref": "indicator--c3525b61-b0f9-4297-ab3e-1ead3b498566", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e2c6a7-4d08-48e6-9947-3238c1d9906d", "sighting_of_ref": "indicator--99e0663a-4fa5-4a2e-9344-293500b38821", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f980a2-9829-460a-8666-b43b6f0b3a05", "sighting_of_ref": "indicator--dda29a29-09d5-49ac-a1aa-b6de0ba6b71c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc15b77-d231-4001-8f40-56a431fb60f5", "sighting_of_ref": "indicator--89cf4319-348c-4d07-8b88-6fe95ca7011e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa3cf0d-1012-43fa-b1fb-a59e77c9a0f2", "sighting_of_ref": "indicator--c8d78b15-824e-434a-aab4-264ecafe3fb7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d329cb80-0914-44b0-b223-946546639344", "sighting_of_ref": "indicator--c8d78b15-824e-434a-aab4-264ecafe3fb7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdb326c-4094-4d6f-90b5-5f498b5e2db1", "sighting_of_ref": "indicator--c8d78b15-824e-434a-aab4-264ecafe3fb7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03ee4ea-68fe-4e93-a092-dba61d24b856", "sighting_of_ref": "indicator--584f078a-d975-496e-94dd-9807dbe35993", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7079cefe-a5d1-41c4-a179-435780487fa9", "sighting_of_ref": "indicator--b038d6ff-f8b7-45af-9fcc-418f0d110329", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc76f607-436b-4fe7-ba57-de10b7ad4b65", "sighting_of_ref": "indicator--b038d6ff-f8b7-45af-9fcc-418f0d110329", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785ab96b-9204-4eb9-ba6e-b61bb4f3ead6", "sighting_of_ref": "indicator--d83202a4-1faf-4746-9a69-9ed762afbca2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada05d04-cddb-4fe6-b60d-a64b42f0499b", "sighting_of_ref": "indicator--d83202a4-1faf-4746-9a69-9ed762afbca2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7dcaf86-e041-445d-9372-7c5fa05dba66", "sighting_of_ref": "indicator--aec4bed4-b155-4f12-88c3-ed16bba06ab6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35de9a36-44f4-48d9-a2f4-708e276782c8", "sighting_of_ref": "indicator--aec4bed4-b155-4f12-88c3-ed16bba06ab6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a093a23-b84b-4f6b-b731-d1c39eb55185", "sighting_of_ref": "indicator--abbf8be6-ef1e-4ae1-b904-792ddb8d17e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28366d9a-afab-415c-87d0-02ccd5ab14c8", "sighting_of_ref": "indicator--abbf8be6-ef1e-4ae1-b904-792ddb8d17e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620aae2b-9df7-4528-8014-5af337bce59a", "sighting_of_ref": "indicator--923b1bbc-ca59-42fa-a0bf-5b462ccc473d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3ec87c-c821-4d08-ab62-50fc3e64e864", "sighting_of_ref": "indicator--9de67aa8-7fbf-4403-8aa5-7179d2eb0244", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e686d323-69fe-41f7-9d68-c051bd1fcc1c", "sighting_of_ref": "indicator--5d2a4122-0398-4fd7-a8a2-9c9b0dfdb0f4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8d793c-febf-406b-910c-8924003750d4", "sighting_of_ref": "indicator--a29c4391-3d6b-4fbc-a77a-531c5fc8fbbb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74a2330-13f4-45cd-b6f4-861f6d32721a", "sighting_of_ref": "indicator--7ac9fcac-424e-4716-9731-51eb25600747", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df01fd29-a5ab-463e-95d3-9abe8b62353d", "sighting_of_ref": "indicator--090070a3-71af-4099-9bd1-7633b88bafd1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ccc8430-c7fc-415c-9c88-463b13dd39fb", "sighting_of_ref": "indicator--ee215df6-77c3-4c53-955d-a3c19dff04f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378105f9-d60a-48d7-af73-e5c1947114d1", "sighting_of_ref": "indicator--05eaa83a-e0a4-48b0-8876-dc23ecd54d0f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33125c2d-3816-42a2-861d-e18391c00a5a", "sighting_of_ref": "indicator--c080376c-5395-4977-973b-a606ecf44cb8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd54bfa6-8c0a-4efc-b1e5-0d9cc2349619", "sighting_of_ref": "indicator--c080376c-5395-4977-973b-a606ecf44cb8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18216599-ed63-4e47-b5fa-9d8cb57be7a4", "sighting_of_ref": "indicator--25080bde-1e13-4a97-832e-0ba19de8a8d4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b310d393-6799-437a-9752-da82ae6b5473", "sighting_of_ref": "indicator--25080bde-1e13-4a97-832e-0ba19de8a8d4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e23f81b-286e-45f7-aa75-bbe70c4e8701", "sighting_of_ref": "indicator--068bef2d-0cb9-4ce7-b569-dcc9aa97c9c3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18228977-e1e0-4054-b7d5-a66e81a68e06", "sighting_of_ref": "indicator--b50f0706-4a45-4241-830b-09b698b6edf3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f629e3-1b05-49f9-9e29-89d5fde8d96a", "sighting_of_ref": "indicator--3892d8dd-4f62-4c04-9712-acba19d78efa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08777677-cfa0-48c5-88b4-56176a140f06", "sighting_of_ref": "indicator--a189047e-e1dc-42ad-a020-50f669542100", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f412b50-751d-4c15-8400-843cb7265a7f", "sighting_of_ref": "indicator--a189047e-e1dc-42ad-a020-50f669542100", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b84184b-5646-4a5c-989d-1aa7a1590223", "sighting_of_ref": "indicator--757ae5bf-6910-4132-8175-81be5ab634e0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9793b538-cc6f-4476-a14d-de0c2adafa8e", "sighting_of_ref": "indicator--696173ac-2e38-4ace-ad68-42ea69e24270", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c3663d-8087-447d-b522-e574d4482fbf", "sighting_of_ref": "indicator--cf20d660-eaf6-4ffd-890b-5cd7d97563a0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e85d8b-f43a-41b7-8035-b7953b7e8558", "sighting_of_ref": "indicator--ee82ad8f-f922-4075-af86-e81c832c3325", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4eabd9-7dd6-425e-be37-844e8c6ccd84", "sighting_of_ref": "indicator--ee82ad8f-f922-4075-af86-e81c832c3325", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5869f6e7-5b84-4974-87c7-cd39438c3721", "sighting_of_ref": "indicator--6fc4667d-63f2-4a82-a0be-49f6c07bb1cc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2ca87b-643e-4d25-9850-ba47299bab10", "sighting_of_ref": "indicator--512e642c-8a30-4363-805c-970e5a78e856", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec443c80-2d10-4c10-a582-0ba0da3482f6", "sighting_of_ref": "indicator--512e642c-8a30-4363-805c-970e5a78e856", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e250d67-e04d-432b-a538-56418af5513d", "sighting_of_ref": "indicator--720bf223-5a05-4b74-a2eb-5c0dea405895", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37d622d-301e-45be-b937-7fade9a373e9", "sighting_of_ref": "indicator--720bf223-5a05-4b74-a2eb-5c0dea405895", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7a33d1-b168-4fd0-bc71-d5f22f0c6fab", "sighting_of_ref": "indicator--986107d2-08b7-4096-bf10-f8753e692fea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f3ec69-f090-46bd-9f1d-52364f7286f4", "sighting_of_ref": "indicator--986107d2-08b7-4096-bf10-f8753e692fea", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c07f5f-0409-4980-afb0-442e2803efca", "sighting_of_ref": "indicator--9062da5e-c1a4-4c9f-8a45-595d77b47b58", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92da3da3-fb36-4e65-8ab6-e4f2f368af8c", "sighting_of_ref": "indicator--9062da5e-c1a4-4c9f-8a45-595d77b47b58", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b92980e-da33-4e4e-8716-6c14a9ae448b", "sighting_of_ref": "indicator--c4e1713a-d83e-403a-ad3c-1bfa2546f2b9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c2fdd6-2ce7-451b-89e8-b003a6cc3630", "sighting_of_ref": "indicator--c4e1713a-d83e-403a-ad3c-1bfa2546f2b9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c35334f-6cfa-4e4a-a441-4b3846914e52", "sighting_of_ref": "indicator--e53c46ad-d37d-408a-bdb0-4610fb14ff7b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210a2718-d2b7-4eaf-ad19-ba02fb3de9cd", "sighting_of_ref": "indicator--da69b693-565a-41ff-b7ab-d5b4c6429e18", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02377a1e-dbe9-45b0-8441-3e2e4c88e8cd", "sighting_of_ref": "indicator--da69b693-565a-41ff-b7ab-d5b4c6429e18", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbd3e99-fcee-4898-8806-eabbbb36ae57", "sighting_of_ref": "indicator--b38cd2df-91d0-4b83-8358-70e3af5c7a95", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2859402a-1941-4651-9b15-9ad550081a43", "sighting_of_ref": "indicator--b38cd2df-91d0-4b83-8358-70e3af5c7a95", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7520ab-33d6-49ac-823e-7a508b036b9b", "sighting_of_ref": "indicator--d8b7b2e6-5cf6-4b34-a106-efb1941e5b90", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86340920-9ddf-40ab-8fb8-e1aacb308690", "sighting_of_ref": "indicator--8bded65c-cd01-400f-af4b-cde9b9dda628", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d562b1-a359-4c03-a880-2d5eb12b791d", "sighting_of_ref": "indicator--8bded65c-cd01-400f-af4b-cde9b9dda628", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d377bd1-a1d3-4b52-8bb6-ef433840447d", "sighting_of_ref": "indicator--60d32827-7e61-44d7-9bfd-d43383e2c952", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45527fbe-3c00-4418-9705-0b37cca04dfd", "sighting_of_ref": "indicator--60d32827-7e61-44d7-9bfd-d43383e2c952", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027b76bd-398c-4e4c-9612-76be2811ca3d", "sighting_of_ref": "indicator--473e5cd5-6467-48de-8886-3e2bbff374cf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d3b7ce-198a-463a-84bc-4da7c32a24d7", "sighting_of_ref": "indicator--473e5cd5-6467-48de-8886-3e2bbff374cf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984d8a0b-da2a-43a5-adad-7d318e50e892", "sighting_of_ref": "indicator--8fd63d86-37ae-440f-8ae1-7184c1f4b187", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408b2225-439e-484e-86a7-ef0e842234d6", "sighting_of_ref": "indicator--8fd63d86-37ae-440f-8ae1-7184c1f4b187", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f084c4-50be-49a8-9c49-86fbfbba6a16", "sighting_of_ref": "indicator--d9597e1e-d92e-4488-8eb2-9b3ca3f028d5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7b111e-9e7b-4147-83ed-48f3afffcc2b", "sighting_of_ref": "indicator--d9597e1e-d92e-4488-8eb2-9b3ca3f028d5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67744916-72d6-428c-8fdf-472a2b4a809f", "sighting_of_ref": "indicator--b6d3877b-1cc6-4bde-af27-077af7dd789a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f86c2b-c653-4ba6-9e4f-1adde07c23ab", "sighting_of_ref": "indicator--b6d3877b-1cc6-4bde-af27-077af7dd789a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05c8960-3ec1-4b79-98b9-cc5a0250e526", "sighting_of_ref": "indicator--7437d303-ab98-4c9d-b997-8796c2e64443", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3371d9d9-6ba1-449a-9fb0-ee3689548291", "sighting_of_ref": "indicator--7437d303-ab98-4c9d-b997-8796c2e64443", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999f6a4a-48ac-4084-8b8e-5cd28b7146e8", "sighting_of_ref": "indicator--0575d416-575e-402e-bb4a-b2cb9e36c890", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aece5838-bfe7-4954-bdc7-5b25062bf554", "sighting_of_ref": "indicator--0575d416-575e-402e-bb4a-b2cb9e36c890", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09048f69-1fe1-4e7f-bb07-7c1755ef5d09", "sighting_of_ref": "indicator--0575d416-575e-402e-bb4a-b2cb9e36c890", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2d7a87-369a-498b-ac12-f363072b2253", "sighting_of_ref": "indicator--3faf404b-a033-41b7-ae90-2f912cf668fe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c60b81-f062-48ff-8f2a-fd2d04649f35", "sighting_of_ref": "indicator--3faf404b-a033-41b7-ae90-2f912cf668fe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a573d2-ced8-488a-9212-7befa31c754f", "sighting_of_ref": "indicator--dbbf3667-e4b8-4cd3-8173-ff58cb652d30", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3fd8c5-2500-458f-95b9-51431ba26558", "sighting_of_ref": "indicator--dbbf3667-e4b8-4cd3-8173-ff58cb652d30", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2237766d-b792-466d-957e-5dbf57b54b7b", "sighting_of_ref": "indicator--3c292998-7449-496a-838c-609d46577795", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8437b5c0-f66a-4e86-b432-c7abed8f8017", "sighting_of_ref": "indicator--3c292998-7449-496a-838c-609d46577795", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910bf20d-2516-4d47-9493-22814850c576", "sighting_of_ref": "indicator--962c2772-ec99-476e-bfc6-2f75fb8642de", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbe7ba9-a5b5-443d-997c-85aa3e9c2154", "sighting_of_ref": "indicator--2d5715cd-1559-4b2f-be56-a266c17c24bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94530e2-c2f5-491f-b30b-c3ebe4665561", "sighting_of_ref": "indicator--953c96c5-e485-42ef-b4c1-63ba14c33657", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d33fc06-08ae-4f2f-a8ce-26afde20c234", "sighting_of_ref": "indicator--e988ca33-0207-4cd6-9d7e-97672f868283", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f552a80c-a81b-4286-83f7-6f5736f8619e", "sighting_of_ref": "indicator--cba0a0a2-080a-44b0-9f78-d1d31ed9af6b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1729f3e-4169-4827-b5d0-f78430ba5e2d", "sighting_of_ref": "indicator--b03d20e2-eaab-4d4c-ae8e-6ad24a376fbe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107d65e3-fddd-463c-91e6-7bdf2de65f3f", "sighting_of_ref": "indicator--79297c80-e7b2-4ad4-a023-3a8aa43a1db5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff2851e-d1c8-4097-b7a9-0a3754fa8326", "sighting_of_ref": "indicator--700b4587-f21a-4b3e-b6d2-8e1a64b84646", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7c9d16-351e-4d04-9420-f0a4022fb28d", "sighting_of_ref": "indicator--ca0f729a-b6e6-4752-b33b-813f4c2aeef5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4021ee-8772-4fb6-b957-a12a415c1938", "sighting_of_ref": "indicator--f9f9a8f3-726a-49b3-9e20-4a0a0a105765", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f83c16a-787e-4966-9a11-b411f014db15", "sighting_of_ref": "indicator--e9ecca6a-34e0-4810-95ca-b3082cb3e115", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476154be-64d5-4cb5-afa5-30903e2fd1fd", "sighting_of_ref": "indicator--94ca0f47-ac9f-4335-9397-23c68920454c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedb0470-0995-4db3-a470-4f479b95194f", "sighting_of_ref": "indicator--3351e223-a85e-4e4c-91eb-1148870aab19", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7045b07-7b44-4376-bae2-67177e87640b", "sighting_of_ref": "indicator--1aab8704-d450-43a7-a5ad-6fd4bde3102f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a37ade2-c158-4c79-9d2d-91f6f4008ca1", "sighting_of_ref": "indicator--851a5a57-98d4-4781-b775-48f5b074b156", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90de88e-007b-4720-bd93-70c8c2d3ffb6", "sighting_of_ref": "indicator--70c5435e-e2f7-4781-9eab-013992ee194b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24857fc9-aad9-4110-8c91-6b2f28194037", "sighting_of_ref": "indicator--56188e40-f92a-47a1-9015-9926d26f290b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a68989-00a1-4830-b69a-5b51ac2d7cc5", "sighting_of_ref": "indicator--88a2c191-247c-4d22-8df4-893168ee2672", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4009693c-30b5-43af-8423-ffc3b84cd6f1", "sighting_of_ref": "indicator--014a3a0c-0ad5-47d5-b3eb-d3c4439cc4a3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7545bf9-8996-4d6f-be85-31cad24c7047", "sighting_of_ref": "indicator--8ce7ce1d-e8cd-42a5-8548-5b1dac157558", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0772fc9-f7b1-4965-9733-5b146d63b0c6", "sighting_of_ref": "indicator--3803a343-62cf-44e0-aa88-a4eda0ecb5b8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3fa6ec7-a023-4c1a-8fcb-f71f7ca9607a", "sighting_of_ref": "indicator--15fe4fbd-ed1d-4171-9b6a-f30fd227bd2b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81141f18-efbd-4448-a331-d85628556fb7", "sighting_of_ref": "indicator--7682d637-eb6c-4841-94cc-0332fdfe9c7d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df51aa8a-377a-4691-be86-1ee2ff9fac2e", "sighting_of_ref": "indicator--74aeaf0d-f58b-4b1f-83c0-d602788da941", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f745b2c9-fe21-443e-a3d4-1a91a5066140", "sighting_of_ref": "indicator--4f8572f7-4631-4d9b-a9f4-e329fbae0fd2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e97b685-bbd4-46bd-be73-2c36b429406d", "sighting_of_ref": "indicator--2c137d07-3474-49e0-a5e4-ddf168288cd8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea16b348-221a-4ee9-bffb-27e213cd3adf", "sighting_of_ref": "indicator--d5282482-f0b9-4fd1-ac5f-2c1bc0441eff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823df13d-03f6-4eab-b89b-dca73a18a147", "sighting_of_ref": "indicator--7e040075-c753-4eaa-a065-e31603e67b13", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75511009-2519-4c4b-84b2-598a5cb402bc", "sighting_of_ref": "indicator--7d7c6c1c-e5ae-4c1e-9e8d-44f48143c15b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336535fd-7203-4cc2-9a21-c9ad970a9290", "sighting_of_ref": "indicator--1079ad70-ddc6-4948-8de1-e87eb1086c21", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a776fbb-33a2-45aa-816a-aaa1019eaf6c", "sighting_of_ref": "indicator--34f54078-b99c-481b-9ed9-ab108a973356", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f571fc28-2101-4b9d-8653-28ae8bc285fc", "sighting_of_ref": "indicator--22b243ec-fa83-45f4-98e7-d61ca8186ae4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2f3d91-cf09-4ab8-8801-0ef85f11e348", "sighting_of_ref": "indicator--ba55579d-c9f6-4d04-9c76-17ea25293f88", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3eb51e-06ea-46e2-942b-1203ea4bc4fd", "sighting_of_ref": "indicator--d1d1a1ea-c315-4b26-9c01-d1fa253eacdf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8673ce0e-75ce-4760-a8db-26149f785f69", "sighting_of_ref": "indicator--db9268c9-28b6-449b-bec0-1e4f6ed78437", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb39977-cc0f-434b-b8aa-324b2ec8b042", "sighting_of_ref": "indicator--db9268c9-28b6-449b-bec0-1e4f6ed78437", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6adb4ee-41f0-4efb-9274-4b4da308f144", "sighting_of_ref": "indicator--3d56f178-8357-4744-81b0-85217871daaa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a0c6e0-c04f-48a1-9564-17fba66e17a6", "sighting_of_ref": "indicator--3d56f178-8357-4744-81b0-85217871daaa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6d0f91-d5eb-4d0b-a8b7-7ecfe1d5c0fd", "sighting_of_ref": "indicator--bbb12973-b5ed-4795-b735-8a134f5fd3c8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ab5364-9ee9-4ed3-8977-2d12e3d96d93", "sighting_of_ref": "indicator--608f7277-8124-46b6-81ba-cfaef4812ad6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1564a3-a000-4958-b6d0-31191fd75d6d", "sighting_of_ref": "indicator--608f7277-8124-46b6-81ba-cfaef4812ad6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9751c147-c422-42e7-a583-15b97d732d11", "sighting_of_ref": "indicator--c8d78d78-6d65-49b9-97eb-69529cb7fd9e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422c3e8b-9948-4e47-8399-4d7f691e1816", "sighting_of_ref": "indicator--c8d78d78-6d65-49b9-97eb-69529cb7fd9e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299ee869-f8c6-4737-b832-b70c650d1f43", "sighting_of_ref": "indicator--b4f05b2e-3e61-4239-876b-17c165763a51", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf199158-d054-4c93-bc7d-17831ca47fb8", "sighting_of_ref": "indicator--b4f05b2e-3e61-4239-876b-17c165763a51", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1d08f4-1c3d-4449-aff6-9f66a37fd3f3", "sighting_of_ref": "indicator--8c9ff6b2-c2d0-41cb-8048-18b48f5cbdec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9627dd1b-4cee-49fc-8c65-5f7641119438", "sighting_of_ref": "indicator--03cce23d-e6e3-4675-9452-806cc11d5e9a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1c3404-3ba1-42e2-81a5-4d12b7922f74", "sighting_of_ref": "indicator--03cce23d-e6e3-4675-9452-806cc11d5e9a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48139c9f-a33b-485a-b243-82e18ecdcdd7", "sighting_of_ref": "indicator--0ee6b869-cab3-45d8-9310-d194bfc874ce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71fc623-5dce-4eea-b340-6758d672a0b7", "sighting_of_ref": "indicator--27259538-9812-4575-ac42-93b2f95c436a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07fa734-0cfb-446c-beb0-da1a8b34e9ba", "sighting_of_ref": "indicator--2e61e854-a6a5-4f2f-985c-cc1c5fb1b7dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d69350b-4515-482d-824a-6307befa5ee7", "sighting_of_ref": "indicator--2e61e854-a6a5-4f2f-985c-cc1c5fb1b7dd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad85be38-bcdc-499e-b481-78960e439e87", "sighting_of_ref": "indicator--9ee2d8e6-ec62-4a00-88c7-e1a6d547e566", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dad419-d428-4ea3-9b5a-c4c5047be8c7", "sighting_of_ref": "indicator--9ee2d8e6-ec62-4a00-88c7-e1a6d547e566", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b85b83-1833-46f5-8d40-536664ad5240", "sighting_of_ref": "indicator--1bae680e-c206-412a-a1cb-c48c1a091a5b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f2def2-3c3e-49f0-b396-df8264bef918", "sighting_of_ref": "indicator--1bae680e-c206-412a-a1cb-c48c1a091a5b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb957b23-3bf5-42f0-b5ca-68cde4021f68", "sighting_of_ref": "indicator--a5bee9c6-0f7e-4568-906a-43c767c8ac59", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadc767d-49eb-4ab8-9557-d1cd315fde28", "sighting_of_ref": "indicator--a5bee9c6-0f7e-4568-906a-43c767c8ac59", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640d625e-29e8-47ac-9b9d-1e8b3bf73b37", "sighting_of_ref": "indicator--e4273ed9-6c20-4fd9-9a6e-8912ef32dcb3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3854c01-f615-4871-aaf9-92752694ddbb", "sighting_of_ref": "indicator--e4273ed9-6c20-4fd9-9a6e-8912ef32dcb3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e9213c-a988-4139-a874-d08d3a7180d9", "sighting_of_ref": "indicator--f5a490d3-53cd-43fb-9a5b-628a2ea2d7b6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5ae661-42e3-43ed-b5c3-fb8e154c5338", "sighting_of_ref": "indicator--1b7f7716-7760-4900-8fff-a54320a81758", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b472a841-5df2-40d8-87ae-bc05d482500d", "sighting_of_ref": "indicator--fba40230-e3f3-41a0-9caa-79ee481e6e14", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6237bd8-5462-46d5-8484-cdbf5c0dcd9d", "sighting_of_ref": "indicator--fba40230-e3f3-41a0-9caa-79ee481e6e14", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8956f0-2858-433a-8104-e93cb18a45bb", "sighting_of_ref": "indicator--fba40230-e3f3-41a0-9caa-79ee481e6e14", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ef8cdc-4183-436b-a4b4-3982c8d70a1a", "sighting_of_ref": "indicator--991c90c5-ba56-4eb0-a3cd-7da30db915b8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976c02d8-df30-4c5c-a8ec-f5d21ede4c33", "sighting_of_ref": "indicator--991c90c5-ba56-4eb0-a3cd-7da30db915b8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6a6a37-3b7a-4dff-8368-735083f3e25c", "sighting_of_ref": "indicator--2b06b6c9-c33f-4e09-a43e-8abe33ab8112", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0639a155-2b97-412f-a1c8-448cc7b74c4b", "sighting_of_ref": "indicator--546486e6-0689-4c00-8cc5-1a2d0b09f5be", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c463afe7-e68c-40a5-b47e-8bcc848ccea3", "sighting_of_ref": "indicator--a74d3e86-7dc7-4940-8c26-429795e80d2d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4f3a0e-9437-46ac-b7bb-ae3565924970", "sighting_of_ref": "indicator--9f6ad513-1456-4305-a9ba-2bb79208efad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb564a9-570b-4638-a4d6-30510079e84a", "sighting_of_ref": "indicator--b6daf96b-9efe-4a7b-9344-07b84e646106", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b98d87b-48ec-4ca3-93cd-d56812967c73", "sighting_of_ref": "indicator--2a7e9924-157d-4586-814a-ababe3091b03", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80613c6f-f4ae-49b3-8120-d58eb2f8b027", "sighting_of_ref": "indicator--2a7e9924-157d-4586-814a-ababe3091b03", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad761ec-e6ed-4ca6-9cdb-fce48aa04207", "sighting_of_ref": "indicator--f6e9731a-21d3-4971-9a28-f1230c3c9c93", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfa84c6-69ed-4f88-a69c-d8657db748cb", "sighting_of_ref": "indicator--1fa914b2-7980-4f1d-862c-84f1d2665581", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1720470-6cb7-4099-abe0-556ff1f96e43", "sighting_of_ref": "indicator--2fabea5a-a8fc-4cb0-8ff1-fadde4c1ec8f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37720547-2945-43e3-a2b2-4f2933549878", "sighting_of_ref": "indicator--c09a2386-d7a2-4c88-b1e3-b3737e8a334e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28eb7c03-7f3d-4c9c-ae31-e745acc9c6b7", "sighting_of_ref": "indicator--0cc02a5a-2db8-4673-9030-a7ad3b72dfbb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69cdf0c-760e-45a1-a61e-8c4db653ae34", "sighting_of_ref": "indicator--0cc02a5a-2db8-4673-9030-a7ad3b72dfbb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7c0d91-2068-4cdb-af15-1410620caab0", "sighting_of_ref": "indicator--cde83317-3648-46af-8f17-bdb52fca4a1b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc3078c-912b-43ea-972f-bb5be3bc9e31", "sighting_of_ref": "indicator--cde83317-3648-46af-8f17-bdb52fca4a1b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c97b7c0-2eab-4d01-b537-0bc62dffc7db", "sighting_of_ref": "indicator--cde83317-3648-46af-8f17-bdb52fca4a1b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676d62d8-0636-436d-8867-71797e688f4f", "sighting_of_ref": "indicator--43bb2f91-d830-4e07-819a-c604819ce944", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf57e35-ff28-4054-9cd8-f8439f646ef0", "sighting_of_ref": "indicator--43bb2f91-d830-4e07-819a-c604819ce944", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b3b934-137c-4495-bce1-413b6c732aac", "sighting_of_ref": "indicator--368d2ca0-e82f-46f0-afbf-72ab3049f16d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5aa848-4a66-4974-9c94-54d0be30fcf2", "sighting_of_ref": "indicator--79054bfe-637f-4d91-b669-158a58eb0fe5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e6d0c4-84cc-4ec0-a265-5dbaaf99d9f4", "sighting_of_ref": "indicator--9067ddf1-5571-4a01-99a0-54746c79eff7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e59bd17-3fc4-4f92-a607-ce5eb2193f93", "sighting_of_ref": "indicator--f5b4cd3c-e401-44cb-8928-e529abae4f5d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20c19c1-17e8-4f31-90a6-45faf69d96c5", "sighting_of_ref": "indicator--dd970c62-18fa-467b-aff0-af95a86fd1bb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762d42fb-0305-47eb-b030-644d753800c3", "sighting_of_ref": "indicator--b2607001-4601-4215-9338-802dc95bd1af", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d58ac8a-5d99-4045-afcb-7a2785d15bc8", "sighting_of_ref": "indicator--b2607001-4601-4215-9338-802dc95bd1af", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d97c50-3669-4241-83d1-087e66e4dd54", "sighting_of_ref": "indicator--2ee2852f-8b83-46ec-877f-684c21797fc1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09936c8a-bae6-4798-bea2-f121f1780b97", "sighting_of_ref": "indicator--b7a25a2c-fa2e-4cc8-b666-65bfa3a83587", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fece5841-ff72-422e-9a3c-03958d2d5f09", "sighting_of_ref": "indicator--b7a25a2c-fa2e-4cc8-b666-65bfa3a83587", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724a1317-431b-4937-be8c-9c49c3c94080", "sighting_of_ref": "indicator--b7a25a2c-fa2e-4cc8-b666-65bfa3a83587", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a96d353-0b55-4c3a-9ceb-377c19ec29c2", "sighting_of_ref": "indicator--8b84d8cf-e9ba-499f-b6c1-a463a3478b0a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abff5ed1-c880-457b-97a5-91006174757e", "sighting_of_ref": "indicator--ce545433-c830-4b5b-9ab7-fbe98701a702", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6c86ee-d768-4ee9-9c25-8bff28c36f05", "sighting_of_ref": "indicator--ba5139db-1546-41de-83a4-f93076b64bcb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a650f2d3-39a4-4293-a71e-ae1921005e74", "sighting_of_ref": "indicator--ba5139db-1546-41de-83a4-f93076b64bcb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f63f94-e9ae-4f18-830c-017865365cde", "sighting_of_ref": "indicator--ba5139db-1546-41de-83a4-f93076b64bcb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a722fd-36ae-4412-b2e0-c215cdb86d19", "sighting_of_ref": "indicator--57911d54-f8b3-4be6-8008-6a6cf8819eca", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b462603-4df5-45fe-9c7e-49294fab0189", "sighting_of_ref": "indicator--57911d54-f8b3-4be6-8008-6a6cf8819eca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ac6f5b-c1ad-427c-93cd-330e43188426", "sighting_of_ref": "indicator--57911d54-f8b3-4be6-8008-6a6cf8819eca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6afd46-dc62-464c-9ed6-2c2b51216863", "sighting_of_ref": "indicator--5f0ef0b0-1ca5-46d0-807e-a259cc23fd2c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e41577e-807c-4a0c-92bc-2c82f5eb7d7a", "sighting_of_ref": "indicator--5f0ef0b0-1ca5-46d0-807e-a259cc23fd2c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04764ab8-e103-4d91-907d-3de0917f4b63", "sighting_of_ref": "indicator--5f0ef0b0-1ca5-46d0-807e-a259cc23fd2c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ccfa0a-2a17-4beb-ac63-9541a8c45324", "sighting_of_ref": "indicator--c39fef24-295d-40d7-8760-f9abc6c18b36", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a51e1a-9f47-433a-9b66-7085c98b5f91", "sighting_of_ref": "indicator--c39fef24-295d-40d7-8760-f9abc6c18b36", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89152fb4-cf45-400c-9cb9-9955ab757365", "sighting_of_ref": "indicator--f4ed76fe-d973-4849-a0b3-33f983611fa0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb1b4f3-91ba-4b80-84b2-3b3440e6ecd3", "sighting_of_ref": "indicator--e767c371-b3ae-4e2a-9f00-9433e3544533", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efba006-324f-4d94-9bbf-d3c6f7b83647", "sighting_of_ref": "indicator--e767c371-b3ae-4e2a-9f00-9433e3544533", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019f413b-0a7d-46d1-a615-bb6ebd1b20c7", "sighting_of_ref": "indicator--eaac1822-6126-432b-8e70-594ca018bd91", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c267b30-9fba-43e3-8631-bd04c58c8b12", "sighting_of_ref": "indicator--5accd039-f710-4e8b-b543-ebf5aa8528d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f172a28-c4be-4665-8b37-502fa0936afa", "sighting_of_ref": "indicator--0beb2bce-028c-4545-b6b7-6f88b2bb4a2c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef88c1c-0a3f-4456-ab56-e564db1a4cd5", "sighting_of_ref": "indicator--6ab4dc99-fccb-43f5-9db8-ec37b0c82f3c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a571499e-ccb6-4ef8-bc1f-d5b552c63ba9", "sighting_of_ref": "indicator--1b01bafa-f4d1-49ac-8836-7411dc132e92", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527edcf9-8d40-483b-8ed0-e828a8fd229f", "sighting_of_ref": "indicator--73d18f8c-d442-48d5-8bb8-ed355c9d398b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81088cf3-8bf6-49c3-a267-11fc632f4831", "sighting_of_ref": "indicator--d290ec94-4a2c-4f1a-ac6e-26744a9b68b5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7577b5ed-8eed-4f6d-b125-0fcffb230331", "sighting_of_ref": "indicator--3c7dc481-9991-437a-bade-cce124bf6f07", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030bafa6-f00b-4af0-9cfa-e5c3d2ebb6dc", "sighting_of_ref": "indicator--79389a0c-2ef6-48c4-b171-bacfaeb1a92e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52acce7-f641-45c7-b9b1-0d3fb00b35c5", "sighting_of_ref": "indicator--d89ef51c-d746-42fb-95de-306a72820c51", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe96250-906a-41bd-98cd-478b687a09dc", "sighting_of_ref": "indicator--75be8db0-3848-4984-bb00-0da4fcfb2151", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56edd283-3554-49bf-a40b-e4d4ab65f6fc", "sighting_of_ref": "indicator--cf775347-25f9-4dcb-b0b7-031320764dc7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf949dd-6382-4b70-b2da-d1ebd43978c0", "sighting_of_ref": "indicator--6c6b8eff-c500-4069-a3c1-b48ce8de3d6a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0130ba7-c8e1-4e1c-94c4-7be1d66493ac", "sighting_of_ref": "indicator--147d7885-56c1-4678-a074-cd5eaed5796e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e5e4db-8639-4aca-8933-a7caabd43cee", "sighting_of_ref": "indicator--147d7885-56c1-4678-a074-cd5eaed5796e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a95ae4-37f4-4d67-9f82-e78c34457c6b", "sighting_of_ref": "indicator--8a9f57fb-7781-4e8d-b7cd-deb42e1f5644", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d750228-7257-42a0-bbdb-c4eb1c7b09e2", "sighting_of_ref": "indicator--8a9f57fb-7781-4e8d-b7cd-deb42e1f5644", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4caa6a70-4f54-4809-acf7-2104ade25e5a", "sighting_of_ref": "indicator--8a9f57fb-7781-4e8d-b7cd-deb42e1f5644", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbd506c-2df4-4e35-9b24-d867494ce3d0", "sighting_of_ref": "indicator--5f39a0a6-3bec-4126-b2ff-9cf43e7ff8f5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7490b96-c953-41ed-a455-9a96d27bae38", "sighting_of_ref": "indicator--3cb9cf74-c64a-4daa-af4e-c228f6221c67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624d438b-1017-4eb1-a793-453321250376", "sighting_of_ref": "indicator--86425e1a-b98b-4012-b36a-7a043ff1016e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2a0513-b0ba-4a59-9876-c6c139e23c62", "sighting_of_ref": "indicator--acef370e-9288-4029-9395-f126f1f00619", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5473553d-fc6f-4bc8-8b9b-7eb17559a041", "sighting_of_ref": "indicator--5bc3d20d-8a42-45af-bddc-78896346ebc3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a6da77-2ee4-4cf4-a7ef-f63398726a2d", "sighting_of_ref": "indicator--63bae397-8f7e-4b70-a4f0-62565c18386e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3795f3fb-fec8-4e3b-9210-79498c4fffa4", "sighting_of_ref": "indicator--373143a3-61ab-4f56-bc8e-ee7cf3e7298f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06f0316-fd8f-412a-9e1e-80d4a5ad3417", "sighting_of_ref": "indicator--dda5e784-665c-410a-b4ea-5e6205dbea99", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e1dc34-19c3-43a7-947c-6a64ced2c516", "sighting_of_ref": "indicator--8f661b2f-c057-4739-b9eb-5f099c975f31", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc40cb7f-ffc7-4c8d-916c-b8cb240d6d27", "sighting_of_ref": "indicator--7ce58150-c052-424c-889d-2743e2fa8de8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b920421c-e4c4-4c4e-9fa6-d9301e09658f", "sighting_of_ref": "indicator--f3fe00ec-ea76-4786-9caa-04717e84fc99", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bcb44e3-da94-45c2-a21d-d691b01b246d", "sighting_of_ref": "indicator--fecc8ba3-2b00-4d77-bc0a-500f98d43a62", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d3a75c-dce1-4c06-bbed-826f7f2d607e", "sighting_of_ref": "indicator--02478bcf-32f6-4d3f-bf56-04f2b29a0c3a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30c9760-4621-411b-8392-0610307a404b", "sighting_of_ref": "indicator--80dafa0c-948c-43e4-aa4f-d0e099e99774", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b60860-78d8-49c2-b681-44cd2cd043aa", "sighting_of_ref": "indicator--16e4dfb9-89cb-4d1d-a48f-bb88fc6835b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd76f2ca-c400-4005-8247-7a329e58fef2", "sighting_of_ref": "indicator--525230d0-5496-455f-a1e0-002661e9aebe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeba586a-fc4f-4eea-872b-99acb6d8af41", "sighting_of_ref": "indicator--9555a312-7e9e-4008-a7c9-2253f9902900", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5760ee-23c8-4c0a-8237-22ccb9aec2b1", "sighting_of_ref": "indicator--fee44aa7-a4f1-4a0e-b06f-cd75a9499d5c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d832e9-0f17-4986-abe3-d0f898931480", "sighting_of_ref": "indicator--23dd54c7-bc63-4975-928b-3560de4c2972", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfe0772-6768-4422-8d26-2db12c26f18f", "sighting_of_ref": "indicator--f1198db0-7352-4bdf-b2e4-8820277ed31f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47b87b6-1087-4ad1-ba85-85a537dc9762", "sighting_of_ref": "indicator--8b2d761f-bd16-4574-8cb7-ea242ad57409", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa2cd5b-a157-49fd-9cfb-9554ad2bd1c6", "sighting_of_ref": "indicator--82379b70-c5b5-49ce-9c75-b61a478b1059", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274501a3-d9a2-4edf-b631-3b6cb38a34cd", "sighting_of_ref": "indicator--30a4c254-42e6-4c21-927d-27c81a9862d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad077c50-5971-4c72-83e2-2f89ed4c5b6a", "sighting_of_ref": "indicator--2c741a8b-cbd3-43f0-894d-b6ccfd860284", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd7be98-2627-4767-827a-c0aa8a1fd8a0", "sighting_of_ref": "indicator--c0970b1d-f51b-4185-8229-d19c4f8a6b7a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a98916-c4cc-4268-b932-8b6a07e1fcd7", "sighting_of_ref": "indicator--88be7fc5-d102-4b8e-87e6-314d12cb6a1b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a35a57d-0a68-4cfb-9483-96aac63b485b", "sighting_of_ref": "indicator--ed2b951c-f9c3-4e76-a659-0314f99638b6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d548f682-aac1-4100-958d-7d40c0f094ef", "sighting_of_ref": "indicator--d8de16b1-9e43-4de8-bf7b-f92812a7159c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e3cd2e-9ed0-4c58-bd09-d489799cb249", "sighting_of_ref": "indicator--d8de16b1-9e43-4de8-bf7b-f92812a7159c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c188bd-e925-4b8b-9e2e-048bbbf8b107", "sighting_of_ref": "indicator--3f714505-b06c-48dc-b178-af558ca025c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06d0627-7bcd-4509-bd60-b61e5df51165", "sighting_of_ref": "indicator--3f714505-b06c-48dc-b178-af558ca025c6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4429e03c-ccad-43f5-baaf-53900c873469", "sighting_of_ref": "indicator--0a0a8336-ad7f-4401-b76c-836ff32991b3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110f34a3-33ac-42ff-bf9d-50ed1c523605", "sighting_of_ref": "indicator--2af43f16-fe3d-48b9-ba99-61ce8f1e7bb7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197d9319-4aea-481f-96ef-70a0b5fb0c6e", "sighting_of_ref": "indicator--be632545-a51e-43b8-890d-4aca27e181bb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0a2a43-1167-4aaf-98ff-aede3945a421", "sighting_of_ref": "indicator--be632545-a51e-43b8-890d-4aca27e181bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6abe1b2-02da-4c69-9d1b-b094668d9a13", "sighting_of_ref": "indicator--c4a9143e-bd98-418e-974c-80f6fa32c4e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40e1710-d8d0-40fe-ad2c-66b033c8f397", "sighting_of_ref": "indicator--a6375c4e-0a8e-42ab-baae-90103204e7be", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129215b3-6184-4181-8ccb-4a8433e0de4e", "sighting_of_ref": "indicator--b9e8eff8-e266-41e9-a7f6-6e97543207d1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d3282a-d654-412f-86c4-c29d8c18a245", "sighting_of_ref": "indicator--01045227-25a1-4c03-9cd1-bf706a8f01de", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022b967d-dfc5-4667-989b-ab0b028ca0e2", "sighting_of_ref": "indicator--93004a7a-126c-4092-88d3-114671378854", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4546e0b-b8f1-40e4-be5d-691469080a55", "sighting_of_ref": "indicator--51f90fc9-42f4-4bf7-806e-c6d3969152f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816eaa72-fc5b-4607-94c0-a0afa51d5ee6", "sighting_of_ref": "indicator--51f90fc9-42f4-4bf7-806e-c6d3969152f4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8187a93a-06f8-4f14-8bcb-35a3235247af", "sighting_of_ref": "indicator--21e6910e-d9bc-488b-9772-a4a733f13192", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47074c10-a62a-4e2a-9dbb-15665255af08", "sighting_of_ref": "indicator--80f8c0dc-ecf6-41d6-a809-8eca85b5ceff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9329023d-9851-4acc-90ce-1f97d7e46ccb", "sighting_of_ref": "indicator--80f8c0dc-ecf6-41d6-a809-8eca85b5ceff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03122cea-a624-4a9d-8351-07db7237a532", "sighting_of_ref": "indicator--7d1b5e42-f3ec-4a3a-990f-e3b53f28b665", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a019ec26-6434-4eea-8f16-b8f63008c318", "sighting_of_ref": "indicator--686d374b-9aca-4470-87ea-a037105b7b65", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ca6158-e308-45e3-8357-bd01750180f6", "sighting_of_ref": "indicator--d8c52b83-2a2c-4430-9d18-d3fcb7221472", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4ac4aa-04db-4cf5-be8e-e3f01322e626", "sighting_of_ref": "indicator--e4f3cad1-ebdf-40ba-9f4c-19699b28ec11", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea9a41c-ede5-49f8-a747-16e1740e82d2", "sighting_of_ref": "indicator--ac0e4b4c-d2c7-490b-be8e-4306c21eecca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6ebd7b-9585-4745-99fd-d7b6c7d66dc0", "sighting_of_ref": "indicator--ac0e4b4c-d2c7-490b-be8e-4306c21eecca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbbc564-b6ec-4a69-86dd-0fc037f9ac60", "sighting_of_ref": "indicator--2d1c68d2-cc5a-438a-b4f5-09eab423fa73", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7383cd2b-2285-4023-a7b2-8405bece8b0a", "sighting_of_ref": "indicator--9903f86a-7354-4560-9810-8bc522a05960", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72419822-aaed-4ddd-88de-b17918e8eec2", "sighting_of_ref": "indicator--20955614-cec3-4229-8057-12706fd5a374", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fa0e28-92f3-4592-9e47-e5452fac16be", "sighting_of_ref": "indicator--bede92bc-4611-4fb6-9d48-3fea555718c1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4776d0ac-e7e6-41a6-a878-5464f31a5914", "sighting_of_ref": "indicator--bede92bc-4611-4fb6-9d48-3fea555718c1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d7ee26-1c35-440a-ad25-9655623f912a", "sighting_of_ref": "indicator--dcef51ff-9d53-41e9-bb55-599f19a21e06", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f37b64-e3f2-4b54-8ac7-f3d56068f579", "sighting_of_ref": "indicator--b5133530-a7a0-4942-a176-0a5394bda97b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc05360-13d4-4b81-8778-70acf18ac8cb", "sighting_of_ref": "indicator--1a23af15-295e-405e-99de-92c1c2487be0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19df4435-27bf-4732-aeed-89d18a0d25ce", "sighting_of_ref": "indicator--1a23af15-295e-405e-99de-92c1c2487be0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f7e887-d985-479a-8600-676dd4ba9af4", "sighting_of_ref": "indicator--70126fa4-62d9-4138-a360-3233616a4cb9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c63ae6-9206-41fc-80e3-d0e2dd1ce2f6", "sighting_of_ref": "indicator--70126fa4-62d9-4138-a360-3233616a4cb9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ef1d98-609c-4fac-ad52-2e5617d6852a", "sighting_of_ref": "indicator--2a7c1059-0aa1-4d71-8284-bc9bea3c08f0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f9b121-3206-4793-a4fd-9f03aae8c789", "sighting_of_ref": "indicator--9c1878da-798b-4f15-b5ea-8cc7d9f3a061", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4e89ec-86a4-455d-b754-20fb4d9e44fa", "sighting_of_ref": "indicator--78ad4810-721e-4db5-ad72-1c6ec41d75c0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db284f8-f92f-4985-a807-f19e0482a4a9", "sighting_of_ref": "indicator--78ad4810-721e-4db5-ad72-1c6ec41d75c0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8773545-f8ee-4d65-ad8a-5721bc8afbca", "sighting_of_ref": "indicator--99c2475b-f904-42c7-a0a5-838763dd9db0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea8605d-6b2b-4e2b-8c96-d0e09ad4a39e", "sighting_of_ref": "indicator--99c2475b-f904-42c7-a0a5-838763dd9db0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd9830b-a8e2-4cbb-8544-6e2663d707bb", "sighting_of_ref": "indicator--99c2475b-f904-42c7-a0a5-838763dd9db0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ab9605-29cf-4e17-a5b0-9e1be1f6436c", "sighting_of_ref": "indicator--99cb0a3e-3ba1-46aa-9a8d-2e9a65063986", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b0bf40-519a-4068-bd62-bf382bd0a3b3", "sighting_of_ref": "indicator--533b2ab9-7470-4a34-baba-ac42b770748f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aaa894c-ce75-433c-a502-7b913b88c3d2", "sighting_of_ref": "indicator--533b2ab9-7470-4a34-baba-ac42b770748f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fed678-d29d-4369-a504-c2c523edfbd7", "sighting_of_ref": "indicator--b6674da0-99fc-4c61-add2-20da93f0d2cd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3779c58-b65b-423b-82a3-cf1d84797c07", "sighting_of_ref": "indicator--235f0766-81d1-4aa5-acda-6f5e399183e5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196d89ee-802d-43a1-a801-5a42a22c5944", "sighting_of_ref": "indicator--7652e9bf-8157-40e8-836e-19487a38f9bf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e3ca03-302e-411c-8a2f-cdcb2c5daedd", "sighting_of_ref": "indicator--7652e9bf-8157-40e8-836e-19487a38f9bf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3b6ea2-aa82-47f6-8258-4a502852ca14", "sighting_of_ref": "indicator--7652e9bf-8157-40e8-836e-19487a38f9bf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bf1bef-b1ae-424c-b40f-0c05b8c03d70", "sighting_of_ref": "indicator--55bec290-755f-4889-b02a-7eb197beba3d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5754a746-9662-430b-a5e7-2c1883eed72c", "sighting_of_ref": "indicator--55bec290-755f-4889-b02a-7eb197beba3d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd49de4-a919-4254-b5f5-bcab0410595e", "sighting_of_ref": "indicator--55bec290-755f-4889-b02a-7eb197beba3d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ca68b7-1a11-4c08-9d9e-5803f0dc543c", "sighting_of_ref": "indicator--1edb22ea-e690-471f-b126-e0cbdac78b01", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbb6d6c-e810-4d6b-a843-554e36654322", "sighting_of_ref": "indicator--45e34b4c-0977-429e-bc90-fe7afac64b3f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1e0342-068d-44c9-b7e7-4c7bcc321ede", "sighting_of_ref": "indicator--45e34b4c-0977-429e-bc90-fe7afac64b3f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376c36c1-ec1a-45e1-8639-b7ec771540ba", "sighting_of_ref": "indicator--45e34b4c-0977-429e-bc90-fe7afac64b3f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d3cd08-38ad-45ed-b4fd-d29fb09e53dd", "sighting_of_ref": "indicator--79a88c51-731d-4e5c-b7ca-be0a7af118de", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0826ba47-22d8-4433-8484-c451c5e72b04", "sighting_of_ref": "indicator--79a88c51-731d-4e5c-b7ca-be0a7af118de", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175e20bb-e370-4380-8bf7-17b96100e418", "sighting_of_ref": "indicator--528cfb49-496c-421a-88e3-126f06aa7bf0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb79a66-f78f-4cab-be46-df65a19d264f", "sighting_of_ref": "indicator--8d32137f-5730-4e08-a803-d3e0b52fa977", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145f0a8b-cf6c-497d-a97b-707dbd312005", "sighting_of_ref": "indicator--9a357643-9def-4a0f-a1a4-2c7b0d006276", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48f8027-8fab-457b-99d7-5dc494d1d354", "sighting_of_ref": "indicator--f0199cfe-41cb-4ac4-a237-d2a0bdf402de", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cd8592-ad2b-497a-8012-7c28625aabf2", "sighting_of_ref": "indicator--0ea1c48e-9142-4cef-a711-c5a9e0a9e501", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7789e8-0127-4655-b2d1-da588d7b3f8d", "sighting_of_ref": "indicator--0ea1c48e-9142-4cef-a711-c5a9e0a9e501", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc38c54-ff92-44eb-bfd3-8540a65ba7a8", "sighting_of_ref": "indicator--6bfce209-6e3a-4538-95ab-adf0b4055211", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab20b342-ee7b-4953-9cf6-fc52dabb2aa1", "sighting_of_ref": "indicator--6bfce209-6e3a-4538-95ab-adf0b4055211", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad95c678-e10a-42fa-aa4b-7de97f72c153", "sighting_of_ref": "indicator--80d1e8d9-e401-42be-b3aa-69089125f1fb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d39024-eca7-4489-821e-c6ff87201066", "sighting_of_ref": "indicator--80d1e8d9-e401-42be-b3aa-69089125f1fb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc368ba-9efa-4018-8905-8a0324e2c1ef", "sighting_of_ref": "indicator--5978614e-3104-49b2-b05b-ee07609a6a9c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39dc31a-4c6d-46e4-afdd-fd22f6dcf292", "sighting_of_ref": "indicator--5978614e-3104-49b2-b05b-ee07609a6a9c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b07064-f444-4dc8-80ed-d84724c44b53", "sighting_of_ref": "indicator--5978614e-3104-49b2-b05b-ee07609a6a9c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd19796-a28e-459b-9d0d-02b9a9a03a83", "sighting_of_ref": "indicator--8dbfc113-ed1c-49ab-a916-a00cc739bb71", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e1f919-a987-4408-8026-6c86c735bb5d", "sighting_of_ref": "indicator--8dbfc113-ed1c-49ab-a916-a00cc739bb71", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c50e982-e4a9-4d19-b569-12d6f54032e6", "sighting_of_ref": "indicator--8dbfc113-ed1c-49ab-a916-a00cc739bb71", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2672984-e34a-4111-a6af-fefb43bc9998", "sighting_of_ref": "indicator--63a143b3-5e0a-4de1-9206-903af8abff40", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01222ff-9cea-4b2e-8f21-b861c284ada5", "sighting_of_ref": "indicator--60cab8df-e29e-4bb0-8b80-4130d2659d90", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165db91d-ce2d-4983-9b71-e3f5734270e8", "sighting_of_ref": "indicator--60cab8df-e29e-4bb0-8b80-4130d2659d90", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57040a59-e595-425d-9b81-e68df9868a00", "sighting_of_ref": "indicator--60cab8df-e29e-4bb0-8b80-4130d2659d90", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30011e0-40de-4362-9d13-0e268cc66e5e", "sighting_of_ref": "indicator--327baa1e-8dff-4b29-954c-3b6a91b3d538", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba585785-ceb8-441c-8dda-aa69c35289a4", "sighting_of_ref": "indicator--943af817-43d4-4af4-8c36-bc44173541f6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7afb8d6-179a-43a3-9d2e-d1063ee79bb7", "sighting_of_ref": "indicator--f4f9d448-06d5-4a39-bca4-f9ea21292a31", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a62766-b66f-4054-8d56-947de6c8cdb3", "sighting_of_ref": "indicator--649d0379-c713-4cb8-a695-d72467391f3c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58baf32-eb77-40dc-85c2-28a9dc51a96d", "sighting_of_ref": "indicator--649d0379-c713-4cb8-a695-d72467391f3c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3697504a-76e7-4b2a-80df-b31b201805db", "sighting_of_ref": "indicator--649d0379-c713-4cb8-a695-d72467391f3c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98e9175-efce-4a22-81fb-a3010bc5f753", "sighting_of_ref": "indicator--1db08574-fa68-4a23-b00b-27759cfd669a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fc8e79-957a-4ac3-90cc-60e5d2fd2948", "sighting_of_ref": "indicator--78a690d3-d538-4ff0-9c8d-19d13f49cc5d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeccff33-52e3-49d6-9d8f-130da7c33df8", "sighting_of_ref": "indicator--1be0b6b1-0a4a-49ce-a64a-d88f3c1adea9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917f4956-0bc0-45e6-a62b-b07143700d4d", "sighting_of_ref": "indicator--0aa59bb1-5cab-4e0e-8df9-6cf5cd37d301", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9065099-3465-4ed4-a789-46bd21fab99e", "sighting_of_ref": "indicator--9bc38854-e821-44c1-a3c1-7513ad038e30", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2101a673-8f76-4253-9fa2-0d581cc0211a", "sighting_of_ref": "indicator--9bc38854-e821-44c1-a3c1-7513ad038e30", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8718b1e-cdb9-488a-ab55-99abb8b708d9", "sighting_of_ref": "indicator--08f566f2-a85b-4d74-84e6-7893b3368902", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7918e926-d4c5-4dad-b2c4-14c290053a50", "sighting_of_ref": "indicator--4ecf0d86-bf40-472c-8a9b-49ee47100d77", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066e5b95-1bc5-44c1-bbe7-ef9926efe70a", "sighting_of_ref": "indicator--0e1b31d6-3182-4336-afce-7980e0a316bb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b2ffe0-1100-4cd7-bb73-d595d4703b12", "sighting_of_ref": "indicator--0e1b31d6-3182-4336-afce-7980e0a316bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb8a9bc-c1ae-4079-86b8-a0f2003f0770", "sighting_of_ref": "indicator--cb49d73a-6eef-4659-9e7d-c75fbf4905aa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec1c457-08ff-464a-a6d4-d5fab0293565", "sighting_of_ref": "indicator--cb49d73a-6eef-4659-9e7d-c75fbf4905aa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5becb852-40db-47de-aa42-161b0f0c08ee", "sighting_of_ref": "indicator--68f2ba37-3d9a-4349-9b72-e37c854bd13e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4353ca9-f203-4998-ab4b-07de922e3429", "sighting_of_ref": "indicator--68f2ba37-3d9a-4349-9b72-e37c854bd13e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86141fa7-c2ad-490d-9ec1-c3ab964f4cd8", "sighting_of_ref": "indicator--523f9880-e014-440a-b2b2-50f6f9a564d2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55901425-56ad-4c24-80bc-6672a8309725", "sighting_of_ref": "indicator--7f67e5f7-7c5e-4613-afcf-f1ee1851b247", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed0412f-5333-4dd8-87d6-ac9c8a4d3165", "sighting_of_ref": "indicator--1f54d4ab-f129-4f78-bd79-12ac4b1848a6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2952146a-71bd-4bb2-baa5-b5b713e29f09", "sighting_of_ref": "indicator--755244f6-7243-44fa-87d6-e1c11f48b099", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ce2442-bb27-4cdb-8a6a-b07207c7f777", "sighting_of_ref": "indicator--d4f27a1e-462c-433b-bdd6-e653b10b80ea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d731987-92b9-4bf2-9296-e45cee1144d2", "sighting_of_ref": "indicator--d4f27a1e-462c-433b-bdd6-e653b10b80ea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7608a62f-e33b-40bc-a360-18a3b3b19759", "sighting_of_ref": "indicator--a814f738-d385-424f-8f37-d8e1a1d458bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d95bea2-ae7d-4adb-a528-f4d839d692d0", "sighting_of_ref": "indicator--a814f738-d385-424f-8f37-d8e1a1d458bd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a7b873-38c6-4429-ab18-61e84cca0887", "sighting_of_ref": "indicator--c91a7266-470c-4aec-b82e-b8b71a9306b4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff87083-3a91-450f-97fa-773cd5876896", "sighting_of_ref": "indicator--0a9c5175-e6e4-4432-9320-422c719321c2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d938f59b-749e-4255-bad0-39eda7d7c4a9", "sighting_of_ref": "indicator--0a9c5175-e6e4-4432-9320-422c719321c2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2dd645-8847-4395-a51f-7134265b0c1a", "sighting_of_ref": "indicator--0a9c5175-e6e4-4432-9320-422c719321c2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597d9ac6-3466-462b-b2cf-6958291db38f", "sighting_of_ref": "indicator--001f9a88-3742-41ef-bb1f-5714bc7e675a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0daa5948-5ec9-4cfd-ab8d-ddfce1e316eb", "sighting_of_ref": "indicator--85d7a91a-6f48-4b03-863b-0727b3051736", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a88a131-b69a-47e2-ae45-347e60c3f75c", "sighting_of_ref": "indicator--85d7a91a-6f48-4b03-863b-0727b3051736", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67db6b3-b4ba-4352-975b-9047e9f230af", "sighting_of_ref": "indicator--85d7a91a-6f48-4b03-863b-0727b3051736", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a3a7c8-e666-4127-aac9-7201c3844871", "sighting_of_ref": "indicator--77b5a166-a347-4c06-b06d-4cf20433675a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99003d1-a6b5-4bee-a879-72fdd2a30d90", "sighting_of_ref": "indicator--d1c046ec-96d5-4f84-8c02-aaaf64d443b3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8bc0a7-3336-49be-b188-caaa5bad301a", "sighting_of_ref": "indicator--a403943b-2460-4e4b-be98-d2f980f97773", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5ae11a-bb28-4042-aaf2-a41372db0458", "sighting_of_ref": "indicator--a403943b-2460-4e4b-be98-d2f980f97773", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf03440-580f-4885-ae78-65b03eeb16d5", "sighting_of_ref": "indicator--27d412ad-acb5-46e6-bf56-19a084cd7430", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29210e6c-97ed-4039-8f62-60dc6092483c", "sighting_of_ref": "indicator--ef8785a4-709d-4978-a0b1-b94727f2e552", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e66e41-a85e-469a-9362-33f45986fd1b", "sighting_of_ref": "indicator--d8ad6948-cd79-42b2-8a87-f0d1dc33d84e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3543b1d7-c933-414b-b53c-0696daa64bdd", "sighting_of_ref": "indicator--d8ad6948-cd79-42b2-8a87-f0d1dc33d84e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56234f4-c69d-400a-96fe-58b12725affd", "sighting_of_ref": "indicator--4cd4be47-0e3b-41a1-8cd1-fbe2b09320e6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636df813-8458-4cfd-8ab9-19a38e4c7483", "sighting_of_ref": "indicator--4cd4be47-0e3b-41a1-8cd1-fbe2b09320e6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee42f67-faad-467b-854c-da1c35fe903c", "sighting_of_ref": "indicator--b6f0389a-6484-47d2-8bca-1dcc98cdb62e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2764114-7539-4eea-af14-9959639b4107", "sighting_of_ref": "indicator--dd9513e2-1c37-4ea3-96f0-d9bfdb05a1bc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741463ec-e084-4ec9-87b6-9c1194b8da3a", "sighting_of_ref": "indicator--8755af1f-37e7-41a5-9238-51bc140247b5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d89ba8d-43de-4779-928d-504e9c1c9308", "sighting_of_ref": "indicator--416ded70-6fb7-4e65-bdba-046b63e12965", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2f37be-076e-4adf-8299-b5148b200870", "sighting_of_ref": "indicator--1cacc35c-dc1d-4586-b259-17479e3c2a86", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fe10da-a35b-4112-847b-3db28a1d3bef", "sighting_of_ref": "indicator--3b1874bd-10bc-4381-8f31-d54b2efed1b6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4d68fd-fd34-44d1-8949-bb2812b43f94", "sighting_of_ref": "indicator--3472922d-8fda-4bea-a10a-3b05581e11ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2179a5-8ff2-47e8-8418-fa8fb29f6644", "sighting_of_ref": "indicator--f8bb1ac4-f82a-4e3c-80bf-9e0f612b32a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8270e3-3d23-4601-a994-df436bf64432", "sighting_of_ref": "indicator--9e655dba-81d9-40bc-ad3e-0d4132fcb2b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6ceaa2-3a04-4d81-9180-f33f60424ec6", "sighting_of_ref": "indicator--9b7137a2-eb13-4841-82aa-9471e98fe4cc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e22677-88d6-4c92-a7d5-0bdbce7d643d", "sighting_of_ref": "indicator--20e76aef-38d5-4178-adee-e0199730cbbf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe22dd8e-6e1d-4871-9509-ba3ab650b0a2", "sighting_of_ref": "indicator--b7190cdf-46c6-4a4c-8826-20225d99cb49", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9434a401-5ecf-497d-8055-31cfdfeab333", "sighting_of_ref": "indicator--fb78bbd6-fd70-4b45-b13a-29c756b52930", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620023ce-33ca-4800-8c37-b1dd6d2a884b", "sighting_of_ref": "indicator--3b8d18af-52d5-41f9-834c-e6dd699ee454", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fc9d4d-91b7-4b29-81ff-3fe754010e94", "sighting_of_ref": "indicator--47dbc0a4-1cfe-40b6-9432-8cb206fe89e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f9ff3a-2c16-4544-8738-6b28ce342dd5", "sighting_of_ref": "indicator--47dbc0a4-1cfe-40b6-9432-8cb206fe89e2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebea3d88-64c5-44e3-a96c-21176be5e498", "sighting_of_ref": "indicator--47dbc0a4-1cfe-40b6-9432-8cb206fe89e2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53eed52f-2e38-422d-808c-3d6f9560a06e", "sighting_of_ref": "indicator--ee7d5c21-3c37-4d57-a8d8-51ceccd0eb16", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf042a9-cdcf-44c9-a038-ae7f9a1639ec", "sighting_of_ref": "indicator--bbecff95-e952-4b5a-a281-f5a98ceca587", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739e813c-8765-4435-9420-a33b11767fee", "sighting_of_ref": "indicator--4db03893-8a3e-47bd-94f6-d6959b0a4f81", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a70d34-bac0-4766-9358-0e1eaabdc818", "sighting_of_ref": "indicator--2d6ad689-8467-4c6f-8da2-e9a3536d5968", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5bec05-1c9b-46c6-b1f3-119ead5e8af8", "sighting_of_ref": "indicator--16aa83a7-7126-4700-8db4-30e838ce377b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7058790f-ea42-4188-a1b3-faae1db3a4ef", "sighting_of_ref": "indicator--8b5fd878-238e-4bc2-9ea1-88550eab0014", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dddef68-4c4f-4ed7-85a3-5fb8b0f0de2e", "sighting_of_ref": "indicator--1994a631-49c1-4130-91db-22480f2cd0d9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e35764-c8c2-450c-916f-7ff05512d368", "sighting_of_ref": "indicator--1994a631-49c1-4130-91db-22480f2cd0d9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec49582c-00d6-4061-8632-2a1d9fb6bd7c", "sighting_of_ref": "indicator--46e4c05e-ba27-4125-a8cf-8847b7ecb3ab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b70ba4-9399-4c00-b309-2d4390be803f", "sighting_of_ref": "indicator--24a76eb6-aa10-4387-bd41-a0e2764f41a6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2540ab9a-ad22-4da9-a15d-a113cb1597ac", "sighting_of_ref": "indicator--3d6212c3-5eb0-436f-a577-47e5cfdc2e63", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29b8f46-dbd2-417d-b2f8-7371c0dd4d88", "sighting_of_ref": "indicator--cdd08d17-9b39-42d2-8a0e-7aad175b1a6d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58c44e6-c57b-4126-8c8f-391dc2974dc1", "sighting_of_ref": "indicator--03f70161-01d8-4558-a9c0-c35bb6ecb22d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4f6040-3fa6-4c7a-ba29-8ef4f2bdc0a0", "sighting_of_ref": "indicator--82c50ef8-3c6a-4cdf-8226-1db7cf7c17a1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d2ea23-518d-4457-b2b5-81dff0724258", "sighting_of_ref": "indicator--c4d09e56-727c-4678-8c25-03e590c4da22", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f57bcc-760a-4a4b-ada8-ca198e4b5ba8", "sighting_of_ref": "indicator--d86b640f-a474-4b42-a5d7-efbf0808d701", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb117aa9-0482-4e95-873c-259371048bcf", "sighting_of_ref": "indicator--8a650f82-1d7f-4bc3-a9f8-7099bda402ae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9e751c-cc69-4da2-8909-0d6d1e130fe1", "sighting_of_ref": "indicator--5a275c0b-d746-4024-b629-33ff5de27a33", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c4b2b5-5b7b-4d55-9e5a-44e8dcecd1c8", "sighting_of_ref": "indicator--5a275c0b-d746-4024-b629-33ff5de27a33", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b50db0-299d-4ca6-b7a3-51a0fd998416", "sighting_of_ref": "indicator--1e551c52-e9dd-4ae6-bc8d-0bffb2947442", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf705c5-0343-4b50-9cf3-f26bcb1078a4", "sighting_of_ref": "indicator--c09a35de-ba4a-43ce-adb8-f7e550d319f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ab0df9-ba5b-46af-948e-7a6d93aafc8c", "sighting_of_ref": "indicator--a989c47f-be0c-4cb4-b6eb-55b34d0cca85", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8d69ae-d088-4749-b7fa-8c43f0a87de5", "sighting_of_ref": "indicator--cba77390-8183-48d1-8d9e-801e248538ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dac564b-f2cc-4258-807b-c84f89c3e25d", "sighting_of_ref": "indicator--66d4dbd8-c3c8-4cf9-8eb9-63713e3f52e6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6705251a-6a16-40c3-8e74-800446444298", "sighting_of_ref": "indicator--66d4dbd8-c3c8-4cf9-8eb9-63713e3f52e6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99f0d1c-874a-4976-9d72-43a2e8e9712e", "sighting_of_ref": "indicator--bd1484cd-8eea-412b-b004-4ac6e86afcb8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d7e110-db7e-417a-b19d-f50871eba0eb", "sighting_of_ref": "indicator--f7b99b14-b6f1-4c9e-9eda-83acd8b76c82", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c149a4-ce62-40c4-a981-bf39025d60fd", "sighting_of_ref": "indicator--fa047f88-57e7-499a-82a6-9a015d133b20", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f6def2-3699-43e3-9448-15e85a7608c4", "sighting_of_ref": "indicator--990016d8-3fb0-477c-a849-259bfe8c346b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7602cbf-e724-4fbd-93d8-b0a417623a05", "sighting_of_ref": "indicator--cc537e59-6023-4f5f-bc73-e9b2191343f7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a948d48-6b2f-485c-a328-19e977971cc3", "sighting_of_ref": "indicator--84d8abea-6908-49a6-82d2-8caa520c294b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07866c4-f3b9-4f4f-9346-e374b024c4ae", "sighting_of_ref": "indicator--c287d891-8b4e-434b-833e-5524040271ea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b522e8c-784a-455c-934e-d1f1f764b836", "sighting_of_ref": "indicator--63ffdbaa-c16d-49fc-a051-af33fdfd4346", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1b66c2-dbe1-42ac-9cf0-ab85cdee719c", "sighting_of_ref": "indicator--63ffdbaa-c16d-49fc-a051-af33fdfd4346", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f858d4-2b3a-495d-b2ec-14fb46083b03", "sighting_of_ref": "indicator--497467d7-9c60-4da2-897f-9c5df20f532c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a247f502-b453-4dfc-a78f-f1a5fa08ede6", "sighting_of_ref": "indicator--42ada5a7-640d-46f4-a3b4-94582b49efa5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae9ebe7-53ba-4a52-910a-5b7569079658", "sighting_of_ref": "indicator--6a3f330d-5c13-4e57-a148-bc2a27ac6c57", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ed5d46-3886-45b2-94b6-9012c95c2933", "sighting_of_ref": "indicator--ab242e77-0b29-45ec-9c24-9086890032ca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6577e10-917e-4f35-9e24-75626850cbcc", "sighting_of_ref": "indicator--ab242e77-0b29-45ec-9c24-9086890032ca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066cb467-3f0d-41a4-a033-3a58027c33f2", "sighting_of_ref": "indicator--ac06a0c9-7b7d-4b1b-b3ea-7c205a649627", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b536472-265d-4613-8c30-52b5329d377f", "sighting_of_ref": "indicator--e210603e-0585-4c31-915a-1ad8c55cddbd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d34099-bf91-4ef9-b4ae-f9e547acbe6e", "sighting_of_ref": "indicator--a41f3f5a-d17e-47da-9496-5c648255e0a4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a15923-3530-4019-9c4b-6ee855fc1220", "sighting_of_ref": "indicator--a41f3f5a-d17e-47da-9496-5c648255e0a4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5262a6-6d89-4d21-9ff5-5375f279d3f0", "sighting_of_ref": "indicator--bf2da703-f8dd-4b57-9eb9-b04d37fafed3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ea09e7-093a-414b-bd85-ca4f798c65d6", "sighting_of_ref": "indicator--bf2da703-f8dd-4b57-9eb9-b04d37fafed3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8453a0c7-1c64-492a-9b6b-bad0bd2197dd", "sighting_of_ref": "indicator--769b88d4-0e0e-4f41-8327-16145fa6b423", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193a5770-ed49-4d13-9b82-06f19f324da3", "sighting_of_ref": "indicator--769b88d4-0e0e-4f41-8327-16145fa6b423", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2005748d-67b0-4cdc-ae86-baf0f0f762ea", "sighting_of_ref": "indicator--240d98da-98dc-4394-9b66-dfa65595fb63", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e526147c-48f7-46d0-8130-8787bf0e91dd", "sighting_of_ref": "indicator--33c7ae55-9025-4cb9-953c-cf0306c1e404", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c3f7ed-15f4-4367-8501-10a444fc7c4a", "sighting_of_ref": "indicator--33c7ae55-9025-4cb9-953c-cf0306c1e404", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5960a7-34fc-448c-a99f-a0101a7cdd95", "sighting_of_ref": "indicator--33c7ae55-9025-4cb9-953c-cf0306c1e404", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626722e2-e27e-48ca-8e1f-0d9408b108c7", "sighting_of_ref": "indicator--eab697e8-2c39-422d-a404-13c941764d92", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd123364-1767-4226-8dbc-b3c7760e4707", "sighting_of_ref": "indicator--637af056-e821-46ae-a9ff-52b79fca6cf2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6a9bbb-8240-4d87-9d1e-10f327021e23", "sighting_of_ref": "indicator--637af056-e821-46ae-a9ff-52b79fca6cf2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2931b233-e737-432e-a016-20274fc7e1d8", "sighting_of_ref": "indicator--5ef12499-4f8c-4e97-aa5a-7ad64b086b7f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a278c850-693c-4991-9171-c45016879834", "sighting_of_ref": "indicator--4c75e8d4-0d4d-43e9-a324-caa9f8057635", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b17fc7e-14a1-4fb7-9ac2-16c47debccc3", "sighting_of_ref": "indicator--cf8349f8-79b6-499a-8de4-171068ecf936", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0921982b-4294-49c1-bee9-7662f25746f9", "sighting_of_ref": "indicator--d39d9e1e-05da-4c77-beb1-80c39c9d8b8a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e91ac75-f32f-439a-ae7a-06ede674623e", "sighting_of_ref": "indicator--14bb4701-b4f3-4309-bef9-3daa6b020274", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfd1175-7cd6-4975-a7f6-5482f2566333", "sighting_of_ref": "indicator--14bb4701-b4f3-4309-bef9-3daa6b020274", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44d936b-9fbb-440d-aea0-0882cec076d4", "sighting_of_ref": "indicator--14bb4701-b4f3-4309-bef9-3daa6b020274", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39efcaea-28ec-4a30-8d38-dd58b409e918", "sighting_of_ref": "indicator--105450e5-3a83-40fc-bead-d8b3acb93b59", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc684c09-c935-48f1-8a3e-24dd28c2f76d", "sighting_of_ref": "indicator--edf3e1c1-94cf-49a2-aa63-5b5bf8768adb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10df5f42-6013-478c-83ef-f891eb54d056", "sighting_of_ref": "indicator--9b52f232-f97a-4933-989c-3524cb74b2e4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0faaae0-1f19-45a7-8d4c-d4ddfe5b5b5a", "sighting_of_ref": "indicator--ac23756a-a8f2-427f-b8b6-2147998d7c07", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c715d3fb-c50d-4dd2-a98d-787c87be4417", "sighting_of_ref": "indicator--ef3330ce-2076-43fe-943d-368be5649872", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e01291b-52ec-467a-a608-458097f98f09", "sighting_of_ref": "indicator--9f17930a-9612-44c8-8253-2d1a9d634bbe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2435c5-ebbf-4ca1-a3ae-216ece21163a", "sighting_of_ref": "indicator--6ca6c22c-833b-4707-a5ec-66d5b7eb9b70", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62a9a78-da9e-437e-a7f6-d9794e74b324", "sighting_of_ref": "indicator--c2f6a087-adc0-419a-b5ca-24df31b1af78", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de2a544-522c-4334-a7dd-458a3f3fd5cf", "sighting_of_ref": "indicator--c2f6a087-adc0-419a-b5ca-24df31b1af78", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fa2fb2-a46e-45d5-afd5-4871ed4b94c2", "sighting_of_ref": "indicator--5967c167-2913-4202-ab6b-d3cb6e4071c5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90dea2b0-2b10-404a-bd1f-e40e92b811b7", "sighting_of_ref": "indicator--34098624-9a5c-4b8f-9a20-d773d593a333", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35bd5eaa-9094-4d86-ba5e-2a2e04de342d", "sighting_of_ref": "indicator--8395e3b9-fb69-4a86-8ad0-da0e60c1d0e1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75828a41-73e1-4692-9b83-0cf84d9bb6b0", "sighting_of_ref": "indicator--31148e76-f270-4144-b999-c0e2dff23335", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc83173-e39b-459d-b4bb-6213360da02c", "sighting_of_ref": "indicator--5341272c-ae60-4af2-b028-75a28da3cc96", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c69099-7b97-4651-8026-4d3ac5e86d71", "sighting_of_ref": "indicator--aeb8b4d7-b4e8-4f3c-8f20-7c4331b97d5b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f995d89-df2a-4c3e-8c31-c0f6b379bcd6", "sighting_of_ref": "indicator--92ccf75a-42ca-4b38-982c-efe86702bc67", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f1ade4-3870-4dbb-8356-a6d8658d3df2", "sighting_of_ref": "indicator--56ec51a3-e8c2-4491-9720-1cb769875b19", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a1e071-3fbd-4032-9665-e97029ae034c", "sighting_of_ref": "indicator--768300df-d6be-4c3d-a82c-13c842abb9e4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f70b2c-9256-4568-9975-ca5f8229c10f", "sighting_of_ref": "indicator--69bc2dec-1889-4e0c-9074-006df0727792", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0111c7bc-f20a-4bf4-926f-8321cf8cce6c", "sighting_of_ref": "indicator--bd18b2a2-93b6-4619-8c69-50a03bfa0730", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a8ae33-fdf1-4cc0-921e-41c4dbac245a", "sighting_of_ref": "indicator--e67caf4a-2528-4ba9-b3bf-cc91437c4493", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24755932-3692-4e1e-bcd5-50a47b0d2b53", "sighting_of_ref": "indicator--4a89c8b8-4a8f-487a-864d-55af7e1b580f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c185cc-1883-4fae-84cb-e9cab41a43a0", "sighting_of_ref": "indicator--0bbd54f7-8791-4fba-b8f4-0175f82a63a6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a7c2ae-43ea-4dd7-92f1-3091f6880771", "sighting_of_ref": "indicator--0bbd54f7-8791-4fba-b8f4-0175f82a63a6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29328682-53a5-47a0-a3b0-01e1615bfee0", "sighting_of_ref": "indicator--da741d3e-a1be-4761-965c-b6af7b156527", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f38bf1-bfd2-40d7-8d3c-6910c3d6b937", "sighting_of_ref": "indicator--2c621bb5-ad88-4d4b-a701-54328f583439", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623318ed-f709-4772-8196-a3a11e8cb49f", "sighting_of_ref": "indicator--36936ad4-14ae-46fc-ab18-10453beb431f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e119679d-a2e1-47b9-a1b3-599054d9ab72", "sighting_of_ref": "indicator--fae640c6-c17d-473b-b3ac-ee63298ab5c5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c41a339-1c2c-4a31-8cf8-1ee7b48d9c5d", "sighting_of_ref": "indicator--3e3eed7a-674b-4aa7-960e-d9b2c8866708", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e2f313-f64b-4308-a2df-3315ef79d921", "sighting_of_ref": "indicator--df8c4dbb-cf4b-4ebb-81da-06c116f82646", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84abebe6-8c4a-404b-bf99-075e725de725", "sighting_of_ref": "indicator--f0cf2c7a-d244-43df-b5d5-ad3ba3f2b8cb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327c8fbf-40d3-4b43-a549-ad99f8bdc6ee", "sighting_of_ref": "indicator--77d43d60-3686-43ea-a91e-490d1289109d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f384855-9c64-436f-a3c1-4edf7e5000f9", "sighting_of_ref": "indicator--f5b8b7a9-9d0b-47ad-9124-e6e0c902bb6d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6f808c-d5da-4ee1-844a-402fb3504f02", "sighting_of_ref": "indicator--f4f7c79d-6a1f-4742-adad-0ae24d4e1bfe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb38b1ed-8772-41ca-a751-3bb5ba194f3f", "sighting_of_ref": "indicator--984853e2-2a24-47e6-af13-3d5e4f2f6dab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65fc83e-8b73-4c3e-b73a-28453d2659a3", "sighting_of_ref": "indicator--984853e2-2a24-47e6-af13-3d5e4f2f6dab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668050f0-0ad0-4187-9486-40c1d8622aa8", "sighting_of_ref": "indicator--6cff5e5e-a62d-4590-9d97-f8085a06df37", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dd693f-71ce-4bf7-91d9-d159325c2f30", "sighting_of_ref": "indicator--a5eb3e95-be2d-497c-899c-09f09ffca826", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95635ff-611e-4d85-bb33-2b396632ed37", "sighting_of_ref": "indicator--87d9ea91-27ec-4ec7-98a1-b880fe01dad3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4c3150-564f-4590-a6ec-4b66731faff7", "sighting_of_ref": "indicator--203ace76-fb91-451d-9f01-f74efc7ae962", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5100b7da-7c17-4741-b6be-51c36fc65073", "sighting_of_ref": "indicator--fe12c581-7fe3-42ae-8878-a44a5c62a371", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78f3dae-75a5-4cfc-bc1d-9c7e3e8ea71e", "sighting_of_ref": "indicator--b01f3fbc-452c-4dc2-96c7-dfc5f815868d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab3a866-3dae-4abd-b635-657ab34e5aaf", "sighting_of_ref": "indicator--38c6d742-b6f7-4289-a9eb-618cd630b1d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24d8d4a-1143-44df-a13a-2d7834e6137d", "sighting_of_ref": "indicator--baedb7ed-c2cd-48b6-8c2e-5e3b85768b0a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b478aa8a-7f68-4840-94a7-84c4b86e390b", "sighting_of_ref": "indicator--b2e51008-445a-4d8d-a494-8ac13d9eab23", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea93785b-bb9d-413e-8dff-1b1a2601f3cc", "sighting_of_ref": "indicator--b2e51008-445a-4d8d-a494-8ac13d9eab23", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f71491-d7c4-4898-b31e-5677190a3e91", "sighting_of_ref": "indicator--4a07b409-e409-4d15-8210-945d7d3c2eec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b47657-d8b6-488a-8a39-ba6a080d797d", "sighting_of_ref": "indicator--4a07b409-e409-4d15-8210-945d7d3c2eec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e059ca5-13c1-405f-9919-a01b74b770f9", "sighting_of_ref": "indicator--37ac6212-f571-44f9-b791-8c1ea786b2a2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76684774-7a08-4387-8f5b-abbbeeadb812", "sighting_of_ref": "indicator--37ac6212-f571-44f9-b791-8c1ea786b2a2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235b1882-3c91-4391-999b-125cd9c6f525", "sighting_of_ref": "indicator--b5f1479f-c0b8-41f1-a785-eff2ba411ff5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ef7089-c38e-48ef-a145-5193266c96dc", "sighting_of_ref": "indicator--b5f1479f-c0b8-41f1-a785-eff2ba411ff5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3d3798-c74d-47e4-8304-bbedc329fb65", "sighting_of_ref": "indicator--c7159622-c936-4264-bbda-90bd7992ed3e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54818e5-f0c6-47bc-89b0-bd5f001c7b75", "sighting_of_ref": "indicator--c7159622-c936-4264-bbda-90bd7992ed3e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2509f930-548b-46b8-a092-eeb8c18aede1", "sighting_of_ref": "indicator--0d2fd1c3-1b6c-4795-b615-3477373d9b4f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909e2e5c-b111-4c5d-b321-e3ef3c356ab2", "sighting_of_ref": "indicator--0d2fd1c3-1b6c-4795-b615-3477373d9b4f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578b43a9-3149-4d6c-913e-f0539c568668", "sighting_of_ref": "indicator--0d69d7cc-a5e8-43ba-b9e2-0996c8f4d1f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8669efb-86c6-4a73-8d08-ae01e264c091", "sighting_of_ref": "indicator--0d69d7cc-a5e8-43ba-b9e2-0996c8f4d1f8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1047c96-d254-43de-adde-8ea85d835d9b", "sighting_of_ref": "indicator--0d69d7cc-a5e8-43ba-b9e2-0996c8f4d1f8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c77b64-6567-4e32-8955-03943dd1fcf1", "sighting_of_ref": "indicator--c956687e-48f0-4d93-81d1-e99bc94fe381", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b40ffe-8dde-423e-bbe7-5f6543261e77", "sighting_of_ref": "indicator--c956687e-48f0-4d93-81d1-e99bc94fe381", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e87ab7e-3f19-468e-bc59-bac4beabb163", "sighting_of_ref": "indicator--ea0c93ea-2002-4c0b-b678-cec51f53bdb5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe47a13-ed7a-4424-8dd3-0f0b11830bd0", "sighting_of_ref": "indicator--ea0c93ea-2002-4c0b-b678-cec51f53bdb5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aefb79d-132a-4b36-95e3-fd3e4eedd08d", "sighting_of_ref": "indicator--da564f94-162b-4795-b945-c1fd86d95930", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e55351f-5262-402b-974e-3bcdc8b64178", "sighting_of_ref": "indicator--da564f94-162b-4795-b945-c1fd86d95930", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da6c535-8570-462d-9d3b-c63f802c1e0e", "sighting_of_ref": "indicator--25f305b1-7317-47d2-bb2d-b2de8f884aa1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be56a70-cf9b-4437-92bc-0e508c1573a7", "sighting_of_ref": "indicator--25f305b1-7317-47d2-bb2d-b2de8f884aa1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f73a67b-4ce0-4621-8381-d029703ef409", "sighting_of_ref": "indicator--6136183e-10c2-4740-9161-12b773299081", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2956cb3c-618b-4198-bfa5-5b33b51d8bb2", "sighting_of_ref": "indicator--49317fcf-bebe-4553-be6f-b867c38088b7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a06957-179f-4bf3-9973-97d18f8b7e5a", "sighting_of_ref": "indicator--49317fcf-bebe-4553-be6f-b867c38088b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f596db44-d5b3-4a68-b789-aaf44a68007b", "sighting_of_ref": "indicator--2687f565-38f5-4476-8d79-9c731b0d402c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28f3a25-60a5-4fd1-9a1a-3e19fd9440ee", "sighting_of_ref": "indicator--2eec08ea-e535-4df2-ae1f-2b08376eb6ff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d65259-6832-4b7b-93f0-d9b2f0eb28fe", "sighting_of_ref": "indicator--d223b239-87e3-474c-8e64-a13e3ed892f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f598f1d-10a4-4774-b76b-2538fa2ff54e", "sighting_of_ref": "indicator--d223b239-87e3-474c-8e64-a13e3ed892f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e3d28a-dd66-4c9e-a062-50d5fb43b423", "sighting_of_ref": "indicator--4108a5ea-ec25-422e-9e63-ff03f7247aa4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dcf6e2-7e4d-42d1-a592-a309f38357b5", "sighting_of_ref": "indicator--4108a5ea-ec25-422e-9e63-ff03f7247aa4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ef70b3-84bc-40aa-9feb-9612ff327d7a", "sighting_of_ref": "indicator--ebcc656a-a9e9-4395-bae7-49479d003698", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c29245d-b43f-4bb6-b035-ef3bd207ff2b", "sighting_of_ref": "indicator--e8a08806-cffd-4ecb-98ff-3ac8df1d9996", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5b6226-5127-4ad7-8ad3-c1c4527467bb", "sighting_of_ref": "indicator--0b8efe0e-bc75-467b-a7b0-e5f1fc71b084", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a61f2c-9d05-4a79-9ccf-5c3001ed258e", "sighting_of_ref": "indicator--6b85b530-545c-4522-aa21-1135f9e973f6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efe0ccb-1a76-4b65-a86e-7a0e0f4d42b6", "sighting_of_ref": "indicator--f262466f-cf3a-4e1b-a647-56d15d8b36ef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a66ca4-9cfd-430a-88a1-8378ff4b73ea", "sighting_of_ref": "indicator--6fc8a51f-97f2-40a4-b93e-a4aec3e318f7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c2dd3d-3c84-4e04-891c-8321cd15bc29", "sighting_of_ref": "indicator--f9d559bf-2c79-42ba-907a-87b0795d3c4e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95eeb40e-9f98-4e6b-9e4b-9a81049c8d00", "sighting_of_ref": "indicator--66c9c816-93ed-4a7f-a7b4-c633e5b825e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b10323-2924-41ae-b712-6a778e747766", "sighting_of_ref": "indicator--f7335aa8-6620-4c15-9612-e646369d0af8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24c96c0-243b-4e22-974a-495d924076a9", "sighting_of_ref": "indicator--f558775e-98e8-4d6a-af59-da749e3719e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c4914c-9e14-40b7-aa5d-03a5b303c4fd", "sighting_of_ref": "indicator--c8b14673-6ec1-4508-ae29-4984a262dccb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3296f2-1b54-4a5c-bc38-8ceaea4bb05d", "sighting_of_ref": "indicator--cbdd4d8c-2f52-4597-9375-6a41cf361f69", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3157e367-0f47-425c-af2f-7df013d00588", "sighting_of_ref": "indicator--cbdd4d8c-2f52-4597-9375-6a41cf361f69", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f692b8f-31e8-4ed1-98a7-aa469a5ab413", "sighting_of_ref": "indicator--93de2704-d5de-4131-a51a-d93a6b814053", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61192cd7-45ae-424a-8bf7-e2289548cc10", "sighting_of_ref": "indicator--119b8d56-748e-4a90-b248-18c9a862c74a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976708cc-5acb-47d6-a13c-5d5e83707fcd", "sighting_of_ref": "indicator--bde278fe-c7aa-47c9-80cb-ced8cb195e1c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a868d7c6-a63c-4e3f-a2fa-895c83d5d9f9", "sighting_of_ref": "indicator--61b63a11-9d20-41a2-867d-91a9e44e2380", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a56603-2c06-43e6-86e6-940790532291", "sighting_of_ref": "indicator--64963db9-57d8-490a-9b6e-9500c4b4d9f1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c45ee47-d561-4ab4-9a43-f898ebafd9da", "sighting_of_ref": "indicator--64963db9-57d8-490a-9b6e-9500c4b4d9f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41810e6-c3ab-4f13-b5e3-495dd815aa00", "sighting_of_ref": "indicator--c8ec0bf5-0bed-4002-9cc3-7d78b0024b66", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1f31f4-e914-4fce-9a55-c1a38c8acb4c", "sighting_of_ref": "indicator--808bcc38-7a2b-408d-8494-d2ce5083223c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c407c423-484b-4cf0-82c3-832b4e55035c", "sighting_of_ref": "indicator--510f8b92-5ff3-40ae-bb2b-24f4475ae967", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eca206d-1d87-42dd-9a61-446972b3a2e3", "sighting_of_ref": "indicator--5c633d5c-a231-4dfb-8345-e5220ec025f3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83dbd8eb-21f2-4161-bd65-775491e79f19", "sighting_of_ref": "indicator--4e548831-2ed4-42b8-be03-5f359b528bf7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f353ff-cb92-43f0-86ac-acb7f61c9b1f", "sighting_of_ref": "indicator--9ee6809a-ac64-4330-b2d7-386fc23d6d97", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9317df5c-4f74-4d79-9a87-afe9774061e8", "sighting_of_ref": "indicator--b2b239bf-3909-4bcf-acb0-78a489e918bc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f09743-42d9-47ae-99d0-5a1c1e86e6ba", "sighting_of_ref": "indicator--0e5b2b29-63ec-4b13-8ae9-5a598d8a2ea2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314963b5-20b5-4067-a4ab-e91b2c4e7caa", "sighting_of_ref": "indicator--4d1888e6-858b-4c4f-9a34-af0f4cd2b433", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c743f09b-c986-4179-930c-cdeb7c797537", "sighting_of_ref": "indicator--e4e86714-f26b-48bc-b409-250e7d0135c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a69a8f7-509e-40f5-a750-500f9a149642", "sighting_of_ref": "indicator--32473416-1305-4114-a3cc-1583b0d93e25", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f05b9b-483c-4502-a346-17be4b9d3847", "sighting_of_ref": "indicator--7f56b4ec-ff7e-4327-b89f-fca34d524844", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5370e0ac-eeb8-47dc-b90d-f9c8347e3bdf", "sighting_of_ref": "indicator--7287f818-5225-4ba8-aac2-e9c86d78d2a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1f1b83-0835-4387-8862-59f7a0c9dbe7", "sighting_of_ref": "indicator--95342172-76b0-4611-afa8-8dc548703a9f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96f88ef-d19b-44be-a41b-d978cbbf1a49", "sighting_of_ref": "indicator--1b1fdc3f-48df-46a1-b013-75bf7c521e71", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1976a3c3-6408-4d7b-b481-100dca7584b5", "sighting_of_ref": "indicator--cb986bc1-6c46-4ed5-ae23-80101005bd30", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628e979e-0d5f-4458-946b-e1275f5dd7ef", "sighting_of_ref": "indicator--6cecf6cd-e8cd-4a8e-a641-39d3828d3066", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67afce9d-e81c-4e64-b913-4c9f363313fe", "sighting_of_ref": "indicator--b2eaf742-72b9-4d1f-abf8-395754ae96b0", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955bf4ec-02e8-4df0-aef8-4191191d4683", "sighting_of_ref": "indicator--45df0a71-ce45-47af-a845-3201584c47b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c473425-d2f6-40c7-9bf8-6f5cebe50ee8", "sighting_of_ref": "indicator--d6ba603e-88ce-4938-952a-3259a64fe9de", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234a6946-c20b-46a7-ab4f-c3d003609fb6", "sighting_of_ref": "indicator--3d8e7d1a-a463-41fc-a725-661d7a5a0699", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5034de47-49bb-4221-86a7-2ec9463e0c81", "sighting_of_ref": "indicator--5797d40a-22c6-426c-9f6d-92787b46988f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e942322c-446b-4b67-9063-07e22b6d3daa", "sighting_of_ref": "indicator--825a4f30-77c4-476d-b56f-65677fa7c7ce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55aa2e5c-d784-4f0a-954a-3cc90129a2b9", "sighting_of_ref": "indicator--fa77f533-7513-49f7-bd25-f5de399042ea", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7cb186-a410-4466-b3a2-b14591f4275b", "sighting_of_ref": "indicator--fa77f533-7513-49f7-bd25-f5de399042ea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae07815a-f346-48f2-acb5-7c2e54f0687d", "sighting_of_ref": "indicator--9708e5ed-6d63-42fa-a331-f348260f305f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a31be6-e5b7-49fc-bcaf-31df27504eaa", "sighting_of_ref": "indicator--416a4bab-c1a3-49c4-aa61-1b6d09c14bb5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6998070-b75e-4d1c-ae99-134c5e382cf6", "sighting_of_ref": "indicator--a686822c-8a7b-47e1-811d-cc7fdfb45895", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7112ff4c-41e2-49fe-be45-48598c91b1c1", "sighting_of_ref": "indicator--15e6124b-add9-43b6-95b1-746554c7237a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb533f88-ebe9-4dac-bb3a-645f6d5c42ee", "sighting_of_ref": "indicator--5bd14a00-88a0-4357-829f-67f45264f423", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42aab072-731b-42a9-8cce-9457a69a5352", "sighting_of_ref": "indicator--5bd14a00-88a0-4357-829f-67f45264f423", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0753917f-10e9-41e5-b9a3-f9253fa17079", "sighting_of_ref": "indicator--16d8139b-ed3d-47b2-bbf7-75611b0589c6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30104d7-9a48-4417-9343-d03eface8111", "sighting_of_ref": "indicator--3fd5b8e4-c174-427f-86c3-de7debaff1a3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653efca9-8aec-40da-9073-c9a0e6672c17", "sighting_of_ref": "indicator--642457d6-2626-492f-885f-5387dbb59fa9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d587b1d4-44f7-4497-9728-fd78e20966ca", "sighting_of_ref": "indicator--a833233f-d41c-4615-9af6-dc38eec0f5bb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8183318c-ace2-49c8-b600-0599c6245a0c", "sighting_of_ref": "indicator--c5b5421f-efa7-4762-bcc0-992b3dbee8d1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a1b6dd-746f-43a2-8a89-c912f937d18d", "sighting_of_ref": "indicator--d58e0a33-41ca-4f9c-9968-9778b130cb6b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2185f35e-dc9f-4f3f-a258-1ca4031c91ff", "sighting_of_ref": "indicator--6ef17513-bb21-4430-9184-30aceeba3f69", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c3072f-7d02-4edf-b77a-af6e3c2f9649", "sighting_of_ref": "indicator--9ea51c4b-43ff-4941-a98e-261e66e96963", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0453485-d36d-4b98-8bd8-4ed8e4f9b2ab", "sighting_of_ref": "indicator--ea3c419f-ad99-4013-b04a-95c18f73a897", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a348a6d4-1bb5-4ac3-8b55-2a6ed39bcf3c", "sighting_of_ref": "indicator--0e1b8478-02fd-4562-a954-e221a3c60879", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fa0558-111b-464e-8276-91b787357856", "sighting_of_ref": "indicator--787f3f2c-2651-4b55-a1fc-4d521fdcd29f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed572fad-b1b7-4aeb-b3d9-34b601a408a6", "sighting_of_ref": "indicator--d7d6a779-5d54-42bc-b1e8-2d036c0de906", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9795a390-98e2-44ab-bdf5-2f96231de516", "sighting_of_ref": "indicator--08fc83bf-9c94-47e4-a4ef-5e32f0eaa4a5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d219c6-4723-4270-95a0-edacd4a98043", "sighting_of_ref": "indicator--fe9cac4c-619a-4493-9aa9-39bae2b14146", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c72867-94ae-4af0-98ed-1c2f2a7c4155", "sighting_of_ref": "indicator--86359b81-e874-462c-9aac-a82fb20a0505", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d02004-6b00-4648-995b-09f134bb536a", "sighting_of_ref": "indicator--dfb51f26-3867-4d2f-8136-fdb9523f7c48", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b359d7b9-e748-4497-ae60-dbb6ee8c2dd6", "sighting_of_ref": "indicator--f5f74cef-e5b8-4936-a67f-d25a1241d973", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb01cc0-d397-489c-84b2-596909747cd7", "sighting_of_ref": "indicator--d6a2bb21-9225-472f-847c-3c18884f8663", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a0e94b-716b-432e-8281-c15f6a8f3ca9", "sighting_of_ref": "indicator--632dceab-9b32-416a-89e3-9fde83044ad5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0efc3d-125f-4b0c-b236-24690531c101", "sighting_of_ref": "indicator--58420e44-c5e2-4cdc-a304-21347abb1a4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6419e00-2da9-488a-834c-e0c0f3ff4b58", "sighting_of_ref": "indicator--00d44ccb-0666-490b-8539-46c0dc8e3bab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d893fe9-0ed4-4a08-9562-9bf23b2b0640", "sighting_of_ref": "indicator--48ac0c4b-7ba4-4b53-88a9-eee8fa683933", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc06d5c-4408-4dcf-a7b2-203e1cb66c84", "sighting_of_ref": "indicator--48ac0c4b-7ba4-4b53-88a9-eee8fa683933", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21653686-b822-4d6f-a4d6-75940ed0ac83", "sighting_of_ref": "indicator--b3bb9398-023e-4685-92c1-6a0c03b8642e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fa7fec-d326-4c87-b4b4-213717ae3c78", "sighting_of_ref": "indicator--b3bb9398-023e-4685-92c1-6a0c03b8642e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415c6b28-c8d8-4c38-b5ec-230d29093dfd", "sighting_of_ref": "indicator--3b32f01e-e43d-4a66-b697-3db49e41ce8e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b3bea6-4f93-4da8-8164-fcbce745e7af", "sighting_of_ref": "indicator--7f7a20e5-2948-4c16-8657-78c0bce66d28", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b6b8e1-a4ec-4173-bbcd-a66e78812e58", "sighting_of_ref": "indicator--b9bd712c-72bb-4018-95f1-71ee62f28a6a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e6d86b-749e-4a66-8339-5279e5c57276", "sighting_of_ref": "indicator--85175c1f-534a-455e-8456-aeb48bb92a64", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acd0ed1-8f35-412e-aefe-25b7b0fc44df", "sighting_of_ref": "indicator--7e2e53a8-52f1-4ec6-b303-03b3a09ddd73", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604a248f-d684-4387-a957-de4ea012b22c", "sighting_of_ref": "indicator--7e2e53a8-52f1-4ec6-b303-03b3a09ddd73", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42540b4-6fa6-4f3a-af85-04f241c996e2", "sighting_of_ref": "indicator--3c27479f-f0e8-4091-9f7f-bd819f5be368", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f6a42a-9434-444e-a327-9c21ee0a303d", "sighting_of_ref": "indicator--9259621d-1ebc-4c28-8a8e-2a84249d27b1", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0db2635-7a13-4938-8047-6f41a155038d", "sighting_of_ref": "indicator--06f31aef-9ef4-4aa4-acf3-b11356d24824", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95669391-6e02-49e3-afee-ca8107007d18", "sighting_of_ref": "indicator--dbefca10-f406-4346-98af-95bd96004e8c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a423d74-b958-48a7-b70a-f0febb2b941b", "sighting_of_ref": "indicator--3e72be0e-bb7d-4ab0-9e1a-c2aaa1755434", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39331849-65f7-41f4-bdc4-1f76d2d23889", "sighting_of_ref": "indicator--3f7db93a-1b6e-4716-97ce-ff9faa4ca2b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c333f043-6f20-4012-af87-6211090a9ee9", "sighting_of_ref": "indicator--b6c2d89c-7432-4e8f-9bb1-1354064aa2ad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0827fc7b-48eb-4e58-b4c8-811687b532b1", "sighting_of_ref": "indicator--494f09e5-d5c8-4e4d-bdbd-7eb627148137", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e846dd-31a4-4e14-b1dd-f24ac482ecc4", "sighting_of_ref": "indicator--1a4c05f4-2931-41c4-ba0a-487ce0e803a4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa26ef18-999b-40b4-895e-bf087414e943", "sighting_of_ref": "indicator--2401815b-6819-48b3-8e67-8735aeb0aff7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de11066-c2e8-46eb-abcb-52d662c05532", "sighting_of_ref": "indicator--eb15a4f6-8842-4553-82d4-69d33a34d2ab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3602b6-7189-4ad1-9f09-4cc31a1d237d", "sighting_of_ref": "indicator--3122f87e-9b79-4e54-80c9-7c2494cc8126", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65700a81-1e28-49f9-bcb9-c1b89aadbbac", "sighting_of_ref": "indicator--aaef9080-f320-4bef-8d4c-12207c0deb79", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6512be87-f2a8-4b64-910d-984b0930cb45", "sighting_of_ref": "indicator--ad180ad4-78bd-4e35-b960-e381bfdfd516", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a856ecb6-1eb8-455e-aaba-e63386992a3b", "sighting_of_ref": "indicator--edbafa28-c95a-4d8b-b25e-cb03e8e692a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450ddd97-b47e-48c0-92d9-382186fe4dfb", "sighting_of_ref": "indicator--740b8fca-8329-4772-b0ab-59588201d950", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84599a1b-ba42-4209-b6d4-6d44d85b9209", "sighting_of_ref": "indicator--d5078de1-82e2-47e2-ac3a-c4a6cd3fec70", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49253043-a6e6-4b2d-939f-6fae0d9a4f92", "sighting_of_ref": "indicator--8a448623-9222-45c0-bf2e-84fde1426405", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035a9f02-7f86-443e-9f88-4b6b792496b6", "sighting_of_ref": "indicator--23f2e516-f0ff-417f-b318-65d74636fe59", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd589a3-b3f4-4513-9fe0-6c47a4d372ab", "sighting_of_ref": "indicator--df2b474b-5082-445b-9c42-fa86901fb7f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582ca22d-6fda-49ce-8fa3-e4e28d2bb996", "sighting_of_ref": "indicator--811c8046-839e-4b8a-8d50-f62a201d6d62", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438a1b8a-99bd-4d73-9ab3-6e6388824019", "sighting_of_ref": "indicator--f785e7c4-8d89-4eeb-ac1d-56b089229b4d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5944194d-f0f7-47e2-867c-210cf6855bbd", "sighting_of_ref": "indicator--9298fefa-abe5-495f-9d4a-9147aa096c40", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3314f47-fa54-40e7-a50a-7151f8b49e00", "sighting_of_ref": "indicator--8424e582-12e5-4ce9-8e86-47fb23be6cd7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfde3d59-5a61-4189-8c3b-0d005f50e607", "sighting_of_ref": "indicator--b075d6ce-6269-4c6a-89a9-47c0f72e4f3e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c52e80-0813-4a54-bb9d-457e15674cd4", "sighting_of_ref": "indicator--9c07a6ad-743b-40b3-a7cb-a426ad4e46e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9448ac75-881e-4d90-9ee3-dd6e50041dce", "sighting_of_ref": "indicator--9c07a6ad-743b-40b3-a7cb-a426ad4e46e7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90897724-5823-411d-8342-c6d684fc6d1a", "sighting_of_ref": "indicator--9c07a6ad-743b-40b3-a7cb-a426ad4e46e7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f5303e-083a-4dd2-af74-e2b5ff46387e", "sighting_of_ref": "indicator--f5f74e8c-bbc3-46a7-b2d5-43609913e403", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff44b4b-373d-4c29-a4a7-95ea82616889", "sighting_of_ref": "indicator--f5f74e8c-bbc3-46a7-b2d5-43609913e403", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ff73ac-b84e-4e74-a37d-a41707892936", "sighting_of_ref": "indicator--f5f74e8c-bbc3-46a7-b2d5-43609913e403", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d32287-b91f-45f2-a2c7-592dfad71d8d", "sighting_of_ref": "indicator--ae90ce7e-a883-4b37-89c8-c6f83c5467fb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c33334f-397c-4a95-87b0-3e4bfc7cc627", "sighting_of_ref": "indicator--ae90ce7e-a883-4b37-89c8-c6f83c5467fb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a4e32f-0bc9-4f45-877d-430d1338439d", "sighting_of_ref": "indicator--f353600b-673e-47f6-8229-5f72740a0916", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca6bba6-c68f-49d6-ad54-95f66d9b7e07", "sighting_of_ref": "indicator--06f1d932-199f-4518-b9c5-163bf8a71d71", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972a18fe-5d92-4430-8353-a6c1ff166e61", "sighting_of_ref": "indicator--06f1d932-199f-4518-b9c5-163bf8a71d71", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2845e0-3546-42c0-a01e-61fedc8e3e07", "sighting_of_ref": "indicator--91ee39ab-13ae-448a-af55-13914766f8bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec5b01a-38e1-42be-86da-d3e1ef3df062", "sighting_of_ref": "indicator--e8009347-b041-4027-94d8-0a6bd3e4cbbd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d814d234-a2e0-4ff7-ac6e-4b480a7e1605", "sighting_of_ref": "indicator--e8009347-b041-4027-94d8-0a6bd3e4cbbd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0e2fa0-ca42-4903-a134-2535fa08a71d", "sighting_of_ref": "indicator--e8009347-b041-4027-94d8-0a6bd3e4cbbd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10caa05-cfa1-4e52-ab33-978b8d7bd0c0", "sighting_of_ref": "indicator--1746010c-a562-4fe9-b68d-0ce36290cd2a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d7b41e-6313-4171-b4b5-ce0dca1da832", "sighting_of_ref": "indicator--1746010c-a562-4fe9-b68d-0ce36290cd2a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2099432c-5d60-4985-a374-27a4526ad8a2", "sighting_of_ref": "indicator--7d92e309-9b4e-4dc4-8c8d-ab4e62566f8e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e54f8e-6f31-4a2e-b47b-62872a8e7eea", "sighting_of_ref": "indicator--5e870232-799a-4560-a2d5-3eebcd507683", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb536590-740d-4ed6-bc02-fdd3e8a0cb19", "sighting_of_ref": "indicator--5e870232-799a-4560-a2d5-3eebcd507683", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c77873-73da-4378-afbc-e26e85afd6fb", "sighting_of_ref": "indicator--4c9d42fc-b692-46b6-b5aa-ab748fbbb25d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a844e8-7ba2-4e91-9677-b3722b4d6bf1", "sighting_of_ref": "indicator--3cf00965-4d96-431f-9597-8126907e6be2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c93369-8fa1-46ce-9a87-84af6e344ac3", "sighting_of_ref": "indicator--3cf00965-4d96-431f-9597-8126907e6be2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a57625a-0b64-4fd8-93d4-6d520df3cb48", "sighting_of_ref": "indicator--3cf00965-4d96-431f-9597-8126907e6be2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2a5bf3-57ba-4ca2-b96f-207dbd98b080", "sighting_of_ref": "indicator--d7bf3a44-2708-411e-a00a-c761a9079c8c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ef1b1a-d95d-469c-8989-2dac9ee29b36", "sighting_of_ref": "indicator--d7bf3a44-2708-411e-a00a-c761a9079c8c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0970b4f-63b7-4e0c-87c2-b3da01024514", "sighting_of_ref": "indicator--6001e1fd-1d42-431e-8787-1cb8e6d95535", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bafa481-a69b-4cd5-9fed-a24e842446a6", "sighting_of_ref": "indicator--6001e1fd-1d42-431e-8787-1cb8e6d95535", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e38a066-c164-4d8a-94d2-5da370fbc53b", "sighting_of_ref": "indicator--6001e1fd-1d42-431e-8787-1cb8e6d95535", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55914205-9a9f-4cde-a5dd-e492df6b0676", "sighting_of_ref": "indicator--e523e950-f58b-4174-8be9-138bd1efd15a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e761429c-a3b8-4299-aee8-793f6cc52a98", "sighting_of_ref": "indicator--e523e950-f58b-4174-8be9-138bd1efd15a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dd2698-819b-4b4d-b23c-d9fb7f427e54", "sighting_of_ref": "indicator--052e1ead-7a4d-457e-8af3-02aaeb285db0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3a5fb3-c6da-4d6a-9793-3336e4dbab7d", "sighting_of_ref": "indicator--052e1ead-7a4d-457e-8af3-02aaeb285db0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f03a4a2-1019-4367-9005-36b953809cdd", "sighting_of_ref": "indicator--904c168d-9aac-4238-a296-80c924d02517", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0309931b-76ff-4c5b-9759-b2d1915f5d96", "sighting_of_ref": "indicator--27afb64c-716d-47be-a071-1fc95205eeee", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a6f0b3-db31-4938-8515-a4dd1aa5f274", "sighting_of_ref": "indicator--d432717c-ce73-446b-9f3a-c9581be8cf94", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c55fc9-5f1a-4962-b4c0-ecf3c31dc34d", "sighting_of_ref": "indicator--d432717c-ce73-446b-9f3a-c9581be8cf94", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b041003a-56fc-481b-b6c5-2e735719bf85", "sighting_of_ref": "indicator--e3e6543d-4451-4f8d-8ac2-f8287796188c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de06f9f-7a39-4767-b783-73222d685bbc", "sighting_of_ref": "indicator--e3e6543d-4451-4f8d-8ac2-f8287796188c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e3c773-8220-4c9f-ae61-9aef618ee0f6", "sighting_of_ref": "indicator--f69a1564-51ef-4c12-a1b6-04eed4c9b738", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6830857e-54f1-490f-9c65-8340eb88cffa", "sighting_of_ref": "indicator--9d532afa-745a-400c-ade1-da0fe34f91e3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dcef8e-3fec-4795-8622-e3edac823a05", "sighting_of_ref": "indicator--d61bc00c-c7cf-4aea-b4f1-290ab8ed121c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175ccee3-11b5-42a8-87b2-7c0eb4220171", "sighting_of_ref": "indicator--25668331-e8c3-4f30-82d1-6cb54605b57b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded06d4a-6f3b-4799-a5d1-49ac39d9ab90", "sighting_of_ref": "indicator--b15c0770-7088-42c7-a55c-94b2db7abad3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbbedf7-a0ca-4688-aea1-bab80046df14", "sighting_of_ref": "indicator--0d81c6eb-94ba-4f9b-9816-480f2ada870d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5382251-4d45-4cc6-81a0-384fba1c0baf", "sighting_of_ref": "indicator--0d81c6eb-94ba-4f9b-9816-480f2ada870d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d651f5-46cb-45ea-b193-b9e8a45479bc", "sighting_of_ref": "indicator--26b22eb4-c2d4-4b5b-92e7-d86fe756424f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6b86b5-7666-439b-8b45-8e5c79ef6639", "sighting_of_ref": "indicator--12c1ee48-7019-40b7-8170-66194d664681", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8ab308-0c93-46f3-9bba-020cff925983", "sighting_of_ref": "indicator--33314f39-c849-406a-b3cb-eea48f54dae6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c02c8f7-548e-487f-b075-d9e116212ca0", "sighting_of_ref": "indicator--2f20fe51-e1b2-49fa-bb22-77e138a4417d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4618c3cb-b568-4fbb-8d11-d15028016ca5", "sighting_of_ref": "indicator--c2cddf9c-070e-41bc-b3bf-8eb0b94d4bed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66910645-c1c9-439c-9fa3-f54b7e9aa5e4", "sighting_of_ref": "indicator--c2cddf9c-070e-41bc-b3bf-8eb0b94d4bed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0407f5a6-fa28-4711-b744-6b3bbf6e9d3b", "sighting_of_ref": "indicator--c2cddf9c-070e-41bc-b3bf-8eb0b94d4bed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7845c52-fef5-4f88-9beb-cabcf0b2c96a", "sighting_of_ref": "indicator--14bc808f-6488-43a3-a3f2-1ded0529734f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad20f9f4-2a20-48cb-aa88-3b24bee60c22", "sighting_of_ref": "indicator--ed6ef1b3-4334-4e2e-a171-963735a5fcd9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fed9508-1987-40fb-8341-4c484aaadd78", "sighting_of_ref": "indicator--f821e2ad-39f0-41c2-9f8b-c6c9d7ced074", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18155834-682e-4d29-906d-75c882bb707d", "sighting_of_ref": "indicator--f821e2ad-39f0-41c2-9f8b-c6c9d7ced074", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec47bd73-9a34-4f57-9bce-4491c4e81a1d", "sighting_of_ref": "indicator--f821e2ad-39f0-41c2-9f8b-c6c9d7ced074", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4274cc63-a268-4d7d-9fe9-d9b6c96ee06e", "sighting_of_ref": "indicator--a4a09cea-0f2c-4f90-ba1f-783d78489a99", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9647acb1-c342-4484-9b7c-57dffccc8697", "sighting_of_ref": "indicator--a4a09cea-0f2c-4f90-ba1f-783d78489a99", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f887e2ff-4783-42d9-9b66-ffcd372069e1", "sighting_of_ref": "indicator--a4a09cea-0f2c-4f90-ba1f-783d78489a99", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b793a1-5900-4ce2-8bef-e50a745e2f88", "sighting_of_ref": "indicator--672ab2dd-27f6-4978-abbc-f4b4b4f6a3bf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d63fc5-8aea-4a53-a0c9-15b20facafa2", "sighting_of_ref": "indicator--672ab2dd-27f6-4978-abbc-f4b4b4f6a3bf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fcd47b-cf0f-4aac-a7a9-4fd6a7f101c5", "sighting_of_ref": "indicator--48c7e872-ae10-4e1f-ae88-4e83d4c4a861", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212638ff-3651-4472-b716-e570ee98f723", "sighting_of_ref": "indicator--29fec396-ac7e-4566-9700-3fbdd8ab0bc5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ded022-f4e2-4a5b-83b3-52f4caa8d8bc", "sighting_of_ref": "indicator--29fec396-ac7e-4566-9700-3fbdd8ab0bc5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9518c377-ba9a-490d-8d73-55461861fabe", "sighting_of_ref": "indicator--29fec396-ac7e-4566-9700-3fbdd8ab0bc5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1227abb8-75ec-4663-9202-197eb97d3943", "sighting_of_ref": "indicator--37c09814-24aa-4690-8df5-76fb9015b851", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1735ef9a-a814-4750-9ae3-e292e54cbae2", "sighting_of_ref": "indicator--37c09814-24aa-4690-8df5-76fb9015b851", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4028fdc-154d-4eda-8cb2-3c6bcb10ff34", "sighting_of_ref": "indicator--966d5334-1525-4f05-a6d8-d21a160be867", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a852858-9f30-4e3c-a7c2-484cd8f6c282", "sighting_of_ref": "indicator--6173e0c5-7cc2-4b98-b4b8-a2f3c3dc2b98", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9a7e34-ed83-46de-aa3e-795f63e59d86", "sighting_of_ref": "indicator--6173e0c5-7cc2-4b98-b4b8-a2f3c3dc2b98", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c6b8ee-8ece-4bbe-b6f6-e5eed0a38421", "sighting_of_ref": "indicator--6173e0c5-7cc2-4b98-b4b8-a2f3c3dc2b98", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ba8105-382d-46b0-84af-45f7fddb2368", "sighting_of_ref": "indicator--3f72af27-bb59-4739-b93f-490703914b36", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfa0b58-7140-40e3-a60f-549f39a4478e", "sighting_of_ref": "indicator--3f72af27-bb59-4739-b93f-490703914b36", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd620bb7-bc36-42c7-bda9-113485742e46", "sighting_of_ref": "indicator--a5f98d02-19c2-481f-88d0-00154662bbcd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c750dd-eb94-4066-be8a-eeb4d8cb4198", "sighting_of_ref": "indicator--ae60eb64-db95-4bae-bdb7-8e8bd41fae8e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bef4c66-2e8d-4dad-9b45-ac8283f68176", "sighting_of_ref": "indicator--c73685fe-2b58-46ce-aea6-bbb9b0e4a79d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fd7fa1-1f8d-40cf-99ae-3d081e052a1d", "sighting_of_ref": "indicator--527c115f-825c-4d12-9cf6-e3881dc0fb9b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a5f445-3d6e-4186-bc72-49f4c77d98fd", "sighting_of_ref": "indicator--e0841972-7f55-4f15-b686-5898109a9337", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafb30fb-51ab-40fe-8604-23cb52750c10", "sighting_of_ref": "indicator--6137b31b-f3b9-4ce7-a116-3dafe63147a0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846032d3-1000-4581-a848-9c6e28355869", "sighting_of_ref": "indicator--6137b31b-f3b9-4ce7-a116-3dafe63147a0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36debe3-8844-4154-b602-a1b9c16dd371", "sighting_of_ref": "indicator--ac570957-9bb0-4cfb-bf5d-78b3d5e47680", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8d21c3-5b41-4589-b3b2-0d31afefc8e6", "sighting_of_ref": "indicator--ac570957-9bb0-4cfb-bf5d-78b3d5e47680", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62605cfc-0536-425a-98e9-8111d224a616", "sighting_of_ref": "indicator--ac570957-9bb0-4cfb-bf5d-78b3d5e47680", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101fbfa2-9d4c-4c99-8b1b-72d31326bd16", "sighting_of_ref": "indicator--e885f4ff-4e20-41a1-8d4c-9f7668e7d2b3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a721a64-fb49-4cc7-b356-c816d8a41853", "sighting_of_ref": "indicator--e885f4ff-4e20-41a1-8d4c-9f7668e7d2b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6f3a02-2cb8-4cd1-b0f6-f4aa2aace6ac", "sighting_of_ref": "indicator--e885f4ff-4e20-41a1-8d4c-9f7668e7d2b3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b852a08-3737-4934-97d5-b176001167a9", "sighting_of_ref": "indicator--0546d0f0-ea2b-4506-b554-4ae534cf622e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e684b519-f8ef-4240-bc6d-325f10c2a869", "sighting_of_ref": "indicator--228df503-00d6-4ab8-b1b1-57b2785d42d8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8704a40a-430f-4652-8ea5-92ddcef4c198", "sighting_of_ref": "indicator--fe464260-47a7-4f7d-ade9-8678cd4c83b3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d736751-7dd3-4544-92d1-0f1b6e19f009", "sighting_of_ref": "indicator--ecb2f2fe-caec-4793-ac05-1d60981dd528", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7e6bf7-9cd7-420c-b84f-46d2c6b92ad6", "sighting_of_ref": "indicator--ecb2f2fe-caec-4793-ac05-1d60981dd528", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261d6331-c4ef-48d4-af61-57535e870864", "sighting_of_ref": "indicator--ecb2f2fe-caec-4793-ac05-1d60981dd528", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f54db1f-2628-4fe7-af4d-482bc6f16290", "sighting_of_ref": "indicator--006e200c-5ef3-4778-a56c-96cbd4268e41", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05265b63-9293-4e62-b67e-412c8ee0f1d5", "sighting_of_ref": "indicator--04bf457b-d0b4-4f31-b341-e632c70a5d6a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df46614-2140-4995-b070-78ab3a9cae65", "sighting_of_ref": "indicator--04bf457b-d0b4-4f31-b341-e632c70a5d6a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118a6c3b-197f-42ec-9279-a4f95c858fa0", "sighting_of_ref": "indicator--04bf457b-d0b4-4f31-b341-e632c70a5d6a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7abe683-1a1a-4002-b39d-5823aca33028", "sighting_of_ref": "indicator--8d8b41f9-4293-4a45-84dd-0bbb3fd6d6e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c21d57-225b-49dd-b0fe-275d94e9d26a", "sighting_of_ref": "indicator--8d8b41f9-4293-4a45-84dd-0bbb3fd6d6e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadd9b13-8487-43aa-a243-7fe2bdb8aafc", "sighting_of_ref": "indicator--8d8b41f9-4293-4a45-84dd-0bbb3fd6d6e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31307ec2-bb79-4356-94dc-4cbf8f52da15", "sighting_of_ref": "indicator--d3f5ac98-95ad-46ec-904a-8b37a56d5b29", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785d1fd0-4f85-447e-a982-daafb6f940c4", "sighting_of_ref": "indicator--96772d09-1e77-4e13-beaf-0145123f7531", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba4b9c2-193f-4194-9b4b-e39df90e6660", "sighting_of_ref": "indicator--96772d09-1e77-4e13-beaf-0145123f7531", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b615dc-ac88-4393-ad46-7d12c886512b", "sighting_of_ref": "indicator--42cd2acf-a855-40cb-a807-fef0cd71326c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47651d90-7f8b-4111-826d-1770155ec020", "sighting_of_ref": "indicator--42cd2acf-a855-40cb-a807-fef0cd71326c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b27e11-a9a9-4896-9a8e-209bc5473237", "sighting_of_ref": "indicator--476da04e-88c7-4436-9b06-9029b7eaf9a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38093e4d-6e9b-41bb-8d46-b0231b330792", "sighting_of_ref": "indicator--476da04e-88c7-4436-9b06-9029b7eaf9a7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52b30ee-8dc0-4855-a70f-e086b70ba7ab", "sighting_of_ref": "indicator--8cf8db54-c141-4504-8d95-db58669f56ca", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c95732-f17a-4367-8134-08a34017bb6d", "sighting_of_ref": "indicator--8cf8db54-c141-4504-8d95-db58669f56ca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7be97c-3c79-4f05-b7ce-f324a4bede62", "sighting_of_ref": "indicator--8cf8db54-c141-4504-8d95-db58669f56ca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676cc6fd-679a-4308-9f29-3374a59be187", "sighting_of_ref": "indicator--98ced61f-a24d-44ac-b0d1-6e8b88ad6320", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53f74af-c417-4d8f-b7ae-cde54ee345f3", "sighting_of_ref": "indicator--79ecd25e-eefa-4ec7-a14f-5ccae19b3094", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a8aced-2a0e-478a-884e-00abf9b973bc", "sighting_of_ref": "indicator--58046917-8b87-4db7-8566-1518eb9945fd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd46204a-cd2e-459f-b406-b0439028177f", "sighting_of_ref": "indicator--58046917-8b87-4db7-8566-1518eb9945fd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d5e9ef-19ee-40a6-b8d0-6f04e526e7da", "sighting_of_ref": "indicator--f6989014-3df1-4dd7-9a8b-7045c4d52950", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afda04fe-4a2c-492f-9bf9-5770352784f4", "sighting_of_ref": "indicator--f6989014-3df1-4dd7-9a8b-7045c4d52950", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3323ae-1cda-417f-866c-4848e407cec9", "sighting_of_ref": "indicator--03b5bc3e-f61e-4430-8470-fb72c33e2b54", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07fbad2-e171-4a42-8e07-1fcec04a0df1", "sighting_of_ref": "indicator--6fa4baf0-a0f5-46c1-879e-a56940fff5e7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ff96ed-c38a-4196-a7b5-7d20f47855af", "sighting_of_ref": "indicator--29484438-9020-4afd-b51e-45f9792b650c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d358bc-07f4-4eb6-a3d7-f4d9e3ead951", "sighting_of_ref": "indicator--29484438-9020-4afd-b51e-45f9792b650c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d253fbf-1928-4c0f-9775-3f446fc61df7", "sighting_of_ref": "indicator--bfd79bbe-5090-4ce4-8049-670672d8ab9a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20d404e-3d32-4199-8555-da3139fb5c21", "sighting_of_ref": "indicator--c57f1e3f-1e3a-4938-a3e4-0b6f613bc2f9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795d15b1-fbaf-4349-b474-75a9ae4be9f5", "sighting_of_ref": "indicator--4c85ac1d-58db-40f4-b4a8-a8c6700330b2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708c9f17-07f3-4ea8-8be2-946ac05673ed", "sighting_of_ref": "indicator--b65f5eab-9fd8-490c-b358-24070f107a31", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ff38fb-f4db-440b-8170-86a1834c46ae", "sighting_of_ref": "indicator--72056fc1-b16a-44a9-b54a-b2178b158981", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd21ee63-37ec-4418-a364-555a4dfefd5f", "sighting_of_ref": "indicator--946d6285-06ed-42c8-bc75-f049811a03ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04f3bce-f1e6-4bb3-824b-d31f0127fdf8", "sighting_of_ref": "indicator--7f068394-423a-44a1-946a-0aff22181d2b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04dfa9ab-5e53-4f78-a405-3bcf7cafbefe", "sighting_of_ref": "indicator--91207cb5-c2ee-4882-8ceb-95335fc41f6f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8848f62c-2e3a-475a-969b-06c2a3705651", "sighting_of_ref": "indicator--4c38cfb7-59c0-4418-a4f1-77117d04d68b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0813a362-81e4-4d86-a979-92ac6f15ccf8", "sighting_of_ref": "indicator--4c38cfb7-59c0-4418-a4f1-77117d04d68b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f07abe-b8bc-46cb-a39b-5d344d82e4cd", "sighting_of_ref": "indicator--d43f162f-1daa-4931-9a4a-403fd0fcb2f5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cc42da-8fa8-4374-a19c-4455d3d9224d", "sighting_of_ref": "indicator--8ee02a11-235a-4715-af6f-2d111effac46", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5faef6-5c68-4fa5-9811-10928061533f", "sighting_of_ref": "indicator--eaa181bf-f4ae-4b51-9fe2-6b7a9e6e1d30", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fea24c9-df7e-4ae2-96f3-80cc9496dd7b", "sighting_of_ref": "indicator--25bb32cd-2a59-4fb7-98bc-a5ac87b8483b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e161e478-5806-459a-9661-d255fce8b020", "sighting_of_ref": "indicator--25bb32cd-2a59-4fb7-98bc-a5ac87b8483b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a3646a-fb48-43fc-9bcd-00b85c74e9dc", "sighting_of_ref": "indicator--25bb32cd-2a59-4fb7-98bc-a5ac87b8483b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9578566d-7e6b-4008-9ad9-2d4b04e5d58b", "sighting_of_ref": "indicator--dcccb30b-520f-476e-9213-cf67eb21664b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615dea9f-380f-4934-bf46-3a320d218408", "sighting_of_ref": "indicator--dcccb30b-520f-476e-9213-cf67eb21664b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154c2d28-a67f-4b5d-80f2-d4e2fa10132f", "sighting_of_ref": "indicator--dcccb30b-520f-476e-9213-cf67eb21664b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f27647-d545-4e9d-bb05-54efd282ec0d", "sighting_of_ref": "indicator--fd627a11-9cdc-4522-b88b-2ffd0651e1f7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0102f971-bbee-4770-9d8b-b8c2d14a30c1", "sighting_of_ref": "indicator--fd627a11-9cdc-4522-b88b-2ffd0651e1f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c470f6-539e-4d4a-9db0-f85d9e85a8c1", "sighting_of_ref": "indicator--fd627a11-9cdc-4522-b88b-2ffd0651e1f7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee751be2-883d-4c86-aa63-2e9be22f7b55", "sighting_of_ref": "indicator--2071f139-2164-4675-85fc-a953f6b22f41", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a544f6a-a2f6-4a32-9d2a-52d01fc7326e", "sighting_of_ref": "indicator--2071f139-2164-4675-85fc-a953f6b22f41", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2416065e-fe50-4938-927c-a71f8b27328c", "sighting_of_ref": "indicator--2071f139-2164-4675-85fc-a953f6b22f41", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e6e3e8-a0e4-48d5-bf4c-6a46dfdb9353", "sighting_of_ref": "indicator--4aed3d62-7d4e-499b-b3ab-e020a4e070ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d851a7d2-f1e0-480c-801a-dafe079a5793", "sighting_of_ref": "indicator--92833d21-9e1e-4344-bc5f-9d37850229eb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2069c3f-9e39-419c-b850-64309541abcf", "sighting_of_ref": "indicator--441b75ec-01b2-4e43-8708-30ad7baeb7b1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84839287-beee-4ea6-b368-b19962f49923", "sighting_of_ref": "indicator--a1146857-8352-4def-854e-874d4e1c8ef4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c18362-b43f-4a17-9a45-880c3bbde721", "sighting_of_ref": "indicator--a1146857-8352-4def-854e-874d4e1c8ef4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4603cf96-3239-42cd-a82d-778806ba7177", "sighting_of_ref": "indicator--2994551c-abb7-4f2e-9acd-6c9d637169de", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aade6287-6eed-4422-986f-9fffc00074dc", "sighting_of_ref": "indicator--e68e910a-27d1-4017-b5f7-b738197c5ace", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a62d3f-0bb2-4a77-a35a-989f7ba305cf", "sighting_of_ref": "indicator--c3957eea-d432-43a4-8725-b33aaa2a7426", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d062e52f-5bdc-4320-ab58-2235ca820f2b", "sighting_of_ref": "indicator--64d80933-b840-4769-b5aa-f4d586e652e5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e83e8a-3367-41eb-8e46-46a32241cec8", "sighting_of_ref": "indicator--db12992e-4aab-40e2-88fa-6dd789e00429", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edabe134-bdca-4e3d-b134-9b4090cb6a78", "sighting_of_ref": "indicator--66f33985-4ae2-4bb0-94aa-e0024d715558", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f321bd86-0e06-4b14-abc4-27b07645bfa1", "sighting_of_ref": "indicator--9eb92225-df5b-4fd7-aec1-a9c242b446dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985fd1ba-1feb-44ee-ae1b-f6fc9ad0e0a7", "sighting_of_ref": "indicator--fc128adf-102f-4aad-a47c-6de547f8e910", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b608f3bd-efc6-4581-bde3-950ce8e4a9dc", "sighting_of_ref": "indicator--a18520ef-dd00-414d-b779-509293af975e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13704ce8-9962-4a6f-bbe5-63ab88546631", "sighting_of_ref": "indicator--9fae331f-7058-4113-93b8-4b3021e513b7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7da174-f0e9-4fa0-a3d0-ea539ae4f8b7", "sighting_of_ref": "indicator--b4e3ab69-4944-45d4-81c9-133f520468c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a1bfae-5928-4089-84b6-42571bafa936", "sighting_of_ref": "indicator--0f6b1ba0-eda3-46db-9b67-b7293d536665", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76a640a-40d1-47a3-9209-365c1db72dd1", "sighting_of_ref": "indicator--baef56e8-fab0-442e-8270-86acf4b92fad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68b1ecc-be16-4fce-81a4-25d86d56524c", "sighting_of_ref": "indicator--0fce26c3-ee06-4392-ada8-980943714aa1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5637fc-0cbc-4d74-ae6c-f68ca9cf91f4", "sighting_of_ref": "indicator--85cc180f-cfca-44c7-8210-42f1fbe23d8e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdcf6008-c0f5-4c84-954d-04e49485b582", "sighting_of_ref": "indicator--d5d0b39b-4a4c-4d32-baba-1cb50a8f7b91", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9658b615-7da8-4402-adc3-7df13e912c31", "sighting_of_ref": "indicator--eb524a72-e7e0-4a44-84f8-19b75b8ca8e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02eb71ad-725a-4372-a96a-290bc41d41ce", "sighting_of_ref": "indicator--582d2f3f-bc49-4e00-bc92-f581ce9883e8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc18c9a-bcd5-4a0a-8f00-fc7c7d2c4b3e", "sighting_of_ref": "indicator--750075ab-8692-47cc-9af7-ae15546d7505", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4471b96a-18cb-4dee-b095-4d17bf46e492", "sighting_of_ref": "indicator--6b23ff22-1704-410b-a4b1-2c0386a8d50c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634373eb-8e1a-48c8-b457-dd1727749765", "sighting_of_ref": "indicator--d6e9f2a4-0822-404c-8311-e5e31a4acf43", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82e0ec6-add9-41bc-94c7-129c89ef7b75", "sighting_of_ref": "indicator--3664af8b-f28c-49d8-b841-e9a2af15bbd4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e9be74-5caa-441c-8e42-4904abd1d8e8", "sighting_of_ref": "indicator--4c172d7f-843c-47b5-afa6-6df16bd56218", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2af92e2-be50-426e-bc8a-d9407218e0fd", "sighting_of_ref": "indicator--0d197d09-3ac4-46b4-8b83-a18fbbba556b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995af72a-966c-4a91-b3f5-e77e998a2ad5", "sighting_of_ref": "indicator--d939d677-e40c-41f2-ab30-20ade0d846ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038cff7e-88b4-4748-a3e6-a8f4d61b0944", "sighting_of_ref": "indicator--d939d677-e40c-41f2-ab30-20ade0d846ff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2d3c5f-8c77-475d-b0db-8db848fa340d", "sighting_of_ref": "indicator--a658f513-2954-4456-be2b-aa5150230965", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787cc6fe-1672-4716-889d-ef001bdc1794", "sighting_of_ref": "indicator--ad941dde-a6aa-45ae-a35a-241f388b6c4d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8478d5-8d85-41a3-b503-1a768f11bb9b", "sighting_of_ref": "indicator--bec3bef8-338e-4793-814e-f85d092ef097", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612ddfc9-36a4-46ac-a933-1f604cf7545a", "sighting_of_ref": "indicator--6b4c0a86-2c9c-468b-a615-aead43992087", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca52b6e1-667a-4fb6-b133-7eef74690dfb", "sighting_of_ref": "indicator--069dfb74-7535-4716-b309-601540f6daf6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e35126a-1d2e-4476-98a9-e5cb525c6793", "sighting_of_ref": "indicator--0aadcab9-1e0a-4685-85f5-14dab90a5297", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32e453e-08eb-4e75-a383-02529ad9bc8d", "sighting_of_ref": "indicator--a692d16d-e2a9-4494-9c57-ea110fcb1064", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1236b490-18d0-4dd6-adb9-017f1d082ab8", "sighting_of_ref": "indicator--a692d16d-e2a9-4494-9c57-ea110fcb1064", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8befc3f9-583a-4030-be98-0f3065537ac5", "sighting_of_ref": "indicator--cfcbc245-4410-4087-8e5c-8af5f0152f8b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d17837-3d66-4f40-b4bd-8054b2b9d5c1", "sighting_of_ref": "indicator--ee78bcbc-92f8-42ec-9624-9e0838622f34", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80727c37-eb08-4fae-8b91-b1606ac2c07b", "sighting_of_ref": "indicator--ee78bcbc-92f8-42ec-9624-9e0838622f34", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2bdc57-fab9-47ac-9941-64d1381d9afb", "sighting_of_ref": "indicator--ee78bcbc-92f8-42ec-9624-9e0838622f34", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8181bf55-7801-4fa6-a28d-5c76c89e1d65", "sighting_of_ref": "indicator--1950c1cf-b786-4845-948c-63b946844ebf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318d803e-001e-40f5-b0da-10988e01e6f3", "sighting_of_ref": "indicator--1950c1cf-b786-4845-948c-63b946844ebf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea145808-0597-4c9c-8fd9-ea27c73a2fd7", "sighting_of_ref": "indicator--81fcebe3-1cda-4d2f-8278-21ca3190bc45", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff5015a-ca5c-4731-b9f4-1fdca9fb3563", "sighting_of_ref": "indicator--9fd1cac0-cea1-4882-adcf-77d8d0a6c2eb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c79f89-1f40-47be-935e-38b498cd12c3", "sighting_of_ref": "indicator--b79ab9be-1278-492f-8b4e-a9aee910b858", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366ae597-345a-4247-a5ca-335e54ca5dba", "sighting_of_ref": "indicator--b5170f21-e5e9-4383-910d-257340da0106", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796d17b3-9ff8-4460-8bde-cb2cb80fe9b1", "sighting_of_ref": "indicator--923b1b96-c5d8-458d-a082-11219ddca130", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7023c961-0f6d-4450-84ea-98bc03ac854b", "sighting_of_ref": "indicator--9faeb8ef-9ba3-4e8e-823a-0ea44cc58bd3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5436dce6-3a7d-4fc9-bb2e-371c62f87a2e", "sighting_of_ref": "indicator--9faeb8ef-9ba3-4e8e-823a-0ea44cc58bd3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb45c209-d9b6-4e2c-9b56-b1f1ec88c663", "sighting_of_ref": "indicator--4e7f0719-1f85-4fdd-af9f-8521cee57375", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37dd48d2-6b0b-4a29-b699-11155a27ac46", "sighting_of_ref": "indicator--4e7f0719-1f85-4fdd-af9f-8521cee57375", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0958ebd6-7e99-4b35-b1e3-6f4cb7076f81", "sighting_of_ref": "indicator--9cdb459f-09fb-4b93-9b63-b3f952488d15", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb754a4-e25a-43de-b597-c60b967cc65e", "sighting_of_ref": "indicator--b5f61bfc-9605-42de-aeab-a4540dd76ec5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5093a5-ad05-46f6-a2e8-b9b5fbbac128", "sighting_of_ref": "indicator--479694d2-da66-4429-ab29-46f8efd59eec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793598ea-6887-4487-b66c-459c5d5a051a", "sighting_of_ref": "indicator--a650422b-08e3-44c7-a73c-f42c4b919052", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9172a8-9174-4aa5-af95-de0ad199390e", "sighting_of_ref": "indicator--fb57002f-2c8d-4f79-8c64-606fb29cd873", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af39e6a2-7b17-476c-b747-eec9435ec314", "sighting_of_ref": "indicator--781d0c6d-07f4-477c-bb0c-d3918ae6723d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad38d22-c17a-4be2-9a42-2f91700346bc", "sighting_of_ref": "indicator--5f36ca4c-d97b-47c3-a8a8-061fc2efb2fb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc2477a-897f-49e8-a224-8292a54e0760", "sighting_of_ref": "indicator--2d0590d3-573a-4b10-b6da-281786e9994b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921165fe-ab94-4a8f-9715-f6369449af3c", "sighting_of_ref": "indicator--2d0590d3-573a-4b10-b6da-281786e9994b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f373a7ca-ec92-46ad-a848-6d3a98d849da", "sighting_of_ref": "indicator--2d0590d3-573a-4b10-b6da-281786e9994b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07ca2f5-9db9-485d-b3e1-f1402ed9e890", "sighting_of_ref": "indicator--5bf2458e-75a3-460b-9eb4-d4876bb14f40", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6175caf6-3d6a-45ba-80c8-2fb19d66c075", "sighting_of_ref": "indicator--d97d9678-5221-43e4-b646-4665239b4f85", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7151acb-4955-48f4-9d8d-877a5080feb0", "sighting_of_ref": "indicator--4ad4827b-860a-4f54-a8fa-be8c0a4b7abf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd225122-a88c-4dc9-be92-452f673bfece", "sighting_of_ref": "indicator--bc3852f5-1e76-4e1a-823f-0593292af803", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b06c7cd-bc1e-4eec-b5b0-9b58753110cb", "sighting_of_ref": "indicator--935c4fec-caf5-411d-9129-d28557820212", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f49623e-36eb-4bcd-932e-fa8fa0e1040d", "sighting_of_ref": "indicator--0b93eb01-0dcd-4692-91a8-f9685a122343", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4bdfdf-f0b9-4338-8d56-14fc53b3988c", "sighting_of_ref": "indicator--ed1814c5-cdcc-4912-a33e-d791987db44a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e8784b-073b-4903-bf4e-b582c882e8d8", "sighting_of_ref": "indicator--c79f5002-2cd2-4418-bbbf-6880221739fd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00bb8141-68d9-4bee-af30-a35c7909013d", "sighting_of_ref": "indicator--8aa8bef3-e0fb-4e6e-a495-f7644fe8fb25", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da8432a-76dd-46b7-bc17-a143a7bd120d", "sighting_of_ref": "indicator--8aa8bef3-e0fb-4e6e-a495-f7644fe8fb25", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60cbf23-0798-4224-8138-75ce18ab4897", "sighting_of_ref": "indicator--a94d6d77-5485-4108-8b7e-15a340634434", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc895aa8-d837-484a-9d51-71b8554bfb99", "sighting_of_ref": "indicator--955fb76f-42a2-499f-b8f8-c94dfdf8cced", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ccc8e7-9cca-4486-b391-c71b0c397aa6", "sighting_of_ref": "indicator--0d8f6f0a-7bb0-40f4-810c-cd8d03d11ac5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303d496b-12b8-43c4-b310-9a413f084dc6", "sighting_of_ref": "indicator--ccc05600-eddd-4547-bc8c-b087bfbeeb5d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e553a303-4054-4695-a4ad-714a73b20d65", "sighting_of_ref": "indicator--08cf13d1-f5c6-43c1-a0e2-a07c28ae891a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca59681e-a7ef-4fe9-bd0d-122dc45f4b20", "sighting_of_ref": "indicator--16f14345-746b-40ac-9ad2-2d9f4f384354", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d919e18b-9190-4feb-9834-43a4e8991301", "sighting_of_ref": "indicator--37269baf-7cb6-41d7-bbcb-4589872b7728", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1840ae44-b433-48e0-b300-75e8d5be49b5", "sighting_of_ref": "indicator--88517455-3353-4f69-8050-f09ef3aeccc4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b754eda4-e51b-42f0-8dfe-5bc55791a560", "sighting_of_ref": "indicator--6ddbec57-50c0-4d66-b07b-ec45c507c5f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d79adff-d789-4d4f-8faa-3f24749c8331", "sighting_of_ref": "indicator--c444e7d6-8e45-4856-895d-97407603b9cc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc4691d-d1e3-46ca-9904-1de8c4796250", "sighting_of_ref": "indicator--4be3cae7-4e69-4f3d-831e-c32caa81628d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da3a32f-d525-473d-b5dd-02ca9e302b68", "sighting_of_ref": "indicator--165f1d6a-0ad7-49c7-b696-39a114940674", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011345cf-686c-4371-a560-8d259c343588", "sighting_of_ref": "indicator--d6a13675-8e05-4077-934f-676075340088", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c0f09d-4d82-4e66-94df-d8c2c190f38a", "sighting_of_ref": "indicator--7fb2c522-e5b7-4a07-9ee9-ce68819e8442", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6494f9-a3ab-41aa-8398-39f72251cba3", "sighting_of_ref": "indicator--5443e883-91db-4e26-bd44-88a64495eab9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54dd4c9-6c42-4cb2-b3bf-8ad148ed14d0", "sighting_of_ref": "indicator--a0e22c62-966f-42e0-9475-67a46795b855", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3af2c0d-1d11-449a-9d51-fec9134f021a", "sighting_of_ref": "indicator--569c73bb-ca59-4bb1-afd9-ee194c7abdea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328c9afc-6d15-4bf5-9960-51f823adfa74", "sighting_of_ref": "indicator--6b3fedf3-fb6d-4efe-bab0-a78508ba45e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad665c54-f31b-4b54-8444-2610058460dc", "sighting_of_ref": "indicator--0953b6b3-3e21-4d77-91e3-553246af77f6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfd0c69-d1a1-4d1d-84b9-ba0d3baa6121", "sighting_of_ref": "indicator--82f33782-5284-4808-9709-6e6fdf1dc445", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcd19bf-bfae-48b5-b586-36cce90d13f3", "sighting_of_ref": "indicator--5914a764-ce09-42c1-802a-e199c026f147", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b9f7dd-fd8f-44c8-9bed-4588b8b26a96", "sighting_of_ref": "indicator--0966322d-1c6e-4ec9-80d5-7b2062bcff56", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201bf2a0-1c72-41e7-bf78-499b4b43f58f", "sighting_of_ref": "indicator--1d4bd382-77b3-4919-b761-4db913bf8637", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b3096a-88a7-4532-892e-f63af32c7bcf", "sighting_of_ref": "indicator--254fd1ee-e982-4a1b-b96d-9af82addb883", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fb3eed-27be-4659-b717-49412b2cc68d", "sighting_of_ref": "indicator--9aaf8251-f724-4b46-9ea4-1a23ee5e8e38", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6d03a8-02d6-43da-84be-4ec2ddce5c36", "sighting_of_ref": "indicator--0340aeea-74ea-4ffa-bdf2-e8fa6cac69e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc45248-1ed6-40f9-a5bb-d08bab0140ec", "sighting_of_ref": "indicator--0340aeea-74ea-4ffa-bdf2-e8fa6cac69e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa939680-f474-43b5-9610-7cbc872a52f8", "sighting_of_ref": "indicator--e94893b9-ef83-43af-998f-47fc4d96e1a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd71dc09-7044-4a02-9823-b0333d0cbf54", "sighting_of_ref": "indicator--f5c3e435-e304-4eaa-a712-5d6f7e22aa41", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d08215-912a-49d1-9b10-24b4b8925cef", "sighting_of_ref": "indicator--8e9e1a89-0fd7-4677-aa7e-d4701bc76f09", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e3006e-fb93-4ef9-b16c-4a013052dbea", "sighting_of_ref": "indicator--3f7a3184-7ff9-4b6a-8bfa-80b1d0cf7450", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05ef6a0-4900-4236-b629-b3b8ce22deae", "sighting_of_ref": "indicator--3c7a7435-dc1e-4539-8017-9ed0c77caa5c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd12343-cb02-4807-8d8e-7677fea66ed7", "sighting_of_ref": "indicator--3ee80129-f5b2-4cbd-9454-8f1f04333ef8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f5d764-803a-4ac0-ae90-8d940612008b", "sighting_of_ref": "indicator--3ee80129-f5b2-4cbd-9454-8f1f04333ef8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5b79b2-ff41-4462-b24e-97f1056470dd", "sighting_of_ref": "indicator--3ee80129-f5b2-4cbd-9454-8f1f04333ef8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc838b42-022c-4af6-9302-4f0348301a93", "sighting_of_ref": "indicator--fa7ed844-021b-4b61-aaf4-cbaf3e01762f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2448cafd-c2d2-42d1-a66f-2f32355711d5", "sighting_of_ref": "indicator--fa7ed844-021b-4b61-aaf4-cbaf3e01762f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef8142f-0b4b-44f1-81c0-a432471846aa", "sighting_of_ref": "indicator--eaaa7daa-688c-45d2-9168-def6356b2c83", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760581ed-2522-461f-89e0-cb93ec0e11cb", "sighting_of_ref": "indicator--84ce348b-5757-4d81-be2a-f743e6dd191b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a3d8c4-1b93-4474-ac91-a3c4951c3156", "sighting_of_ref": "indicator--84ce348b-5757-4d81-be2a-f743e6dd191b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35635ce5-dfe3-4ac3-b3c2-c26a4fcb9088", "sighting_of_ref": "indicator--84ce348b-5757-4d81-be2a-f743e6dd191b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e575b56-7c5c-406a-8da8-7c33a9ff6e8e", "sighting_of_ref": "indicator--3883023c-9efe-464e-a476-a0351ced7efe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d58273b-acb6-4328-a00c-df6133fe2345", "sighting_of_ref": "indicator--3883023c-9efe-464e-a476-a0351ced7efe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b911c3fd-d0b2-484f-b480-5421fe198a91", "sighting_of_ref": "indicator--3883023c-9efe-464e-a476-a0351ced7efe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2a297b-46fd-4716-b25a-431282b61e82", "sighting_of_ref": "indicator--759832ff-d9de-4c09-a5f0-62904f831d01", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52da6aeb-f723-4548-8691-ccd60606c7f0", "sighting_of_ref": "indicator--759832ff-d9de-4c09-a5f0-62904f831d01", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a689a7-2774-467c-ad6a-0847ffd9d53d", "sighting_of_ref": "indicator--759832ff-d9de-4c09-a5f0-62904f831d01", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924e9374-4e02-4515-8fc3-8c743c879ed4", "sighting_of_ref": "indicator--ac34ba2e-bff3-4a14-942b-366acc68dd16", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2281c857-81bd-41ad-a899-81b7be1cb41a", "sighting_of_ref": "indicator--ac34ba2e-bff3-4a14-942b-366acc68dd16", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d7f54b-7f7a-4128-9e50-9a56089e5ae6", "sighting_of_ref": "indicator--4c77e721-08c8-4ced-96bc-bacd3f9294cb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55aeb69-149b-4cee-926d-0b70772ff2ae", "sighting_of_ref": "indicator--4c77e721-08c8-4ced-96bc-bacd3f9294cb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d69f32-a563-4d75-aee7-2bfabd16ec57", "sighting_of_ref": "indicator--4c77e721-08c8-4ced-96bc-bacd3f9294cb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3b2970-d541-4944-88de-0f35fb707f8b", "sighting_of_ref": "indicator--807b4996-1beb-402a-83f3-635d0b8bc606", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb4d0ce-3b4c-41c7-9a0f-1c9651ec2393", "sighting_of_ref": "indicator--20b8db82-ead0-477f-8ba0-28497fdba89b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de61d689-4071-481f-8e8f-2e7327282872", "sighting_of_ref": "indicator--20b8db82-ead0-477f-8ba0-28497fdba89b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdf7c49-2f8a-4d3b-ae2e-62523bbf4878", "sighting_of_ref": "indicator--9c544c69-3803-4e45-adb8-289299fc330c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7013bd5-6377-471d-9c91-711eee1e489c", "sighting_of_ref": "indicator--18a818e9-0b6b-4c5a-9cd2-7802899b3b66", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bd73c8-bdc2-4a17-a43f-2f6f49e5a477", "sighting_of_ref": "indicator--56391c1b-1d87-4bc1-b7ed-e5b0e6a11f0c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b0284b-a06c-49c5-8a6a-39ade9038b01", "sighting_of_ref": "indicator--56b46f24-ebe0-4279-8371-aacfc2848c4e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94970c82-ccb0-4ee6-96f1-805168b3e3c5", "sighting_of_ref": "indicator--d8b57958-6f38-4e98-a669-447af0c005bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046261a9-f0ba-4951-ba84-adc7c18e35c1", "sighting_of_ref": "indicator--5b98e943-e4d7-4df8-8fa7-7dc6dd42607e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c618fafd-785a-4c17-a038-224ad0d2f4e2", "sighting_of_ref": "indicator--11bf4da0-50ac-4db0-b969-a51fed89fc7a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1572b38-85ed-4e6b-99af-f5fee7fcf58b", "sighting_of_ref": "indicator--11bf4da0-50ac-4db0-b969-a51fed89fc7a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dfa2f1-2337-440d-85a0-38b287505c05", "sighting_of_ref": "indicator--11bf4da0-50ac-4db0-b969-a51fed89fc7a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b265338-a068-48cc-bc00-2570cdbbaa81", "sighting_of_ref": "indicator--413ed1de-782b-463e-b44d-9fa62f5d1769", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cf0600-2f1c-4962-8948-d71d001ed842", "sighting_of_ref": "indicator--380ae454-5872-4a89-8bc1-6049a9ba9718", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687fa5da-e9c4-4acf-a5a7-3d048c3ab097", "sighting_of_ref": "indicator--881ce6da-b48b-460a-a4ca-16ee34cde27f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01efe44-150f-428b-9386-7a752044251b", "sighting_of_ref": "indicator--8ebadbad-d67b-440b-b3a6-2d57c0c04889", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be5ddab-c5d7-4404-bb22-58dbda00b948", "sighting_of_ref": "indicator--bdebb845-045e-417b-9596-17b6e1c4a2c5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09ece8f-ffd1-46f7-b85f-d23c5752540c", "sighting_of_ref": "indicator--e51820e1-d71a-4ab1-9d08-406222ce5c32", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdf44e1-965f-40e6-afa4-a0610963150f", "sighting_of_ref": "indicator--c168dea6-3ef0-45be-bf36-39cb07e4b7fd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da11f220-12ab-4639-bb51-d09361a6cd15", "sighting_of_ref": "indicator--b330ba16-860f-4e17-aa09-8d0c4cbd3ae7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159b3043-224e-4895-a76c-d7ce147e55d2", "sighting_of_ref": "indicator--354ccfdf-1c40-4a56-86e4-5fbbc5a56abb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb211e7e-ebbc-4c71-b906-1d0c741fe8e2", "sighting_of_ref": "indicator--e1f9ad07-4030-41d1-94e4-118cb0000392", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfabb259-b38e-41b7-a3c4-4ec159e75b22", "sighting_of_ref": "indicator--49dfa4ef-ac2f-4a82-b229-428925bb444f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c565666-7292-4908-8c4a-edad614facb9", "sighting_of_ref": "indicator--bae1d34b-9c29-4f42-b438-45f626728e7f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085abc30-c8ef-4328-aabe-6b7a03bc72fe", "sighting_of_ref": "indicator--661d9e30-ee7b-458a-9b9a-fcc244db33d8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5209e6d0-21c8-463a-92ed-6701fd214774", "sighting_of_ref": "indicator--b1d0581e-c450-4bca-8eca-86f4958b8cb5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0820bd93-1c75-4766-a977-287ca97c445f", "sighting_of_ref": "indicator--0917f26e-599b-4cd0-8879-a724d9d87b3b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6399bb55-ee73-429b-80f9-b65747f18c47", "sighting_of_ref": "indicator--fede5bc1-616a-42a2-b504-df0bd6ebc1d6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc121ef7-5575-4fbc-9609-2b8b63b2db13", "sighting_of_ref": "indicator--8d575667-0a52-46be-bb77-ce309245b07a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8680122c-5f00-4f5a-8dcf-d5d1dc20e613", "sighting_of_ref": "indicator--a50b2377-8d81-48d1-a5dd-9263e7d31a7b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdbe6ae-1c09-4b78-832f-0e570f71c9aa", "sighting_of_ref": "indicator--88d43869-e0b2-4f0d-8337-20c4046ca2a6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b727d8-10e5-48e3-b36c-52f4baaf5f05", "sighting_of_ref": "indicator--e8a20c56-73cf-409e-b221-ca87ec8ed5dd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dba1dbb-70dd-44d6-8146-5a2cf3f3c648", "sighting_of_ref": "indicator--2b1da659-3bfb-4143-b21c-4d7fb81da040", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfd6a5a-98d4-44b2-b7c7-e04d6255838f", "sighting_of_ref": "indicator--29995291-1f57-4eeb-bfba-877b74f08ef0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f198587f-8260-45da-bb66-f3a403444cfd", "sighting_of_ref": "indicator--29995291-1f57-4eeb-bfba-877b74f08ef0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080cbbe4-6173-429a-9ba6-4dcce44cbff0", "sighting_of_ref": "indicator--29995291-1f57-4eeb-bfba-877b74f08ef0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ae6f75-c2f7-45d1-9136-299e36f34a76", "sighting_of_ref": "indicator--804d6cfe-37cf-41b8-8d14-e87f3180068c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4777ed4e-f498-4434-93f2-ea1b7c4eaca3", "sighting_of_ref": "indicator--fdd33c67-19e9-4c5d-ba19-663ccda51386", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0926b53-ce0b-4d51-9e3a-8beec7f30f4a", "sighting_of_ref": "indicator--fdd33c67-19e9-4c5d-ba19-663ccda51386", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7410c6ce-2a92-4a9f-a653-ebbf3e01afb6", "sighting_of_ref": "indicator--fdd33c67-19e9-4c5d-ba19-663ccda51386", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3eaca4-44c6-46ef-86ee-f7c9c75c597c", "sighting_of_ref": "indicator--d9580c25-52ac-4e0f-aa10-46c14d6d8d2c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a740e021-d769-48aa-aa80-387445c7fdfd", "sighting_of_ref": "indicator--d9580c25-52ac-4e0f-aa10-46c14d6d8d2c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ba2615-7290-48ee-b3b8-7de81c1c927a", "sighting_of_ref": "indicator--ccdb47ba-c39c-4b67-96c6-a2deabf8f464", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f989ded-c11f-4d97-93ee-e367440ca992", "sighting_of_ref": "indicator--c4477274-b530-44cc-b712-2e8e8f6bf7e1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba84a0f-60ab-439b-b986-d3bb08ddac4c", "sighting_of_ref": "indicator--a962da90-6fe8-481d-892f-cdaaa3cfe66f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62083f34-b1c1-46db-8332-09f65aa112cf", "sighting_of_ref": "indicator--a962da90-6fe8-481d-892f-cdaaa3cfe66f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90a0fc3-83df-4128-9115-ca35448c5ea5", "sighting_of_ref": "indicator--a962da90-6fe8-481d-892f-cdaaa3cfe66f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f532486b-2cc7-44b4-8129-80d5ab773206", "sighting_of_ref": "indicator--1274a3d0-f58d-4257-bc46-e5713d4833cb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563832b1-0da8-4ec5-b067-676958a2eedb", "sighting_of_ref": "indicator--c0618517-f922-4e4f-aefd-dd7bb62b7226", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5788ab8-55df-4c31-a808-e7e682e9bf42", "sighting_of_ref": "indicator--b2097d87-e664-4107-8215-eb77b6805ac2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5a1d38-19a8-4295-a2db-cc20704d276b", "sighting_of_ref": "indicator--b2097d87-e664-4107-8215-eb77b6805ac2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7743f3f4-3c86-447b-b011-a907b69cde9b", "sighting_of_ref": "indicator--b2097d87-e664-4107-8215-eb77b6805ac2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25cef43-be6f-4de2-812b-dac15f36f4f1", "sighting_of_ref": "indicator--1e44b11f-818b-472c-9d9c-662fbc601be3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c709266-15dc-41bf-be72-8d68b30284f4", "sighting_of_ref": "indicator--1e44b11f-818b-472c-9d9c-662fbc601be3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a030b6b0-9e11-4910-88f7-5f5c494f640a", "sighting_of_ref": "indicator--1e44b11f-818b-472c-9d9c-662fbc601be3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ca1179-b327-4349-b18d-4aac4b2e5386", "sighting_of_ref": "indicator--b485d125-10dc-4ce9-b318-8023ab411c36", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6693da13-28a5-4e7c-b423-bf85a02976f5", "sighting_of_ref": "indicator--b485d125-10dc-4ce9-b318-8023ab411c36", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ee32ea-e250-476f-8167-07a9dcadbdb4", "sighting_of_ref": "indicator--b485d125-10dc-4ce9-b318-8023ab411c36", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a782774-3f23-4c36-9216-3434de685888", "sighting_of_ref": "indicator--8a1f2124-6099-412e-9bc7-5b0f17ef5e8c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c67757-722a-4bd9-8e47-a8ba038541fd", "sighting_of_ref": "indicator--8a1f2124-6099-412e-9bc7-5b0f17ef5e8c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f00552-51c0-407f-b094-f5a6c85ca472", "sighting_of_ref": "indicator--8a1f2124-6099-412e-9bc7-5b0f17ef5e8c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7977b8d-0582-43d8-969c-2a13d94bce8d", "sighting_of_ref": "indicator--5439b48c-5352-4aad-ae16-140073a1fc3a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946364e2-0768-462a-bf5f-a4db2d1c68bb", "sighting_of_ref": "indicator--370afb96-e8b7-493c-9459-d15879850724", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887baf08-c9cb-4c95-be44-e79abc08988e", "sighting_of_ref": "indicator--370afb96-e8b7-493c-9459-d15879850724", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ffc72c-5015-448f-a6ce-9c23141d7b9e", "sighting_of_ref": "indicator--370afb96-e8b7-493c-9459-d15879850724", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760d9b57-c8e0-478c-8d64-ef6f7a2848c0", "sighting_of_ref": "indicator--21f450ed-8f1b-45b8-9663-8d12e1e3fa6d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c497ebf6-94ea-492d-a393-84a6e6101eab", "sighting_of_ref": "indicator--367955bf-3ff7-4ab9-85cd-279593cb4e3f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e28e4f-572f-450b-ae3e-4e03d7599267", "sighting_of_ref": "indicator--367955bf-3ff7-4ab9-85cd-279593cb4e3f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709d5d9a-9fd6-4f74-bb1b-193232b1e484", "sighting_of_ref": "indicator--367955bf-3ff7-4ab9-85cd-279593cb4e3f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0378bf2c-3569-4f25-9c11-453575eaf8ac", "sighting_of_ref": "indicator--a732d89b-7fec-406b-bbef-f441cd50e730", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8abea2-90c0-402f-a40f-728e4a64cfc6", "sighting_of_ref": "indicator--0189e280-53a3-4d92-9870-6a006f079295", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0199d32-0267-474e-a22e-c2c7f8df3420", "sighting_of_ref": "indicator--0189e280-53a3-4d92-9870-6a006f079295", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d334216b-de00-402c-ba5b-74069f3eefe2", "sighting_of_ref": "indicator--0189e280-53a3-4d92-9870-6a006f079295", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba59160d-66c1-4af9-8b5b-dd85c3b3dee7", "sighting_of_ref": "indicator--e2b44a35-c0f6-4066-8ab8-432b270a49a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e0bae6-d5b9-46dd-8a7c-af6346673e03", "sighting_of_ref": "indicator--e2b44a35-c0f6-4066-8ab8-432b270a49a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f888a1-fec9-4ab3-bfe1-4055eeaaa10c", "sighting_of_ref": "indicator--549a017e-014d-4191-a945-194c9e402bac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6ae26d-b891-4c6a-b4e4-f98696128fc8", "sighting_of_ref": "indicator--bc6f4eef-2f31-43bc-861e-11013ce8041f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7c5edf-153c-4404-81c6-af515a6b7e18", "sighting_of_ref": "indicator--0b3fa64f-a845-4379-a2c5-14ca550f9e02", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b22ec9-df78-4d12-b497-c274c9c0d587", "sighting_of_ref": "indicator--c5f44f17-fc4f-49ca-a324-33b4c4485cf9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4c7890-fda9-4e81-8003-602fbd3c459e", "sighting_of_ref": "indicator--c9304f34-0a1f-4f4f-aef2-01a543d4c266", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23fc2ef-9bb9-4489-9020-6d06d5b86fe8", "sighting_of_ref": "indicator--0e67db06-b7a7-4396-9afc-24e5718307ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3de21a5-2eb8-4071-b227-b2b715d9437d", "sighting_of_ref": "indicator--38413ebe-d5ef-4194-8eb6-996761f29a46", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c1dc88-3ed4-4743-8597-957d18f6beb0", "sighting_of_ref": "indicator--dc561aae-c874-4f7c-88d0-4b5eefa939fa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191c4b15-9a6b-43cc-8864-45decf9e59b0", "sighting_of_ref": "indicator--61c96392-6e6d-4bf1-8784-b8ac4ea6cf50", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3047266-7a7c-48f1-813b-812fb6b42dd9", "sighting_of_ref": "indicator--70a09b40-4856-4d38-afde-d3bae4323081", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673dfa81-d917-466c-8c80-eee2085da937", "sighting_of_ref": "indicator--1c8cec46-37a7-4ef0-b323-84f3f3561120", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7f29f3-11fe-4c56-90b8-0c7b8881cbf8", "sighting_of_ref": "indicator--c5fb0165-a36b-4e12-9de8-ccdff79f8ee8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46b3a7f-c5ce-4a2d-ba6c-448727e5aa8c", "sighting_of_ref": "indicator--c5fb0165-a36b-4e12-9de8-ccdff79f8ee8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9adfc72-2957-47a4-83c8-f9e04e502b8e", "sighting_of_ref": "indicator--63e77234-4775-417e-949b-4f5e0dd72317", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da65bdbc-5e3d-4c52-a870-dfcfe0015918", "sighting_of_ref": "indicator--63e77234-4775-417e-949b-4f5e0dd72317", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c257da-54c4-4cb5-bf4e-f77fa33a8a9b", "sighting_of_ref": "indicator--63953d35-dcd3-4524-a606-550e98573e1e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a508c26-bcc7-4c2f-a1fd-9e0e1aa164a8", "sighting_of_ref": "indicator--ff556ade-34f7-4069-ae0e-cb6661e28604", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d300b2a-5ebe-4cc6-8d08-793d55d18653", "sighting_of_ref": "indicator--885cbf68-4885-45c3-adba-0faa8f005646", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3dc9ba-8afc-4310-a833-55f34425b7ae", "sighting_of_ref": "indicator--a4911e31-016b-44e7-9a33-bf950ae31269", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea34d4e7-af36-463b-9bb4-ee8d1ef2ca23", "sighting_of_ref": "indicator--fa4aba3a-3995-44ed-993f-5e4e879cc4f1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b6f4b8-e947-49ba-aaca-ac8a44624485", "sighting_of_ref": "indicator--8ea26a87-aac9-40eb-a485-aaff804d4116", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1de5f79-5864-48c7-9b20-47dcf573503d", "sighting_of_ref": "indicator--5ef22fc6-8ae7-4bf4-8cd5-7e4ba26a821e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a23a3e6-785c-4786-9e5c-89fdf944d18c", "sighting_of_ref": "indicator--b954ea01-fad2-4bbe-bd6e-8cc603fde331", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aec4284-e50c-42f4-9243-ad3418bb92be", "sighting_of_ref": "indicator--160b2430-a107-4cfa-9429-92850fa21214", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21fb9e4-5c6f-414b-a29a-c1f6da67f8f4", "sighting_of_ref": "indicator--a3937515-ad52-46db-9823-bbaeb1241dfb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08225d2e-b911-46ad-8b08-cbb1ebe9cadd", "sighting_of_ref": "indicator--9d3c64df-b548-4fc3-9761-fa98934e9396", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7831cf-ce8b-4bfa-86d5-54056932a655", "sighting_of_ref": "indicator--94f04779-8ea2-4cc3-8079-d98f7c532bf6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc2b26a-ad7e-4251-bde6-bf8fe4407454", "sighting_of_ref": "indicator--504b7fb8-4a9b-4b7a-933c-39b06d603147", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578d0e36-69dd-4908-98a8-18b28f0d0879", "sighting_of_ref": "indicator--912b32c5-6c39-4f5a-91a9-0f21e55373f8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f9b347-0bd6-47f3-a5c6-ed38d2527c8b", "sighting_of_ref": "indicator--38e572e8-4530-42b8-a9cb-dc12ebbfb17c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234c632f-5baf-4694-b6a4-80d98487572c", "sighting_of_ref": "indicator--41ca4dc7-4866-46e4-859d-756ae8849c40", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d542203-abd9-4928-b930-b16a3d34f9ca", "sighting_of_ref": "indicator--a1a192bf-eb6c-41a7-a03a-d2fd3c35bef0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2bf0de-d1c5-4bb4-8606-8b2cf4d4e936", "sighting_of_ref": "indicator--a1a192bf-eb6c-41a7-a03a-d2fd3c35bef0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2d034f-1594-4eef-8293-bf461a8a4467", "sighting_of_ref": "indicator--b1903a65-e33d-40f9-b4af-040a203b4569", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7ed557-c00d-421f-be6b-9b6211a972d7", "sighting_of_ref": "indicator--11bc5086-ac45-47ca-b325-8bfdd2b7118c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f557074-408a-44a5-9957-aacee5d396cb", "sighting_of_ref": "indicator--3c4eb7c1-e129-4f45-b5a7-c860d916923d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb7afb6-5126-45e7-9c66-c7ca1aeec3b7", "sighting_of_ref": "indicator--f184c151-fcab-4a1b-a215-741af4af933d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e60a1d-69a9-41b6-a33a-d3074280f406", "sighting_of_ref": "indicator--ffa0bbcc-e1a7-480b-ab73-66ab4eb62266", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca7d9fc-011c-4611-9b8b-3df0e153e479", "sighting_of_ref": "indicator--ffa0bbcc-e1a7-480b-ab73-66ab4eb62266", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c0632c-559a-45d3-ae4b-0cc19eaca2de", "sighting_of_ref": "indicator--ffa0bbcc-e1a7-480b-ab73-66ab4eb62266", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--decd044d-95e4-4dc1-b1e7-3f1e13475719", "sighting_of_ref": "indicator--a200066f-64f0-47bb-a788-996271f29151", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d600b0-6ded-4110-8b94-d97931718e15", "sighting_of_ref": "indicator--0dd4efc7-3192-4b6d-a9e5-0157ce212b50", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f30344-4d6f-41f1-9b5e-e452c472a8b3", "sighting_of_ref": "indicator--8a8d41ba-6f2f-4ea1-90d9-f3652058b4cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b3645f-ff73-4f48-9d96-93d367cfa047", "sighting_of_ref": "indicator--49cf4c21-df33-4a88-b8e3-6ca32eef5c44", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6182ed3d-5767-4294-adf9-041a50fd26d4", "sighting_of_ref": "indicator--f008513d-bbd3-4d61-9616-62fd96a9d2a3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa9c181-3295-4705-a5bd-7d15a6bbd55e", "sighting_of_ref": "indicator--ba775fbd-1b9d-460e-8213-67824c0e69ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4900f21d-e230-4233-8f79-bcb8f92c8b23", "sighting_of_ref": "indicator--39d06a81-df76-42e6-8630-655f92acd684", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e85fe0b-ce87-4ffc-b942-c6e18d6ee541", "sighting_of_ref": "indicator--420a22ae-7950-4d3d-a69a-e1f1fc487024", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf08a9d-85f7-4233-8d4c-215001c513ec", "sighting_of_ref": "indicator--a1ef6f6c-2cbe-45be-b145-2c6276f91b3d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06966740-a3c9-4692-b80d-182227468370", "sighting_of_ref": "indicator--5e40e081-75f2-4be7-ab64-abdf529727e4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7f2b38-b112-4fe0-bf99-b5686d211897", "sighting_of_ref": "indicator--75df38ee-011e-4cf7-9615-cd853d3c3dcf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba498a5-098b-438d-a64b-6d9eac88728e", "sighting_of_ref": "indicator--b1bd95b7-a496-4bd0-8e7c-1c0b2fa40865", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e14c4d8-795c-4047-87e0-5285d9e5a8c0", "sighting_of_ref": "indicator--30cce575-7a74-475d-978d-4b99562c2be4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a278274-8657-415e-a22f-6f8447f2c813", "sighting_of_ref": "indicator--98bf4282-0e74-4d3d-8360-2ac771f41ec7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c4806f-a93e-4f8f-b129-02774168873b", "sighting_of_ref": "indicator--98bf4282-0e74-4d3d-8360-2ac771f41ec7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad857c42-6845-4add-a493-16af51bbd975", "sighting_of_ref": "indicator--1c980a8b-bde2-4174-b8a7-7c6c531fca60", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11421033-bd5b-48ca-b57d-1944f9129db7", "sighting_of_ref": "indicator--a7954a17-9693-404f-b20d-c55f68a0029a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264314c6-42cf-4f1a-8e56-733dea94b038", "sighting_of_ref": "indicator--ef8b84f6-99d9-4aa6-b9a6-3b6f36289909", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa0d03c-30ed-4758-ad6a-f7e188fd183e", "sighting_of_ref": "indicator--ef8b84f6-99d9-4aa6-b9a6-3b6f36289909", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b60563-d207-43d9-96d3-85854ef8229d", "sighting_of_ref": "indicator--bdb32d26-f69e-41ef-9904-c55b9b4111f7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c695981-f4f1-41b8-9493-146d76a9625b", "sighting_of_ref": "indicator--38819310-6b3c-40cc-a085-775808f8f46e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcee5ee-b5f0-4ca4-83bf-b1f472094b30", "sighting_of_ref": "indicator--07304754-d9be-485c-9932-fadbbc42b1ec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b035fc8-1102-487f-b605-9731b39d74b5", "sighting_of_ref": "indicator--7be6e1e1-cfe2-411d-a729-eb63e4d2ea52", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f640757-a088-4cc2-bc64-27aea3f436c3", "sighting_of_ref": "indicator--671c8fe8-4032-4cb4-8a62-0782b7be2d67", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f414a53-bd42-49b3-9d06-ab012e001e3e", "sighting_of_ref": "indicator--671c8fe8-4032-4cb4-8a62-0782b7be2d67", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b23ee17-f25c-4991-b731-85aca5542eb2", "sighting_of_ref": "indicator--9ef15276-9236-4597-b2a2-d9847d2385a5", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49a754f-e7a1-493b-99bd-6ecfa3948f05", "sighting_of_ref": "indicator--3123f282-cf2b-4f3a-80b1-e47485cbc384", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b7e409-22ce-4ace-9650-19feabd08477", "sighting_of_ref": "indicator--3315a6c5-2bec-4db1-ae69-2d2a9014b53e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ce93ba-4e27-4a66-a9e4-6cd04595f327", "sighting_of_ref": "indicator--3315a6c5-2bec-4db1-ae69-2d2a9014b53e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ec3512-4eaf-4c51-a586-4ad68d905f9f", "sighting_of_ref": "indicator--0ea8017f-39ad-48fc-b7e4-e34046524f76", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0ce155-8664-46fc-a249-154b2983d505", "sighting_of_ref": "indicator--60feec86-ea6f-49fb-b583-53a40f61f784", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bf0a31-3715-46bc-aa1c-93717b03790d", "sighting_of_ref": "indicator--60feec86-ea6f-49fb-b583-53a40f61f784", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19d72d9-2da8-4cc5-a64b-cdb4a5844d1d", "sighting_of_ref": "indicator--60feec86-ea6f-49fb-b583-53a40f61f784", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d3dbf8-ff42-437d-9900-a2a96427d8df", "sighting_of_ref": "indicator--b8a5c3a0-847a-405e-9001-1f7f4aab7ed7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6d4029-6c07-4872-a3c5-6fcb2aea10e1", "sighting_of_ref": "indicator--ac36f789-74fc-4837-8964-27623e9dfdd6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eab401e-6d41-44dd-802c-444c8a1883e0", "sighting_of_ref": "indicator--5b4c6d7f-8f7d-4995-a961-396294628971", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708bc5fd-5ca6-4b67-8d60-3fa600d0abd8", "sighting_of_ref": "indicator--143697d6-e3a1-469b-a5cc-3f765babbc29", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3c0342-ea94-4d1c-b4a7-49e69ea9fc2a", "sighting_of_ref": "indicator--32d4ae16-c0c0-46db-a2fe-5981319af229", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28433e56-ee51-4076-bc60-0026f4ca1d18", "sighting_of_ref": "indicator--434ef12e-79c3-46bd-8443-38a3bb1c2087", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad71b8d-f73e-47e3-b9fb-31967a612f15", "sighting_of_ref": "indicator--434ef12e-79c3-46bd-8443-38a3bb1c2087", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54798c46-9116-4c81-9673-5757925d1780", "sighting_of_ref": "indicator--434ef12e-79c3-46bd-8443-38a3bb1c2087", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24826b49-0269-4275-b22a-b0bc26c11d0a", "sighting_of_ref": "indicator--8f9a2d37-5ded-4cf7-a3c0-89a934384ac8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848dde27-c6e4-4b12-b99e-655c8d1ac7ff", "sighting_of_ref": "indicator--d3d29fcb-9831-4857-be85-d6a2ebef1c38", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ce99ed-6167-40bf-8c4f-ea703010c5d2", "sighting_of_ref": "indicator--7ead788e-bb85-4bb0-9fc4-164c68d891c7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c38505-5d3e-411a-abcf-a361532aa518", "sighting_of_ref": "indicator--871a6196-551c-4b0d-b620-75be8094e34c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b39a6f-a6ff-4c3b-8c1f-addfd46c9ed4", "sighting_of_ref": "indicator--be882dea-69c4-4251-882f-680c3efd3975", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea5f236-4b8a-4f0c-8144-ef9f76b60aa9", "sighting_of_ref": "indicator--1263a933-c514-4a48-88de-8d47fafcc0f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e66783-23ac-4810-8a22-9de61fa38c55", "sighting_of_ref": "indicator--4f61b16e-20bf-416a-be0f-e6a658a2f290", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a104463a-bbc3-42b7-980a-db1ff9258bd2", "sighting_of_ref": "indicator--c0472d52-9e4f-4baa-83f5-b0338e0f22aa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e542e8-28d9-4981-b362-29be843d147c", "sighting_of_ref": "indicator--2767a2b4-d111-4077-a3b6-13a103908e91", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a309ce-9056-4066-9db3-3200ca1972d3", "sighting_of_ref": "indicator--89a07569-cdb0-486a-a443-b7892a3fb05f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b71f089-980c-4cc4-9254-44826edd48f6", "sighting_of_ref": "indicator--dc383712-2bfa-4c33-9a40-e9438663683b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc3a951-ecf3-443c-85af-263834ee1a5f", "sighting_of_ref": "indicator--38a8043c-e7a2-4b4e-8edd-687b08630a76", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95c4877-8143-4843-9147-4ab481f8a494", "sighting_of_ref": "indicator--36e7cf9f-ea00-4daa-85b9-ea32e4fe9036", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73de104-582b-403e-98f9-2d8eac1743bb", "sighting_of_ref": "indicator--3241afd8-aae3-4a74-8259-6efeaa3c11ee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a81d02-761c-4821-a1a1-cd67ce2fd5de", "sighting_of_ref": "indicator--bab5ff32-2de7-4029-92b1-5cb24a6ef155", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec69699e-c276-488c-89ae-a36497afbb9e", "sighting_of_ref": "indicator--698a021e-48d2-4464-8546-f7e777b70485", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c55096-6c34-416d-ad16-f1fbc71ad7f6", "sighting_of_ref": "indicator--699a625d-00c7-4808-b6b3-a2d0f59f8672", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8685a75f-1151-44d3-8e54-5ab79395e9d5", "sighting_of_ref": "indicator--90cf2fbc-4205-4342-830d-272885e59fd5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1239640b-d6c9-4b46-8452-55cdb0f40f02", "sighting_of_ref": "indicator--dfb5d092-b7c1-48fb-b528-af3fc02f2b2b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e85e33-7c7a-4b4f-b05b-866acf0e4f95", "sighting_of_ref": "indicator--89fc70a9-f6a1-4077-99cb-132923cb675b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7868a5-184a-4b92-8dd8-3dec75b5c821", "sighting_of_ref": "indicator--dcd84708-be0d-4917-8661-6ddf727c2660", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2a502b-8dfc-4c1f-a9f1-b10cd3073ed0", "sighting_of_ref": "indicator--38b94e38-c91e-4584-b084-69e1607f6f90", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323c429d-b085-4da0-8439-c9588e83714e", "sighting_of_ref": "indicator--38b94e38-c91e-4584-b084-69e1607f6f90", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5499b27c-5214-4425-921d-e95eb6c4d949", "sighting_of_ref": "indicator--68927d44-69e8-44c7-bb30-d58c6329cc31", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc87c0c3-e90f-4912-ab4b-31db54527053", "sighting_of_ref": "indicator--d96a6b7b-9627-4850-ac62-4707fad2e1fa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f86d60a-c3bf-4ce4-82b7-31b5ba83e6e1", "sighting_of_ref": "indicator--037065da-e851-4c48-9c64-3b1ab98a5ceb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4871bbd0-9a58-4091-b46f-36fb89a8695a", "sighting_of_ref": "indicator--32151a85-fdf0-4002-8a82-0b79b218cd09", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4f8825-3101-422c-835c-ff5c15613ef4", "sighting_of_ref": "indicator--62bd0943-2629-4519-a18e-dfc297680671", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efefbc39-2087-4063-9f99-427ff864fb85", "sighting_of_ref": "indicator--b50051b1-a41e-41bf-bc06-8788fad6d519", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e466fb-c24e-4ecd-83a0-0789152b35ec", "sighting_of_ref": "indicator--6e99ea90-8340-48a9-a6c4-61de1f53e48d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f506dba-2ba2-47fc-8789-8481fe8b4a50", "sighting_of_ref": "indicator--6e99ea90-8340-48a9-a6c4-61de1f53e48d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f3b97e-5dc6-4562-b0ff-7b44e631d587", "sighting_of_ref": "indicator--7858e022-30d3-48b6-a58a-ed7190fb3d8c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f226dcb9-9054-4f19-9a81-c33e235449f0", "sighting_of_ref": "indicator--26199e67-16bd-46eb-9e01-195eb4ad7e21", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914dd71b-5127-48d3-889f-0ed4fe63fa31", "sighting_of_ref": "indicator--d8d91d5a-0524-4929-9c6a-4bd37e1ecbc6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41bf3b4-4063-473d-aa92-8d885df933f8", "sighting_of_ref": "indicator--d174eef6-93b0-4905-8ba3-9811cdd80726", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4a3dae-1d69-43db-a700-200fcb71c730", "sighting_of_ref": "indicator--905fb3a7-9919-45df-810e-435f380e36bf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfc3fe2-a5f1-4a6c-819e-c36638fe67da", "sighting_of_ref": "indicator--d6ce6e20-5264-46fc-8aac-9e7a45bb7789", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3319f369-30f2-4a84-981a-ba6a6f8deb6d", "sighting_of_ref": "indicator--df0a5886-42cf-412d-b02f-606445a5f46a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ce297d-075a-4f2f-a678-6d2c012b5e16", "sighting_of_ref": "indicator--df0a5886-42cf-412d-b02f-606445a5f46a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff82813-2741-44ae-b62a-189d95c66614", "sighting_of_ref": "indicator--6c7811e7-b7c6-44ad-8904-4004fdef8392", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8e89e6-d2d0-4670-bb55-04effeee2ec5", "sighting_of_ref": "indicator--0cfd0613-cccf-4862-b359-038f1d6b2222", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789e50df-da17-4884-9f98-aedae8cb437c", "sighting_of_ref": "indicator--651aaad7-dbed-426d-af2d-700394294ed2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a67f8c-5e54-4035-a61d-4b3fded0276b", "sighting_of_ref": "indicator--6597ce5b-7d4d-4d17-b62f-34c5314e725c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645abded-d784-48b8-af34-a29f7d83da5d", "sighting_of_ref": "indicator--573eef06-a4b5-4bdd-8335-bb1a46ae944f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a50516f-92b4-41fd-ae48-1f3c6a1fd44d", "sighting_of_ref": "indicator--bca0d611-e3f0-4576-ab36-7dcfba8d1c61", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf58799-f5f7-4dba-b16a-d677df541c28", "sighting_of_ref": "indicator--f6c02a02-b6a7-4b86-97e0-1f6b608bc6b8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f196f573-e7ce-405f-9e6b-82aa99853ba6", "sighting_of_ref": "indicator--ecdf1d84-5bb6-457e-8688-7186f951cc23", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c6240b-b28c-4a0b-b8fd-4745495c8ab2", "sighting_of_ref": "indicator--26c99ee4-3a69-492e-9fd7-9cf01ca6cb94", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3371d53c-45e7-47e2-97bf-fecd4996d335", "sighting_of_ref": "indicator--17d18b8a-aad8-4f80-944c-151f48751a82", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caaa1e30-2733-4b78-9831-f5c6b9ccbbb7", "sighting_of_ref": "indicator--ee0d0a1a-3ea5-4035-91dc-5bab07339e6e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27320a09-2dde-419a-83b0-11b19ce039b3", "sighting_of_ref": "indicator--67fe32d7-21b1-494a-9051-f0ee9243b658", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb20ec8f-162c-4c87-9c49-5a74c5f29baa", "sighting_of_ref": "indicator--3c2c74b7-536e-45d0-9862-537d5d2d7b4d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7649fcf2-3822-4472-a113-e0937a0da5a7", "sighting_of_ref": "indicator--127c7df5-0b82-45e9-9af2-ff4694d78e62", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b05017-400b-4c55-b873-81edb71f4e7e", "sighting_of_ref": "indicator--328b8873-65ba-4519-8b0d-e3f6d2a10b40", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb17bc0-d59a-42fd-a283-0f357937db22", "sighting_of_ref": "indicator--d4418914-765d-4828-ac77-f2f57a976952", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7b840b-4182-48ed-bd94-43f52d349503", "sighting_of_ref": "indicator--af78dbd0-29f9-4bd8-824f-f7a75a92ddf0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0841b12e-e46f-4682-9b85-e8641dd54710", "sighting_of_ref": "indicator--7fc9205d-629f-4e1a-9318-d32f734a8350", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96d1c6b-f8c2-449a-8605-14d760f5f8d4", "sighting_of_ref": "indicator--5505b910-2cf9-43c3-9971-a1aa7ac9c9c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09ffff0-a179-4e1d-87c4-a5829e881904", "sighting_of_ref": "indicator--c57ec120-9214-4b13-9fb0-a8c301d32514", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd605e71-f3d6-4ed7-9681-c0754743c323", "sighting_of_ref": "indicator--50e77902-5969-400d-ba26-4a360da96fba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edaa5a1-34d9-4011-8b74-569521191d97", "sighting_of_ref": "indicator--7878be7f-9eed-4a7d-af8d-f5bdbd145c44", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d246df74-8eaa-425c-8d32-f4e4d0d39ab8", "sighting_of_ref": "indicator--b04ee859-abaf-463b-a6f4-831f093b383f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb41d88-4d7e-4ad0-b512-1778ffae910b", "sighting_of_ref": "indicator--47f232bf-3494-442e-bd49-0dd6928b1baf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0dc4f5e-1811-49bf-9d4f-fe59b16f27fe", "sighting_of_ref": "indicator--46c0018d-22c9-473d-9b8a-edf9871c5894", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25e20b6-63ad-4665-ba38-5cb22b999416", "sighting_of_ref": "indicator--f1d9708c-737a-4e77-8d8a-60487569947a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4c4916-bcd2-4fa9-a29f-40eb602356cf", "sighting_of_ref": "indicator--54b56c29-9a21-46ba-89d2-cf7042328abf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45a3971-3894-415e-a972-0b8f4392a23d", "sighting_of_ref": "indicator--6d215e7d-733c-4227-be3c-184a315b6f75", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060b7600-9e96-4b6a-b526-15b166822f53", "sighting_of_ref": "indicator--92b94838-dbd4-4036-bd51-2850d8bc9978", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba628bc-b2d1-4b6f-9e5b-63735e728986", "sighting_of_ref": "indicator--2ed54974-d713-41e5-883e-09c2254a6451", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c78b56-9279-4ae0-9cc9-29d17c4dc844", "sighting_of_ref": "indicator--6a16dd9e-251f-4bc6-b3fb-c860894a20f5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ae03f6-fe77-4a00-827d-afae557c36a8", "sighting_of_ref": "indicator--69db8007-e71b-4681-ab16-e81a6a55f315", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e7edc9-d541-4179-b827-cf4c89c655ba", "sighting_of_ref": "indicator--fee3377c-8c5c-49c0-8b67-3ff059d59aa4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f40ab06-7370-408a-928f-63b9c211d5d5", "sighting_of_ref": "indicator--d4792d62-5eef-4986-8220-7168052e3dae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecab2af5-d70a-4624-bfaf-b4e725051dd1", "sighting_of_ref": "indicator--830775cc-095d-415a-b85b-e625c6252c86", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d4332f-395c-4630-84ab-5164acc8a669", "sighting_of_ref": "indicator--830775cc-095d-415a-b85b-e625c6252c86", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e018cca-1083-4103-b6a7-6bea643738e8", "sighting_of_ref": "indicator--8ead8b1d-4148-42cb-8fcf-7ddd2b1b3d48", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d706aa-508c-429c-9af3-2fbd64e38254", "sighting_of_ref": "indicator--5a704dfd-5a6b-496e-bac1-ceabec24731e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1527ef-3aa2-4e99-a2f5-bc68c6e58f42", "sighting_of_ref": "indicator--98d8c909-a943-48a9-930f-d78db18fbcce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01aa2fcb-074e-46e6-b348-2722f1d7c36e", "sighting_of_ref": "indicator--ba2a2757-1dae-432a-a92d-fa53608661a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d354d1c0-c6be-4062-9ac4-669ed2846ea5", "sighting_of_ref": "indicator--5dbaf191-7168-42e1-a18e-77487841eb01", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67d5503-fd51-41d8-8b25-f7b173b9018b", "sighting_of_ref": "indicator--8cc66e03-3eb0-4d34-9891-d2eeb5771775", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5dac604-9332-475e-95e9-cd66d9b26d2c", "sighting_of_ref": "indicator--041de66d-b67a-4cfa-bfae-8c53c1e6ab36", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc54a31-247a-4a5c-a5c7-2f524f494112", "sighting_of_ref": "indicator--041de66d-b67a-4cfa-bfae-8c53c1e6ab36", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3385698e-cf21-4450-a9b0-89c740dbf43e", "sighting_of_ref": "indicator--71d694ed-4086-4e7d-ace0-f51895a94eb3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb278b2f-3c03-4304-a4bb-86c5e9dba5c6", "sighting_of_ref": "indicator--160bd8e5-3af9-40c6-822d-484a6993e336", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0de5d79-48cd-4ff7-8c4a-7e86be4c44f0", "sighting_of_ref": "indicator--2ee20deb-390b-49cd-b138-92154739bdb9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03638d7a-55ce-4175-a8a7-c18d4542a41c", "sighting_of_ref": "indicator--74c02757-7347-4cbd-980a-1ab3ade8f356", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c401648d-ecbf-48c8-927a-f55a4d6294d5", "sighting_of_ref": "indicator--8782eff0-064a-4d28-aac0-c221e283de06", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d48d2f-64c5-4a68-889c-3f3f840f6083", "sighting_of_ref": "indicator--d5e62c59-216b-4526-b8e7-229287a5df1f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5bb970-0b46-4f40-8317-42b1537ce3fc", "sighting_of_ref": "indicator--d5e62c59-216b-4526-b8e7-229287a5df1f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83499e7c-f830-40fe-912c-a24559a8f144", "sighting_of_ref": "indicator--c88b880a-b772-4f85-a3cd-686ae8848881", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdee2f0-46ba-489a-a393-54c0c8a6d230", "sighting_of_ref": "indicator--7f1d5885-942d-4a9b-932c-06fceb200310", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebae7d63-fc25-4987-88b2-b06502aabb1c", "sighting_of_ref": "indicator--851b6887-9aaa-4dca-abaa-13d46cc68234", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f1beb0-04ee-4836-91a0-84bf89eb8d6d", "sighting_of_ref": "indicator--0fe11899-db9f-4b1c-a4fd-d5f49085071c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c781c475-ad2a-40a0-b0b0-d9aeefe44e52", "sighting_of_ref": "indicator--7abc697b-1515-4f31-9124-dd6a0dbdd11e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6126f1-388b-454e-a301-030b539cf8be", "sighting_of_ref": "indicator--eee6b16d-b02e-4ba1-b353-710c91d57711", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59377795-3003-4e2c-9120-9902b05b1ed1", "sighting_of_ref": "indicator--36dc2c3a-4bdc-4186-8587-cbbbcdaf93e8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1c5641-a63e-4cd4-9d0c-e26f952e0572", "sighting_of_ref": "indicator--80592685-f6bc-425a-aa46-0f5f4ef4bcc3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e86fa37-3230-4847-9852-c871aac71e21", "sighting_of_ref": "indicator--fb5d6e7e-931b-4a4e-973e-2b5c64d9483d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55ed9ec-0482-4d8d-9501-362f1b4933d7", "sighting_of_ref": "indicator--a86ad4bb-39b2-4185-b551-4b621372b1be", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ae10d1-910f-49cc-b5a8-ef843714c5df", "sighting_of_ref": "indicator--8c720149-dbac-48f6-a08c-fe28d6d73bc6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b160f8-bee5-4514-b472-3cdc08567914", "sighting_of_ref": "indicator--c6d2d388-2821-4be8-9083-fb6f40a976b2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b910ea7c-6720-4257-a94b-419e833cf3d7", "sighting_of_ref": "indicator--ee38fb6a-929f-4a9f-8ae3-e81a7b9dc594", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2810f026-c1a2-4eb6-ba01-971d19feb24d", "sighting_of_ref": "indicator--2aeb044e-c63d-43b3-8947-6df5b26bcd59", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eac246d-0930-40d4-896d-fb6cd37bfb3f", "sighting_of_ref": "indicator--7dc221e7-a87f-49b5-9548-70270c753fd2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18062f10-acaa-4084-afa0-d59ec4a8a432", "sighting_of_ref": "indicator--60d4ef1d-013a-4b1c-8348-ca4b78094413", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f80c46-8ece-4acb-9ff3-e1717ba3e2e5", "sighting_of_ref": "indicator--ead4e1d9-8037-421f-b9c2-0d5af5f9b241", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab8b162-c27b-4ae5-9686-2fe62e5fc0bc", "sighting_of_ref": "indicator--967ea697-87ce-4b16-88d5-6afbe3cd310c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32701338-76f5-40bd-a5e8-6021c13f1ba1", "sighting_of_ref": "indicator--7eb082f2-d296-4d15-b18e-d48511cb7dbf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff294dcd-e886-42f6-a699-9a3506712b7d", "sighting_of_ref": "indicator--9ff1a877-eaed-468e-86e4-f194747f507b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ead98e5-df02-478a-a7ca-1b673a17504b", "sighting_of_ref": "indicator--7aa4061e-bf8c-4f58-b869-64cd4814d590", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243e72fd-8753-4ddc-9542-abc0d3f9f095", "sighting_of_ref": "indicator--2f9c8377-33f6-4401-b4c6-9b089d3a751b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5420fbbc-f6b6-4c6f-9eef-b30fbaa6b842", "sighting_of_ref": "indicator--df4b105a-869b-4689-868a-f4947c9b80fd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f165fd7-2f8e-4460-a1a1-b9ca6fa0b2b9", "sighting_of_ref": "indicator--dc53ec65-ec9d-4fd6-9e8f-f9f822266e8b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8079c25-952a-4427-b410-9cb186bc1380", "sighting_of_ref": "indicator--c64744f0-7cc8-4c95-ad50-2f9cca87027a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a1ab5f-92aa-48d5-8fef-10044df50b7e", "sighting_of_ref": "indicator--517abd19-317c-4ac5-9ba1-5b8bbe729681", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd50575-8cd0-44e0-acad-33bfa3933a30", "sighting_of_ref": "indicator--517abd19-317c-4ac5-9ba1-5b8bbe729681", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d863d4f2-8c00-4fc6-a018-68ab7bfb2a8a", "sighting_of_ref": "indicator--609b48b2-1967-4f42-b37d-2fa069b59ff5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d3a749-13c4-48ce-8bf7-af968c97cee1", "sighting_of_ref": "indicator--609b48b2-1967-4f42-b37d-2fa069b59ff5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73758b3c-ef16-4c2a-af3e-522ea47e80db", "sighting_of_ref": "indicator--deacc9d3-1895-481a-b8bb-635e5c81ae4d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f432183-cba4-4602-9ee3-be8be3a13f2a", "sighting_of_ref": "indicator--ae096483-679d-4f89-8ecd-11175312b1eb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd5a0c2-15ba-446f-b107-4d427ccb5a12", "sighting_of_ref": "indicator--889e3ebe-256d-4550-8a10-7bf0eedfb6ab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be29ac16-db72-4291-a51f-b5ce76bff6e2", "sighting_of_ref": "indicator--0e4b7ade-3326-441c-86bb-1d433e80b822", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51f6f27-9011-44fa-928e-cd9d13aa8529", "sighting_of_ref": "indicator--40e6c60c-5fe6-45dd-90c3-34c7d5ca84dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6f30ae-b760-4b59-b852-1e6eb9f6a172", "sighting_of_ref": "indicator--539a4de4-6aaa-45d6-9ebb-bff56e68c7df", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc29f068-b2ff-4418-b415-85f1ace30cc0", "sighting_of_ref": "indicator--539a4de4-6aaa-45d6-9ebb-bff56e68c7df", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d86816-f349-4d7f-8182-31eefb51dfec", "sighting_of_ref": "indicator--8cbb80f7-4853-4f9c-a371-2ba7569d4618", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08f817a-9a6b-4d52-ac91-57b20625a5cf", "sighting_of_ref": "indicator--bd84b3c9-19ac-44b7-b9e3-70495f7a8058", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c2cb49-d358-4d16-b739-56cb9bd172da", "sighting_of_ref": "indicator--4758fa18-51e2-494b-831a-8c7799d7852a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007d6dd9-370f-436c-8949-84a8001ea201", "sighting_of_ref": "indicator--289d2014-de21-4cff-8e64-c9247af4d370", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e549a7d1-0c92-468f-afab-a1da11ef572b", "sighting_of_ref": "indicator--797b8546-715c-491f-8cca-a41737be4de9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85898985-19a2-4889-9612-5a24c386bb9e", "sighting_of_ref": "indicator--2df5e268-0357-4298-aed0-9b7679be2656", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907dbd24-b874-41ab-a62d-424f9fbfdb8f", "sighting_of_ref": "indicator--69b1701f-06b0-4e4c-b2fc-af0d0d7ed7e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55af1b7c-1952-4482-b410-3e8ea3c890d5", "sighting_of_ref": "indicator--05ec60e8-af53-422c-9b24-06ecca68cfe8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb67e15a-419d-4ef3-b314-8eadb8441508", "sighting_of_ref": "indicator--8ce3963c-ff2c-45ec-a6d5-1aaf57f273e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072165f7-033d-45ca-92c7-32e5109fe00a", "sighting_of_ref": "indicator--d5283453-fa29-4b22-a39c-98dfdbbe7324", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb1f591-49ba-4236-ac24-aa26a330d7ae", "sighting_of_ref": "indicator--8872f015-aec3-4fe8-affe-7c2f9d898a75", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690821fb-bb38-4ed4-9165-47345979d351", "sighting_of_ref": "indicator--8872f015-aec3-4fe8-affe-7c2f9d898a75", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8746e469-0232-4203-be16-b4a95dca9369", "sighting_of_ref": "indicator--8939f714-6d33-4f11-a11a-2f3bd8f8854b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d499b5a-1230-4099-876b-3c8f25c52adf", "sighting_of_ref": "indicator--8939f714-6d33-4f11-a11a-2f3bd8f8854b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ca0f61-5729-4a5a-b545-5e1c6d0d0cde", "sighting_of_ref": "indicator--8939f714-6d33-4f11-a11a-2f3bd8f8854b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9684f8-d425-42f9-8bfe-b0be01f79357", "sighting_of_ref": "indicator--9f22e75e-6a1f-44e3-ad9e-b19c39ed2b50", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8100ad1b-10e4-461d-b5ea-61ffa19266aa", "sighting_of_ref": "indicator--cea3b8fe-1949-421f-8fcc-bd77dd9cc382", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab9de7e-5b0d-4461-aad0-f2b9579bbea8", "sighting_of_ref": "indicator--c2dafc55-78ec-4591-9593-4512208fe2e8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b128ab7-bd2e-410e-ae4e-95f47a6a10b4", "sighting_of_ref": "indicator--52ebb902-852d-4b67-aaf3-f2717205eb4d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecdf4f78-4757-4560-87d3-551fa1c8f3df", "sighting_of_ref": "indicator--646dbc4d-32c3-4b28-b5c2-96e737d115ea", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233ca578-f7d4-4118-b5a6-015017abb3d8", "sighting_of_ref": "indicator--da271b25-09d1-4141-a4e3-13817661aa14", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a2154f-ebbd-4f75-be03-146cc3761484", "sighting_of_ref": "indicator--8c93bed9-bda1-4247-9749-b674bf1be1fb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84fc6381-f7fe-4e30-b937-1d35693ed737", "sighting_of_ref": "indicator--59c8ceef-5c3c-4a4c-b8d6-1ba7d82cdc7e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf46d75-844b-4cbb-9af0-70db9001ee81", "sighting_of_ref": "indicator--f7b34596-2e92-49a0-97d8-c3698818a9f9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89db4b4-18ae-44f5-b743-8b2b0c23cd42", "sighting_of_ref": "indicator--7c738f76-aed0-4100-95ea-1e294f5ec051", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a4b7d6-995e-4cc0-af69-fc2713800b89", "sighting_of_ref": "indicator--aa890eea-7742-46b9-a5ec-1bd6311fc546", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce17381d-8bf6-4493-95d4-634c96b284c0", "sighting_of_ref": "indicator--aa890eea-7742-46b9-a5ec-1bd6311fc546", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05c98e3-0e9c-4d0f-9ed0-9a93d3d001a9", "sighting_of_ref": "indicator--d4aeab50-7e69-477a-bf0e-87b8bba4931f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0069e2eb-7621-4991-8886-01fda1efcc81", "sighting_of_ref": "indicator--75cc2dbf-b369-4a73-bc89-a0a3d63ab877", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93e0c89-0ea4-4076-b5e1-ffd029ae75a3", "sighting_of_ref": "indicator--9465fbc8-cd73-4f36-9190-3b4a50639065", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85784653-0eb2-4917-b1a1-9f4ab3f852e3", "sighting_of_ref": "indicator--6a40b002-d550-4996-9d2d-2bfefd0176cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7061173-47f9-4597-9e3f-2017cbd50344", "sighting_of_ref": "indicator--84e35c1f-6894-4d1a-b087-1dc5a0510aca", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24ad7a5-3f33-4365-86fd-c1a6fbeed2af", "sighting_of_ref": "indicator--071840d2-1914-4816-9437-810c2db8c09a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470dc837-954a-47ea-8cc3-6548f81e69cf", "sighting_of_ref": "indicator--21f68e0c-8ed7-4549-88da-ff5ea15e61c8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56004ba-1828-4af3-bded-8ed632f4520b", "sighting_of_ref": "indicator--39ec8ee6-b707-4bc2-ad86-8d6bd564340a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8834fcfa-88f9-45cf-86e3-7f80d0fc7548", "sighting_of_ref": "indicator--64bcdd5c-e34d-4802-9ec2-6d198a1df05c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7812d36c-bde0-4ea8-91dd-aa6c395ca848", "sighting_of_ref": "indicator--c1a3016d-0866-4221-acb6-cae629a5a2c4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6201c00-acd1-414c-983e-2445d1eb9da4", "sighting_of_ref": "indicator--b0654dd4-75ad-4cfd-a056-06cba1368330", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292b79d9-65c3-4e76-85be-0216e0a23ad4", "sighting_of_ref": "indicator--e316173b-f1cd-4c1d-bd80-24d06f40945d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6520c7ec-68ff-4d25-b83b-70e16b01dd9f", "sighting_of_ref": "indicator--98c81e2d-a4cb-42e9-abb9-e0e68c06adab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb96ac6-7c9c-43ab-946a-174f87a64a4e", "sighting_of_ref": "indicator--0fc89fb6-b5c4-4388-aeb2-795907e1dfaf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e937903-4e58-4048-95dc-47b907aee34a", "sighting_of_ref": "indicator--777441af-5eab-4d16-a6d6-9478c1b10f92", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4274e63c-4375-455f-8738-bd662c119a8b", "sighting_of_ref": "indicator--4bb0b66e-4e40-4b55-b78a-483bfaafa44a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54e12e7-e79d-4c19-a29e-8f7ab430c5f9", "sighting_of_ref": "indicator--36acbbb2-2f4e-427c-9aa5-7ac2761d59dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe92624-c155-4c60-841e-aa9b63351a59", "sighting_of_ref": "indicator--36acbbb2-2f4e-427c-9aa5-7ac2761d59dd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67799868-1b00-4ce2-8522-7a572f08945e", "sighting_of_ref": "indicator--36acbbb2-2f4e-427c-9aa5-7ac2761d59dd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ca00d6-a71b-41eb-af5f-67db3b6987f0", "sighting_of_ref": "indicator--af7b4d72-4b26-4432-8ef1-cdaf0cd48df8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1063910-d528-4916-b26e-6ea6b7d4530c", "sighting_of_ref": "indicator--af7b4d72-4b26-4432-8ef1-cdaf0cd48df8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d17553-83b6-4019-b2d0-ab949dda6ab6", "sighting_of_ref": "indicator--af7b4d72-4b26-4432-8ef1-cdaf0cd48df8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd31821-1341-471b-a1d4-9deb5cda85f1", "sighting_of_ref": "indicator--4448eff0-9f41-4b61-bdfc-ec00b1455c11", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381da037-ff06-4776-b8ea-77eb811324f0", "sighting_of_ref": "indicator--4448eff0-9f41-4b61-bdfc-ec00b1455c11", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367062ab-a3b2-42f1-b6be-bce6bd797107", "sighting_of_ref": "indicator--4448eff0-9f41-4b61-bdfc-ec00b1455c11", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182b1053-fde6-4b7d-9265-0560fe1c802e", "sighting_of_ref": "indicator--7d02adba-e5f9-459a-999f-15078a72e1ad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d849304-1f94-42e3-b1c2-9c76315c57db", "sighting_of_ref": "indicator--7d02adba-e5f9-459a-999f-15078a72e1ad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1ca88b-d228-4920-bab7-703facce14ae", "sighting_of_ref": "indicator--7d02adba-e5f9-459a-999f-15078a72e1ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a024c80-0fbe-48eb-b044-61e9c6c3838a", "sighting_of_ref": "indicator--ccf49a90-2e46-41de-8288-2ff2acbfb43f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5fec798-bb2c-44d2-863e-6abd90d90963", "sighting_of_ref": "indicator--555b9190-bf23-45e2-966f-5f9a9f476fdc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cb9159-44cd-4b3b-b0ed-84f931496edf", "sighting_of_ref": "indicator--0fadaac3-909f-475e-8cbb-870d72f3b95a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47dd984f-4056-4b75-9c33-87311a60ba1c", "sighting_of_ref": "indicator--e1e1a537-3350-4f99-a80e-316db97fe304", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16aca8ee-7343-42f7-a037-3d661ac422f7", "sighting_of_ref": "indicator--d6394332-e385-4915-9f80-d7716dac2d4e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc873cbd-1732-4c2d-b96f-601b2a97328b", "sighting_of_ref": "indicator--db7163c9-35e2-4c24-b8d1-15c656c60aa9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d7830b-8d48-4ac0-b28a-b049d17c33eb", "sighting_of_ref": "indicator--82484cd5-6db7-4772-85dd-f7b1fa5681c4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15126fc7-2684-4378-ad2e-17d0f39a9fdb", "sighting_of_ref": "indicator--62953e5f-56e1-4a17-9a8d-11df0d7ad3f3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a559e5-ada2-43b8-9afd-7539083a6179", "sighting_of_ref": "indicator--a02939cd-cfd2-47ae-8c10-888ab6fc21cd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5d369e-cf94-4da8-9252-44b378c1e194", "sighting_of_ref": "indicator--a02939cd-cfd2-47ae-8c10-888ab6fc21cd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c0e2da-d919-4b4a-9706-35adbd629694", "sighting_of_ref": "indicator--a02939cd-cfd2-47ae-8c10-888ab6fc21cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a9d608-9ed3-4e46-b826-f389d57fa165", "sighting_of_ref": "indicator--106d23bb-0a7a-4177-bf00-893ee7a00d97", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b127ed8-99a6-48af-97fa-68495834dd48", "sighting_of_ref": "indicator--2532fd96-445c-498d-ba85-58fcf0ede5d4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e7a4c0-161f-4629-818e-deb18e389fb2", "sighting_of_ref": "indicator--4fdbec8f-1a86-4448-8f42-81a0dea62d9a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97935b86-10a5-4cb5-8d06-996163009614", "sighting_of_ref": "indicator--b9c4e838-8e5b-4099-8a1e-02a89cf4d99e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd35fa1-64ad-4808-aba1-620ea981e4ee", "sighting_of_ref": "indicator--fbe45b6c-fd2b-4de2-ad2d-bdff2ce555cd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a055226f-cd99-4639-b6c5-b34be7275748", "sighting_of_ref": "indicator--fbe45b6c-fd2b-4de2-ad2d-bdff2ce555cd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f7d86b-5fb9-4e7c-86f9-593a2dbf51de", "sighting_of_ref": "indicator--fbe45b6c-fd2b-4de2-ad2d-bdff2ce555cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63e3526-2d98-4e0c-b370-f61ba6720444", "sighting_of_ref": "indicator--58acf598-a9e2-4559-bfc0-cdab96ad12f1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647d8831-749f-47c2-8473-6d5ed18018a5", "sighting_of_ref": "indicator--58acf598-a9e2-4559-bfc0-cdab96ad12f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74196c1-f70d-4d56-b1c6-ca142ea211a8", "sighting_of_ref": "indicator--58acf598-a9e2-4559-bfc0-cdab96ad12f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd1fa3b-c22a-4016-a2f7-b2249d9ed46a", "sighting_of_ref": "indicator--f9520b76-b8fa-4090-98f9-dbce6b9f7a97", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa648d0-218c-4319-ae6b-16d8d8f5b630", "sighting_of_ref": "indicator--f9520b76-b8fa-4090-98f9-dbce6b9f7a97", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c89135e-ad94-42bc-b24d-5b24537b2af7", "sighting_of_ref": "indicator--f9520b76-b8fa-4090-98f9-dbce6b9f7a97", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708b8b58-3e6b-466a-b997-556a9aca09a5", "sighting_of_ref": "indicator--6d637ef6-e9a0-4beb-ada6-1533e304bff3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a73779-a582-42f7-a9da-b3c7ed20484b", "sighting_of_ref": "indicator--e10ffbe8-2eb4-4e73-af30-745c10869d19", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06bae19-49a0-4a47-9cde-9e3c2228f03e", "sighting_of_ref": "indicator--2e491d88-19f9-4826-8885-7e4607e7a167", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86222485-8ddb-47a2-abdd-223674c826f8", "sighting_of_ref": "indicator--2e491d88-19f9-4826-8885-7e4607e7a167", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6add169c-7804-4769-bd22-46bbd8af96ae", "sighting_of_ref": "indicator--2e491d88-19f9-4826-8885-7e4607e7a167", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e71213a-ecaf-4388-8fcc-a75738298a04", "sighting_of_ref": "indicator--c9527878-86fa-4c6a-a21a-4de81b5c897f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc14e72-591d-48a5-9843-1e870f8ee227", "sighting_of_ref": "indicator--c9527878-86fa-4c6a-a21a-4de81b5c897f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef4cde9-591a-4e1c-b230-190c648ee8d6", "sighting_of_ref": "indicator--c9527878-86fa-4c6a-a21a-4de81b5c897f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad31dfb-ac64-491b-8ff8-e2f5e5e81cbe", "sighting_of_ref": "indicator--93af0b4a-e79e-4860-84f8-4277011935bd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ccec001-7ffa-47c7-a1a6-792a13ffab64", "sighting_of_ref": "indicator--96bed0d4-8d84-4c15-ac9b-292c5695b663", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a14116-91d5-4d22-b61e-e43c88f9146e", "sighting_of_ref": "indicator--96bed0d4-8d84-4c15-ac9b-292c5695b663", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95df3df7-0a69-48d1-8602-5cec965409ec", "sighting_of_ref": "indicator--96bed0d4-8d84-4c15-ac9b-292c5695b663", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4874b24c-4d2a-45e9-8116-6789925f76b0", "sighting_of_ref": "indicator--c3e9a795-5965-406e-8c70-f4ef278ed9f0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9a8445-89c7-469d-939f-f3aedb13dfdf", "sighting_of_ref": "indicator--85eb9892-88b1-4550-ab23-b4b6bf48f362", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a50223-8d39-404a-9c5a-a27b19caf9dc", "sighting_of_ref": "indicator--7ae52aa8-edc6-4007-ba71-ba30957085d2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e8bab4-1aac-44bf-b40d-1d9cd6fe8fff", "sighting_of_ref": "indicator--5620c8c8-ed9a-4c4f-9de1-ac22bb767bc2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c16104-1138-4933-b1f7-c75042722d47", "sighting_of_ref": "indicator--2da5eafb-df5b-4399-9a0c-8fc55f559156", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35e3bb0-54e9-449e-9369-ce588bc2e31f", "sighting_of_ref": "indicator--ca642fbb-dede-4d98-8f1b-aa6e8e5054e5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830d04a4-09e2-44c1-957a-234b9d594bdb", "sighting_of_ref": "indicator--ca642fbb-dede-4d98-8f1b-aa6e8e5054e5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf46a5c6-678f-4394-8b3c-01102ead3ccb", "sighting_of_ref": "indicator--a97d8288-84a1-4c66-9491-aab85c627ea6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ce4a48-03cf-46b0-a0f3-008cd0043f03", "sighting_of_ref": "indicator--56fff7dc-9750-428e-b8f2-0e07eb5c02a9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462da9a0-3983-4ce9-8a32-fb18c13abc16", "sighting_of_ref": "indicator--5195c16e-1432-4695-b771-5fc18007102f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbad9102-9535-4837-a1d8-0a35a944fc4a", "sighting_of_ref": "indicator--aebc3271-1eda-48ea-9169-6df4a6dc4d8c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b657d2b-2d13-4bb9-a5f1-ead3c1549698", "sighting_of_ref": "indicator--2152db63-692c-4ee8-99ac-9d936db56dcb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449b9fcc-3b46-429f-9f2f-4fccd9f8bb34", "sighting_of_ref": "indicator--7a38597b-59e8-4a97-b384-589e1b862ac1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9ded78-17ca-4a6f-bf68-d958833ed945", "sighting_of_ref": "indicator--87dbbcec-14df-4647-a12c-4af1cd37e4bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29eae53-9f3c-416d-8d64-b463d867550a", "sighting_of_ref": "indicator--169d101c-636a-48db-99cb-c572326c1d31", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f7ee71-f0f0-449d-9840-8b696423de0e", "sighting_of_ref": "indicator--7f877694-459e-44fc-b454-d2e8c77119ab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16803481-1c44-47ad-8a75-4e31e147f87c", "sighting_of_ref": "indicator--b6390dd6-2c4f-4a56-b275-76cbc8894e57", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8c11dc-6ba1-4070-8e8b-a8f225cbb82d", "sighting_of_ref": "indicator--72b15437-dd35-471b-9187-a1acdd52e35e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ba928e-6bf1-463d-a54d-e4bb025e1f5d", "sighting_of_ref": "indicator--72b15437-dd35-471b-9187-a1acdd52e35e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c13bf2c-ed33-47cd-8403-20c3ec275ac8", "sighting_of_ref": "indicator--b069f9cb-3d2b-41a4-b659-ab7d214cf857", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1224e407-a194-4ec7-828d-a97a17f48e1e", "sighting_of_ref": "indicator--9e56e464-1384-4d39-8039-33cb9fa9d5ea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a03806c-d5f0-4cb5-805c-bbb3c2e96a46", "sighting_of_ref": "indicator--9e56e464-1384-4d39-8039-33cb9fa9d5ea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd866f8-774c-41c2-9084-bddaa07d2cbe", "sighting_of_ref": "indicator--a9ace8ff-e600-4bdc-ac0a-83a029f4c8e3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c328df17-900f-4162-a043-fb79c2524816", "sighting_of_ref": "indicator--747bdf26-22ec-4e5d-924a-2760830a3b85", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01131da-a88b-4045-bb23-aaa1d26ef1cc", "sighting_of_ref": "indicator--747bdf26-22ec-4e5d-924a-2760830a3b85", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467a0b60-a085-4fc8-a6e9-d7cad0af55f7", "sighting_of_ref": "indicator--f92e756a-be13-4b29-b3df-983d14aa3850", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45d5c8f-a9ee-46ef-b3d0-dfe8b0d65cbf", "sighting_of_ref": "indicator--05924385-4168-4c16-8e52-20916bada32d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0408a9-5e49-4e00-a01c-6fa8b444340c", "sighting_of_ref": "indicator--cdef6094-afcd-452c-9c31-d382681cbdd3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958b47a7-bfe9-44c5-8f47-c37894817ff6", "sighting_of_ref": "indicator--6dcb3e63-cfaf-4d2f-b6cc-981615710315", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dac157f-c377-4264-ba8e-288fb2feebf7", "sighting_of_ref": "indicator--103c9e1d-ebcf-44d9-9b43-e5ccfd18b80a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c6a37f-c6fb-4c1d-8217-e4aa84ef6ff3", "sighting_of_ref": "indicator--df024336-7edb-4a93-a17a-0da2961f0c18", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d0edaf-8b18-4f30-9211-784cb0df54f0", "sighting_of_ref": "indicator--999e7b1f-a889-4292-b773-0e147f92c699", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4cc9073-97a9-4cc4-8592-ef881e99026a", "sighting_of_ref": "indicator--087bc119-ed49-4eb9-b902-cdb210723f17", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5064b87f-53be-41d9-af74-b53c40c00e24", "sighting_of_ref": "indicator--ea9b34f6-a973-4790-aa99-123092d3979e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c3d8e8-9a05-441b-907c-01546ddb8905", "sighting_of_ref": "indicator--1dca07b3-b0f5-41d4-b9b9-4e3d89822769", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d743f5-4d1f-45c8-8f22-f415c2043c07", "sighting_of_ref": "indicator--be90e88e-9cc9-460a-aefa-a120640e6c92", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f4b9fd-63e7-435a-a9ab-489a6646ce6a", "sighting_of_ref": "indicator--a14311db-042d-415b-8cd9-111358894c6d", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afca89a-560a-4ed6-b4c7-6bb0f17bb82d", "sighting_of_ref": "indicator--a2c08e06-1587-4eaa-a798-7c2a6392bc6f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634c35d7-fb46-4cb7-9ded-5de34953a459", "sighting_of_ref": "indicator--a64dc330-2f27-4964-bba0-60c928009294", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df89c87e-8167-4594-b97d-9e3fac11e81e", "sighting_of_ref": "indicator--6d85a656-c32d-4b07-909f-3980120cc6e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7139faba-bc33-43e8-86b6-2cabb53758a6", "sighting_of_ref": "indicator--c231fd32-cf2e-459d-ba64-f4c56f5afed0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bf977f-358e-4ef4-acec-fed7ec302a0d", "sighting_of_ref": "indicator--ad39d143-dd7a-4e09-9154-cd55d2e3980f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb908a3b-b6d1-481e-b469-253cd917843c", "sighting_of_ref": "indicator--ed22ac73-92a2-44a0-8afa-57e123f8a432", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4a9b4e-aa1c-4315-a72f-64e0f064e09c", "sighting_of_ref": "indicator--31dde4ef-4f7d-4781-aa33-b5347943dfea", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad44639c-74b5-4166-a888-cc9dbb88874d", "sighting_of_ref": "indicator--52222ee4-2918-4d7e-90a2-301f434a049d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df411b6b-ea06-43ea-859e-b74da9757b9e", "sighting_of_ref": "indicator--52222ee4-2918-4d7e-90a2-301f434a049d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f625ff30-16a6-4fc9-926d-b42860a1ed89", "sighting_of_ref": "indicator--52222ee4-2918-4d7e-90a2-301f434a049d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becfe927-6b96-4d06-a47f-dfd05d854ab4", "sighting_of_ref": "indicator--e212f520-5746-466f-93b8-75ff8e1a229b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62139b73-cb52-43ca-89a9-63c16fca4bdf", "sighting_of_ref": "indicator--e212f520-5746-466f-93b8-75ff8e1a229b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800580cc-5f89-4757-824e-572fa636a734", "sighting_of_ref": "indicator--e212f520-5746-466f-93b8-75ff8e1a229b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84a186b-fae6-48cf-80e9-06bb91d281aa", "sighting_of_ref": "indicator--be5fc6e3-66f9-4d12-b7a0-7dbef37adad7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d442e74e-5010-43c9-8ade-ec8e90b5af6f", "sighting_of_ref": "indicator--be5fc6e3-66f9-4d12-b7a0-7dbef37adad7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09e80bf-be62-4c2d-8454-1faeaf9cd9d5", "sighting_of_ref": "indicator--be5fc6e3-66f9-4d12-b7a0-7dbef37adad7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffb2ddf-56c0-407d-8741-5e2b2428dcbd", "sighting_of_ref": "indicator--00b7f301-f029-4804-a986-5882c70062c3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532aa406-0df3-450d-a352-231b85f23926", "sighting_of_ref": "indicator--429a0d94-65fe-438c-a6a8-f621abe4d9fb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc199156-4e55-46a5-be3c-a8db03b4a20c", "sighting_of_ref": "indicator--96dde6ad-f702-4fd0-9432-a5cbffebc130", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba511a5-d259-4ad1-95eb-8bf0ace2838b", "sighting_of_ref": "indicator--3295b6c4-2801-459a-9ab7-12efcf226494", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5b35af-7c4c-418a-8d02-23de6902e231", "sighting_of_ref": "indicator--d0ac1f8f-f9e5-46e7-85b5-bef4e00f4b99", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1554b2b-83b9-4b29-9b55-5fb16e2513fc", "sighting_of_ref": "indicator--4c07a09b-b25c-4459-b874-559270669af3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2209909-996a-422f-ac56-3ce2f5d612ac", "sighting_of_ref": "indicator--689ce541-999c-42e8-ad6d-753aa0edaa40", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddce995-475f-46c6-957c-b1eb15978428", "sighting_of_ref": "indicator--0bb895ce-c4fe-422d-80c1-132e1e54b286", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e4c3fe-bfa7-4c24-b23a-c4e3a0d12a3e", "sighting_of_ref": "indicator--cf4ac6ac-476d-4897-a037-37c2f93abfcf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd946784-9510-4e7a-98a5-9484edc3e6f1", "sighting_of_ref": "indicator--75ac1b45-72cf-4c8a-9245-4656b2d679ec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d8e376-72db-4cb4-b013-6f9d757dcac2", "sighting_of_ref": "indicator--4ca8f1e7-4c6b-4b77-a864-e7ec51c7e00d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08138da-81ef-4d0c-b1f0-8e2b42a0d764", "sighting_of_ref": "indicator--4ca8f1e7-4c6b-4b77-a864-e7ec51c7e00d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01634d7f-586c-47c4-8a15-c132bc3f99a4", "sighting_of_ref": "indicator--6743daa8-d8b3-48a4-b74c-fc31cbbc15fc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa605f3-8886-448c-b9b5-aa3eaa7853fe", "sighting_of_ref": "indicator--0699f462-0ffe-423d-89cc-56c4e4d56e23", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0754ceb-055c-4692-8a12-1d0074a595c1", "sighting_of_ref": "indicator--5a351221-c91b-4a30-aa9f-a67da04f4588", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c0a967-10de-4c25-85bd-c8da6824742b", "sighting_of_ref": "indicator--5a351221-c91b-4a30-aa9f-a67da04f4588", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e45341-88e1-4850-a7e2-c9f1a4869fed", "sighting_of_ref": "indicator--5a351221-c91b-4a30-aa9f-a67da04f4588", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04b8e32-1ac1-4707-8fe8-3f0f453ba1c4", "sighting_of_ref": "indicator--7c5258ea-49a0-48aa-a11e-ab7857fba734", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336470e2-7540-4f6f-9018-25f77a82b780", "sighting_of_ref": "indicator--8f181abd-8336-4927-a2f7-044e6d48c650", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8e67d7-7812-40cb-9ee0-95e7ece83173", "sighting_of_ref": "indicator--8f181abd-8336-4927-a2f7-044e6d48c650", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e4a190-4fd8-4fe1-a684-7a58fa9c3aef", "sighting_of_ref": "indicator--ab2e1aae-4a47-4231-be6e-e713924c35fd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc90e06-3171-4788-8a3c-13edf98d8c85", "sighting_of_ref": "indicator--ab2e1aae-4a47-4231-be6e-e713924c35fd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1756c36-2ef8-421e-931e-f946c6d4cfbc", "sighting_of_ref": "indicator--ab2e1aae-4a47-4231-be6e-e713924c35fd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9144dc1-d17a-400f-bcdf-1b53aee3424d", "sighting_of_ref": "indicator--eade3dae-4605-44e3-a7a7-5fd747edf486", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be48d004-56e9-4112-b6bc-aead78145890", "sighting_of_ref": "indicator--8d83870e-2087-46a5-a9c9-0755345c5538", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861bff64-d0d5-42f6-80a6-f5f5656ec4ae", "sighting_of_ref": "indicator--8d83870e-2087-46a5-a9c9-0755345c5538", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4c5d01-6c47-40d7-94a3-21da6ec966f4", "sighting_of_ref": "indicator--bb574704-e6cb-4828-937a-368074cf1601", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06aa1fb-68be-4b4e-8678-fd7b6f1cf5b4", "sighting_of_ref": "indicator--e9c4033c-cd39-4397-bcd9-3b71d6357304", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b986f1-b048-476f-9b56-5698e2170fa8", "sighting_of_ref": "indicator--e9c4033c-cd39-4397-bcd9-3b71d6357304", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c058dc-bf21-49f3-9519-e5ee4f6a445c", "sighting_of_ref": "indicator--e9c4033c-cd39-4397-bcd9-3b71d6357304", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61355a10-8c62-470b-a989-380d5f8ad67e", "sighting_of_ref": "indicator--c3163b87-5ae3-42f5-b7f6-6ed48df6cc77", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57485d6-7ea2-4807-a084-87b931a4cded", "sighting_of_ref": "indicator--87dca58e-fee8-4581-8485-df27e1e946ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87cbb1c-e9ab-46c2-8a79-a8ee52be1a3b", "sighting_of_ref": "indicator--2d856f45-00b5-48df-afda-fb60304e6865", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfeddd22-95aa-404d-ba24-bad399c015d5", "sighting_of_ref": "indicator--0483446d-049f-4588-9639-6131792f5a06", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a68779-059f-4a50-b0b2-7b2b03c1decd", "sighting_of_ref": "indicator--d1808d1b-26ce-4a84-8505-07712a08ef6f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c456118f-155a-4448-b7af-7cc0a01445be", "sighting_of_ref": "indicator--51cb6a9f-c1e1-4a89-8f29-676dc264789d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c7b4f4-32b9-471a-b1c2-0247f3b5d2a0", "sighting_of_ref": "indicator--3e5114a2-c83d-4131-bebd-e3b0a25aa54d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4752da7-2450-4d67-9279-47270b5b88d9", "sighting_of_ref": "indicator--57d54dab-4604-4333-9985-3495d77dbf08", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efba165-439e-4913-a3de-22a5244f5ed5", "sighting_of_ref": "indicator--e8a37ce8-3224-46f6-839b-ca61011b7fa9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b165492f-3600-4858-8794-4dec931c0b74", "sighting_of_ref": "indicator--f9a87e5a-3342-488d-90ee-f9e2c9daf8d7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5feab7-03dd-4e7b-913d-4be2dee6ecd7", "sighting_of_ref": "indicator--6154a919-2874-4258-aa2e-9145c76dc6ba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6625355-28f7-48aa-883f-65c0abd90bb7", "sighting_of_ref": "indicator--5d5076ff-19b1-45d0-b6c2-6d2d4402dad1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b72904b-1ace-4c19-a59f-1af929326dcb", "sighting_of_ref": "indicator--fe817c39-c962-49da-b5ed-e32e47280b10", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab9189e-0106-44dc-9d2f-883647a1bb43", "sighting_of_ref": "indicator--a8d0c6e9-8e1e-4926-87d7-8a4e45e861bc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f525e9cc-8952-4a33-89eb-d5df519e416c", "sighting_of_ref": "indicator--2386e8a3-e484-461f-a9ec-9e75b4c0c80f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d2f6fd-9a46-4299-b503-fddfc84c43d0", "sighting_of_ref": "indicator--2386e8a3-e484-461f-a9ec-9e75b4c0c80f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e014d514-7cb9-4bde-b35f-6f30f8833a14", "sighting_of_ref": "indicator--29e04675-9b26-4858-8d72-67ac64955e26", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633b381e-4312-4f5d-83a7-5b2014c33b7d", "sighting_of_ref": "indicator--28be1440-8148-44a2-acbe-28ca8e989e5f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10676ee-2f06-43f5-badb-f8a0cd014a8a", "sighting_of_ref": "indicator--75fc7d45-aaf0-42f7-a858-47ef30ff4502", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173b4dcc-c37a-4599-b356-99feca38156c", "sighting_of_ref": "indicator--2acc6978-0ef6-47bd-b1c9-c9c6fdd6f6d0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20038f1-d188-4e3a-aa71-a11c00dde5dd", "sighting_of_ref": "indicator--2acc6978-0ef6-47bd-b1c9-c9c6fdd6f6d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414e3f89-af74-47c1-8b6b-0ba079d93e6b", "sighting_of_ref": "indicator--dd256c26-d554-431e-8ea6-b6b045195d1e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08bd39d-3d59-44be-8a40-5bf33189e565", "sighting_of_ref": "indicator--28040799-062b-47f4-a5c7-397b83ae2ed7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06806fa-84b5-4842-b4a9-0dce230a33f0", "sighting_of_ref": "indicator--25c47ff4-6940-4305-bdd8-ca408652d32d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b290d765-9a21-4b2e-a13c-880626c25f48", "sighting_of_ref": "indicator--0301f961-a2d1-40a7-a302-ea962d1635e3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9a4e03-9c70-44f8-bc90-be2a6f11cc98", "sighting_of_ref": "indicator--dea862db-c05e-4e95-bf6d-3ec2df3f50dd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761f30b2-25dc-4018-92b1-a516369dbcc2", "sighting_of_ref": "indicator--f75f899d-a888-4db2-a8f5-560d88ab3f75", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b58029-7495-4529-b4ce-b70e29cc2858", "sighting_of_ref": "indicator--0ef7c31b-7ea8-48a9-a415-be2e69160731", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65a616b-4251-42d9-bb11-7dbb38471aa3", "sighting_of_ref": "indicator--84030b34-c47c-4238-9d94-fca9803575e4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5b5fae-3940-444f-8f0d-21e961522749", "sighting_of_ref": "indicator--66e75ef3-0a7b-426d-9e29-d15fa471f57a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4033746-59d7-4650-b23d-86139e4c9aa8", "sighting_of_ref": "indicator--23bed59a-d09e-4444-9845-67d893001e36", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c88870-4748-4e93-8b66-4bc1367d99dd", "sighting_of_ref": "indicator--23bed59a-d09e-4444-9845-67d893001e36", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8b85a2-00ae-45f3-93ce-9f2beff1334f", "sighting_of_ref": "indicator--23bed59a-d09e-4444-9845-67d893001e36", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c2999a-010f-4c3a-a874-37881d404257", "sighting_of_ref": "indicator--07eb0871-2663-4b11-8ab1-b4685d9617ca", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd6b4df-9cf8-4f6f-9d2f-0907bf11587c", "sighting_of_ref": "indicator--07eb0871-2663-4b11-8ab1-b4685d9617ca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ad140d-9707-44d7-a353-3e434c6458eb", "sighting_of_ref": "indicator--07eb0871-2663-4b11-8ab1-b4685d9617ca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a2baa3-f917-4400-882b-313087e18eba", "sighting_of_ref": "indicator--07eb0871-2663-4b11-8ab1-b4685d9617ca", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0ad019-ddf1-486e-b91a-e93e0bf8288f", "sighting_of_ref": "indicator--ca43ddcc-d81b-4e04-a6f1-cc345b6d9236", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e1f1c3-ff28-4d28-a05b-478a5d40b302", "sighting_of_ref": "indicator--a00ce239-786c-4f95-8f7d-39582a1103f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4607b03-8561-43c7-8523-0d2845303d5a", "sighting_of_ref": "indicator--9312d272-9e41-45f3-ac10-d57164834cd3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c08f02c-9dc4-43f0-8292-5ef8cd619b11", "sighting_of_ref": "indicator--9312d272-9e41-45f3-ac10-d57164834cd3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb9f0b6-9e6f-44e6-ab08-a5dc12e7ca01", "sighting_of_ref": "indicator--9312d272-9e41-45f3-ac10-d57164834cd3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d2cc95-69bc-45f9-88ba-a5ca7872f74e", "sighting_of_ref": "indicator--ee1f2965-d89a-4f81-bde3-172392a60c05", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f912aa-47dd-4dbd-b57c-fc84e5bed45c", "sighting_of_ref": "indicator--67f940ee-0ba5-42e7-8dd6-d5bb46fac73a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611a844f-f626-4528-88b5-bc1df5f7c18f", "sighting_of_ref": "indicator--42cb0641-29d8-499d-a429-270f81eae9d9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb92a89-f508-4a11-92e2-41637539b0b5", "sighting_of_ref": "indicator--f1ca95ea-5456-4fbd-b0bc-2db8fdfe9a8e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dca061b-8728-40c7-a226-3b99e61c1520", "sighting_of_ref": "indicator--f1ca95ea-5456-4fbd-b0bc-2db8fdfe9a8e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad80f2b-07ba-450a-a89d-a925836ede7e", "sighting_of_ref": "indicator--f1ca95ea-5456-4fbd-b0bc-2db8fdfe9a8e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396123ca-ed7e-41fe-aedc-565130c2130b", "sighting_of_ref": "indicator--70460eb0-1651-41fe-ab9e-62e84e6ae162", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d202056c-8da0-4ea0-9884-b2026872d5a8", "sighting_of_ref": "indicator--8b16fcc1-9067-411f-ac51-62da0e5a201a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab713e69-813b-49d2-969c-96262347dd08", "sighting_of_ref": "indicator--7e354c1c-979c-4bd9-9313-6a7032a74f55", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e930a9f-a8e4-4fe1-a1f1-8547ecae1f1c", "sighting_of_ref": "indicator--93efecd1-2e9e-4157-9672-798b37282e31", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcc8e5f-6544-4ea2-a329-d07df40e2f9b", "sighting_of_ref": "indicator--94d4e25a-d811-4c22-8d76-a53b43b1be11", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d085067e-30c4-4827-86d1-83a350b7c47f", "sighting_of_ref": "indicator--d2c530ba-9ded-40a0-a085-54a817d834f5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c40140-680f-4c3d-8ada-5ee2b41ef493", "sighting_of_ref": "indicator--65ba1800-c773-4db7-9e05-ed611510c53f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5a7564-853e-4c8f-ad65-0560543d45a0", "sighting_of_ref": "indicator--ec5b0bc9-dd76-4b19-a89c-713b5b193532", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50216bd2-3204-424b-9271-c3e3af57cec5", "sighting_of_ref": "indicator--ec5b0bc9-dd76-4b19-a89c-713b5b193532", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801c8a00-b685-45e0-9d6a-d245332982ae", "sighting_of_ref": "indicator--ec5b0bc9-dd76-4b19-a89c-713b5b193532", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620f4695-37d7-4114-9b75-a0bd7fc6d317", "sighting_of_ref": "indicator--6b82d20c-39c5-4ac4-817d-12aaa123298a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146bf689-413a-4fa7-881a-1ff4135e9a1a", "sighting_of_ref": "indicator--7462043b-7562-4fd5-8f46-bec33b76b4f9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b860aca-8544-4b96-93b7-2d77e5329e51", "sighting_of_ref": "indicator--3fd887c3-5d56-466c-a890-9801c962d568", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b056d22b-5fbe-4a5e-acd2-c85f6e8b877a", "sighting_of_ref": "indicator--3fd887c3-5d56-466c-a890-9801c962d568", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e41252-5f12-4bbb-81e6-ec54d11fe3cd", "sighting_of_ref": "indicator--3fd887c3-5d56-466c-a890-9801c962d568", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57f3de2-cbe7-4b41-a7f1-964bd842e716", "sighting_of_ref": "indicator--9f7b7982-74c1-4e26-abe6-b57aa70905d0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43413e26-554f-49eb-a484-2757812f0f33", "sighting_of_ref": "indicator--939b7c8f-d555-4b08-a392-30a281c546a1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee8fb3a-f338-4172-94c1-4e92e5d3caf9", "sighting_of_ref": "indicator--d6ed404c-3039-4904-a930-e4d61f23070d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2832072f-18e5-4b77-8f04-4d7c6595cbd5", "sighting_of_ref": "indicator--648c6a52-b8b0-4e33-b93e-09e8c9057246", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e51a79-6507-428f-85a8-8339768b5c8d", "sighting_of_ref": "indicator--df7e5f41-45b2-4165-be20-a725dc04abf6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007c48e5-eea0-4ef1-9135-12dfca4241b5", "sighting_of_ref": "indicator--aef88da4-4548-4ef8-92c7-1f910bafe830", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387584df-9163-4b21-99f0-ea7949feabd0", "sighting_of_ref": "indicator--db0697cd-9c05-4e99-acd5-26d0dd94293b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8841912-6380-43b4-a830-59a8b2ea3640", "sighting_of_ref": "indicator--e99b347f-9905-4848-8ac7-7e1abbcb542b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0481d9-83d2-41dc-a9cc-5e9fb31f82b3", "sighting_of_ref": "indicator--ccddcb19-f72c-4f59-ade8-fde6ac0460e5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3279d9e-dd3e-41cd-8cba-2df28a14f368", "sighting_of_ref": "indicator--d45e3dea-e20c-445f-b1f7-0665410760ab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabc19a9-c37a-479e-8fa7-68711645750f", "sighting_of_ref": "indicator--b1eb63a0-31c6-4800-a76f-2e2db23f69eb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875513db-9741-44dc-be38-5ae1fae3c1fe", "sighting_of_ref": "indicator--b1eb63a0-31c6-4800-a76f-2e2db23f69eb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd2902d-d611-4399-86f3-ba20eccc934b", "sighting_of_ref": "indicator--b1eb63a0-31c6-4800-a76f-2e2db23f69eb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7811f95-5bb8-4e4a-bbd0-5796c00e3ad8", "sighting_of_ref": "indicator--5ca72f30-1afd-4677-8354-be06f06ad612", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08991113-7ce1-473c-af7f-b0f03ac50516", "sighting_of_ref": "indicator--4646ff27-745a-4fe0-a4ae-57d2203a24b8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5535f127-4669-4b45-ba32-f618d8c3f89f", "sighting_of_ref": "indicator--63951d8b-f395-4c8d-8127-754eaaa96ac2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4efeda-6ea5-49e0-8a3c-932a42888f19", "sighting_of_ref": "indicator--61e714d8-89fe-45ee-8f36-5ce6fe57b70f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7d26b8-7856-43e2-891f-c0bf06a29f2e", "sighting_of_ref": "indicator--61e714d8-89fe-45ee-8f36-5ce6fe57b70f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8f75c4-e55a-4120-a67c-02cfb6b90689", "sighting_of_ref": "indicator--61e714d8-89fe-45ee-8f36-5ce6fe57b70f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d3d464-b25e-40e9-9d7e-9521eded677e", "sighting_of_ref": "indicator--413dec4e-4ffd-4ddc-9faf-f52d076d1bcc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc7d79b-a708-4553-b903-87bdcb0990f0", "sighting_of_ref": "indicator--a6649cf0-b3f4-4b2e-94a4-632dd944997e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a16fd3-b5ea-4866-b617-dd046b21baff", "sighting_of_ref": "indicator--d0e64988-42b2-402c-8ff7-5a4c3b65087b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2cc3db-6b06-4b33-8327-68ef4c940a5d", "sighting_of_ref": "indicator--078d37e9-e70f-4566-b00e-84053ee8a379", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdb2c8b-5d5e-4d8f-a59b-ba958f7d4c3b", "sighting_of_ref": "indicator--e87de29d-f5b5-439c-bbc0-42ef284a2a0f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430eae8c-2f3c-4cad-870e-9089cc0dc8e1", "sighting_of_ref": "indicator--904d6aaa-881e-4de5-86eb-1e36ac659cac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23ae4e5-e83a-46b5-99a4-8abf9ff3aa0f", "sighting_of_ref": "indicator--b5e6470a-2ec9-416e-80a7-1249162b1940", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bdbcb99-7adb-4ab8-8823-e845bf7e6151", "sighting_of_ref": "indicator--08bec26c-d801-45e9-8fbe-70ed6244f3e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3424deb2-f251-40cc-9a66-ddd75aa7ac2d", "sighting_of_ref": "indicator--0a5d366c-6043-4c88-b4ab-e0f8566b708e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23c40f0-ee45-4f4e-8695-8e2fdbd62891", "sighting_of_ref": "indicator--0a5d366c-6043-4c88-b4ab-e0f8566b708e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4718069f-fc93-49d5-9ad7-2c6ba58094fb", "sighting_of_ref": "indicator--0a5d366c-6043-4c88-b4ab-e0f8566b708e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7366abff-68af-4e45-a273-79fe31e21cee", "sighting_of_ref": "indicator--7ce9a618-50f7-44e1-b8c6-7f3e9baaf99c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22aeb02-14dd-4e2e-af0f-7232ff683c9c", "sighting_of_ref": "indicator--7ce9a618-50f7-44e1-b8c6-7f3e9baaf99c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b7f59e-9411-4d55-84aa-172c6db6e9d6", "sighting_of_ref": "indicator--7ce9a618-50f7-44e1-b8c6-7f3e9baaf99c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60900f7-c712-43f5-a09c-0dc55e692868", "sighting_of_ref": "indicator--1771e1c7-5ace-499d-b79c-07a4a908597c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658ddb3b-220f-45d9-8430-bfa7a9aa0000", "sighting_of_ref": "indicator--1771e1c7-5ace-499d-b79c-07a4a908597c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b42166-6368-4925-ab1f-1c3ecd2f73a0", "sighting_of_ref": "indicator--1771e1c7-5ace-499d-b79c-07a4a908597c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de7c71b-a954-4f5c-bbdf-58afe7ede65b", "sighting_of_ref": "indicator--30575b1a-3499-462a-b561-7904d8555ce8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e02abf6-59a2-4dbb-a2df-8f00005dd9b7", "sighting_of_ref": "indicator--30575b1a-3499-462a-b561-7904d8555ce8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30fcee7-b7f9-474c-987e-3c4382003a56", "sighting_of_ref": "indicator--30575b1a-3499-462a-b561-7904d8555ce8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e201a3-96a2-4ee7-8395-c7ec021e546c", "sighting_of_ref": "indicator--abb9d8b0-b0c3-4e14-89b6-aaa56e8fccfd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9eac86-871b-42de-bf7a-ef7f0aee9b9f", "sighting_of_ref": "indicator--abb9d8b0-b0c3-4e14-89b6-aaa56e8fccfd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba3e793-3081-4930-87b7-93af20265c9e", "sighting_of_ref": "indicator--abb9d8b0-b0c3-4e14-89b6-aaa56e8fccfd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2777650d-4e8e-436e-89d0-f42b812bb645", "sighting_of_ref": "indicator--5442914c-c4cc-48de-98e8-07fa6e32e0a4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b911c7b-189f-4844-9e08-e1a47826d115", "sighting_of_ref": "indicator--5442914c-c4cc-48de-98e8-07fa6e32e0a4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e06a972-85b6-40d7-8a52-5c28948df933", "sighting_of_ref": "indicator--5442914c-c4cc-48de-98e8-07fa6e32e0a4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf133ee-bd21-420d-b8ae-23405de93711", "sighting_of_ref": "indicator--c3d21d50-fa9d-4084-ac2e-e9cd3991637c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ac5d0d-f51c-4f57-a76b-ef91621e164b", "sighting_of_ref": "indicator--c3d21d50-fa9d-4084-ac2e-e9cd3991637c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1896355d-40be-4e6c-bdb4-0805e230e52b", "sighting_of_ref": "indicator--c3d21d50-fa9d-4084-ac2e-e9cd3991637c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11f097e-a13f-40ce-997e-4ef573cc8ecc", "sighting_of_ref": "indicator--c2f29977-3ffe-4b51-bfc1-d42c14597eb2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76713b75-cc91-46c6-893c-ad6b495a388a", "sighting_of_ref": "indicator--c2f29977-3ffe-4b51-bfc1-d42c14597eb2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad57939a-8ce0-4347-a896-51da76dd128e", "sighting_of_ref": "indicator--c2f29977-3ffe-4b51-bfc1-d42c14597eb2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae0455c-27ba-4338-88e8-d7f574936296", "sighting_of_ref": "indicator--0ea9406a-7b92-4000-994f-39a35f54be98", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21dff170-d5b2-47ea-a273-7af88f2e9b42", "sighting_of_ref": "indicator--0ea9406a-7b92-4000-994f-39a35f54be98", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9339b9-cca5-4609-964f-a490ae6d7c1d", "sighting_of_ref": "indicator--0ea9406a-7b92-4000-994f-39a35f54be98", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623152e6-0e85-4b20-9d9e-f2e7592f30a5", "sighting_of_ref": "indicator--33c18532-0a0d-4d11-8ccc-7294a43f938c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41b1520-f2ad-48e1-bb6d-9b9f514a21c1", "sighting_of_ref": "indicator--33c18532-0a0d-4d11-8ccc-7294a43f938c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de209a4-f9bb-4ce5-ae11-bdeafd0a26a0", "sighting_of_ref": "indicator--33c18532-0a0d-4d11-8ccc-7294a43f938c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16aa2482-60cd-4ce2-9a67-ae93d96e4b20", "sighting_of_ref": "indicator--74da9e8b-a0dc-4f5d-8551-5160bdbeabbe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89add914-282d-433d-9401-3de773fef315", "sighting_of_ref": "indicator--74da9e8b-a0dc-4f5d-8551-5160bdbeabbe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc1b282-1f1c-4809-8ed4-4da4163a6134", "sighting_of_ref": "indicator--74da9e8b-a0dc-4f5d-8551-5160bdbeabbe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7570c50d-e039-4154-9d52-d924a7ee728a", "sighting_of_ref": "indicator--3ad71ef3-efb4-4ed6-bb95-8a59ed55390f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c9fc6f-3385-464d-92c1-3fe09b463483", "sighting_of_ref": "indicator--3ad71ef3-efb4-4ed6-bb95-8a59ed55390f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cf728a-0614-4068-9765-9ad65ae4750c", "sighting_of_ref": "indicator--3ad71ef3-efb4-4ed6-bb95-8a59ed55390f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e0c143-4354-450e-99ca-fe4e4c1b0005", "sighting_of_ref": "indicator--86bf1acc-83cb-492d-a69a-f55fd5ed64ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7ab9fb-97d0-46b9-83df-bc715ed72278", "sighting_of_ref": "indicator--86bf1acc-83cb-492d-a69a-f55fd5ed64ce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b5280c-badc-4fc8-a197-15cbdfa4bf14", "sighting_of_ref": "indicator--86bf1acc-83cb-492d-a69a-f55fd5ed64ce", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9e0945-9f3b-4c60-ab0f-d7e1c07bab2c", "sighting_of_ref": "indicator--bf760244-fdec-449f-ac9f-8d271e6e0f28", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4991a1f5-a722-49f7-b223-c404484ec255", "sighting_of_ref": "indicator--bf760244-fdec-449f-ac9f-8d271e6e0f28", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb49ba9-e23b-43dd-8fbe-5c0c94f453eb", "sighting_of_ref": "indicator--bf760244-fdec-449f-ac9f-8d271e6e0f28", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e532b20-f95e-4e34-9e1b-9e84de475c7d", "sighting_of_ref": "indicator--98d22d63-1b01-4c35-ac22-151d93acc00c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14bbfc5-8aff-45e2-a9d2-a16e39224c0d", "sighting_of_ref": "indicator--98d22d63-1b01-4c35-ac22-151d93acc00c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f2d902-0db5-418d-a5b6-8ae7efdfd31c", "sighting_of_ref": "indicator--98d22d63-1b01-4c35-ac22-151d93acc00c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfda945f-b209-41a1-880b-440b7e353245", "sighting_of_ref": "indicator--3a9956f5-92c9-47e9-9cdc-1bc4b2986d1e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc65fef-56fa-4b0e-91d5-5206798f7101", "sighting_of_ref": "indicator--3a9956f5-92c9-47e9-9cdc-1bc4b2986d1e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b160da-9fe2-4617-a9a6-83a1f3ae9023", "sighting_of_ref": "indicator--3a9956f5-92c9-47e9-9cdc-1bc4b2986d1e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade5dc1f-aefb-40b5-a642-cd868a5fa92b", "sighting_of_ref": "indicator--3d06ed73-56c6-4ebd-89ba-53c5f69ab374", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbdc9ee-60e9-4d2b-ba29-9a6b0b64d00d", "sighting_of_ref": "indicator--3d06ed73-56c6-4ebd-89ba-53c5f69ab374", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692f6227-6657-49a3-ba0e-c41e63cb6061", "sighting_of_ref": "indicator--3d06ed73-56c6-4ebd-89ba-53c5f69ab374", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85556277-99bf-447a-89c7-d3a2ab826279", "sighting_of_ref": "indicator--a652773d-e862-43fa-8cee-ae09002b2a30", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63c831b-f59c-478c-82f3-bdda0b6af694", "sighting_of_ref": "indicator--a652773d-e862-43fa-8cee-ae09002b2a30", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14aadeb8-c850-47ce-b256-85d8ba9a3496", "sighting_of_ref": "indicator--df86c195-e73b-465a-80fc-a1ec1f14d1f7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46436948-6af7-4ac1-a3b5-ff4e5ced21d5", "sighting_of_ref": "indicator--df86c195-e73b-465a-80fc-a1ec1f14d1f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bc617c-2cf0-41b2-af60-e50f947b9851", "sighting_of_ref": "indicator--df86c195-e73b-465a-80fc-a1ec1f14d1f7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c952465f-4b29-4a39-9929-d94539ac35d5", "sighting_of_ref": "indicator--0f34c249-7f88-433a-b438-63a349b9647e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8996cb-e6a3-4b05-8743-2017744f92ab", "sighting_of_ref": "indicator--0f34c249-7f88-433a-b438-63a349b9647e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea2e609-59f6-43bb-a66f-59285febf4ef", "sighting_of_ref": "indicator--0f34c249-7f88-433a-b438-63a349b9647e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ca6a73-6a90-4c86-9e79-0b74f4dca279", "sighting_of_ref": "indicator--dfa3e3ce-f696-4f29-9b4b-65a16f139ea9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef8d6d7-a484-4a78-b233-18cc2c1621bb", "sighting_of_ref": "indicator--dfa3e3ce-f696-4f29-9b4b-65a16f139ea9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31806d57-9a47-48e1-bf22-02d775d79c06", "sighting_of_ref": "indicator--dfa3e3ce-f696-4f29-9b4b-65a16f139ea9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ddeee7-0566-43cb-a53a-6f771972635b", "sighting_of_ref": "indicator--fef11e70-fce9-4799-a2dc-4b45390f4e21", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edca91d9-1276-46ad-a2e1-c20e327dfb99", "sighting_of_ref": "indicator--1f9923a3-e2a0-4c7e-905b-796f70c57e6f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e40d05-4de8-4348-acc1-5d9e38759eaf", "sighting_of_ref": "indicator--6daef584-229b-4964-bbab-63771c25848d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9453cb39-b4d9-42b1-b797-34d3fffc311f", "sighting_of_ref": "indicator--e2991077-2e81-4a2f-b18b-37548372781a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297fce85-c3ab-4cab-a57b-8646a8fb867b", "sighting_of_ref": "indicator--583c1761-ec0c-42ba-96fa-ca938f908905", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0b76e4-adbf-4fe8-9e85-10cf661552d1", "sighting_of_ref": "indicator--dd4d71eb-ff06-4b24-ad99-4a4de839de1a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a89786-6483-43d3-9e7c-5cdcc3d52008", "sighting_of_ref": "indicator--2eb93217-2adc-4db9-a24a-3d3f2cab4c92", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f79ebc6-e8fa-4a22-87b8-bbf5010c8791", "sighting_of_ref": "indicator--702d54c1-3602-40c4-ab60-22f0935c9694", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf47c8f-9e16-4478-afb8-33acc0230309", "sighting_of_ref": "indicator--46b9ce66-d3bb-4bfa-aebc-c5bf527db359", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d85d87-6105-4df4-a05a-cf0c972d0b37", "sighting_of_ref": "indicator--04af5ea6-479c-4ca7-99d3-f0bab624ffbd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96b46c0-9499-4744-b458-5b7656e85936", "sighting_of_ref": "indicator--67816ddf-9bd4-4566-841b-cd52a7c9bcb0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2754448b-0445-460a-b5a6-32c757f068d6", "sighting_of_ref": "indicator--67816ddf-9bd4-4566-841b-cd52a7c9bcb0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fb7610-5010-4025-8668-b56d57db5112", "sighting_of_ref": "indicator--67816ddf-9bd4-4566-841b-cd52a7c9bcb0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b239d9-11e8-48d0-8801-652743efa2f7", "sighting_of_ref": "indicator--ff44498f-a9b1-4a0f-91bd-85e1fcf3eda1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f9e2f8-83d7-4938-8cc5-5cdcccd3236a", "sighting_of_ref": "indicator--572f7749-b13a-40cf-9d06-560f2162669e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2817fb-6bd8-4edc-b430-6457a4e13b75", "sighting_of_ref": "indicator--ee7dec67-ea86-458c-8169-b2519294e7a8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b265918-65d1-45e4-ad8f-8b868c43fb75", "sighting_of_ref": "indicator--726ed5ca-ead0-419c-8995-ba98c08578ea", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9991df81-55e2-4478-afe5-c99d95da1752", "sighting_of_ref": "indicator--726ed5ca-ead0-419c-8995-ba98c08578ea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0663daba-c638-4634-a839-79bd62e6ab5c", "sighting_of_ref": "indicator--d57b343f-7467-483c-b415-f9e84715235e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdbe1d1-1c3f-4d9f-94d5-fb59c3fd104f", "sighting_of_ref": "indicator--cd3f473b-08c4-468a-b4a7-d31725a23d99", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c61a468-d8c7-4ccb-8192-80bce45b9eae", "sighting_of_ref": "indicator--8064df03-a011-4688-8f81-51bd86ece729", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ffd2c4-ffd7-4e52-89b6-8c1b400489d2", "sighting_of_ref": "indicator--8064df03-a011-4688-8f81-51bd86ece729", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a982882c-05eb-42e6-98b8-bd17e24f126e", "sighting_of_ref": "indicator--7e48e827-21ff-4f55-b1bd-56f573d77015", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e33d2e5-f9b8-4235-b59e-4ae3cc2d90c3", "sighting_of_ref": "indicator--42937583-5713-4b8f-a92f-6302351474de", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec76d34-3c91-4d10-9b5a-850fab8ce65d", "sighting_of_ref": "indicator--2aa387df-0f90-4f0d-bb04-71e0732f9f21", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3961def-ca32-4270-95d6-92cc56f88326", "sighting_of_ref": "indicator--6bee9246-d6d0-4ef5-a874-fdf55fcdbcc5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e845213-962f-428b-8711-818601733ea4", "sighting_of_ref": "indicator--62045c07-6bcf-42c4-9e82-4fef9997aad1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07051498-1107-4f9e-aad5-00301abee7ea", "sighting_of_ref": "indicator--a90565f4-f8e7-4da3-9cf4-7f5350cc03ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08abb6b0-aca1-487c-8785-9a91c37369f5", "sighting_of_ref": "indicator--d418c00c-0ccd-4fe8-b828-736b129c5514", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab00dc7-216a-4543-94d0-539321dc07e0", "sighting_of_ref": "indicator--c82ed9c0-aed9-4f3c-8ad0-76a91a507fa5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7354f7c0-e1a8-4edf-b7d5-b6c3e921098f", "sighting_of_ref": "indicator--688e4ecb-479a-413c-a104-01003469f6d5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e17bc8c-b847-48c9-beed-6e9970cb2419", "sighting_of_ref": "indicator--688e4ecb-479a-413c-a104-01003469f6d5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8814b353-e381-45b5-95e8-3dd437c64978", "sighting_of_ref": "indicator--688e4ecb-479a-413c-a104-01003469f6d5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17b53f3-3aad-4915-801f-9b7bf20a1af7", "sighting_of_ref": "indicator--c4a01749-8775-4d4f-ae5b-523fa2dc0ef4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9bddaa-b403-44e1-9aae-1c9e8fc643a5", "sighting_of_ref": "indicator--711351b6-4463-47e8-a696-18d7e98ca325", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0736cb-970f-4f72-a83e-d8076bb58d43", "sighting_of_ref": "indicator--cdc0c762-222f-455b-99af-ee8e869284f5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a7826c-efee-4f26-911e-1f9520e6c052", "sighting_of_ref": "indicator--f59e4a34-3408-4172-bb39-891017dc6501", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db889168-e877-4cd9-9a79-3b518d4a8db5", "sighting_of_ref": "indicator--f59e4a34-3408-4172-bb39-891017dc6501", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e56bca8-f774-400f-934a-c06237376944", "sighting_of_ref": "indicator--f59e4a34-3408-4172-bb39-891017dc6501", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6086aa13-bdfd-40d8-9db0-04311ca6b023", "sighting_of_ref": "indicator--e1255220-e635-4b80-b506-e7bf00599871", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b866e283-e5d3-4a83-9140-7edede061b53", "sighting_of_ref": "indicator--e1255220-e635-4b80-b506-e7bf00599871", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726842ab-631e-486c-8a09-88fe858a4e91", "sighting_of_ref": "indicator--e1255220-e635-4b80-b506-e7bf00599871", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c80d17f-3db5-498a-b893-8d67021bc289", "sighting_of_ref": "indicator--4f4970c0-7009-415c-af5c-a07504b5a905", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04602d0c-36a3-4e18-88da-4f1ad3bf14a3", "sighting_of_ref": "indicator--8b69e3b3-419e-4f2a-8a90-77eed81ed6c9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cea65fc-bd80-4e69-b320-15a77bb32c2c", "sighting_of_ref": "indicator--279c4e57-be5a-4c73-8a5c-63964a28b71d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6910645b-fdd9-4724-ae12-730c6b1d0400", "sighting_of_ref": "indicator--3c6b86f5-1b38-4b0e-a953-63e1306b1fb9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88a8ea7-3b02-41ff-a83f-816d858da67b", "sighting_of_ref": "indicator--3c6b86f5-1b38-4b0e-a953-63e1306b1fb9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aba2659-0372-48e0-b507-33d2760de7c9", "sighting_of_ref": "indicator--54e0952d-20dc-46ca-93b6-e424b4ea6e85", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199a1987-b70b-4e83-bb82-72b988d60e0f", "sighting_of_ref": "indicator--874f2f7f-60cf-439f-9f15-1a77c483440e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d61350-e39a-47ab-95d4-2cfc5375d6ec", "sighting_of_ref": "indicator--6b70a828-15e6-4897-a2f0-421bb6d490d5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347d8735-2802-4718-9c86-e07735bff7fe", "sighting_of_ref": "indicator--56d974b7-4727-4d51-a9b2-dbebe86ec71d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41e57e7-8b92-4067-9343-d6beb1474b25", "sighting_of_ref": "indicator--cffa1eb4-7249-45b6-854f-fb1398824458", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e455ab2c-74ea-4c0f-aa92-a2440d8ee56e", "sighting_of_ref": "indicator--0826a287-ea60-4fe2-b862-bf3560432bd5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8230ed58-3c14-4d90-8648-5c68b50db524", "sighting_of_ref": "indicator--6fa3cbed-70e0-4fd0-a289-71a2cb05ce55", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1849175-f829-4d58-a240-d4f0d9e0259d", "sighting_of_ref": "indicator--78329191-3470-40c9-a569-86170aec3d0a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880ff78c-d0b7-4ded-9b13-fee6044a22ce", "sighting_of_ref": "indicator--5acaa944-0873-4c14-8627-7ee8254c9953", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbff7797-6988-44f3-bd57-efd8d5a01bb5", "sighting_of_ref": "indicator--56657793-2223-401e-9cb0-3b9ea3cb6118", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0f4353-f673-4d6d-ab7a-8cc6e1d37a19", "sighting_of_ref": "indicator--e8c52a7f-9fa5-4a4d-b9e6-836f5fc32cbc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68570250-6c12-45f8-8d11-21656eea61a7", "sighting_of_ref": "indicator--0bef4980-a98d-46e6-8473-7685ac68d34f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf31c940-01a3-443d-9903-988d4924344d", "sighting_of_ref": "indicator--0d8dcb7c-1a77-47eb-ac91-644c8248a561", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c675610-ec92-4f70-a191-cfd4ec00f2c6", "sighting_of_ref": "indicator--caaad08e-5f0e-48bf-aec2-80f6c1386641", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ec2932-335c-487e-b57f-10d6f7523d2e", "sighting_of_ref": "indicator--dd165074-b1e1-4eb2-ab5f-0fb039d85dcc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be8c3a1-452b-4361-ad7f-2de925014a11", "sighting_of_ref": "indicator--352c6efa-3917-4c39-9ef1-8c462bba7f6c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff2fcc3-c048-46e6-9bde-4944d34c8a57", "sighting_of_ref": "indicator--c371c2a0-97b8-4c3f-b54c-122121d4e788", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b4dc34-a23c-43d2-a806-e244f3830f5f", "sighting_of_ref": "indicator--8c18fe29-8240-406f-8823-98a48e912d4d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88d1827-5913-4b50-9279-3bb9551e9353", "sighting_of_ref": "indicator--0cc73745-89aa-4d5b-953b-f0fa99b0d676", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb34c19-7572-4c7b-80c4-b54ac5ec5a59", "sighting_of_ref": "indicator--0cc73745-89aa-4d5b-953b-f0fa99b0d676", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9225c72-39f0-463d-91e4-8c0579796488", "sighting_of_ref": "indicator--0cc73745-89aa-4d5b-953b-f0fa99b0d676", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9e2f83-42d1-4711-8787-e35f2a8b529b", "sighting_of_ref": "indicator--d7df8c94-4822-4c18-96cb-9d8f4fb7605e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf14dff9-f76e-45aa-a672-69a48e34fbae", "sighting_of_ref": "indicator--d7df8c94-4822-4c18-96cb-9d8f4fb7605e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef66e19-a7ab-40b3-944c-400a20aa82b0", "sighting_of_ref": "indicator--d7df8c94-4822-4c18-96cb-9d8f4fb7605e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629348cd-2aae-48e3-8fbf-23ca1bdd0601", "sighting_of_ref": "indicator--722098dd-2764-4e0d-b0b4-480dd6dfb275", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b622dd4-733c-4c2f-b556-9247b6cfe277", "sighting_of_ref": "indicator--722098dd-2764-4e0d-b0b4-480dd6dfb275", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649a5795-3e0e-4c01-9dd2-59ecf8e9271b", "sighting_of_ref": "indicator--722098dd-2764-4e0d-b0b4-480dd6dfb275", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefb3c68-8a42-4a1a-93a3-c56a8db81e80", "sighting_of_ref": "indicator--ddf83b35-b139-4043-a0ce-7b986c649acb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a4a9f2-3abd-4f89-9234-3621968754d7", "sighting_of_ref": "indicator--fb2e0f36-2117-4113-8fd3-c895e573bf3d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb208f6-d328-4837-a4d6-93e724440158", "sighting_of_ref": "indicator--42bb18c4-6963-40d4-a0f5-1028e57cf95b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d531203-17d4-47b7-acb8-ad39923e9d72", "sighting_of_ref": "indicator--42bb18c4-6963-40d4-a0f5-1028e57cf95b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476f8839-b03d-4592-8b4a-64c8729d6e80", "sighting_of_ref": "indicator--2d2fd692-982d-414a-aef5-ab15b1d86eda", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648c20cb-c71e-4d00-8400-f47753bac1ee", "sighting_of_ref": "indicator--8bbc6841-29b6-44ad-82aa-76f9f0c4f0ee", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31770a80-36ec-4066-af48-b0997b8c271c", "sighting_of_ref": "indicator--9811db59-f348-491b-87d2-c35e76ed2159", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7cdca3-1764-4103-ac13-2c906a050ccd", "sighting_of_ref": "indicator--06b4d94b-021e-489e-b0d9-9a0900144540", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4753ab82-25e4-4a38-8b9e-fcc05c85f1c3", "sighting_of_ref": "indicator--31e4b2dc-fa2f-455e-a465-ad3f2ec73240", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82fd61ea-f5a0-4fbe-8c22-4ab4a9afadd0", "sighting_of_ref": "indicator--1353a29d-1c17-47ee-a59b-b913b6e1187a", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fdca8e-b5e3-4b2f-ab71-7a116b6cace8", "sighting_of_ref": "indicator--e493bb9d-47ef-446c-a96b-4fad018f1efd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7caa872-99c3-464e-8c4b-de30b02809f9", "sighting_of_ref": "indicator--73954999-71ed-46a5-a391-fcf8fd03b0cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664a9dbf-a36a-491a-a65a-cffe32865d71", "sighting_of_ref": "indicator--cefe96c7-feb3-47ec-8cac-a4f2ec9b311d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e31609-27c7-4ee8-8c8c-a826da9d4b10", "sighting_of_ref": "indicator--50c1cf1e-9090-46dd-8a4c-551324ad39e6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ec9b7f-210c-431b-925e-2d7e4f78e6c4", "sighting_of_ref": "indicator--0858f285-a4f8-4ff0-8f02-328281b6e949", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f591ddff-4854-42e8-88f7-2db09da3c3b7", "sighting_of_ref": "indicator--a38962b5-ed18-435d-845c-e6c2a4acf424", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9975370a-e006-4141-9026-5cb9bfad2909", "sighting_of_ref": "indicator--e3b5c3f9-9fed-4b77-ada2-58947af90c53", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52e7879-5447-4af1-be09-e35092ae09dc", "sighting_of_ref": "indicator--e3b5c3f9-9fed-4b77-ada2-58947af90c53", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3452a8b-93f6-4d34-8309-3ea684366f2e", "sighting_of_ref": "indicator--468c9b28-d49b-4cd4-9d68-1baf3ce7f3f3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af91e13-c76a-44bb-b566-ce1b30f82f98", "sighting_of_ref": "indicator--468c9b28-d49b-4cd4-9d68-1baf3ce7f3f3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a684f93-22b0-4ca0-9d5c-6b062bea3db6", "sighting_of_ref": "indicator--8043a15f-3843-4c1f-a4e0-aa60590dbabb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936e6fca-49fa-471c-a422-64528d3589ab", "sighting_of_ref": "indicator--8043a15f-3843-4c1f-a4e0-aa60590dbabb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6225d132-3595-44b8-b061-9c8a470f2fb5", "sighting_of_ref": "indicator--8043a15f-3843-4c1f-a4e0-aa60590dbabb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c509634a-865f-4fe8-8155-ba37077597d1", "sighting_of_ref": "indicator--2939163d-7621-4211-8848-b5afc347eeac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833f93b5-84d3-4d55-b79e-5aeca70b4c86", "sighting_of_ref": "indicator--e59153e7-bdaf-4ea7-bd03-748db2bbdc3c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d52a36-af4a-4fd0-bcd5-650f66630c89", "sighting_of_ref": "indicator--5a110ced-6f94-48c9-9ab9-4d6d984080fb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e3008d-f3ba-4b8a-a533-a0111b329b30", "sighting_of_ref": "indicator--1c34a5c8-76e5-4fdc-9090-021a766ff758", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf01fcdf-8b5b-411d-a50a-5e9528e4c972", "sighting_of_ref": "indicator--1c34a5c8-76e5-4fdc-9090-021a766ff758", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1cf8bf-40d8-463f-a402-9d4f5b360aa7", "sighting_of_ref": "indicator--34d66044-3114-49c1-90fc-24cf0a0831aa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38f9d8f-2469-45d7-91e4-a7f0877504b9", "sighting_of_ref": "indicator--34d66044-3114-49c1-90fc-24cf0a0831aa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5a7b42-3f70-459b-bdbe-cc0e26b9c662", "sighting_of_ref": "indicator--6f90fc00-1807-4ef4-84d3-aeb207a0540f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97baee95-01f7-4335-b0ff-18c16e967f5c", "sighting_of_ref": "indicator--6f90fc00-1807-4ef4-84d3-aeb207a0540f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8604a0ae-1e5e-46e7-905e-7b01aa853de0", "sighting_of_ref": "indicator--1f55783f-9316-40e6-b665-486cb8690199", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad9c041-f9fa-4214-a609-827fb356a92d", "sighting_of_ref": "indicator--1f55783f-9316-40e6-b665-486cb8690199", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe4c18c-bdb5-4e12-84e5-361a81ce069b", "sighting_of_ref": "indicator--86dece13-477f-4a52-bb64-ccf4c4efb1d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b12005-7abb-4662-ad86-b66312cdb434", "sighting_of_ref": "indicator--86dece13-477f-4a52-bb64-ccf4c4efb1d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e999bc1-5322-45ec-903d-8fdb67668089", "sighting_of_ref": "indicator--35e15417-c28c-44c4-9f0c-699ad3cbba5b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382597df-f310-4ff8-81ed-5a7259876d6a", "sighting_of_ref": "indicator--35e15417-c28c-44c4-9f0c-699ad3cbba5b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a96ac5a-848a-49f9-8933-9dcd8caaa98f", "sighting_of_ref": "indicator--35e15417-c28c-44c4-9f0c-699ad3cbba5b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b4caf3-8dcc-437f-9897-517ea9f8952c", "sighting_of_ref": "indicator--4b48233e-bd64-493e-89d7-62758930cb7f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5c4a00-7b33-4d65-9d4b-3c13bef33d8a", "sighting_of_ref": "indicator--4b48233e-bd64-493e-89d7-62758930cb7f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5306dc-1798-4086-ad98-4b6c96394faa", "sighting_of_ref": "indicator--65a63365-b448-4411-878f-46e1869a73b3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb0ea70-b895-4b8d-bd3e-a4c599059c67", "sighting_of_ref": "indicator--65a63365-b448-4411-878f-46e1869a73b3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b815d24-4599-495f-a179-425c6dd88e4b", "sighting_of_ref": "indicator--df4bcb99-fdb4-46d9-8ca6-6ab8bf580b37", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df8d46c-9f17-49fe-bae5-35b81150f7a1", "sighting_of_ref": "indicator--df4bcb99-fdb4-46d9-8ca6-6ab8bf580b37", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218cd411-d1f1-45a4-ad6e-f409b1c4e94f", "sighting_of_ref": "indicator--df4bcb99-fdb4-46d9-8ca6-6ab8bf580b37", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39906cc-f1da-4af9-a947-37fb500e5958", "sighting_of_ref": "indicator--92134b0a-589c-4aaa-a3e7-4e43c1a51ab8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5caa69de-050b-42bc-a450-23525eb1342d", "sighting_of_ref": "indicator--92134b0a-589c-4aaa-a3e7-4e43c1a51ab8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e43c7c9-8c9b-417a-ab7f-472754acaac9", "sighting_of_ref": "indicator--60808395-55a9-41cf-b4c3-5bdb365b1772", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d03056-b7ea-43fa-961c-36880fd2ac75", "sighting_of_ref": "indicator--60808395-55a9-41cf-b4c3-5bdb365b1772", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26da11fc-b184-4aa7-adfa-fdd51295d4a9", "sighting_of_ref": "indicator--fd39de07-e391-4fad-8b47-49c1a056d1db", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc74f11-abd7-4736-aa2f-8df2d6d7184b", "sighting_of_ref": "indicator--fd39de07-e391-4fad-8b47-49c1a056d1db", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355965c2-870f-4df2-99f1-9268b60d1f0b", "sighting_of_ref": "indicator--bba8618d-32c9-4149-ade7-68980310ec8b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c784d188-e43d-4a2f-9324-ff66ddfb6b3e", "sighting_of_ref": "indicator--bba8618d-32c9-4149-ade7-68980310ec8b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca6bbb0-7c4a-46df-87fa-bd3f2f6f70e4", "sighting_of_ref": "indicator--81a3d088-0911-45fc-8c63-a514badbb728", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fff1002-2b3c-4cba-869d-891197f0864b", "sighting_of_ref": "indicator--d6d68a27-59ad-437e-93ef-e602f49c77d2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda60e3f-0866-4482-bad5-ae36b2a19d54", "sighting_of_ref": "indicator--1da6dca0-0e78-4758-a6b7-ce527157e887", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aabb8e9-0d3f-45b1-89bc-983a3f13e16f", "sighting_of_ref": "indicator--1da6dca0-0e78-4758-a6b7-ce527157e887", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae91a85-ea3e-4e36-ae0e-60ce45c935c2", "sighting_of_ref": "indicator--1da6dca0-0e78-4758-a6b7-ce527157e887", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729602f3-2c1f-4a82-8d1d-3aa91e028dd5", "sighting_of_ref": "indicator--5ea60fda-dc8a-45b5-9892-69c3d3c76ecd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36e3b5c-2516-4549-96d2-6d14bad01dd6", "sighting_of_ref": "indicator--5ea60fda-dc8a-45b5-9892-69c3d3c76ecd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92d2637-aa3f-4c35-81f2-6fd2341484c6", "sighting_of_ref": "indicator--5ea60fda-dc8a-45b5-9892-69c3d3c76ecd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7877a7d4-ff50-4ad3-b4c4-d50b87161a81", "sighting_of_ref": "indicator--0f29522b-3ea2-4853-b604-aca2cf838c1f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e9384a-a7d8-49df-832d-5991a4dc9ae5", "sighting_of_ref": "indicator--827cc809-da59-433c-b806-43c4e82f0138", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4123e406-8b74-4e4e-9bc3-1479d28bfe39", "sighting_of_ref": "indicator--d4464fa3-941f-4ff4-bba5-fc9bd5cffdfb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dabc802-82a2-4e2d-b67f-f411208ec22a", "sighting_of_ref": "indicator--715f0e9b-4dbc-494b-bb14-9ef0a3d0ef6d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0895a095-2f41-4546-b033-f5a75a4acb3b", "sighting_of_ref": "indicator--715f0e9b-4dbc-494b-bb14-9ef0a3d0ef6d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eece9598-e468-4677-bde5-1d2ac7a0c051", "sighting_of_ref": "indicator--52335f82-1858-4d29-936a-fbde85a745ef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749343a0-67e5-48f1-8d32-cb7649c4591e", "sighting_of_ref": "indicator--7911839c-be3f-44f6-935e-003776cb6d65", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a296c637-02c1-4a5c-b951-0f762c4e5f5a", "sighting_of_ref": "indicator--7911839c-be3f-44f6-935e-003776cb6d65", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cbd055-3821-4fea-bd81-507cd641251f", "sighting_of_ref": "indicator--1a8365a7-1895-4f38-bff8-acd77947b97f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87669979-0d8e-4d7f-8be3-9e8aeb8c25e5", "sighting_of_ref": "indicator--3b39f83b-d62d-4ed3-979c-cc9d72de81b2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a1472b-64d1-4b71-8c96-f8c244cb3bf6", "sighting_of_ref": "indicator--3b39f83b-d62d-4ed3-979c-cc9d72de81b2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b1d84d-669b-42c4-ba7a-b09b2a6ec8d4", "sighting_of_ref": "indicator--b71ea352-d766-4705-8547-fde7210d6b76", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4358e05d-4cef-4cbf-9262-63500a2e1d75", "sighting_of_ref": "indicator--74dc8823-c226-44a9-ac20-62e23c4dc269", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fa0fe8-e8cf-4617-8745-0dc97098afaa", "sighting_of_ref": "indicator--3c9ba46f-4905-4cca-9d21-50f9f22bbb20", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752d30c6-79a3-4272-bbb2-ce6c5c9f99ef", "sighting_of_ref": "indicator--c0735512-4750-4398-9899-54b9f726cd78", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c969b0-01f2-4789-8fad-2293ee9c7645", "sighting_of_ref": "indicator--04c61fe5-0ea2-4315-9a20-3dc85c0bfe57", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e38b42-2c7f-4fd8-b021-82173d56149d", "sighting_of_ref": "indicator--6f602e01-de08-436e-bf1e-43f771e46d06", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce47d1f2-918a-4a81-bdbd-7343ba8939df", "sighting_of_ref": "indicator--1cf885b8-2c54-40db-8d75-917e99724445", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2300274a-f22a-4d0c-8ac7-b158d3a2b286", "sighting_of_ref": "indicator--1cf885b8-2c54-40db-8d75-917e99724445", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05e4ac2-044d-4ee4-b456-76eeedd15731", "sighting_of_ref": "indicator--04c02f96-4ca9-4d1c-91ef-65781d185b68", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e14bba-f552-4ba9-9456-e70344f66209", "sighting_of_ref": "indicator--04c02f96-4ca9-4d1c-91ef-65781d185b68", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5251a2-0bee-418b-85dc-99e1311d4f61", "sighting_of_ref": "indicator--5eed3daa-c32a-4746-91b8-367a9bbf1ceb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6758c8e7-7e0f-4fa2-acfa-702a2de2bb79", "sighting_of_ref": "indicator--5eed3daa-c32a-4746-91b8-367a9bbf1ceb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce64a45-72da-49c7-ad6d-3fed6a6d688c", "sighting_of_ref": "indicator--5e1431c5-c3b4-437b-a585-739404f5cf90", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce30231-a556-4cd6-8b40-5fd53ee1531e", "sighting_of_ref": "indicator--5e1431c5-c3b4-437b-a585-739404f5cf90", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7a00dc-7555-4245-a4fd-29d7cd31b312", "sighting_of_ref": "indicator--ccb347ae-0ccd-4b64-99fb-2f9d5ea5d304", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e5acd0-b1ba-4375-aa6d-eb85dd2e75db", "sighting_of_ref": "indicator--e9f6512a-14a6-4d2b-b8c0-5d6580e733c0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae963f1d-b9af-47e7-a0ea-442184464dda", "sighting_of_ref": "indicator--e9f6512a-14a6-4d2b-b8c0-5d6580e733c0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dadc36c-cda3-4104-895a-0f4b4bd0accb", "sighting_of_ref": "indicator--16f8ad70-19e9-4341-adc5-0cea29dfea89", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f276d490-981d-4dd7-97bc-dd6ae1ce644f", "sighting_of_ref": "indicator--16f8ad70-19e9-4341-adc5-0cea29dfea89", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e491ff-e6a2-47ba-9bfe-434f168a1dfb", "sighting_of_ref": "indicator--b71c8b07-c1c5-49e0-bda7-01b39d860d96", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744eb2cc-6f64-4f9a-b64c-605c8370e35f", "sighting_of_ref": "indicator--b71c8b07-c1c5-49e0-bda7-01b39d860d96", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d07f5f-aae5-4763-95fb-f84355407864", "sighting_of_ref": "indicator--b359527b-07aa-4adb-acb3-ffc86c88bc02", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43441951-0ebd-4e17-a139-bc954a90a58d", "sighting_of_ref": "indicator--b359527b-07aa-4adb-acb3-ffc86c88bc02", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d8e897-4f45-4bf6-88c3-7bc1f29f03a6", "sighting_of_ref": "indicator--b359527b-07aa-4adb-acb3-ffc86c88bc02", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab69216a-6066-45d2-a569-5897830d31ff", "sighting_of_ref": "indicator--e18d4bc6-62fd-49f4-8cc3-83ce462c6fdb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4694df9c-cc65-4074-8dbc-c89b1e748d9e", "sighting_of_ref": "indicator--0ca86c92-af79-419f-9577-ba010efec1d4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9db3c6-9a0f-4cfc-b4a2-bb4f18a857be", "sighting_of_ref": "indicator--2f3ffa3b-6cca-4709-a098-f41187cb7d9e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9853d214-f332-4e8f-b9a9-033e16bf2381", "sighting_of_ref": "indicator--9fe1f9e7-6560-44a7-9ad9-2a0c81525f86", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433100c5-bf10-4c57-8b69-ff272197b597", "sighting_of_ref": "indicator--9fe1f9e7-6560-44a7-9ad9-2a0c81525f86", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73763a21-9678-4ef5-b0ba-0424dedd4d84", "sighting_of_ref": "indicator--61350a24-dcfa-40e0-95db-5355c052627b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23fe1d39-69d5-4272-a035-6a3c0b6c84e1", "sighting_of_ref": "indicator--e7022fa6-bb61-4e5d-91bc-8e634ba25c21", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3277eae0-0a48-413a-b0f8-d39dd8160807", "sighting_of_ref": "indicator--a14380d9-748b-467b-8659-5b6c7bc65f27", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3ef3da-862f-43fa-85eb-8d3276759c22", "sighting_of_ref": "indicator--a14380d9-748b-467b-8659-5b6c7bc65f27", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194d17c8-8e6f-404b-b13d-85ec5f9aae46", "sighting_of_ref": "indicator--7fadcbc0-8db9-4bea-b070-7ab605acb6eb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d786c771-347d-42fe-8871-19f1c5e23d02", "sighting_of_ref": "indicator--9b816ce3-88e4-449f-9128-10028e5760bc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697d9a77-65bc-43bc-9878-ffe2e894a1f8", "sighting_of_ref": "indicator--b14f3560-434e-4778-b2c9-1ee1563468fb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f285212d-3afb-49ed-bf3a-3cd3ef077141", "sighting_of_ref": "indicator--b14f3560-434e-4778-b2c9-1ee1563468fb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcdd0d3-20a9-4cc5-8751-66868f6dac40", "sighting_of_ref": "indicator--22b35ec4-9fd9-4a39-a93a-f987f56c23c7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1113404-46d0-4514-a5e5-278b0b9ba6ea", "sighting_of_ref": "indicator--22b35ec4-9fd9-4a39-a93a-f987f56c23c7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee02547-c16b-4032-ae6c-8c9d0e2cf693", "sighting_of_ref": "indicator--e803d17c-680c-49f2-b3e6-533aeb1a2439", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9261fca6-e04b-497d-93d4-8be7f093989d", "sighting_of_ref": "indicator--e803d17c-680c-49f2-b3e6-533aeb1a2439", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4566e1da-9e94-486e-b254-0d7e72ca9651", "sighting_of_ref": "indicator--e803d17c-680c-49f2-b3e6-533aeb1a2439", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9beaa7d0-38e5-4ee8-9cb3-3feffb5a6dde", "sighting_of_ref": "indicator--642b0bfa-41e0-4d76-b5a4-11d70b960a7c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20bcea2-6297-4aef-a58e-efb054f8ab85", "sighting_of_ref": "indicator--2360e7f6-4dff-410d-943c-387793bc624d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76245b1b-f54e-42f0-a855-0b8f4f64a54a", "sighting_of_ref": "indicator--5e006baa-b2ee-4c6a-adf5-69e481f002f3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a655539-5d52-4e16-81cd-e99032adf203", "sighting_of_ref": "indicator--5e006baa-b2ee-4c6a-adf5-69e481f002f3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd7eb81-faae-4557-b41d-868da844015f", "sighting_of_ref": "indicator--0fd837a9-f475-4790-8e6a-7dc957b20b49", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7168659c-297a-4d1f-a9ac-41afb61e962a", "sighting_of_ref": "indicator--70946062-9542-47af-8378-6b495cd47bcd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab3c337-ca1e-42b4-9daf-62c26bf29ced", "sighting_of_ref": "indicator--34ebc27b-6cd8-4002-9088-90da1d9ab37a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7d06e9-0090-42ff-abbe-7a0476888a5c", "sighting_of_ref": "indicator--34ebc27b-6cd8-4002-9088-90da1d9ab37a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c415824b-9700-4360-9316-5dd569cff9e5", "sighting_of_ref": "indicator--cb3ee5eb-db8e-4ca5-ba3c-8e4624ded7f7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90a4a44-1a8b-473a-984e-cc1e1123d673", "sighting_of_ref": "indicator--4c989923-67fe-411e-a667-be0cffb7178c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a5d65d-836c-4720-b81e-b51b3c107a9e", "sighting_of_ref": "indicator--622affdd-b449-4787-9c0a-cf0777fbc426", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d79921-594a-4bde-9f7c-3c40fdea387f", "sighting_of_ref": "indicator--622affdd-b449-4787-9c0a-cf0777fbc426", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5b516a-8fa9-4345-ac25-f8bd9e12dc80", "sighting_of_ref": "indicator--80fc9e42-22d1-4637-90bb-041d3064c9d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb98bbb9-3b86-4a31-bcb8-e0775f5c298d", "sighting_of_ref": "indicator--80fc9e42-22d1-4637-90bb-041d3064c9d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f7338e-3fd3-4dde-9b9e-814583c7ef31", "sighting_of_ref": "indicator--9909a7ab-64a7-46ab-afa6-4d63006cac45", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75673002-4760-4eca-b2a0-e678005e827d", "sighting_of_ref": "indicator--d49c5bf5-4169-4a8f-bde1-7eca725b60c4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d74df3-5a73-4528-a94e-48e225c953bb", "sighting_of_ref": "indicator--0f5ea77a-35c1-4439-a73c-f6567edd54e3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf0bf34-9eb8-41f5-b471-93b338110689", "sighting_of_ref": "indicator--5afbf9c1-6848-4baf-b3f3-a8b186552e09", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb50794-36e3-436b-8c17-fef9ad370aac", "sighting_of_ref": "indicator--5afbf9c1-6848-4baf-b3f3-a8b186552e09", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155fdf1c-ea95-4e51-861f-fdf196d36675", "sighting_of_ref": "indicator--3928c4ad-50d0-4c60-b1ba-b9f4bacbbd93", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c08ade-31c4-400a-8c80-82d900399e3b", "sighting_of_ref": "indicator--8c3f6321-358d-45e2-a7e5-999a4fd7739e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6b2648-032d-46ee-b505-c64802e52c19", "sighting_of_ref": "indicator--8c3f6321-358d-45e2-a7e5-999a4fd7739e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7567a398-a8cb-4570-bef3-2065311a183c", "sighting_of_ref": "indicator--80779c3b-7c23-4cf8-b791-74f9c01e7644", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a38949-2041-4b11-9390-ee682e9bd7d4", "sighting_of_ref": "indicator--80779c3b-7c23-4cf8-b791-74f9c01e7644", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d9b3be-66b6-4185-92e9-e27b7cde0215", "sighting_of_ref": "indicator--8c75bd6a-4a25-4e9a-beee-e42ba5ea2cfb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a114d6e7-445d-477c-aeba-010010356060", "sighting_of_ref": "indicator--8c75bd6a-4a25-4e9a-beee-e42ba5ea2cfb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8413cd54-a40a-493a-a17a-9129ed5f908f", "sighting_of_ref": "indicator--569f8a9a-a8b8-44c4-85c4-58a9f4c33c06", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d34511-d60c-410a-a2c6-5eed1d9e742e", "sighting_of_ref": "indicator--569f8a9a-a8b8-44c4-85c4-58a9f4c33c06", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114906da-52e2-4fe5-847f-b7f2c03684b9", "sighting_of_ref": "indicator--5cf2694c-28ec-4dc2-b013-8266f7cfbfe0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043614c7-e75e-4050-a7b8-0d449fedd5a8", "sighting_of_ref": "indicator--c6e1cc3b-d593-408f-aec9-c17f3294a204", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301f46ec-190b-4990-a331-22c25aaf9bac", "sighting_of_ref": "indicator--05734903-e69f-4e52-8638-36b551439cbb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a40dbe-5a3c-4404-a292-5196446ce7a1", "sighting_of_ref": "indicator--05734903-e69f-4e52-8638-36b551439cbb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc320071-6854-4d6a-8a2b-2a92e6c76336", "sighting_of_ref": "indicator--05734903-e69f-4e52-8638-36b551439cbb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da4302e-a3d5-4b32-9bfe-784269ede78e", "sighting_of_ref": "indicator--5d5852ea-c99b-4ec9-93cd-4d6f33edcfd0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60601be-e228-4b01-824c-fc4ac4a18b2c", "sighting_of_ref": "indicator--5d5852ea-c99b-4ec9-93cd-4d6f33edcfd0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e544636c-2052-4c36-b487-3229a3660454", "sighting_of_ref": "indicator--70ec2c0d-b968-4ebe-b385-6f0f6459065e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de2f6ea-23e6-4f85-8957-d1dddedf48a4", "sighting_of_ref": "indicator--9c211a7b-b8d3-4c00-be18-fe5b7bff4e3c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924b953f-6213-43e9-9d5b-849509889444", "sighting_of_ref": "indicator--663e1f06-9554-48cd-8f21-a1455c3f60a3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc6cf45-8f2c-476a-9657-26b4748bf245", "sighting_of_ref": "indicator--663e1f06-9554-48cd-8f21-a1455c3f60a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2880a4e2-3c0d-4a67-9667-bfaa60dcc0c6", "sighting_of_ref": "indicator--4901bb95-5775-4ae6-a352-447a0456ddbd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc42da8-93a2-4abd-9abd-70a2c45beaa0", "sighting_of_ref": "indicator--d7bf37be-8499-4ae5-bb41-a44e6c0178b0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a99731-8f5a-4b78-9c26-03b1d23ca24d", "sighting_of_ref": "indicator--a2236b77-df25-4bb0-94bd-949cc70d238e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d2cf36-a0da-4204-8266-e9a33ed61aed", "sighting_of_ref": "indicator--a2236b77-df25-4bb0-94bd-949cc70d238e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d84241-5973-4230-b025-00afb143011b", "sighting_of_ref": "indicator--d8bdf1c5-2567-443c-88f8-4353519aa2a0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c8a337-587f-4d84-95de-8b7ae05098a5", "sighting_of_ref": "indicator--d8bdf1c5-2567-443c-88f8-4353519aa2a0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34cf1aaa-536c-4c2c-babf-e02aae273a52", "sighting_of_ref": "indicator--d8bdf1c5-2567-443c-88f8-4353519aa2a0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa56aa51-1efb-4d99-9675-6b735296aa10", "sighting_of_ref": "indicator--6b85b357-ec86-4756-b92c-1479331c34d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a0ed6c-91bf-47a9-b0e8-12ef0856c150", "sighting_of_ref": "indicator--42639094-142c-48f7-8883-59293ce8885b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c821d1ef-5871-4e46-b5b9-da90ef598953", "sighting_of_ref": "indicator--42639094-142c-48f7-8883-59293ce8885b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e82ffe7-5b61-4a7e-ac74-dc3731e7087e", "sighting_of_ref": "indicator--37ccf266-82ad-4af2-855a-db2c005e2c42", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f1f81e-c688-40b1-9c2f-25c911799b75", "sighting_of_ref": "indicator--9ac4a324-390f-4157-ba21-a8b4f34982e6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8aebcf-e376-4189-bcdf-9d811c253063", "sighting_of_ref": "indicator--689c2a72-d1ab-45db-8509-b6f1d73f8176", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922c09c8-ff6a-4863-99a1-353a770ae2f7", "sighting_of_ref": "indicator--358c58c7-4de8-41dc-b556-578fd3b9032e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83dfa4c1-aee5-47b3-98b1-a52a0311ef3c", "sighting_of_ref": "indicator--fef768b1-f9d8-44d5-9d27-8b57d8de5e7a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522561bc-86f6-4f2e-9343-27250ce2900a", "sighting_of_ref": "indicator--dc60d159-4ced-40b9-a400-409b19bd594e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f143b2c-6476-4e3f-b497-6af662f26b86", "sighting_of_ref": "indicator--dc60d159-4ced-40b9-a400-409b19bd594e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8211141e-1caf-4b0a-b626-118a12e39475", "sighting_of_ref": "indicator--dc60d159-4ced-40b9-a400-409b19bd594e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e543b89-d4ee-477b-87be-9539d0623da0", "sighting_of_ref": "indicator--3fe6b909-5291-4543-96e0-47c62f5678c9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087c759d-41c6-4a29-9a47-c8568d827807", "sighting_of_ref": "indicator--3fe6b909-5291-4543-96e0-47c62f5678c9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf19fa5-1840-4c64-934f-88cdc5ae3f1c", "sighting_of_ref": "indicator--d2997c85-2470-45da-b990-507dbf2f0002", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8de714-4399-460a-a671-891f91e131b3", "sighting_of_ref": "indicator--baaffc49-74b5-488a-941f-1fb22d8135da", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ded19c-db42-4e3f-9baa-c59715e8e42a", "sighting_of_ref": "indicator--9a5ef63e-24fe-4f8e-a79c-3bdf5862aefb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ad4614-bc37-434f-a9fe-f4f65cbb1aa2", "sighting_of_ref": "indicator--7bfd1901-9a92-4bce-85ce-d7a799c94f64", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5579935a-00f1-4ef9-8c15-c40c1d852f5d", "sighting_of_ref": "indicator--fd070a80-4e9d-4b64-bba5-d2134b4fcfbf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a44690-9439-4fe7-a3b2-5297708bf5fc", "sighting_of_ref": "indicator--fd070a80-4e9d-4b64-bba5-d2134b4fcfbf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ea1eeb-6524-4231-95c3-08ad7a842eb5", "sighting_of_ref": "indicator--0026f245-98b4-4cd1-847c-891e07411914", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c544e3e9-669f-4675-8bc0-1aa585479a18", "sighting_of_ref": "indicator--0026f245-98b4-4cd1-847c-891e07411914", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0ea016-32dd-4532-8d07-5c1ce13a1dce", "sighting_of_ref": "indicator--e016cc04-9785-4976-a672-92bff3de2d8a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ed170e-b650-470e-87b5-b208e0da48cd", "sighting_of_ref": "indicator--6fe787e6-344f-42a1-ab47-f670f14503d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270e12de-1ca8-49d6-b4b3-2305cd5aad8f", "sighting_of_ref": "indicator--cb63d60f-3c0d-4d2b-865c-6b48077871a0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666b2b01-62fe-4af2-9110-50bdcec11cbc", "sighting_of_ref": "indicator--598026b0-2275-43e1-b2bc-c1dd3191bce8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813e846a-2092-4e79-9ed7-bcd0625fa09f", "sighting_of_ref": "indicator--4d264943-514d-46af-8ae4-47310cd511a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a13c766-cb26-4faf-b8dc-270c8a471d36", "sighting_of_ref": "indicator--09d7115d-42a6-4a0f-ae20-bbb59da9f424", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84be0a6-b0b1-40e4-bbba-980a75cf7331", "sighting_of_ref": "indicator--40184c69-d841-429d-9ba5-8982ef34509f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f52145-7018-4f61-a879-bd70a92749ee", "sighting_of_ref": "indicator--40184c69-d841-429d-9ba5-8982ef34509f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8837623-c0ba-48e1-9e49-2849d1aa8f27", "sighting_of_ref": "indicator--40184c69-d841-429d-9ba5-8982ef34509f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd1fa90-e2e9-4772-8242-4b23c5c7fe82", "sighting_of_ref": "indicator--2bf45b05-7415-447c-b80f-c7aeb800c5c9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3754273d-cf3b-4a31-b98f-ed6735226e53", "sighting_of_ref": "indicator--598f3727-e502-4cbb-b85d-8440644b712b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dad42f5-e87a-4c79-88f7-1f75e7b764e9", "sighting_of_ref": "indicator--598f3727-e502-4cbb-b85d-8440644b712b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e1c459-7851-4a3f-b08b-484de86a896d", "sighting_of_ref": "indicator--598f3727-e502-4cbb-b85d-8440644b712b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473c6ab4-5221-4fec-8e56-d7f84a03c0ed", "sighting_of_ref": "indicator--e7f5989d-951a-4b98-87c3-812ceedeb9da", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c070c5d3-4667-4173-8a20-afa28fa762a3", "sighting_of_ref": "indicator--6d2e99ee-ab8e-45e0-b0b7-5925650f55fe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4004d68-02ad-4164-9501-ab852f240933", "sighting_of_ref": "indicator--6d2e99ee-ab8e-45e0-b0b7-5925650f55fe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40b30ab-7bee-4841-b92a-d88677b09026", "sighting_of_ref": "indicator--55534ded-b9cf-46e6-a0bf-b4815ed329de", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fdf258-6c90-4b26-9456-e84e1ce2550d", "sighting_of_ref": "indicator--c2028f12-66d7-4894-ba4b-b195c092dc89", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92232f2-281c-43ec-8dc3-576544094a96", "sighting_of_ref": "indicator--682754e4-637f-41ba-9734-dc739198c5af", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcef84a5-baf1-4031-9508-974189a7d860", "sighting_of_ref": "indicator--682754e4-637f-41ba-9734-dc739198c5af", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b27e49a-140c-4410-a479-02edb99bd989", "sighting_of_ref": "indicator--a3647544-b479-413c-a0c1-94fa8c216df1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e324e02-cc56-4d89-b4ee-6b1ba9e345aa", "sighting_of_ref": "indicator--92d1026b-e98f-4628-9302-abffa8fb95fd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585da8a8-2354-419b-a027-f90df028a9c6", "sighting_of_ref": "indicator--92d1026b-e98f-4628-9302-abffa8fb95fd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb19171c-44b7-4d56-be08-2412bd21172d", "sighting_of_ref": "indicator--45ba7dcc-181c-413a-9313-8a8f022b6c6b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a36929-67fc-4a41-b3bb-38139926a584", "sighting_of_ref": "indicator--45ba7dcc-181c-413a-9313-8a8f022b6c6b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f74d60d-75d8-46dd-b528-f478532c43fc", "sighting_of_ref": "indicator--b51d2439-7562-49c2-b0cd-b5fc51daaa75", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcab433f-68aa-4eb9-9725-fee59b797606", "sighting_of_ref": "indicator--bbece38d-b98d-46de-ad14-1ad7c47a1676", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638d2dd0-eb1a-41a1-8e87-a2aa7816da20", "sighting_of_ref": "indicator--d5380c4e-7301-4317-81be-0fcd55fc7897", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347290cf-b397-4084-b1e8-785ec34bed75", "sighting_of_ref": "indicator--d5380c4e-7301-4317-81be-0fcd55fc7897", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7dafde8-13ed-4368-ac98-0713a1a9862f", "sighting_of_ref": "indicator--fb7fbb5b-eba6-451b-9cba-4f0d4f157936", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e60d33-e821-489e-bf78-86ee249218e1", "sighting_of_ref": "indicator--48683a6d-23a1-40ef-98a2-76283123e846", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ab63bf-421b-4c54-af59-74436a1fcb61", "sighting_of_ref": "indicator--6b549b0f-29c4-4a47-afcf-8e54171e60bf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd28f98d-81c2-41b5-810d-f7f6140f5afc", "sighting_of_ref": "indicator--7f530bde-2f5c-4d7b-83f8-cb16d7e91cc4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecdfffdd-d98b-4dbf-9197-8884c2e3cc54", "sighting_of_ref": "indicator--7f530bde-2f5c-4d7b-83f8-cb16d7e91cc4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d5e843-d17a-4ca6-899f-9b1abe9999c7", "sighting_of_ref": "indicator--15a7353e-7d46-4899-ae12-7a98739b1d2f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c3c665-87ce-4c85-880d-75a1b97d31a6", "sighting_of_ref": "indicator--ca87eb26-e373-4c1a-a873-f4afde257df9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc9a0b2-53a3-4192-bfc2-493a5ecb5ca7", "sighting_of_ref": "indicator--5467d30f-dd96-452f-9cba-3b9681e37330", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b20ee56-04f9-4d96-a6d8-77a8482ed385", "sighting_of_ref": "indicator--e342a5f7-ca53-427b-b30a-a4d69c8df04b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d460d1-a2e9-483b-a45d-a31eeab62e21", "sighting_of_ref": "indicator--e342a5f7-ca53-427b-b30a-a4d69c8df04b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93670651-b02d-4142-9fdd-cc8e13e48bd7", "sighting_of_ref": "indicator--332e35a8-a776-42a2-8178-f721b77786aa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8596bbbc-f89d-49bd-966a-a30299c67534", "sighting_of_ref": "indicator--cae4a027-c1af-4629-ad4b-80453c1b54b2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbef75cc-f8a1-464a-ae10-bca16bf56dd0", "sighting_of_ref": "indicator--be268ba3-b0a6-4c5d-a197-fd27513791d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d537719-125a-4cbf-bc77-ef6e1e4b29ae", "sighting_of_ref": "indicator--4c9eeeb8-d210-4c80-aa18-6539431d7529", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6638eb7e-6f8b-49ab-84a8-752737bcbef4", "sighting_of_ref": "indicator--e0d20c2d-0179-47ea-ab91-3fb5440707ef", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba2a713-eedd-46fb-9134-8004e6c59dee", "sighting_of_ref": "indicator--e0d20c2d-0179-47ea-ab91-3fb5440707ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edc473b-7f3e-464b-ac18-32a7042f7515", "sighting_of_ref": "indicator--e0d20c2d-0179-47ea-ab91-3fb5440707ef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f30b01-101c-4aa8-9958-0f77614930ed", "sighting_of_ref": "indicator--995ccb51-e37a-4184-a651-60953899147c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c409a0fb-9e2d-441f-86d1-1879cc2637f9", "sighting_of_ref": "indicator--995ccb51-e37a-4184-a651-60953899147c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b7044d-1faf-4e1f-9cf1-86b3ba01cf93", "sighting_of_ref": "indicator--995ccb51-e37a-4184-a651-60953899147c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbee993-c7a3-4182-8838-c345a650655f", "sighting_of_ref": "indicator--42e85609-d7a7-4902-bb98-db7f0a106b50", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880de468-eaff-4db6-8f34-ce29ea06c1ca", "sighting_of_ref": "indicator--42e85609-d7a7-4902-bb98-db7f0a106b50", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0d39bc-8a6d-4fc7-a316-063f859aa32f", "sighting_of_ref": "indicator--17a0ea8f-dbcd-48dc-b483-171d8072ce2b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2c740b-b21f-4f87-be63-d54bdfa98858", "sighting_of_ref": "indicator--17a0ea8f-dbcd-48dc-b483-171d8072ce2b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0b063a-ccc7-4b8d-983c-392deefd7ea1", "sighting_of_ref": "indicator--7201948a-0a4f-422b-9d6f-e25e8c8c5422", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eed09f9-ea0d-40d3-a720-f855c0f86f5a", "sighting_of_ref": "indicator--4a15befe-f3a8-4a5b-a094-05fbad6b3bd0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552bca9b-a36b-4334-9c34-f24fe2a12a10", "sighting_of_ref": "indicator--4a15befe-f3a8-4a5b-a094-05fbad6b3bd0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8da5fbd-0d46-48a5-92dd-67555599fded", "sighting_of_ref": "indicator--4a15befe-f3a8-4a5b-a094-05fbad6b3bd0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abc8511-5085-42fc-b459-a8c4948a0f7d", "sighting_of_ref": "indicator--3c56b039-1868-4b18-b5d8-b4fee598085f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b37903-1920-4ba6-aa34-d18e83fbf76f", "sighting_of_ref": "indicator--f078a722-1bf0-4ee3-abf6-2ec82c10eb58", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b0164d-fbfb-4741-9e3a-44abdf18df25", "sighting_of_ref": "indicator--f078a722-1bf0-4ee3-abf6-2ec82c10eb58", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fd4b9b-1ab1-422e-84f1-4c5fc1a84626", "sighting_of_ref": "indicator--1504f795-dd59-4e8d-8cc3-1d08029413ad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68630ea7-a42c-4b35-9f5f-8393eb429ff6", "sighting_of_ref": "indicator--45a8c7ed-31c2-4a02-9535-c5c67d9a9001", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c4cb9b-0b55-476f-8b39-48879a9ea9dd", "sighting_of_ref": "indicator--45a8c7ed-31c2-4a02-9535-c5c67d9a9001", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83cdd74-6418-4e06-a3d7-3663e852d0a3", "sighting_of_ref": "indicator--5572e47d-68bb-4ec3-b097-efeabf09fdc7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3faa51e7-3d12-4f8e-be86-8a8a8ccba731", "sighting_of_ref": "indicator--295f3e59-2a1d-4344-aa32-45f7330bafeb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db0818c-f523-4099-b830-4967c7db1bbe", "sighting_of_ref": "indicator--295f3e59-2a1d-4344-aa32-45f7330bafeb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e13d52-4bf4-4507-8c04-aaa4eb155538", "sighting_of_ref": "indicator--f6dddaef-de2f-486e-8eba-ff29e11c74e2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ebd8684-112f-42fb-8ea5-70eeb5c8d2ad", "sighting_of_ref": "indicator--9b6f183a-4e8c-44dd-b905-5a6770f2a183", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe430ff-2f91-4111-80e1-374cc69d2aa6", "sighting_of_ref": "indicator--9b6f183a-4e8c-44dd-b905-5a6770f2a183", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1d1f4f-90c8-47b7-8465-c4b308c8204b", "sighting_of_ref": "indicator--514ac2a5-da9c-4d36-8266-bf4f10e074cc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19bdef52-3a43-41f8-a2fa-227b69609f91", "sighting_of_ref": "indicator--c855b11e-c3fb-4fe0-9bc5-e6616ac4b8f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19c549c-9a06-4cd0-a6bc-ea476c571e1f", "sighting_of_ref": "indicator--42cbae5b-5254-4617-a2a7-d9a1d5d94773", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927a658c-d890-4099-9d89-af8eea67db71", "sighting_of_ref": "indicator--ae8485dd-8fc9-4d7c-8aca-92d5846bc898", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29284bd0-bbd4-4b9b-96f1-26e24c674b4f", "sighting_of_ref": "indicator--660135aa-093b-4c52-b4bf-f28443591a29", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12af4fef-2889-4bd2-9814-e98af240e982", "sighting_of_ref": "indicator--182cc7d1-5ca6-46bc-92c8-c5fb8a2f2853", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8faf3a2b-24a8-4d64-b394-444b3d7eaf9c", "sighting_of_ref": "indicator--a7628ae1-3449-474c-9539-3c7b9a5dfba6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af920601-a97c-4de1-b09d-06dd76c14e8b", "sighting_of_ref": "indicator--a7628ae1-3449-474c-9539-3c7b9a5dfba6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99eb6f38-0cc4-432e-9f64-d039d1483656", "sighting_of_ref": "indicator--e86dfc53-0ad6-4ac8-8cb4-5319e1122070", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8f586b-9d19-4f60-be25-98ef28bcb557", "sighting_of_ref": "indicator--ce85ac66-c99e-493a-9be5-e286237d1258", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0a498c-28fa-4d02-a8a4-77a4343e4750", "sighting_of_ref": "indicator--ce85ac66-c99e-493a-9be5-e286237d1258", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56df821-392c-47e0-95c7-858f22cf4da6", "sighting_of_ref": "indicator--a7cedfc5-51bc-4e00-a3a5-c7156fb0dba3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4bfa33-c77f-47ee-ba2b-9b08c2a645af", "sighting_of_ref": "indicator--9b11b0fb-85ad-4e5b-b027-49b80a38fedd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa54a235-86cc-4f14-9384-0ac9fb54d315", "sighting_of_ref": "indicator--9b11b0fb-85ad-4e5b-b027-49b80a38fedd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1401821-9297-4afd-9191-63b0ca046a53", "sighting_of_ref": "indicator--15d15859-6c07-443e-bae7-6429d7e73899", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c048c8cb-84a8-4ddf-9456-14cd6e2c94e9", "sighting_of_ref": "indicator--15d15859-6c07-443e-bae7-6429d7e73899", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23a04f2-371f-43f5-984a-ddb16fa9907f", "sighting_of_ref": "indicator--15d15859-6c07-443e-bae7-6429d7e73899", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c229ef-2904-482c-b8c3-fb3020786f9c", "sighting_of_ref": "indicator--51a2c140-9343-4297-9e10-c274198b7235", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65cd6716-2754-48ac-bfde-1458ab8bbecf", "sighting_of_ref": "indicator--51a2c140-9343-4297-9e10-c274198b7235", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85de6cbe-e21f-4615-bdc2-2200bcc4ccb7", "sighting_of_ref": "indicator--76ad66c3-14eb-4e80-963f-8db12714fe6e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802bb5e1-d22a-43c1-958f-86308f2ae486", "sighting_of_ref": "indicator--76ad66c3-14eb-4e80-963f-8db12714fe6e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3834221-6ae2-4a1d-ac4a-2f7f17bd4f54", "sighting_of_ref": "indicator--76ad66c3-14eb-4e80-963f-8db12714fe6e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b48006-9eee-456c-b45c-b7df1985c58c", "sighting_of_ref": "indicator--a8964721-5021-42d1-a761-9054594aa63b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbb8ae3-a48b-41cf-83a7-2dccdbd4ef02", "sighting_of_ref": "indicator--9b8086f5-3665-4452-9708-758a7ce12940", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad46df9-275d-4384-84ef-c39ccb0faf49", "sighting_of_ref": "indicator--4914434f-999e-4104-bdee-b16c90bbca98", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d12a32-c7a5-4dc8-b17f-969f962e6e3e", "sighting_of_ref": "indicator--db252601-0086-4d4c-87a4-cfb29f25db50", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18bf81b-1cd0-4bed-bbb3-73d8a9e26daf", "sighting_of_ref": "indicator--db252601-0086-4d4c-87a4-cfb29f25db50", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e04388e-8149-4b9c-8a96-7561dfa7ee10", "sighting_of_ref": "indicator--195510c6-fc2d-432f-9ede-0600b3481347", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e8d1bf-3fe7-4a6c-a35e-c26c77ed8460", "sighting_of_ref": "indicator--195510c6-fc2d-432f-9ede-0600b3481347", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6bc85c-2ceb-4c0c-b7b7-1f820607f247", "sighting_of_ref": "indicator--195510c6-fc2d-432f-9ede-0600b3481347", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e07dd1e-7662-45d1-8b38-d23a11d5deb0", "sighting_of_ref": "indicator--82b49323-3f65-4775-af3c-79336b192ba4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec19c313-cbd0-48bc-9319-eed5c87e3a57", "sighting_of_ref": "indicator--82b49323-3f65-4775-af3c-79336b192ba4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbb0e88-d997-43c0-bb61-8972c51d40db", "sighting_of_ref": "indicator--43016c85-0f0b-41f0-b52c-37c98cc90d46", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98922e93-dc8a-4c3d-a82b-e520cfe06ae6", "sighting_of_ref": "indicator--cfa0f188-85dc-44c6-ac41-083ddb094642", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28facec-b8c0-40b9-8ddb-34c9ce458188", "sighting_of_ref": "indicator--cfa0f188-85dc-44c6-ac41-083ddb094642", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c0491f-598c-41e1-b89f-705fb2b45c11", "sighting_of_ref": "indicator--91108bea-c6cb-4bdd-9b45-cc75cc556d85", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8e4cb7-ea44-4e96-b91a-2458d69b4c9e", "sighting_of_ref": "indicator--df095d66-bd1a-46d7-a1db-c756b9764467", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8161301-9096-49c0-8b9a-1814da19b3ba", "sighting_of_ref": "indicator--df095d66-bd1a-46d7-a1db-c756b9764467", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97164c71-4fed-4da3-89f2-341b44cd6ea2", "sighting_of_ref": "indicator--99df6e7a-54c5-4973-af57-625ea49c10e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82751289-9a7f-4364-96c7-bcef1cfd08e3", "sighting_of_ref": "indicator--99df6e7a-54c5-4973-af57-625ea49c10e2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed52048-7079-4399-b3e4-55a75d607895", "sighting_of_ref": "indicator--99df6e7a-54c5-4973-af57-625ea49c10e2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da41bc4d-b01d-4b0b-ac5d-f8f685d46da4", "sighting_of_ref": "indicator--ce452347-2b26-4e64-b2d9-73c93c62e476", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f77f8e-66fe-45ce-b2db-f48f197cf7d9", "sighting_of_ref": "indicator--ce452347-2b26-4e64-b2d9-73c93c62e476", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaad2738-f9fb-4507-a9f0-671a6e280943", "sighting_of_ref": "indicator--146ce873-bc47-4728-90f2-3b11c9cdfc92", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd58ec01-e018-4e0f-8d80-7a112890714c", "sighting_of_ref": "indicator--7a2f005a-3095-4400-a028-c86d1ed84fdc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847d3af0-af4e-4186-bb7a-a117eb5b37cd", "sighting_of_ref": "indicator--7a2f005a-3095-4400-a028-c86d1ed84fdc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918b2415-bf15-4e5c-addb-3bee94facc15", "sighting_of_ref": "indicator--77ba2b26-2109-458d-8b80-a6284b68da2e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd783952-9399-450f-b022-c81acd88d06a", "sighting_of_ref": "indicator--77ba2b26-2109-458d-8b80-a6284b68da2e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8f5ef0-9334-4ef4-8720-369302553c41", "sighting_of_ref": "indicator--7b41556b-d527-4457-a2cb-9d6484ba52d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddcbd5f-747d-4274-aacd-3d923195fb5e", "sighting_of_ref": "indicator--7b41556b-d527-4457-a2cb-9d6484ba52d3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205eed32-7494-4c73-b0eb-a67d4510171e", "sighting_of_ref": "indicator--6a2bc5d8-120d-4d36-84e1-286886e4c9a9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc6eccc-241a-43df-a757-269ebe5cfeb7", "sighting_of_ref": "indicator--265ce838-0304-4461-824b-4d25cc3722cc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39c37d0-bd2d-49ca-902a-41bdddba5fe6", "sighting_of_ref": "indicator--265ce838-0304-4461-824b-4d25cc3722cc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7bc467-07e0-4530-aab3-0d4f0f7e0cbc", "sighting_of_ref": "indicator--fb01c331-726e-4c85-9237-f877053e480d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2f5f3f-6d38-41ed-a46a-b5833e3221c3", "sighting_of_ref": "indicator--8b972e5e-5f71-47d3-a45e-714740352592", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf02ac20-fee7-4bb0-8de2-df4a4c2e8ea8", "sighting_of_ref": "indicator--8b972e5e-5f71-47d3-a45e-714740352592", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4f57fc-2ef6-4858-9cb9-5880c4eeee22", "sighting_of_ref": "indicator--58f198c9-e21a-4a19-a1ca-4bb4f3e164f1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45038cc3-daa5-41d1-b3a6-08cfad760d8f", "sighting_of_ref": "indicator--b3925f78-7b4b-4a82-8191-47f4349b41c5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02199aa-e687-4c11-ae6d-a37b8a0beb5a", "sighting_of_ref": "indicator--4c273115-5de0-4f41-ab48-5aca6b420570", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5c9b62-e835-4e6c-9359-19a050a7172b", "sighting_of_ref": "indicator--4c273115-5de0-4f41-ab48-5aca6b420570", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a41b96-f2ff-40fd-97ce-177ced7e8de4", "sighting_of_ref": "indicator--60c96e10-c25b-4a5a-9d87-608b4509dd9e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc95abd-f4cd-4a8e-8e34-127abfd7d422", "sighting_of_ref": "indicator--f85d8e22-8769-4966-a6d3-defa908add5f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab58dfe8-4810-4bdb-b1c1-17c40f5f2222", "sighting_of_ref": "indicator--ef89a4fc-6855-4b88-b567-a9974386a426", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c35db4-fde8-40a6-a059-dbde1afef21d", "sighting_of_ref": "indicator--ef89a4fc-6855-4b88-b567-a9974386a426", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8023c19c-d93f-483d-9821-890bc93e54d5", "sighting_of_ref": "indicator--483619bf-7e87-4883-b0c6-173e79cd9a11", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c115820-86ad-4e49-aa68-a9fdef0b4c46", "sighting_of_ref": "indicator--483619bf-7e87-4883-b0c6-173e79cd9a11", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07d6670-2874-46f7-bfb8-773c95fefcdf", "sighting_of_ref": "indicator--950ba760-d853-4d8d-b62b-440c2912a904", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd1aac1-e0a0-4819-8649-5e8de1a89697", "sighting_of_ref": "indicator--950ba760-d853-4d8d-b62b-440c2912a904", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2770f65-3171-413d-96c0-f5612dbca7ab", "sighting_of_ref": "indicator--64812f06-e4ed-43df-a81c-19a55c6fd38e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c09aef-6f1c-484e-819f-610bb282a632", "sighting_of_ref": "indicator--033af0c4-d914-4b2a-a308-742c9054f3ad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81be0951-ba0a-424d-847d-08076016ec48", "sighting_of_ref": "indicator--ade60ada-c8f3-4544-b90c-c6b8449079ef", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5938d406-7e25-491d-adc1-71dd841a9c28", "sighting_of_ref": "indicator--ade60ada-c8f3-4544-b90c-c6b8449079ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbc9b28-9bda-4142-867c-0cbfa1a4157a", "sighting_of_ref": "indicator--ade60ada-c8f3-4544-b90c-c6b8449079ef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ba2c25-dce9-4159-8785-81ff5cb132c2", "sighting_of_ref": "indicator--61e2fea2-a03a-44d5-b68a-e0676e9db56d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8bb0e7-263d-4c80-8d42-f1e1f402078c", "sighting_of_ref": "indicator--69865246-c4dc-4280-8574-8133e6bd4fec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3f4a7e-8894-4a9d-9e68-ed9c717f0f5d", "sighting_of_ref": "indicator--69865246-c4dc-4280-8574-8133e6bd4fec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4a53bc-74a1-4b31-9b3e-3a998e86cdec", "sighting_of_ref": "indicator--7f2978ff-00e2-40d6-bd1f-100461d6f08a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19eadf16-4673-4d6f-8c80-2d9f22439129", "sighting_of_ref": "indicator--17699291-d21c-4032-9885-e8d07a258199", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04050e0b-c257-45d3-bef9-6d2cc473ca66", "sighting_of_ref": "indicator--17699291-d21c-4032-9885-e8d07a258199", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb33f8ce-2db5-4a97-8657-1a81f2a99f9d", "sighting_of_ref": "indicator--17699291-d21c-4032-9885-e8d07a258199", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c0d8fa-84c9-4676-9c98-dbdfa54a6559", "sighting_of_ref": "indicator--22a6b596-50cf-402a-927b-96c2d3d89973", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce91ca5-8789-4812-b276-1c13f1aa6aa9", "sighting_of_ref": "indicator--22a6b596-50cf-402a-927b-96c2d3d89973", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e23ae2-714d-4977-aa78-8a95f27e2d7d", "sighting_of_ref": "indicator--db87a1d2-b4e5-4e50-9626-b74a57d7c6f6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353c21d5-d599-43c8-97e0-8988e97f8e06", "sighting_of_ref": "indicator--ebc55c2e-5966-4465-a3ec-4ef52bb1c12e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdb8859-3bf1-49d7-99ca-3ca4dd01cf63", "sighting_of_ref": "indicator--6edf1a14-7ea3-44f1-ba9c-2a92c5b38460", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5216a99-f2c8-46d4-9cad-aa15abae696f", "sighting_of_ref": "indicator--6edf1a14-7ea3-44f1-ba9c-2a92c5b38460", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f78fc0-4bf2-41df-8027-48afdc8d77b0", "sighting_of_ref": "indicator--ab8e8f10-698b-428a-b11f-eab7718442ed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f7cbf0-a34b-4717-875e-32852d01167f", "sighting_of_ref": "indicator--ab8e8f10-698b-428a-b11f-eab7718442ed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e97deb-65e6-4fdf-b921-f3a32c74de99", "sighting_of_ref": "indicator--ab8e8f10-698b-428a-b11f-eab7718442ed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e26a6e0-864c-455c-848f-5ed306e8de62", "sighting_of_ref": "indicator--39caa479-e986-4185-8d93-ea9f008abc83", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e663a488-1907-4e44-8c27-0052e503d9f1", "sighting_of_ref": "indicator--915b2e5d-ee03-407f-ac8b-bd7a9b2f1d52", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db614d44-cf1f-4caa-a05d-a524cc358547", "sighting_of_ref": "indicator--3ade8132-030c-44dd-8876-066e898578c9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e303e9e1-3b90-43a6-b213-fe2145994b9d", "sighting_of_ref": "indicator--ecac53f9-bc4a-46b3-8170-23ea6144eb9c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49653c5-dbd0-4485-85c9-7139d49d92b6", "sighting_of_ref": "indicator--eadc2aa4-f5ad-4dbf-a833-a94360980128", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c75cf6-6100-4707-b2f2-f5cdbabda1ac", "sighting_of_ref": "indicator--9aa4bba6-d8d4-43d8-bbf3-9d3b69feb752", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ab661c-2d11-435e-b1e6-c862cb1b6786", "sighting_of_ref": "indicator--2fd9f6bd-003c-47fe-ae7f-62fba9ac7a9b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4ee8e2-062e-42b7-afc4-6769bc9a6a80", "sighting_of_ref": "indicator--2fd9f6bd-003c-47fe-ae7f-62fba9ac7a9b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9793fc0-34fa-4a24-a89a-bcb7cb2f3078", "sighting_of_ref": "indicator--b4704242-e302-4a9e-97d5-b417fdf24470", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a8d9a3-ff02-43dd-85a0-ad169ed7cd8d", "sighting_of_ref": "indicator--b4704242-e302-4a9e-97d5-b417fdf24470", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc671bd-0df2-4334-9aab-c308d2f7e7c8", "sighting_of_ref": "indicator--c2130cee-a8e1-4737-be70-1d7564e9da4f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422d2e46-addd-42fc-9b47-cb1b5f7dceb3", "sighting_of_ref": "indicator--c2130cee-a8e1-4737-be70-1d7564e9da4f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f784c6-80fd-40ee-8b52-f2bc2d777297", "sighting_of_ref": "indicator--66d2e6b0-471e-440c-a148-09448e219bcb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee566fd-924e-43fa-821c-c2a2a14ba74e", "sighting_of_ref": "indicator--5f3516da-ca46-479c-ac37-166ea2debb5d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23f1862-08eb-4280-8ccf-d866864d8d98", "sighting_of_ref": "indicator--5f3516da-ca46-479c-ac37-166ea2debb5d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4228353c-86c8-4659-8afa-feaa262d5414", "sighting_of_ref": "indicator--864f163c-5bcb-49dd-84bc-33dd56480776", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3b2d89-c964-4aaa-9576-b93553c39e44", "sighting_of_ref": "indicator--7775cde4-6c3a-48c5-9bc2-ae2dab9bf7b8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19df26d7-f180-4dd6-8d78-a111162c5a02", "sighting_of_ref": "indicator--4c62ec09-73fa-485e-af93-808e1d0eddab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330ff05b-0a65-4127-a0c6-3e7a73664ef0", "sighting_of_ref": "indicator--b6a004ef-0087-454f-8fcb-386230d14f4b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43009d53-9cf7-4a7e-8404-dcd55a85922f", "sighting_of_ref": "indicator--014ec143-f662-4dc5-871d-681a53d95d23", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504de347-830f-4f29-9826-38f31d4bc06e", "sighting_of_ref": "indicator--014ec143-f662-4dc5-871d-681a53d95d23", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29da00a7-363a-4875-a0e3-44e44f455ccd", "sighting_of_ref": "indicator--0ddb2e38-3323-4f67-b744-e3d04ea0316c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e348cff-68c4-4d78-9a9d-1026c592be2e", "sighting_of_ref": "indicator--ec105bfe-5480-4b7f-9652-10de628f554c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21b5e9f-ccc6-4c90-82b7-b8c5fce65ce7", "sighting_of_ref": "indicator--1419474a-008c-4aa4-b926-a24bec5c4545", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccf3408-72af-48fa-84a3-853379025ba2", "sighting_of_ref": "indicator--1419474a-008c-4aa4-b926-a24bec5c4545", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cff8218-989f-4da7-b678-66e0f0b3ac3b", "sighting_of_ref": "indicator--07fee812-f14d-4683-b970-aa4197920697", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd25610b-d19c-4d25-959f-70dc77fa792c", "sighting_of_ref": "indicator--922ddb65-3e8e-4969-bfe9-81a765e34294", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c07e165-4af0-4168-ac17-3ff79915cb70", "sighting_of_ref": "indicator--7103de2c-246d-4748-aa30-e5f3f1d1c658", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e370cc05-ade8-4754-b00e-fc21d49ccde4", "sighting_of_ref": "indicator--7103de2c-246d-4748-aa30-e5f3f1d1c658", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b002d3-7c86-4e84-b542-6771f20a2ba7", "sighting_of_ref": "indicator--7f11f474-bf8c-4ffe-8bc8-2a55c040a4b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9af444f-a250-4e79-a87e-5d3c37f4b2d6", "sighting_of_ref": "indicator--634673f5-41a1-42f7-b005-b37552956477", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2225e1d-95a6-4386-8d05-56d9d3f86d52", "sighting_of_ref": "indicator--8a2ba465-50a9-4062-ab10-c55b9dea03e6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3211e2e-9c32-454d-b1df-bded78958df9", "sighting_of_ref": "indicator--3668f754-1e2f-4a59-b2dc-be19888dc0f1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3705c4d-89d3-413a-a213-568d591120d6", "sighting_of_ref": "indicator--3668f754-1e2f-4a59-b2dc-be19888dc0f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0581de-773a-4104-8a7a-fd1ce87a03bd", "sighting_of_ref": "indicator--3668f754-1e2f-4a59-b2dc-be19888dc0f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb2695f-ba38-4d8d-ae1d-ec9f7ad3f8a3", "sighting_of_ref": "indicator--521d275f-8011-4d99-8e30-ca18b49f0559", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc59c6e-7494-47e9-ac73-2faa859014f1", "sighting_of_ref": "indicator--e26fc5b3-0b0d-44de-b5e7-619669e2a525", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d1908d-8c8b-42ed-be4d-ed0c165c6671", "sighting_of_ref": "indicator--b00709f7-7ed8-47aa-85e0-a6877f69a808", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa26f40-4e0b-4c0e-8cbf-9f4167e949b0", "sighting_of_ref": "indicator--b00709f7-7ed8-47aa-85e0-a6877f69a808", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa4ce12-47cb-4e50-9467-ec5f23aa81d2", "sighting_of_ref": "indicator--63d06ee8-7261-48fd-83db-316537642ed1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e23973e-fde7-4e86-94b2-2b87884a6e85", "sighting_of_ref": "indicator--63d06ee8-7261-48fd-83db-316537642ed1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f85083-d1fc-4276-86fc-04292b0ff5ed", "sighting_of_ref": "indicator--ae1fcbb6-2a24-4929-87df-5a31cece7a18", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c9848c-0ac1-4400-83d3-10bffc31a802", "sighting_of_ref": "indicator--b1211774-c49b-40ed-b04d-ccb5b231c028", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ccf446-2e19-4ae1-b16c-02918e49709e", "sighting_of_ref": "indicator--b1211774-c49b-40ed-b04d-ccb5b231c028", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5ff704-47c0-4976-9955-788c90bec0e9", "sighting_of_ref": "indicator--eafeafa2-bf1a-4426-9af7-60d437e82976", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5e6fad-cebe-4bd9-8dc2-6ee91e21c3e2", "sighting_of_ref": "indicator--b6b92822-9683-4d6c-a53e-182c3076bd48", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abdfc88-c930-4f84-8042-dbd2208d151b", "sighting_of_ref": "indicator--2290ddca-1d5e-4430-b47d-1cf85f4cec3d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3a14b5-2427-472d-9ff8-694dbb0865fd", "sighting_of_ref": "indicator--d35598d1-7810-4370-be1c-006f7696bd9a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62397e66-b646-4bcd-a800-af32d4072467", "sighting_of_ref": "indicator--89435bff-2ba3-4ae7-bf39-524521ef2aa2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3e363c-b328-4835-a847-0f3c01beb763", "sighting_of_ref": "indicator--291948fb-1d1e-4aaa-a838-faa55b84ff73", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff7c916-ea5f-4fa4-aae2-40f8e802fabb", "sighting_of_ref": "indicator--291948fb-1d1e-4aaa-a838-faa55b84ff73", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bc5f15-6d19-4833-9924-6d7dbe281e6b", "sighting_of_ref": "indicator--4676ae28-a6b3-4b8a-a78f-563825c2e6ce", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940e77de-0f55-4c53-bbd9-a56c9aabeb37", "sighting_of_ref": "indicator--0e43a16e-772a-46f7-8b74-545091511be6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc44a0df-5c01-4119-ac24-0a3ee1d0037c", "sighting_of_ref": "indicator--0e43a16e-772a-46f7-8b74-545091511be6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3561a222-1d90-401d-8e7e-67af1b08c02d", "sighting_of_ref": "indicator--f31a16b2-6ff0-4fcb-9cb5-f7b1a4dda336", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99fc27e-7fa9-467c-bc71-d6bf88bd60a2", "sighting_of_ref": "indicator--f31a16b2-6ff0-4fcb-9cb5-f7b1a4dda336", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fad34e-b4f2-4f59-91c9-3596a5c633ca", "sighting_of_ref": "indicator--6326e386-0aea-443d-ab0d-eb824a17a54a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f34b3e4-a8f2-4c51-a053-910b5e131648", "sighting_of_ref": "indicator--a57afc5d-b08d-4957-a437-80f9c519543d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217f2d8d-df26-453f-ad3b-9e5545669ddd", "sighting_of_ref": "indicator--9a1b5ecf-c52f-4ae6-b9c7-3a6dea53689a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373ed22a-a7af-4f95-8551-86b54811faf2", "sighting_of_ref": "indicator--bedb8ede-6407-45ad-b80f-1c2b86a38c70", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d46487-3136-460e-8d2c-e8abc9c5fee7", "sighting_of_ref": "indicator--bedb8ede-6407-45ad-b80f-1c2b86a38c70", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416f068b-1293-4532-800f-9d86344ac01e", "sighting_of_ref": "indicator--bedb8ede-6407-45ad-b80f-1c2b86a38c70", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2f65e4-e8e5-43ea-9f31-12ffc43b81e1", "sighting_of_ref": "indicator--253f043b-5c91-4e51-b4f0-e7dfba99d46a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dceaa11b-7111-4224-95d8-b7a1137180d6", "sighting_of_ref": "indicator--e635d72b-1d61-43cf-b0ff-e164066bd773", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7974659-6790-4d2d-b4fc-3055681b2a9c", "sighting_of_ref": "indicator--c8e583c8-f992-41aa-985b-6e605388ed55", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50c6b6b-f254-41f1-888a-4560052af342", "sighting_of_ref": "indicator--15d7cc23-c0a2-4ad6-b088-bbf25137a3b6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593dfcfc-e978-4814-8af9-492196005967", "sighting_of_ref": "indicator--e49feca7-3b4f-44d0-8028-a8b4492a29cc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c87d984-5919-4be1-9b6c-4b03bfe94884", "sighting_of_ref": "indicator--e49feca7-3b4f-44d0-8028-a8b4492a29cc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b8276d-d467-4f00-8660-933c7717bde1", "sighting_of_ref": "indicator--e49feca7-3b4f-44d0-8028-a8b4492a29cc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fe4364-dc1c-4db4-a98f-5574ef008d22", "sighting_of_ref": "indicator--66b51eee-27ca-4b2c-b56a-ab46baf1936c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd09e627-7f56-4992-a98d-52cb0c9e2647", "sighting_of_ref": "indicator--e359c03d-f3bb-4318-96ab-94220076234b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a006c7-ea32-4319-82f4-e6f0885dda9a", "sighting_of_ref": "indicator--d4c2758e-a4da-49b8-9f51-d191ecdf5520", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68b1772-0fd8-4f11-90a6-ada50750745a", "sighting_of_ref": "indicator--726ad914-64c1-40fb-937e-de116be8a908", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae78cbe3-8b3f-46a9-b592-1ab34096d693", "sighting_of_ref": "indicator--1d04cd9c-6787-4ef0-b0db-af82c79fe457", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2992ee24-7da5-4fea-83d9-d58fcf4a0ca4", "sighting_of_ref": "indicator--b9f260cc-d6b6-4465-b2dd-5eddde9d6201", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5512e81d-a903-440e-b03f-9b858b161f66", "sighting_of_ref": "indicator--c5f80bcc-74f5-42d3-beae-bf34119d94aa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef806a70-0c44-4d5c-b976-8974b46080d4", "sighting_of_ref": "indicator--62e78cd7-15d8-417d-ac13-fe695889bea9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba75a096-0661-4537-bac2-dda8bfca692e", "sighting_of_ref": "indicator--85236e20-296f-4b8a-9a4f-ab77dac0cf2d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0767c2b-a4b5-4a88-9cd1-6f8e3f3f97a0", "sighting_of_ref": "indicator--439a7a75-31b5-4d5c-afb2-680de36181ae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e42347-dce9-4d6b-aace-760351e4e567", "sighting_of_ref": "indicator--c5980147-374f-40c0-aad5-d373dbc55ddf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa04c9fe-7def-4a22-ba68-3c9cdb34d952", "sighting_of_ref": "indicator--c5980147-374f-40c0-aad5-d373dbc55ddf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78be2a06-89c9-43b1-9d31-3b0bb461ccbf", "sighting_of_ref": "indicator--4ada7cee-39fa-4834-9411-2597816b83ac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060f09ac-0a3a-4cf5-b8ac-270bf4c798cc", "sighting_of_ref": "indicator--4ada7cee-39fa-4834-9411-2597816b83ac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb853773-5c4b-44e6-b24c-e2d2307e2072", "sighting_of_ref": "indicator--84598477-9cfd-4444-9800-8cbeeff64576", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b317ac93-1c75-4b32-9655-fc128b361ace", "sighting_of_ref": "indicator--84598477-9cfd-4444-9800-8cbeeff64576", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8185fc3e-322c-4700-a50b-ed817cd29ef3", "sighting_of_ref": "indicator--f7e6711d-7201-467e-bd3f-dd48fc66ab5e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e165352d-4c7c-4863-be8c-3c4fd9625fa1", "sighting_of_ref": "indicator--f7e6711d-7201-467e-bd3f-dd48fc66ab5e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e15b6a-a064-405a-accf-e6a4694fe74a", "sighting_of_ref": "indicator--61da13cb-0dc9-4745-be6b-964c1966bfd5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55f6dfc-1515-498f-97fc-e5867bf38838", "sighting_of_ref": "indicator--28bc9613-2f46-46e0-be69-2ddc0489ba52", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0cd251-0feb-4c8f-93d2-117d61c0ad35", "sighting_of_ref": "indicator--28bc9613-2f46-46e0-be69-2ddc0489ba52", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30a8b87-755f-46bf-9735-9f3f339e9e62", "sighting_of_ref": "indicator--7ad06328-6bb8-4d98-8a2c-30aae6df7b18", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29ca5cf-bff3-48d1-b507-afea61f12a80", "sighting_of_ref": "indicator--7ad06328-6bb8-4d98-8a2c-30aae6df7b18", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fcfcde-b6d9-4b8c-8b9d-206aab3e6fb1", "sighting_of_ref": "indicator--bde1c44e-f782-433a-923d-664041af601f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676b8810-e8c7-4fa6-9d4d-1bffbd6c8d79", "sighting_of_ref": "indicator--d174c7c5-c4df-46f7-a3eb-153dde121255", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93fe024-daa4-48c9-be55-ad418459b815", "sighting_of_ref": "indicator--fb67540d-2d71-4004-9ef4-89f2b9365a45", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8d41b2-ff7b-48cc-b858-8e47cd73a95c", "sighting_of_ref": "indicator--fb67540d-2d71-4004-9ef4-89f2b9365a45", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c232cb-6b0e-4940-b47d-16f19cc2f21b", "sighting_of_ref": "indicator--e55dd941-dd99-4165-b5aa-12e62e4deed3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ace91b-c3e8-42b6-a63a-3204c38652c6", "sighting_of_ref": "indicator--ee9d6543-55b8-47cd-8be9-a86addf4c00d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8edb5f-20f6-4dff-9d9d-11054dbc7525", "sighting_of_ref": "indicator--98e261cb-3b39-4103-b122-7a174dd82725", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d37a5c4-5bc4-4cb0-9993-9d7feb62ce7b", "sighting_of_ref": "indicator--bc33b448-709f-4de0-93e0-6933cac4b242", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bedcf71d-0f12-4850-9d8b-42dd129a7a91", "sighting_of_ref": "indicator--f5aed551-8fa8-4299-8c1e-f6fb233405c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ce1581-0f9d-4397-bb1d-9bc25fb74dfb", "sighting_of_ref": "indicator--f5aed551-8fa8-4299-8c1e-f6fb233405c6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8d3580-a8cc-4de6-b291-e1595b40bba8", "sighting_of_ref": "indicator--477235b4-71d1-4abc-910f-e206dc407961", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3905fd1f-cd59-4a59-890c-5b63af817c90", "sighting_of_ref": "indicator--477235b4-71d1-4abc-910f-e206dc407961", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ed72ac-b5f0-441f-9556-eb7a099b0961", "sighting_of_ref": "indicator--3e113296-bfd9-4aac-a696-421f9af97c81", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5a6002-a681-4097-88b8-44c43ca6bfa1", "sighting_of_ref": "indicator--3e113296-bfd9-4aac-a696-421f9af97c81", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c5ae09-6622-4d4f-99d7-6dcc8b72eebf", "sighting_of_ref": "indicator--559eee09-7598-42fc-9459-f9f3e08a79c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ad87c3-ec19-4faf-b872-2b59bf91f8b2", "sighting_of_ref": "indicator--559eee09-7598-42fc-9459-f9f3e08a79c6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39b990f-9e37-49d1-ad05-f7b917e12c1a", "sighting_of_ref": "indicator--acc5ad8c-c7d6-4f30-9c08-7b040ffa2b97", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a1e7c6-9075-4b45-ab45-79d238642ceb", "sighting_of_ref": "indicator--acb7fe15-9e98-49be-832c-15dfbaf94239", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f1c3cc-3c26-46de-b2ba-27a59e7884d3", "sighting_of_ref": "indicator--acb7fe15-9e98-49be-832c-15dfbaf94239", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6804af-ad49-45e2-8630-d606c33c3ff3", "sighting_of_ref": "indicator--2e0ac627-7d3f-4930-a967-b243c54e9e57", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d8d820-5edc-4ebe-a227-9383cf179dbd", "sighting_of_ref": "indicator--2e0ac627-7d3f-4930-a967-b243c54e9e57", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c534f113-aba1-4631-a6ef-b2f0d045df1b", "sighting_of_ref": "indicator--8502fdfc-4d22-4420-afa6-faa94899eaae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03aaf827-e750-49d3-8bf2-0358da9f2135", "sighting_of_ref": "indicator--7da38554-9fef-4654-99e0-2b12e7a2c034", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a90421-3393-4d42-b34b-1b0387333790", "sighting_of_ref": "indicator--7da38554-9fef-4654-99e0-2b12e7a2c034", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dab789-02d5-4379-874a-b4bcedf4c74a", "sighting_of_ref": "indicator--7da38554-9fef-4654-99e0-2b12e7a2c034", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bde17f7-1209-4da8-a526-48a46eb1b8fb", "sighting_of_ref": "indicator--1e549260-ae0b-4baa-8f60-d982b2e9b939", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06266423-d6f6-4b54-9e76-e0b74a6cf19c", "sighting_of_ref": "indicator--93671cb0-1e0e-4d1b-93f5-40e27648c106", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ccb971-a213-4eee-9f1c-5406540e0011", "sighting_of_ref": "indicator--0d933f14-ec53-40ec-b85f-03221b76a966", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33157bc-676c-4b45-83b1-0b1b3fdf22bd", "sighting_of_ref": "indicator--0d933f14-ec53-40ec-b85f-03221b76a966", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d14100-d13f-49dd-bae5-249a8ef979dc", "sighting_of_ref": "indicator--cee377d5-30f0-4c82-b5f4-9dede0682fed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c02ceba-da0c-4c66-a75c-86e600e56eac", "sighting_of_ref": "indicator--cee377d5-30f0-4c82-b5f4-9dede0682fed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a50ef1-80e5-4999-b0de-d6b8b1d61b53", "sighting_of_ref": "indicator--fd45eba1-afe9-418a-a91e-949ab7ded00c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbc67f8-c814-47cf-aa08-956cfdb910b4", "sighting_of_ref": "indicator--ac1863b2-5ab2-438c-baeb-bcf59dd10a9d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391d28be-6855-48a3-a5f6-e261f5be8f67", "sighting_of_ref": "indicator--ac1863b2-5ab2-438c-baeb-bcf59dd10a9d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecf5b36-6a2f-439a-b263-6968dd44265e", "sighting_of_ref": "indicator--a60b8648-38c0-46a6-bd85-ea304ce2e0e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7222de8-4010-4ddb-a2c0-a3c2e53298f3", "sighting_of_ref": "indicator--437ac834-0140-4439-9170-bef4e90ce083", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081ae9f5-e1ea-46f8-b689-c1123ac7a7da", "sighting_of_ref": "indicator--a027b424-bd99-4b4b-b3d1-918a59c43629", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ac0d70-f664-4300-9827-98f442723285", "sighting_of_ref": "indicator--a027b424-bd99-4b4b-b3d1-918a59c43629", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec584c9-f2db-4999-8e35-eb2fd9eadd4a", "sighting_of_ref": "indicator--45e1d3b1-0fc5-4e41-8019-ff47cfbf784d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857e51bd-51c6-4f0d-96bb-59b0f1b1f2ba", "sighting_of_ref": "indicator--3b66bde3-3a07-4a6b-bf3e-dca171c89290", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f55f8a6-a16c-4fc8-baf7-34389b87507c", "sighting_of_ref": "indicator--3b66bde3-3a07-4a6b-bf3e-dca171c89290", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4902be3a-9817-443f-b54e-ccde95587b4e", "sighting_of_ref": "indicator--de0dce64-42db-49a0-8784-4b4b37722931", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f2e202-c026-4650-8b28-8f215cbe3201", "sighting_of_ref": "indicator--f665dfe0-d5f9-46f3-8d78-9ca9b8f21603", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24225eb6-c994-4f8a-8c5a-e0541e78ce58", "sighting_of_ref": "indicator--9f4f52e9-af4f-479e-9206-7111baf0ebb6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55873ae-91ef-47ba-9639-bfb24aff12e9", "sighting_of_ref": "indicator--9198b4aa-6376-462e-a6b6-5d7f38fe54cd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3ded61-001b-4dae-bcae-51d3e27956da", "sighting_of_ref": "indicator--9198b4aa-6376-462e-a6b6-5d7f38fe54cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d43987-05d8-476d-a5e1-ccb9de201091", "sighting_of_ref": "indicator--b83c787b-5ec8-4d18-90d0-a39517b8e47a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715fdfc3-9957-4ac0-93db-ce3fa2e682b8", "sighting_of_ref": "indicator--b83c787b-5ec8-4d18-90d0-a39517b8e47a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e686d21f-4ca7-4ba2-8d9c-204dee1b1369", "sighting_of_ref": "indicator--9c915054-6967-4ce9-9a31-7e25f77f8d28", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42744f5-be42-468a-bf0e-76565c55b536", "sighting_of_ref": "indicator--9c915054-6967-4ce9-9a31-7e25f77f8d28", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8eb782e-59ac-4356-9389-7a228551ec6c", "sighting_of_ref": "indicator--9c915054-6967-4ce9-9a31-7e25f77f8d28", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4a8a84-0ac9-4b82-8799-91f910a94110", "sighting_of_ref": "indicator--cd9bf059-028e-4e31-ba83-168c958dc267", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb59fb2-f270-448c-91a4-8a25988e6f5c", "sighting_of_ref": "indicator--22c7d20f-1f0b-458d-bf92-e005eb18e518", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f575de9-8404-4123-a3be-66f45dbe7de4", "sighting_of_ref": "indicator--2f1893b0-30d3-4c6f-9ec0-77ff47141b6e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd89c1cb-3aed-4b8e-aa30-3c850263c8a8", "sighting_of_ref": "indicator--c8cb3b99-e764-4414-b95c-0efadf3322be", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f77bbe5-3b42-426e-a94f-c865ecd99b1d", "sighting_of_ref": "indicator--53b555df-366c-4a56-a25d-c758f7bcb45a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0bbe12-36a4-4a0e-94e4-a8b1e71b2d55", "sighting_of_ref": "indicator--53b555df-366c-4a56-a25d-c758f7bcb45a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f3da57-13ba-4583-ae22-2d69c87bd7ba", "sighting_of_ref": "indicator--614610a4-4458-45fe-8c26-acad355b0d13", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3888277f-4cf7-4543-8c16-bc334c793ed0", "sighting_of_ref": "indicator--614610a4-4458-45fe-8c26-acad355b0d13", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea5412f-4bc8-4826-a4ae-9ba7759b0d9d", "sighting_of_ref": "indicator--d1c58c8d-6574-408e-ab24-e8af0a46cb56", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49eff5a9-737e-431c-88bd-7e68fda85bc3", "sighting_of_ref": "indicator--d1c58c8d-6574-408e-ab24-e8af0a46cb56", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3987d6-ddff-48b5-b8b4-10455947ffbc", "sighting_of_ref": "indicator--b10ac620-ed45-41cc-b004-b735d938e2e1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c32279f-b257-4b63-916a-92e29ff4b731", "sighting_of_ref": "indicator--b10ac620-ed45-41cc-b004-b735d938e2e1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b140dd-4755-4038-bdf9-35403870d604", "sighting_of_ref": "indicator--4b6465ea-932b-440e-9fda-41a05c377483", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1fb679-aabb-4a58-ae3c-0a52c53900b0", "sighting_of_ref": "indicator--27c6a6ae-f58a-4d43-a3fc-2ebfb8db8485", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92eebc4a-25e6-4a42-be46-5b8fb24352a9", "sighting_of_ref": "indicator--243ecf53-34bc-4115-b65d-044513c7c366", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31ef397-fe1c-4902-a79c-319ce06db266", "sighting_of_ref": "indicator--243ecf53-34bc-4115-b65d-044513c7c366", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0df643-4148-4167-98f2-80622c22a8df", "sighting_of_ref": "indicator--b2994fc7-2b60-455b-8f0d-6d98d85b5f39", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc48e76-bfcd-41df-8a6f-7b944c2b0284", "sighting_of_ref": "indicator--bce551ac-8f87-456c-8fd3-d485290b2d13", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37da5a64-162d-497c-888b-cbb319d455d5", "sighting_of_ref": "indicator--bce551ac-8f87-456c-8fd3-d485290b2d13", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853f3d3d-0503-492e-b466-9f7fa05523d2", "sighting_of_ref": "indicator--bce551ac-8f87-456c-8fd3-d485290b2d13", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093728ae-88b9-4ae5-9955-5ec16c8dcf60", "sighting_of_ref": "indicator--01d555ed-2265-49f1-a66d-67ebb1f101d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c38314-bdc9-46b1-afe9-20320885547d", "sighting_of_ref": "indicator--01d555ed-2265-49f1-a66d-67ebb1f101d3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce33588-79dd-4af3-b318-1357289a9ebc", "sighting_of_ref": "indicator--97f0c717-0086-4bf0-9665-6818e4e2d022", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a927880f-fef6-4e81-b13c-ad6676b1f791", "sighting_of_ref": "indicator--4577a143-8158-46c0-b53f-6d83b544641e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6944ec9-48ff-4329-a0cf-a0de627a1785", "sighting_of_ref": "indicator--41e564ec-0512-4f65-884f-08c07b758b6a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac12de8e-ba29-40c0-bc7e-3a0c55043e45", "sighting_of_ref": "indicator--41e564ec-0512-4f65-884f-08c07b758b6a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbeb9926-90d4-4ca7-ad73-4ef80d8a4b5d", "sighting_of_ref": "indicator--bffc2164-4d03-4571-addf-e2422b50ccb2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c122e63-fadf-42c0-aa84-22ef0adc611b", "sighting_of_ref": "indicator--0c10a4aa-aca9-401c-8947-cf9496ede244", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b9b320-07b3-477c-9563-66e6087c8d58", "sighting_of_ref": "indicator--1155b1f0-4fc1-44e1-a490-dc7483202a3c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a6b8bf-d068-4114-902f-dcdb420dd834", "sighting_of_ref": "indicator--5b9a7991-e360-4da6-b598-d7f1e8c2b99f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f7a437-4037-4b0b-aef9-c65c0b56f710", "sighting_of_ref": "indicator--5b9a7991-e360-4da6-b598-d7f1e8c2b99f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c4f646-506b-4660-bef6-392ae47e61d0", "sighting_of_ref": "indicator--d8d89c57-dcfa-4d71-a063-b601eccddf83", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482daab8-f1e1-4a91-b128-2fa1460fc945", "sighting_of_ref": "indicator--3479bd6c-de2b-46f3-be54-cd71b380a660", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aff1875-5c58-4562-a8f8-37b94ccf2a81", "sighting_of_ref": "indicator--d53f12e0-1b3e-4efb-b8b2-8f795497db26", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8244e6-1b88-4921-8c80-6f81107aa482", "sighting_of_ref": "indicator--33dcfcdf-d63c-4d87-9974-68d103c003e0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b3a94a-d8e3-40d6-b9e1-02b53239b47c", "sighting_of_ref": "indicator--33dcfcdf-d63c-4d87-9974-68d103c003e0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9198c64e-3bf4-4420-a663-a7a73575c7ce", "sighting_of_ref": "indicator--16e08eb6-efcf-4552-a5fe-f4d1cbffb2b0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b88e77-f87c-48c4-8ef8-18d02e212eb6", "sighting_of_ref": "indicator--8ce32997-0aff-4b40-8912-5eb167c04227", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde3c74c-cf4c-4924-be74-1ae413bfef3b", "sighting_of_ref": "indicator--8ce32997-0aff-4b40-8912-5eb167c04227", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39687f03-4f34-4803-99cb-a3e6218430a4", "sighting_of_ref": "indicator--96a71dbf-173a-4560-a934-c4140d5ae367", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc8a315-5e68-4371-8d17-bace86ef7faf", "sighting_of_ref": "indicator--5763bec8-d30f-4277-940c-2d73b5046275", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f844ba83-7ddc-4c05-aba0-2ec15ee3ddd5", "sighting_of_ref": "indicator--5763bec8-d30f-4277-940c-2d73b5046275", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9545eaad-e05a-4af7-b93a-116c022f8891", "sighting_of_ref": "indicator--5763bec8-d30f-4277-940c-2d73b5046275", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5152afa8-de81-4958-b5f5-b7760a4cb617", "sighting_of_ref": "indicator--0f6193a2-d044-4d3a-aa19-9e0302dab3a6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f366df79-550e-463d-bedc-294961a2deb2", "sighting_of_ref": "indicator--0f6193a2-d044-4d3a-aa19-9e0302dab3a6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662d77ac-c1c7-4440-adce-4e7ceb117180", "sighting_of_ref": "indicator--dbb4c425-4fd4-4312-8f50-85d70a8b063a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61ab969-2c59-4958-9b73-920ce5940a13", "sighting_of_ref": "indicator--0c87110f-020e-474c-a7ea-2de6dee85e32", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd0b6a4-605a-43a4-af17-80e88597d033", "sighting_of_ref": "indicator--0c87110f-020e-474c-a7ea-2de6dee85e32", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c511444-a7af-49a5-8afb-a28a6748bcfe", "sighting_of_ref": "indicator--531ba4a6-e091-4ade-9645-b47bdc9675e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c33734-3001-47b4-8e4b-68f0fea9f434", "sighting_of_ref": "indicator--531ba4a6-e091-4ade-9645-b47bdc9675e2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507944e9-938c-425b-a6ea-bab0f3fb5da6", "sighting_of_ref": "indicator--bb3e76d2-8d33-42f5-8816-fa500790510d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae0d15d-98a9-4490-840b-37dab3535daa", "sighting_of_ref": "indicator--bb3e76d2-8d33-42f5-8816-fa500790510d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0baa2bbc-e0d3-40ac-8eb2-2dbe2a9415a2", "sighting_of_ref": "indicator--b3ca9898-98fa-4ffc-873f-4f7ed60a6375", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863fe1e2-49ed-467f-8392-931c80e62b5e", "sighting_of_ref": "indicator--ade2952f-3f21-472c-ad6b-61c05a6cd258", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fb9b0e-95fd-4859-b7b0-ee916cc0c595", "sighting_of_ref": "indicator--22027364-a10c-4dd7-8c5b-084dba5d07b6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3108705-d9b5-4794-b8df-d8e7f3b151eb", "sighting_of_ref": "indicator--95de966f-e5a0-4a0a-be8b-5ad89f1c6868", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883211f1-14d1-4b19-9384-7a3519e1fc38", "sighting_of_ref": "indicator--28bf0d60-7f83-4d2a-b51c-1f79f172dd8a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefb0d8c-79b8-44ab-9a07-32f018595b41", "sighting_of_ref": "indicator--2185522a-99f4-43e3-97d0-7dbe88988cf7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3aadb0-a98e-4c95-94fa-f2cb24847981", "sighting_of_ref": "indicator--2185522a-99f4-43e3-97d0-7dbe88988cf7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94eeecda-7e60-4eb1-82e7-e348d5f16b64", "sighting_of_ref": "indicator--f303f4b0-5732-4f6f-aaae-6a5b17ce35dc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1197e9-a948-4891-ac58-10c2c5def8e4", "sighting_of_ref": "indicator--f303f4b0-5732-4f6f-aaae-6a5b17ce35dc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f8a702-e004-4f0d-9bd8-6dea79fb8e7f", "sighting_of_ref": "indicator--136c5892-4120-4918-b99a-561989cfeaab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1231c1-ceb8-4871-84d8-3b4ff92e8b33", "sighting_of_ref": "indicator--136c5892-4120-4918-b99a-561989cfeaab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442ba687-37c0-4741-b1c1-e60465cd0962", "sighting_of_ref": "indicator--1c12d7fd-9a25-425f-9144-7f62a1e606ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7de6ba-dc54-45a3-a552-eba1adbcc132", "sighting_of_ref": "indicator--e7d71da4-8de2-4136-aaac-c1259b577254", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23167728-f834-46f3-90be-bf84379b1887", "sighting_of_ref": "indicator--e7d71da4-8de2-4136-aaac-c1259b577254", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a603edad-e104-42ec-b08d-cfb11e7bd09f", "sighting_of_ref": "indicator--3132f3fe-57ed-495f-b728-193f1c19fdfc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff8c786-4e6e-435f-bc69-274e7643e426", "sighting_of_ref": "indicator--3132f3fe-57ed-495f-b728-193f1c19fdfc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c92bd1-278e-4cad-a1df-379d3d944ee7", "sighting_of_ref": "indicator--3132f3fe-57ed-495f-b728-193f1c19fdfc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84fa04f-ea63-4254-97e6-a61ff1c612cf", "sighting_of_ref": "indicator--b50d3ab3-3fbd-40b2-bd29-36e1b30c777e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c20be8-44e8-4255-9925-2fcd1f39a0b2", "sighting_of_ref": "indicator--be1da4f3-670c-489b-bced-0e7dd5f31c6a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdee6abf-16f5-4e2e-94a8-eafdaeb17538", "sighting_of_ref": "indicator--be1da4f3-670c-489b-bced-0e7dd5f31c6a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be76cdd-34c4-464c-92a4-b039a16897d4", "sighting_of_ref": "indicator--a90df885-5177-433f-9f4e-4624ea3fc5c8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1a5c35-c387-46a2-b64f-9a44f7152d4d", "sighting_of_ref": "indicator--b80cf379-376d-469b-95bd-3016213fbacd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa0d89d-f008-4c1e-9dcb-3a876904ea02", "sighting_of_ref": "indicator--c5578085-01b7-4840-9f66-31c7bfeefa1c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52ee2ce-01cd-4710-97b9-66f9ad82cd5b", "sighting_of_ref": "indicator--c5578085-01b7-4840-9f66-31c7bfeefa1c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf75a20-7804-4c4f-a6a4-af64766b9a28", "sighting_of_ref": "indicator--2976d001-ea6e-457f-be74-afe633a48b1a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4f1fa4-8f57-4764-a849-5f2854429208", "sighting_of_ref": "indicator--95cac632-157c-4991-aa2b-ba0086fc79d9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2173a0-515e-4801-b23c-f112ccd78fb7", "sighting_of_ref": "indicator--65964e8b-9242-43a0-a1f3-076918a27107", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c55a199-8ba8-41df-937b-89d898619afe", "sighting_of_ref": "indicator--67a92b9b-62c6-491c-b3fe-bdd3ccf42c63", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734dd529-1710-48e9-b526-e172ef8661b8", "sighting_of_ref": "indicator--749a94ff-1ab6-4125-9c5e-85e650f838ed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc72b7d-24c7-4574-abe2-2be25751d7df", "sighting_of_ref": "indicator--749a94ff-1ab6-4125-9c5e-85e650f838ed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a2bc8d-634b-45f8-99de-21c10fed5883", "sighting_of_ref": "indicator--266bc309-636f-4052-a169-5842b064d482", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1e2381-d560-4536-9674-be154717f0ed", "sighting_of_ref": "indicator--582fffa8-bade-45c6-af3e-fdab510e7d90", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4513f624-a8b2-4fb2-a033-b0c74a9f38b5", "sighting_of_ref": "indicator--582fffa8-bade-45c6-af3e-fdab510e7d90", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f6773a-142c-4146-a0f0-cc6f808818fc", "sighting_of_ref": "indicator--582fffa8-bade-45c6-af3e-fdab510e7d90", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78660a5-3f94-4cb6-a324-d20ffeebed20", "sighting_of_ref": "indicator--06cfeed6-cc6b-42c7-878e-35a9ee641d28", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03bba29-35bf-40a8-a147-4866e7321e8b", "sighting_of_ref": "indicator--a1226d9f-79f7-4690-8df5-458c410c344f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a98d04-6c0c-41f7-99d0-6cc23756a32e", "sighting_of_ref": "indicator--a1226d9f-79f7-4690-8df5-458c410c344f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8d9dc9-46bb-4768-840d-df596bdfe7d1", "sighting_of_ref": "indicator--7512c883-57b5-48b9-ab26-c6d061178f47", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b91f38-a481-4325-bc95-fcb02f892a01", "sighting_of_ref": "indicator--7512c883-57b5-48b9-ab26-c6d061178f47", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fb472e-7c95-4382-a85e-1e54662944bd", "sighting_of_ref": "indicator--7512c883-57b5-48b9-ab26-c6d061178f47", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21c3f7f-0b99-410b-b493-5ab86e02b403", "sighting_of_ref": "indicator--1468ecf8-44b5-4a2c-add7-c9e643ed9919", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1074e4d-d469-43e9-b703-88090faca07a", "sighting_of_ref": "indicator--aa7bcde6-9c5c-4514-835d-1da6bdf90439", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23266cda-2066-4a27-9b18-2f075c959f0b", "sighting_of_ref": "indicator--aa7bcde6-9c5c-4514-835d-1da6bdf90439", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58d6942-3cb9-4654-b47c-8c9795e4462b", "sighting_of_ref": "indicator--3047ce64-37c6-428f-b9b6-dba2007004cc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a00162-8b45-4c27-9299-40b6c0eea792", "sighting_of_ref": "indicator--3047ce64-37c6-428f-b9b6-dba2007004cc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4769fbe-cf3c-48f9-a07d-c9527f91e479", "sighting_of_ref": "indicator--7ab3abd5-0d56-4b7b-9146-43bb537ca768", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f57d020-4d1c-434b-ba57-8aac795dba8d", "sighting_of_ref": "indicator--5a26c529-afcd-4793-9d12-6da43fc83cca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bb2e61-3365-4b9d-b3c8-9a7c3983539f", "sighting_of_ref": "indicator--d778b24d-eb1f-4b97-afbd-5ae98ad0b78b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0cb2a3-cc60-4d6a-9dae-c82101302cd0", "sighting_of_ref": "indicator--01c90757-9016-48e7-afa1-98561849df52", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a83d6ca-db01-400a-8aff-f4ee2f30b593", "sighting_of_ref": "indicator--5d5ef1fd-ed2a-44d8-ac75-6612de82677d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b6ef7d-99c1-4a0e-9a10-3861b4c50457", "sighting_of_ref": "indicator--5d5ef1fd-ed2a-44d8-ac75-6612de82677d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b0a8d1-a58c-4a0c-abc0-f41a47a877f8", "sighting_of_ref": "indicator--7919c4b6-2269-49df-a46f-8a13ae9e308a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b641bf-55b7-453e-98fb-893489ed1e16", "sighting_of_ref": "indicator--7919c4b6-2269-49df-a46f-8a13ae9e308a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede781ea-b85d-4b90-8e04-372d141462b2", "sighting_of_ref": "indicator--7ddf07a8-76bd-45ce-874b-ab759ed6e584", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71c8466-6b89-4258-9b41-6cc8654da496", "sighting_of_ref": "indicator--2c62f281-a6c0-4668-88d8-0ff8a7b607c5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96002c6-c4a1-4caf-9ea9-1c87b0f13024", "sighting_of_ref": "indicator--21261335-befb-4b33-aebc-60472c4c25d2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b992e71-9c2e-4b2f-a727-70c61c874db5", "sighting_of_ref": "indicator--2adc5a88-51ed-4270-8a0a-89505ed92d36", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760f634c-e73c-43fe-8aed-45ff86ede53d", "sighting_of_ref": "indicator--595e4bf1-6f80-4b91-8277-315199b49af9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0326fd-3814-463e-b1db-9edf1889c87c", "sighting_of_ref": "indicator--595e4bf1-6f80-4b91-8277-315199b49af9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b213ba3a-0135-40a0-b69c-c9562e3d2654", "sighting_of_ref": "indicator--6a0b8f15-6d01-49ce-843c-39db60efd7f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9eb33a-7670-4054-9e3f-39e0ea08189d", "sighting_of_ref": "indicator--6a0b8f15-6d01-49ce-843c-39db60efd7f4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceca0952-fea6-488c-b079-66922eec9284", "sighting_of_ref": "indicator--88427d09-3cc5-4900-81a0-7b692ad9c795", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc4eddc-91e3-4a6e-b058-52bd5338a202", "sighting_of_ref": "indicator--22e9f9bf-09e8-455f-9cb4-7e5a8804da7d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22927c98-8035-4ce8-b0ad-1c6eb31d70eb", "sighting_of_ref": "indicator--22e9f9bf-09e8-455f-9cb4-7e5a8804da7d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a840d2df-5a42-4dc9-a5ef-2bcd7a44965b", "sighting_of_ref": "indicator--e5f27974-c1e0-485c-bf0c-50e0b657e6e4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9afc40f-d386-4bcd-87f3-f10837ec3cfc", "sighting_of_ref": "indicator--e5f27974-c1e0-485c-bf0c-50e0b657e6e4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fb8bb6-244a-4739-bd25-6033a0353992", "sighting_of_ref": "indicator--e0f05e88-2721-47f8-90ea-24947cb80b59", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f224145f-33b5-4abc-b4ad-dc597f2bfc54", "sighting_of_ref": "indicator--7acd8adc-4d17-4331-b764-5bebf9e3ec29", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e24b27-36b0-4929-a493-f935e592932a", "sighting_of_ref": "indicator--7acd8adc-4d17-4331-b764-5bebf9e3ec29", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025c5e1d-f240-43d9-8eea-f7555919a303", "sighting_of_ref": "indicator--0500990c-80ce-4681-90eb-dea3ddb591e2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b929204b-5736-4e11-bbb5-bd963ba814fb", "sighting_of_ref": "indicator--0500990c-80ce-4681-90eb-dea3ddb591e2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5128fe56-8976-4a57-aac4-421b70f9a3a9", "sighting_of_ref": "indicator--5a67d4e8-9da2-4abb-90f8-651354732b79", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4870545d-b017-4f6d-9bfe-b2dd7ad13fc7", "sighting_of_ref": "indicator--c69138d7-364f-4a51-8a17-cde747d98ed6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1510d3-077f-4388-b8f8-81555748f9d8", "sighting_of_ref": "indicator--8687caac-eacf-45f0-b166-5cb8f64dc8f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5197696c-266c-4f7f-8682-805f6873cb96", "sighting_of_ref": "indicator--8687caac-eacf-45f0-b166-5cb8f64dc8f7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39d877e-d876-4f67-abec-c159b6720ffd", "sighting_of_ref": "indicator--929fb1b1-2de3-436d-983d-f27c787c2e25", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59c0212-0786-4155-bbad-55cecc28a5da", "sighting_of_ref": "indicator--5457f5e1-6104-46f3-861d-ad498f9327bc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd7e5d4-89e7-4f8e-a9c8-140f222a03ec", "sighting_of_ref": "indicator--5457f5e1-6104-46f3-861d-ad498f9327bc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4883913-15d0-4a21-913b-056af5438235", "sighting_of_ref": "indicator--4919b8c8-5b69-4f23-8a48-3deb40c0a3f5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4114d96b-313f-4bb3-9756-0b2a18e2c983", "sighting_of_ref": "indicator--4919b8c8-5b69-4f23-8a48-3deb40c0a3f5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2fec9f-a1f4-4135-813b-7b29880af33e", "sighting_of_ref": "indicator--4919b8c8-5b69-4f23-8a48-3deb40c0a3f5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4641e0-bb73-4e48-a0c1-0d937c4c5957", "sighting_of_ref": "indicator--8ff27550-1f44-4098-bde5-81b0f9994129", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4214e8bb-7f9f-411b-ab79-bf9d6087b32a", "sighting_of_ref": "indicator--8ff27550-1f44-4098-bde5-81b0f9994129", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ca3250-95f9-4af8-b7a8-1ec82ff6dd1a", "sighting_of_ref": "indicator--8ff27550-1f44-4098-bde5-81b0f9994129", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c900d707-8b7c-4d4e-8b5a-150eebc54935", "sighting_of_ref": "indicator--4cb7f6cb-0492-4af2-8538-dabbdcfbbd2a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c4c433-35b8-4c97-bfd5-eef6b6826272", "sighting_of_ref": "indicator--4cb7f6cb-0492-4af2-8538-dabbdcfbbd2a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc40393a-105e-4815-a973-9efcd2e4956a", "sighting_of_ref": "indicator--4cb7f6cb-0492-4af2-8538-dabbdcfbbd2a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ac1705-c7d3-45c8-8d51-44728419cb28", "sighting_of_ref": "indicator--165ee0af-60ce-4e73-a6a6-65cbbbdf63cc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719ed6db-8735-411a-9dea-837d27d0181a", "sighting_of_ref": "indicator--5a5e2a90-f017-49a9-851b-8eae1b5f0de4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d444ca1-9cee-4113-bf1b-8ca432c040af", "sighting_of_ref": "indicator--5a5e2a90-f017-49a9-851b-8eae1b5f0de4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e535180-b717-4757-8d5e-e5506795ef0c", "sighting_of_ref": "indicator--beefb9d6-1b0f-405d-a630-f99ec43c9d89", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f598ad8-0d54-4a25-8cc4-98f6cafa28fe", "sighting_of_ref": "indicator--4641193e-c9e7-4516-b5ac-07dc4b8db36b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf1779a-d1d7-4481-a412-7a687c888f40", "sighting_of_ref": "indicator--d4573a0c-b3ea-475a-bb02-9e390b48aa72", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1eb4573-f755-46e3-a8e8-73ba8b60e927", "sighting_of_ref": "indicator--08470a9e-8699-44cf-888b-7e9c30dc00f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353f9147-431f-4ba8-9d2b-f96b33bf10a2", "sighting_of_ref": "indicator--5be91e8a-68f1-4a12-8f5b-d49d8bbf48ee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b24c23-d358-44b9-92bc-5c36962f64e4", "sighting_of_ref": "indicator--e03e3b74-44ec-48f3-b210-6573bf18efa7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6adc8978-eb4d-4e1f-a568-bc627ed792b4", "sighting_of_ref": "indicator--5472e0fd-403a-4d18-9e72-3ba3aac8b3bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d77ac8-c89f-4860-8278-1f0c3a4dbbaf", "sighting_of_ref": "indicator--f7dd477c-ae03-47b8-b657-7b2d4fc0d072", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2cd65e-2628-47c7-ac2e-962cdc6a81f5", "sighting_of_ref": "indicator--54968270-9ba1-4b02-b64f-bf9e4ea4b8a6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c70f72-0e11-4cdc-a574-685fbddb9f87", "sighting_of_ref": "indicator--5f8e362f-a366-4ae8-b56a-c9e3fa555a4b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76730ea-ef5d-4bd7-986b-8f1576a83c9b", "sighting_of_ref": "indicator--b58bd99b-abf2-4cb9-9e20-bdf3dab3f9ed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c878746-3ca5-4f89-95a9-bf0823209445", "sighting_of_ref": "indicator--67b6c2c1-a70a-4257-8496-983c50a90f5d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d301f7-17d5-4d99-af41-58138c9f9770", "sighting_of_ref": "indicator--2b5ec899-7109-4384-a4fc-1ac872c92213", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa6d182-4a32-449b-9873-6c1366919c25", "sighting_of_ref": "indicator--1638ba3e-b17b-4bfb-9255-3177aa03aeca", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e81176-1058-4756-8b38-c8cbf24b2b64", "sighting_of_ref": "indicator--31dffeb4-410c-4009-ba72-154b9d1ed618", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd978db-8e92-4bf7-978c-769c6dc372ba", "sighting_of_ref": "indicator--ebf20e97-fc1f-4da7-bcde-70b08c93f722", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dac3a65-bd97-4571-a3a2-ab6aef212cc0", "sighting_of_ref": "indicator--cdc8d51c-41f5-45e4-aacd-0256e471867b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f5130f-0f19-4216-9583-bf79a11bde28", "sighting_of_ref": "indicator--cdc8d51c-41f5-45e4-aacd-0256e471867b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b87e849-e09a-4b4b-ae22-251ec6909b1b", "sighting_of_ref": "indicator--6e1eed55-6e48-4a06-adc1-8028c637b754", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0c4050-37b3-41ad-b300-aff882a3c5a0", "sighting_of_ref": "indicator--8b693a52-15d2-4c46-8b59-710efd32485e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b058e2e5-8ab7-46ab-91dd-23ed8987446e", "sighting_of_ref": "indicator--8b693a52-15d2-4c46-8b59-710efd32485e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5999240c-4f3b-4238-9558-69cd55ed45dd", "sighting_of_ref": "indicator--8b693a52-15d2-4c46-8b59-710efd32485e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931f76f0-6d10-4fbd-ae90-ff17593abb96", "sighting_of_ref": "indicator--1dd76bcd-5834-41d6-b665-8e1d11f8371b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e411ee-0697-4cb2-8b9d-44626ca225f9", "sighting_of_ref": "indicator--1dd76bcd-5834-41d6-b665-8e1d11f8371b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9f05f2-4af0-4fce-8430-2977e60052f7", "sighting_of_ref": "indicator--1dd76bcd-5834-41d6-b665-8e1d11f8371b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e89b06e-ffad-4c95-81fc-f6c0317b943f", "sighting_of_ref": "indicator--093b1062-7bc7-4698-b0b5-1bc901fb2334", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187ebb06-7228-426d-90c6-c2c2fb7c4319", "sighting_of_ref": "indicator--fc082faa-69fc-41b9-a883-e4cf6c076f6c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3750a4-1983-40c4-abc6-85e82373e9cc", "sighting_of_ref": "indicator--3390f50f-0d24-44fc-9366-24d5d2e46c5f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586dc728-2e94-4b96-918d-f880d6033121", "sighting_of_ref": "indicator--b479be96-05bb-4cb3-82a4-577bd75cf806", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963e3e72-3534-4b0f-a68f-4ee0d8f2e73b", "sighting_of_ref": "indicator--5cd117a0-cebe-448b-9ea7-20269e4c781b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54476152-6161-4a28-9bbd-33aeec6c3314", "sighting_of_ref": "indicator--a6a69474-0adf-407a-b3c9-07739339e915", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3123ecc-9eac-4155-ae85-c4b0a2080ae9", "sighting_of_ref": "indicator--3b6b5125-3b88-4a9e-aae3-781ec99f387c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fb7f08-79e5-4d57-83fb-4264361e0998", "sighting_of_ref": "indicator--d84113d7-fd09-4ab9-a94f-a4c6a1530c30", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3daf32e-64ed-437c-8e84-32c97a102766", "sighting_of_ref": "indicator--975e348b-7fa2-4810-a1e1-f3d1505bc95e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed965554-b0a2-4ad0-9db3-6290f27b349c", "sighting_of_ref": "indicator--c78bc188-d78e-4e49-bc90-7721463f6290", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f993916c-fe6c-4ea5-8503-12f701ffe91a", "sighting_of_ref": "indicator--c78bc188-d78e-4e49-bc90-7721463f6290", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1545937f-8dcd-4798-b768-2f35c438c6cc", "sighting_of_ref": "indicator--22c42e61-16df-4c44-9cfb-97041ab35be7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bc5985-e429-43ca-aea8-4b167a541f6d", "sighting_of_ref": "indicator--c41f21ee-a32a-44bb-a651-eff9acb84e93", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784dd31b-74f4-4e8a-937a-027a20990348", "sighting_of_ref": "indicator--c41f21ee-a32a-44bb-a651-eff9acb84e93", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36a033f-8f60-4c47-a7d4-3bfff4788baa", "sighting_of_ref": "indicator--c41f21ee-a32a-44bb-a651-eff9acb84e93", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a1a470-b267-4911-8d68-6084488bb71b", "sighting_of_ref": "indicator--d019e094-4f6b-4852-98e4-328e2ce78c86", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5276dbee-c638-4394-8365-27281860b9d3", "sighting_of_ref": "indicator--d019e094-4f6b-4852-98e4-328e2ce78c86", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39941f72-ba1b-4f57-b91b-a97f3aa29490", "sighting_of_ref": "indicator--75f751b2-9f97-4dfa-b3c2-f177efdfc667", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475b0811-0bba-44ff-a318-538772af857c", "sighting_of_ref": "indicator--75f751b2-9f97-4dfa-b3c2-f177efdfc667", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0733caa7-6e30-444d-b0e8-45f703325186", "sighting_of_ref": "indicator--f7b8738f-3658-4679-a98c-59ef5c0cbdd4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547b5361-6e1b-475a-b84e-d298a6c64ec9", "sighting_of_ref": "indicator--6ea5f274-97a6-4ec5-b478-0d665e4f2aec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d9fba1-9d2c-4855-b81b-2555d8b7b6d6", "sighting_of_ref": "indicator--6ea5f274-97a6-4ec5-b478-0d665e4f2aec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15c056e-6a31-4227-a6c2-a0b777af320c", "sighting_of_ref": "indicator--8fd33d78-8a8b-4004-9585-54afc7dbd518", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ea6c4a-54fe-4a4b-8473-68bd9819bab7", "sighting_of_ref": "indicator--cfcfb351-61fc-42cf-b703-7fab105f0e0a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce3e378-b0d6-4729-94d4-33bc6dbc4211", "sighting_of_ref": "indicator--55d250c1-33e4-4148-b476-8c659952b938", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d9ca3e-df22-407c-af56-8ff079268871", "sighting_of_ref": "indicator--64e9bc64-ce7c-4d74-b41d-d971d1b90cd3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565bea1c-86cd-464c-986b-00a2584af4a9", "sighting_of_ref": "indicator--439a8eda-82a4-4d1a-af8e-9b1cd93d3a2c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aad6ffd-8ff2-4d78-93ae-8686abe72f9d", "sighting_of_ref": "indicator--4479219e-a243-4ce6-9b9d-846c1b66b8a3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e22ec0-96fd-489c-85ed-1a1c07af5c5a", "sighting_of_ref": "indicator--079fe049-3f22-4aaa-b7ca-8ed2ae3a8cf0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02a6051-e638-49d7-89cb-d6d80cb0d60a", "sighting_of_ref": "indicator--65e384a9-6fe2-48e9-bb85-b025b7e15f3c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2eeed89-e4cf-4a36-adf2-2f40e85544bd", "sighting_of_ref": "indicator--284284d8-9b14-4183-93cd-a3869ff345f9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70fc27d-c5b3-4933-b083-9ff4d5d09341", "sighting_of_ref": "indicator--7655acc1-e9e9-4d44-a634-5416e5f663d9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c72f6ea-3e1e-4c01-98c4-1f7cda09c3ec", "sighting_of_ref": "indicator--f27e54a7-99e7-4240-baaa-5081b5b522b3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da2e7bc-d4a0-4ab8-a114-eb9847f4318f", "sighting_of_ref": "indicator--f27e54a7-99e7-4240-baaa-5081b5b522b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bf925d-f59d-417e-8d4d-2bfe080aa6eb", "sighting_of_ref": "indicator--4a2bb04e-dd8f-4328-b8ef-ed189f1099cd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd90d1a9-e00d-4055-82bb-ea3376cb7b2e", "sighting_of_ref": "indicator--80bcb0f4-0a48-4501-8615-42cde5acee91", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79ce634-7ab6-4e56-bb1b-dfa63f4144f8", "sighting_of_ref": "indicator--eeb5ad84-e1c4-4494-b144-41cebd1d959b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3199a51-80c5-4e15-9ff2-d4a1404a0f98", "sighting_of_ref": "indicator--8b217bcc-d768-426b-93d4-cc70ab1db134", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27b19a0-a044-4cd0-b7a4-9597ac545eb5", "sighting_of_ref": "indicator--8b217bcc-d768-426b-93d4-cc70ab1db134", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b320a19b-1383-40cf-9a76-25f2e702d862", "sighting_of_ref": "indicator--d597dce3-3e0e-4777-a627-cb31113f99cc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd55444-a9e4-4a07-88f8-d0f64caae7cf", "sighting_of_ref": "indicator--a975c818-18e5-405a-a507-d36fd56966f9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b4b38a-1c71-4c0c-874f-4b862306786e", "sighting_of_ref": "indicator--a975c818-18e5-405a-a507-d36fd56966f9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e99fc65-8eae-486a-8f54-9f3a8853a17d", "sighting_of_ref": "indicator--a86c0497-96fd-4e95-bbfb-8d907234afbf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f77b87-ade7-4618-a6d0-2b2d6e6ad956", "sighting_of_ref": "indicator--a86c0497-96fd-4e95-bbfb-8d907234afbf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d2b789-6c8b-434d-af33-ca46b5847159", "sighting_of_ref": "indicator--dc5c0cc9-37da-4255-904d-31d8a46e8dff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb077df-1f47-4785-a8c8-c1ffa1ccb0c6", "sighting_of_ref": "indicator--dc5c0cc9-37da-4255-904d-31d8a46e8dff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cac0eae-cc20-46cd-9ffa-785affb6f037", "sighting_of_ref": "indicator--e769d10b-36a2-4f0b-a345-15e700d6acd2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05acefb8-18ef-49b3-9bfc-02b4cb46082e", "sighting_of_ref": "indicator--3978fae9-db0d-4f50-8311-daa219bd8099", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb90a1c2-ba60-4c2d-870a-9dad86834cbd", "sighting_of_ref": "indicator--3978fae9-db0d-4f50-8311-daa219bd8099", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e382a9-6669-4dfb-84bc-39a91211f558", "sighting_of_ref": "indicator--33b369bf-19c0-4b81-9975-2cff4514efa1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf125e1-59f4-4f0f-990e-b83d2d07e47c", "sighting_of_ref": "indicator--ab49450a-0b14-42f3-9d5c-40337ffeb4a0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40f86fd-af14-43ae-8615-8f818ba85684", "sighting_of_ref": "indicator--a2147772-0731-4009-bfc1-0f12b58fbaab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4294091-5513-43ae-859e-d4788cc532c7", "sighting_of_ref": "indicator--5eb36c73-34e3-4667-a54c-4c05ad9afa9f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd78b10-c421-4f11-ae29-2eebdabcf037", "sighting_of_ref": "indicator--5eb36c73-34e3-4667-a54c-4c05ad9afa9f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ceb632-5cf2-4f78-ba26-8c6de54b7073", "sighting_of_ref": "indicator--35bf8907-8a2a-4d98-ade8-1e62ac4c2aba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11854646-2232-4f4f-a2ac-8f295fb44635", "sighting_of_ref": "indicator--db9f8e1c-0a76-4cfd-8f93-b58e1b14e217", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004633ed-ca70-4624-aa38-fb71e26b3c61", "sighting_of_ref": "indicator--d3196258-8adf-4b1d-83d7-72304c7abbc7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528df9eb-3843-4e5e-9e4a-1aa8013c370f", "sighting_of_ref": "indicator--5c443bda-7245-45b2-bbc8-8df574d56f17", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab091e4-3a0e-4f83-bafd-4139bab4a32e", "sighting_of_ref": "indicator--cab934b6-475d-4ce4-9315-e11621029096", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afba521c-6aaa-4b2a-8a7b-4d63f318ed14", "sighting_of_ref": "indicator--cab934b6-475d-4ce4-9315-e11621029096", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102dd399-b31c-4d55-9e55-3751739307d2", "sighting_of_ref": "indicator--cab934b6-475d-4ce4-9315-e11621029096", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3e83df-ca44-4318-ae28-28dcde72c76e", "sighting_of_ref": "indicator--f3982b92-9402-4d05-af33-19e17d34fd72", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c81b040-bdfa-4425-98e5-645024ed1129", "sighting_of_ref": "indicator--c6ff081a-4df6-4b91-a052-33c20a675759", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb280102-0bc6-4539-837f-8d9b4e2713e9", "sighting_of_ref": "indicator--d6f5948f-a844-4674-a4b1-3e21c9295a16", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5114d7-2579-4372-9e05-2a5fd4aeffee", "sighting_of_ref": "indicator--8f39f8c6-a035-4a6d-9477-654eb0811c6e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7727bd-2b2b-4156-81d2-1c6d9f65bbcb", "sighting_of_ref": "indicator--799803ab-3d24-4545-896a-b79ac38fd230", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af03318-865e-4f6f-b21a-38f02bd00583", "sighting_of_ref": "indicator--9979c663-8812-4d68-b161-86723d4bc1db", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9188b22-9b7f-4ca8-b4ea-06f013797016", "sighting_of_ref": "indicator--b7557ab5-b728-4976-8d11-135fe8377963", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e65bf1-1312-4233-8f97-49266b0dc4cb", "sighting_of_ref": "indicator--b7557ab5-b728-4976-8d11-135fe8377963", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0390966e-f3fc-4375-97d9-c4a2a3f5467b", "sighting_of_ref": "indicator--d7a89596-10b1-463f-8c18-ec7b55ac77e3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c6bf10-6085-41f0-8f23-342855b2a853", "sighting_of_ref": "indicator--d7a89596-10b1-463f-8c18-ec7b55ac77e3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6caba429-3b6a-4cda-a43d-25ae73b1ef51", "sighting_of_ref": "indicator--a2701fa5-1845-4247-8d91-419658060e8f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c723b207-b04d-4efd-99bd-51ef1a0d6b80", "sighting_of_ref": "indicator--02a4f26e-69e9-49bf-912e-675e4d892bca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b40a58-7cb3-4e48-9d36-e08d78953a4d", "sighting_of_ref": "indicator--563152bd-a3a4-4914-b239-ccf7400d56bf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393f1713-6d25-4195-8e66-6d0d1e84aa52", "sighting_of_ref": "indicator--8016f941-ac27-4b21-9e1d-33235a83148d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ecf9cd-7451-4036-9510-9caeb9242b9f", "sighting_of_ref": "indicator--adff211a-cb26-4153-962c-9ff2a195b30f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688a0cf2-dd16-4cce-bda1-ac0efbd3bf25", "sighting_of_ref": "indicator--adff211a-cb26-4153-962c-9ff2a195b30f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a49360-6134-4478-8f2b-757e961e2f13", "sighting_of_ref": "indicator--b37d1fa7-a97d-4f27-a7ca-7d5ef37538ae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242f359e-2d4b-462c-ae0c-6004cd8a871f", "sighting_of_ref": "indicator--9f5cfce7-f8ba-44f0-bf32-e7f361b95a10", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5815be22-2087-4548-b618-6a7da3ad1f38", "sighting_of_ref": "indicator--9f5cfce7-f8ba-44f0-bf32-e7f361b95a10", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab15b5b-ae00-45b9-b038-a0e96f545eae", "sighting_of_ref": "indicator--9f5cfce7-f8ba-44f0-bf32-e7f361b95a10", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfe00c4-50c7-493c-9f80-01ef7cefd933", "sighting_of_ref": "indicator--cde339d2-5739-4444-9d99-315b88fdada0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ed79e4-e6a7-4c74-acda-f0633dd0b710", "sighting_of_ref": "indicator--cde339d2-5739-4444-9d99-315b88fdada0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd0dfb2-784d-46bb-8f2e-b9a362d99df7", "sighting_of_ref": "indicator--cde339d2-5739-4444-9d99-315b88fdada0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3298ff8e-51e9-40ae-8a5f-08986d4fe610", "sighting_of_ref": "indicator--fc725edb-de04-4215-ba18-815bb86f7f35", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc380260-d3a3-43fd-8020-b5166b9f2330", "sighting_of_ref": "indicator--05cde682-f752-48ec-9d21-a0ae70c1677d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3bedbc-537a-4635-b6b4-a8248de84d75", "sighting_of_ref": "indicator--05cde682-f752-48ec-9d21-a0ae70c1677d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28970e50-da9d-48d4-805b-8d601c208630", "sighting_of_ref": "indicator--3de9bbbe-5cf0-4bf8-82ef-b66eb2fc3cd3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5f36aa-a15c-4c40-811d-3a41bfaeeca1", "sighting_of_ref": "indicator--3de9bbbe-5cf0-4bf8-82ef-b66eb2fc3cd3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c151ff1f-68c6-4495-9774-cfe92a52cb5c", "sighting_of_ref": "indicator--9176ecc1-6eeb-4faf-af55-ddcf12481fc7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db51434-1d3f-48e4-9e1b-9974c289b60e", "sighting_of_ref": "indicator--5f5bde51-8ba2-487c-8a97-35967e05b4e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a46c167-6ae2-45bc-a058-807bdaff261c", "sighting_of_ref": "indicator--210f0cb6-155d-4a42-a24d-c3299bb7a9c9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07f5e59-e204-49ce-9a21-1d933634f1e1", "sighting_of_ref": "indicator--6fb67191-fda4-4d5c-8ddd-d98364037098", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697ac3f0-c790-4566-870e-858a3828e648", "sighting_of_ref": "indicator--3d3abf66-1781-4ed4-bcdb-ece1779cc941", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0b387f-8a11-45ab-b2a0-bbcc5b283e94", "sighting_of_ref": "indicator--369a8b8a-984e-429a-b55d-16c24cae8f59", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cf620d-1563-4b9f-a8c7-a671a5a5b979", "sighting_of_ref": "indicator--5d678846-e51d-4ab1-8a69-e7d0e48da823", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62b7fd4-5740-46eb-87f4-5c6a3d9ec7b3", "sighting_of_ref": "indicator--5d678846-e51d-4ab1-8a69-e7d0e48da823", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb67458-d047-43ff-8df7-b57bd8384732", "sighting_of_ref": "indicator--5d678846-e51d-4ab1-8a69-e7d0e48da823", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17214e86-c52d-46a5-a396-278399c37845", "sighting_of_ref": "indicator--3a4f2bab-0a97-4336-bddb-2fe162805dd6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b266318a-32f5-47d5-a0a4-1424cfd94009", "sighting_of_ref": "indicator--3a4f2bab-0a97-4336-bddb-2fe162805dd6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce214de-b778-4eab-a89d-918fa2124ce9", "sighting_of_ref": "indicator--a0b6f99f-8d96-4a58-8e10-9ad707bd9621", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b1a427-702c-4745-8fb7-211f06f7f640", "sighting_of_ref": "indicator--c19099c5-a9ee-4f0a-862b-2789d32967b4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67143840-2b67-43fb-a293-ac8efa202181", "sighting_of_ref": "indicator--b532e3ba-95e8-4d62-95ba-1d9dbff37cbe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c80853c-7b08-4469-ae24-36b9c1230c41", "sighting_of_ref": "indicator--b532e3ba-95e8-4d62-95ba-1d9dbff37cbe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e1d8a9-e734-4380-b739-bc3bc5284baf", "sighting_of_ref": "indicator--86e3f608-32db-4f43-ad5e-e46b857a3137", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75439ea-cd1a-4423-8b6a-98bdb8f42f30", "sighting_of_ref": "indicator--bbf17b05-df1b-45e0-a0c0-b52ebee36ac7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa10236-94ee-4f77-a1e3-170994631389", "sighting_of_ref": "indicator--81698486-a6e1-49b5-9b9b-914b59b1fe49", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25adaa0-9992-4585-abd2-2536c8778803", "sighting_of_ref": "indicator--81698486-a6e1-49b5-9b9b-914b59b1fe49", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e66ebff-4034-42c6-97d2-2428014a0e0b", "sighting_of_ref": "indicator--6dc53b76-eacc-460f-9b99-3c53d5e18fb0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bca600-41de-43a6-b79a-6d75819aac1d", "sighting_of_ref": "indicator--55697847-298d-486b-9716-bc3eb0ac5710", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3ca1e6-bb60-4484-88e0-6efa72bb6b68", "sighting_of_ref": "indicator--079e2037-3559-448b-ab21-49341ee4d3c8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd8a1ea-df52-4d6f-ae83-5d52bf85ac44", "sighting_of_ref": "indicator--9216ddb7-32d8-4292-a494-cd5f265b403c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2ff6ea-9712-48a1-bf00-7dd073ccce91", "sighting_of_ref": "indicator--0236d93b-504d-4229-b8f1-f0d66a97444f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9cbb9d-e1aa-4086-a74a-7ca25e7380d8", "sighting_of_ref": "indicator--5262ed89-9820-49bc-9811-2f8f32314b47", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf360d54-94df-440e-8e37-582426f0a6a1", "sighting_of_ref": "indicator--f32df108-a42e-4d41-b8fa-b3f3d658e168", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d696adb-8b06-4a70-bd6a-a840464d5a37", "sighting_of_ref": "indicator--58708c6a-fdbe-4efa-8fc8-f08791a96035", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7274f59b-37de-4613-b6a3-0611950264a9", "sighting_of_ref": "indicator--bcbb71e6-6be0-47e6-852b-6af581583fd7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d334adf-1fe6-4b02-88e1-03863ea60dad", "sighting_of_ref": "indicator--243d40f4-1874-4420-8b45-b95ffba239cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ebb753-05b1-4a09-b79b-53ef71c1a876", "sighting_of_ref": "indicator--ec909ecc-8494-4f13-8271-0d92df615cc7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47bc475-a7b8-4297-8a46-81eb797e7b5c", "sighting_of_ref": "indicator--e052495c-b899-46f2-9c09-a08988230221", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33a2d00-c097-414b-aeda-210a53360129", "sighting_of_ref": "indicator--d853c0be-45b8-463a-b835-3d99763f1d96", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c14090-9bd9-4ba5-a62c-d1b778255589", "sighting_of_ref": "indicator--99b8d1c6-3bf8-4f7e-bbb6-50d855539d24", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8022332-607f-4bc7-8615-668fc941e4ac", "sighting_of_ref": "indicator--2e0da7ab-b6c8-483f-a9c1-c4c4a336ba99", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12cddac-d17b-4e2b-b5f5-248b1bbff2b2", "sighting_of_ref": "indicator--8138a018-9516-4fcb-8d6b-9ce04dbdc14f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb7fcb4-f9e8-462e-bfa3-d68200b9520f", "sighting_of_ref": "indicator--c1e6e785-d05e-4f4f-a078-1c840663c12c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e071135-55b3-427b-87bc-1c66d394cb2a", "sighting_of_ref": "indicator--6978f4ef-f766-4f9d-914f-e6380055d456", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f3a7ab-dcef-4617-84a5-4bb9825a96db", "sighting_of_ref": "indicator--77bd7dd8-8139-4b69-92fd-95ac853069a4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a437052-19fb-4c6d-b823-eec9f3ee3cad", "sighting_of_ref": "indicator--f3c07537-e89f-4f0d-ad43-4559e16297ac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7123b15-5376-43eb-bc5e-c9f215d419e6", "sighting_of_ref": "indicator--c28b55b9-49ca-46bb-b7e2-8c57b89847ee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bcf4f8-f55d-42c1-a20b-9f35bb7577f4", "sighting_of_ref": "indicator--ebaa5411-f26d-4810-831d-fdb6e26fca4a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3020f2d-be41-495b-9f53-475b59fbdbc9", "sighting_of_ref": "indicator--89e73932-6b59-41eb-839e-e2d1b2fb9b20", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24177855-e1d5-4d46-a97b-e39c8d77b7bb", "sighting_of_ref": "indicator--2aeea9a9-1f55-4416-b4b1-7d55ddeda6b8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8212bb26-381d-4d49-b3bd-187564d2cc06", "sighting_of_ref": "indicator--511e72ba-e819-4450-b7a0-d4c9011b2356", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ff1011-7f09-4141-b2cd-a27bca0a6a9b", "sighting_of_ref": "indicator--26eaf4c8-6584-492b-a21d-dd67ca628959", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8fe254-1751-4b6e-9956-b17653e53744", "sighting_of_ref": "indicator--0829245f-92a8-4f28-8e59-2f4fdbbae245", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a56a3e-6a58-4751-9e09-38a32358d387", "sighting_of_ref": "indicator--05c3f37b-2c97-4698-b48a-3ef807fe18b9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86baba9e-c998-4bc3-91bf-3909380dcd55", "sighting_of_ref": "indicator--152bfda4-b597-43ce-8afb-b19c0045e82f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3390ff4f-bc7f-4504-a1bd-8480051ac658", "sighting_of_ref": "indicator--540fa3d1-b683-4b8b-bd45-1be7f58f5d81", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b59e96-f47f-4d9e-9976-6388964de7e1", "sighting_of_ref": "indicator--8e84aad8-f663-4933-91ba-34a5ec52becb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595d9d1e-d8f6-4a74-b733-7d8efd53ca76", "sighting_of_ref": "indicator--0453bbd3-3535-4ef1-8bcc-d127508399bf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc9837b-83f8-498e-82e2-e83b494c0ea8", "sighting_of_ref": "indicator--f3982bc5-744c-4a02-8968-ae6bab7f3be7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e34750-c59e-47a7-925e-40a6f3aa17a6", "sighting_of_ref": "indicator--1e13ca38-5292-4ca4-b542-e52abf1cdd9f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae258742-eebb-4d23-b1b1-194d7cf07c4b", "sighting_of_ref": "indicator--3dbb6b33-ba01-48b8-a4b5-e24be4122cdd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5ab988-c546-4b22-8cf9-739e73dca8ea", "sighting_of_ref": "indicator--17e95a35-8afb-4778-98d9-adb64052c14e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1fa9d81-051f-4d10-99f1-0db0f9b5f5ff", "sighting_of_ref": "indicator--ad869dd6-4008-4981-b592-127c4998ad4b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe5d2f2-349d-405f-aaf7-fad47e444651", "sighting_of_ref": "indicator--4d450089-e792-4cb5-abe3-0285324b18ef", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86bd615-ae71-4272-b1e5-273438bc1ac1", "sighting_of_ref": "indicator--8aee888c-9ca0-4803-b831-5d621747d134", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e85113-4e16-404f-9541-15fbc4b91f92", "sighting_of_ref": "indicator--b50b3950-542a-4054-bf08-8aba28de8c99", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9c00af-205c-4dfc-90e6-fe102d5d377b", "sighting_of_ref": "indicator--f27fc4b6-cab5-486b-987f-008021445309", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6378b4dd-9990-4f5c-98e4-8e9d7a35bc28", "sighting_of_ref": "indicator--b1a8d6bc-bc96-47e0-98eb-e313427a15f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb1dea8-8e88-427d-9bad-0009e6711a56", "sighting_of_ref": "indicator--7358be0b-5680-4fb5-999c-88b9a0dd2c36", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e727b0-fdc2-4765-8457-c93413c849be", "sighting_of_ref": "indicator--e4970aee-31d6-4fcc-ba53-98dff41d3090", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85140f89-4b85-4864-acc7-de8dd1251786", "sighting_of_ref": "indicator--8a902e8b-34bb-45f9-8f5b-fa54d4d8a050", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e0862f-88fc-4e34-854f-97fb08d08dc6", "sighting_of_ref": "indicator--10854bc7-de2b-4779-90af-45990e666df9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdaee94d-e413-496c-8bce-dad371ffd8a4", "sighting_of_ref": "indicator--632eb023-82b3-4f3d-990c-6d9939725f19", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b292da7-ef55-41ad-a763-055bb887a1f9", "sighting_of_ref": "indicator--2b6b15d6-e437-4457-ba5a-3abcc2383897", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb48363b-238f-4f16-b113-8f80b48cf9d1", "sighting_of_ref": "indicator--4cdd1ec6-0ef2-42b9-8220-fda6a00244e8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aedd03c-d28e-4ec1-a475-8c1dcb213457", "sighting_of_ref": "indicator--133a311f-b36b-4ea8-8e69-8bcab802e51e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118e784d-ab68-45db-8786-9cc0c5ef2676", "sighting_of_ref": "indicator--a4de42eb-501b-4ec6-9316-d5040581c42f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c125fb4-5bb1-490d-8887-cceadee37d18", "sighting_of_ref": "indicator--7bd65eb8-dad0-4c72-9b09-24a81a48c339", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8d9b6a-7181-4470-9af6-3d001080a4a0", "sighting_of_ref": "indicator--74537246-bbf1-4867-bb45-1741d5de006d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b02c907-cc13-4d35-b63e-fc77ab48e272", "sighting_of_ref": "indicator--1980335d-6b31-42ee-801f-609fcb74d326", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90982c8-3a17-43a1-aa33-85a1cc521096", "sighting_of_ref": "indicator--878c747d-3b40-4221-9f3b-aee49b74b290", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76dc32fe-a482-4a3c-bed5-0bdab3668132", "sighting_of_ref": "indicator--90678c8b-d547-4271-8ea2-2be2d4f7e0de", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cd2e57-df08-465e-bdf1-4971fdc429ef", "sighting_of_ref": "indicator--97d61dab-24e9-418d-b1c4-86258567dee9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002c690f-2159-45f1-8b52-a4c2b81ffd47", "sighting_of_ref": "indicator--2630956c-7d8f-42c1-bfc9-2dca357b43f7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e528ea1-75db-4889-a76e-1d7fa7038603", "sighting_of_ref": "indicator--1a42093e-12cf-4fd6-ae86-db3c8c4c9c5b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccdcd35a-5144-4a23-a3e2-a506ab0377ad", "sighting_of_ref": "indicator--0189c906-8c46-4423-8a7b-3457b3e1387d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a541b7-a26e-46a6-89f8-5491d387999e", "sighting_of_ref": "indicator--d81a595c-8c57-4652-ba17-9c62b7b2ae05", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18a3615-0748-488d-bedb-a2deafe9297d", "sighting_of_ref": "indicator--e16ae6be-3fa9-4b27-b682-ed4803aa3c06", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709890b7-4a5e-48dd-8591-0d4fe981557a", "sighting_of_ref": "indicator--f24d74ee-a940-4691-aea0-4e894497df49", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80107eda-95ba-40ca-9eef-5337bdcbe95e", "sighting_of_ref": "indicator--cc93a795-9269-4b86-a19a-27d38e64472b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca3804d-becc-4e71-b14c-2c9a0c50a864", "sighting_of_ref": "indicator--34afb275-3ed9-4638-b412-4e32bd7b964c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b1a63a-e7ef-4e73-9651-ab6cad4a5d69", "sighting_of_ref": "indicator--f770bc6f-6858-44ca-96a7-723f886a18b6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fcefa30-5158-4e1a-91e3-f4e0931ce5e5", "sighting_of_ref": "indicator--ed8a3a36-c17c-4830-a127-aa3467629998", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe9d858-c326-4373-afc3-019df165ebff", "sighting_of_ref": "indicator--d6ba0e75-c020-45ae-b998-abf7482b3756", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c682305f-fdf0-4289-99ac-cc3f74978196", "sighting_of_ref": "indicator--e9243847-ec33-4a4b-b6c6-25a1aa9193a7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af025c7b-4bae-42f4-bcb5-4a814b99c1d8", "sighting_of_ref": "indicator--8f384bea-2e33-454b-b7b8-570d511abe0b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b887f24-b3a8-4e42-864f-ab4733a8ea05", "sighting_of_ref": "indicator--8b53ace3-0c04-4cc8-8d8c-e6f3dcc7be28", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c54c5aa-d81f-4e46-abd4-ba51e7b7b5e4", "sighting_of_ref": "indicator--8b53ace3-0c04-4cc8-8d8c-e6f3dcc7be28", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1aeac7-a83f-4948-8874-f234827643b3", "sighting_of_ref": "indicator--8b53ace3-0c04-4cc8-8d8c-e6f3dcc7be28", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945f8db3-a981-43cf-a061-09e1c56a2a41", "sighting_of_ref": "indicator--60377bb0-bc93-4f11-b020-d884b0f164d5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a78cfe4-3c20-41cb-9ee9-9b88f16cc500", "sighting_of_ref": "indicator--777b467b-3306-42f0-894b-a6a49e795d29", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6ffd07-45ec-4fb1-8f7a-9300b5fc69dd", "sighting_of_ref": "indicator--777b467b-3306-42f0-894b-a6a49e795d29", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b22c4a-7523-4fa1-b6f2-8ef8ec34c335", "sighting_of_ref": "indicator--777b467b-3306-42f0-894b-a6a49e795d29", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1847428-d1d8-41c7-86ba-d87e2712c649", "sighting_of_ref": "indicator--13714c41-1bb3-4f38-99f5-9aa704f12562", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8ab0b5-35ac-4435-96e9-57de927a007d", "sighting_of_ref": "indicator--13714c41-1bb3-4f38-99f5-9aa704f12562", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c17910-6b6a-4e93-98a2-de93e55b745f", "sighting_of_ref": "indicator--f9b58f31-17fd-4f05-a6e0-85969efdf294", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01aa88a-2333-41af-b8c6-9b643d74b6b9", "sighting_of_ref": "indicator--a9c114ba-6c28-4d86-bd1d-9ccc52bdd9f9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bace008b-2faf-4529-9c28-a199383cc269", "sighting_of_ref": "indicator--a9c114ba-6c28-4d86-bd1d-9ccc52bdd9f9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9154110e-e255-4bbd-8f5e-380a47fb14fb", "sighting_of_ref": "indicator--ddec2de9-f3d5-44c5-a434-f2ee1a3f952e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70aedefc-ee5c-48d3-a623-b4364341f395", "sighting_of_ref": "indicator--ddec2de9-f3d5-44c5-a434-f2ee1a3f952e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1542b437-9161-45c0-b4fb-0c1af9897836", "sighting_of_ref": "indicator--8608b66e-293e-40a0-a23d-db2657fd49de", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59aeb51a-a912-4fdc-af48-fcdf4dc077c8", "sighting_of_ref": "indicator--8608b66e-293e-40a0-a23d-db2657fd49de", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe77f73-9c6d-4137-89a4-275b0dfd587a", "sighting_of_ref": "indicator--8608b66e-293e-40a0-a23d-db2657fd49de", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fe048d-20de-4b66-8251-d0a9e49aaae9", "sighting_of_ref": "indicator--73195875-15b1-403d-939c-1b773a401bd9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b4d832-7490-487c-8302-7212553b689d", "sighting_of_ref": "indicator--73195875-15b1-403d-939c-1b773a401bd9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cd1512-707f-4528-9216-4bbe9cf547a9", "sighting_of_ref": "indicator--07d31906-1ff0-4440-ad31-f40234726523", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81a4434-b440-48d1-9e6a-fab6f15795cc", "sighting_of_ref": "indicator--b66676ba-68ff-444e-8850-ec85e46b8db4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2259735c-22d5-4df2-a3bc-b586601854f9", "sighting_of_ref": "indicator--b66676ba-68ff-444e-8850-ec85e46b8db4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13c31b3-6ddb-4951-9dbb-fda12f36d095", "sighting_of_ref": "indicator--b66676ba-68ff-444e-8850-ec85e46b8db4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2aeb72-836a-4ae1-ad1a-18a293d691b7", "sighting_of_ref": "indicator--18a9d52b-1ede-4044-a1ba-499d73ac6318", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d51ca87-68c2-43d5-a1e4-405bc4d4ee0f", "sighting_of_ref": "indicator--18a9d52b-1ede-4044-a1ba-499d73ac6318", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9b50d0-9cec-4113-9e3b-219f268cb4db", "sighting_of_ref": "indicator--18a9d52b-1ede-4044-a1ba-499d73ac6318", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a39bcb8-cd0c-40fc-9f3a-5f640a46b6a6", "sighting_of_ref": "indicator--5f4e1304-7071-4508-82c2-7ead0a2533fd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb5d19d-7901-4d92-bf61-b0307ca53527", "sighting_of_ref": "indicator--5f4e1304-7071-4508-82c2-7ead0a2533fd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbcf977c-f323-454b-a639-9484e75132cc", "sighting_of_ref": "indicator--b3a841cd-0e61-4d36-aba5-96a961bd7a61", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9074df25-196f-490e-a3a2-e71c65f339e2", "sighting_of_ref": "indicator--2e180dd6-f58f-40d1-b7b4-94e87d049d98", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c8f035-0c67-4fb5-a53c-667a0d19eb5a", "sighting_of_ref": "indicator--2e180dd6-f58f-40d1-b7b4-94e87d049d98", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7366d4-899b-4788-9901-e5f72bb57246", "sighting_of_ref": "indicator--2e180dd6-f58f-40d1-b7b4-94e87d049d98", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92eccf73-e812-4cfa-9410-9f4fef139262", "sighting_of_ref": "indicator--4c65e9d9-6646-4824-b0a4-e0fb74788fe9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d55d33a-c00d-416f-b9ae-d4383e9d179f", "sighting_of_ref": "indicator--4c65e9d9-6646-4824-b0a4-e0fb74788fe9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ec03e9-3359-46ed-a766-43c3d735566b", "sighting_of_ref": "indicator--4c65e9d9-6646-4824-b0a4-e0fb74788fe9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b46d8b-c1c2-4d1c-9bdf-0726fbbd90ab", "sighting_of_ref": "indicator--b6497e35-9f6d-43ef-b331-22ff25dfb3ef", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d1cb16-4a71-49ef-95c5-30f9f529024c", "sighting_of_ref": "indicator--27fb04fd-f452-44b4-b0d4-beba3ebc8056", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a8d142-5e72-48e5-af41-d2d8201d446a", "sighting_of_ref": "indicator--27fb04fd-f452-44b4-b0d4-beba3ebc8056", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8888c0-06bb-4596-9b87-a701d058d3f8", "sighting_of_ref": "indicator--b28df47a-ee8d-4a71-b775-facbf5966919", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a4581f-7efa-4733-aa04-5a30f9ca0e37", "sighting_of_ref": "indicator--b28df47a-ee8d-4a71-b775-facbf5966919", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c508e6-fe6f-4cb2-971f-ca536f15ab59", "sighting_of_ref": "indicator--b28df47a-ee8d-4a71-b775-facbf5966919", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334d57fe-510d-4342-b4d3-32b9ed0a647e", "sighting_of_ref": "indicator--18248881-2c4a-49c4-a258-3af9e2b08e0c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c865a39-ee9a-4539-94d3-f3a0e89a386a", "sighting_of_ref": "indicator--18248881-2c4a-49c4-a258-3af9e2b08e0c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35bfa3c-ec5a-4556-8500-f6255302183e", "sighting_of_ref": "indicator--574b0d77-4adc-4dfd-89fd-e7a35be3972b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089f8dd8-1bf1-4030-868c-329b1df1af26", "sighting_of_ref": "indicator--574b0d77-4adc-4dfd-89fd-e7a35be3972b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef14683-3dc8-44ee-860b-146b6d5377be", "sighting_of_ref": "indicator--574b0d77-4adc-4dfd-89fd-e7a35be3972b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c583193e-c320-4173-91f3-722f458f6ad9", "sighting_of_ref": "indicator--cbca4e96-7185-4519-b10d-34818a23d512", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b809c14d-dc6f-42b8-84a5-b19eb33a40b2", "sighting_of_ref": "indicator--a8ee57ad-233f-4342-b667-eb94047e2232", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1735aed7-5a2a-487b-98d3-e2f277c619f7", "sighting_of_ref": "indicator--a8ee57ad-233f-4342-b667-eb94047e2232", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0301bb23-6060-49c0-8510-e17960f89210", "sighting_of_ref": "indicator--a8ee57ad-233f-4342-b667-eb94047e2232", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c3cc66-917b-4eee-bf7f-d7429b857552", "sighting_of_ref": "indicator--102e22c0-4e86-420d-8f97-04fd907362cd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3deea29-cb88-4db7-9f27-b48ac4a8873a", "sighting_of_ref": "indicator--102e22c0-4e86-420d-8f97-04fd907362cd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eef4cbf-9de4-4bf7-a9c2-18f5e240eb33", "sighting_of_ref": "indicator--102e22c0-4e86-420d-8f97-04fd907362cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb11cfb-5287-478a-9bb7-36142a3e5da2", "sighting_of_ref": "indicator--72910b9c-328a-432c-b8a1-819d2e81c42c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd680f6-575d-4f0d-a32d-a6e45702ca3a", "sighting_of_ref": "indicator--712552e3-ffe6-4843-8f0f-2d9212dbb88a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33f86d0-f5d9-423c-a90e-f182c7cc4c1c", "sighting_of_ref": "indicator--712552e3-ffe6-4843-8f0f-2d9212dbb88a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910626b3-98c2-4778-9a85-8715c75ebf47", "sighting_of_ref": "indicator--3c0a8cd5-1a52-46cb-9c86-435e3fa6099a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66307e7b-a5f3-4067-86a9-61783212172e", "sighting_of_ref": "indicator--7b4b5f5c-7655-4f7f-b5a1-e3ffde589892", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944f3b1b-6327-4240-9eb7-44bc4ac2a503", "sighting_of_ref": "indicator--7b4b5f5c-7655-4f7f-b5a1-e3ffde589892", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575bdd4d-2aef-42a9-9445-b3aed68cc02f", "sighting_of_ref": "indicator--7b4b5f5c-7655-4f7f-b5a1-e3ffde589892", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d64e002-adea-4ebf-b26d-308eb0fc75e0", "sighting_of_ref": "indicator--3002713a-f727-4e68-9fbd-7c15838fd191", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5772591a-0d80-480e-9ab5-0c948d595469", "sighting_of_ref": "indicator--e68c74a7-42f6-4850-b13d-1b16ef74b3fd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c89f712-91bd-4e0e-bd8b-3b0b93273c3e", "sighting_of_ref": "indicator--e68c74a7-42f6-4850-b13d-1b16ef74b3fd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3242e91-40a7-42bd-bcf3-d27a5cc6f3fa", "sighting_of_ref": "indicator--e68c74a7-42f6-4850-b13d-1b16ef74b3fd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6b6b8c-9339-4048-8ac2-093cd3cac1d2", "sighting_of_ref": "indicator--ff94fae7-c08c-448a-a8cc-f73eb2493b2a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1ca2b5-e00c-470b-abb4-881ac0d57c49", "sighting_of_ref": "indicator--ff94fae7-c08c-448a-a8cc-f73eb2493b2a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b9cc85-2c0e-4eab-9c4f-d6b68c80c500", "sighting_of_ref": "indicator--286bac8c-c577-4423-8a74-829008871eff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95da2e65-828c-44e6-9fd6-c3d02a6db168", "sighting_of_ref": "indicator--286bac8c-c577-4423-8a74-829008871eff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b72fa17-6279-49e8-a883-ee16b86707da", "sighting_of_ref": "indicator--286bac8c-c577-4423-8a74-829008871eff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04c9c44-4091-4c31-9e67-21018f457a25", "sighting_of_ref": "indicator--0fd00bda-7c47-4cbb-ad8f-a72b6e16135a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7302fd-d5ce-41fd-a25d-e4cb0da41bbb", "sighting_of_ref": "indicator--74cf88d3-57a6-4a41-a425-e411010268b6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba271623-da55-4681-acdf-2fde5a4c8119", "sighting_of_ref": "indicator--74cf88d3-57a6-4a41-a425-e411010268b6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a1272a-dbfe-42b0-91ed-3a8b5f6124a5", "sighting_of_ref": "indicator--74cf88d3-57a6-4a41-a425-e411010268b6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f96a50-58c5-429e-9cb5-f42e6dadd5c8", "sighting_of_ref": "indicator--b6df5508-7869-48a4-930d-42ac5f717026", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0d08e5-6bbd-449c-816d-cd940cd61f3b", "sighting_of_ref": "indicator--b6df5508-7869-48a4-930d-42ac5f717026", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e99bb6-70c2-4104-81d8-dccfe9dc0384", "sighting_of_ref": "indicator--b6df5508-7869-48a4-930d-42ac5f717026", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561f254e-8e66-47f9-9e00-f150b69d353a", "sighting_of_ref": "indicator--15b2f165-4cc6-4669-9a36-542fd4ee77d7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cecf90de-24da-44ee-834b-131f85ce8a51", "sighting_of_ref": "indicator--62611f32-80e3-4059-927a-bbee34fa1385", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f70ef2f-100c-4ce3-aac2-ec947a46b5da", "sighting_of_ref": "indicator--62611f32-80e3-4059-927a-bbee34fa1385", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccbb9f8-0906-4792-9fc0-7afafdb4ebe3", "sighting_of_ref": "indicator--70cca4cb-d905-4db3-8872-35e2c1f0dc1f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6c7dab-0d54-4b1e-b660-098ef7f6b4ed", "sighting_of_ref": "indicator--756d1e1f-9ed8-4e74-b006-a3971699040f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a53f1cd-ce1b-40de-9c34-f62e24b97630", "sighting_of_ref": "indicator--6fe7b31c-d96d-4b05-8778-9da72b400227", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46a7177-e24e-4b96-984b-5fd0cd1a80d8", "sighting_of_ref": "indicator--6fe7b31c-d96d-4b05-8778-9da72b400227", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002de117-8e2c-4263-a6dc-a40df88465a5", "sighting_of_ref": "indicator--6df1ede2-2db1-47e6-8f2f-696f284d7f42", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e59c39-7650-41ae-8a39-9014eb275b04", "sighting_of_ref": "indicator--6df1ede2-2db1-47e6-8f2f-696f284d7f42", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4971a919-6625-44aa-9b07-66ac49d964da", "sighting_of_ref": "indicator--6df1ede2-2db1-47e6-8f2f-696f284d7f42", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d269b19-d2f6-4c50-95d7-8b8f93624d75", "sighting_of_ref": "indicator--6600cf2f-c07d-4c8d-943b-bd1febcf00e8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9699c04-b410-4d91-a56c-1557567f41cf", "sighting_of_ref": "indicator--2d13ae50-8402-41eb-818d-31ea79b0d35c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893b9670-71c6-447d-8e17-3d66254712a3", "sighting_of_ref": "indicator--2d13ae50-8402-41eb-818d-31ea79b0d35c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f60f7f-3b61-459d-a70e-305fe4616fe4", "sighting_of_ref": "indicator--f96581b5-b4f7-4a2e-a490-4434bfee550a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87902039-a7f3-4f47-b8b4-2a112caf3bfa", "sighting_of_ref": "indicator--e64e3c75-af85-44c3-a3a2-da972e56121d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e399f4-8b3b-4102-bad3-5abb861ee0b7", "sighting_of_ref": "indicator--9b467ebd-785b-4d05-8803-050a7e0cee38", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db5120a-83f2-4e3f-b6fe-f8cf328e5442", "sighting_of_ref": "indicator--9b467ebd-785b-4d05-8803-050a7e0cee38", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c5750b-efb4-413a-887f-4700e526e785", "sighting_of_ref": "indicator--9b467ebd-785b-4d05-8803-050a7e0cee38", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b132c17-bc88-4277-8f1c-013faed65f62", "sighting_of_ref": "indicator--240a894d-266b-4dee-8e61-2878841e8a98", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640be342-e8c2-4622-bbc9-47927d288c8b", "sighting_of_ref": "indicator--240a894d-266b-4dee-8e61-2878841e8a98", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a6f5b1-9e8e-4e9f-b33b-2d59bdb2340b", "sighting_of_ref": "indicator--240a894d-266b-4dee-8e61-2878841e8a98", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272bdec7-886a-446a-b6e2-72ccb42b0e5f", "sighting_of_ref": "indicator--a52c1b40-0b60-47b9-9e8a-c2c2bf67e120", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a03a55-96e8-4f41-827f-01b1f7b98b89", "sighting_of_ref": "indicator--a52c1b40-0b60-47b9-9e8a-c2c2bf67e120", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11cd484a-f19c-4884-8846-ec51ae285da3", "sighting_of_ref": "indicator--a52c1b40-0b60-47b9-9e8a-c2c2bf67e120", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eaadfd9-daee-4bd5-a74b-e7fe86f5945e", "sighting_of_ref": "indicator--9296f7c3-8eb1-41d3-ba8f-ff590e381605", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da45496-2d57-45c3-be1b-28d47a3e1dee", "sighting_of_ref": "indicator--9296f7c3-8eb1-41d3-ba8f-ff590e381605", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4a6ba2-f635-4e83-b43a-48c4b922e1b3", "sighting_of_ref": "indicator--9296f7c3-8eb1-41d3-ba8f-ff590e381605", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90700b9-5ff7-4dfb-886e-4864ba2d2634", "sighting_of_ref": "indicator--85f2b7e4-f7b9-42c5-b18c-bb0744aa3329", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea332e68-3f5c-4421-aa1c-d90d87daa31a", "sighting_of_ref": "indicator--8bdaea6d-8054-434a-82d3-a22dfaa81559", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab89cbe-1726-40ad-b476-9bfdb346774a", "sighting_of_ref": "indicator--8bdaea6d-8054-434a-82d3-a22dfaa81559", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090a3517-cfc8-469a-9249-ef7661660da3", "sighting_of_ref": "indicator--6286ff1e-3054-4f18-b712-030f7c438300", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74409f1b-c097-4fa5-a991-6bd0bebeca94", "sighting_of_ref": "indicator--6286ff1e-3054-4f18-b712-030f7c438300", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7c3922-9ebc-4640-b3d5-743aa4923d98", "sighting_of_ref": "indicator--6286ff1e-3054-4f18-b712-030f7c438300", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3df775-57b9-4817-b45a-38b473697295", "sighting_of_ref": "indicator--eaa7e7fa-83fb-4a06-ae5c-fd8c3432d661", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5ae711-0b91-482b-91ef-956b62b55509", "sighting_of_ref": "indicator--eaa7e7fa-83fb-4a06-ae5c-fd8c3432d661", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995ec19b-82f8-40f4-9345-cc5eb4e2ae40", "sighting_of_ref": "indicator--eaa7e7fa-83fb-4a06-ae5c-fd8c3432d661", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4593a74e-e3c3-4b0b-b67e-83d10af80bb3", "sighting_of_ref": "indicator--557fb7ca-6fc3-4fa2-958e-933f6cbdc81d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29f751d-8687-475c-8200-b79b127b0b5d", "sighting_of_ref": "indicator--1bf7e06d-3071-435c-9445-ecef7dc1803a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ca0d3e-7ce9-4936-8232-d01b04065e72", "sighting_of_ref": "indicator--1bf7e06d-3071-435c-9445-ecef7dc1803a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75aed71b-8261-4d80-86c3-667d279e9afa", "sighting_of_ref": "indicator--64a2293f-2428-4b5d-9d93-71f946423d03", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a5eb44-ae29-435d-9f78-7991c72f1179", "sighting_of_ref": "indicator--19040342-b4ae-471d-baf4-d2e9c6e0bcc7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e52728-715e-4220-a240-74fa7aec0030", "sighting_of_ref": "indicator--3d3e1917-c122-45c3-947a-d0b6115c6e60", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e003772-8d8a-4c97-b6ce-4f5c2e36cd52", "sighting_of_ref": "indicator--04175f99-863e-455e-b40b-f5dec20ad327", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d631d33-f98c-4116-a25c-482812dd3f91", "sighting_of_ref": "indicator--30eff1ca-4041-4e2e-b3f0-4645b92a47bf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcdb4db-7ac9-48b4-9d2e-aeb084813d70", "sighting_of_ref": "indicator--30eff1ca-4041-4e2e-b3f0-4645b92a47bf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f226f8-d22e-4d97-8aed-da1c978ab8c1", "sighting_of_ref": "indicator--30eff1ca-4041-4e2e-b3f0-4645b92a47bf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0fb8ca-deb4-4c88-b301-16fdd1a53ff3", "sighting_of_ref": "indicator--053a3294-b520-4679-93c5-d6f50aab36a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf2879e-5158-4285-a088-968b425b8da5", "sighting_of_ref": "indicator--fa39e0ce-7997-4948-a5bd-f856dbd78cb5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f327635-c219-41fe-8e60-12ff45bce346", "sighting_of_ref": "indicator--fa39e0ce-7997-4948-a5bd-f856dbd78cb5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ea7949-58fc-4fce-9ce1-64cc88186eab", "sighting_of_ref": "indicator--fa39e0ce-7997-4948-a5bd-f856dbd78cb5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0639e6eb-bc18-4d5e-9811-a88cc13f7448", "sighting_of_ref": "indicator--c319c6a3-b6df-49ad-acc7-21f46a876c7d", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b2f085-8a2c-46c0-8ffd-6110e249f67b", "sighting_of_ref": "indicator--a948c75b-3787-4023-aaa0-33b56ec123d4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a776456-a3ea-4c52-af9f-089482de112b", "sighting_of_ref": "indicator--10b2bd14-8529-4f76-99db-8f59c979727d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9217a32-d711-4791-972b-bf2c8da790f0", "sighting_of_ref": "indicator--06fbef23-96fa-404d-a004-19fe452daa40", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ebfc9c-7b3b-417e-8f42-be2d19a31d8b", "sighting_of_ref": "indicator--06fbef23-96fa-404d-a004-19fe452daa40", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075ddb95-bed2-4d66-8b27-cff9d0a895d1", "sighting_of_ref": "indicator--06fbef23-96fa-404d-a004-19fe452daa40", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7308a87-2a8f-4163-b1ff-e2979d49f27b", "sighting_of_ref": "indicator--695ce78a-b24d-4704-9c6e-c608f65670cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ecc9434-dc82-4e09-9ed2-b95e5d6f8124", "sighting_of_ref": "indicator--875d5dba-2dfa-46ee-a7b8-6b33246ca67e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2143e0ae-aa07-430c-a783-e634a1880d07", "sighting_of_ref": "indicator--875d5dba-2dfa-46ee-a7b8-6b33246ca67e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22142671-c484-4bbf-b7c0-ef3d9ad4c06e", "sighting_of_ref": "indicator--b3160071-790d-403f-af2e-ac10680726c0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0c7576-3825-4763-829e-72ff6cff1e1e", "sighting_of_ref": "indicator--f1f66b61-c41a-47c0-aedc-8f447cb9b1d5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80335b1-f77e-4e81-af9f-98cb30439a84", "sighting_of_ref": "indicator--898840b0-f144-4935-860f-62243a157ac7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ca866c-78ba-41ae-94aa-2a54fcf3addb", "sighting_of_ref": "indicator--898840b0-f144-4935-860f-62243a157ac7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab2088f-012c-4b9d-9429-f75e4f717d40", "sighting_of_ref": "indicator--6b7c863c-5552-4492-b823-cd54de6e3837", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f5e10c-7203-486d-a310-f81600c0ee2d", "sighting_of_ref": "indicator--efd205d3-bd42-4531-a50d-2b8fb4b6df21", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b37f8a8-5048-41cb-bf8e-e05532ba41cb", "sighting_of_ref": "indicator--efd205d3-bd42-4531-a50d-2b8fb4b6df21", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee41f7d9-256f-48a0-9e72-33d1b5179c65", "sighting_of_ref": "indicator--3a130b6e-345d-4db2-b57d-d7e68a5c387a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5985ba85-4aa8-4799-b6c6-cb8908e63f26", "sighting_of_ref": "indicator--3a130b6e-345d-4db2-b57d-d7e68a5c387a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7f93eb-d24d-4821-bbce-86f2a71c4331", "sighting_of_ref": "indicator--7193d5f7-94d8-4eda-b4d4-1b3ca3b4b744", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909f6cf2-0034-49c2-b1f5-166d9c983bb0", "sighting_of_ref": "indicator--7193d5f7-94d8-4eda-b4d4-1b3ca3b4b744", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a3e42a-8fe2-4d8b-a66f-a36648408356", "sighting_of_ref": "indicator--8857c690-07b1-453f-bf01-3ec0e2fca964", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3138119-2961-47d1-b247-5bb8b026d434", "sighting_of_ref": "indicator--8857c690-07b1-453f-bf01-3ec0e2fca964", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c65569-a789-4f4a-81f4-d957fe37e840", "sighting_of_ref": "indicator--8857c690-07b1-453f-bf01-3ec0e2fca964", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bb1634-71a7-4627-a977-c8e824df646a", "sighting_of_ref": "indicator--57c6b510-e71d-49ff-9e96-b0d9ba7f25c2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c48b07d-dad1-426f-9faa-1bc7e4dbf7c1", "sighting_of_ref": "indicator--18566262-5ae9-4918-bce4-46b79a2ac551", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b4850e-eba5-4efb-ae12-5a5fa7e7c54f", "sighting_of_ref": "indicator--11a9ca51-38ac-441d-aae1-0e11477f55b1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab27b2c3-1e57-43a5-8623-f0d57c87bf35", "sighting_of_ref": "indicator--2497b120-9de2-4a65-95b1-f0ebb16d394e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116a8061-406f-4f14-8b4f-c774bcf33ed8", "sighting_of_ref": "indicator--2497b120-9de2-4a65-95b1-f0ebb16d394e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7cce5e-b3d1-4232-a8b8-4f147af0f5a2", "sighting_of_ref": "indicator--2497b120-9de2-4a65-95b1-f0ebb16d394e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658182d7-10af-4f30-8668-113c82284185", "sighting_of_ref": "indicator--a6ea96f4-b13c-47bc-a5ff-eb412317c1c5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b57064-9e5e-4b2c-a47f-ad07a25f97ca", "sighting_of_ref": "indicator--81dfbcb6-e10e-4482-938d-648a93510ae5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7a483f-7e6e-4082-8788-78225297719a", "sighting_of_ref": "indicator--81dfbcb6-e10e-4482-938d-648a93510ae5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6695a9-ce46-425f-9be5-a4d57f51a11b", "sighting_of_ref": "indicator--81dfbcb6-e10e-4482-938d-648a93510ae5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b1eed1-58fa-4509-b10c-14d9f571cbe5", "sighting_of_ref": "indicator--f217cac7-3b67-4e66-9047-c26190e665ed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5fd539-68ce-4c08-be95-49ed05fcc0fb", "sighting_of_ref": "indicator--f217cac7-3b67-4e66-9047-c26190e665ed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71aa63d-c407-4a7c-b4c5-682627ce1611", "sighting_of_ref": "indicator--f217cac7-3b67-4e66-9047-c26190e665ed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6356084-e14a-43a5-a4cd-0cfb5478d9b6", "sighting_of_ref": "indicator--b0a45c42-145f-4ff7-b64a-fda041563d88", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88380788-6b95-4b09-9530-bdc0c7435ab1", "sighting_of_ref": "indicator--82a810c2-2b33-4f88-a84e-df8e478232d8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd14986-b269-481e-b771-dc94edea5bff", "sighting_of_ref": "indicator--de51412b-ebc2-4c6c-bd04-4594db7d596d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7087c049-a9f9-43eb-8c4d-33b18795724f", "sighting_of_ref": "indicator--de51412b-ebc2-4c6c-bd04-4594db7d596d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1998d8a4-6174-4ea7-b521-eb99f4f4e6fd", "sighting_of_ref": "indicator--db34d338-059e-4f14-8cb2-a4d1641559af", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f247a37d-b839-4349-b4e3-8851c2855c45", "sighting_of_ref": "indicator--91557861-07fb-4e08-a119-eb80263cf772", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5140c649-cd14-4c09-b1c7-1be6269ddef8", "sighting_of_ref": "indicator--defbe104-44fd-4ea2-a7af-5f6f20175ab0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d838e1-27a7-4244-abee-6ad18e15a211", "sighting_of_ref": "indicator--defbe104-44fd-4ea2-a7af-5f6f20175ab0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d69f27-fb30-42e4-b6a9-30747398122e", "sighting_of_ref": "indicator--defbe104-44fd-4ea2-a7af-5f6f20175ab0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3a5f3a-9744-4cdc-87bf-2a1ab2b05328", "sighting_of_ref": "indicator--871acdec-a182-43a5-9c14-68a30e8271bb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188f583a-55ae-4fb3-8ffa-4e53f1b05cc4", "sighting_of_ref": "indicator--871acdec-a182-43a5-9c14-68a30e8271bb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4454af66-f6db-4037-b753-abd03fdca779", "sighting_of_ref": "indicator--c4aa110b-4bc8-45f1-88bb-21337787c888", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c067de8-8cb7-41b9-a0de-2f357474b7f7", "sighting_of_ref": "indicator--c4aa110b-4bc8-45f1-88bb-21337787c888", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536e62f5-8cf7-473a-8abd-8bbe3038f416", "sighting_of_ref": "indicator--c4aa110b-4bc8-45f1-88bb-21337787c888", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bde47c-c978-4577-bb14-3630a353e014", "sighting_of_ref": "indicator--a8c29d40-80a5-4e62-8308-26612a77cd36", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21686404-e8db-45ee-acb4-22a242ae4483", "sighting_of_ref": "indicator--a8c29d40-80a5-4e62-8308-26612a77cd36", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4db66f-9534-452f-8c13-76e2c1ac9f9c", "sighting_of_ref": "indicator--a8c29d40-80a5-4e62-8308-26612a77cd36", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645c2c35-8b9f-4b0c-acb9-066cdb460918", "sighting_of_ref": "indicator--586de1b8-b864-45c1-9f1a-a0bc7d510666", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37e1733-e1b3-4bb6-8ead-657156d68a61", "sighting_of_ref": "indicator--586de1b8-b864-45c1-9f1a-a0bc7d510666", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015ef54a-2f67-44a0-8435-47cdc5e2240c", "sighting_of_ref": "indicator--586de1b8-b864-45c1-9f1a-a0bc7d510666", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295ffeeb-8aae-4196-90f3-c2312991c7e2", "sighting_of_ref": "indicator--09ba8aed-fd62-4fec-9fa9-88b011b0d02c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2424bf-ea88-4bb3-890d-81e2cc3c4630", "sighting_of_ref": "indicator--09ba8aed-fd62-4fec-9fa9-88b011b0d02c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677279e9-a166-4898-ae65-c238f1b3cf9c", "sighting_of_ref": "indicator--09ba8aed-fd62-4fec-9fa9-88b011b0d02c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1884846-e872-4d83-b7eb-7c237757a27a", "sighting_of_ref": "indicator--bc2fa386-0c16-4110-9f99-b1493fe5c959", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5eb2202-4af6-4fd1-bead-8475270fc7af", "sighting_of_ref": "indicator--bc2fa386-0c16-4110-9f99-b1493fe5c959", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6c6001-093a-4190-9e72-59c630b1cd4b", "sighting_of_ref": "indicator--bc2fa386-0c16-4110-9f99-b1493fe5c959", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8dfaa0-46d5-411c-8a51-1419f35aaaae", "sighting_of_ref": "indicator--04b7dd71-fcf1-471b-8eb5-4546e72473e1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e280adb2-e500-4474-b38d-7f210a5fa284", "sighting_of_ref": "indicator--04b7dd71-fcf1-471b-8eb5-4546e72473e1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea65d6a-52be-47a3-bb1c-31aabede3151", "sighting_of_ref": "indicator--04b7dd71-fcf1-471b-8eb5-4546e72473e1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8777beff-7ba8-4cf5-a6a8-7d94827de94c", "sighting_of_ref": "indicator--6756378d-3d1c-4545-97a9-6e17f3349849", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbe966d-8c5f-44e7-b162-b55d38e6a771", "sighting_of_ref": "indicator--c0140290-bbc5-4f3f-a195-4f8032de7319", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21524583-76fd-4429-a6dd-c620e66273ca", "sighting_of_ref": "indicator--c0140290-bbc5-4f3f-a195-4f8032de7319", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970ccfd9-d770-467d-b345-486ffcdd63e4", "sighting_of_ref": "indicator--c0140290-bbc5-4f3f-a195-4f8032de7319", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394b4ff0-7c52-473c-acac-d75434152a1c", "sighting_of_ref": "indicator--12e109c2-3409-4c7c-a96b-d6da71247e0c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363e6264-3f1e-4087-97c6-bcecbd397d14", "sighting_of_ref": "indicator--12e109c2-3409-4c7c-a96b-d6da71247e0c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bf2fe5-0ef5-45a3-93c4-814aecb28598", "sighting_of_ref": "indicator--12e109c2-3409-4c7c-a96b-d6da71247e0c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4369effc-06f1-4f32-8fbc-4fe84e8722b7", "sighting_of_ref": "indicator--e5aab7dc-54e9-40d1-9e75-fd957fd7e894", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9b053b-65d6-41ec-b57a-0e8cee6cbf34", "sighting_of_ref": "indicator--480106f6-1993-41cd-8b2b-0225e30ede1d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d8183c-5793-4345-a0d1-a0628a0a80b6", "sighting_of_ref": "indicator--480106f6-1993-41cd-8b2b-0225e30ede1d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3a063f-50e5-4189-a129-70f63d21eaa4", "sighting_of_ref": "indicator--480106f6-1993-41cd-8b2b-0225e30ede1d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bae79b7-d23b-4e31-a486-8d376716b032", "sighting_of_ref": "indicator--400026bb-d414-4bd6-9d3d-b63591ffaab4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbcc30b-8c43-4d1f-9bdb-0da0248f296b", "sighting_of_ref": "indicator--400026bb-d414-4bd6-9d3d-b63591ffaab4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0bfde0a-5d41-4c98-9a9e-9925482e397c", "sighting_of_ref": "indicator--3fab0cb1-682e-4490-8184-0613cc37f100", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fb1dc0-c515-41f4-ac8e-eb5d9f7c5223", "sighting_of_ref": "indicator--3fab0cb1-682e-4490-8184-0613cc37f100", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa6e19f-f231-4c29-a120-681f3fcc5274", "sighting_of_ref": "indicator--1f2af356-2217-4be1-a87d-07cc142f63b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6ec6ff-6d10-47cf-b088-88c83020b3d2", "sighting_of_ref": "indicator--1f2af356-2217-4be1-a87d-07cc142f63b0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8f5c2f-1c5d-4d1a-bba1-42b0b7ab1a0a", "sighting_of_ref": "indicator--1f2af356-2217-4be1-a87d-07cc142f63b0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2844f7b6-86c1-4769-813a-a5bd331cf8a3", "sighting_of_ref": "indicator--f4c60a1c-2682-4be5-81a8-edf0153e2b24", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcaf008-88f7-4723-9e1d-222c4e69d04e", "sighting_of_ref": "indicator--64140a88-6059-4c3d-a61c-978f9844726b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc208b5-5dbf-4bc6-8233-d8c6dc5538fe", "sighting_of_ref": "indicator--5ce36858-7572-4992-8050-6463f7e77ad4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6c72a8-87c9-45c0-af61-4e4f8f9c44a3", "sighting_of_ref": "indicator--71149890-2a19-4d12-9a06-5baf245842d8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3d118d-9104-4c6b-9f53-eff682e8a248", "sighting_of_ref": "indicator--71149890-2a19-4d12-9a06-5baf245842d8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0de229-c8e0-4a24-81a8-10aea9b7fca1", "sighting_of_ref": "indicator--c86b48e0-a30a-416b-b775-5b0042c835a5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a033634-e604-40d2-986d-686b5ad2357a", "sighting_of_ref": "indicator--e78d67f8-91ad-4a92-bc70-335824dacdaf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eaa10b9-0099-4099-885e-6543a8706a4c", "sighting_of_ref": "indicator--e78d67f8-91ad-4a92-bc70-335824dacdaf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016a2dae-9c2d-494a-9798-b395a0b12eb6", "sighting_of_ref": "indicator--e78d67f8-91ad-4a92-bc70-335824dacdaf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc76e4e5-90e5-4d87-8dba-f05dcc96faa7", "sighting_of_ref": "indicator--a51b4705-1c7a-43a8-8388-102cbf122b02", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7c3802-a71f-4523-8e38-b1b9dcc78af3", "sighting_of_ref": "indicator--6f1e731d-2eb1-4343-ad21-3294c94aab0d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e0cc1d-153a-4841-adf2-06bfe327ad77", "sighting_of_ref": "indicator--6f1e731d-2eb1-4343-ad21-3294c94aab0d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7add5639-9c83-4800-8263-bce8da56a5ad", "sighting_of_ref": "indicator--b7ea7ad9-0b7e-423d-a9ad-8bbe11f07254", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf7017c-eeec-4362-9b4e-7f09a45bde5d", "sighting_of_ref": "indicator--b7ea7ad9-0b7e-423d-a9ad-8bbe11f07254", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1152e3fe-ed4a-42e0-8c10-0b7e3a9d4648", "sighting_of_ref": "indicator--b7ea7ad9-0b7e-423d-a9ad-8bbe11f07254", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc963a4a-8993-4d7e-8baa-cee52d9b7bcd", "sighting_of_ref": "indicator--1dec5189-bd26-4ddf-b50e-061102376c22", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377fef7b-3ba4-4e97-ae50-584c19669541", "sighting_of_ref": "indicator--1dec5189-bd26-4ddf-b50e-061102376c22", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f72a5be-847e-4a29-a28d-84fa612d0ef0", "sighting_of_ref": "indicator--64fc0460-ebb9-4656-872c-01b46717ffdf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825b57ac-16a1-4538-8c1e-3accb267f2e7", "sighting_of_ref": "indicator--64fc0460-ebb9-4656-872c-01b46717ffdf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6a4b40-8913-4bf1-b060-43f0a2dc0bc8", "sighting_of_ref": "indicator--e4b5fdb5-3350-4e20-8397-6c9a3b8c6424", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56615173-21aa-41ee-8a7c-d0c183ac8ddd", "sighting_of_ref": "indicator--e4b5fdb5-3350-4e20-8397-6c9a3b8c6424", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec2f36b-32f4-4ce7-a782-1edf5e5c2107", "sighting_of_ref": "indicator--91d3ae94-6a1f-4b2f-9e80-decb8a90e527", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13508c3-ab44-4cf8-9668-e082f8367674", "sighting_of_ref": "indicator--e1cb8eaa-3b4d-4a5c-852e-07c17bf24c24", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0614f4d-96c1-4033-9595-20e9d98db03a", "sighting_of_ref": "indicator--e1cb8eaa-3b4d-4a5c-852e-07c17bf24c24", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e5184b-48f6-47fe-b9cf-281d22a74cf5", "sighting_of_ref": "indicator--e1cb8eaa-3b4d-4a5c-852e-07c17bf24c24", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80fd001d-0729-4de5-8bac-4435ad6a9a46", "sighting_of_ref": "indicator--ab10c03b-84e8-43a5-abed-e91c6582a2d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5115c83f-f82c-458a-9362-ce95d562b3f2", "sighting_of_ref": "indicator--ab10c03b-84e8-43a5-abed-e91c6582a2d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349db4c5-a5ce-43c6-9408-07541a7f5d62", "sighting_of_ref": "indicator--ab10c03b-84e8-43a5-abed-e91c6582a2d6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c981f1-9459-4057-b925-3c81e3bc39ea", "sighting_of_ref": "indicator--13fcee9f-8636-4852-b31b-4993e79b387b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099e459c-4bb1-4c43-afd6-51d4de3e037d", "sighting_of_ref": "indicator--13fcee9f-8636-4852-b31b-4993e79b387b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c94c329-aec9-4fe4-93df-bbd07343b3ff", "sighting_of_ref": "indicator--13fcee9f-8636-4852-b31b-4993e79b387b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93227adb-9e38-481b-a5fd-c05d337a41c5", "sighting_of_ref": "indicator--3209ab34-48f1-4449-bd5d-ad36ed780afa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e678e02e-1d87-4979-af94-a0494bd606ef", "sighting_of_ref": "indicator--29cb38a5-712f-44e9-b595-40640d5ec8aa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5c0c78-f7ef-4864-95bf-b573d69925f1", "sighting_of_ref": "indicator--98491f13-72b4-4fe0-aa63-0bbbb4e90e68", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5351316a-1dd1-4589-9a74-1993539fdc27", "sighting_of_ref": "indicator--90eac0a8-6705-4c41-89f2-7f9874fd69a7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b737b2-5783-4f94-afb7-06d347eaa4ff", "sighting_of_ref": "indicator--dcfd6b11-e602-466f-bf95-88234fa51dd8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e116721-c018-4918-9127-a5ee131d458d", "sighting_of_ref": "indicator--03456744-a973-4014-8f4f-790cf94510a8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8644d6f-0a23-4d03-b490-6772fd75c8b8", "sighting_of_ref": "indicator--03456744-a973-4014-8f4f-790cf94510a8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc81012-b977-4df9-95d2-9781dc6dd527", "sighting_of_ref": "indicator--10a35548-4894-4240-8278-7648a9fd4215", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309d64e4-e72c-4d8e-85d8-b3508e303d2b", "sighting_of_ref": "indicator--10a35548-4894-4240-8278-7648a9fd4215", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c92f6be-18a6-461c-b38c-eeebdf0e8218", "sighting_of_ref": "indicator--6ceb1762-8cc6-414f-b8cd-2845ee03f9d9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace5cc3c-dce1-4d88-aa4f-9234e44329f6", "sighting_of_ref": "indicator--6ceb1762-8cc6-414f-b8cd-2845ee03f9d9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e797dcbf-8bf6-4d5a-b34e-295864e0b241", "sighting_of_ref": "indicator--6ceb1762-8cc6-414f-b8cd-2845ee03f9d9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfb2d08-3040-404c-9b07-cdcef8bd8730", "sighting_of_ref": "indicator--dde8b014-a575-4970-b5ce-30c38f05bd20", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76979af-0569-4e74-a12a-08838e8219e3", "sighting_of_ref": "indicator--dde8b014-a575-4970-b5ce-30c38f05bd20", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bde5d87-922d-424c-a2f9-47340dfb9183", "sighting_of_ref": "indicator--dde8b014-a575-4970-b5ce-30c38f05bd20", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca44af48-ebcf-4302-bab5-9ba7b0dcb26c", "sighting_of_ref": "indicator--4c8272e4-acf5-43b7-9c43-8dfa88073ac4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a20c3c9-9131-4c95-826d-780408a86b74", "sighting_of_ref": "indicator--0f621db8-b183-4a7d-ab20-d3297c2b3cac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d75f6c-d7e8-4856-853e-3851b9ff7bdb", "sighting_of_ref": "indicator--0f621db8-b183-4a7d-ab20-d3297c2b3cac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223fa35a-2662-4e4e-a01a-ae9a57c09443", "sighting_of_ref": "indicator--bec75248-68dd-4b8f-aeb7-411fe2e5d6fc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a740445c-e118-4797-8dd0-1b31f7069828", "sighting_of_ref": "indicator--bec75248-68dd-4b8f-aeb7-411fe2e5d6fc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89eab6c-a75f-4a1c-af0f-e1710d037b9b", "sighting_of_ref": "indicator--bec75248-68dd-4b8f-aeb7-411fe2e5d6fc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc283362-5308-40b4-90cb-6359b2d870c3", "sighting_of_ref": "indicator--e7e172db-8421-4531-a331-8f8b91b50420", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cf2ab4-87a7-40bf-961e-79f13f4f80ce", "sighting_of_ref": "indicator--e7e172db-8421-4531-a331-8f8b91b50420", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93dec0ef-80e7-41f6-a2f3-3221ea660793", "sighting_of_ref": "indicator--e7e172db-8421-4531-a331-8f8b91b50420", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5165f757-ab5c-453f-bbb7-42e4d79b8416", "sighting_of_ref": "indicator--a3572b0b-c92a-418a-8c1f-e17d364ad9a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75476319-aafa-4afc-acf8-5a62d1acf7a2", "sighting_of_ref": "indicator--a3572b0b-c92a-418a-8c1f-e17d364ad9a7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271404cc-91f1-458b-8371-00c621df5622", "sighting_of_ref": "indicator--9204d962-3191-45aa-9169-7d06f28c47f7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0ae8b3-a03a-4d28-80cd-1e7395b51eab", "sighting_of_ref": "indicator--9204d962-3191-45aa-9169-7d06f28c47f7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d105848d-fab7-48fc-b9ab-606035d9cb31", "sighting_of_ref": "indicator--9775f629-2392-44b6-b685-cc741eb6e4db", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555ed435-db6f-4847-8232-926647df0e49", "sighting_of_ref": "indicator--9775f629-2392-44b6-b685-cc741eb6e4db", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba715e61-b0ef-43fb-8d4d-3eec22800cb3", "sighting_of_ref": "indicator--9775f629-2392-44b6-b685-cc741eb6e4db", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafd9801-bfda-4522-aa4c-63c9a82c3b45", "sighting_of_ref": "indicator--8d0ca9fc-c787-42ce-aab0-91e6a31ff809", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee5e246-8acf-4dcd-bc38-c9ba349f1bd2", "sighting_of_ref": "indicator--6c53a36f-0392-46e3-96f6-2a05467573fd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca2b5b6-1805-4d21-9c8d-951e990f466b", "sighting_of_ref": "indicator--d4e65f76-73fa-4dc4-9573-234498fa5431", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8a76e1-0acd-4c4b-a457-8f9c43619f54", "sighting_of_ref": "indicator--d4e65f76-73fa-4dc4-9573-234498fa5431", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adf5450-63cd-43dd-80ba-33c27ded0bdf", "sighting_of_ref": "indicator--d4e65f76-73fa-4dc4-9573-234498fa5431", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03c7c7c-28d2-4212-bb67-915313607bee", "sighting_of_ref": "indicator--bb98a146-860a-4349-ad05-a865b1f30453", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf01a39-5596-4415-a847-2cb995b5bf48", "sighting_of_ref": "indicator--f6915c86-219e-4528-b389-ca39aa74f577", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e726520a-8a1c-4e90-b24b-dea6a3cc9dd8", "sighting_of_ref": "indicator--f6915c86-219e-4528-b389-ca39aa74f577", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6631f5-63a5-41c9-b73f-fc5a5ef9a1d0", "sighting_of_ref": "indicator--f6915c86-219e-4528-b389-ca39aa74f577", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144771eb-a08f-4b1c-a454-9b0bbb5a0fc5", "sighting_of_ref": "indicator--a8c74b8d-ff18-461f-babd-4f6d9e211111", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276f344c-0622-4a5a-9dd4-fd7c6c061076", "sighting_of_ref": "indicator--2f5ef546-f280-483e-aa48-f2a3773a462e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e264952e-6644-4a9a-9445-0e69b4068ba6", "sighting_of_ref": "indicator--20d10bd8-421c-4ae6-be33-889d40aff7b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac742f5-b24a-4b90-854f-2b1601a7162e", "sighting_of_ref": "indicator--20d10bd8-421c-4ae6-be33-889d40aff7b0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d386f3f-7207-43f1-b53d-de4665ac4886", "sighting_of_ref": "indicator--20d10bd8-421c-4ae6-be33-889d40aff7b0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c6f2c5-3274-466f-ab1a-86d827b66a2d", "sighting_of_ref": "indicator--a66f480f-d8a8-412e-8d86-a04a0108e451", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdecaad4-7f4d-433b-b1d2-10905edd258f", "sighting_of_ref": "indicator--f8b7e0a1-4783-4c01-8fc8-bac622979778", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45acde4-63ce-4738-8a76-c02f1e6e40f3", "sighting_of_ref": "indicator--f8b7e0a1-4783-4c01-8fc8-bac622979778", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b265135a-0098-450f-84ca-4755ee86c2aa", "sighting_of_ref": "indicator--f8b7e0a1-4783-4c01-8fc8-bac622979778", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e91b7fd-6848-442a-9296-62b23a314fa2", "sighting_of_ref": "indicator--67546002-7246-41fb-af17-fa5f0a1c2acb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a030dce4-6a93-4fc9-9d9d-e6380e24e19c", "sighting_of_ref": "indicator--0a1ea1f7-0e70-4409-aa16-d09b9173fb24", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bb7240-f9d4-48ce-967a-8e8662ccf554", "sighting_of_ref": "indicator--e01e9da5-cd62-45cc-a452-8a2c163b0693", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45df28c-cd04-4e41-b9b4-3721e337c27b", "sighting_of_ref": "indicator--42b67940-eed9-4bbf-9ee4-6ee6904539e6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5891294e-c0b3-4b5c-93c6-dff32a0ea6e5", "sighting_of_ref": "indicator--a323749b-1b31-4ee8-ad24-88b36c44fe9d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a022b1-ec4c-4de3-85a3-f187823e7c16", "sighting_of_ref": "indicator--a323749b-1b31-4ee8-ad24-88b36c44fe9d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb384f54-375b-416c-acae-183580670ea2", "sighting_of_ref": "indicator--6ddfb89b-6031-4772-b180-e2be10899015", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df030e6-f87c-4ef2-bab8-c12f565578b4", "sighting_of_ref": "indicator--6ddfb89b-6031-4772-b180-e2be10899015", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d9e33d-eab4-490f-8a2f-915111dbc2cb", "sighting_of_ref": "indicator--6ddfb89b-6031-4772-b180-e2be10899015", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ac845b-ebe0-4dcd-bee6-777408cace89", "sighting_of_ref": "indicator--abe5aa46-06ce-4ba8-912b-ddd55dbd7f11", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed8e9fc-cbf7-4d24-873b-ebcca3475e65", "sighting_of_ref": "indicator--abe5aa46-06ce-4ba8-912b-ddd55dbd7f11", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e48dc4-5c8f-424a-a2bf-ce74466eed4a", "sighting_of_ref": "indicator--abe5aa46-06ce-4ba8-912b-ddd55dbd7f11", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4891d54-d770-42bd-a506-cc5634996d03", "sighting_of_ref": "indicator--bb03d3bf-4ce5-4ab9-a318-30fb5e723055", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd0eca0-255e-4934-bb20-88e7a988e7db", "sighting_of_ref": "indicator--521a11d7-4497-4891-b2a0-0828f9f45ceb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21c8a1b-74e9-48e2-b434-51660cd3d6d9", "sighting_of_ref": "indicator--3a256a3c-2d1e-4899-bbd2-9e2db4e207ec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5dff07-da4a-4117-bf4b-747e3a2c8839", "sighting_of_ref": "indicator--9c727b1a-7075-45ee-9410-5e53039e5f48", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9f20c6-3dc5-4136-b8a2-490519030baa", "sighting_of_ref": "indicator--9c727b1a-7075-45ee-9410-5e53039e5f48", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdae58e-6e4f-4ce6-981a-339b6b73a382", "sighting_of_ref": "indicator--9c727b1a-7075-45ee-9410-5e53039e5f48", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7578e925-5931-45f2-a7fd-c9e83ddcfea4", "sighting_of_ref": "indicator--4d3d02b5-ccd6-4189-96eb-5c84df1dc84f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c22c56-73f0-4c8a-82ac-4253b63c8a74", "sighting_of_ref": "indicator--65bdae2b-8d6b-4201-b02a-61b4294f2500", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ceab1e4-3d1c-4dfe-b19d-26a31c4c136d", "sighting_of_ref": "indicator--8d43b18d-28ad-4852-bb31-7a6e5530fedb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c4001f-a0d1-4a86-801f-150cd77106eb", "sighting_of_ref": "indicator--8d43b18d-28ad-4852-bb31-7a6e5530fedb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77ad4df-504c-4316-ad68-8e858126239c", "sighting_of_ref": "indicator--8d43b18d-28ad-4852-bb31-7a6e5530fedb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e531982a-f25e-4759-a519-060082c84a32", "sighting_of_ref": "indicator--4c6cc32d-29fe-4354-bc6c-e880391bf1eb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6a4310-52bf-4cdc-9b36-eabdb622bdbc", "sighting_of_ref": "indicator--aec7a964-ca91-4bd6-9a3c-15a9d013d2bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046b83b9-74e9-4de9-a871-71147e1ef3a3", "sighting_of_ref": "indicator--aec7a964-ca91-4bd6-9a3c-15a9d013d2bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709366ac-3630-4cfc-9e0f-8831c6e441c4", "sighting_of_ref": "indicator--8cec54a6-cb5d-4f45-bc0a-f07c2f59cea1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8163e9d5-9d2c-41d0-bb65-0a26cde37bab", "sighting_of_ref": "indicator--431e76de-364f-46ab-aeae-2d20e8f279c3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8f1b00-263e-4731-b912-d72c5496b60d", "sighting_of_ref": "indicator--9124b201-71b0-4a5f-9b62-10aae61870da", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9bfb39-8226-431a-94cc-f0c793a639cd", "sighting_of_ref": "indicator--09fd1c4e-a3d1-443e-8749-4ddd528d07eb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc89f998-e7ad-412a-9dfe-dea1c61f4b29", "sighting_of_ref": "indicator--fd6d8254-d24c-4545-9308-d992a4474059", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcba8be-5d71-4e95-ad26-b0cdf42a2495", "sighting_of_ref": "indicator--1d4b49ed-96ae-47ce-acb8-e5a1d2e273da", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b6f93b-e1bd-4341-b202-e51c26643711", "sighting_of_ref": "indicator--a1281511-bae2-48e7-86f4-128676deda3b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67e6cdd-3404-4d2d-9b3d-48e02e0c9e75", "sighting_of_ref": "indicator--f9313f9b-d44e-4504-8d09-160f87893b5c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ac37be-4228-4eb4-820b-63397f16e775", "sighting_of_ref": "indicator--e7c8b7a1-e973-4523-b6e1-4e405bbdb0db", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d044f250-4539-48e3-b1e9-e14511fd9729", "sighting_of_ref": "indicator--e7c8b7a1-e973-4523-b6e1-4e405bbdb0db", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b9690a-b958-4538-87b1-c6e1cb30d3c6", "sighting_of_ref": "indicator--202406ce-3a96-4e49-bd12-9322bc2297b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f70e2d-f96d-4d9d-98b0-f99af83a94ef", "sighting_of_ref": "indicator--202406ce-3a96-4e49-bd12-9322bc2297b0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e588f9e-68d0-44b7-8d5a-6530fc717632", "sighting_of_ref": "indicator--202406ce-3a96-4e49-bd12-9322bc2297b0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8ef6af-7734-4b8a-8178-bf1fe93b045c", "sighting_of_ref": "indicator--ca4c304f-ae64-4821-88c9-359cc7ceb705", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f10e13-90d7-426e-9d76-543e3d98d662", "sighting_of_ref": "indicator--851e1a6a-f8fc-4cc8-81a3-b8ed13024221", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86d6a37-d16d-4347-8a6c-63cafa3f7b10", "sighting_of_ref": "indicator--193df2a5-596f-4d4b-8926-3d3ded7db8e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd95fb3-1f6d-4a5d-84fc-d5b7c8246b23", "sighting_of_ref": "indicator--7817d804-1cdf-431e-855c-b741a42915eb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b72b51-475a-4faa-9841-5e4492d945c0", "sighting_of_ref": "indicator--7817d804-1cdf-431e-855c-b741a42915eb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7e7aeb-c369-4667-b877-4195024e7551", "sighting_of_ref": "indicator--50c64937-8df2-4146-a320-c4be7843841b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdcd7b39-d371-4f8f-be63-2f7e1204709b", "sighting_of_ref": "indicator--50c64937-8df2-4146-a320-c4be7843841b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7744ddac-9b41-4017-be4c-1558fe11c29c", "sighting_of_ref": "indicator--50c64937-8df2-4146-a320-c4be7843841b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9946cd-7103-4887-9f26-c140ddf227e8", "sighting_of_ref": "indicator--474357ba-39d3-4639-bcbf-8aa6c6597b8a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7dd3f1-8940-4936-a5bd-9e2b01ce090b", "sighting_of_ref": "indicator--a7f5f8bc-f783-4313-8d9f-61dc37dd62a5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a0c1d0-19ea-4e12-9532-164b607f91cf", "sighting_of_ref": "indicator--bf1357fd-4c8f-4519-9db2-cb0f49c9966c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534f21ff-a4a6-412b-8512-98e70012a923", "sighting_of_ref": "indicator--53ecdc62-a024-48ab-87bf-8c9c6d154722", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d497ac8-2f50-4ca2-a21a-baeb15ab247f", "sighting_of_ref": "indicator--c172ba75-a71c-4c8b-a74d-a7f92c4c17af", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0335cf-d8e4-44d4-b54b-4918b919aded", "sighting_of_ref": "indicator--1e95dc58-31ed-4846-a5d3-ce8a900ba681", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768ea690-3a6f-453f-b134-d404c2d54231", "sighting_of_ref": "indicator--ee185c57-549c-478b-b349-279c3db49210", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f858fa2-c0ae-4a34-8f64-0f89ae43dbaf", "sighting_of_ref": "indicator--2ffb5ea5-620d-4ef2-98da-77e6debf6d10", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ddeab1-f736-45ed-92ef-bff5908782f6", "sighting_of_ref": "indicator--2b73026c-d452-476a-a0ed-b4b0853b41d4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e48d430-2b0a-40b1-94e6-272108acf26b", "sighting_of_ref": "indicator--2b73026c-d452-476a-a0ed-b4b0853b41d4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965d360c-b24c-4a6b-bf3f-b3e34873afcd", "sighting_of_ref": "indicator--2b73026c-d452-476a-a0ed-b4b0853b41d4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1976afc9-5605-46cd-9eef-54fdbd737b80", "sighting_of_ref": "indicator--d0d78cfb-3eb8-434e-a5a5-015c6ca80f85", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1ad74f-bd8f-4246-a7c5-fe780f16ba1c", "sighting_of_ref": "indicator--d0d78cfb-3eb8-434e-a5a5-015c6ca80f85", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861b95b0-445a-4bee-97d8-281f5a9437b9", "sighting_of_ref": "indicator--d0d78cfb-3eb8-434e-a5a5-015c6ca80f85", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1503f6-ab3d-4761-abc3-0cf6bc3b54dd", "sighting_of_ref": "indicator--7f76b5a3-f478-4800-b809-e22020582e80", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcb0bd9-d14a-4736-bb4e-823b3a6ef4f6", "sighting_of_ref": "indicator--7f76b5a3-f478-4800-b809-e22020582e80", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1195957b-6a7b-4978-84b3-b161cdf776a2", "sighting_of_ref": "indicator--7f76b5a3-f478-4800-b809-e22020582e80", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e128d449-32ae-4a7d-b17f-35df50baa839", "sighting_of_ref": "indicator--27f19caa-c496-460f-a828-34a6a6ab78ab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3dc696-55d0-4ff1-9316-8ce832d17e40", "sighting_of_ref": "indicator--5194b0ea-b688-45be-be2b-0fef84a4f247", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a18bd9-cf32-4095-b13e-14b8153b6b4b", "sighting_of_ref": "indicator--0170c7da-972c-411e-b114-800ffb705a3e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de479db0-05d5-404f-8075-6f26e15b3196", "sighting_of_ref": "indicator--b5499b3a-af5c-4473-a018-21669fb8ec45", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb204b9-3501-4a3e-b155-ada56627425f", "sighting_of_ref": "indicator--7f00b74f-5887-4175-815f-17f693381b9c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce524547-d82c-4076-9b74-2b8d23d06936", "sighting_of_ref": "indicator--5d206a7a-61ee-4cb9-b607-5c2a40ee1871", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb56f59-adaa-4bc9-9c95-ddb1a049000f", "sighting_of_ref": "indicator--21ee0612-192c-4eb5-a967-25d84e056179", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b25430-dca0-4fc1-8e9c-f00c697bc513", "sighting_of_ref": "indicator--ee4f9f8c-eae2-4c49-9f60-5a34820247c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6605f5b9-775b-48e2-8519-83dec99ec861", "sighting_of_ref": "indicator--161d8cab-10fd-4698-943a-4a4bee7f63cf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de81b69-40d4-456e-b841-a3b54a443d93", "sighting_of_ref": "indicator--08e39a15-f429-46cd-8235-b35aa21015cf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2cf825-fe4d-4cf5-9895-4c1512223aa7", "sighting_of_ref": "indicator--2a1d30e4-72cf-4e0d-b97c-29e0949d368d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3228e38f-9656-4a1f-9ef7-57f7d788bd91", "sighting_of_ref": "indicator--c717484d-7c7c-4643-b9c2-44a6de04026e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644407bc-be5b-4569-9d70-0e4e6e3ece52", "sighting_of_ref": "indicator--4bbab253-72ed-4ccf-8e5a-854606dd9e02", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f00927-354b-4796-b0ba-84f14b3c6662", "sighting_of_ref": "indicator--caaa07cc-d1d7-44b0-b393-f76b1b8be13c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ab3fd1-83ed-472b-a87f-94ad494020cc", "sighting_of_ref": "indicator--caaa07cc-d1d7-44b0-b393-f76b1b8be13c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025f749e-617b-4912-b643-528c772746c0", "sighting_of_ref": "indicator--14c35e96-1ab0-4062-984f-15b99b0fbf8a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a544b8a0-3c73-4ee6-9d44-569fb0595645", "sighting_of_ref": "indicator--d95e7832-2e5f-4cc7-99b5-8dfebdde84f7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--183f7831-111d-4637-96c2-02010de7297d", "sighting_of_ref": "indicator--4de0d326-94db-40f3-b90f-724d8a583693", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39edd01-d4c3-4ac3-a058-68264c6d1358", "sighting_of_ref": "indicator--5dbf6c9e-b07e-41dc-a35a-a0aa90249e9d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238502a4-29b9-463b-9c61-dfd3e7be9666", "sighting_of_ref": "indicator--4120edf0-7548-4579-94dc-fb227d4f7caa", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e169f08-119a-4bfd-9506-b62609bfd0e0", "sighting_of_ref": "indicator--af20ad67-5c01-41df-ae15-afa7b8374102", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bd98ee-c8f7-472d-b5a7-466c389e6c6a", "sighting_of_ref": "indicator--2952f90f-8916-44cd-8b2f-ce655be91691", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b23377-4f71-4209-b45e-b3c53e0d313a", "sighting_of_ref": "indicator--b2cc8464-70c1-4f7a-86c9-68025a3c2f8c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ea945a-f83f-4000-90e6-3190e7ca74de", "sighting_of_ref": "indicator--b7336b1f-ee67-4124-8270-62b9d92cd379", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491f9093-7f6b-42c5-9d11-05292203e3f7", "sighting_of_ref": "indicator--f290ec40-cb64-4f4f-9cea-7f3e9289fc89", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4b8f7b-0457-42fb-a372-f13c6fe9e980", "sighting_of_ref": "indicator--f290ec40-cb64-4f4f-9cea-7f3e9289fc89", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26128e3-9a42-4831-b938-863699a1e736", "sighting_of_ref": "indicator--f290ec40-cb64-4f4f-9cea-7f3e9289fc89", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77266e11-4a95-42ac-86fd-3ff8f239fac1", "sighting_of_ref": "indicator--81ab4448-f6ff-47e8-9ed1-57670d840b3f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcecb32-e016-4bbe-b458-ef67d4d32280", "sighting_of_ref": "indicator--cf147ca3-ebbc-4eb8-b523-96406e8c8bb7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a71af4-ee4a-4f35-a771-3e5e20436a32", "sighting_of_ref": "indicator--fa27dec7-1aa0-47d1-98d9-489cc4d6ce89", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7570fe57-b24f-4de6-a021-c86419f52b1a", "sighting_of_ref": "indicator--26838fc4-0d67-42fb-9f25-81495a82d856", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32acaeda-7cd5-4a9a-bdfc-ef3eeb876065", "sighting_of_ref": "indicator--06b8cd29-18cd-4149-b094-9a83a7bac97a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0a1dbc-89cc-41b3-96f1-0af56e848ccd", "sighting_of_ref": "indicator--06b8cd29-18cd-4149-b094-9a83a7bac97a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bc9a22-72a7-4948-b63f-628e7caa172b", "sighting_of_ref": "indicator--06b8cd29-18cd-4149-b094-9a83a7bac97a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee09d547-a27e-436e-b86b-1d0d76716160", "sighting_of_ref": "indicator--88cc18b2-1bb7-4cbb-adb9-76ce00d5e92a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231af5ad-f4c4-4ef2-b53a-0a2bcf5025a3", "sighting_of_ref": "indicator--555edc87-a947-454c-9b2b-f3bbfe1eab70", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0343452e-fa11-4674-9700-e23195a9f670", "sighting_of_ref": "indicator--368a7e81-509f-4651-8c0d-df04c2840550", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b8ad50-e90a-407b-857b-8b5554d8d733", "sighting_of_ref": "indicator--7bf1cd1e-90a7-4131-bcba-b86976ad8342", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e66a3f-5140-45d3-bbbf-19496cc00bda", "sighting_of_ref": "indicator--f4dce9cb-b429-496d-8f2c-aa5806a06f67", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6979b77-3e3c-4b8b-bd87-1e107e744136", "sighting_of_ref": "indicator--61fd4d8e-d6c6-44e7-8189-8df290c2402e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7dbd24-d49a-4303-92ae-3d08fc1024b7", "sighting_of_ref": "indicator--61fd4d8e-d6c6-44e7-8189-8df290c2402e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9d80f7-ad39-46c7-bae6-6a492cf6e151", "sighting_of_ref": "indicator--61fd4d8e-d6c6-44e7-8189-8df290c2402e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866e32b6-3bbd-48da-9e93-9b7985482290", "sighting_of_ref": "indicator--9a6c35bb-9657-4ac5-aaf0-037446c62fc3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373c479a-8c9b-4183-b60a-29366cf53857", "sighting_of_ref": "indicator--0d09c41b-dac3-4012-9bb8-5ec66c334505", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aadf024-04e0-48e3-be99-bb12fdcb4f50", "sighting_of_ref": "indicator--c5ea4124-5960-4b91-93fa-d489db264eec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd971622-8128-4108-be01-d4ab8554eba3", "sighting_of_ref": "indicator--2ab596db-8e2a-4070-b018-19904a0ba63f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111a1548-fe0a-4468-88c9-4b49c80edce2", "sighting_of_ref": "indicator--b2870227-159b-49bf-9cce-6561dd523b2d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855a6145-3d1a-4c09-a34c-a4ce4cc12c3b", "sighting_of_ref": "indicator--27a6356f-316d-41b1-ab6c-4a2fe770ec26", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a226e3d-e703-4607-ad1c-1aa4870434f6", "sighting_of_ref": "indicator--0fed5d20-d46e-44fe-bbe8-7a9d40fe50fa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683409e0-5a20-45e1-9928-148c78842629", "sighting_of_ref": "indicator--0fed5d20-d46e-44fe-bbe8-7a9d40fe50fa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485d81dc-cb8e-4f5e-af61-6f0300714e4f", "sighting_of_ref": "indicator--759de2cb-5af9-44fe-8b15-0874018aa2b2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d868ea03-1cc9-42fa-94fb-7a77c6ac8215", "sighting_of_ref": "indicator--ef3447ce-1170-44b6-bdb9-3ffcf1f68428", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97a2739-f376-41ec-8196-29de7b1e1ca8", "sighting_of_ref": "indicator--3f6d4792-cc21-49ad-a591-ad156ce3fab5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf80d1b5-a209-45e4-8acc-0d75ffc8fa69", "sighting_of_ref": "indicator--ee90dd50-4605-49ac-8da7-8cbb911296cd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b212fa30-d67d-4f0f-bb58-ba5316fef68f", "sighting_of_ref": "indicator--ee90dd50-4605-49ac-8da7-8cbb911296cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4b3c12-cc21-447c-b03e-d84315d5291d", "sighting_of_ref": "indicator--67356af9-521b-414c-acc0-92c0d0a2e83b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6ee354-1cf0-4f5f-8b23-4c4464be1ac6", "sighting_of_ref": "indicator--67356af9-521b-414c-acc0-92c0d0a2e83b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d89048-7c83-49d2-b485-f8d149ad78e2", "sighting_of_ref": "indicator--85c552d1-7c80-4d21-90f2-56cb2744d82d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e0a450-623d-49ed-982f-1fdfd90004f6", "sighting_of_ref": "indicator--85c552d1-7c80-4d21-90f2-56cb2744d82d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e45df6c-03d0-4d29-94d3-505d2ffa1237", "sighting_of_ref": "indicator--0d2bc2ed-14f8-449b-9433-5f668f371927", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d53f0eb-a04f-4390-a0c9-b1a8fed51e5d", "sighting_of_ref": "indicator--0d2bc2ed-14f8-449b-9433-5f668f371927", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51e8250-1003-406f-a2f0-ba8e256b790d", "sighting_of_ref": "indicator--c218d6d9-a717-472c-b6a7-7e5173deee1a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b204211-f33e-427d-b509-faac70b3f252", "sighting_of_ref": "indicator--3b7c4702-4ca5-4d6d-9b41-8277e79d2840", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d81315-49b9-41dd-a19d-7834bde9326e", "sighting_of_ref": "indicator--3b7c4702-4ca5-4d6d-9b41-8277e79d2840", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363d5413-a258-48ca-b4c6-a41a4ebf25e4", "sighting_of_ref": "indicator--e81a916c-dd08-446f-9093-979c3ede2ff4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fbba7a-7399-431f-b68f-673a112ef493", "sighting_of_ref": "indicator--89ee97cc-76fb-4048-9b1c-cb866a11cc4c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b266c0-bb1b-446f-8e9f-0aa867bdc1dc", "sighting_of_ref": "indicator--8f34482c-9e73-4ced-8441-a47a9ea18d39", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e02e257-a777-4905-a698-274af08a47b6", "sighting_of_ref": "indicator--6316d2e4-c283-4130-9150-f7dbb069d642", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777eebb4-71d6-4fe7-99f4-f51cc504bf2e", "sighting_of_ref": "indicator--2fb921f6-13ca-4019-937c-014a2f71b3a3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf748be-4c10-440d-8dd8-da1622ea9908", "sighting_of_ref": "indicator--2fb921f6-13ca-4019-937c-014a2f71b3a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f318e096-1f56-4a6f-b04b-84c474cdd48e", "sighting_of_ref": "indicator--7ec56962-76d7-4f93-9266-9dbf8a91555e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc456393-2b20-451f-b406-838f624957b4", "sighting_of_ref": "indicator--7340e454-a214-4684-8140-79aac1f6d8aa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baeb345d-a3de-4983-bf5a-14f75e632998", "sighting_of_ref": "indicator--7511b43b-30d0-4b61-aaec-1c6e2a08a590", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3e54e3-4143-4517-9eb5-7a546ec7d2dd", "sighting_of_ref": "indicator--702ac729-e890-4a19-b788-bace9beb8765", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eaa1827-a1f3-47cf-af2a-9ded34fea486", "sighting_of_ref": "indicator--4f285b1a-1ff4-438a-9cd3-738af541b842", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c935df4b-8342-4ea7-b216-e48f18e04b14", "sighting_of_ref": "indicator--116e31e4-b897-4154-a344-3f23380a314a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ea05a4-b012-43ae-a01b-92a972809212", "sighting_of_ref": "indicator--8180d75d-8501-439a-aae1-4f92c6e917a3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47a9a04-3f6f-4429-9dba-bb35f95d9c86", "sighting_of_ref": "indicator--8180d75d-8501-439a-aae1-4f92c6e917a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eac4073-0653-46fa-a9a7-95ea8b401280", "sighting_of_ref": "indicator--faa15334-b4ab-4f0a-9db5-8d1dfefc324e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22596d56-b5a5-46ad-8d7a-c03c7a4e9a1d", "sighting_of_ref": "indicator--5666f7c8-717f-421d-baa3-f491b77ec6f3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5f5ca0-7aee-4b58-97e3-d587910ff008", "sighting_of_ref": "indicator--47ab26b8-1e83-4555-befa-031e86614cd5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03af3d9c-528b-4ab0-903c-94d9ffa27001", "sighting_of_ref": "indicator--7f60d776-7190-48ad-bffe-b7e851167bdd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd63b3c5-a46f-40de-a254-a83ae434a322", "sighting_of_ref": "indicator--d1d4dfea-7a2e-4eb6-8b2c-3fbcd3fccf80", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70013826-bf89-482e-bbbe-0d49032e3b2f", "sighting_of_ref": "indicator--c4763f3e-39e3-44b5-91ea-26d7b008b7a4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc8ed86-259b-4d2c-b061-5c3d21ed4f5d", "sighting_of_ref": "indicator--95483a24-2582-47d1-94c5-080168aba75f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6355f8-b4f1-4f85-b949-a752fa4692c9", "sighting_of_ref": "indicator--7c4f791f-bfbe-4853-b447-9630d6590b4e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd368f2-7a47-4c42-bde3-96b0546b489e", "sighting_of_ref": "indicator--16195958-8838-4e98-97e8-bb7d571daee4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c92999-1222-4fc1-8fd5-20248b58e7aa", "sighting_of_ref": "indicator--3409c82e-f7ff-42af-a984-4da6bc1272d8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6a612b-253e-47d9-bc1e-d9b293e97e71", "sighting_of_ref": "indicator--ea6b5fc2-d861-49f2-bf54-9c8825b213b2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56367d4a-0069-45b2-87b8-89031e10709e", "sighting_of_ref": "indicator--0540c8d4-f5c0-43b7-b255-06263e1652e8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eaa9e10-1bb0-40c7-80ec-9500d5443a5f", "sighting_of_ref": "indicator--84b4a470-b6ba-4e7d-a931-f86f71adcfde", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcc924f-ba13-4db2-ab44-3b6cb60d8bd7", "sighting_of_ref": "indicator--84b4a470-b6ba-4e7d-a931-f86f71adcfde", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9b784f-b1f3-45f3-a5a3-d92b8675178f", "sighting_of_ref": "indicator--7d697113-db1f-4093-95ec-033d5171fe35", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a305e820-8a43-470a-ba39-8550671efedf", "sighting_of_ref": "indicator--bd50882a-8cf9-4269-bae5-89f4f3eb9daf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ffcb3a-d0ad-4289-962b-09c9e1db2070", "sighting_of_ref": "indicator--a28e3351-8439-41ea-ae43-06688d9b6935", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a10eab2-5d14-4c9a-9d8a-fd31b6237cbc", "sighting_of_ref": "indicator--4587e2b7-b458-41d5-b4ee-bf8cfdff2030", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0175eec-b134-4db5-8349-58ce96e85743", "sighting_of_ref": "indicator--ea2b4a17-bc50-46fd-a4e0-f7522b3b55d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9655ed14-16a6-477d-8e21-3182249a8b26", "sighting_of_ref": "indicator--ea2b4a17-bc50-46fd-a4e0-f7522b3b55d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a8c0b2-d2f8-4942-9278-77945f0b6d7a", "sighting_of_ref": "indicator--fe7dd770-d60e-4580-8723-564c00c3c4a9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfe035e-67f8-4d99-9969-49a6b1a710e8", "sighting_of_ref": "indicator--8b82527a-ca84-49e4-bd44-efb3276d69f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21983e0c-b23f-4db3-966c-ac6aea68b887", "sighting_of_ref": "indicator--8b82527a-ca84-49e4-bd44-efb3276d69f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ba9d50-a524-46ef-ace5-e8dcbb84b913", "sighting_of_ref": "indicator--b43ea478-ad52-4186-b0e9-1985b7199994", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472f2b2d-4ea8-4308-9d1e-225727dbea4a", "sighting_of_ref": "indicator--99859c0f-ac23-4069-b3f8-3ba5b46cb64e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48811bed-0434-4762-83e0-78c256ce4713", "sighting_of_ref": "indicator--339476fd-1965-4643-b218-cbe6c0118a4f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4c162f-debf-431c-934e-8c743f70f5e9", "sighting_of_ref": "indicator--a6eb70dc-db41-4afd-a448-1087fa30b7eb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a269e3-fb52-4553-82ad-90424147b3c9", "sighting_of_ref": "indicator--4ff05af9-be57-4d73-bbb7-00046aea8413", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15050397-8b40-4f23-8737-a12ead27230b", "sighting_of_ref": "indicator--97f5188a-d40a-4cac-8eca-3240be8e7f1d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92351aa0-ff40-4545-b55c-a89816efeb47", "sighting_of_ref": "indicator--97f5188a-d40a-4cac-8eca-3240be8e7f1d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824e1681-a6a2-4576-953f-7dd23d96a409", "sighting_of_ref": "indicator--8017e543-f02b-4e9b-b299-cfe6065b4036", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eacfde6-e7e0-4960-b7cc-369065df0eaa", "sighting_of_ref": "indicator--f172b3fb-cdea-4b03-b559-ea828185a28c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4405c7-f774-425b-86c6-28e3a1a8d02e", "sighting_of_ref": "indicator--222a4749-dc2a-451c-a8da-185acd77d81c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2445476e-882c-4a82-b304-517e19a48ba0", "sighting_of_ref": "indicator--7e9ec8b6-9fea-46d8-bd4f-297ccd7b00c2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d6a216-e5c1-4dea-bf16-3538d8de21cb", "sighting_of_ref": "indicator--a7d0b199-1cee-4144-86c5-3cd10a122ee1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a79386c-2cdb-46bd-800e-900811a3c694", "sighting_of_ref": "indicator--90c05812-951e-46db-95f1-36b4e25aca66", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d9641e-0375-477f-805b-465150106148", "sighting_of_ref": "indicator--9cb1a351-314c-4c0d-858b-35062c21bf44", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdfc847-f57f-491f-8ab0-f17f7df1cf1f", "sighting_of_ref": "indicator--cca44027-ed8a-4e66-b91d-3654012665ad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d2bdaf-6b2a-451a-8e3d-f92e69914e24", "sighting_of_ref": "indicator--79493a6b-9931-4a11-ba0c-51b07889ba69", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587b32d6-77fc-47e0-bc92-d405be770319", "sighting_of_ref": "indicator--701ff55a-94a9-4ada-9e20-6b33f6766456", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b909344-b623-471c-936d-9ca77af7969c", "sighting_of_ref": "indicator--548699aa-df53-42f1-b748-a51e50532f73", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914e7f13-9e7a-41a6-80c3-43e5cf0ca1ae", "sighting_of_ref": "indicator--c83c8681-562e-4592-ba33-319dd7a6945f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aedef0f-879a-4b73-a1f9-76e5b28c7c77", "sighting_of_ref": "indicator--c83c8681-562e-4592-ba33-319dd7a6945f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b992af-fadf-446e-bd68-50e1cd48a6ff", "sighting_of_ref": "indicator--fd01eb55-cdf3-4b93-b5ef-55c0b23f0db2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e816a94b-8b0e-440e-a729-55bfb7210ec7", "sighting_of_ref": "indicator--6fa46e65-7c6d-4db4-a2d2-130f7c22c2b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6980469d-1fe2-4799-a588-830291116b8a", "sighting_of_ref": "indicator--fe9b4001-5309-4575-b168-0dcfece09e8e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1e1985-0c54-4acc-8eff-5430ca62cd02", "sighting_of_ref": "indicator--e5948f02-ad90-454c-905e-5ead90e81d97", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31c6831-5a8f-4fd7-9ab1-7f61137c1b82", "sighting_of_ref": "indicator--4f27af30-06b6-4d4f-873b-f50578f0d5fb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50759a76-0f2e-47f0-a8ea-ae9ba1dfed5e", "sighting_of_ref": "indicator--4f27af30-06b6-4d4f-873b-f50578f0d5fb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc916e0-83b8-48c8-a465-d6a3cb64a1e2", "sighting_of_ref": "indicator--1b85ce82-a4c0-4649-9670-4e84fa76dcec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b29702-ab37-4530-8e6c-a6586c958ccb", "sighting_of_ref": "indicator--1b85ce82-a4c0-4649-9670-4e84fa76dcec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9576e2f9-2557-47f0-a3dd-08be7c0c4c2f", "sighting_of_ref": "indicator--5f6afb66-4edd-4258-a667-82d83f2da21c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cee992-3395-4b7d-9594-30f43f25616b", "sighting_of_ref": "indicator--cb6e6879-3c4f-4732-bf8a-28845befc018", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c5699e-04b7-423d-832c-3dbda7d3d24a", "sighting_of_ref": "indicator--f216363c-ce4e-4e45-a425-5c1834c2f888", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d251516-19b5-4717-85c2-fbec348c5cdf", "sighting_of_ref": "indicator--bed98a24-e1b5-466d-abb4-11b929afd45b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcab801c-73dd-49fd-b2c4-01e78b44293b", "sighting_of_ref": "indicator--60598241-8722-4438-9425-65b6eb9e97b2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354d28b1-5510-4bdb-88d4-207169132349", "sighting_of_ref": "indicator--e573381c-6bcb-4753-8f07-707f9d1d80d0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e1570f-8c0c-409c-a193-4ead265f2014", "sighting_of_ref": "indicator--e573381c-6bcb-4753-8f07-707f9d1d80d0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47014e32-67f9-4c46-8f11-3667ee3939cb", "sighting_of_ref": "indicator--e573381c-6bcb-4753-8f07-707f9d1d80d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed90058d-4945-4459-89fa-6ea941bfa807", "sighting_of_ref": "indicator--7900488f-174b-4236-948c-9ccd9cba5164", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e049e29-5d88-465e-8d30-1e705428379a", "sighting_of_ref": "indicator--7900488f-174b-4236-948c-9ccd9cba5164", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff117cf-0d14-4474-9705-1887b3caf61b", "sighting_of_ref": "indicator--440a49ad-e83c-425b-bd86-436aaf12844f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0643b05-51bb-4bb1-9bcb-8532604ed066", "sighting_of_ref": "indicator--91bcf1d5-c272-461f-8b2a-fdf594618c78", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c0e24e-5971-4511-a1f3-9fb1537f93c6", "sighting_of_ref": "indicator--91bcf1d5-c272-461f-8b2a-fdf594618c78", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0bcb865-60a2-4398-b8af-914894c6b92b", "sighting_of_ref": "indicator--1edbbaf8-2555-46fc-92b1-c4445cbfeccb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7220214b-fe7a-4c84-95cc-8139d4b78793", "sighting_of_ref": "indicator--a99104f8-c194-439b-87fd-bfedf1109384", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bffaf7f-d961-4edf-bd2b-8b889742c49a", "sighting_of_ref": "indicator--f9ef853e-998b-4672-913f-944b326d6607", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9319c86f-cd0e-42c6-b50e-3fa4eabb8ecd", "sighting_of_ref": "indicator--c270b24f-5bc7-4095-a889-20d483037c75", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c769711-bc12-42a1-8865-fcb13d196d1d", "sighting_of_ref": "indicator--c270b24f-5bc7-4095-a889-20d483037c75", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c846181c-5788-4d02-8777-95f3c79f2e6f", "sighting_of_ref": "indicator--6258888f-1914-4daf-a0b7-0ba0bc127b38", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37b46c8-354a-426f-a375-51dd58b3110b", "sighting_of_ref": "indicator--15a3c4f1-52a3-4ed2-8344-820a3eba058f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b8acf0-8ee4-420a-b819-8e1dd802389d", "sighting_of_ref": "indicator--1b69ec33-aa29-47f2-83f0-80b6edcc5ac3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef1d012-73a9-4838-b70d-14ad9871326a", "sighting_of_ref": "indicator--bddd725e-2f20-48ba-bc24-ac8a79b7664c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f700bc-8af9-4ad6-96a8-148d9bf782e4", "sighting_of_ref": "indicator--b7dbab50-084c-46bf-ab5c-5e1c15e32c08", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e118d510-7136-4e5c-bf31-75a42b369420", "sighting_of_ref": "indicator--d582d369-76b9-4aca-810d-52964bc86a37", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3839a6-5a5b-420e-b322-f1fd586181e7", "sighting_of_ref": "indicator--47104720-81f1-462f-9517-daf03db35aab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c8d6d3-e699-4bf9-ac4c-b053dd4eaf0a", "sighting_of_ref": "indicator--f0e862bb-3d70-4b8c-9123-6ab932c79f30", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3907656-b1c4-442b-9df4-acc0ae2be823", "sighting_of_ref": "indicator--b565b430-69b3-4a5c-9186-adf7394a0b01", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d891d4-e97c-42a0-9819-0e86de9f4cdd", "sighting_of_ref": "indicator--222290a4-c863-45e6-ab3e-cd596ad54fb8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588dc0b0-df9e-4289-a24b-fe78274bb3bb", "sighting_of_ref": "indicator--75f1def9-5559-4f6f-8ce4-eeeac84c0833", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3faff591-9409-4711-94a4-8f8abcdc2a01", "sighting_of_ref": "indicator--523bb247-d743-4a73-9150-c1754511fbc6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf681bb-9927-4153-b693-d4e6273437d1", "sighting_of_ref": "indicator--523bb247-d743-4a73-9150-c1754511fbc6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae2cdf0-ef73-41e9-b677-f39b68da6104", "sighting_of_ref": "indicator--7825842f-679c-4bc8-8ae9-df0c0dc99179", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b0d56a-f102-4f7a-baa1-2bcfbe87e650", "sighting_of_ref": "indicator--7825842f-679c-4bc8-8ae9-df0c0dc99179", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a0ee31-9c7b-4327-84fd-5d2a11744a37", "sighting_of_ref": "indicator--d5225a62-d653-45ba-856f-2f9de50015ae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4347035c-152b-4216-ad1c-815993dfd1b3", "sighting_of_ref": "indicator--3881531c-4f8f-488b-b258-ed595e466006", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224d0f99-16ef-4146-b10c-a012bef0de98", "sighting_of_ref": "indicator--1afa2c26-1278-4c74-9a6a-2c7ff8b366e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ccab65-f8c9-4201-bb31-18941258125e", "sighting_of_ref": "indicator--acdf8aaa-1610-4402-867d-c679aed5e13d", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328032bc-1598-49b9-b1cb-06ab8ca98dd6", "sighting_of_ref": "indicator--a0c05a10-9e53-4de5-90ec-9e2f14da02f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e3efb2-c38b-4a4c-b52d-aa241e8e38d8", "sighting_of_ref": "indicator--a8a5c76f-56f6-4146-8a22-c4e58a5e0ed1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20692d31-37f5-41a6-bf0c-ef1c942ac1d6", "sighting_of_ref": "indicator--dfa99e4b-a3a9-4b73-bbaa-e046c06b0a3b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fcdc97-0045-4091-8c1b-8d0f9ee899c3", "sighting_of_ref": "indicator--dfa99e4b-a3a9-4b73-bbaa-e046c06b0a3b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467ab470-3e4f-404f-97a7-e9778f892c7d", "sighting_of_ref": "indicator--801a540a-2596-475f-a7f5-526cb174f419", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a52ac0-daa0-4c45-bf79-b5b788fe1f9d", "sighting_of_ref": "indicator--108837a8-1da0-4275-bfb3-92aa074726f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb24f29-147b-40d1-a1d6-b28dce869f95", "sighting_of_ref": "indicator--b48d7cbd-c3fd-4f54-b5d0-5204243aba0f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdc107d-8f8b-4ba9-87be-3212ceb09db6", "sighting_of_ref": "indicator--9f215213-3c43-4ae0-955b-e37b0a152dd9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b9f392-c768-4af7-b1fd-b31696db1655", "sighting_of_ref": "indicator--40c7e51c-a28a-4cd6-9a28-5ba8d32bc35e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2306ad69-4821-4a05-9618-4e6f8ab3bdf8", "sighting_of_ref": "indicator--7664b50d-bbaf-40bd-b38d-13b5e2764034", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29475a32-5b51-496d-84e8-ef7ab02b8753", "sighting_of_ref": "indicator--01e0b20f-357b-438b-a124-9915a33eabe3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a229eaf-f65f-41d6-878d-2f3c76788c5f", "sighting_of_ref": "indicator--01e0b20f-357b-438b-a124-9915a33eabe3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7b7ab2-837e-4e78-9aea-6fa913b6ad34", "sighting_of_ref": "indicator--67aeeb32-701d-4665-bf35-841ba783160d", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b886e98b-c26f-4ddc-bf34-719df29eaa9f", "sighting_of_ref": "indicator--03fbffab-f2ce-4eac-a872-266d3f8dbfd2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81abd0a8-a0d9-475d-9fb8-8651dd9a6c6b", "sighting_of_ref": "indicator--03fbffab-f2ce-4eac-a872-266d3f8dbfd2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421ca1f9-1165-4fc6-8ac0-cf96b363e80a", "sighting_of_ref": "indicator--f6f0493d-9b60-49b3-a98e-7b476b8029c8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afe63f1-a51a-4914-b047-346e9d505c13", "sighting_of_ref": "indicator--9b846ca9-c0ce-4f04-922c-3abc553ab3df", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a87609-e815-4f8c-9a7f-475d29be9a0b", "sighting_of_ref": "indicator--6409b069-79ce-4f86-b6b1-14aa9bf6633d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0900b9-074c-4d95-86ad-cb3c7a3ae99f", "sighting_of_ref": "indicator--4e9297bd-938b-4b4b-a6aa-2620f972b671", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c47247-a8e3-4757-a310-a94ae774ca29", "sighting_of_ref": "indicator--dc9af42f-aec5-48b3-a241-12a5d5aa87e3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7bc344-530e-4149-8e26-0246d3e951ac", "sighting_of_ref": "indicator--36071106-aa28-4037-bc1e-2625cdc49ac3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c3a5ac-c771-49bb-ab37-7ff45eb4e36e", "sighting_of_ref": "indicator--6b64ac7c-b54f-4725-a774-e540bfdd89b6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f924bf8f-ce12-41b1-96b0-4f39a822fda8", "sighting_of_ref": "indicator--3da4806c-1fa1-49f6-b720-0ca9f16ff6c8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280b3647-4ce7-4ee6-a7ae-beb13aee79c8", "sighting_of_ref": "indicator--9a592a90-c7bb-496d-9b79-46c51c084216", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b7001b-ffad-49e8-aaf9-22cfa4b3b633", "sighting_of_ref": "indicator--57140f36-b08f-41c6-8ee4-6c0afb1051db", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47407c4-0219-4906-8a5d-2e2a1725175d", "sighting_of_ref": "indicator--cc5acc85-6a58-4d65-811a-6851489e34d5", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4074b7-d9fb-45b4-89d3-9e59fdd1a94e", "sighting_of_ref": "indicator--3c74d24a-fed9-498f-9fe9-bd5564af212d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62aa52b9-5b27-45b5-8592-3e6a247b186a", "sighting_of_ref": "indicator--9436ce21-b5fd-4f3b-81a3-f27c33df3efd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ba5d5a-8e5f-4af6-9566-7fd099c454df", "sighting_of_ref": "indicator--12e5f770-b118-4ee1-8639-1ec53b9dc521", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a4ce0c-786c-4fa7-a671-42dd5221cc02", "sighting_of_ref": "indicator--65bb9fdd-bd73-44f8-b237-fbc25fd06875", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09c0a25-ebe2-4896-8eb2-170b53e58519", "sighting_of_ref": "indicator--430be606-47f2-42a4-bcfd-7449fabd66ab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0adc9c0d-76b3-4b03-b227-f7cf97473740", "sighting_of_ref": "indicator--4068fffb-4b62-4dce-b618-a2032633ef62", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d1623f-4e54-4a54-a79f-151853393849", "sighting_of_ref": "indicator--4068fffb-4b62-4dce-b618-a2032633ef62", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2058cde5-dead-4380-b326-1c3411fb2822", "sighting_of_ref": "indicator--6eeabcf5-0270-4fe1-a279-711ee4e6950c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0eac834-c963-44c0-bd7a-95a6cb9bff8a", "sighting_of_ref": "indicator--d3646c46-3f78-4aa0-afcf-4b7bd7da102d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2a685a-066a-4a99-a396-f3a70369b9c0", "sighting_of_ref": "indicator--846682c3-587b-45d8-bba1-1639b9744795", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb5d1ed-ad2a-45ae-927e-6cd9fbfe9db1", "sighting_of_ref": "indicator--4a264d42-6e05-493e-a2d6-d08b9bd4ebf3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93da8ef-ff57-44d3-adb2-27507f3c0dff", "sighting_of_ref": "indicator--4a264d42-6e05-493e-a2d6-d08b9bd4ebf3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46e0ff7-eb58-4b2f-b8a7-b9958bf0d57c", "sighting_of_ref": "indicator--cfd97879-b7c2-4374-9c63-bb8c34ea810a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb39b26-c679-4566-aa9b-8e10eda18830", "sighting_of_ref": "indicator--db046462-0e56-4130-b2d8-f9d35008ca6c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad17599-bd3a-435c-a97e-eeefbef1d941", "sighting_of_ref": "indicator--db046462-0e56-4130-b2d8-f9d35008ca6c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec07f6ab-08c9-456c-bc74-b003ec691fe7", "sighting_of_ref": "indicator--8a9a5f2f-48b8-436b-91dd-4ac04580cf7a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648427ba-cc0a-4eea-a6de-1cb3e57b3905", "sighting_of_ref": "indicator--9ce19359-f729-4fde-9950-f4e18678c8bc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfc3348-9e0c-4b8e-a840-f5f879cc9d98", "sighting_of_ref": "indicator--263dd325-2c51-4416-bc31-fbaea2d37b3c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6b28af-fd3f-48d8-9b4f-2deda14f7957", "sighting_of_ref": "indicator--cd1298a6-f141-495c-b081-9177f151900d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f149b3d0-97c2-4180-a171-da5251c19cfc", "sighting_of_ref": "indicator--100cc191-12be-4089-8077-8ba68731c7c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bb55cc-65f1-42df-935c-59b40bdac569", "sighting_of_ref": "indicator--d37d3f88-2542-4b08-8415-cfb03afb944f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de8c953-8c23-4e7a-ba36-fc6f9f3036a1", "sighting_of_ref": "indicator--175036ec-b78d-4b1c-b1f7-ea1f0f5ce3f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b6d379-bb7b-49ac-8b46-d3bb11ebff19", "sighting_of_ref": "indicator--ba023a97-bb26-4d7f-b910-53b00ba5bb14", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47b1e38-d0e2-4632-8fb8-e8009e02663c", "sighting_of_ref": "indicator--537df253-b8f7-4971-bced-c649032263e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5725f738-d8d8-4977-9344-52eb2c84a06b", "sighting_of_ref": "indicator--4f39e4ef-5f9b-4c59-97f1-2e94198b1f6a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51edcb0e-8b65-42ca-8358-9e86b1c48439", "sighting_of_ref": "indicator--ce1efda2-f3f0-469a-8e92-93b21e3c3978", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dac31f6-b79c-4683-b920-36c0d4f4882b", "sighting_of_ref": "indicator--e4adf4ea-8748-4676-b3fb-fcde66ae64ba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2053f4b9-3067-4461-a80e-54035ac2a00b", "sighting_of_ref": "indicator--e4adf4ea-8748-4676-b3fb-fcde66ae64ba", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af95bec-1138-4734-86c3-54cdad58df98", "sighting_of_ref": "indicator--5af8c21e-10d5-4405-89c9-941a9a844a53", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935c315c-da60-4240-9a94-a0b9fbc9cad7", "sighting_of_ref": "indicator--5af8c21e-10d5-4405-89c9-941a9a844a53", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a264dcc-fe86-48c1-ae04-69098b175b34", "sighting_of_ref": "indicator--cefec799-21ba-4efe-bb2b-215befba576c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b061df4-9ec5-42ea-86bb-0467b933ea2e", "sighting_of_ref": "indicator--0afb5c6a-9ab8-4ddf-a71a-65c9e86f2c3a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91448e3-b4ab-4550-b4c2-a44ffdd31607", "sighting_of_ref": "indicator--af9c1449-923c-4b82-adc2-aad9ef0a38b1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc2710b-f2e4-4aec-8dab-7b350cd04b67", "sighting_of_ref": "indicator--9571e959-e9c2-4c84-9771-b943fa1e6d46", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d4d3cb-5a09-4b2f-a366-079635fe0c1b", "sighting_of_ref": "indicator--9571e959-e9c2-4c84-9771-b943fa1e6d46", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f042e7-41a0-4000-8e50-aa3d6accd927", "sighting_of_ref": "indicator--a5f28df8-2829-4b15-9716-1489e8f2d9ca", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62088467-2552-453c-a495-6ee34cc743d1", "sighting_of_ref": "indicator--8f20b03a-ae68-49a4-a680-81de035cca8f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0755fc4d-916f-43af-8164-dd8817cf4c59", "sighting_of_ref": "indicator--d355d73a-452c-488a-b244-99fb68868b6d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6d2b2e-776d-487d-b4f8-ef4a92677237", "sighting_of_ref": "indicator--75c3fea5-2d4b-4df5-b6ba-7449493252f5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a195ade-f1b2-4e19-8001-a1cf25c98a51", "sighting_of_ref": "indicator--ad52ac50-37d0-465c-9bbd-696a9ca8a503", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cce16fc-da0f-4c6e-9799-841c84f8472a", "sighting_of_ref": "indicator--2e20ce58-2259-4b62-a3a5-dd5e9c7b31fe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda6c0d3-3656-4800-8e31-ba50d39428f8", "sighting_of_ref": "indicator--20de76f4-a3ed-406f-afb1-3610d08e8219", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95611ed7-9e72-4788-94d2-8c7b8fee27e3", "sighting_of_ref": "indicator--22cb0c28-8c0f-43fe-85e8-e14c894a2cb6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3526bb5d-9be9-412f-8fe6-6ab5ecbdc34d", "sighting_of_ref": "indicator--262ac9b2-0428-450d-99f5-ba3cba5c7aa8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49006145-1a16-4622-928c-8ac7e8a4d5c0", "sighting_of_ref": "indicator--0bac5713-e8bc-4791-b57a-189fa60049d4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffa8bad-66b5-4d70-8e1b-8d1e6e10785f", "sighting_of_ref": "indicator--9987336a-7634-44d2-a217-9dbc32c9d41d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645a7e29-a211-4dc7-9e20-f4baf12183e9", "sighting_of_ref": "indicator--a50ccd26-26ff-446a-821e-f6deea3ae0b2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af15e46-7ba2-4e64-87b9-a599de35c667", "sighting_of_ref": "indicator--bd0e3699-bdf1-4f02-844e-8f6926b035c3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f000c7-fd80-4a33-b7a1-1a16747bc5ec", "sighting_of_ref": "indicator--1c1fd02d-53c0-4fa5-815d-96a7205f0f91", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84621ac8-3f38-40d4-bc88-062b160393ba", "sighting_of_ref": "indicator--70bacc53-872d-4b0e-89e3-d15906fd8e10", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b428b7d6-21ba-470e-844d-8e90b62ecfa7", "sighting_of_ref": "indicator--8d736c80-91b5-4c25-adeb-f3ccc8a36468", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ead6ae-fa41-4cbf-8cfd-c1fb8d580fd2", "sighting_of_ref": "indicator--12332ca3-1c7a-4da7-a340-4a89e050b34a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25be8eb9-9163-4d36-ab5e-817d0082b76f", "sighting_of_ref": "indicator--0c04d6de-e245-4aae-ad11-436204a54462", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cb509e-b7e5-4f31-ac6e-47942a865442", "sighting_of_ref": "indicator--40b84946-4045-4640-beed-2fea16abbb8f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f00722-9af7-478a-8e14-0a2d07338743", "sighting_of_ref": "indicator--897c6e91-56b5-4356-8c63-404670e484ea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d201eb0b-c350-4acb-a088-4063d5cdf59d", "sighting_of_ref": "indicator--66eaa3f0-2d16-4576-bb04-4d2e23022e44", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ee3827-2c61-4044-be4c-01d00d82aef9", "sighting_of_ref": "indicator--7aa18bb6-857b-4ae3-8e25-0e595ca48d17", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d60def-502b-416a-8822-1ed9e7716228", "sighting_of_ref": "indicator--ec9ff659-6d24-42f6-9f85-ebb1eb7455be", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0692e8-af31-4e02-b85f-e5cfe38be511", "sighting_of_ref": "indicator--07dcee0c-bd9b-497e-bbdb-4d0cd4614bfd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a3fdf6-9fbd-46d1-be58-6392daf2df0c", "sighting_of_ref": "indicator--db48596d-4425-4f8a-8121-72b4d6bbd53d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ff03b1-a5d9-4a29-88f1-518f297de91c", "sighting_of_ref": "indicator--66a3fed5-b1a4-49db-9821-82f2c739845e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b04fa00-d90a-4ea6-87ee-27d8f440d8f7", "sighting_of_ref": "indicator--a003e6d8-95fd-4eef-9165-62e529620b66", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5bf340-fae6-4555-9d88-f5d75b766de7", "sighting_of_ref": "indicator--e209b78a-271f-45d5-ac90-44490291682f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f835ad6b-64d8-4c83-8dae-17d24cf94a48", "sighting_of_ref": "indicator--75327798-df3a-4973-b729-fee964ecd29d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48ff699-b802-42c8-b730-ed487771d999", "sighting_of_ref": "indicator--1af72073-f479-41ba-896a-b2af27647d4f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70e408d-672f-4d27-8312-a9dcde6baea3", "sighting_of_ref": "indicator--5562f043-ae9c-41bf-b52d-86f85cf3b462", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15608ef-8b2d-4f1c-8111-a48279f0e985", "sighting_of_ref": "indicator--7f7990fa-1332-4d54-ad9e-e70feb43bc58", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a156663-7e11-4a43-99d2-994cb66b3b70", "sighting_of_ref": "indicator--7f7990fa-1332-4d54-ad9e-e70feb43bc58", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91660df8-4812-417d-948f-847ce5fbd52f", "sighting_of_ref": "indicator--85f01b5c-0c4d-4f2e-8e8d-099c669f4eb0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d8845e-e3a4-4a23-885f-2bb0fcc1657b", "sighting_of_ref": "indicator--cf20076b-cf25-4254-b574-ef4cfec88b61", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f5c410-05c6-4885-b16b-bc80addf7f26", "sighting_of_ref": "indicator--b673cd79-cb35-4606-af80-c2f0d222a068", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f0aeb5-9342-42d6-80dc-557d3b4d102d", "sighting_of_ref": "indicator--f9063989-f2d6-404b-9aae-b9674272cd81", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6f9081-91db-4fa5-81cd-32f950058a76", "sighting_of_ref": "indicator--1a5319d4-145d-4f0d-b93c-1f594b9f20b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef58964c-7f75-4b1f-a034-06de6ba19cc1", "sighting_of_ref": "indicator--bee54ea9-ada0-4975-816c-cc348aeba878", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b68f6d3-bf70-4d55-91f2-7a12df23c347", "sighting_of_ref": "indicator--cd20dea5-9c72-4534-a858-9faeb98f55fd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc745a71-79b2-4e4c-8198-4c9755bc06ea", "sighting_of_ref": "indicator--c7f7c5de-f613-4d13-8401-6dd16decb6c3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138b2803-2dde-4113-afba-4d5c051a5d61", "sighting_of_ref": "indicator--383de37c-f3da-416c-8b18-ae769da67804", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3dacd4-fb34-4424-9050-c287fdd94e3b", "sighting_of_ref": "indicator--febf458f-1c31-47ba-87ad-f6cb3c4f67aa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e067a4ee-c667-4df2-aa10-6a521d04f0a4", "sighting_of_ref": "indicator--febf458f-1c31-47ba-87ad-f6cb3c4f67aa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6197ba1c-8b3b-480f-ab83-f378fc8583d6", "sighting_of_ref": "indicator--b0ab9d61-ba53-4997-98db-43e4199d50f6", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c54abf-cd48-44d1-afd3-c3d545948fee", "sighting_of_ref": "indicator--4f98ecd4-a8b6-4454-b09a-aa28fe1b6f8e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449aed98-26cc-4efa-b6e3-6f55af0f4582", "sighting_of_ref": "indicator--4f98ecd4-a8b6-4454-b09a-aa28fe1b6f8e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a31ea9-b391-44ca-90ec-7b09e4cb25d9", "sighting_of_ref": "indicator--89668b4e-8090-4e83-a45f-1e406682278e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155fe437-8cb7-498c-a82c-6c170557b90f", "sighting_of_ref": "indicator--89668b4e-8090-4e83-a45f-1e406682278e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ae7b60-9f73-49a4-b286-4efa31465f78", "sighting_of_ref": "indicator--89668b4e-8090-4e83-a45f-1e406682278e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813a35a7-700d-48c1-b97e-e382486d4d7c", "sighting_of_ref": "indicator--8f6cfba0-0481-4803-8cbe-f10fa7296cc5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0360501d-09e2-49fd-9f6d-3288d3a118dd", "sighting_of_ref": "indicator--8f6cfba0-0481-4803-8cbe-f10fa7296cc5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b812125-0a15-4407-a8ba-850b65c25e63", "sighting_of_ref": "indicator--8f6cfba0-0481-4803-8cbe-f10fa7296cc5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb24d6a8-5651-4497-bd4e-2f6f08cab5d6", "sighting_of_ref": "indicator--8b39b55a-ce77-4515-93f5-12e049e0d5b1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e1d008-7742-4b64-a655-9b2ecb3d15ba", "sighting_of_ref": "indicator--8b39b55a-ce77-4515-93f5-12e049e0d5b1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492309d0-0546-40c3-8d89-03f7e252c3a0", "sighting_of_ref": "indicator--8b39b55a-ce77-4515-93f5-12e049e0d5b1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e1760b-de77-4bc1-a55c-a7bf642d9cec", "sighting_of_ref": "indicator--08eaa5ab-3c70-4c1f-a00c-6631e5a13320", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b2d5bf-122b-4d68-a750-e8beb0138e47", "sighting_of_ref": "indicator--2c701fd3-f6d5-4ca3-a287-5ff71bb08431", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d420c77-30dd-4898-819a-58868413e106", "sighting_of_ref": "indicator--18d162f0-0e7b-46f9-8c71-906af6ac807d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396e736b-0cea-4a00-a07d-fa64663150cf", "sighting_of_ref": "indicator--a3dbeae4-8685-41ad-9167-69bc7a00aa13", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493cfe32-e89f-49b5-967a-c8ec9102f592", "sighting_of_ref": "indicator--258dbe51-34e7-43b9-8d10-d0d9840d2b78", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe06999-c8ec-4bf9-8e18-db99a8ff9afb", "sighting_of_ref": "indicator--f1c32223-1d05-4ab3-9b72-1e2b8273c2eb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bd7513-6ea4-4fbe-8ed4-ab53f355dbab", "sighting_of_ref": "indicator--c9141d28-8060-436d-b676-e1393f692a4f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192cbef5-e744-45a6-87dc-c4e89d039848", "sighting_of_ref": "indicator--c9141d28-8060-436d-b676-e1393f692a4f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469a7134-ab4a-48b8-92a0-d243cabc91ea", "sighting_of_ref": "indicator--7aae6b46-8bd5-4414-852f-db8f89c04420", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc903c11-1ba8-4004-8355-5838c8d1fea7", "sighting_of_ref": "indicator--a6240c50-6738-4422-84bd-1d1631166a31", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cff70a9-d59e-4e01-86c8-ef9c5590d9be", "sighting_of_ref": "indicator--adf7a612-3a20-4bcc-ab4c-a801a0836606", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f511dccf-31d7-4b0a-a48f-b4f22e07a179", "sighting_of_ref": "indicator--77f184cb-e079-412a-8e34-9d146adf3467", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bb06e3-deaf-4fd2-86d4-b05d42ffdcc4", "sighting_of_ref": "indicator--d7ca3c03-bcca-48fd-aee8-faefbf5b3b08", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d1fa2d-4091-46d7-8c00-f8918f7775ea", "sighting_of_ref": "indicator--421cd5fb-f047-41c8-846d-0d4e0b50fa0c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61143a2-1e46-4ff2-adf0-931cf4212c7b", "sighting_of_ref": "indicator--421cd5fb-f047-41c8-846d-0d4e0b50fa0c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93608622-f1d8-4877-b497-39bef0c9fb01", "sighting_of_ref": "indicator--cc6828d6-9072-4a60-8d79-6d593ed554c8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29e2db7-66c4-4bb3-9d8e-ded8493a321d", "sighting_of_ref": "indicator--18dc19e4-4345-473f-8ce7-7e03fa424830", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613bfa74-ea7d-4104-8b01-ac3571f53792", "sighting_of_ref": "indicator--18dc19e4-4345-473f-8ce7-7e03fa424830", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a94eff2-ed6f-4588-ad1b-8de8216bfe0c", "sighting_of_ref": "indicator--31a2699c-5f8e-4a16-8ae2-158f46ae3549", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7306b2-c3a6-490f-b92f-025642e1854e", "sighting_of_ref": "indicator--31a2699c-5f8e-4a16-8ae2-158f46ae3549", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4560789c-1dce-43a6-84d0-b1947d0b7af6", "sighting_of_ref": "indicator--5f7d3ff1-8440-4e84-b079-42079f00ed54", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20edfe43-b032-4d11-ba17-7542390292e9", "sighting_of_ref": "indicator--5b33c881-f0af-4717-b0ed-5b22abfe118f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329e120f-3b48-4e8d-a911-738322a4dad1", "sighting_of_ref": "indicator--97924823-152b-4069-905b-5b2d38051211", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064ff570-bf12-4eba-ac25-a04c1433bf79", "sighting_of_ref": "indicator--baee5f9c-0f1e-4e6b-9649-09e1e67a5335", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad28672e-2841-4ff9-8936-177a6f88ef05", "sighting_of_ref": "indicator--e73081a3-e58d-4b77-b71f-4ba4985fc807", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11021c6e-fbfe-4acc-b87b-5bae0c648474", "sighting_of_ref": "indicator--f6a55b35-4e1c-4fa1-aede-1e0acf6a666b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e368eca2-1ccf-4c19-9c97-f7901cb76812", "sighting_of_ref": "indicator--ba286473-48c8-4f61-9cd2-fd31590d51a8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce225cec-03ca-4023-b2c9-5e4144cb9ffe", "sighting_of_ref": "indicator--de48038c-89c7-4488-b733-e289de715dee", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e223760a-fba0-4031-8dd7-d4679b22aa0e", "sighting_of_ref": "indicator--3033a8e4-a4a3-4ef3-a5f5-3184a040b4c6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb8bc11-d226-452f-8fa3-728c4d419193", "sighting_of_ref": "indicator--81e280c9-b120-41e0-9cf7-f126991a1241", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d198c45c-33b0-4ad8-84c6-2522455361ff", "sighting_of_ref": "indicator--71200d88-a4b6-4606-9604-fdfbee9b90cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e272da6a-4fb0-4af2-b2e6-17b4bd4ef030", "sighting_of_ref": "indicator--f0ff692f-f524-43ea-a1df-b7e0c933fb1e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d26bb3-8ba8-4fe4-9230-d246e8796137", "sighting_of_ref": "indicator--76f4faa2-58fb-4419-811f-254b9e5ae8cf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1662e2b7-be89-4253-8b83-0aa27b12c42d", "sighting_of_ref": "indicator--9580e0a5-423b-4cd0-987c-b2c858751067", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271b1834-55c6-47e5-8a2f-a235b94336bf", "sighting_of_ref": "indicator--9580e0a5-423b-4cd0-987c-b2c858751067", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436610b9-54eb-4207-89b0-89ac2382b796", "sighting_of_ref": "indicator--047da2df-1bc6-4ba9-b0bf-4100a2c0c9db", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecae794-373c-42ae-8d72-5f671d5bc508", "sighting_of_ref": "indicator--f2dd7a28-ae39-492f-93c2-c95f124fc7b8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f30ff7-d521-4e72-9a67-1686c0bc3a4d", "sighting_of_ref": "indicator--eb5a2205-21b9-4aaf-bc4d-d27afc640e7f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14322952-8404-47cf-9708-a9c6c7213e59", "sighting_of_ref": "indicator--5c66e45c-5e2c-4e0e-a174-2bc2521dc232", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19fcc92-806a-4175-9ee3-cb5b5df33b10", "sighting_of_ref": "indicator--9c541a29-4c60-40ec-9f23-eb42b6f5b00f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9360eeb-06c2-4812-928a-c472aff7840b", "sighting_of_ref": "indicator--9c541a29-4c60-40ec-9f23-eb42b6f5b00f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a42c3af-ab8c-4371-9adc-345c016fab0b", "sighting_of_ref": "indicator--96ffc306-6513-4456-b84f-c1c2400c402e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab93963-d3c3-4d3c-9a2e-c107f7e344da", "sighting_of_ref": "indicator--91dfea46-e123-4d2d-be19-931cca9e0908", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e0d1ad-2b8d-4eeb-b778-fedcfab00bc2", "sighting_of_ref": "indicator--1c1a292a-b8f0-4f12-9566-ccf536894097", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da07beac-65fd-4e0c-8e08-d395cc1835d2", "sighting_of_ref": "indicator--1c1a292a-b8f0-4f12-9566-ccf536894097", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de897cd6-7f9b-4255-be45-d768980853d3", "sighting_of_ref": "indicator--d74291c7-04a0-4e0a-b0da-c2fd71f18bb7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555325ff-8d6f-4e7c-8f54-7e5b7659cfde", "sighting_of_ref": "indicator--15ca0a2b-31dc-423d-90da-33ae419ff865", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e76e24-5404-4378-86d5-19b40dff3649", "sighting_of_ref": "indicator--2bba7e12-9560-428d-b8be-9c582570fe1d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5fa1bd-52d4-4abd-a68e-050bb7141209", "sighting_of_ref": "indicator--f87aa0ac-0a35-4858-a2a3-1ea7dcf428e7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb92f118-27bf-4653-98e6-466af3968b99", "sighting_of_ref": "indicator--fb939a57-b60b-43c8-9dad-a0e81cbcb495", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39c62ee-39a7-4b5f-9ed9-5e09ed1aa28c", "sighting_of_ref": "indicator--89e916b6-5962-4d8c-a6cd-295229653170", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8fc57e-60fb-4092-ac78-4689101a9205", "sighting_of_ref": "indicator--7dd613ce-ab57-4cc6-81a4-cb502ac23d94", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d19c89b-604c-4c56-bb9d-6320bcbdaa74", "sighting_of_ref": "indicator--7dd613ce-ab57-4cc6-81a4-cb502ac23d94", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc55521e-89bb-487e-839d-9fb3618df8e9", "sighting_of_ref": "indicator--85fc30a5-a4db-4df4-8b02-c0d93f4f42a9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c885934d-0abf-4d42-9da5-67cfdece667a", "sighting_of_ref": "indicator--85fc30a5-a4db-4df4-8b02-c0d93f4f42a9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdce8b0-2648-4955-b733-c5b74c12a6a8", "sighting_of_ref": "indicator--32d7fff5-820c-4ac5-b786-c641f69281a1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ed8411-1a3e-48ee-9d80-97ff09b7649b", "sighting_of_ref": "indicator--32d7fff5-820c-4ac5-b786-c641f69281a1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca38f43c-bc28-4cff-9623-c52189a01d0d", "sighting_of_ref": "indicator--17264269-2c1f-4d64-8803-676b0e4772e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cc60b3-38ac-48a1-b1be-05a8a142dfb4", "sighting_of_ref": "indicator--17264269-2c1f-4d64-8803-676b0e4772e2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bd20d1-5a8c-443d-bec5-99897089ebda", "sighting_of_ref": "indicator--7b7e66b1-f9cc-456b-92d3-09a4a0c49b54", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19bf43f-d042-4f65-804d-c89a73bce60c", "sighting_of_ref": "indicator--7b7e66b1-f9cc-456b-92d3-09a4a0c49b54", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca78d8df-1701-42df-881c-f98d76fa3d2c", "sighting_of_ref": "indicator--2241f2d8-f5f7-43bd-afbe-664ccf313ab2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e799c3ff-8c5a-46a3-8249-db23520d6312", "sighting_of_ref": "indicator--2241f2d8-f5f7-43bd-afbe-664ccf313ab2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1ebdc9-e1a6-4356-b964-9ca12507d85c", "sighting_of_ref": "indicator--2241f2d8-f5f7-43bd-afbe-664ccf313ab2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b22213-9287-4d98-b615-0c5b90500a7a", "sighting_of_ref": "indicator--99e8f294-2d74-424e-920a-fca0cc3b58d8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f76b350-795a-4691-865c-779a5eb88310", "sighting_of_ref": "indicator--207daaf5-76c7-4c9c-ba34-a26875054011", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e281ce3c-98c3-4741-bd70-ceb9180d4843", "sighting_of_ref": "indicator--54927f2e-3426-47a7-8ed6-e55e1c803275", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bb7309-4bed-464b-a26c-7efb1faf30db", "sighting_of_ref": "indicator--ea6b851b-b98e-4fe4-aa48-734e956879f7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a8112e-9520-44c4-bacd-0a612ddf587e", "sighting_of_ref": "indicator--702ac903-4c70-4593-bf7e-419881bce870", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ef529d-bf73-41fb-ad97-467b30f70444", "sighting_of_ref": "indicator--702ac903-4c70-4593-bf7e-419881bce870", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343c42eb-2b3a-4e45-b654-f7709aa4d738", "sighting_of_ref": "indicator--b0814f18-9b98-4643-b8fb-3fb86f14b551", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aed5e95-c9f2-4586-a3df-7b5a1361cff1", "sighting_of_ref": "indicator--b0814f18-9b98-4643-b8fb-3fb86f14b551", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0ad951-c8a2-47d1-9964-2ab36ef2c66e", "sighting_of_ref": "indicator--106d3143-f3c7-45ae-90a7-fc6889268317", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcce62bb-7ec2-4725-b57b-38e0f78e58fc", "sighting_of_ref": "indicator--035625b7-2d44-41c9-8fe0-02b6b463961b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f28ffb-63a6-4207-a06f-5b7a91ceac93", "sighting_of_ref": "indicator--035625b7-2d44-41c9-8fe0-02b6b463961b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac1078e-4d9b-43e3-b071-ea0cc23169af", "sighting_of_ref": "indicator--820497f5-d0cc-434f-adcb-c95dc5924154", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8ef894-111b-4b96-b14a-a59d983723fd", "sighting_of_ref": "indicator--6d33ab43-8a6a-4166-8ff1-e5336ccf87ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e89149-39e7-4f1a-9fb5-df126f8fb3da", "sighting_of_ref": "indicator--802b84d1-bb0e-40ea-bb1b-aa08142f6e1b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5780bdf1-06f1-4e22-91b8-70774cb06f82", "sighting_of_ref": "indicator--802b84d1-bb0e-40ea-bb1b-aa08142f6e1b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb664a7-b68a-4b09-9048-d336d8abe210", "sighting_of_ref": "indicator--a443ad0c-cc2f-4752-b2e0-5e6aed15d1f0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6107ce96-16ec-42f0-b0ed-12b18d8457bf", "sighting_of_ref": "indicator--a443ad0c-cc2f-4752-b2e0-5e6aed15d1f0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a44d057-5e11-4a4e-bfed-e3a00179c312", "sighting_of_ref": "indicator--0bc4647c-619f-4fe1-8d6b-bdc47c4ef7c1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc87e5c9-403b-44d4-a64c-91d863ec3d56", "sighting_of_ref": "indicator--5ad6bed3-14d7-45f6-bddb-a3646a201051", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31ae80d-cc8f-4e56-a395-3a9970e9a0f7", "sighting_of_ref": "indicator--5ad6bed3-14d7-45f6-bddb-a3646a201051", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d67917-b4af-4455-ae8b-d56a2a15ecde", "sighting_of_ref": "indicator--5ad6bed3-14d7-45f6-bddb-a3646a201051", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce3bb45-7e68-446f-b93f-f091631d1af6", "sighting_of_ref": "indicator--0b5cede5-6c54-48c9-b22d-c0fe970994e3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382ac705-2466-4641-b99e-46d303c70878", "sighting_of_ref": "indicator--c4280ffa-bd6c-41ad-be21-4476d43ff508", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31995e03-6609-4b0a-a8a7-929eb7e6e3c1", "sighting_of_ref": "indicator--00f5f1ab-f215-458a-b070-80424a5ee319", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca2d21c-615e-410f-8e09-9a913cdc1aa7", "sighting_of_ref": "indicator--00f5f1ab-f215-458a-b070-80424a5ee319", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc4b4ef-f7c2-4235-b556-079c35e56c94", "sighting_of_ref": "indicator--00f5f1ab-f215-458a-b070-80424a5ee319", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5347b943-1cf8-4179-ac69-e5d8924df852", "sighting_of_ref": "indicator--2e7e36c6-6631-43c1-915d-665f19e1105e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4e4712-b1c0-4784-afb9-748c42ae6589", "sighting_of_ref": "indicator--a9325164-187f-4f88-846f-3eb203242c03", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7027ce-3cdd-4e15-9532-e5a9c4de8b01", "sighting_of_ref": "indicator--a9325164-187f-4f88-846f-3eb203242c03", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35013b06-3943-401d-85d2-964d1980035a", "sighting_of_ref": "indicator--ce41de73-bee9-4f98-a8c6-989b8209aefe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d9c326-8758-4de5-8785-891b4bc1c931", "sighting_of_ref": "indicator--ce41de73-bee9-4f98-a8c6-989b8209aefe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6a6869-dde0-41f9-9b57-80bb5fd79334", "sighting_of_ref": "indicator--666743a9-0292-46d4-b3cb-289436582618", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b979d804-7d61-40e2-be7e-4ae86d043a4a", "sighting_of_ref": "indicator--557aee89-967d-47e9-bb31-b1b32a5dbe43", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087ad44a-89dd-4929-ab5c-4f02c1570552", "sighting_of_ref": "indicator--557aee89-967d-47e9-bb31-b1b32a5dbe43", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92604441-d8d5-4ed2-bce5-0b87c1c3efa5", "sighting_of_ref": "indicator--d82ae163-31ae-4407-80b7-0c0945bdafc5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28134ded-441e-4de9-a87c-e1aac5386e56", "sighting_of_ref": "indicator--71b85765-bb6a-4ac0-80e2-5ca991e094a0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992db0f9-70eb-460f-8ebb-f52602ac69e9", "sighting_of_ref": "indicator--8dadc947-68f6-46c1-8084-1c19115061f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699b393e-2d78-48c7-9c68-9fe0bd33fe4a", "sighting_of_ref": "indicator--8dadc947-68f6-46c1-8084-1c19115061f4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb09c04-fa5b-4738-9de9-3ff7f82f6bd1", "sighting_of_ref": "indicator--8dadc947-68f6-46c1-8084-1c19115061f4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95af9921-73f6-47fb-95c9-75d9f4a0a73f", "sighting_of_ref": "indicator--8f1478d5-0021-4a29-9198-ce1e72a6d169", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf32319d-1b09-4b81-8cbf-53cfed0431fc", "sighting_of_ref": "indicator--8f1478d5-0021-4a29-9198-ce1e72a6d169", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ce03f1-52bf-4f92-86fd-4e631f5d49fb", "sighting_of_ref": "indicator--0bfb8c09-d2e3-40af-8754-a12442ef2343", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632117ab-1c87-4de0-9096-21b548bc77d3", "sighting_of_ref": "indicator--2335626f-6484-4e7e-a18b-86cd501dbfde", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3dc5016-f1f2-454a-95e1-13c983e10fc1", "sighting_of_ref": "indicator--2335626f-6484-4e7e-a18b-86cd501dbfde", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28f1d3e-54b3-461a-ac93-567a4731f926", "sighting_of_ref": "indicator--70de726c-21a6-4a1a-a07b-38cd8325aa7a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67834fbc-83b9-4bf0-987e-0c15a968fc45", "sighting_of_ref": "indicator--1978f3d3-c027-4a78-9390-db5f27fed2c0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c80afa2-3892-4a1d-b39a-ca978b34d055", "sighting_of_ref": "indicator--a850f9a7-3506-4410-a5f4-44b6b37de6df", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4923ec8d-4a31-4c91-b0c2-b44bda76ca1d", "sighting_of_ref": "indicator--da995b3b-2295-4537-88df-001bf28fd496", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3ddd9b-70b9-43fa-bdab-7650a36e30b6", "sighting_of_ref": "indicator--966fafff-cbcf-41db-8217-103ca186ada0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7449b556-7271-4f69-9978-26f13ad98241", "sighting_of_ref": "indicator--ff7e90c0-5b3c-4217-8200-e4403c1b023d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851e3014-b49e-4ed8-9f51-5f60f0088aba", "sighting_of_ref": "indicator--435a4e94-9f9b-4cde-bd55-aa0c4fcac46b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b195e569-e4dd-4743-909b-313c1efd906a", "sighting_of_ref": "indicator--f8ee697e-2c59-477e-b7d8-8ec26ee1920d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ca3ba4-83be-4f4e-adf2-58b0e7ec7b07", "sighting_of_ref": "indicator--f8ee697e-2c59-477e-b7d8-8ec26ee1920d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81621240-f0c2-4e76-933a-6d13d78b51be", "sighting_of_ref": "indicator--161f2ad9-917f-45dd-9b14-8ef1826c2053", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cba7153-8408-4ab8-8ef2-707ec31beb4f", "sighting_of_ref": "indicator--161f2ad9-917f-45dd-9b14-8ef1826c2053", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c21d93e-61da-4ba3-8c1b-3c78b7cde0e0", "sighting_of_ref": "indicator--6556d920-d83e-42b4-a4ea-cd6e5fe7a6ad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2468bc-9259-45cf-9a10-eed2946da529", "sighting_of_ref": "indicator--6556d920-d83e-42b4-a4ea-cd6e5fe7a6ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cb38de-62b9-4e0e-a6d6-31c713e25f77", "sighting_of_ref": "indicator--df1b9a5a-bf7c-4798-95d3-41d5f7424675", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e004e4-d8d4-4fd2-bb69-57a045f04e0b", "sighting_of_ref": "indicator--8371f821-4087-4d6c-8f5d-ad6363085d48", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4199fb5-5715-47e3-a97a-19249c29ce4e", "sighting_of_ref": "indicator--f908acd7-0435-42a8-b4ec-6a7df2bb6b8b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d7dd70-c32a-40a2-b248-88347dc0d8e4", "sighting_of_ref": "indicator--d4a69487-da58-46da-a3db-357793ca8a98", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17f57c9-f33c-40e1-a310-9db762e1f78c", "sighting_of_ref": "indicator--3d61c07d-961b-4c44-aed6-a08b2e0faec5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da88d58-2221-43b1-9a34-c0e7db8974dc", "sighting_of_ref": "indicator--3d61c07d-961b-4c44-aed6-a08b2e0faec5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feaf6f35-415e-4505-b16b-8cb15e723552", "sighting_of_ref": "indicator--10eb7db1-84fe-46c3-9e7f-93f6bee0afa9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4412da-4eca-4258-8a8d-3244d5c95570", "sighting_of_ref": "indicator--10eb7db1-84fe-46c3-9e7f-93f6bee0afa9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559c9996-ea3b-4e79-b088-7b9e324f3920", "sighting_of_ref": "indicator--3c1786dd-d6c2-4ceb-a47b-d078bd73f457", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41cf61b-9d15-4266-8bee-7043ba76e9e6", "sighting_of_ref": "indicator--3c1786dd-d6c2-4ceb-a47b-d078bd73f457", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce02141-367f-42e8-a029-ed6c71122721", "sighting_of_ref": "indicator--10dec763-bec0-41fb-9969-b63dad48784b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ce8b68-5954-4e34-b9a9-41e7cc011445", "sighting_of_ref": "indicator--10dec763-bec0-41fb-9969-b63dad48784b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c646dd-dde9-4846-bf13-4912451bd33a", "sighting_of_ref": "indicator--03218920-3791-460f-9db0-fc7e187852e6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd3d241-9936-4b68-afee-5af3692b044a", "sighting_of_ref": "indicator--c6a5769e-ffc1-4cf6-a899-4fe7fbaa52e5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e009e13-8250-4fa3-a288-f98f1ba970f8", "sighting_of_ref": "indicator--c2f63370-62ef-445e-a079-e44eb9eafbc0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913d99f7-ece9-444e-82cb-163b89f5958a", "sighting_of_ref": "indicator--c2f63370-62ef-445e-a079-e44eb9eafbc0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e868e88-d71f-4830-8bce-1b2be61a2a8d", "sighting_of_ref": "indicator--e2c60211-435a-4060-a33e-9e966dd41380", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b89fa4-eadd-486f-afd7-b667feb595b8", "sighting_of_ref": "indicator--e2c60211-435a-4060-a33e-9e966dd41380", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb160a8-ac3c-48b8-a3bc-239964ba3fb7", "sighting_of_ref": "indicator--4b4a754e-8d1d-4b35-b711-3170ee0ede3e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b076a86f-b675-46d9-830f-a91b12cfde9d", "sighting_of_ref": "indicator--4b4a754e-8d1d-4b35-b711-3170ee0ede3e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98226103-9efe-4ffd-b8e0-b72cd451bbe1", "sighting_of_ref": "indicator--ce54d1ac-2b60-4b5c-a135-aa71b91f1f1d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2dbb039-1121-4d7d-a528-907c4a92d714", "sighting_of_ref": "indicator--c0081405-afb5-4a79-929a-9eb79e7c1d47", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e2effe-7b6e-4738-abe6-ca644c7e9073", "sighting_of_ref": "indicator--c0081405-afb5-4a79-929a-9eb79e7c1d47", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801c4509-728d-4d0b-9f72-8c3b1fcec325", "sighting_of_ref": "indicator--c9877a9f-4849-4c1a-a073-173b41c77bf3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f92a3c7-e223-4974-bad0-071ddb5c8f53", "sighting_of_ref": "indicator--c9877a9f-4849-4c1a-a073-173b41c77bf3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ea7afc-b6cf-4f0a-900a-4d0e8c637ed3", "sighting_of_ref": "indicator--c9877a9f-4849-4c1a-a073-173b41c77bf3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5993742-c6b1-4dfb-bbf1-03a6738a48d4", "sighting_of_ref": "indicator--6caf56e1-934a-4848-a46e-77b885cad029", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc77ba03-cc29-41dd-ba05-075d3de659b4", "sighting_of_ref": "indicator--6caf56e1-934a-4848-a46e-77b885cad029", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455150a8-0196-44d8-b483-5972a18e0f50", "sighting_of_ref": "indicator--cb7d9a75-7cee-47ec-bc42-71862f63ea45", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce7083a-59f9-4c12-a96c-fe30607f6b32", "sighting_of_ref": "indicator--561d6f56-605b-430c-8c92-a5005c252ddc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7699e24c-d909-4254-aa74-b18e88afea9d", "sighting_of_ref": "indicator--561d6f56-605b-430c-8c92-a5005c252ddc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e790ace-6479-4529-9238-97038b640bf8", "sighting_of_ref": "indicator--3618b41b-7ff8-4e6b-addc-923984349a33", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7606d19e-f7ac-4e29-b977-24c2ef4f6077", "sighting_of_ref": "indicator--377ee82f-000a-4bd7-bc0d-28daa72dbd85", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca54067-4cf6-4463-81bb-b5af9a3bcf02", "sighting_of_ref": "indicator--377ee82f-000a-4bd7-bc0d-28daa72dbd85", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334dabf5-de19-45c5-a50d-933dbd58de39", "sighting_of_ref": "indicator--15105ec3-0fb3-449a-a8ee-7e142ae6e6ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608b0110-5d37-48ff-8746-006c13ea9afc", "sighting_of_ref": "indicator--9d9dd65d-2c68-4aa7-8544-e6fcf4ec681e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debe9aa3-9e7d-455b-90c5-26179b2af8d6", "sighting_of_ref": "indicator--ba8e0a8b-03ef-4a44-af62-6937e195b157", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e2b979-92a6-4f0f-9d60-a21c7e3dfb72", "sighting_of_ref": "indicator--f1148a63-d433-4517-b67d-50c98887f9fa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73c483b-e64a-4772-bcfb-5ca2da91b43e", "sighting_of_ref": "indicator--02a4f37d-3aae-4ebc-8ecd-2842f6c34de6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1141fe-8479-4369-88b1-5a14aabf30ce", "sighting_of_ref": "indicator--61e93ab1-da88-4621-afa6-ebb355cbad95", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071c32bd-4bd6-44f8-86ff-91ada1c4f49a", "sighting_of_ref": "indicator--9b46277a-4727-4056-8fda-ac92970a5e72", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961d7c91-70cd-402f-bafc-12ce7ff2ccba", "sighting_of_ref": "indicator--ae718e35-a09a-438e-aa2a-5756fad75259", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef75760d-08cf-4bb5-9f36-582b92054b22", "sighting_of_ref": "indicator--ba6f936e-31c1-4805-a0fe-5be537e28075", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ecac25-c2ae-4686-a7b1-4827b4f4b9fb", "sighting_of_ref": "indicator--06934a5f-8d95-4f4b-93e1-ca2e119a19d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58799748-bd34-43e1-a9eb-08980f945f5b", "sighting_of_ref": "indicator--bcc9c2ed-1ccb-4fe4-a21c-093c50b8c101", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3046a884-a80f-459c-b79b-cbe3cf6f728f", "sighting_of_ref": "indicator--3d32f28e-ed50-494d-9b8a-f806a1204946", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49be545-95f6-444a-b4e5-4de9614960ea", "sighting_of_ref": "indicator--3d32f28e-ed50-494d-9b8a-f806a1204946", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f18857-c7ab-4192-9b7e-3228b211e480", "sighting_of_ref": "indicator--f5abb10e-5a07-4be2-83ab-65e7708ce48d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a74203-dd20-4008-a89c-beaa7cc074af", "sighting_of_ref": "indicator--ce3c6168-1894-4d51-96e6-789b89229470", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ff6f36-3e12-4dd0-9687-21b144bddd31", "sighting_of_ref": "indicator--ce3c6168-1894-4d51-96e6-789b89229470", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf549d11-9da6-41c3-8ab1-a775f4d028d5", "sighting_of_ref": "indicator--5048c835-f274-4d9c-9009-0cd29b7a5357", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0268b9a-4550-4705-83a6-90be04f73fba", "sighting_of_ref": "indicator--5048c835-f274-4d9c-9009-0cd29b7a5357", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee19d03f-7434-4e37-a828-bd6ab6fc9190", "sighting_of_ref": "indicator--42f2e9db-f3c4-48b5-bc5c-d8dd51e13cab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4333cb7d-8673-4619-b373-86ec660a9258", "sighting_of_ref": "indicator--42f2e9db-f3c4-48b5-bc5c-d8dd51e13cab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9e7aa5-27f2-47bd-ad89-d689ecd15eb5", "sighting_of_ref": "indicator--a2db50fc-ff2a-4516-bc44-906e35861e67", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8237ff0a-2d1f-4fac-820b-f1125859b431", "sighting_of_ref": "indicator--a2db50fc-ff2a-4516-bc44-906e35861e67", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0643a7e-c234-4825-b19f-669a850e839b", "sighting_of_ref": "indicator--237734a2-e833-4dc4-b6b4-1dba1c1108e7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c73ad6-c1b0-401e-87d1-31e64262c286", "sighting_of_ref": "indicator--e7817c52-fb74-4eb2-8cc3-f1659d49dd30", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576883c0-0efb-4153-840e-c71e5c3bd733", "sighting_of_ref": "indicator--03b060bd-4433-4e8c-a9fc-1a2bf6e2a1c2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0160298-a8db-48e2-8511-08f4abaf312d", "sighting_of_ref": "indicator--03b060bd-4433-4e8c-a9fc-1a2bf6e2a1c2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4a2676-19d4-4a39-a2b7-39e41fe98518", "sighting_of_ref": "indicator--e203df04-5e0f-497c-9c9d-05bf03daba6d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aac4f24-7fc8-46dc-89e2-16e65ee29902", "sighting_of_ref": "indicator--e203df04-5e0f-497c-9c9d-05bf03daba6d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770efa59-97ac-4171-8f63-4badddb14034", "sighting_of_ref": "indicator--6f221d70-38f7-42d8-a7a1-7c02b717f7ad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042f5fe0-9c7a-40bd-9d2d-f93c3801f1c0", "sighting_of_ref": "indicator--6f221d70-38f7-42d8-a7a1-7c02b717f7ad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0655d13a-b620-4992-877d-6ee7a2d81b43", "sighting_of_ref": "indicator--e47c55db-9f7f-461e-ad10-31fc3c806ebc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984b0c1b-4bb1-41c7-be1f-f079397729f0", "sighting_of_ref": "indicator--b070e48f-4614-4424-a4e5-733351ce57ca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f569196a-9748-46e4-b4d4-670336c98641", "sighting_of_ref": "indicator--b070e48f-4614-4424-a4e5-733351ce57ca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbabf4d4-83c1-4a3a-b5c8-76b9d7946b44", "sighting_of_ref": "indicator--49e7c2de-2e90-4317-bf7f-6507b1b57739", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ba062a-0028-4406-8230-2576a9e70340", "sighting_of_ref": "indicator--49e7c2de-2e90-4317-bf7f-6507b1b57739", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f1659a-8e39-45ca-8b74-94d87248777e", "sighting_of_ref": "indicator--3375f787-fd47-4ee7-9ff5-dc8c00aa55b1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6693fdde-348b-43a5-83dc-82afa73e7b7b", "sighting_of_ref": "indicator--c46d109e-1114-4de6-b09b-40767b839a99", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270d87e1-797a-46ac-bbb0-588669a4bb60", "sighting_of_ref": "indicator--ad20f55a-dbba-410d-9099-ac5a969f8579", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e82100-8c91-4637-ac9e-50da8342e3fd", "sighting_of_ref": "indicator--ad20f55a-dbba-410d-9099-ac5a969f8579", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66554f84-51ad-4952-9f73-034b104dc01c", "sighting_of_ref": "indicator--b3efa062-6740-4e0b-9d7f-cd4c7dfe3417", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e498126-cc7a-4105-911c-7ed54f3c79a1", "sighting_of_ref": "indicator--b3efa062-6740-4e0b-9d7f-cd4c7dfe3417", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7378d771-7bc0-4dfb-8219-d4433274e4e0", "sighting_of_ref": "indicator--c39b195a-4503-48c9-9029-3137b619d504", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ab802b-53d7-4c81-9cbf-0e1b2f9f626d", "sighting_of_ref": "indicator--c39b195a-4503-48c9-9029-3137b619d504", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f0abe3-00ca-42ab-ad92-4c703389b77c", "sighting_of_ref": "indicator--e078f462-dc9b-4b93-8062-0b13eb8efa55", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040083d0-f3a9-461b-8845-03970418ab2d", "sighting_of_ref": "indicator--e078f462-dc9b-4b93-8062-0b13eb8efa55", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5baf24dc-2b21-4def-97b8-247f7953333c", "sighting_of_ref": "indicator--f3c287b4-8048-47ae-990c-5ad226a0cf4a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b3a9e7-ac76-4a08-abf9-05d128f3698d", "sighting_of_ref": "indicator--535069e2-30a6-465f-8508-60f10fa81d2f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61b0270-dae4-45c6-9813-d26860f67742", "sighting_of_ref": "indicator--535069e2-30a6-465f-8508-60f10fa81d2f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed18374-11af-4f12-a5a7-ccf8b14eee84", "sighting_of_ref": "indicator--1dc11569-4218-4039-bc00-89b3665d6806", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fdb1c6-cc06-4579-b43f-221351eaf2fc", "sighting_of_ref": "indicator--1dc11569-4218-4039-bc00-89b3665d6806", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f086f3cd-03a7-4a3c-8141-a25145e05938", "sighting_of_ref": "indicator--2e2e55ef-d0b2-4ba6-9303-bacc6f4f6d83", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fef87ad-315a-4cc2-bf53-c70d1cd25ad8", "sighting_of_ref": "indicator--e71ef5c3-3d3e-4da4-a0c6-e250246b64d0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418a678d-dc92-4201-b0eb-90e08a8f4076", "sighting_of_ref": "indicator--f5f0ae17-f820-4651-804a-b1a9d8f0b21a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d385ee4-377d-4c22-9bdd-80a753c3ab98", "sighting_of_ref": "indicator--f5f0ae17-f820-4651-804a-b1a9d8f0b21a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239985c8-5b43-4cc5-915c-19ff6f2cc81c", "sighting_of_ref": "indicator--824125cc-d1ff-4767-bed6-57c814b63ba5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6673ef4-367b-48b3-b54b-7bdcc9834875", "sighting_of_ref": "indicator--5e5a32b7-ecf8-4fc3-a880-9fcde2e9a5e3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29737b46-f453-4cad-b8ae-a696bc2fe991", "sighting_of_ref": "indicator--85706cf1-90bd-40ad-9ac5-43ed354bea3d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c95f27f-d80a-4f7e-a3f5-9e051457a001", "sighting_of_ref": "indicator--85706cf1-90bd-40ad-9ac5-43ed354bea3d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945a331e-57c3-4765-8b89-d494fdd6db97", "sighting_of_ref": "indicator--cd34baa2-0121-49d9-a4a1-38faa7c705b1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f326aa7-e9da-4c42-b10c-1b1630f409bd", "sighting_of_ref": "indicator--cd34baa2-0121-49d9-a4a1-38faa7c705b1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4432808b-547d-4a41-9255-079e9f4cb1cd", "sighting_of_ref": "indicator--4c694354-9067-4a96-be0d-437dbfe6fbec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1c1028-f05a-41f4-b0ec-4738a2151b0b", "sighting_of_ref": "indicator--4c694354-9067-4a96-be0d-437dbfe6fbec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef554a0-7011-4e4b-a0a3-54055fbb9b74", "sighting_of_ref": "indicator--68e17eb4-1731-4e1d-a30a-0ab0e87be4af", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a59e13-cfbc-4714-90a4-bc4da093d070", "sighting_of_ref": "indicator--63a1fc05-199f-4266-9e87-80e8f2f033b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df18dde-62ab-4d22-bb0b-5ce8aa53804c", "sighting_of_ref": "indicator--b64e06e7-c3a9-44d4-99e4-56144ddc0ca2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd1e2e5-b0b9-4d94-9b5f-690f8d4f2974", "sighting_of_ref": "indicator--b64e06e7-c3a9-44d4-99e4-56144ddc0ca2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6897622-8d66-4bbf-b90b-30615d5d0e3f", "sighting_of_ref": "indicator--a56926b7-77c5-4471-96bf-5f3d6ea96b53", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7ae5f8-ba13-4f8e-9b13-7e8a75c33ef1", "sighting_of_ref": "indicator--a56926b7-77c5-4471-96bf-5f3d6ea96b53", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130c6bf9-b2b5-4967-8243-753cbe03d1ef", "sighting_of_ref": "indicator--16efdf0d-4186-41de-b839-30ed499d4064", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e915cf0-754c-4606-b660-2cae003ae06d", "sighting_of_ref": "indicator--6e9491dc-9e84-4342-9f8c-a29ed037cdcb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45282b3f-0513-4b99-9fda-c16e73cf2b52", "sighting_of_ref": "indicator--6e9491dc-9e84-4342-9f8c-a29ed037cdcb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179b89d6-7474-414c-9fad-0246919045a3", "sighting_of_ref": "indicator--fca97be5-d16a-40ab-aed9-6ca12c7b9963", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4781c28b-e4d9-4a8e-a5df-c9a70f59c1e3", "sighting_of_ref": "indicator--7bca913a-c747-46d8-929f-dc6cb45b2875", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704af56e-8df7-47c2-9ebb-10034b1968e3", "sighting_of_ref": "indicator--7af383f1-561a-4d62-9ff2-327edc8133e2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d563f066-84c5-4c50-a907-f6262a51e47a", "sighting_of_ref": "indicator--a310630d-87e9-4cf1-bca6-b7782dc0abdb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78514085-b874-441e-9ba7-b6daaa2113cf", "sighting_of_ref": "indicator--d75b8e31-5358-41ab-b362-2e622cdbcb28", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fbe293-0078-4340-a877-d3e14157554e", "sighting_of_ref": "indicator--d75b8e31-5358-41ab-b362-2e622cdbcb28", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078ec94e-72cf-4336-8e2f-920611f07f88", "sighting_of_ref": "indicator--9a7e7fa5-f304-410e-9671-c1a1daea87c2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52ba9d2-1cb6-4ee8-8441-a88a0ce81a90", "sighting_of_ref": "indicator--9a7e7fa5-f304-410e-9671-c1a1daea87c2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1b4863-5bc5-47f0-ac0d-2ac19a5de90d", "sighting_of_ref": "indicator--9c1cfabf-e327-467a-8029-a3bf00f87433", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30554f2b-05fd-4d9a-ad72-3acc21eaf79c", "sighting_of_ref": "indicator--6f6fc558-2b3f-4da1-800e-b39b76b8ae57", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ecea3d-f5ee-4085-828b-fbb9e66808b3", "sighting_of_ref": "indicator--14b49899-6705-40ba-b276-1618b4021bed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5267e17-a5fb-467d-9567-9d1038fc296b", "sighting_of_ref": "indicator--14b49899-6705-40ba-b276-1618b4021bed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f20033e-1664-44af-9ca9-0d777547cf45", "sighting_of_ref": "indicator--028e434a-1a4d-44c8-9fd0-3159e101d93e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bab7844-2e03-40ad-aef8-1024c7fd95ed", "sighting_of_ref": "indicator--df34fcfa-7af6-4fcf-84d5-20e7de489864", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3f112b-f26f-4d06-952b-6ba966d15bed", "sighting_of_ref": "indicator--c9e55977-922d-4a7b-a4a6-06b77585a51c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4444c50-864f-40ae-afdf-1a347049b70f", "sighting_of_ref": "indicator--81db7418-ff15-4c06-8979-85c6abf046e0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cd278c-27b9-4f54-8106-1829b8d0ca24", "sighting_of_ref": "indicator--81db7418-ff15-4c06-8979-85c6abf046e0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988fbf39-87fe-4097-85ae-d8f4dc73b8ec", "sighting_of_ref": "indicator--27e19395-7fa7-4206-a9f8-b62a041eb229", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0048bb48-dce3-4c57-b22f-e127f2769c40", "sighting_of_ref": "indicator--b97dce87-346b-4b1d-b0f9-5eb4933553e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c836d6-565e-4feb-b896-2fda9a31fd6c", "sighting_of_ref": "indicator--b97dce87-346b-4b1d-b0f9-5eb4933553e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfa9a5c-4d30-4e6d-a806-cda1a83c37bf", "sighting_of_ref": "indicator--a94d36c4-637c-480f-a02a-7a29f4b54a92", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f76fa0-2d59-4db0-83d3-dd7fdfc1d93c", "sighting_of_ref": "indicator--a94d36c4-637c-480f-a02a-7a29f4b54a92", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7e0f93-f88d-42ec-90db-efdaa9512523", "sighting_of_ref": "indicator--a94d36c4-637c-480f-a02a-7a29f4b54a92", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712a9ff7-47f3-4ef8-bd9a-815c812f8826", "sighting_of_ref": "indicator--71ed8bcb-44a2-43ff-8970-0fd0f36ace69", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046401ef-0e45-4084-a9cf-4496712d95a8", "sighting_of_ref": "indicator--71ed8bcb-44a2-43ff-8970-0fd0f36ace69", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdab3116-eb03-4f20-9636-45ad7cff77b6", "sighting_of_ref": "indicator--9ece85b4-a093-4451-984e-50d3db2d73e4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4feb242f-3584-46d0-9d55-9e455012ae99", "sighting_of_ref": "indicator--8489bf54-7518-4135-a794-34998edc4e49", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b303c375-8892-4284-a51a-614b8447af91", "sighting_of_ref": "indicator--d2e24978-f2a8-4fbb-b840-f5a51f93c172", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a451c7c-cca4-49dc-b6ae-f861080a8fe0", "sighting_of_ref": "indicator--059e706e-b14e-4b00-abfc-6c9b4c5e3cb6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba21bb0d-5ce0-4264-bb98-40affef223d7", "sighting_of_ref": "indicator--95978fca-18f7-4cf9-932f-f44c12df5936", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c6d263-f03e-4bab-b1d2-cd6a0aac98c6", "sighting_of_ref": "indicator--b726cfd0-e11d-4d3c-b2b5-4ea91184587c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939296c1-f2c1-48f7-872a-66d46537b070", "sighting_of_ref": "indicator--7d3eb7de-106f-4578-9888-53b0ce94bbcf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e83f353-4a9d-4bb9-9d83-8194a6b32611", "sighting_of_ref": "indicator--1abdef1f-1ff9-41b3-98db-9b68b0ad2091", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb4ee3d-6a9a-4f0c-b260-8fd47083f88d", "sighting_of_ref": "indicator--b2c4629a-2c82-4a37-82a8-051f9e7f6f2c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9d9ab4-918d-48a0-8192-3420e83e71a8", "sighting_of_ref": "indicator--528e0b19-3535-4b9c-a2be-84e7c0c272b3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7180ad-a4e1-47a9-976f-2a2aa87d940f", "sighting_of_ref": "indicator--e599fd15-4c45-4aca-ad27-5370315715bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef588cd-9ac6-4f5a-bfa1-33c737907168", "sighting_of_ref": "indicator--e599fd15-4c45-4aca-ad27-5370315715bd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87676f92-b7a2-477d-b8bb-75013ff48a36", "sighting_of_ref": "indicator--2a58bd08-cd85-407e-8e2e-7a045330f660", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a9965a-eec8-414a-94a0-cf41d5e53cb5", "sighting_of_ref": "indicator--74fe41f3-bdd0-4962-b6c2-ebd0c00e538b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61863c4-12ec-4eb1-a875-89c8da5d8cdb", "sighting_of_ref": "indicator--112cf322-6b34-4eb9-89ee-fd8194f998c5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b694a5-67fc-48f7-80ed-d2f3324051c5", "sighting_of_ref": "indicator--3258881d-0aa8-401e-be7b-6a4faf098a28", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07a2d87-3b5b-4401-9f90-55eff2073b8f", "sighting_of_ref": "indicator--3258881d-0aa8-401e-be7b-6a4faf098a28", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714f3a3b-a5e4-45f5-a027-d8695b88553f", "sighting_of_ref": "indicator--4abb608f-dce1-431f-9fe5-33131abba778", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93283057-b906-44fe-bcc5-b52eb37ace5e", "sighting_of_ref": "indicator--ce3fdda6-2fd3-4be2-b920-e6dca657c7b3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09116df5-fcc0-4ad7-a6b4-1aaf67dbd65f", "sighting_of_ref": "indicator--ce3fdda6-2fd3-4be2-b920-e6dca657c7b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81099389-30c0-40e1-8e01-7ac94d2580c5", "sighting_of_ref": "indicator--a21a8a80-53fc-4013-9927-91e333a51659", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2963f123-77a9-437f-843c-82588e2c4a7f", "sighting_of_ref": "indicator--86c73dbf-b08c-4c55-bcb3-e75f8ba56d4e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55933eb7-a3aa-4d04-83ec-450d1fca4a64", "sighting_of_ref": "indicator--0f224fad-60a7-4921-9595-844eaf8a7307", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ece99c2-88f1-48cd-88b7-eb51bc76b1e4", "sighting_of_ref": "indicator--31de2e60-93a1-436b-95ed-6ee7efe6a686", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56158604-74e5-4f07-a792-88280b8f4cc7", "sighting_of_ref": "indicator--31de2e60-93a1-436b-95ed-6ee7efe6a686", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3731ec-8195-41c8-bf2f-73182a371eee", "sighting_of_ref": "indicator--31de2e60-93a1-436b-95ed-6ee7efe6a686", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d37c59-8792-46e3-ad2a-2db8a92ec65d", "sighting_of_ref": "indicator--73bc58c8-55b7-4af3-8d76-ecd69841a8fb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2ff0e7-64aa-4f20-8cd8-245ae6424402", "sighting_of_ref": "indicator--73bc58c8-55b7-4af3-8d76-ecd69841a8fb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0d00d4-bba2-4de7-8cba-4b9ad93ca36d", "sighting_of_ref": "indicator--407b00c6-0add-4e96-abd4-4c36d79b8cad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad63498-0029-4a46-b68c-c8d16d31e137", "sighting_of_ref": "indicator--407b00c6-0add-4e96-abd4-4c36d79b8cad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700371a4-a54a-44f2-88de-80d97b97941f", "sighting_of_ref": "indicator--407b00c6-0add-4e96-abd4-4c36d79b8cad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4704d5-7cfe-4a5d-840c-b812360770cb", "sighting_of_ref": "indicator--9c4a45b3-d17e-444a-a4a6-3f3f06396c6f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd04ddde-109a-435a-b22d-1509c8e424cc", "sighting_of_ref": "indicator--f5694d04-15d2-4378-b202-d301fcd8f2fe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc45f03f-fb29-493c-b4d5-2a42854539e5", "sighting_of_ref": "indicator--e5d44811-6a78-4cf8-a9bf-23f74c351b96", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33682680-829d-4cb0-aba6-c5f181456e78", "sighting_of_ref": "indicator--e5d44811-6a78-4cf8-a9bf-23f74c351b96", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6144d533-68c6-40a3-83d2-cf6794b4cadc", "sighting_of_ref": "indicator--b9281772-735f-4838-9812-fc0c9d3dc963", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60abbb39-2a78-4871-9ac7-52092a59e17a", "sighting_of_ref": "indicator--0e9edb31-6823-4714-be5d-df291f6ce472", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4076214-fb63-4f7a-8c2e-9278d7efda51", "sighting_of_ref": "indicator--7380577e-4554-4da1-aa32-a4abf7e5583e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dd010d-e923-4192-aba6-584a4479b3ce", "sighting_of_ref": "indicator--7380577e-4554-4da1-aa32-a4abf7e5583e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45b4cf6-4dc0-460b-8c2c-d38108e26a79", "sighting_of_ref": "indicator--455f2844-dd7c-48fd-b291-aa7e1a8367ee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e90fd26-f55c-4871-a3c4-b4f80b92aeb1", "sighting_of_ref": "indicator--455f2844-dd7c-48fd-b291-aa7e1a8367ee", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaec8de3-5b64-46fc-b799-82f1342c20a5", "sighting_of_ref": "indicator--d63f123e-507c-43d4-96d1-86351dedf899", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a456d23f-77a8-43c6-a442-24e2d367b502", "sighting_of_ref": "indicator--d63f123e-507c-43d4-96d1-86351dedf899", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4245d5-b58f-4bd5-8cb0-d92c397faa7a", "sighting_of_ref": "indicator--16f56d79-9a2d-47cc-855a-1060c13941a8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8a0c69-926b-46e2-bf5c-1d59a74cae19", "sighting_of_ref": "indicator--41f5a12c-0609-467f-aa8b-3b4c6b730f7a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f83873-d417-41d3-9871-dc405b743138", "sighting_of_ref": "indicator--41f5a12c-0609-467f-aa8b-3b4c6b730f7a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e867ad-52bd-40e9-ab0f-d30104f68e91", "sighting_of_ref": "indicator--101f9932-2243-4a74-a390-5517d9c378f8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb27298d-80bf-4eeb-b3c7-82dd9b55c201", "sighting_of_ref": "indicator--569827a6-6dcd-4d57-86fd-467207752574", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bc1339-ccdb-4b1f-bf97-666b865d781d", "sighting_of_ref": "indicator--569827a6-6dcd-4d57-86fd-467207752574", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc5091c-116e-4f31-a54f-c58d5bf2284e", "sighting_of_ref": "indicator--f0d458a4-a898-499f-9cac-56cde51fb117", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04337e3b-13c2-43fc-a8df-fd4ec8d9932f", "sighting_of_ref": "indicator--f0d458a4-a898-499f-9cac-56cde51fb117", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda7cfb7-ac92-4238-b66a-3c49539578c4", "sighting_of_ref": "indicator--94c976fe-8ad4-46eb-a045-2bbc04863bae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509201df-d50e-451a-862c-eda8a7389440", "sighting_of_ref": "indicator--94c976fe-8ad4-46eb-a045-2bbc04863bae", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedbcdb9-a3a0-4438-9389-43d21451c0d1", "sighting_of_ref": "indicator--94c976fe-8ad4-46eb-a045-2bbc04863bae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe7f64a-18b7-4c3b-9c49-a4fe0a4ea15a", "sighting_of_ref": "indicator--d0755a02-a0c2-4d3b-a2b1-ae5d904aefb5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63a58b7-7072-4482-a8de-eaf23aba0e98", "sighting_of_ref": "indicator--d0755a02-a0c2-4d3b-a2b1-ae5d904aefb5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4809552-24d6-4031-8537-ea686ab1e32a", "sighting_of_ref": "indicator--c244fc3c-2664-4c53-8154-ade0c7461017", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a18157-301c-4247-8a13-9f21365ab018", "sighting_of_ref": "indicator--c244fc3c-2664-4c53-8154-ade0c7461017", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea5c264-d0ca-44a9-8cff-0912478ef692", "sighting_of_ref": "indicator--f5b019f0-145c-4c3d-b891-f25d70326cd8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c030aa-c3fb-42e4-8bd2-f59cb70ecd50", "sighting_of_ref": "indicator--f5b019f0-145c-4c3d-b891-f25d70326cd8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0712b48-f7a6-48d2-ac49-ca25a3e6b6b0", "sighting_of_ref": "indicator--ff4b66e1-8544-4d87-ba4b-17e090b80421", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78c3da3-525d-48fa-907e-202d37429a83", "sighting_of_ref": "indicator--1286b457-60f5-495c-bd13-f81fb52ddefa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1d1ada-215e-4065-81f5-e36af1d841f5", "sighting_of_ref": "indicator--1286b457-60f5-495c-bd13-f81fb52ddefa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64af99d7-80f8-452d-878e-18b587526eb9", "sighting_of_ref": "indicator--d40f6370-1fe5-4f8d-8a40-0462d0e3cb91", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f13cd1f-4be6-422d-afa6-2393f2d76972", "sighting_of_ref": "indicator--ce7ebbdf-278e-4a9f-9456-09e7d03811a1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca08b3e4-d5a1-45af-9b17-db3e36e8e6ae", "sighting_of_ref": "indicator--91c3626d-b563-446b-b2e1-366762cf281b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2216680b-a309-47b2-bd3d-3bb51695d134", "sighting_of_ref": "indicator--91c3626d-b563-446b-b2e1-366762cf281b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef17b6a-34f9-49f0-8b3a-6b5861df0f91", "sighting_of_ref": "indicator--2dc6eab4-4bf4-40b1-b37d-cc1a2123e2db", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0bcb6d-ccd7-4aaa-8f0c-516fda46a7ce", "sighting_of_ref": "indicator--2dc6eab4-4bf4-40b1-b37d-cc1a2123e2db", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2ca586-aad3-4a03-b00a-e3347c4d9723", "sighting_of_ref": "indicator--cf637492-6ac2-4554-85e1-a1239dbcffc0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cd366b-f98a-428e-9fea-41cbb132e06f", "sighting_of_ref": "indicator--43186266-9f8f-426a-be4d-4848a6d757dd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b4b5f0-997b-46cb-80fd-a548d0a51d96", "sighting_of_ref": "indicator--4e9aba04-b973-418b-9487-714d45914563", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e86bcb-8ec4-44ea-91d0-7baca16afd83", "sighting_of_ref": "indicator--28f65f6c-b5ab-4421-a117-55742801676f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d751810a-46f1-4b06-9392-79d54954e450", "sighting_of_ref": "indicator--28f65f6c-b5ab-4421-a117-55742801676f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b918cdc6-48bb-4d7c-b44b-f0324f3f56af", "sighting_of_ref": "indicator--2132d278-fad8-4584-836c-f25263d49b58", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ff0f45-7b8a-44b1-9747-673e452ddad0", "sighting_of_ref": "indicator--85041627-f9a9-4161-9d30-b1d2baf7b426", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4ad740-e2aa-4ac8-9553-5cfc0907f689", "sighting_of_ref": "indicator--b4ec6794-7d72-4ca7-9af8-c14927178e2c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0169574-c14f-4ea1-8452-1b827af63969", "sighting_of_ref": "indicator--8081b013-477a-418c-9886-a9da06f313b6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802f83ec-6e16-4ace-a696-e395263a772d", "sighting_of_ref": "indicator--8081b013-477a-418c-9886-a9da06f313b6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2d5498-5128-46bc-b132-409b760c6c71", "sighting_of_ref": "indicator--8081b013-477a-418c-9886-a9da06f313b6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6c5fd1-c575-4b9c-9995-72cee9d376be", "sighting_of_ref": "indicator--91199ff8-e283-4b84-af38-cb6ea662174b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b630600-234d-4487-b99f-9f7d4012f0d5", "sighting_of_ref": "indicator--1807efae-2423-4e65-84fa-60c486160147", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e3cb67-3462-4527-b7a7-074417fe9267", "sighting_of_ref": "indicator--a9993375-32c2-4102-9cc2-affef9422c25", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954badf2-9ce1-49b3-9a0a-22bf566bccc3", "sighting_of_ref": "indicator--6ac3ff1f-996f-45b7-9b03-5e527b908916", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3755a0d3-ac7c-490b-8e80-7c729fd140c4", "sighting_of_ref": "indicator--6ac3ff1f-996f-45b7-9b03-5e527b908916", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efbf98d-c35c-49d6-90d5-44aa7de254b1", "sighting_of_ref": "indicator--80bfe43a-0132-4f79-a607-bdc2d48288d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9db97c2-7dbf-4597-a797-5873e3034d1e", "sighting_of_ref": "indicator--80bfe43a-0132-4f79-a607-bdc2d48288d3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2d88cf-da8d-4166-aa2f-74b6c123fdc7", "sighting_of_ref": "indicator--80bfe43a-0132-4f79-a607-bdc2d48288d3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce41d06-2113-45b9-bc38-2ae51e0b6bc8", "sighting_of_ref": "indicator--4e1b73ec-561b-40a0-a726-159624777aca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15c0c90-90c7-48b8-9dd1-9a25ff63377d", "sighting_of_ref": "indicator--3d0e4e3a-491a-4233-8460-a0fe9784c5e0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d00f46b-cca2-4f11-86d5-bfa4acc95a2b", "sighting_of_ref": "indicator--3d0e4e3a-491a-4233-8460-a0fe9784c5e0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520bc219-a83f-4bb5-a818-0f27cf2de687", "sighting_of_ref": "indicator--b3dd1444-245a-4fa0-9cd6-f606ebb7c0aa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75275a9-66a5-4849-a12e-9d8e291f71bc", "sighting_of_ref": "indicator--f868b175-3f99-4e03-9811-52856aecb98b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e1d16f-0a3f-4661-b4fc-c9dccbd6c536", "sighting_of_ref": "indicator--f868b175-3f99-4e03-9811-52856aecb98b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfba28b-a2e0-4c12-8480-9b3952785c3d", "sighting_of_ref": "indicator--79358fc6-a1bf-4f45-b051-bbaa713e3726", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b352e554-ee65-40fa-bdc5-c5f3e533cc4b", "sighting_of_ref": "indicator--07f12aca-741c-4317-8069-e42a835e25e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820697b2-aaab-415c-96f3-5cc3f509bf9c", "sighting_of_ref": "indicator--dc55be7e-f21d-4b37-b8cf-19ea255587dd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5427d6-605b-4f7b-9a40-5c344ffad4cd", "sighting_of_ref": "indicator--21f00d5d-babd-490c-826a-554fef17d1ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1fe8b0-34da-4e3f-b9e8-28d56d230fe4", "sighting_of_ref": "indicator--e9fc6a59-19de-4b4a-9af8-11a066ae117d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0b4073-154f-4b5f-9bb0-0b69d11bdd5f", "sighting_of_ref": "indicator--3933e0c2-1147-4a29-af7f-7ef14347d12d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ddccead-fb34-49c3-85a7-3414f8a08416", "sighting_of_ref": "indicator--c613de27-6dc0-46ff-8809-7614db649708", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efef6f72-8846-409e-ae89-21c5e23c1b62", "sighting_of_ref": "indicator--c613de27-6dc0-46ff-8809-7614db649708", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f062d619-b2e7-4877-a24d-568602bf16aa", "sighting_of_ref": "indicator--c65eabc4-f7cd-4948-bfdc-d309b1c80797", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c379b64-a53b-4d45-87c8-1980ff0e2fb1", "sighting_of_ref": "indicator--26685b5d-983f-4984-9cf9-756300f9195b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba89b320-cfc1-464f-ae89-fe2215c6dc4c", "sighting_of_ref": "indicator--56340d6d-d67c-495e-b9ee-8686931addb8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2416f83b-09fd-47d9-a86a-95e18f230625", "sighting_of_ref": "indicator--56340d6d-d67c-495e-b9ee-8686931addb8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5ef32b-befc-4254-9749-b7534c88e3dd", "sighting_of_ref": "indicator--17202cd2-7baa-43ad-a03e-ac1a27dc706e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6cc4b1-96be-49ba-bbb6-7485c303f5c9", "sighting_of_ref": "indicator--17202cd2-7baa-43ad-a03e-ac1a27dc706e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25516203-fd5f-4279-85fa-97fe2c5cab18", "sighting_of_ref": "indicator--103ec335-a872-4308-b583-a111fd7c34d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb698b35-d4ac-470a-a03b-a4ef3d6514a6", "sighting_of_ref": "indicator--c3faa7d6-7563-43ec-9730-9fc7eb3b0846", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56483de3-210f-4952-a1aa-f4c88cd3768e", "sighting_of_ref": "indicator--c3faa7d6-7563-43ec-9730-9fc7eb3b0846", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb29ac9-36bc-47e4-87f7-4c15d67e57b3", "sighting_of_ref": "indicator--70e49763-8894-4403-a5b8-7bd8223ce5fc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857fe0e0-027a-43ae-8900-15708579df68", "sighting_of_ref": "indicator--70e49763-8894-4403-a5b8-7bd8223ce5fc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4eb9f3-db95-45f8-9c47-9d3d9864c0e1", "sighting_of_ref": "indicator--6c02b17f-f550-4dd3-a235-ae4457b61f26", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c768632b-5555-4f01-81d8-d836f1ec250a", "sighting_of_ref": "indicator--6c02b17f-f550-4dd3-a235-ae4457b61f26", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e65a7a7-6933-4389-967a-39e22889360c", "sighting_of_ref": "indicator--6c02b17f-f550-4dd3-a235-ae4457b61f26", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c370e7e-424c-4b2d-bbb6-120ffe1e3b9a", "sighting_of_ref": "indicator--23ea6af1-9479-45d2-8d47-4944f104671f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e66bebc-e8c5-4a34-bf5a-07d81591e8f9", "sighting_of_ref": "indicator--5f7da0ab-32b6-4dfd-875e-3fcb1c5c5557", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7c181a-2e95-46de-8c53-f60b4ac7a809", "sighting_of_ref": "indicator--5f7da0ab-32b6-4dfd-875e-3fcb1c5c5557", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74072a5-eeb9-4e43-8dde-a258ff010bca", "sighting_of_ref": "indicator--a23fc500-c239-4e63-a0ad-cfbffdf2a203", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16597317-f200-463b-bd14-dca27ee38cbf", "sighting_of_ref": "indicator--a23fc500-c239-4e63-a0ad-cfbffdf2a203", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac11400-0d54-4bbf-a5c4-0941331fd87a", "sighting_of_ref": "indicator--0ca27a20-c373-4550-bf0c-4fb23c631acc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4dd326-e0fe-4cd6-afcb-3f48bbc8d48d", "sighting_of_ref": "indicator--0ca27a20-c373-4550-bf0c-4fb23c631acc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0159a70b-adbe-4344-9781-dd912a3765cb", "sighting_of_ref": "indicator--178764a1-0cd6-4d0d-ae8b-b7ac374d8b98", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4295422-96d7-444a-9128-337829932519", "sighting_of_ref": "indicator--9bc22840-1054-488c-ae08-e8675584fcd5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab88552e-c336-4acb-b298-dcab1cb4f43f", "sighting_of_ref": "indicator--ae0238ed-c127-4979-ae14-66de9bde1526", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0bf956-6e73-425f-aed6-538b3ae3f528", "sighting_of_ref": "indicator--ae0238ed-c127-4979-ae14-66de9bde1526", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afab2ee-89b6-4fc0-a101-3518633afb6d", "sighting_of_ref": "indicator--d00ef87f-0fef-4956-813b-3d399f390c2e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0eafcb0-198d-4919-8c9d-8e0e46248508", "sighting_of_ref": "indicator--8e576a74-4c8e-4083-b234-6c59da10bb23", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e69086a-2f90-4255-88fe-2da429792eea", "sighting_of_ref": "indicator--47ba4965-2e5e-4650-90a6-073286e7da39", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367d309d-5573-4d51-9205-34293ea14cc6", "sighting_of_ref": "indicator--47ba4965-2e5e-4650-90a6-073286e7da39", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d731c6-3e03-4d43-bb8d-40542de19c15", "sighting_of_ref": "indicator--dbba2597-1912-4659-9f69-f1e31e5d2242", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ebcbd2-bf39-4fb7-9985-25ef3745d347", "sighting_of_ref": "indicator--dbba2597-1912-4659-9f69-f1e31e5d2242", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8df6f1c-512c-43c6-9dfe-b9a2520e5b4f", "sighting_of_ref": "indicator--f6b24790-e9ae-4563-b349-dd14e10aa664", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0450d8-d906-49f3-991f-a2f21c202748", "sighting_of_ref": "indicator--73184276-69a2-4a03-be8e-e41d3cae1660", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3e3dbf-dda2-4cf2-9cff-11a03b995d40", "sighting_of_ref": "indicator--73184276-69a2-4a03-be8e-e41d3cae1660", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35086b2-bab1-4d6c-9c48-cefe3220edf9", "sighting_of_ref": "indicator--985ca424-a4f8-4ad8-b998-b7ac52635fdf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5221de8-dceb-4331-a455-491297c5cf16", "sighting_of_ref": "indicator--335c7b5e-efeb-40cc-894a-785c6220e65d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1abc08-c881-4b23-958f-34fb83997684", "sighting_of_ref": "indicator--c3e201a1-9014-4ffc-baab-4083139f4e7b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1565fe2-a1b0-4fc5-93e0-b4224a7c358f", "sighting_of_ref": "indicator--c3e201a1-9014-4ffc-baab-4083139f4e7b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809276ab-0110-491c-9554-8ee47eff7996", "sighting_of_ref": "indicator--c60654fb-d472-4cdc-b823-6b8584333f3f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fade0dd-35ee-4d9b-b040-b04e122b8455", "sighting_of_ref": "indicator--c60654fb-d472-4cdc-b823-6b8584333f3f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cad176-a781-4995-bc3d-e75fa01207c2", "sighting_of_ref": "indicator--c60654fb-d472-4cdc-b823-6b8584333f3f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce31f660-a3be-4737-b1a4-ed217cf2de15", "sighting_of_ref": "indicator--d24f69fa-ef08-4917-ae33-fcd403432c81", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01120dd0-215a-45c9-8f98-626e68d7621b", "sighting_of_ref": "indicator--d24f69fa-ef08-4917-ae33-fcd403432c81", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe3c67d-9cb0-4553-ae53-d467ee23fd2d", "sighting_of_ref": "indicator--d24f69fa-ef08-4917-ae33-fcd403432c81", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84208e0c-4478-4d5a-aeb9-4ea66339146a", "sighting_of_ref": "indicator--1ad0911c-3218-4a6a-a800-47203f29b9ae", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdd27fc-e012-4d97-b6f9-7606d4d76008", "sighting_of_ref": "indicator--ebb227c1-23da-41fa-81f1-ef719a71fe09", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528a08b2-065b-42d2-b899-9f0000501ed4", "sighting_of_ref": "indicator--ebb227c1-23da-41fa-81f1-ef719a71fe09", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b7cefa-1d69-4140-982c-597585e61daf", "sighting_of_ref": "indicator--17706f0e-b3d3-48d3-8bf4-35646bed19d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17346c8d-e2a8-40be-8dff-235192f8e448", "sighting_of_ref": "indicator--17706f0e-b3d3-48d3-8bf4-35646bed19d6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c92fd8-3547-4bdd-8d2a-0f6d3e3cff64", "sighting_of_ref": "indicator--64477047-7765-47f3-84b1-4b9de2f3933e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e6d958-43e7-41de-a71d-a91bb4453ff6", "sighting_of_ref": "indicator--a09394bd-3e1e-47cb-9fb0-eef43e284076", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f39188b-e445-43e5-8a70-b2022083284b", "sighting_of_ref": "indicator--a09394bd-3e1e-47cb-9fb0-eef43e284076", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac7fdba-187f-4fa2-9d5b-153ec60852d1", "sighting_of_ref": "indicator--a09394bd-3e1e-47cb-9fb0-eef43e284076", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0425342d-1208-4cf7-94cf-af6c0b5eb94c", "sighting_of_ref": "indicator--ddbbb152-4bb7-4151-9c61-d054ef749d33", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb795a0-2695-4e96-872e-7126c165b4f4", "sighting_of_ref": "indicator--ddbbb152-4bb7-4151-9c61-d054ef749d33", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89362e1f-afad-47e9-a0e5-6b51398d7eea", "sighting_of_ref": "indicator--07241afb-b655-445d-9afd-16db6de4122c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec15d08-3b9c-4e2c-8aa0-8ba275b74d4b", "sighting_of_ref": "indicator--a7171f2e-0f0e-4c86-9c8b-5f26206e750a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf65f928-2db9-4254-8b05-dedafdc916ae", "sighting_of_ref": "indicator--71de4124-2681-4b44-85f0-0ae63b43900f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2026a333-fab6-44e4-96c8-143cc50cb710", "sighting_of_ref": "indicator--e2aff1ce-173f-467f-a1ff-5f21186ded80", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458806aa-ffbd-4a85-b0c9-48fe1083e5ce", "sighting_of_ref": "indicator--e2aff1ce-173f-467f-a1ff-5f21186ded80", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87bfebe-0fcc-4d0d-bcc7-cb3d5ee8de3a", "sighting_of_ref": "indicator--6cc713d7-5a27-4cf5-a4d5-8094f80f9963", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d95029-0226-4bbf-9be1-2d7e3cae54f9", "sighting_of_ref": "indicator--6cc713d7-5a27-4cf5-a4d5-8094f80f9963", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7c3281-cbcd-4274-bddf-1a9fe3783028", "sighting_of_ref": "indicator--6174ce0a-51b8-4675-8855-90496e225b26", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8558250-80a6-4c4e-880c-c8c31ce1b096", "sighting_of_ref": "indicator--d0641a1d-42b1-48a7-a285-0423feeebb4c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76449981-9d5b-41c9-aa7e-77728f3e365e", "sighting_of_ref": "indicator--1275c23a-00f2-4f9a-995e-9dcc6ce4bac8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0178bf1c-46d1-4026-a560-de4977cc93ad", "sighting_of_ref": "indicator--1275c23a-00f2-4f9a-995e-9dcc6ce4bac8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5765f86-d92f-44d3-a90c-686d00bf6dec", "sighting_of_ref": "indicator--66fa0c84-e484-4e23-b922-b41ce8462bae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16672377-c216-459f-8f3e-ba66bda4df94", "sighting_of_ref": "indicator--66fa0c84-e484-4e23-b922-b41ce8462bae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8af55a7-825a-4b3a-87ca-e03b4ab35b03", "sighting_of_ref": "indicator--a7dafa78-8c23-44ef-bb93-8f3d5228b49d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a32524-1b69-4935-9480-3ee92a71557e", "sighting_of_ref": "indicator--645005bc-ac1e-4572-93b5-67de10800376", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50aa67c-49a3-4460-a1b5-33b12cd09e59", "sighting_of_ref": "indicator--2535ca6b-1048-4304-bcd1-200efd03dfab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc82c99-9571-466f-925d-373a4dd22219", "sighting_of_ref": "indicator--2535ca6b-1048-4304-bcd1-200efd03dfab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655f4f53-f16f-43de-b250-35c9a38b16bf", "sighting_of_ref": "indicator--5b883723-a515-4248-9ade-09af2df2a36f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173b31b1-c84d-4444-ac77-b71563d8aec0", "sighting_of_ref": "indicator--5b883723-a515-4248-9ade-09af2df2a36f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9881849-4517-4b5e-9609-85ca298cb150", "sighting_of_ref": "indicator--404065e4-f18b-4aca-be74-c44500e35a4c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b57387-624a-4ee2-b5f3-7a1e6d956cf5", "sighting_of_ref": "indicator--404065e4-f18b-4aca-be74-c44500e35a4c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f0ab6c-560c-4dc6-908c-c032523ac0a8", "sighting_of_ref": "indicator--f0d39fcd-220e-43c7-bca9-941dbe55e0c2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f303ac-33e1-40b2-a01d-b3cda4816a28", "sighting_of_ref": "indicator--ab4ea7cf-9388-48d3-a6e5-31063f209d8f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b07d9d-5774-40d5-b432-23b049f7ff10", "sighting_of_ref": "indicator--750312fd-1bc2-4b5c-8ae4-dc2faa884a8b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80818f78-47bb-4ba1-beba-2a2f56000646", "sighting_of_ref": "indicator--750312fd-1bc2-4b5c-8ae4-dc2faa884a8b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1594d86c-a42e-4bbb-9110-19ef20ae707c", "sighting_of_ref": "indicator--16cf2e0b-2b3d-454e-a875-008c18b12552", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a8d1be-3efa-47b9-876c-d3560d11406b", "sighting_of_ref": "indicator--16cf2e0b-2b3d-454e-a875-008c18b12552", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51319dfb-0ac3-49ba-8a3f-59ac373431e6", "sighting_of_ref": "indicator--16cf2e0b-2b3d-454e-a875-008c18b12552", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdab957-c92e-4a48-b40f-d57cd08721df", "sighting_of_ref": "indicator--644a4c36-f602-4443-9f8c-9e49c24fe57c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00493d7c-241b-4a1f-9385-5a887fa2d434", "sighting_of_ref": "indicator--7517c4e3-07c4-4c88-ae32-4174b480ce82", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac7b93c-40aa-4e8d-9437-708239b484a1", "sighting_of_ref": "indicator--31104739-6290-4be8-9564-36144e194d98", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c54062-459a-49eb-b2dd-f8e38df7072c", "sighting_of_ref": "indicator--471de689-1ced-4a25-b197-375201d0690e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a424573c-4a09-4279-a422-5ed0416fe5ae", "sighting_of_ref": "indicator--77c44658-9f2c-4324-8284-f63ba3988d67", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a29b295-ab40-484d-82ac-dd8a2261bdc0", "sighting_of_ref": "indicator--504cc505-0363-4a6c-a9cc-153c22e0d9ae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc868c78-bd31-455d-a246-f4d0840e6076", "sighting_of_ref": "indicator--504cc505-0363-4a6c-a9cc-153c22e0d9ae", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c002c991-960e-4c5a-85dd-b9555f4d0beb", "sighting_of_ref": "indicator--504cc505-0363-4a6c-a9cc-153c22e0d9ae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fce5994-dad9-4a53-9af5-8a73876194b4", "sighting_of_ref": "indicator--6ec3d6c3-66f7-443b-a3e0-9e110a19e441", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86edc14e-3f3c-4ca2-a300-8b7bad86d908", "sighting_of_ref": "indicator--5686ee77-1b9d-47c5-85d9-fd1bafffd8e1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c182d562-5833-4a5b-b099-3a4c3ad9afad", "sighting_of_ref": "indicator--50fff339-9218-48d7-b307-7de3c054be00", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8b250b-2e5c-4d99-80df-e2129c6be791", "sighting_of_ref": "indicator--50fff339-9218-48d7-b307-7de3c054be00", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3521b9-014b-42ea-80dc-cc81a0aa43b1", "sighting_of_ref": "indicator--2ebf9018-8e6d-4652-844e-eb2b5d6b333f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5c8df8-bbe5-490f-ab05-450c18d48310", "sighting_of_ref": "indicator--2ebf9018-8e6d-4652-844e-eb2b5d6b333f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eda7bee-ec50-46da-b5f9-8c58457cf66c", "sighting_of_ref": "indicator--0fe907e2-9baa-4f10-93b2-3f09979e51d9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742a338f-9173-455d-a164-e41bae149776", "sighting_of_ref": "indicator--0fe907e2-9baa-4f10-93b2-3f09979e51d9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489b6102-d48f-4de4-9f9f-ba6a722de939", "sighting_of_ref": "indicator--0fe907e2-9baa-4f10-93b2-3f09979e51d9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3f36eb-1b43-47d3-952a-d1cf25b4de5e", "sighting_of_ref": "indicator--02c5605c-e5ab-45c5-a45f-73ac01cefd47", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1da0b7-d913-4def-b625-365e5e2782f9", "sighting_of_ref": "indicator--26ceb172-499f-4132-ba93-bfccfab3d5c7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee032cf-6702-4d65-949e-f2bd5f408ce0", "sighting_of_ref": "indicator--f2486c64-a270-406b-b5d3-0103469871bf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7dba74-321b-4fa6-bd09-1856de50a6fd", "sighting_of_ref": "indicator--a1285214-13b9-4faa-8023-8c5f45dd4632", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcd20ae-3fb1-4ca9-89f5-86d8c37a6302", "sighting_of_ref": "indicator--a1285214-13b9-4faa-8023-8c5f45dd4632", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5da690-177f-4792-b3a1-29491832c6b3", "sighting_of_ref": "indicator--61849ff0-d731-4482-a1bc-eeedb4b72022", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b18a707-57c8-4597-a0bd-50a90bb85b35", "sighting_of_ref": "indicator--d577c2a9-9b63-4195-bb58-d60f35254ddb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c37158-fc75-4792-9419-ba8b2c0f3b90", "sighting_of_ref": "indicator--a844ce64-7723-448f-aeb0-44bba830260a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad8eeeb-1f28-40c8-921c-90a754c6de4e", "sighting_of_ref": "indicator--df5773c1-5782-4616-aeca-ec3aef75c587", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db23cab9-d471-429e-b981-c152278f3029", "sighting_of_ref": "indicator--0a1f8a24-3877-432e-88cf-62df0d6b43e6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39c5471-2e66-46a0-8d1a-1a2f51c2b379", "sighting_of_ref": "indicator--0a1f8a24-3877-432e-88cf-62df0d6b43e6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edf9077-1f10-4390-8233-fd825824205f", "sighting_of_ref": "indicator--0a1f8a24-3877-432e-88cf-62df0d6b43e6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c5906a-b823-41be-a354-8b28425c1543", "sighting_of_ref": "indicator--3439fe46-1834-4788-a45d-4f5d75cc44d0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a546c2-5a25-4ef2-8fd3-a7c08c7c706e", "sighting_of_ref": "indicator--52d5d98c-8122-4b2f-abd9-5569961dcf4d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2531499c-4d87-4040-b969-6e2970eadbaa", "sighting_of_ref": "indicator--2e4c9c6c-a9f6-489a-b6b7-fba8cff48e4c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e4f3da-be9f-421a-8941-0437e6c62d61", "sighting_of_ref": "indicator--6ceb0998-9bd3-4893-ace8-85b1bb5bfc3b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3118505a-a600-4fa5-b8f5-fae9b34ef0db", "sighting_of_ref": "indicator--cbe17639-829f-487f-8b86-8a87f1d4c3c2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b63485-2502-4623-abcd-d192839ce905", "sighting_of_ref": "indicator--e9545a37-616f-48c5-bd06-d22a76652b64", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f5fc37-1bd3-4a9f-b697-193263741855", "sighting_of_ref": "indicator--d24e8bcc-0680-4bbb-909d-be7daf7e468b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640c407d-d23e-4d0a-a461-66d6c3d65039", "sighting_of_ref": "indicator--d24e8bcc-0680-4bbb-909d-be7daf7e468b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b60780d-e5f5-4a85-90b2-b44ad74c5037", "sighting_of_ref": "indicator--9b51c64e-3cca-4328-93b5-8eedc5674b15", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa0f835-d8e5-4c30-bf54-74041eabafd6", "sighting_of_ref": "indicator--c6747e4b-bdbc-4c08-93fd-013208b84522", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94386f4-233c-4be8-bf45-a470e43bf64f", "sighting_of_ref": "indicator--9234fa94-f1e1-441b-9411-910d6f91da5d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd09125-e58c-4a48-acf5-a9f15069af83", "sighting_of_ref": "indicator--9234fa94-f1e1-441b-9411-910d6f91da5d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5164be-4e67-4533-9e18-03bf0abd1669", "sighting_of_ref": "indicator--d8b67f49-ef7b-4c88-8880-494f9ae44634", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5cc2b1f-e6ff-4cb1-825b-7914dd4bf62c", "sighting_of_ref": "indicator--d8b67f49-ef7b-4c88-8880-494f9ae44634", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfca312d-386f-463d-a9f9-3f8e26d5beda", "sighting_of_ref": "indicator--47a9a72f-7c95-499f-af42-682ef9ffb445", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d29adc1-ae86-457e-bfbd-992376e66680", "sighting_of_ref": "indicator--89a4f0db-50f6-402c-b4d9-192cbc7b5eea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d45c23-c29d-45ff-b5af-9883fdb38633", "sighting_of_ref": "indicator--21b5919a-73b8-48a9-a704-475b99289e15", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88685b47-a416-4c44-becc-72505ddc827f", "sighting_of_ref": "indicator--21b5919a-73b8-48a9-a704-475b99289e15", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15383601-4524-4703-a0d5-2aa91b312b4d", "sighting_of_ref": "indicator--21b5919a-73b8-48a9-a704-475b99289e15", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f45224-e8d2-4581-b767-fd985116ea06", "sighting_of_ref": "indicator--ee008ee3-ba81-4de4-bb0c-cfd626096855", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcba2e0b-796e-4fb2-9f3c-e4cc1650f386", "sighting_of_ref": "indicator--4bbf108f-7f89-40ca-9038-2ed656437b64", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479ee11f-056a-4aee-895a-d8f3e68a3c50", "sighting_of_ref": "indicator--f22d6472-a98f-4fd4-b4c0-1dbf1a64b2d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3957c6ed-e4ca-4f8e-90a6-ce3aa55dd84c", "sighting_of_ref": "indicator--245b71ba-5486-489b-be3d-3bef1506955f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79be6cb-392c-4c59-b766-a09c09486b81", "sighting_of_ref": "indicator--245b71ba-5486-489b-be3d-3bef1506955f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9bd796-e84f-465f-9a6e-37028a7c2f26", "sighting_of_ref": "indicator--fe41d0ab-1400-48f2-aa04-dcc45248ab0b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57561063-4def-474c-8270-64c3b7ccdbc0", "sighting_of_ref": "indicator--fe41d0ab-1400-48f2-aa04-dcc45248ab0b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008db726-913f-4a63-809b-cb531d468632", "sighting_of_ref": "indicator--ce92ef37-daad-4f5a-881a-1212ade079a4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07497eab-1587-4308-86f7-698349e326f3", "sighting_of_ref": "indicator--ce92ef37-daad-4f5a-881a-1212ade079a4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f5b360-206e-4c8e-9ea9-2a0ef42b952c", "sighting_of_ref": "indicator--ce92ef37-daad-4f5a-881a-1212ade079a4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8a151c-372b-4073-a164-7bc40c27e486", "sighting_of_ref": "indicator--70cf6ee1-bd8f-47ac-9d70-f8418dec85ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d0b4de-8854-4492-8764-a97e91128435", "sighting_of_ref": "indicator--68561b0e-921e-4ac9-b3f6-b2ab1bcea30b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3132d366-f1af-477e-bb37-58628a15c56a", "sighting_of_ref": "indicator--68561b0e-921e-4ac9-b3f6-b2ab1bcea30b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6675014c-745b-426c-876f-f335db9e4058", "sighting_of_ref": "indicator--38ab8527-cadd-49c0-bd0d-27ab6097866e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f81529b-8ea4-4d41-b7df-42f2f728a4ef", "sighting_of_ref": "indicator--38ab8527-cadd-49c0-bd0d-27ab6097866e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3a4125-ff4f-4006-8b98-d7d0fd292f0c", "sighting_of_ref": "indicator--38ab8527-cadd-49c0-bd0d-27ab6097866e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63857bee-09fc-450f-8029-ee2a16044e16", "sighting_of_ref": "indicator--ecaaeb9d-7635-49cd-926c-df72d2a1c9a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b57a58-419d-4638-9d69-a9deb5083793", "sighting_of_ref": "indicator--ecaaeb9d-7635-49cd-926c-df72d2a1c9a7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ecb242-aedd-4c4c-90a9-a38c970b0343", "sighting_of_ref": "indicator--67378a45-ce4d-4f8f-8780-de7e3e88a8ad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610c6ffb-0157-46cf-9b7a-5893ec728b85", "sighting_of_ref": "indicator--67378a45-ce4d-4f8f-8780-de7e3e88a8ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2da3c1-c3c3-4d14-9fab-6fd99184e812", "sighting_of_ref": "indicator--d67a26f7-43ba-43bc-9af2-b43287c574e5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80fc85d-9778-4f18-ba47-773deaf3bdb3", "sighting_of_ref": "indicator--30605c89-b78d-413b-8123-7de0db08ba3d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cafbbfd-035e-440c-a196-4f6e5955583d", "sighting_of_ref": "indicator--0723305d-60cc-41b1-8000-a4e5dd85b520", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99077382-a6f9-42ac-9bdf-de4aaa36ddc0", "sighting_of_ref": "indicator--0636f501-6c46-4913-b914-0289f7a705c6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab28af5-2235-45f4-9d3f-692de699b65a", "sighting_of_ref": "indicator--0636f501-6c46-4913-b914-0289f7a705c6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b832edff-0faf-414f-8bbf-8f7f2e398669", "sighting_of_ref": "indicator--7c7dd0c6-22b8-4d70-aff0-acb8abd1b293", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84cd61c-1460-49d1-a340-dfaa3d81572a", "sighting_of_ref": "indicator--7c7dd0c6-22b8-4d70-aff0-acb8abd1b293", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b3e2dc-974f-4ed4-b835-53fdcf4838e8", "sighting_of_ref": "indicator--6f3642c1-634c-47fb-b1d7-d050397b62a0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7927f1-87b8-4f17-b71c-c979d7944023", "sighting_of_ref": "indicator--e2f3236a-781a-4d74-b345-46e57e82936d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b5f49b-be01-4ab8-ae2d-a750f8ca1465", "sighting_of_ref": "indicator--e2f3236a-781a-4d74-b345-46e57e82936d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa316089-291a-4f9d-9e17-a000d737ec82", "sighting_of_ref": "indicator--20187aee-9765-4218-acde-f23db31dad95", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b354f9-fd1d-4c9f-96f9-ad76b152ac48", "sighting_of_ref": "indicator--bec2c3ea-4ffd-4682-8b98-28228ec4cbd4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23826339-4de5-4bed-821b-715500f0f2e2", "sighting_of_ref": "indicator--05331cad-1b27-4922-90f5-a689c5b17614", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fc294c-6b5d-4331-99b0-3196c7090666", "sighting_of_ref": "indicator--05331cad-1b27-4922-90f5-a689c5b17614", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed7e7fd-17b0-40a2-965d-06ad7fe0e720", "sighting_of_ref": "indicator--2cbc63ca-7f6c-4e7b-970e-409e16def28f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b90158-7472-4558-ad52-9d066fd1cdee", "sighting_of_ref": "indicator--0ba68edd-5d50-451e-8ce9-fd9987b0022d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18feca6-cdd7-4858-a235-123f9863c0ae", "sighting_of_ref": "indicator--0cc0b685-b9d1-43e8-8a47-7164678af094", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94b5b11-a78d-4b57-9199-543d0b9d8b0f", "sighting_of_ref": "indicator--0cc0b685-b9d1-43e8-8a47-7164678af094", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93871559-7062-45b6-ab05-997cb4d834db", "sighting_of_ref": "indicator--0cc0b685-b9d1-43e8-8a47-7164678af094", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35d95b7-45c9-4b90-8779-dfa2d419f2a6", "sighting_of_ref": "indicator--82d4e613-4be9-4282-b4ae-0db12aa64760", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45aa142-7dee-4736-942c-e5649664e0a5", "sighting_of_ref": "indicator--82d4e613-4be9-4282-b4ae-0db12aa64760", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab68c5da-4ba2-4023-bd4d-bb81a25836dd", "sighting_of_ref": "indicator--93a5daa5-4745-447d-868e-e6d8f3378273", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f82bd9-da2c-4ec2-a9e3-fa578af4964d", "sighting_of_ref": "indicator--56f51ecc-af0c-4677-a51d-f2186308ae61", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f6aa82-f6e8-4f9e-a428-66c43e5997d2", "sighting_of_ref": "indicator--b3ebe307-70a2-4c4c-b35b-1719115b6d24", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff7b28b-f3f4-4bee-ba05-b88ce06462df", "sighting_of_ref": "indicator--c6af2a3d-047f-4542-995c-2d46fa7869e1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb30e59-9fd7-4fea-b158-d6817084790d", "sighting_of_ref": "indicator--c6af2a3d-047f-4542-995c-2d46fa7869e1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66f3eb1-cfd7-4a47-aab4-7557448827a5", "sighting_of_ref": "indicator--7b64a14a-56dd-4100-aeb1-02906c3a8b32", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4cb721-b219-44aa-ad9a-7e5a64f769a8", "sighting_of_ref": "indicator--bc2fbe8b-47da-408e-b916-9676d5b2f53f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330e101e-4ad9-4d00-bcaf-a21c5a73c0a7", "sighting_of_ref": "indicator--74439513-408a-4f04-a5ee-908e772fcce5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72bc150-0b3c-4686-8bbb-46b9b670e9fd", "sighting_of_ref": "indicator--b6533452-c67b-4edc-addd-749f50d03830", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7beb8f6-9456-4449-b02b-7d08c56fc52d", "sighting_of_ref": "indicator--b6533452-c67b-4edc-addd-749f50d03830", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663a5215-3615-45a3-ad0d-802c4f9b85e6", "sighting_of_ref": "indicator--f64bddeb-919e-422d-bc06-540ff62f289c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9729bc12-4034-4622-820c-87e65e3f5231", "sighting_of_ref": "indicator--b4baf8d3-b105-4fba-b1dd-443b3d216af4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78d7b22-32c2-4f7f-bd01-d5f21bc32127", "sighting_of_ref": "indicator--0817ea2b-1db7-4b9b-ab4d-55037cf73241", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84849b3-e0eb-44e0-a7b7-1892527b2e99", "sighting_of_ref": "indicator--b3aecc68-93ab-4cc3-9d13-a7e599b11322", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d795ee9f-4cd8-48ac-9c43-7472c07219f6", "sighting_of_ref": "indicator--2a7ca631-c297-4620-be7b-8dd53c2c6a2f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e494bd0-d60f-45bd-b111-739ea1ccc37b", "sighting_of_ref": "indicator--ff7f769c-2eb6-4d24-9081-0c30cab5d3b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5931dea2-1a6b-4d55-ba1b-3d4da924e238", "sighting_of_ref": "indicator--ff7f769c-2eb6-4d24-9081-0c30cab5d3b0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ffbeb4-0553-41be-9fe5-4b7dfe1c5c73", "sighting_of_ref": "indicator--ff7f769c-2eb6-4d24-9081-0c30cab5d3b0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e74ceea-a345-416c-bd59-4874e0659bca", "sighting_of_ref": "indicator--80d4377f-3a12-470f-bbb9-559a23937568", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff36509-0e5c-4ccf-908c-a4017629fb7f", "sighting_of_ref": "indicator--80d4377f-3a12-470f-bbb9-559a23937568", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc7cf20-8034-4d6d-ae56-b1b35314997e", "sighting_of_ref": "indicator--80d4377f-3a12-470f-bbb9-559a23937568", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e629abdf-a738-4988-91ce-7a8a3efd3f6c", "sighting_of_ref": "indicator--3fac143f-18ab-4fca-a59e-b91f6f4fea21", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0aaa597-64ee-4318-98ad-c6f64bc4492d", "sighting_of_ref": "indicator--9fbe56e9-46de-4180-b303-5db72363de94", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80a1d0f-3c88-41ca-af3b-881b19fc73c5", "sighting_of_ref": "indicator--ab188254-dc80-450b-9147-b1d8308ca874", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af0d2b4-7885-4529-a480-109aed2fb4b4", "sighting_of_ref": "indicator--3450f6f4-d85a-4c77-bcf0-4113ce46e239", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7d9558-21b9-4451-aa70-c360ca4de4b6", "sighting_of_ref": "indicator--3450f6f4-d85a-4c77-bcf0-4113ce46e239", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f55ffe2-cf2a-48bc-86b8-819f5c689522", "sighting_of_ref": "indicator--4c458bd0-4cee-4834-9bb7-3e9d95db89dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29de454a-d710-41ea-b977-7f882e8d857c", "sighting_of_ref": "indicator--06b97e43-af6b-4f0d-ab34-c1c1ef455781", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64b181e-a9f9-4517-ae59-f865c4702152", "sighting_of_ref": "indicator--06b97e43-af6b-4f0d-ab34-c1c1ef455781", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67dc1c2-051b-4aa2-9a2c-446d172a981e", "sighting_of_ref": "indicator--afdd6ab8-d480-44b5-a244-c9d9bc9934b4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1db77db-1242-4776-af20-558e6670236d", "sighting_of_ref": "indicator--afdd6ab8-d480-44b5-a244-c9d9bc9934b4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65b541d-c2c8-4da2-ad80-89a7465a7166", "sighting_of_ref": "indicator--7e3f617b-e0db-4d33-b2c8-b602ee6944b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39936d21-5927-4508-8422-59f9b67598f7", "sighting_of_ref": "indicator--7e3f617b-e0db-4d33-b2c8-b602ee6944b2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354d2e2f-1f23-4eff-acea-3b3540da3667", "sighting_of_ref": "indicator--35f4e7c5-4d1c-4369-9a39-231019b7c87f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322c3154-aa4e-4dcc-833a-3979470be351", "sighting_of_ref": "indicator--35f4e7c5-4d1c-4369-9a39-231019b7c87f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ec7311-bc81-4995-802f-513032ad7a01", "sighting_of_ref": "indicator--35f4e7c5-4d1c-4369-9a39-231019b7c87f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5607a59b-0f31-4f78-a9ed-2b4b3111deab", "sighting_of_ref": "indicator--7b4e1837-2172-49a6-ab76-0d8c1da8841b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b27b0c5-4d27-443d-ae90-7e44c087f106", "sighting_of_ref": "indicator--7b4e1837-2172-49a6-ab76-0d8c1da8841b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633e1dc7-224b-4c88-bd82-9f5fcd99951e", "sighting_of_ref": "indicator--793dd867-a2ff-4cf3-8e59-b402d7a13b88", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3d523f-3c7e-4755-ae55-52f60b42ab2d", "sighting_of_ref": "indicator--8f41098a-ed67-424e-aa12-3ce1f9aebb61", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcad847-c09a-4a55-89a2-eaf08eb737f0", "sighting_of_ref": "indicator--8d32c846-9658-44d5-861c-dd0c5d602617", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18936dd-7204-4e69-864f-58b4750c6d5a", "sighting_of_ref": "indicator--8d32c846-9658-44d5-861c-dd0c5d602617", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ef60ed-123e-40c2-95a2-63ac09c43805", "sighting_of_ref": "indicator--914b60b7-5d3b-4274-87b7-4e3dc6e98757", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b71ae3-1714-4ca8-af78-daa7c829e219", "sighting_of_ref": "indicator--2073f0a3-8792-4236-a5db-cfa0b1ab0e51", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4de080e-540a-4026-a780-175c82698d60", "sighting_of_ref": "indicator--2073f0a3-8792-4236-a5db-cfa0b1ab0e51", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56f2b91-d786-467f-997b-525e6830536e", "sighting_of_ref": "indicator--e5cd520d-9780-47df-9cf3-cf89296bb7bb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ac7cd2-1b2a-4a01-9046-7f11108af798", "sighting_of_ref": "indicator--8b2b7482-1dcf-4116-a2d8-98e3fb3e176e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58a79c7-b6a0-4cd3-9aa6-8d3b014975a5", "sighting_of_ref": "indicator--8b2b7482-1dcf-4116-a2d8-98e3fb3e176e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0240fbbc-d522-41b5-9d68-1380d9cdcfe2", "sighting_of_ref": "indicator--7874b377-c601-4118-9215-f6b76552a82f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccd91e3-cecb-4baa-92af-87045fa60a84", "sighting_of_ref": "indicator--f1806f88-4bbd-41a5-9bc6-87b0534f91ab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d528179-fdd1-47d3-96b7-5c6c419a419f", "sighting_of_ref": "indicator--f1806f88-4bbd-41a5-9bc6-87b0534f91ab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ca3222-cac0-45a7-b7fe-07537f3f6067", "sighting_of_ref": "indicator--f1806f88-4bbd-41a5-9bc6-87b0534f91ab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321271a1-14df-4189-a14e-530be3c0e28b", "sighting_of_ref": "indicator--a1dd2362-5b0d-4a34-94a3-6c300e499b53", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fddb8b6-b125-4d01-9c94-c8fb7f0a9c95", "sighting_of_ref": "indicator--b3661453-258c-4ef5-9ff7-184e2a12ffb6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f1907e-6a06-4f1c-8f63-593efb23d67f", "sighting_of_ref": "indicator--b3661453-258c-4ef5-9ff7-184e2a12ffb6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2651774f-dd14-4b44-959f-9a6a4543b435", "sighting_of_ref": "indicator--f294cb21-a0b7-4d1b-9e3a-5758c683fb38", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c14a6da-b4bd-4b2e-a069-953440297d3f", "sighting_of_ref": "indicator--42b2ced6-3a47-4ec2-b326-929a98ccafc9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2b2e20-e8c9-480e-8508-e5c22297fb5f", "sighting_of_ref": "indicator--42b2ced6-3a47-4ec2-b326-929a98ccafc9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d50282f-9e28-4a31-a8d4-a816384a0989", "sighting_of_ref": "indicator--0c6e9e79-a1c9-406d-8dcf-9a507525ecf5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef9e70f-54b8-43c3-9604-356713ebd893", "sighting_of_ref": "indicator--5ac11526-3e3c-4b9e-ac33-d1b6a245e99a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745c13ac-40cc-4494-802c-f0aec0bcded6", "sighting_of_ref": "indicator--5ac11526-3e3c-4b9e-ac33-d1b6a245e99a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e1e650-b720-4fe8-a7a9-a5c24bbab66c", "sighting_of_ref": "indicator--5ac11526-3e3c-4b9e-ac33-d1b6a245e99a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56557ab0-bb6f-4b58-b887-0df3802a9c06", "sighting_of_ref": "indicator--32855dd1-c56c-424c-9cdf-3aa3b06c7244", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88136cf-5cfd-4f31-8fc3-219f299ae6cb", "sighting_of_ref": "indicator--9a235ea1-f204-4a0a-8488-c659f8360225", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd698982-8366-4bb8-80eb-48d55cae5a9a", "sighting_of_ref": "indicator--a5d73305-60db-4d5b-94d0-1c078170df6d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafe62a5-7145-4f72-bc87-e3e81ccb4ae0", "sighting_of_ref": "indicator--a5d73305-60db-4d5b-94d0-1c078170df6d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8654570-d053-4ff3-bd56-00031d0a26d9", "sighting_of_ref": "indicator--a5d73305-60db-4d5b-94d0-1c078170df6d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90efc5ac-b466-4e4b-9089-db2886a551af", "sighting_of_ref": "indicator--be08fe5c-6994-4756-ab3d-866337031be1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227bcdde-714d-429d-a70a-20e6a04ccbc8", "sighting_of_ref": "indicator--cff977e5-32c3-4ce6-b7f3-1c275087c073", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3129ff-ca42-4069-b28a-1b5a747c6fc7", "sighting_of_ref": "indicator--2847c264-cf80-4a33-b9ce-65c24a9b3222", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5941def8-6c75-4d11-b056-b7e13897d127", "sighting_of_ref": "indicator--daed682a-04e4-4731-a8ab-efa371beb754", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0f3f90-e0d6-467c-bdf8-582c1616d015", "sighting_of_ref": "indicator--2921fede-9ca5-4f8d-8052-12126d1d8077", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52af466-d6d0-4687-bed4-dfa72c922e19", "sighting_of_ref": "indicator--2921fede-9ca5-4f8d-8052-12126d1d8077", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a650a71-bad5-4c3e-8501-acee2658c77f", "sighting_of_ref": "indicator--35e4ec73-549a-40cc-887e-0ef99b792626", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d3d401-1897-4d3a-ab39-e20d31a954f6", "sighting_of_ref": "indicator--5268e08f-780e-4487-ac19-04fb011daadb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581d2fb8-a29e-437e-91a9-3fa9e5098652", "sighting_of_ref": "indicator--d2ce7016-c62e-4a0d-bb1b-ad20b06636e4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea8b83f-e691-46d7-8748-3aba01f3ca23", "sighting_of_ref": "indicator--4a55c846-7206-421d-b750-630d99486b2c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddab64dc-1688-4d14-b738-3b7bd559a39c", "sighting_of_ref": "indicator--ce79d878-8177-4010-a0fd-8848468f0f3c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdea8453-ca90-4947-a063-d21b0a55f6f8", "sighting_of_ref": "indicator--421215db-075b-44d1-b7b3-efb765af9274", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6548c250-7345-4841-8550-3a92b1d15a61", "sighting_of_ref": "indicator--74c5114c-4bd7-4472-9c8a-7ecb349729c5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e021eaac-2fd8-467e-a043-a82ae53950e6", "sighting_of_ref": "indicator--86b117ec-8a34-44d4-b2f6-3dd2dfb886a8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071e7552-837d-4407-929a-a2e5adf6068f", "sighting_of_ref": "indicator--89006b5d-79de-4144-981e-43257f16a2e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca9aedd-e02a-419f-b53a-9b5a1ca4cbed", "sighting_of_ref": "indicator--bf3fdcde-2f84-4dca-8233-37f7ef747306", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6eeef3-0392-49d2-b5ff-09b122a78819", "sighting_of_ref": "indicator--ba7a518d-0845-4b45-bda3-1dff29d5e8ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a974c56f-3709-4b62-a0b3-267919bfc62e", "sighting_of_ref": "indicator--32b28558-e2bc-4376-86c1-9e4a7ff2822b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5291e3e-7824-4b4e-b0b9-a710a565cd2e", "sighting_of_ref": "indicator--619ae033-0436-421c-b1dd-38921b40cbb5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a548698b-7415-4afb-92ad-c57fd9f738a5", "sighting_of_ref": "indicator--2da29976-eacc-4153-b913-4f180cf2e6e1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af19cab9-2798-43bc-bb1a-43886f667170", "sighting_of_ref": "indicator--60fd0d42-ed80-4a0c-9719-642fbbddbe02", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069333d6-a064-41c7-b585-ff4978568dec", "sighting_of_ref": "indicator--f8de6f4a-6de2-42ad-9384-1927b8fe88c8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c2939b-c19d-475c-b9a9-4e0a7cd6df58", "sighting_of_ref": "indicator--b32f5f0a-0649-4b41-b75f-57c4a87ef206", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135c22fd-2bea-400c-89f9-11dbe52206bf", "sighting_of_ref": "indicator--581880ea-6707-4169-8b8b-3e9a3d74c75a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c352057-7a6e-4953-90a9-5ed69b94baf1", "sighting_of_ref": "indicator--b7a381d0-b86b-436e-93f7-bdcea37485dc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a066523-ff67-4530-8934-34e95ade7578", "sighting_of_ref": "indicator--e0b82003-76de-4dce-9f23-d08f1f6d8c87", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbc42bf-90ea-4770-ae1b-43f0acf857d8", "sighting_of_ref": "indicator--25d6e1d3-f9c6-4c7e-a0b9-077593d14d80", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c19b17-aec0-47fc-95a7-27ed0d8f0574", "sighting_of_ref": "indicator--0c10dc49-ab55-4f97-bb24-037ee717e64d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15338feb-cbea-4bf6-9c54-a2c6d272914a", "sighting_of_ref": "indicator--f4e0bdae-a45f-47ab-b8a1-3bfbd51d5ce8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becb3516-3f62-464a-a874-db93f870ddc6", "sighting_of_ref": "indicator--22a01848-ffda-4e30-b7e1-2b5da7d785bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6baedb9e-1b69-480c-995f-b39fda4707dd", "sighting_of_ref": "indicator--62d8875a-99d4-47b7-af2f-f1ba133ccdd0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c154bd-d39b-48d4-b6f3-69df9283ddf0", "sighting_of_ref": "indicator--00a22890-5dd9-48a6-947b-6d76a096a8f3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14f417c-0cdf-426f-bda8-91da15956e95", "sighting_of_ref": "indicator--f1c10c83-134e-48cf-94d9-46da55313c00", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be807744-d8b1-4bbf-93e0-ea10f967e18c", "sighting_of_ref": "indicator--50e5ec19-80a6-483e-8a21-1cfbb63f7c83", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4541e8ab-1d67-49b8-8301-25b53ee1f61f", "sighting_of_ref": "indicator--e6d0b015-6d8d-4407-9151-b72301ada982", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e64d628-30c6-4482-96e2-1da2e30f3dd6", "sighting_of_ref": "indicator--4f3c425c-9070-4aea-96a9-7055cf634ec0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986cc96a-07fa-4692-a80f-a7df46dd1340", "sighting_of_ref": "indicator--55feeb29-9aae-4c45-be96-74a206e59f48", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b1cf26-44cf-41f7-b6c1-c3521d1230f9", "sighting_of_ref": "indicator--694513ba-8505-4f9c-a40c-41b41b11bcdf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b90dedb-a75d-402e-a403-43b81111a8dd", "sighting_of_ref": "indicator--4aae4dbe-8f62-4f5e-9826-79bb44503ab1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5e47d4-ea2e-4eca-8e82-171c20a94a93", "sighting_of_ref": "indicator--ac27b892-4101-47f0-96f5-f139a2d1785b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee345f7-06a1-4898-9096-7306fc1edb5e", "sighting_of_ref": "indicator--2047fe2a-7cdd-4469-b88a-daa11af002cf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b81cf41-1fd2-450a-956b-88ba3009579f", "sighting_of_ref": "indicator--662f3398-7f8f-49f9-a850-559eec341e1a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5c2083-0f3f-48cd-9f6b-3573ed53d329", "sighting_of_ref": "indicator--662f3398-7f8f-49f9-a850-559eec341e1a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4b9e7f-0603-44c9-96e2-d3a4541f48a8", "sighting_of_ref": "indicator--a3563dbc-3eb5-4669-a353-83d311dce208", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b755dc-93f5-4145-81f5-fcec0b4f1e76", "sighting_of_ref": "indicator--a3563dbc-3eb5-4669-a353-83d311dce208", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee904fd1-2a21-431f-a56a-0da9315034af", "sighting_of_ref": "indicator--a3563dbc-3eb5-4669-a353-83d311dce208", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b23857-f91d-40f6-903c-7f4b7145bbcf", "sighting_of_ref": "indicator--39d43d74-3e23-45d5-9347-615a7ae69f0e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1916a17-d366-4812-9863-990ca61e9450", "sighting_of_ref": "indicator--39d43d74-3e23-45d5-9347-615a7ae69f0e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77469d4b-1560-4ce8-9854-95cfff825bd0", "sighting_of_ref": "indicator--39d43d74-3e23-45d5-9347-615a7ae69f0e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1090b7e9-98cd-4009-b001-c2d5f854c2d8", "sighting_of_ref": "indicator--660b27ee-748e-48c6-a96c-a2599590d7d9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be229ed9-2ba9-46ab-9197-91102e307864", "sighting_of_ref": "indicator--fd81e989-eac5-455f-96ce-f2d5f4f7b29f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9b8eaf-2cde-41db-91af-22bbcd71c3e8", "sighting_of_ref": "indicator--fd81e989-eac5-455f-96ce-f2d5f4f7b29f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5b21c6-3e94-4fe4-b543-9ac8ded28826", "sighting_of_ref": "indicator--47970b3e-5863-42f8-a42f-d7e9a2b89c2b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176f0088-2050-414d-8b31-58a6d8dca641", "sighting_of_ref": "indicator--f918df11-9a3d-4ec9-8456-339814e8cde1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f02c6d-893c-4628-a89d-dbd5515ca420", "sighting_of_ref": "indicator--b9dd7dc2-0cf5-4b5c-bd1e-550b561ad9e1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd99d119-da1d-4881-bd04-867724068d89", "sighting_of_ref": "indicator--5eff680c-1460-49ab-91f4-2eb6fe865bd8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a26cf8b-ced6-44e9-a5f0-f1df54200af3", "sighting_of_ref": "indicator--33e56f3a-9924-41d2-aa54-cf0e23f86362", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a683fc-77f2-4e0e-8bd3-8a716b549444", "sighting_of_ref": "indicator--33e56f3a-9924-41d2-aa54-cf0e23f86362", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100f78a7-9f25-406f-93c8-763589307e8e", "sighting_of_ref": "indicator--b3230241-8bc2-4a80-8a38-3db0c77e6198", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09862503-22f8-42b2-8175-ab5b57933351", "sighting_of_ref": "indicator--b3230241-8bc2-4a80-8a38-3db0c77e6198", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f777c2c6-82fa-45c7-8a95-c01de93918c3", "sighting_of_ref": "indicator--92627e57-8bc0-4275-bf7a-9258766a2392", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4b48ec-b6ae-47b0-ab0d-7801c46f3a9d", "sighting_of_ref": "indicator--92627e57-8bc0-4275-bf7a-9258766a2392", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5115ce76-eb9c-4f08-b405-fb9815eefe3f", "sighting_of_ref": "indicator--0201681b-da80-47b6-aaa6-2901c1fc6cfa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc088327-1efc-4883-9970-c1063e706b8a", "sighting_of_ref": "indicator--92d7b58a-6e04-4992-8eea-05afc7f8ee88", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62122dac-28e3-419b-b028-fc069dfc64c0", "sighting_of_ref": "indicator--bb0d604f-59d0-4fdf-a834-7f4e7dcdb4fe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b77f2f3-a993-42ab-8983-fdf4aabd8944", "sighting_of_ref": "indicator--bb0d604f-59d0-4fdf-a834-7f4e7dcdb4fe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b53dd10-79f3-4fb2-b493-17e36c3ef183", "sighting_of_ref": "indicator--bb0d604f-59d0-4fdf-a834-7f4e7dcdb4fe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b8208d-0160-4fd2-b7ee-63b30405448a", "sighting_of_ref": "indicator--3f6aff2a-0ed9-4716-9a07-deb9664245d8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babe4f78-6059-4119-8ab7-84b79b7a952b", "sighting_of_ref": "indicator--98004933-de65-4529-b9c9-64e300e5ec11", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ea77e4-f54d-481d-97ec-27717a0a8215", "sighting_of_ref": "indicator--91592bc2-2e76-413b-a4ca-3b58463ee5f5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2c9970-2ad5-481f-b7ab-b3d4f036e96d", "sighting_of_ref": "indicator--0f601661-32bc-416a-bd62-4a5b0558153e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6deef5-1dfe-41ca-94d7-94df084ede31", "sighting_of_ref": "indicator--932096f4-e825-4525-82a5-156cfa0c76df", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f799252a-0bb0-4bf8-9664-6eae33ef3232", "sighting_of_ref": "indicator--932096f4-e825-4525-82a5-156cfa0c76df", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c036897-5cbb-4bef-bc2e-540fc5e68228", "sighting_of_ref": "indicator--8c516c44-b96c-49a6-aa69-e2ebc6d705d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b4805d-834d-437c-81d2-a2d77021f2f0", "sighting_of_ref": "indicator--00c3d16b-9ccf-44b0-a5d7-aa63562c4a85", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edb281d-b18e-48c4-a141-970786e479b2", "sighting_of_ref": "indicator--30f687c9-b25a-41a4-ac52-e1632b439e66", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19af93b-b8b9-43cf-8bb8-672f620f2367", "sighting_of_ref": "indicator--cef0d961-5ed5-44fb-af2e-593b5b8f5ad4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcb85f6-171c-4804-abfe-a1c6805852e0", "sighting_of_ref": "indicator--cef0d961-5ed5-44fb-af2e-593b5b8f5ad4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3eaa13-cc9f-4784-9aab-9656d81017b0", "sighting_of_ref": "indicator--cef0d961-5ed5-44fb-af2e-593b5b8f5ad4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c675aac1-9deb-4bf3-ad78-738e98cc3d5d", "sighting_of_ref": "indicator--988a00c7-8278-4f69-847e-f9fd4c4eb4c3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32dfc7a-544a-45a7-aac6-90f2364a8e38", "sighting_of_ref": "indicator--67873d7f-0c80-4788-ae6a-946d9ffec6a9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321330e3-84b6-45b8-96a5-ce6f41f07340", "sighting_of_ref": "indicator--ed551679-b355-4c53-b036-7ead01a336e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ad6eca-b63c-43cb-b127-6121ff1fd5ae", "sighting_of_ref": "indicator--0d722f10-1ed2-4567-975a-b04f47b0bc3c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fd3163-878f-4501-a11c-d5292157d6bb", "sighting_of_ref": "indicator--b4045930-2dff-41b9-bb49-6fa44bd39956", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b21ff4-8dc5-4b5c-a067-80d1035de634", "sighting_of_ref": "indicator--bd837846-f62c-48eb-a667-b9e94730159e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eca64e7-9054-4ff2-aefe-907fea658e15", "sighting_of_ref": "indicator--a9629faa-59e5-4788-9169-06e1b9be3664", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2c6009-2a5e-4b1e-b95e-5a2ecb7f7ff3", "sighting_of_ref": "indicator--a9629faa-59e5-4788-9169-06e1b9be3664", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e368d368-9bd6-487a-9001-cab2ab057bc8", "sighting_of_ref": "indicator--a9629faa-59e5-4788-9169-06e1b9be3664", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882bba14-9616-4feb-8875-3ae30432bd0e", "sighting_of_ref": "indicator--c741086c-aeb0-423a-9d5e-0b17e26edeaa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d1b920-862d-44ea-9d15-cfa1d44c9735", "sighting_of_ref": "indicator--1affaa77-81ac-45a4-aeee-90477e0099a6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ae5dc3-0823-47bd-9276-ce1899ab987a", "sighting_of_ref": "indicator--e809e2ab-b87f-46b3-8866-588234ef442e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10fc876b-1967-443e-aa37-7110856b0d09", "sighting_of_ref": "indicator--e809e2ab-b87f-46b3-8866-588234ef442e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fca07d3-3a34-4a08-9803-28500bce041c", "sighting_of_ref": "indicator--e809e2ab-b87f-46b3-8866-588234ef442e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea15c8a-1943-4e68-a310-b8d12175b378", "sighting_of_ref": "indicator--d1a9b480-6ab8-4f57-826e-bbf3149d0ebb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05aed7d-d663-457a-aaee-271bc0791f96", "sighting_of_ref": "indicator--d1a9b480-6ab8-4f57-826e-bbf3149d0ebb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fedc3d0-760f-4ffa-b0b4-eab2856d1bf1", "sighting_of_ref": "indicator--a2b6120f-1e19-4a0e-99e7-a1cc2c04e06a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ba4272-de69-4fdd-9f1f-55e713e0d775", "sighting_of_ref": "indicator--b7a3faf1-57e2-4407-a16c-17c273835662", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ca8770-4416-4d0d-9ce9-b25c4c572b07", "sighting_of_ref": "indicator--b7a3faf1-57e2-4407-a16c-17c273835662", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c236eae-9806-472d-8867-6f399988e9c0", "sighting_of_ref": "indicator--1dbcc52a-6065-47cb-b3c4-fbc545515cf5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee13b5f-1823-4c76-8051-ecfbbaf693da", "sighting_of_ref": "indicator--1dbcc52a-6065-47cb-b3c4-fbc545515cf5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd566805-cbb7-4ecf-a948-051e16cfbc39", "sighting_of_ref": "indicator--f8ecff90-76e8-478f-ad8a-8fd98e3124bb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2da5d51-14aa-4e67-90b7-0cee97f8f0c2", "sighting_of_ref": "indicator--8bc91264-cadd-4691-9388-720d6497dfc4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd1ff82-b288-4953-b25d-59d6570c68db", "sighting_of_ref": "indicator--c3538879-a482-4c4e-9558-ae4a792ba519", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095be0de-1fee-418c-911c-79a925df3e4d", "sighting_of_ref": "indicator--ef22a6ad-ba6e-4aa2-bc92-b8bdbf8a486a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9882aa-c500-49d6-8227-d85e055e5af7", "sighting_of_ref": "indicator--c88c0c76-50b1-4e39-b8b1-e5d090ba8b02", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c83566-4a8a-456b-81f6-0a544bda398e", "sighting_of_ref": "indicator--498541f4-8378-497c-abf5-d984a3700b43", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ee1c51-aba9-4b13-a6b5-297238f297b6", "sighting_of_ref": "indicator--498541f4-8378-497c-abf5-d984a3700b43", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c625f7b3-50b9-471d-8054-fa2bb6d3be1f", "sighting_of_ref": "indicator--376408cd-194a-450a-b2ac-2346c3fd2c8f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40b73be-53af-406f-b2ab-8d76666a4911", "sighting_of_ref": "indicator--4dee34d2-bf11-4f5d-9ef4-896332c464ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f812833-95e0-4d84-b3a2-de381d3f17a9", "sighting_of_ref": "indicator--4dee34d2-bf11-4f5d-9ef4-896332c464ce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956e395b-7816-4bdb-b84f-321be1c323bb", "sighting_of_ref": "indicator--4dee34d2-bf11-4f5d-9ef4-896332c464ce", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4324e0a8-9fd5-4aed-acc6-66d06a099437", "sighting_of_ref": "indicator--2dd0c7b7-30e7-44c2-b9b3-82b5c6e96908", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d0f5d1-4ac3-44fa-a2d1-31292982b57d", "sighting_of_ref": "indicator--2dd0c7b7-30e7-44c2-b9b3-82b5c6e96908", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916d31e0-c36c-4dc6-a23d-a77cee743126", "sighting_of_ref": "indicator--b3e8ce1d-c259-413c-b3d3-61b8fa00b0cf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cb5e82-3cc5-4df1-a919-ca219614421e", "sighting_of_ref": "indicator--8edf2aa4-0a26-407a-89b1-fdcd8db3f3a9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657ab2ba-7d2b-4f28-b56d-8742be48877e", "sighting_of_ref": "indicator--c8884443-1045-43f1-8838-2a3623ac86eb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846acc71-1076-4825-991b-0f340109555a", "sighting_of_ref": "indicator--71444b57-7c47-4a1f-8389-39f21934bc72", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d44ce8-ec73-4d3f-8097-7899bdea380b", "sighting_of_ref": "indicator--81ecc28d-3993-4f21-8cf3-b1c737fd39ea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97631f3f-c8f3-4b4f-a6dc-dfa4fdd47108", "sighting_of_ref": "indicator--62fb8abd-438f-42bd-9d1a-e8771d9aa89d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4baab91-c77b-48bf-b18c-6c53cd8fceff", "sighting_of_ref": "indicator--62fb8abd-438f-42bd-9d1a-e8771d9aa89d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5da1160-752e-4add-83ad-de86ada30bd1", "sighting_of_ref": "indicator--7daf59d5-910b-471a-99c4-1b80e30b178a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef23602-e59c-41e2-b85d-b3a102144284", "sighting_of_ref": "indicator--7daf59d5-910b-471a-99c4-1b80e30b178a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f25c90-91d6-4d25-aa57-4ee112cb7369", "sighting_of_ref": "indicator--0719fd16-3fb9-4a07-9dcb-7823255e8039", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662b14a4-956c-48b2-b7cd-13dc0393c6ef", "sighting_of_ref": "indicator--cbcc798b-e18b-4d08-aed6-579987208079", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a644a00d-b760-4217-9d23-84c47ebc1d9a", "sighting_of_ref": "indicator--cbcc798b-e18b-4d08-aed6-579987208079", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c616b22-3bb0-4b91-8394-5b7cd5966413", "sighting_of_ref": "indicator--1cecc42c-7787-4578-9655-f576b07ef929", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a85241b-380c-4218-af82-53c4ac0ae232", "sighting_of_ref": "indicator--4546f2ef-1805-4449-b003-e2cadadab39a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80082df2-0176-44bd-b541-73d01b1616b8", "sighting_of_ref": "indicator--7c83a069-6de0-4e17-9e64-cf37db7022d4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6919abe9-669e-4fc8-8c4f-27000d598bb7", "sighting_of_ref": "indicator--7c83a069-6de0-4e17-9e64-cf37db7022d4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074814aa-3c78-496a-bafa-0aa6cd2cf110", "sighting_of_ref": "indicator--7bff5fb9-8dd6-4e03-bd88-ff88e866e9d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48616049-b08b-4e80-83d0-ffbfeba87169", "sighting_of_ref": "indicator--7bff5fb9-8dd6-4e03-bd88-ff88e866e9d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d293fe9b-98d1-4d43-b42b-682205b50f01", "sighting_of_ref": "indicator--7bff5fb9-8dd6-4e03-bd88-ff88e866e9d6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed38db25-317d-4f22-8cd2-a176f0826f04", "sighting_of_ref": "indicator--13373555-33a2-4c6e-be3f-8e2b526f0c62", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a2e29b-262f-4953-a29f-6de4a93cfd5b", "sighting_of_ref": "indicator--13373555-33a2-4c6e-be3f-8e2b526f0c62", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d2a8bf-6561-4b33-82b7-e93fe6df9617", "sighting_of_ref": "indicator--4d81abef-756d-488a-adf7-f561c5d6c777", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480da4e6-ed25-484f-8703-54fb834cbc20", "sighting_of_ref": "indicator--4d81abef-756d-488a-adf7-f561c5d6c777", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e0a89d-22df-4408-acba-d3535d37fcd7", "sighting_of_ref": "indicator--a96b384f-fdda-458a-8b96-8520a699b0fd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecc87d5-f4d2-41a6-b1b4-4a8801d2cf96", "sighting_of_ref": "indicator--a96b384f-fdda-458a-8b96-8520a699b0fd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cfe476a-6f15-48ae-af18-f8b1aee37227", "sighting_of_ref": "indicator--a96b384f-fdda-458a-8b96-8520a699b0fd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a08ac2-7c5b-412f-abfa-c94986e39ffd", "sighting_of_ref": "indicator--d717809d-17c1-4708-aedf-853dd7b17c23", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2941cd81-febf-406d-8185-aec4701d75df", "sighting_of_ref": "indicator--d717809d-17c1-4708-aedf-853dd7b17c23", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8f0444-c8b4-43a4-821d-2531c04d4d78", "sighting_of_ref": "indicator--d717809d-17c1-4708-aedf-853dd7b17c23", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df254b9-e9a6-4a0e-a6b2-e86f261080f3", "sighting_of_ref": "indicator--428651e4-ca96-4b6b-bca4-c0e1d1ba1374", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad206472-b543-4389-8992-878aba1fbbed", "sighting_of_ref": "indicator--428651e4-ca96-4b6b-bca4-c0e1d1ba1374", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7751edd1-4a30-45de-9f6f-af932413dce2", "sighting_of_ref": "indicator--428651e4-ca96-4b6b-bca4-c0e1d1ba1374", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71813dd1-697e-471e-b2ac-e1926825b786", "sighting_of_ref": "indicator--692d4cb4-620b-403b-a6b2-0557fc83c47c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed12f827-4b15-45ac-9443-097a0810b656", "sighting_of_ref": "indicator--692d4cb4-620b-403b-a6b2-0557fc83c47c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93a2998-8a1d-4023-ba41-9e692b0eb6fc", "sighting_of_ref": "indicator--692d4cb4-620b-403b-a6b2-0557fc83c47c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b6e669-d07d-487b-bde5-60e80cc15eb8", "sighting_of_ref": "indicator--829103cf-b9d1-4c5b-9669-481041f16fbf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e8a43a-dfc3-419c-96dd-4b9cab1ea840", "sighting_of_ref": "indicator--829103cf-b9d1-4c5b-9669-481041f16fbf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6eb40e-af71-4c6e-8eb3-34768a4346b2", "sighting_of_ref": "indicator--829103cf-b9d1-4c5b-9669-481041f16fbf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed183b78-b952-4f48-a993-27444794bf30", "sighting_of_ref": "indicator--9c065f3f-154a-4367-8082-55d6dc65dfc8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef1c41c-be53-44bd-b6bd-dcc28d61fda4", "sighting_of_ref": "indicator--9c065f3f-154a-4367-8082-55d6dc65dfc8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013867c1-4fc7-4095-921a-8659e674e798", "sighting_of_ref": "indicator--9c065f3f-154a-4367-8082-55d6dc65dfc8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efa5746-cc35-4e1c-828d-949c0ec76df0", "sighting_of_ref": "indicator--41ed3796-89c9-4d90-8233-fc4341fee255", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41867d0-38e7-4a69-a1a3-87d8008260ff", "sighting_of_ref": "indicator--3d6167d3-eb41-4285-a715-d6ab8e7e9b98", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715fbb36-9d74-46ed-92e5-34cd30870288", "sighting_of_ref": "indicator--3d6167d3-eb41-4285-a715-d6ab8e7e9b98", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da19f775-c478-4aaa-bbc8-805723bdd500", "sighting_of_ref": "indicator--3d6167d3-eb41-4285-a715-d6ab8e7e9b98", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814ededf-afcf-47d9-acec-4fc64cc696d3", "sighting_of_ref": "indicator--3000db90-b878-4488-8d9c-84310075d80d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374fdc76-376f-4f92-9587-18057fe1bb10", "sighting_of_ref": "indicator--bfffa7cf-e320-4028-b8a6-9334ceac3b73", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fe8919-32f2-4489-af82-008df3d8a4cd", "sighting_of_ref": "indicator--b6175cac-1648-4d37-8e85-65d84ec219f9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd42ec03-dc50-4703-91f2-684336c0bd91", "sighting_of_ref": "indicator--d11bca54-7392-4222-89c4-0819fd2f288a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150f02ef-c222-46c1-88de-1e94b695f683", "sighting_of_ref": "indicator--d11bca54-7392-4222-89c4-0819fd2f288a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4808ff6-3db2-40e2-9ec5-c352c9a5e0f6", "sighting_of_ref": "indicator--3a8db3d1-3eef-4553-9636-8dfc49a40e7f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8684fc-ad0b-42c1-a448-156ba044a90d", "sighting_of_ref": "indicator--e43e5592-b8a8-49eb-bee8-c4f136ab1a4e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd349388-d981-487a-ba2d-9fecec573d5a", "sighting_of_ref": "indicator--cc93e2bb-232c-41d8-a6c5-81aeae78b4fa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72dc3ed2-0e3f-47c1-b0ab-ac7a1264589e", "sighting_of_ref": "indicator--60089624-544b-48be-8fba-d3dc79c80b7b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455cb8da-145d-4e95-9a6e-a189ae427d76", "sighting_of_ref": "indicator--60089624-544b-48be-8fba-d3dc79c80b7b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4997c3-7495-44cd-b8d8-263415a5e926", "sighting_of_ref": "indicator--60089624-544b-48be-8fba-d3dc79c80b7b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989d67e2-f6d2-4e61-a26e-d1d3eea0173d", "sighting_of_ref": "indicator--cb3f3644-d1da-49de-afee-2557f69d81d2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64132d5d-a89c-4db2-8eab-89a0a79509b7", "sighting_of_ref": "indicator--cb3f3644-d1da-49de-afee-2557f69d81d2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e7201f-db07-4a2b-b85c-ce18ae16b4d8", "sighting_of_ref": "indicator--02bb9ad8-9858-48b2-a225-26cd298df51b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97281d3e-976b-4395-8377-02dc0a164978", "sighting_of_ref": "indicator--02bb9ad8-9858-48b2-a225-26cd298df51b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5747fd23-69ae-4832-902d-b878b73649a5", "sighting_of_ref": "indicator--3d55ff0d-075f-45a4-bb0d-607cf0dc6d5f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3d1118-18c1-472f-bd15-2ba86a34b104", "sighting_of_ref": "indicator--3d55ff0d-075f-45a4-bb0d-607cf0dc6d5f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e342764-8811-413a-9e11-0c4d2a49303b", "sighting_of_ref": "indicator--3d55ff0d-075f-45a4-bb0d-607cf0dc6d5f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0951227-8038-4eec-99b0-db024b52c951", "sighting_of_ref": "indicator--da6500ff-8e58-40e4-848f-2b03077e5a5e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc050f7e-027c-4448-b8d9-77c2798c9e46", "sighting_of_ref": "indicator--25964940-945e-4d54-b094-606cde09a2e0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be02e3a-bed3-490e-95c5-6111d94a759d", "sighting_of_ref": "indicator--25964940-945e-4d54-b094-606cde09a2e0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819d372d-6195-489d-aaf6-24c7180e93ba", "sighting_of_ref": "indicator--aad6375b-7735-44ee-bfb9-8e975b588c19", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ce2f3d-23f3-4f35-ba7e-26ffb2ca78e8", "sighting_of_ref": "indicator--ec77ce77-709b-4c96-b756-83c7026d5ac0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8f7e4d-a635-43f3-bea9-f449b4f050e9", "sighting_of_ref": "indicator--7eda21f4-a11d-4259-b03a-4466d104c67a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7aad461-4415-47c8-9218-93d5d9d12325", "sighting_of_ref": "indicator--1169f8fe-fe9c-4e19-8e80-3feb9c40701d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87a7cd2-8991-44dc-8896-74df7b68dcf7", "sighting_of_ref": "indicator--96fb3ed0-e3d4-41ff-bef9-c889f1d7fc37", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4429c337-9c6c-4b4d-9a04-9a7b33147a7f", "sighting_of_ref": "indicator--515e2cd5-f77d-4c63-a20f-b1c35ec98efb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6713cf7e-b323-4531-b5fb-5ab5cf7fb996", "sighting_of_ref": "indicator--515e2cd5-f77d-4c63-a20f-b1c35ec98efb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afc334c-b894-49ab-8e37-00d5b1142ef5", "sighting_of_ref": "indicator--dee58f6d-fba9-41c2-b857-2b36e55d7065", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de1aa22-f8fc-4d2e-acfb-695487d57b41", "sighting_of_ref": "indicator--cd09f9f2-d62e-4075-84cb-9729624388a4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec563a31-d1cc-4a11-9151-5f38c8902cb2", "sighting_of_ref": "indicator--1b38a639-5b48-474d-934e-e670f2a438b5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29cea57-2645-4c43-8002-c37529b11726", "sighting_of_ref": "indicator--d509ee2c-bbdb-47a2-98a5-effc006f13f5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db5a539-0dea-42fe-8418-5db63ba0bfa1", "sighting_of_ref": "indicator--d509ee2c-bbdb-47a2-98a5-effc006f13f5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1b2429-cd39-42a5-89cf-9e2933c1f8cb", "sighting_of_ref": "indicator--d509ee2c-bbdb-47a2-98a5-effc006f13f5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263d91fb-9d85-4d5e-86fb-1086e4104ba1", "sighting_of_ref": "indicator--67794f0e-1a12-4387-9e8f-6405f512d66c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d55b75-ead3-4c8e-a1c5-1d3ece577b11", "sighting_of_ref": "indicator--67794f0e-1a12-4387-9e8f-6405f512d66c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3ca972-66bf-4361-b4bd-c6b21f8bb465", "sighting_of_ref": "indicator--9ccaaf8e-413b-46f6-90de-cedaf8c08265", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7469ac2d-22e0-4990-b7b7-b0340be4b913", "sighting_of_ref": "indicator--9ccaaf8e-413b-46f6-90de-cedaf8c08265", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531f9cc6-d560-4a71-a051-d81b94f61d51", "sighting_of_ref": "indicator--84edda3a-5e71-4174-ae27-e6625515964d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837b006d-0e2e-4d18-9104-5000e331cd13", "sighting_of_ref": "indicator--84edda3a-5e71-4174-ae27-e6625515964d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3511190-4369-4ada-81f6-45d0324b5aa6", "sighting_of_ref": "indicator--b90204c2-fb25-41ed-bcdf-e48881325af9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1f1b0b-8939-49d2-a5bb-681edbc4e754", "sighting_of_ref": "indicator--31ca1b35-c066-42dc-ac55-912570d68a01", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7786162-d475-4351-93b7-06b52b990798", "sighting_of_ref": "indicator--31ca1b35-c066-42dc-ac55-912570d68a01", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8493ecc-f2a9-42af-a39c-6692b48598d3", "sighting_of_ref": "indicator--2fdf4fbb-b3de-4721-9f63-a6ee22884d28", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d74363-376a-4b76-a35a-d698d3dcdd9e", "sighting_of_ref": "indicator--23b6414c-f52f-4bc1-96b3-db76780aa442", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7c2cda-a9c3-4c58-9b48-18312fd24304", "sighting_of_ref": "indicator--f71dc97a-7a20-454c-9969-8b065f5b0d43", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8357f1fd-98e9-48a2-988f-1d3979aeae9c", "sighting_of_ref": "indicator--aa0fb78e-f1be-47f6-ad9f-623c1672e74c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cced4493-0ccc-4a49-bf83-94becada288a", "sighting_of_ref": "indicator--cb4e7e68-393a-414a-a35c-e2bdd3eed0e0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2a7710-1b27-4141-90c1-9880e47a52da", "sighting_of_ref": "indicator--cb4e7e68-393a-414a-a35c-e2bdd3eed0e0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be80e31c-ff44-413f-a29a-9d8758eb523b", "sighting_of_ref": "indicator--7d7589f8-91ac-42e5-ba5d-ebbad487f0d7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76a9ee6-e8f5-4b80-b807-7d27c8d0579a", "sighting_of_ref": "indicator--374ac8f9-a8ee-49fb-b4f7-35778bd74728", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68efbb47-7cf2-4621-ad63-5098346f4a33", "sighting_of_ref": "indicator--1f00a5cf-378f-4f61-9174-7499dfaf503f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598a1abe-e5e7-45ef-a4da-00a69bd5f33e", "sighting_of_ref": "indicator--2b1d4867-1333-40c0-997d-95e77acfc550", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d916b0c-3416-43bf-9565-940f8c9380c8", "sighting_of_ref": "indicator--0bdc4396-a049-4a4d-936a-94f0ee32565b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66de531-0309-4736-b53f-d6e394a4c0ec", "sighting_of_ref": "indicator--f730ae7f-1f72-4626-a99b-b49fef94eecf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591748e7-3261-48ba-9f57-188c0f550be1", "sighting_of_ref": "indicator--69d77eb9-b656-4302-afe4-62ecb3f2bad6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee34e2d-36d0-45c3-9043-0748c956b46b", "sighting_of_ref": "indicator--69d77eb9-b656-4302-afe4-62ecb3f2bad6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af07eb75-9e00-4071-aa33-92f145171d56", "sighting_of_ref": "indicator--fb1d2e4a-bcd3-4f8c-972e-db785f84ea2c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037fadd1-317b-4657-baba-595fbd6a259f", "sighting_of_ref": "indicator--02da55d7-9902-447d-a689-cd434a3cafcd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec064ab5-693b-440b-92fc-df95b6ee3356", "sighting_of_ref": "indicator--02da55d7-9902-447d-a689-cd434a3cafcd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f464f2-d0ce-4867-92ed-689e4b0f48a9", "sighting_of_ref": "indicator--02da55d7-9902-447d-a689-cd434a3cafcd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a1173c-9315-45f5-8775-18a0ade85dd7", "sighting_of_ref": "indicator--7014b6d7-3dca-484b-96f2-664ecb17e740", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc7bd3f-0554-49c6-969c-ff9bf229a7b1", "sighting_of_ref": "indicator--7014b6d7-3dca-484b-96f2-664ecb17e740", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d680690-9bf3-4b88-8f51-1fc8c2535696", "sighting_of_ref": "indicator--f11210af-6cb5-4d7c-b154-62517be76a88", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60e0ada-7028-4f1a-b1c4-03c8ae003d51", "sighting_of_ref": "indicator--dc53ec85-9821-436a-959d-15023103569f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2191bee-68d1-4dee-aaf9-7c9e9b782f4c", "sighting_of_ref": "indicator--924f3370-2aa1-4a3c-b74c-1c24671e9e4f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5669d8fb-a402-4da1-b357-777013040b9a", "sighting_of_ref": "indicator--924f3370-2aa1-4a3c-b74c-1c24671e9e4f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce24ca1-279a-4ff1-aa7c-a703a2184b95", "sighting_of_ref": "indicator--3d1a302a-356f-4d56-bac6-73fca2f933e6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e43121f-e76a-435f-8eed-4d63d746ef5c", "sighting_of_ref": "indicator--11ad0870-7894-46e4-bc19-6bbcd29803bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc575211-0c54-458b-b149-539b4d670c83", "sighting_of_ref": "indicator--11ad0870-7894-46e4-bc19-6bbcd29803bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96d007d-6c99-48c7-9084-eeff2ba40567", "sighting_of_ref": "indicator--11ad0870-7894-46e4-bc19-6bbcd29803bd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034cf5ed-ee81-4b92-a21f-58582b0c4efa", "sighting_of_ref": "indicator--a65f852b-4e1a-438f-bf25-99bfd8d851c5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c9de49-17c0-4ced-98c4-97ba6670af72", "sighting_of_ref": "indicator--51bf81ff-42e3-4ac6-9cf8-36a4e24e7a9f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e2f313-b798-46be-90aa-f7d4f9d39a77", "sighting_of_ref": "indicator--27c1fe2d-2184-4e66-bda8-fd57db347c9f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578a477f-0059-4557-a8b9-7a8dfaae85f4", "sighting_of_ref": "indicator--911c8824-de6f-4fba-8d14-ad51949d7e87", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afaf3d9-9097-4701-994c-16c55e4f2293", "sighting_of_ref": "indicator--911c8824-de6f-4fba-8d14-ad51949d7e87", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0380c5e3-8b5b-41c6-ae12-3731c7bc7f63", "sighting_of_ref": "indicator--911c8824-de6f-4fba-8d14-ad51949d7e87", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a202961a-50b0-46f3-b48e-43d77e33aaf4", "sighting_of_ref": "indicator--2789f831-b0cd-4e51-bb3c-9be05210217a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ca91ad-cb42-468a-8057-39e52f1a7cbd", "sighting_of_ref": "indicator--2ca99678-e4c1-4023-858a-b4bd4f40b259", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e86951b-389f-4582-855a-321d248dd75a", "sighting_of_ref": "indicator--8d1904d2-749f-4aeb-8fd1-e3ea5f0ed845", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d22e66-3214-4024-aaf7-9a4832abcaaa", "sighting_of_ref": "indicator--f32b6467-65df-41a7-ba50-84d2e15967a2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f41917f-1e80-47f9-9f47-498867e656f1", "sighting_of_ref": "indicator--f32b6467-65df-41a7-ba50-84d2e15967a2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24d8064-30d9-4095-92f6-9faa90c59c9c", "sighting_of_ref": "indicator--76a13f60-292f-44fd-9cc1-275b394f1ad9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bedb5225-e23e-4632-859b-aca129c8b9ff", "sighting_of_ref": "indicator--76a13f60-292f-44fd-9cc1-275b394f1ad9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c03e8b3-420b-4a64-8e4c-5dffa52ac685", "sighting_of_ref": "indicator--a9e40d4c-7e72-4584-aa4d-c730de8255b8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4cb01f-59a5-4ac3-87c7-3529465f0a9b", "sighting_of_ref": "indicator--a9e40d4c-7e72-4584-aa4d-c730de8255b8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d1d051-7def-4b9a-8e80-aef4a59e55fe", "sighting_of_ref": "indicator--1820c454-b6c6-41da-9ef2-ba747cd0a177", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb83c633-9618-4759-9b44-d3d38ba46452", "sighting_of_ref": "indicator--df4dba1c-9c0a-4522-a1c2-cd8f37fd0a4f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc571dc1-4931-4e06-8db0-abcaaf34945f", "sighting_of_ref": "indicator--f4826d11-ec78-4d66-9772-74ab37cd7e20", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b8e178-8d9f-4db4-82e8-d045238b7323", "sighting_of_ref": "indicator--45acb781-f4ad-48b8-9f4e-e5671792c554", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26081da-a42d-4b9c-88a4-b41fa5b9ae9f", "sighting_of_ref": "indicator--45acb781-f4ad-48b8-9f4e-e5671792c554", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebe63c3-d819-4d8d-b462-c35d1931a36f", "sighting_of_ref": "indicator--c3bbd361-d769-4e39-ba47-780aef4191bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db58a113-d756-47ce-a468-69ea925690c0", "sighting_of_ref": "indicator--c3bbd361-d769-4e39-ba47-780aef4191bb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02383f44-b76b-457c-8f2d-cdaac03f085f", "sighting_of_ref": "indicator--b7c844f6-5874-4daa-8a10-bf2988e857b8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9fe83a-d08f-499a-b5ca-8442b81afafd", "sighting_of_ref": "indicator--b7c844f6-5874-4daa-8a10-bf2988e857b8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeafb84c-81b6-4d8e-8258-439267d85d2c", "sighting_of_ref": "indicator--b7c844f6-5874-4daa-8a10-bf2988e857b8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d6e06a-ca1b-420d-bcff-4841339279ef", "sighting_of_ref": "indicator--f6dfeb77-6415-480f-ac08-c349e73af173", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89003f39-6eed-47f5-a25c-69f974c03c64", "sighting_of_ref": "indicator--424fc716-4b43-4d50-90eb-a5e1b27f316b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a95b2c8-f9ee-46f9-b469-f04207a328f0", "sighting_of_ref": "indicator--ae98264c-d9a1-4a93-abe5-d4b7371f5f68", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb3b1d1-34eb-4070-8f6f-32fc287bb7aa", "sighting_of_ref": "indicator--ed533683-f1d5-4c4b-a355-403c711e602e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f987cb15-f773-4e25-97bd-a86c823b4ba7", "sighting_of_ref": "indicator--5fa46f07-3f62-4189-be8d-4251e3e9fec9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112d6340-ef57-453f-85ee-512af79dd07f", "sighting_of_ref": "indicator--9e3a3d75-5231-4b17-8b04-a2e236983943", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5140922d-e815-43b9-8ef7-d2ba657d8d96", "sighting_of_ref": "indicator--c8a0b138-6f49-4b47-806d-405a56a041a8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fae5e0-7a8f-49a4-a55e-85bbd8cbee88", "sighting_of_ref": "indicator--c8a0b138-6f49-4b47-806d-405a56a041a8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c278853-2272-4205-947c-3101cc7c0e05", "sighting_of_ref": "indicator--0d295756-f129-494e-9d51-f44885e8c842", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448b7af0-46eb-4800-863d-954414d55e77", "sighting_of_ref": "indicator--01c00e1e-f629-48ec-ad4b-7738393f20a8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8351d044-3c41-4a0e-a912-73bc35458b04", "sighting_of_ref": "indicator--01c00e1e-f629-48ec-ad4b-7738393f20a8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a29715-2dc7-4081-bfef-bb845ad3beea", "sighting_of_ref": "indicator--bceb9bdd-0106-44dd-ac98-4ee872ff573f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d9826a-2ec8-4ac5-850b-ca512f6bba41", "sighting_of_ref": "indicator--bceb9bdd-0106-44dd-ac98-4ee872ff573f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f7a8b0-3eaf-4461-9419-b50dec89e6f8", "sighting_of_ref": "indicator--d6eef098-d08d-49c0-9ecb-cdda0fa63878", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba22adfa-3b02-40da-8238-a48736d8a953", "sighting_of_ref": "indicator--4607bbf3-dc54-410d-be13-9bd852b668f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e75c4ae-7d0e-4f29-b8d5-e0a19c829ef3", "sighting_of_ref": "indicator--9fac6c04-6d4f-4799-be80-19b53590c66f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46146d2d-9af4-48aa-947d-56d53996c964", "sighting_of_ref": "indicator--9fac6c04-6d4f-4799-be80-19b53590c66f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf756eb4-6fad-4a94-9040-adf6c78d0b63", "sighting_of_ref": "indicator--ccecfdb6-0424-469d-bc26-e6a139be7943", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1aa60a7-b24a-43ac-b390-94f3d6235dea", "sighting_of_ref": "indicator--6aa68044-4d2b-440d-87b0-a91ff7e6c085", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee80c5d-eea0-47f1-a615-8bfce1766339", "sighting_of_ref": "indicator--a392cda7-051d-4848-8605-de23dd5ea806", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5704aa9-86f9-427b-8447-0c0e879b1bca", "sighting_of_ref": "indicator--a392cda7-051d-4848-8605-de23dd5ea806", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e428fd6-b664-4bc3-9e26-08196fa21a09", "sighting_of_ref": "indicator--81967e86-fdf0-44cd-a9e5-816c0b06b8a6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33cf12f6-b599-4356-bcd8-a4096f520027", "sighting_of_ref": "indicator--8b5c8b5b-e182-4157-aad5-6b09c14b0dfd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f77415-5d2d-4acf-82d2-76c6434ecd16", "sighting_of_ref": "indicator--8b5c8b5b-e182-4157-aad5-6b09c14b0dfd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ef50e7-36a6-4005-8ac1-a0416dc40601", "sighting_of_ref": "indicator--654a6609-00fa-4924-86bc-147b0e56437a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f35601-3e35-4854-9102-8bcfdcb0854d", "sighting_of_ref": "indicator--cd6563d1-a15f-474e-8b0e-42800c766bd6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea956fd-3864-4872-b700-2ad83678b7f5", "sighting_of_ref": "indicator--a3b4d377-00fe-4e0a-a77a-4fedafbcdc26", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edf8d15-115c-4d71-93ee-07282154dde0", "sighting_of_ref": "indicator--2a70fe3b-9bf2-489a-8592-b5df06efc533", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e93b3a-fc65-4e80-851a-1cf8f71dcdcd", "sighting_of_ref": "indicator--2a70fe3b-9bf2-489a-8592-b5df06efc533", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0d182c-ffce-4ea3-bca3-f1db1e1b95e8", "sighting_of_ref": "indicator--6d7894a4-56a8-4ee5-b130-3551339ada62", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d534d32a-56d4-4f7a-9f51-42834c366ebe", "sighting_of_ref": "indicator--6d7894a4-56a8-4ee5-b130-3551339ada62", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5be55f-c61b-4dca-88b2-d9c4693bc631", "sighting_of_ref": "indicator--47cafc41-e56d-4ea7-8bbe-68cff803843b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118a551f-4ddc-4671-93ff-9993e45b3ff7", "sighting_of_ref": "indicator--47cafc41-e56d-4ea7-8bbe-68cff803843b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6420107e-f53d-4ef6-b720-1831401fca84", "sighting_of_ref": "indicator--e1dfa85d-000f-484f-9b6f-40e94cc8ab20", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca186605-ca49-419f-aaa7-440387fedd02", "sighting_of_ref": "indicator--8b295cc0-1ebd-4913-a1aa-b591a002f54e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8683f56f-5630-4569-8dbb-ba793eaba2fb", "sighting_of_ref": "indicator--7cacded1-3637-45d9-86fa-32a8ab03af2a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc973940-104b-4a6c-afc8-ba56ed4c2995", "sighting_of_ref": "indicator--7cacded1-3637-45d9-86fa-32a8ab03af2a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13252ab0-5bef-4eb6-956e-4d0f98398b27", "sighting_of_ref": "indicator--b784b1e1-0c1d-4f93-a50d-e0259c6dfbac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7efa35-7040-43d3-93b5-15495c4a88fd", "sighting_of_ref": "indicator--6ca8e3f3-9c1a-4245-a355-cb54e90802ed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fddb5f8-0d4d-4df7-b870-029ee024d60a", "sighting_of_ref": "indicator--6ca8e3f3-9c1a-4245-a355-cb54e90802ed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd5148d-0721-4689-8e31-d180cf4f9b72", "sighting_of_ref": "indicator--c1f21d7a-ebc9-464c-9556-35569afac929", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6069b26d-a80d-49f0-a27a-329f66ad1f52", "sighting_of_ref": "indicator--c1f21d7a-ebc9-464c-9556-35569afac929", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d47800-cff1-4e50-b54e-729374f475cd", "sighting_of_ref": "indicator--924f39e7-3681-46a5-b3ba-dceca713e0e3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef94961d-2a4d-4029-84bc-60ebd3ba9479", "sighting_of_ref": "indicator--924f39e7-3681-46a5-b3ba-dceca713e0e3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f8f2c0-175c-4440-be9b-71163525ba64", "sighting_of_ref": "indicator--ce414d90-806a-44e9-973b-49851730640f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c992788e-9654-4ca1-9f0e-2ae449c1a64a", "sighting_of_ref": "indicator--49e08085-1684-49f7-b7ad-57d9b5ebbc95", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21f8509-6fb0-4813-8845-fe6f0940d8c6", "sighting_of_ref": "indicator--8b88d785-3b96-48e8-90b4-a3d20535e068", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3246b2dc-4b0f-42dc-a5d1-be26a3268e5e", "sighting_of_ref": "indicator--8b88d785-3b96-48e8-90b4-a3d20535e068", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd3c21f-9eb8-4633-abd7-f4f64989305a", "sighting_of_ref": "indicator--2b049d62-45e9-40ed-8860-7510cc3b023f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e24af6-a880-4ded-9c7d-84d68aed9117", "sighting_of_ref": "indicator--2b049d62-45e9-40ed-8860-7510cc3b023f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfee1f54-7109-4315-9d7c-999d6f96e6b6", "sighting_of_ref": "indicator--c68cc05f-fc75-4583-89f6-883f67711dd5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9faf17c-7cc8-4949-b680-5a5834d23c22", "sighting_of_ref": "indicator--3fdb91d3-fb7d-4b6f-a3cb-c359ce258925", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d1e67c-ba2b-485e-ab5d-a891378b39fa", "sighting_of_ref": "indicator--3fdb91d3-fb7d-4b6f-a3cb-c359ce258925", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62472b06-2a88-4f82-93e2-15a44b3fbb41", "sighting_of_ref": "indicator--fc79d28a-af7c-4162-b32d-82f7ac00e1d7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31f9cc9-90ff-4341-85db-9ac1e62b6d94", "sighting_of_ref": "indicator--fc79d28a-af7c-4162-b32d-82f7ac00e1d7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795851df-6202-4ad4-9c38-c3f1aa7ae268", "sighting_of_ref": "indicator--21423e11-3560-4f24-8999-49f3be89ecf8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45331126-a792-42d4-b90a-ee6a6d4fe448", "sighting_of_ref": "indicator--3108fb05-7a3f-45a9-9b2c-a377d5be369d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6598ebe2-400a-47df-b004-78ab17ff0d79", "sighting_of_ref": "indicator--d145ee38-9995-4af6-8a54-d3b58120f282", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c8e57a-9cbd-42d0-9765-2c7c87e00c34", "sighting_of_ref": "indicator--60bfc391-7f1f-4d62-9d1f-36ff87f45b9e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85868fb-18ff-4093-8b53-a2943734142a", "sighting_of_ref": "indicator--3a5bd743-be2d-4f48-97ce-8ecd52f2e051", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ec9849-6236-4206-8690-57b4c8efb331", "sighting_of_ref": "indicator--3a5bd743-be2d-4f48-97ce-8ecd52f2e051", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5677c4-a871-4805-a70d-7025c097df53", "sighting_of_ref": "indicator--3a5bd743-be2d-4f48-97ce-8ecd52f2e051", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f955508-7149-41df-ad60-0d426d3d4b67", "sighting_of_ref": "indicator--cd1a8f9e-42bf-43cc-8c75-e745d15ad08b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39999f25-dd02-4af2-9741-8d9df2f91883", "sighting_of_ref": "indicator--b0865223-a132-43ee-a9d1-6bcae95e6627", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9796190b-c7a0-46cf-abda-122b27037249", "sighting_of_ref": "indicator--b0865223-a132-43ee-a9d1-6bcae95e6627", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8a4366-9326-4ad8-a8e8-a50340a16a1c", "sighting_of_ref": "indicator--0db8ad9a-251c-4938-9e42-ab6d4422f2d2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b89848-f418-4908-9fd7-aff187938532", "sighting_of_ref": "indicator--0db8ad9a-251c-4938-9e42-ab6d4422f2d2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1cb331-b948-48a9-a553-7b055423ceb4", "sighting_of_ref": "indicator--164e3aa5-ad98-4891-ad96-6ff5805d87d7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddd7810-fa66-4166-8edf-d93c78773d3e", "sighting_of_ref": "indicator--4ef224fb-3110-4f10-87f0-ce974d023ad3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d382d8b-f19a-49e6-92b1-e45912d80e71", "sighting_of_ref": "indicator--4ef224fb-3110-4f10-87f0-ce974d023ad3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa44b8b0-6cd8-4f9e-9cdd-ff3ea1493936", "sighting_of_ref": "indicator--4ef224fb-3110-4f10-87f0-ce974d023ad3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2415bb1f-96d4-4691-a013-ef403211286f", "sighting_of_ref": "indicator--9fac3dd4-a93d-4978-abf7-dc815c48a774", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca5a7cf-584a-4eaa-8d3d-11fb4313d296", "sighting_of_ref": "indicator--40ccaf15-d7e6-4635-95e0-808b9b45fa36", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f25a20a-f276-4cd3-b7b7-d0b63c9bda72", "sighting_of_ref": "indicator--e52d141e-d019-42da-a353-ca53f553fc42", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2e2bfc-48d9-4d3e-9be7-77677f75bac1", "sighting_of_ref": "indicator--1a9a9375-ecb2-45cb-8104-cbaad941d835", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0d835b-25fe-400a-8b7d-694bdb3275f7", "sighting_of_ref": "indicator--76427f82-b7ea-41a2-8a2e-1f7ac80e7945", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e2c938-7991-44d3-b79c-8eea26314b4b", "sighting_of_ref": "indicator--bf68aaa0-9248-45f4-91ec-2f541df26668", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa5ce3b-f9e9-4c32-bfc1-b6990dcf5041", "sighting_of_ref": "indicator--bbca3787-ee1b-41da-997c-f0cc5c495285", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d8e6e6-71ea-49a1-8ad6-6c83d331a50b", "sighting_of_ref": "indicator--bbca3787-ee1b-41da-997c-f0cc5c495285", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e976c66-1c8c-4cd6-861f-e4a9418e86b8", "sighting_of_ref": "indicator--bbca3787-ee1b-41da-997c-f0cc5c495285", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cb8a4e-3dea-41fc-978b-b2594af05117", "sighting_of_ref": "indicator--1b5ccde7-dd8c-4675-bdf7-76404f0e5189", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3294478-88a1-40d5-ad4e-b2538ac40da3", "sighting_of_ref": "indicator--927ca40d-78ca-4e03-8d2c-a5f3721bb77f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34f4fb6-bf6c-4b90-8302-f83ce407b096", "sighting_of_ref": "indicator--422c427e-4ed1-457e-aff6-11f1e2d58a84", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b69a89-a5cf-4ad2-91b9-ac61a45e791a", "sighting_of_ref": "indicator--422c427e-4ed1-457e-aff6-11f1e2d58a84", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb751d9d-b198-4391-a0bf-51535a857691", "sighting_of_ref": "indicator--07415d33-2972-419f-97de-7855a93f6ebf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e937a8-aac6-4e05-bcd3-a19318642be3", "sighting_of_ref": "indicator--07415d33-2972-419f-97de-7855a93f6ebf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8183c518-4f2c-4176-a7a8-0d5f29c6feeb", "sighting_of_ref": "indicator--314fa0d0-ac6a-446e-8bf5-ca4702b2573f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56091212-ece5-4f21-886c-e1ff614b30e7", "sighting_of_ref": "indicator--c18a3182-cb35-42a6-ab7b-da4e1dc1532c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811bc0f4-c8ca-4762-a1f3-d132937823fa", "sighting_of_ref": "indicator--c18a3182-cb35-42a6-ab7b-da4e1dc1532c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a5a74f-fae1-4420-ad78-331fdb1c059c", "sighting_of_ref": "indicator--c18a3182-cb35-42a6-ab7b-da4e1dc1532c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28507de0-3b69-47ab-a4fd-c90357afb2d0", "sighting_of_ref": "indicator--0526d110-e2e8-4191-8912-7fe5ac9b783c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd4eebe-0efa-4e26-98a4-c1fe9fda8d4d", "sighting_of_ref": "indicator--0526d110-e2e8-4191-8912-7fe5ac9b783c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0a1432-e374-45f9-952b-a0d92d5b5616", "sighting_of_ref": "indicator--df80821d-a01d-4af7-bbe9-8a43e5afd960", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0af3b6-a1da-4b68-a716-b8f829c86b7c", "sighting_of_ref": "indicator--df80821d-a01d-4af7-bbe9-8a43e5afd960", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc62215e-77e8-4368-9425-eebcedade69a", "sighting_of_ref": "indicator--df80821d-a01d-4af7-bbe9-8a43e5afd960", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a0e0fa-10f1-4d0e-bf42-14c311e7c6c2", "sighting_of_ref": "indicator--512983e3-5343-48c6-baba-8294e7482dd9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e51a79-b9f5-475c-b17f-c1e1cb189252", "sighting_of_ref": "indicator--586b352d-0a93-48b0-9078-2cee29f5fc82", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae88e5b8-6888-4d10-b09b-7158ba488e97", "sighting_of_ref": "indicator--586b352d-0a93-48b0-9078-2cee29f5fc82", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30afbd9b-d82a-4bc4-bd35-949b0574eba5", "sighting_of_ref": "indicator--337794c2-ce93-45dd-b92f-3bb12b0248f3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe5d972-9f47-4593-9512-40a39377b102", "sighting_of_ref": "indicator--337794c2-ce93-45dd-b92f-3bb12b0248f3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2828f4c9-a66d-4c50-95c6-74bc2c8525f2", "sighting_of_ref": "indicator--ee123cf5-02b5-4979-a7cb-f97852fdfaa4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf02431-61dd-4e29-8744-1ac5ecdc4adb", "sighting_of_ref": "indicator--baf355b6-2ce8-4177-be63-a31182f4a956", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae88f000-a82d-4c03-a8c5-520f9a376dc5", "sighting_of_ref": "indicator--e95d0750-ba79-48cb-a3ef-56ab4db5dd6c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce55ce96-f6e5-4ade-9bfb-b9960b408c39", "sighting_of_ref": "indicator--ba5c227c-5104-46c3-8687-68e3e8db779f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa40a71-a616-427e-a800-39b176733643", "sighting_of_ref": "indicator--ba5c227c-5104-46c3-8687-68e3e8db779f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cd48b4-20c1-4f65-9655-bd85d0d362c9", "sighting_of_ref": "indicator--3f67548a-dc6d-4b6b-ba5e-52547ad44dde", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22839bc7-7ae5-44dd-a541-f5ee41c7836c", "sighting_of_ref": "indicator--cb2b59dc-d83e-4fa2-b94f-b30505f14081", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e66b7cd-7b41-4ef7-9c2d-c4d3e3598976", "sighting_of_ref": "indicator--3ac29a7f-ca57-44aa-a924-c2acbb2e8fa7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c594b2-d722-4101-9d10-fda5ed57c5fc", "sighting_of_ref": "indicator--f74268fd-fefd-4a13-8853-aff47ec47e1f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20978115-98cf-408f-a765-4ea896fa8c97", "sighting_of_ref": "indicator--f74268fd-fefd-4a13-8853-aff47ec47e1f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58257e9-40d3-42d8-8dcb-b20cc3f8dac0", "sighting_of_ref": "indicator--6d2a3368-75bd-409c-8f50-2d30710e3e2b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8546610-e58c-4ea3-b1d7-31349fa2290b", "sighting_of_ref": "indicator--b3e87ce0-4f21-4815-b0a9-1c06588fe536", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a79d54f-efe2-4d73-ba94-f1a760005f3d", "sighting_of_ref": "indicator--b3e87ce0-4f21-4815-b0a9-1c06588fe536", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd51d6c5-7752-4fb8-b98f-5340e25bc9c3", "sighting_of_ref": "indicator--b3e87ce0-4f21-4815-b0a9-1c06588fe536", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1cff95-6a03-42bd-834c-dc040e83822e", "sighting_of_ref": "indicator--82de6cc1-d34d-4ed3-b3e9-bde0cd4c122c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fc0d66-08cc-4f94-bef0-6776f9909c0a", "sighting_of_ref": "indicator--68f2d5a5-6632-4922-a4a3-9ee44696b80f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210ca626-286e-4e8c-95ff-49569970a793", "sighting_of_ref": "indicator--193b5be1-7da9-47d0-b280-9ada2f2c833c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c6f71e-a561-4cf1-82da-50b1183fa849", "sighting_of_ref": "indicator--193b5be1-7da9-47d0-b280-9ada2f2c833c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881e95de-bc30-4b7a-80f0-c87c5da2ef86", "sighting_of_ref": "indicator--4eaa1056-2764-4b49-aa79-f68ec0451115", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1e1dca-4d46-441d-adda-a276eeaad1f2", "sighting_of_ref": "indicator--4eaa1056-2764-4b49-aa79-f68ec0451115", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d336f7-c7e1-41cd-8289-d3b4674a45b6", "sighting_of_ref": "indicator--9ff67dec-3eb1-4056-a71b-8b5fbc14f75e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553e09b7-e74e-409c-8c3b-41848902c4d1", "sighting_of_ref": "indicator--2ffd57e4-f472-4fd8-91bf-a0452cf0b4e6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c32d49b-8d8b-4662-aeef-f4da45c9e95a", "sighting_of_ref": "indicator--57658d8d-7a24-4a79-bd10-4d940175fe4b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b089dad-8e7c-4c10-9aac-b08e35e1bc23", "sighting_of_ref": "indicator--57658d8d-7a24-4a79-bd10-4d940175fe4b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c15235-a030-48fd-aefb-bcc163e650d3", "sighting_of_ref": "indicator--59a7c094-4328-4176-a2d8-c4289e4432b1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6d246d-b2da-4fb4-b67b-a9c0ea2edaf2", "sighting_of_ref": "indicator--94d32da8-8eca-41b9-a3bb-162f1a5bc9c8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7442c6eb-80a1-4b88-b1f6-7abeb0bec446", "sighting_of_ref": "indicator--faedc300-3dc9-4678-a78f-23072706f597", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc40d1a-f32d-4ffe-8084-719d11d29bb7", "sighting_of_ref": "indicator--ee24d056-2afd-4a18-af3e-7bffca715c4b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbfd144-23da-4c5c-b4f9-b5dbd6ff68bc", "sighting_of_ref": "indicator--93b4a9c5-a131-4c46-915b-5d53a0cfe8e5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4641a8c6-b352-47a3-9a85-140cc927be43", "sighting_of_ref": "indicator--e6569c58-88a0-493d-9782-36cceb7ff9d0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd5b629-6a14-4bec-8290-95fe2c89000d", "sighting_of_ref": "indicator--e6569c58-88a0-493d-9782-36cceb7ff9d0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf6e399-4b33-49c4-8af5-82ea42583b82", "sighting_of_ref": "indicator--e6569c58-88a0-493d-9782-36cceb7ff9d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a57d41d-ef03-4121-bec3-fad446bb865b", "sighting_of_ref": "indicator--2c6d11f1-dc1a-42b9-be1e-a29f0bf7451a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067b6d76-307c-4fd1-90ce-cb9c220c6521", "sighting_of_ref": "indicator--c1a0da69-c694-43fc-8a6e-816e88578f57", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12d7aec-b4c7-4f19-9b08-114214e6664d", "sighting_of_ref": "indicator--c1a0da69-c694-43fc-8a6e-816e88578f57", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bddd83-347c-4a38-87f6-16aa2792df18", "sighting_of_ref": "indicator--c1a0da69-c694-43fc-8a6e-816e88578f57", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa1bb9e-187d-4ca6-ab89-5d7ea99ceca6", "sighting_of_ref": "indicator--678aeea6-6a26-480e-8e59-fa6c6a4dd507", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a805f08d-71c6-4698-bbc6-0a29f7de99ab", "sighting_of_ref": "indicator--678aeea6-6a26-480e-8e59-fa6c6a4dd507", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928f9cce-c9b3-421d-a3fd-72008c6151c1", "sighting_of_ref": "indicator--678aeea6-6a26-480e-8e59-fa6c6a4dd507", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10e5a06-9de1-4db8-b4f1-f1eaae78f1b4", "sighting_of_ref": "indicator--a5fbb1d8-32c8-4482-b5a2-875bf2ca5227", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6334e38d-1a1a-41da-93c7-1d0f9c02d45e", "sighting_of_ref": "indicator--a5fbb1d8-32c8-4482-b5a2-875bf2ca5227", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8e0c92-999b-4130-b0d9-77e4987f00a8", "sighting_of_ref": "indicator--2c5ba841-30fa-4e38-963a-1180281a0faa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f241fcc8-d4e6-4e94-a26e-2ffa49e189d4", "sighting_of_ref": "indicator--2c5ba841-30fa-4e38-963a-1180281a0faa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36b0f0b-6429-4176-a87c-6f5230ddc384", "sighting_of_ref": "indicator--2c5ba841-30fa-4e38-963a-1180281a0faa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c40efbd-3ad9-4d7e-8837-f58e131709e3", "sighting_of_ref": "indicator--7c388b81-64bf-4aa2-857f-4e49289b07b0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c34f99-e8f3-4c61-af6c-23df1d431f7e", "sighting_of_ref": "indicator--7c388b81-64bf-4aa2-857f-4e49289b07b0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac716ecd-71f5-4340-ba50-ba2b7f7e61cf", "sighting_of_ref": "indicator--795ac4e3-3172-4214-af5e-82b2057e2bdc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafc64be-95ce-4592-9a5a-21104409b589", "sighting_of_ref": "indicator--795ac4e3-3172-4214-af5e-82b2057e2bdc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db395f12-f657-4e16-95f8-62415610dd5f", "sighting_of_ref": "indicator--a6b7fa9b-7760-4281-b974-582bbd05f9e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3933ce67-ecbc-44d8-bad7-24d19312d1e8", "sighting_of_ref": "indicator--a6b7fa9b-7760-4281-b974-582bbd05f9e7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2611d9-d5b7-49b2-9c14-d78a5ca75c1b", "sighting_of_ref": "indicator--a6b7fa9b-7760-4281-b974-582bbd05f9e7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c7ef77-6d1c-4209-beeb-f91633f372aa", "sighting_of_ref": "indicator--23b87814-bc16-4ec4-9c9a-c3d452b363e0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e121d80-c9bc-41c9-87d4-545c7edfb93f", "sighting_of_ref": "indicator--23b87814-bc16-4ec4-9c9a-c3d452b363e0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98daeee1-ff08-4b2b-99cd-f7be503420f1", "sighting_of_ref": "indicator--23b87814-bc16-4ec4-9c9a-c3d452b363e0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12aa38d-aaa8-42db-9605-980b8a6c11e8", "sighting_of_ref": "indicator--233be00d-adda-46e3-be3f-23532a3a623e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e8b1e3-e6b2-4df0-8cc1-98df5d7b31ea", "sighting_of_ref": "indicator--233be00d-adda-46e3-be3f-23532a3a623e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6394059-6ef3-4306-b518-928fe288bca5", "sighting_of_ref": "indicator--66d51a66-9744-4e14-aa21-71202cb02053", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d8c5a3-94c2-47b5-ac22-4cd62cf6e8aa", "sighting_of_ref": "indicator--dc01e0a1-f159-4bcd-b8f3-5f976cfebc14", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ca5c1a-0203-4d66-aa1d-0aa8870c75a0", "sighting_of_ref": "indicator--dc01e0a1-f159-4bcd-b8f3-5f976cfebc14", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6893d62-4c64-49ef-84ae-84263bac2b51", "sighting_of_ref": "indicator--c14f6c55-68ec-4085-b1d8-921c11365791", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff06ac2e-fbb5-4bc2-b3f3-599b0f1d0a17", "sighting_of_ref": "indicator--c14f6c55-68ec-4085-b1d8-921c11365791", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f163ba-1b44-4a05-bddd-af682d8be8e0", "sighting_of_ref": "indicator--c14f6c55-68ec-4085-b1d8-921c11365791", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31be0e6-4622-4ae4-85e8-e59982cf90a5", "sighting_of_ref": "indicator--5580503f-987e-4475-96e7-2793ea641286", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af62a61-d1bb-4d78-97b0-83c9207ade8e", "sighting_of_ref": "indicator--5580503f-987e-4475-96e7-2793ea641286", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f55ee1b-b707-4fad-a314-f2c39424c16c", "sighting_of_ref": "indicator--55578979-2f1d-4568-a380-03703c701720", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b423d6-562b-43fa-9154-0b3ccdeea22a", "sighting_of_ref": "indicator--daef8f22-da15-4e0f-aa54-29de6b2cae2d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a173a84-ed1d-4065-a72e-2a3b79226404", "sighting_of_ref": "indicator--b02b641a-fe64-44c3-8474-48fb3948660e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d478e363-6466-4eba-bbc4-2e82f68e0080", "sighting_of_ref": "indicator--db32fbe3-ce43-4d2d-9281-2611532f7da3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62f6d6c-37f5-4da8-82b9-cc21013da534", "sighting_of_ref": "indicator--8a35e9a7-a066-41c9-9c7a-21b65181e47f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4130ee85-a499-4cf5-9fbc-886c80e6b5cc", "sighting_of_ref": "indicator--cee07cd6-aef7-4828-93c1-4811fc6fbe41", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec21703d-1b23-4811-ba97-2f4703eef59f", "sighting_of_ref": "indicator--b517e987-7d8e-4477-b532-464e1e170131", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b91529-cdb6-43c6-87ea-6a5657b7e9af", "sighting_of_ref": "indicator--91a1f647-5225-4fd3-8f17-0f518f807c05", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06862573-9bdb-4be8-a6f6-e132d3dad0c3", "sighting_of_ref": "indicator--91a1f647-5225-4fd3-8f17-0f518f807c05", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49be2b6-af76-4c5c-ae1b-c470bb1ca467", "sighting_of_ref": "indicator--1ba2f842-474a-4f7c-9018-7318461539f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6e2f13-baaf-48db-8419-0fe245daab82", "sighting_of_ref": "indicator--5d28ffbb-fab9-4f30-adfe-c7a34ad65fbf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ada4af-0577-434f-9941-49ad79d482c2", "sighting_of_ref": "indicator--5d28ffbb-fab9-4f30-adfe-c7a34ad65fbf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61991938-d8d0-41be-8878-7988cbf21692", "sighting_of_ref": "indicator--5d28ffbb-fab9-4f30-adfe-c7a34ad65fbf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc62367f-7abc-46e1-ab5e-d0daa1af82e0", "sighting_of_ref": "indicator--6401fcae-ce45-436d-8741-ce14df83195d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09492c87-d16c-4fdb-8036-26d73c67b5aa", "sighting_of_ref": "indicator--b0eeafd5-67b7-4261-8ad5-a5fb9efd916c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11af66b0-0a98-41e3-aa93-f1e58867f71f", "sighting_of_ref": "indicator--b0eeafd5-67b7-4261-8ad5-a5fb9efd916c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34171c02-9c5c-4bf9-8af2-b391f447496d", "sighting_of_ref": "indicator--ab2d1e86-59af-4c9b-8a36-65de4ecba521", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9d6fd1-7cfc-4e62-adaf-ff7906fc9099", "sighting_of_ref": "indicator--ab2d1e86-59af-4c9b-8a36-65de4ecba521", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7de22d-0fa1-44e3-b044-480ac38cb8ac", "sighting_of_ref": "indicator--dadf5195-6be8-45da-89d0-3e630f5ae501", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d747b2-a3f2-4d6c-af0d-7a44dc78fd5c", "sighting_of_ref": "indicator--b7315bc4-fbe2-46ef-9e5f-07f2cc3bb0df", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e530ce5d-9aef-45ee-bfcb-d36b9571148a", "sighting_of_ref": "indicator--b6e0293e-f7c8-47b1-b257-825b38862ad5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a288c6b5-154e-4ff8-bde4-e8f6ebc76ad8", "sighting_of_ref": "indicator--fe946049-baab-4558-bfaa-3fbc8b67742a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d8040d-4d47-4205-87ef-ba2aff271a34", "sighting_of_ref": "indicator--fe946049-baab-4558-bfaa-3fbc8b67742a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f9f6c2-4f8a-4291-8eb9-655a29fdb569", "sighting_of_ref": "indicator--fe946049-baab-4558-bfaa-3fbc8b67742a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b1f270-5bac-47de-8d63-39fbe6f62aef", "sighting_of_ref": "indicator--a390248d-b954-4120-82a9-21f9307e9c07", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bc0b49-ea47-4bdd-8151-9ea237e57864", "sighting_of_ref": "indicator--1f285d73-17a0-4d97-95ab-2be9643298d8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997106f7-a76d-47bf-b925-a28b50e26046", "sighting_of_ref": "indicator--1f285d73-17a0-4d97-95ab-2be9643298d8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be62fd6-d05a-4de3-b7fc-5769699b06e8", "sighting_of_ref": "indicator--eb6ee45c-fa5a-45bd-9c63-06580fc0966b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9e74a2-90ff-44ec-be0d-ea18fd6c7eed", "sighting_of_ref": "indicator--eb6ee45c-fa5a-45bd-9c63-06580fc0966b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db46bdca-9705-406f-b20f-e92970a3e722", "sighting_of_ref": "indicator--1608cd27-fd34-4684-93f0-189e4b6319f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e4e188-e4d0-454f-b92f-a138b26c515a", "sighting_of_ref": "indicator--1608cd27-fd34-4684-93f0-189e4b6319f4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f305574-6455-4296-89da-47593835a019", "sighting_of_ref": "indicator--1608cd27-fd34-4684-93f0-189e4b6319f4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64940a0c-4486-4e42-9421-ca0fb90f4580", "sighting_of_ref": "indicator--b766c7f8-ebf8-4539-b23b-4e45b77d1b38", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f79f8a8-99b2-489a-bfb2-6ef67d7bd110", "sighting_of_ref": "indicator--70eb5de1-e60a-47b4-9b74-cd95dce4d799", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7285ab-4054-42c5-b41d-71a89c43b20b", "sighting_of_ref": "indicator--70eb5de1-e60a-47b4-9b74-cd95dce4d799", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226b1e3e-9768-4f2c-b74b-805d38780f67", "sighting_of_ref": "indicator--70eb5de1-e60a-47b4-9b74-cd95dce4d799", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2cd212-af3f-4855-bfc2-af6e10775425", "sighting_of_ref": "indicator--db32bc52-5add-40ed-bda3-bfe63077e4a8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5651894e-fcda-4928-9852-3b7966e60516", "sighting_of_ref": "indicator--1563ae9b-048d-49dd-bd04-79cd0693982e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10e4272-c77a-4e5d-87ef-ea9ee9596b24", "sighting_of_ref": "indicator--7f883a06-ec0e-4513-bdb0-592f645f0684", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80f8b9a-3eca-498e-903f-a5930a6c964d", "sighting_of_ref": "indicator--b29295e7-c0cf-4d54-beb1-bd91f2494957", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238b7a2a-5b5a-4ea4-ba9e-95c32897e3e2", "sighting_of_ref": "indicator--1b1fa07a-274c-4b65-84db-e81dfa4dc17a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6323dbbf-1de6-411c-bc46-3d7d948621b9", "sighting_of_ref": "indicator--3bc7a445-0fd9-4a85-845d-1a630fceee28", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8261db-2ea4-46c2-b414-5c676f6445ca", "sighting_of_ref": "indicator--df15eeb8-5e2c-4ea1-a716-1d2e1b2b13a1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f0ff4f-7a6b-4d9e-a3b0-16170337d385", "sighting_of_ref": "indicator--df15eeb8-5e2c-4ea1-a716-1d2e1b2b13a1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27317d6e-6329-40c1-adbf-927d2841e662", "sighting_of_ref": "indicator--cb6dbdfd-8f9a-4ec5-93ff-3b16a0e42057", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15060b9a-18e8-4f1e-b629-5ae9902b8f0b", "sighting_of_ref": "indicator--cb6dbdfd-8f9a-4ec5-93ff-3b16a0e42057", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe36f7e2-a1a3-4f2a-89af-530297eff1ab", "sighting_of_ref": "indicator--cb6dbdfd-8f9a-4ec5-93ff-3b16a0e42057", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42be29b6-4209-4e8d-89bc-4c190afa075e", "sighting_of_ref": "indicator--3a5e6851-f8e9-475c-925b-9f05b9820e26", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16eaa91e-05e7-4942-8e94-58c5d2166423", "sighting_of_ref": "indicator--3a5e6851-f8e9-475c-925b-9f05b9820e26", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f17209-19a8-4d29-8d5f-5667ed8d5cc8", "sighting_of_ref": "indicator--1a0be993-8814-443b-bb38-38a24714a80f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e70e7ed-47ce-4feb-93d3-a8c667f6f2e1", "sighting_of_ref": "indicator--16a8f477-5b2a-4549-bf67-b32964752c49", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaff027d-3e88-40ea-9a79-b7af3b21bdee", "sighting_of_ref": "indicator--16a8f477-5b2a-4549-bf67-b32964752c49", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbbca05-ed36-47b4-9fa5-56dd7a32a461", "sighting_of_ref": "indicator--9c8dc31a-d5f9-410b-ad20-a666c771fdf6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d84620e-9108-406b-9777-d336399af9c1", "sighting_of_ref": "indicator--2b52e8b8-a3f7-450c-8c07-f725b121ad59", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d90899-37cb-48a4-98e5-c037fe78f204", "sighting_of_ref": "indicator--ef0956db-d7b2-427b-a070-d21c2d60a890", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f961b5-96db-4c76-9d67-ab0afc2172b1", "sighting_of_ref": "indicator--2dff1cd1-e7a6-42c3-85f5-87ff13ce2903", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15645d42-9e6c-466d-b6f2-eb36be3277a2", "sighting_of_ref": "indicator--9bcafbee-3c22-439c-a0c4-c18e1d2b7c28", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3672eda-b8d7-4d96-bfd6-8bcef4899ae2", "sighting_of_ref": "indicator--1dfa770e-9c1e-4d83-b622-bb5a82a8919f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651fe720-8ae2-4e86-a26c-fc7d0d269e65", "sighting_of_ref": "indicator--51c72f64-f110-4975-a71f-8896f46a154c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6327a8d-b6bb-404f-9289-1a804f2ea5ef", "sighting_of_ref": "indicator--fa1e9881-a097-4848-a4c7-6064b8fc036c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357465dc-403c-481f-93e6-509ed7a2e9bb", "sighting_of_ref": "indicator--3f9a5738-fadb-41db-9ce8-e5e426969e93", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a3aa41-0910-4939-95fd-cc8ea0cb681f", "sighting_of_ref": "indicator--f0076fe1-2527-4ac9-a62c-0b09ad05ccf7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b62d91d-0eef-450e-916c-fda86b0faa1c", "sighting_of_ref": "indicator--7c98e7df-c970-4f7c-9aaa-92623ad72a8d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf709e36-38cd-4a15-8d70-e6beb65e7e35", "sighting_of_ref": "indicator--b0400d53-b8ed-4a12-b10c-427ccebbe076", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77cad5fd-9481-4ca2-a880-0a3b261d8825", "sighting_of_ref": "indicator--95b54f42-72e9-4462-9b9f-ac5f4f5d1628", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae088e9-1a40-496f-811e-7280fc5b58c6", "sighting_of_ref": "indicator--1bc4e94e-5da7-4d3a-b8f8-9786f906d28e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0fcb8c-968e-445b-b8c9-caf048ecddfc", "sighting_of_ref": "indicator--e672678e-e986-4472-b50c-96cdfef7da24", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481f98a6-ee07-4c48-be60-0a0ce8c6079e", "sighting_of_ref": "indicator--82776f36-8b7d-4e63-83ea-11a5a517b6c1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d43347-cbef-4c6a-bb60-558cfb576892", "sighting_of_ref": "indicator--82776f36-8b7d-4e63-83ea-11a5a517b6c1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63703687-0e40-40e3-9d89-c0559cdb1cdd", "sighting_of_ref": "indicator--82776f36-8b7d-4e63-83ea-11a5a517b6c1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a2e2d2-23dd-4cdd-a8b1-3241ddbf2c84", "sighting_of_ref": "indicator--86060329-a048-4f60-950f-2a5c3d4c3e66", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b01af59-6132-4765-9ca3-ffd879efc910", "sighting_of_ref": "indicator--183a9b86-7601-4f97-88e6-66087e4027b4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba2b80b-ef27-4e9a-938a-bf4e22eb038c", "sighting_of_ref": "indicator--629c5ae2-5da4-439d-9483-72ff8f74d9b8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e5cd5c-9d82-4dc6-8237-6adca1db03f8", "sighting_of_ref": "indicator--5038d4ff-0829-4897-8b35-e21f4e0c037d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c27faed-a48e-4e25-a471-d7e2daa6e5cb", "sighting_of_ref": "indicator--aae000c3-986e-4eb9-8b82-972de7adeb4b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15617ae0-7825-44a8-be6f-c083c54c0728", "sighting_of_ref": "indicator--42d5ed27-63e7-4bb3-8cae-a6b9f8cf4f86", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a649e9-7cb4-4624-8bb3-5922a1c16ba3", "sighting_of_ref": "indicator--8d4cc155-8920-4960-85b5-244e77145216", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab383b68-4f25-492d-a042-fc68d52a7e8f", "sighting_of_ref": "indicator--af5a3b62-2627-4846-9179-23e64718a48b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b8401b-71d6-4d76-9406-79038f80522d", "sighting_of_ref": "indicator--3c09bba1-fb16-4d0f-b81f-ac8ff0cd729d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2787f3bb-524a-4208-916e-59a076b892bb", "sighting_of_ref": "indicator--e4ad2ac2-a90e-486f-a388-f0f39d7943f4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a5e823-a187-4b1c-8853-330e1b007bfa", "sighting_of_ref": "indicator--7fe2a6a2-e4d5-443f-922b-903088ef36d8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0b855b-373f-4c51-8340-290aaadcb92c", "sighting_of_ref": "indicator--6df1568a-5a97-40da-ba4b-b2ec497ee5ac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a504e664-5b45-4645-b93b-d2f7fb819b65", "sighting_of_ref": "indicator--b63b306c-0b4d-44ee-b44d-ea6110b4f85f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c882a70a-986b-4dcf-b626-50084bd04610", "sighting_of_ref": "indicator--efe782d4-e717-4c80-870a-6a71ddcc4aa6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f53e44b-4743-4f14-af13-c746300eb417", "sighting_of_ref": "indicator--4590147f-fd2a-423d-91c8-46f255d19d63", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3cb118-f46a-4256-a7de-52afcfc6d00e", "sighting_of_ref": "indicator--277891c2-ad17-4462-ba13-4ba8a3ce2b78", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138248ab-0c60-4b97-911f-6e74d9eed849", "sighting_of_ref": "indicator--c3366789-fa0c-49c5-bdef-7210caf24c0e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80ac845-53a4-4a9d-aa8f-e0534a150668", "sighting_of_ref": "indicator--0104fac2-e0d5-4ba6-bc42-7970564bd1b2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d47978-3a84-44d1-83c5-566955240d14", "sighting_of_ref": "indicator--5da3c2e2-7915-44a7-9de5-2e1029597c06", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb6dc12-410f-4f7d-9703-79760dea3c73", "sighting_of_ref": "indicator--012f9ff7-fd0d-4e09-94e0-2ba0d219039f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c362e61-3d62-4bf6-9652-74c49a5ea65f", "sighting_of_ref": "indicator--7c821925-c677-4a44-830a-a25acb2463de", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2cb097-e2bc-44c6-808d-5f349f2b8655", "sighting_of_ref": "indicator--1e77a59b-fbcf-4691-9fa7-ae4e932f3b62", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79bd9d3d-460b-4fce-9cdb-627757aafd6c", "sighting_of_ref": "indicator--1ed61c1c-3f2b-4b34-afb7-d45a61c22895", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a9306d-f21e-4cce-948e-f360b1e7fe1b", "sighting_of_ref": "indicator--ca1bdd1d-c6a8-444a-9f56-c2cbd79fbde1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e3b28b-dc42-4bdf-a438-8dd5efc1b3aa", "sighting_of_ref": "indicator--0ccf8d28-84f1-45dd-84e7-aa735ed14ef4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddedf095-bdac-4320-9d4d-b4f5e81c934d", "sighting_of_ref": "indicator--94fcd96d-2d27-47d7-b9d0-8a6257c5bfbf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d4e513-3913-4ae1-9c6f-895700446f5b", "sighting_of_ref": "indicator--94fcd96d-2d27-47d7-b9d0-8a6257c5bfbf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea9e15e-1df9-48cc-8c3c-2e5a7cefec23", "sighting_of_ref": "indicator--94fcd96d-2d27-47d7-b9d0-8a6257c5bfbf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b76b72-3b8c-4b8f-9ad2-c1eb6a7b598d", "sighting_of_ref": "indicator--f59f33e3-64d7-43a6-8df6-2b5786e48ccb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d72d99-332b-4643-95f3-ec82de4451dd", "sighting_of_ref": "indicator--9ccc7b43-e8b6-4980-b90f-713f7fee3337", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a99655-3a6e-477b-8684-2447063bf944", "sighting_of_ref": "indicator--10c52638-7b24-4590-9064-d66b19537732", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb848165-9f67-4795-8917-985821be4b42", "sighting_of_ref": "indicator--48f72683-7b44-41eb-ace4-d74eab1d38c5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10502523-9fb8-4cca-9cc3-0d4b6a097595", "sighting_of_ref": "indicator--041df810-6e07-465f-bfd3-f665a2fb0780", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5557f25f-7a29-4ce7-88ce-7ecf7404ee30", "sighting_of_ref": "indicator--55e10416-2868-4424-b896-66c440ed3950", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003f94e3-4dc7-4713-957c-65ff7505634d", "sighting_of_ref": "indicator--7ef0fcb6-bf81-4f04-91f4-9adaaffba7f7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bc7c74-d553-4b78-bd7d-031ed5cb0a34", "sighting_of_ref": "indicator--73e20687-09bf-4adf-85ae-a2917652c232", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0005c1-72d1-437d-9138-d3cb382eb601", "sighting_of_ref": "indicator--73e20687-09bf-4adf-85ae-a2917652c232", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ceb8dd7-27d1-4c5c-8652-a85048513e22", "sighting_of_ref": "indicator--73e20687-09bf-4adf-85ae-a2917652c232", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1851d66-bba7-44f7-926f-e22ada21323b", "sighting_of_ref": "indicator--57085a02-d71b-4a18-a230-c90e0bae79b9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0706b8a8-a260-4741-ba6d-16816dd67fcc", "sighting_of_ref": "indicator--57085a02-d71b-4a18-a230-c90e0bae79b9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840bb556-bbb6-4416-9e8f-9fbba0e21695", "sighting_of_ref": "indicator--db31bdea-e49f-46b2-b824-420bbb01e0a1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f96ca3-7bd0-4b09-804a-d1def7b367f3", "sighting_of_ref": "indicator--db31bdea-e49f-46b2-b824-420bbb01e0a1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fdb77a-e5d5-4912-8548-e244973c7d1a", "sighting_of_ref": "indicator--db31bdea-e49f-46b2-b824-420bbb01e0a1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804c1f0d-2287-414d-8b9e-27913a92c3cd", "sighting_of_ref": "indicator--a1374bd9-61b8-41a8-ad6c-9795aefec460", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d301cfb-7d33-4125-915c-8eece444877c", "sighting_of_ref": "indicator--a1374bd9-61b8-41a8-ad6c-9795aefec460", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d32f0a7-d234-456f-9420-4733fb839e65", "sighting_of_ref": "indicator--a1374bd9-61b8-41a8-ad6c-9795aefec460", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02feb11d-6bbf-40f8-a7ed-773c8c1d0398", "sighting_of_ref": "indicator--5db3b27f-7cbb-469b-9a66-40857c0002c9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4371afa0-0067-45ca-a769-a83cd9352d53", "sighting_of_ref": "indicator--5db3b27f-7cbb-469b-9a66-40857c0002c9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ab26e0-3172-4e97-af09-14b5f5df94e3", "sighting_of_ref": "indicator--5db3b27f-7cbb-469b-9a66-40857c0002c9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1383a9b-7a9e-4d99-afad-dc333fa89eb0", "sighting_of_ref": "indicator--477e2190-f816-4cbe-9aec-f5e24793fe77", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5129b8c2-aabf-4d69-b666-35c17c57094c", "sighting_of_ref": "indicator--477e2190-f816-4cbe-9aec-f5e24793fe77", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29db9188-6bcd-4bdb-a601-ebb58cf26d64", "sighting_of_ref": "indicator--477e2190-f816-4cbe-9aec-f5e24793fe77", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d1f468-50f5-4ada-88b0-36a30e7cf31a", "sighting_of_ref": "indicator--3539bed8-ef91-4920-a50a-6c995b2b61ad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0538534e-89f0-4544-a904-87fb6085867e", "sighting_of_ref": "indicator--3539bed8-ef91-4920-a50a-6c995b2b61ad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef3510a-8aed-42ca-8340-acb713dca66d", "sighting_of_ref": "indicator--3539bed8-ef91-4920-a50a-6c995b2b61ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6865c38d-d868-4783-a65a-ef4eecf58102", "sighting_of_ref": "indicator--9fd94735-421e-4d27-a975-cab55c05af39", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d79012a-9ec2-4b24-a9e8-0a852ab3a332", "sighting_of_ref": "indicator--9fd94735-421e-4d27-a975-cab55c05af39", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cddc9d4-8600-4445-9169-59026a00deec", "sighting_of_ref": "indicator--44f7049d-869f-497a-9f2e-9e54817c48be", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f79876c-7cea-43ea-a088-d281ab54eca4", "sighting_of_ref": "indicator--44f7049d-869f-497a-9f2e-9e54817c48be", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66146253-c0df-454b-9d49-f0317aaf3b8f", "sighting_of_ref": "indicator--44f7049d-869f-497a-9f2e-9e54817c48be", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6519061a-1c58-4ea7-b393-e8aa9c8f5673", "sighting_of_ref": "indicator--e266b073-45fa-46ac-838e-a4b9cd9d9312", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7c79de-1ba1-426a-93db-5dbd01fe135f", "sighting_of_ref": "indicator--e266b073-45fa-46ac-838e-a4b9cd9d9312", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8f7abc-6d2b-4c1d-aa8a-091d95687455", "sighting_of_ref": "indicator--e266b073-45fa-46ac-838e-a4b9cd9d9312", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693378dc-288a-4258-8149-5f377fbca044", "sighting_of_ref": "indicator--2f9ab897-f89a-4b26-90b6-5b0b5a274ab0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5972ad-b3e3-414d-96ea-c6ff5d4784b0", "sighting_of_ref": "indicator--2f9ab897-f89a-4b26-90b6-5b0b5a274ab0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33945a40-fbd2-4e72-88ee-cd60256e09df", "sighting_of_ref": "indicator--2f9ab897-f89a-4b26-90b6-5b0b5a274ab0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3929c01d-b712-49f1-acf9-1862b23f2465", "sighting_of_ref": "indicator--c710300e-a478-4981-9492-96a678bbd6ed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcb0558-34b1-45dd-9afb-b9380b8d6eaf", "sighting_of_ref": "indicator--c710300e-a478-4981-9492-96a678bbd6ed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9921465-74bd-4e37-a7b9-b8ba25dccdc4", "sighting_of_ref": "indicator--c710300e-a478-4981-9492-96a678bbd6ed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f922ad-f7b4-43b2-b1b0-3512493978eb", "sighting_of_ref": "indicator--d61298e8-80fe-4688-bc90-902450f40e8c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b95b46-b608-40b9-ac3b-ac938414fbab", "sighting_of_ref": "indicator--d61298e8-80fe-4688-bc90-902450f40e8c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26ce7f7-5423-4113-bd62-29c732bb1c6a", "sighting_of_ref": "indicator--d61298e8-80fe-4688-bc90-902450f40e8c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71751439-ea5c-400c-8a9c-a1787624ee8f", "sighting_of_ref": "indicator--13335c98-f8a3-4cd6-8040-1d79343cc718", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2bd0bb-c01a-4441-8b25-9a43af89e07a", "sighting_of_ref": "indicator--13335c98-f8a3-4cd6-8040-1d79343cc718", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef226bc-d555-4d1c-9df2-3bb57b49de8b", "sighting_of_ref": "indicator--13335c98-f8a3-4cd6-8040-1d79343cc718", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613213db-5f9d-4605-8e80-8f2c004e6d11", "sighting_of_ref": "indicator--859ec0c3-0640-40d2-9a1a-c4dde183b528", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40348b0c-9b0c-41f1-b315-e74a6c222ddc", "sighting_of_ref": "indicator--859ec0c3-0640-40d2-9a1a-c4dde183b528", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f73161-eec9-439d-9944-304bcd352a83", "sighting_of_ref": "indicator--f1e747d7-a988-4ca6-8302-089d5bd1441d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e61a340-73d6-4202-8f05-efa321184ef0", "sighting_of_ref": "indicator--f1e747d7-a988-4ca6-8302-089d5bd1441d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8898a5b8-246e-450b-8303-cc0348aa5c61", "sighting_of_ref": "indicator--f1e747d7-a988-4ca6-8302-089d5bd1441d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b92a25c-1894-4c12-8159-325961120159", "sighting_of_ref": "indicator--94d07c96-a0bb-4228-8ce1-276679f31b4c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd797ea-29bf-420a-9dfa-5cff4b76cf99", "sighting_of_ref": "indicator--cda1eae1-41b5-46c4-9238-400ec7ac622f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b33abd0-e567-4888-a13e-4dccece333b2", "sighting_of_ref": "indicator--294a7e09-b085-4b26-926f-76ee534214f8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b479cf97-7402-4f1a-972b-0c640a5f8553", "sighting_of_ref": "indicator--a21a07d7-cb4f-485f-a444-b00ad311f460", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0258c8-a41d-413b-8263-74f5ba4c4afa", "sighting_of_ref": "indicator--2644be21-f8e6-4e25-a56d-69af4c5cc0c9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c43d3da-d5c7-4b75-8c54-787c50600494", "sighting_of_ref": "indicator--20b2ba15-6860-4b62-ae0d-9e798809b7c6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58afeeab-4eb2-427a-800f-2e4f4da5ed52", "sighting_of_ref": "indicator--e299fa91-c922-4d72-85cf-0f7fdb59f18c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06e36d8-5a1e-40a4-b4cd-b9db6bd6bcaf", "sighting_of_ref": "indicator--f904afbb-3efc-4c55-8007-6bb286409821", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2590d8-573c-405f-9b87-d15ad981d1f3", "sighting_of_ref": "indicator--af8034dc-1224-440a-83a9-449d3e2cbb43", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495b720f-c08b-484c-8fcb-5153aab119d0", "sighting_of_ref": "indicator--11c24fee-83dd-4031-8485-1668658f87dd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43035788-94c5-43c1-a3f9-e6f209abd9d6", "sighting_of_ref": "indicator--92205957-573d-485d-94ae-3c75e6b13f2f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e43546e-034c-4317-9c63-7fa189649a3e", "sighting_of_ref": "indicator--d956854b-ba31-4772-a24c-a0e8b1f4781a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a705f92b-939f-4939-a635-733dafbdd84d", "sighting_of_ref": "indicator--b27f689b-60a4-4d47-87cd-fc9b18e38369", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49c1565-0229-4555-bcf9-6318ac04f4ba", "sighting_of_ref": "indicator--91d91ed1-f13b-4b95-8de5-0d03fc55a925", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ab30ce-a201-448d-a810-1c540c9dced6", "sighting_of_ref": "indicator--8271db8e-e13b-43fc-9201-472eee6824ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3cdcce-1bb2-4e89-b64f-8ed0d7672951", "sighting_of_ref": "indicator--82dcdac9-aadd-4364-af97-fc86c12ec9b6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf71df9-9a79-4390-b147-969c4aa69194", "sighting_of_ref": "indicator--26977f82-7d55-492e-a63b-fa8efa44c37a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52a4019-74cb-46b5-9b3e-94e272fa0c63", "sighting_of_ref": "indicator--b6143834-d28b-4409-8c4e-6ca4c1086f18", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--decfacb2-b419-4b9c-b669-1233e2cd7b3f", "sighting_of_ref": "indicator--b6143834-d28b-4409-8c4e-6ca4c1086f18", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7698598e-a768-4994-be45-39d3ced5782d", "sighting_of_ref": "indicator--47545f33-a1a5-4b31-8e31-b0a703d8ca29", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2be4011-af52-4fc2-ace4-cb5521c6f877", "sighting_of_ref": "indicator--f9f9880d-f20d-4959-92ae-1f6fec326754", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21abb57-525d-4d39-a36f-303ea8a6705d", "sighting_of_ref": "indicator--8941d482-d5be-448a-8f0f-142a04378ac5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e12a3d8-4a66-40c3-b942-2932c42609d9", "sighting_of_ref": "indicator--33c6db73-f2c9-4027-9e7f-a94291775e51", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ccd2ed-80df-40fb-840c-75787e98a681", "sighting_of_ref": "indicator--808422db-57e9-4a9f-ac64-2b419edc7cb7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462f4896-b313-45c6-a3d3-7facf8e48e6f", "sighting_of_ref": "indicator--808422db-57e9-4a9f-ac64-2b419edc7cb7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4555788b-2e62-4efb-9fba-71d64b4e5d4f", "sighting_of_ref": "indicator--afd18cc7-089c-42ca-a33e-88497c17d573", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1de474-efca-4d08-8fa9-a3b1f24b35b5", "sighting_of_ref": "indicator--1d8e7538-13fd-49de-b9b8-ec70054a8465", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71139aac-e6e3-4a30-9668-9aade50fd314", "sighting_of_ref": "indicator--048ba179-ad8c-46f7-a8b8-baecfdd49055", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d68c54-18b3-4996-b9a9-73a25001e4ab", "sighting_of_ref": "indicator--c9b835c2-055a-4443-80b3-45ef62d3ebc2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760f23cf-ba32-4f16-be33-82e1bd08ee49", "sighting_of_ref": "indicator--c9b835c2-055a-4443-80b3-45ef62d3ebc2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d6b0e1-5144-4445-a76c-3224b20554e5", "sighting_of_ref": "indicator--3f771e09-b2f1-4aae-8e35-e01b9f0ff3d2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46db50db-f66e-4d3f-a426-7ec7cb5bef0e", "sighting_of_ref": "indicator--7dafd04a-9aa1-4d57-8f46-6d1bd964ce46", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28650001-132e-4fd5-aec0-f62ac3273409", "sighting_of_ref": "indicator--ac5278a3-9b82-43df-89f7-d2d884de843d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c608dc6-130f-4dbf-873f-fd7b3b23aa2b", "sighting_of_ref": "indicator--baf444a8-8232-47ae-8e79-da0a51eaa2d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b248410-4de8-4168-9f7a-0c853b102072", "sighting_of_ref": "indicator--f966202e-fd7a-40ff-9e25-a18c0c7a064b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af690a13-e743-4c06-a25f-e8f284855bb8", "sighting_of_ref": "indicator--f966202e-fd7a-40ff-9e25-a18c0c7a064b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b82eb40-9b4c-4272-9fed-afd179f2571f", "sighting_of_ref": "indicator--f966202e-fd7a-40ff-9e25-a18c0c7a064b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c720423b-b204-4ae8-a1f0-e1544cd6eefc", "sighting_of_ref": "indicator--e1a83701-9379-40e4-8686-bd8ce40262e6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35852ef-ffbd-41fd-bf53-256035e45208", "sighting_of_ref": "indicator--e1a83701-9379-40e4-8686-bd8ce40262e6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c1547d-74e0-45c5-979c-1a07227b5ca1", "sighting_of_ref": "indicator--e1a83701-9379-40e4-8686-bd8ce40262e6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c224872-8219-4abb-8e33-f5b73e706394", "sighting_of_ref": "indicator--13f2fb33-c35c-496a-a129-894cc83123b6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a614cdd8-3b91-4449-ad8a-8f58d0cf8401", "sighting_of_ref": "indicator--13f2fb33-c35c-496a-a129-894cc83123b6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5daee1b-2cc3-4f99-87db-fc91d1abc686", "sighting_of_ref": "indicator--29b6e8f6-247c-412e-b7fa-12a85e8db0cf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5d19ec-d172-4595-9d62-aaf0e6aa2c06", "sighting_of_ref": "indicator--29b6e8f6-247c-412e-b7fa-12a85e8db0cf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31c519c-a1c7-491f-a672-62e4a272e829", "sighting_of_ref": "indicator--50f1e2a1-c90c-4bf5-a67d-1740df448e3a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffd57d5-b09b-4831-bb4b-292fe34c09fb", "sighting_of_ref": "indicator--50f1e2a1-c90c-4bf5-a67d-1740df448e3a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb826e2-e064-4033-976e-8417ac377a10", "sighting_of_ref": "indicator--f81ebd2f-886e-42f1-abdb-bd1493bcb204", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe27316-9da5-4833-8eac-7b6f0374f590", "sighting_of_ref": "indicator--f81ebd2f-886e-42f1-abdb-bd1493bcb204", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd12432d-2f4f-4615-9466-81cdbe876588", "sighting_of_ref": "indicator--f81ebd2f-886e-42f1-abdb-bd1493bcb204", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619aa896-7cb6-4eca-bd7a-f3212508318d", "sighting_of_ref": "indicator--ab345314-108d-44f9-b5ab-1b9b3860544f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e6265c-93c5-476c-a7c4-b856a59848ce", "sighting_of_ref": "indicator--ab345314-108d-44f9-b5ab-1b9b3860544f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82daced0-e00e-43f3-849f-c2998afb590d", "sighting_of_ref": "indicator--c5bfe08a-16de-45ee-958b-9660fe262fff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94900a27-b9b2-4fa3-85f5-5cd5b450c06d", "sighting_of_ref": "indicator--8f3757fd-bf9f-47b9-80bb-e752b82c482f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d8a41a-366d-4a19-b0a7-56a42c75422a", "sighting_of_ref": "indicator--d30c8e6a-7a98-4e8c-b684-05c41cb388a3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda24fc8-f345-4fc7-a268-c423422af1db", "sighting_of_ref": "indicator--d30c8e6a-7a98-4e8c-b684-05c41cb388a3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0b0d12-8f0d-4377-ae1e-a1c8394933bf", "sighting_of_ref": "indicator--d30c8e6a-7a98-4e8c-b684-05c41cb388a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3848dfd4-2083-413b-9c0f-80c67afc20dc", "sighting_of_ref": "indicator--08014f74-81ad-4e6f-862b-9c19155da909", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f492c2c0-56de-48cd-af52-545206547a79", "sighting_of_ref": "indicator--322801a8-3ddb-45c1-80ce-2dada7ad6481", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129f4921-51ac-495b-9a88-8c8b9a9a5e09", "sighting_of_ref": "indicator--322801a8-3ddb-45c1-80ce-2dada7ad6481", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd34bc5f-f44d-4161-9a6e-e4b4f70a890a", "sighting_of_ref": "indicator--03e165c0-aca9-4be6-8a8b-163381a93858", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71543f12-632f-4131-8ac6-876330182d9b", "sighting_of_ref": "indicator--03e165c0-aca9-4be6-8a8b-163381a93858", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd204edf-a948-4e69-bc09-dcebf63fb650", "sighting_of_ref": "indicator--242180e8-88aa-4d4f-ad4b-67a038535bbc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852dfc56-4a28-4df3-81be-05df59e7f763", "sighting_of_ref": "indicator--242180e8-88aa-4d4f-ad4b-67a038535bbc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012f7394-edab-4223-92af-7be2dff4107e", "sighting_of_ref": "indicator--4f2bc135-d7ba-4ff8-adc6-2f7b1ad0e5d5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c934e4-e8db-4e3d-a355-5fdf5fc93734", "sighting_of_ref": "indicator--4f2bc135-d7ba-4ff8-adc6-2f7b1ad0e5d5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01d87b3-6973-46eb-9394-ff5080eaf7c7", "sighting_of_ref": "indicator--f1a049f6-b212-41fa-bc61-dd32d8e5ce66", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdbbdd7-700b-4194-a146-afaa0f5445dc", "sighting_of_ref": "indicator--5d564ed7-97a6-4028-9d09-721c4f0d2b57", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901a18f0-b6a6-4753-bf7c-68927a8bfd97", "sighting_of_ref": "indicator--5d564ed7-97a6-4028-9d09-721c4f0d2b57", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1beb96-57d8-4bdb-b1ed-75e37fdeb672", "sighting_of_ref": "indicator--5d564ed7-97a6-4028-9d09-721c4f0d2b57", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382d86e6-47ff-431e-9fa2-91fc4354e290", "sighting_of_ref": "indicator--7fdc3907-5d73-4afa-a6da-46d5ba7eda66", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cb0fca-8103-4436-824d-c9957954ffba", "sighting_of_ref": "indicator--6622be1d-1d3b-4cd1-b5b2-9ca04b551cc9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e49b3b-2c29-46f6-866a-abf6fb19452e", "sighting_of_ref": "indicator--819cafe1-1730-44b5-9093-d0c14ad5b196", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7f22c3-63f0-4236-a492-6bfc13fa3570", "sighting_of_ref": "indicator--ac96b6d9-feeb-4b7b-93f7-3956d0854251", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086147ee-7f30-4dd0-a18a-776a27b3a494", "sighting_of_ref": "indicator--98ad26e8-7564-4d0e-b3d0-503725a38467", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46d09b3-b0ef-4912-a8a8-3422add6d410", "sighting_of_ref": "indicator--2303a868-e040-496b-bdb9-16a4cd6335ec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3621f44d-65de-4dee-9a6b-e8faccd88cfa", "sighting_of_ref": "indicator--479b0987-0295-47c5-8014-4b0c28d272cc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a15d690-ba5a-4f13-8605-ef3e03603ecb", "sighting_of_ref": "indicator--479b0987-0295-47c5-8014-4b0c28d272cc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ab1d49-2414-42b3-89a2-a5ebb9c61d54", "sighting_of_ref": "indicator--440ecbf9-dfa7-4426-8a3e-bbe781ba32e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a7d192-ad0d-4c60-b596-6ac27cd3b427", "sighting_of_ref": "indicator--328cd119-f3d6-4f37-a46d-03d9049c1be5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a176779-5107-4075-862c-04fa28a0e1ff", "sighting_of_ref": "indicator--b6b25a16-0686-4da3-8224-a9512d74d03c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe9aba6-b9d4-4186-8d1f-6db2ad01d64e", "sighting_of_ref": "indicator--cb1383a4-bd84-4267-a712-07cd4cc653c8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c040252-09df-4498-abda-823c44fbfa80", "sighting_of_ref": "indicator--8dae336f-4801-42cf-ad2a-7675f1538030", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea2b322-28e8-4137-b1b6-5c618756e4d8", "sighting_of_ref": "indicator--afa0f792-782d-4cb7-81f9-7a8e509fd78f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ba1805-0d4c-4fca-8bb1-55e789608fcf", "sighting_of_ref": "indicator--afa0f792-782d-4cb7-81f9-7a8e509fd78f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9b7231-aee7-444b-aedb-cc400caca5af", "sighting_of_ref": "indicator--27e0c760-5bbf-43ef-ac09-5756635009ef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147eee79-ff7c-4054-ac9a-b62ea6902d07", "sighting_of_ref": "indicator--92cfa28a-51dc-4b42-bac2-93c87967eef5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244ef911-35cb-44af-8ba7-408a7f98812a", "sighting_of_ref": "indicator--92cfa28a-51dc-4b42-bac2-93c87967eef5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b59de1-f27c-4efa-86fe-947934e3063e", "sighting_of_ref": "indicator--92cfa28a-51dc-4b42-bac2-93c87967eef5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef840a4-abec-4f12-a8d0-e599fbba80f7", "sighting_of_ref": "indicator--cd84f8c5-7294-4d42-8d6a-b74cddbd40b4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469beb9e-3231-4f90-8e51-631d01919855", "sighting_of_ref": "indicator--1a9fe7d8-3527-4a93-8a6f-624058070506", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c57d3c-ea7e-405f-96f2-38ef72cae50e", "sighting_of_ref": "indicator--8adcebdc-88d6-4ad7-9acc-c85d6fd52fc8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5ea6bd-bf07-488e-b7a4-17473d9a1bf5", "sighting_of_ref": "indicator--7dd93f61-88c2-48b1-bf65-e8b1279b5b42", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2807183b-7178-480c-a470-64e15bf7f4e3", "sighting_of_ref": "indicator--babb39ee-34ef-4ebf-8733-51e01e1d3fd6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337a587f-0db2-4b59-8ea8-226ae6d9619c", "sighting_of_ref": "indicator--557aff06-d5a4-4bc0-aba7-47db9a173281", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062bfe1b-de89-4d3a-bb41-1da21a05e288", "sighting_of_ref": "indicator--557aff06-d5a4-4bc0-aba7-47db9a173281", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085376ec-53de-49ac-8ba0-929fa05478d8", "sighting_of_ref": "indicator--557aff06-d5a4-4bc0-aba7-47db9a173281", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abed6a5-2d26-4b9c-a6fd-f731f7c124d2", "sighting_of_ref": "indicator--d4711821-04a5-437e-a810-1268295c8e9f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570f9550-44f0-4ab8-a0d4-d96599bfd52f", "sighting_of_ref": "indicator--3852e773-d4c9-496c-a39e-dfe47ab9b4bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfa3382-7c8a-4f3c-bcd6-dcbdd8ff3e1d", "sighting_of_ref": "indicator--526abb35-86e0-43f8-8ee7-bdbbbe83ff05", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bc3ddb-5fb4-46c6-9e36-89901f067808", "sighting_of_ref": "indicator--d46d6fa0-e71d-4120-b4c8-607effdec102", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bbae3d-e798-4555-9566-44adaff79590", "sighting_of_ref": "indicator--1a505e60-afb9-4721-9d75-13cbe0ba564c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a88c28-cfa3-4609-ae91-d0d82b9f2852", "sighting_of_ref": "indicator--1e5fa0de-07b8-4a29-bd2c-45fbe31809f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1716eb49-c4b6-45ed-8dad-46f18bd31fec", "sighting_of_ref": "indicator--3524dbf5-d44f-43eb-9f63-05520681bc0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f423336-b324-447d-ae1c-93bd84d6ad8b", "sighting_of_ref": "indicator--facb0ce9-653b-4955-9b53-031a90a903c5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88be892-3050-4a8e-bf00-2872849d89f6", "sighting_of_ref": "indicator--d19e8e61-def8-43b9-b23a-7cf157a4eacf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ba6de9-6f7e-41ec-9052-6db71ad8a615", "sighting_of_ref": "indicator--d19e8e61-def8-43b9-b23a-7cf157a4eacf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9fffb5-851f-41b8-849d-9f07a89369d3", "sighting_of_ref": "indicator--1a9d9ada-e420-4892-8989-389ceef6ae0a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d083b6a-319b-4667-8b88-5430b38a6d93", "sighting_of_ref": "indicator--ca01ee7f-a4af-4a18-b7a3-6080165dae06", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3702956-fce0-4e8a-aba5-12d7fc2ad4e1", "sighting_of_ref": "indicator--a9d6d1a6-9f2c-4b13-a0b8-99291582e6db", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fdca68-d688-43fc-b92f-d2d7b9cd5020", "sighting_of_ref": "indicator--b35475fc-03ea-4ace-9405-d818f51248ea", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22345e4c-9d75-4c02-935c-63aa1ccc785d", "sighting_of_ref": "indicator--d374d296-050f-4ce4-90fb-9e7e2b9cc789", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b1aa55-ccad-437d-9ff7-69171a94038b", "sighting_of_ref": "indicator--73f24f1f-3ec8-4c64-8ff4-04960a733bd3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcfeeda-afcb-405e-98a3-cfadb80807af", "sighting_of_ref": "indicator--ae216851-7cee-4a3e-b116-5b47bce418fa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ba2190-8233-4e7c-b829-44d62da74dc5", "sighting_of_ref": "indicator--1b738442-7b31-452b-bfe6-65a6ecd936e1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8457c2d2-6ba8-49ff-8080-b322cd0e80a4", "sighting_of_ref": "indicator--1df5e042-f28a-4932-9902-f489f8dc1f01", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18383bd8-e313-4210-bd47-2f38d75b3323", "sighting_of_ref": "indicator--067104ce-8fb2-4377-b4f2-cf18fbf7a2e8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f47de42-a0b7-4691-943e-2202e39d4adc", "sighting_of_ref": "indicator--73ed3c81-997d-4390-9fb6-46ce7290afce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4814b663-657e-4223-a667-8256b83d9850", "sighting_of_ref": "indicator--0ef4dff2-8363-4f1d-98d6-633bd5281b56", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7c537d-870a-4514-80ad-1583a66ca8bc", "sighting_of_ref": "indicator--9e02a048-ba52-4c32-95c7-4b09303598d1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744092ae-c305-4d2f-9f22-63b6db417b66", "sighting_of_ref": "indicator--8abb4115-2f57-49fa-ba9b-eaf74aadf6cd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae04b57-5c57-476f-abae-7fef148fdbef", "sighting_of_ref": "indicator--982c9041-6e7a-47ab-8d00-834c03b8559a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7857aa-d69e-4f93-9a35-4be23a8108bd", "sighting_of_ref": "indicator--04491ced-9f39-4250-877d-e1105f2534ac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ff8de1-668e-4b00-aa47-23008151fc7a", "sighting_of_ref": "indicator--1ecad8c7-f79a-45bd-a8f8-e24a8af55eff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631e26e9-bc93-48b5-97d9-47eee53fcdc8", "sighting_of_ref": "indicator--3d09ca33-ffe7-48d4-a6e5-589a659f68f6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf619096-a022-4231-bba1-99ace0e9dd5f", "sighting_of_ref": "indicator--6892633f-6496-40ef-a952-9e51ffb9a40c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956151ca-4709-47c0-9bfe-3507e0940db8", "sighting_of_ref": "indicator--99e9d41e-a3a7-4e29-99ca-9d90857da440", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2c0109-cc9e-43c1-8da1-60bf75c7ce4f", "sighting_of_ref": "indicator--727c5cc2-ea85-44cd-affd-a4c7c6fa936b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e215fb-eb62-42dc-8f22-3721822056fe", "sighting_of_ref": "indicator--05186be4-e132-4719-8c1d-a75068c925e7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec413c0-dba0-4227-a06e-67238462709e", "sighting_of_ref": "indicator--155d7cca-7f32-40f1-bdcd-aca71713c805", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd6913f-403f-40c6-8da6-adfa41be6097", "sighting_of_ref": "indicator--1c0bbde7-4fe6-4d4f-b7c2-71dcc140e6cb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b65d8ea-056d-4d25-b8dc-05bcf848aa68", "sighting_of_ref": "indicator--1c0bbde7-4fe6-4d4f-b7c2-71dcc140e6cb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1491afa6-0aee-4bf5-9d84-b0d9ad30f770", "sighting_of_ref": "indicator--c9ba35df-bc77-4d36-9535-019f40031373", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e36464-532c-4fce-83bc-ff7a7d8062c9", "sighting_of_ref": "indicator--df263a06-dd8d-4c82-bedc-c2091975a4d1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e909d3c8-b9e5-4afe-a287-c3f58ddb9c47", "sighting_of_ref": "indicator--df263a06-dd8d-4c82-bedc-c2091975a4d1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97335c2a-8576-4677-9975-f5780712bdd9", "sighting_of_ref": "indicator--10470f0a-f65b-48f0-b3f0-bcd27f6e878f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e303545-c6ec-405f-9498-bc72d6f270c9", "sighting_of_ref": "indicator--5f2830b0-3e70-4f4b-a184-e55f55c83957", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa23b77-9456-42f8-a36d-70bccfaf9a26", "sighting_of_ref": "indicator--2b85b29a-f803-4abc-8970-00acb210e461", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b0b442-da46-4705-b374-4ad91bf4bbca", "sighting_of_ref": "indicator--06629b93-8da6-460f-944f-278ae0659c66", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c9cabf-7d04-4f23-96a2-72548c2e6f00", "sighting_of_ref": "indicator--ea2e66bf-47f6-4e22-b417-0d7362127cf1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb8fbe9-2823-4374-8227-04ab636ebcd5", "sighting_of_ref": "indicator--78063c0e-5771-460f-9f05-46f3e22fbd14", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096fd80a-14dc-41f6-95ad-cd549a278ca2", "sighting_of_ref": "indicator--e03fd0d1-e4fb-4ddc-b36e-ecd1626571ee", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f11ca86-2c59-4fc2-b45f-e1f7e9638fc6", "sighting_of_ref": "indicator--2f15d6f2-6192-44fe-9dca-9aeaf3406d00", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775f5edb-5e38-4cec-8045-1781a903020c", "sighting_of_ref": "indicator--816ddee5-baf5-48dc-ba50-000e84ed5afa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f33b4cb-0722-4d9a-80a0-2129d56589e8", "sighting_of_ref": "indicator--cee5846c-2652-4ec7-801f-d79658672135", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d1223e-501e-49c0-9cbc-c545ecf11468", "sighting_of_ref": "indicator--799bb22a-32f3-4766-8539-cc200cfd4161", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5b052c-4226-421e-a29c-3996e37cbb02", "sighting_of_ref": "indicator--973f1996-2d6a-4e0e-8702-c0841d6e12e1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b072c936-9f8c-4e7b-a031-5c7ddae3bf82", "sighting_of_ref": "indicator--42da5c11-23a3-435a-acf5-3691d6268ae2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c55de6-625a-471d-8c7d-19d9620076cc", "sighting_of_ref": "indicator--901ae4f9-a3bc-4ce6-9954-e85264618002", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0843b4-62ca-417e-a60b-25f6e8b4e968", "sighting_of_ref": "indicator--51dd48ec-d4ce-4d2d-ab0c-1651c076a601", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f665f1a-37d3-4569-8477-f599224bad37", "sighting_of_ref": "indicator--51dd48ec-d4ce-4d2d-ab0c-1651c076a601", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78cd709e-a24c-4960-8528-698a6a3329f2", "sighting_of_ref": "indicator--218486af-b6d2-44d1-a9f1-8c658f3a93a2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e845f5-21b6-4faa-bc00-6e0894cbeee2", "sighting_of_ref": "indicator--218486af-b6d2-44d1-a9f1-8c658f3a93a2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dfa098-72ff-4494-adf0-4079c0dee7b6", "sighting_of_ref": "indicator--218486af-b6d2-44d1-a9f1-8c658f3a93a2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbd781f-0748-49d6-8cba-3e7a60a10c7b", "sighting_of_ref": "indicator--53e525c0-9794-45c8-8373-cbb0797b5d1e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985ef774-514b-486c-8070-ba2a0f5838c9", "sighting_of_ref": "indicator--53e525c0-9794-45c8-8373-cbb0797b5d1e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d10d47-9266-479d-be31-a232a78fb534", "sighting_of_ref": "indicator--53e525c0-9794-45c8-8373-cbb0797b5d1e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20708e98-7d49-474b-915c-1ebb6cd00bea", "sighting_of_ref": "indicator--d7a20180-fefb-4f7c-9f90-4232f99e247d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e0ed1d-8e7e-47d2-b76a-4c1b8899caae", "sighting_of_ref": "indicator--d7a20180-fefb-4f7c-9f90-4232f99e247d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2e8f82-fbc2-4757-ab18-53843b928696", "sighting_of_ref": "indicator--d7a20180-fefb-4f7c-9f90-4232f99e247d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0322d3-6da1-40f9-9bd9-be8c1ce4f0df", "sighting_of_ref": "indicator--9e54240c-8fcb-4767-8b92-97d10567bc28", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadd07af-c6bf-49ad-bdcb-da8c78959d69", "sighting_of_ref": "indicator--9e54240c-8fcb-4767-8b92-97d10567bc28", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c801e44b-2baa-40c8-bb2b-8bdb2f0c5fbd", "sighting_of_ref": "indicator--9e54240c-8fcb-4767-8b92-97d10567bc28", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32584d69-9146-4caf-815c-a9194cf4af0b", "sighting_of_ref": "indicator--d8ca30bf-036c-4ccf-a174-a510dd79bfc0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ed0ac3-2ebc-41a8-8585-f45801ce5de2", "sighting_of_ref": "indicator--d8ca30bf-036c-4ccf-a174-a510dd79bfc0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45aeee40-b771-4302-a840-9a0d7b6c6396", "sighting_of_ref": "indicator--d8ca30bf-036c-4ccf-a174-a510dd79bfc0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c80c48-a6b3-4dc2-a116-f84e7da2fc8f", "sighting_of_ref": "indicator--9a65a958-f960-4ed1-a47c-de6bcaf3a678", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780b2901-f60a-49b1-8018-3872379ba56d", "sighting_of_ref": "indicator--9a65a958-f960-4ed1-a47c-de6bcaf3a678", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7f7ffd-4869-4bfc-8f2d-fc2ba4bab56a", "sighting_of_ref": "indicator--9a65a958-f960-4ed1-a47c-de6bcaf3a678", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7abc787-6635-4364-a48a-967dce69a3bb", "sighting_of_ref": "indicator--f2178095-1a31-4390-8f06-f1033c73cfd1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10853ff-c970-473f-9ba7-84fb4419fafe", "sighting_of_ref": "indicator--f2178095-1a31-4390-8f06-f1033c73cfd1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c8be68-97a1-4832-82c3-272816725354", "sighting_of_ref": "indicator--f2178095-1a31-4390-8f06-f1033c73cfd1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473d8cfa-3419-46ff-9995-7aed48b237d0", "sighting_of_ref": "indicator--a36050f7-ace5-43f4-8f93-64625a1683b8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b425fe92-7946-4285-9650-c94db64089f0", "sighting_of_ref": "indicator--77625a34-5307-4ef9-9941-8ca781a9f08c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a56eafd-2e44-4bd8-8293-a080d93076c5", "sighting_of_ref": "indicator--4d277ca1-779b-444f-a130-a1eafccf8bfd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9300c5db-5a73-4539-9178-858acf8875a0", "sighting_of_ref": "indicator--09a8469e-7335-4ed0-a347-27d2401da7bc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deea2c79-0e26-4db2-9c96-41233271efda", "sighting_of_ref": "indicator--f164b21a-547a-48cd-80eb-ef62358c6129", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95baee9c-09c3-4acd-bc85-4970589cf7b7", "sighting_of_ref": "indicator--fd26090d-274d-4d5e-aba2-ebca74165dea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b112d7f-0752-4225-b735-7a3f3e543b35", "sighting_of_ref": "indicator--1f0f13c6-6e80-4644-8963-494b2745d6a8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5c1c06-a04c-4c57-ad18-99ebb073897a", "sighting_of_ref": "indicator--6380945e-3d34-420f-b156-7f7ca1400243", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9e46e1-6081-4716-af17-67f4a7cd59ca", "sighting_of_ref": "indicator--02e650a4-ec0f-4b78-a1eb-7f92120e8bac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1e3b16-403a-4561-9e67-a9c66e3f25dc", "sighting_of_ref": "indicator--be537a47-ee2a-41bf-bbc9-314835ab3353", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47de5190-9163-4928-b826-7a07c84d697c", "sighting_of_ref": "indicator--d3a0460f-551e-4210-98f5-c285ae0c5ee8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5744f0c-2bd0-4e6f-8e5a-2b2cf4889e62", "sighting_of_ref": "indicator--a2ab9a69-3fa5-4006-93ca-cf833d70aece", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1c3d11-ea63-4489-a683-55963c8fcdd4", "sighting_of_ref": "indicator--cad823a5-1f75-47a7-bc60-2873e35456cd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fa45b9-3127-43f3-9dce-cb4695971c99", "sighting_of_ref": "indicator--20b5d9cb-f7d5-4afb-bd13-94a6e41d1fc8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ce322f-f5eb-48a3-9763-5c95db7d8a4d", "sighting_of_ref": "indicator--d335aed6-d8a5-448f-a46a-6dc78e93cc20", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5139d5c-d4f8-44c2-a8d3-ff498c5762b9", "sighting_of_ref": "indicator--6b3c630a-c4ca-4796-882e-c69c09060309", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ca333f-a639-4bb2-987c-5f8ef59ad9c4", "sighting_of_ref": "indicator--b4f3d66e-226a-4bd9-8887-f45b6acabc2f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db2769d-8ee0-4fc4-9410-5fdd17e5c005", "sighting_of_ref": "indicator--6d3d78aa-987e-45ae-9b0c-7797cef76c2f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f101b8-2a33-4989-89be-803202c123b3", "sighting_of_ref": "indicator--8e4a7020-f079-429c-a257-c56b860086d1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1e5474-6dfe-40aa-aa25-1d0acd225e30", "sighting_of_ref": "indicator--add6ef56-86e7-4b61-b32b-e94d137fb8bc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c777e35b-2bbd-41c5-aba7-66d69efc041e", "sighting_of_ref": "indicator--add6ef56-86e7-4b61-b32b-e94d137fb8bc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba359a0c-cf8e-4729-b800-80a8897e562b", "sighting_of_ref": "indicator--5a6b145d-6cdb-4cca-863f-9ba048878d1d", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f1612c-7602-4445-9be5-4f9f54913a99", "sighting_of_ref": "indicator--d188f6f7-c2a8-4c57-a85c-c7d61ff500e1", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e5f5b2-ecca-46f9-8165-89094053f60c", "sighting_of_ref": "indicator--c7ccd8ea-8d8a-40bc-b224-ba8016d7c428", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf07c4d4-3eb0-4289-aa21-a66262d959b1", "sighting_of_ref": "indicator--6a683f06-86a6-490a-9a54-334295da1991", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13db3fba-1855-4f0f-b536-50abfe9dd5cc", "sighting_of_ref": "indicator--85b75711-cdeb-41cd-b625-510a0964a590", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf96c9ef-7931-46d6-8554-2fab62d0ff87", "sighting_of_ref": "indicator--e0088bda-086c-4503-9886-e73738fd5ee4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ccedc21-a918-4e1d-b968-a4357e592d61", "sighting_of_ref": "indicator--7ed664f3-5501-4ee6-b05d-10043a93e8e1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5168832c-664b-4ac9-b6d1-bf4e836155d8", "sighting_of_ref": "indicator--2fa7a707-ce9e-42fb-812f-67b305115d45", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44570fc2-f6ac-470a-92a7-0cb2ce329afc", "sighting_of_ref": "indicator--1b51e5c2-6bf1-4d08-a77f-e474c5a37706", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe570ec-7bd7-4cf0-aab9-2318e1565966", "sighting_of_ref": "indicator--2c48f1ab-d416-4dbc-aebb-4cb18c73b37f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc78b99-30ce-4059-a808-ad2400e553e5", "sighting_of_ref": "indicator--7c793226-7a69-4862-a4c5-34fd4007193f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd975944-831c-4d3b-9f16-6a21dabba5df", "sighting_of_ref": "indicator--7c793226-7a69-4862-a4c5-34fd4007193f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbcf108-e67c-4853-ae3b-7359d5f14316", "sighting_of_ref": "indicator--192e0251-de41-4768-9f80-cb8f58fee6ee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386f3b04-c769-4dc5-8550-1cb52f952752", "sighting_of_ref": "indicator--9a7b14d1-3191-49ff-b854-74a123b38788", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10d31ae-02ee-4595-90de-125d9b9f9aa9", "sighting_of_ref": "indicator--386b2f4c-0d26-4be0-94e8-1e5c3f8a576b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2d6da0-434d-42be-9b4d-16b813371b9f", "sighting_of_ref": "indicator--386b2f4c-0d26-4be0-94e8-1e5c3f8a576b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d79dce1-fed0-49b9-8134-f641ceb08411", "sighting_of_ref": "indicator--3b27cb1d-df7e-44bd-b925-cdeff0f4d6c2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b17d7bc-57b0-4717-9b40-1c55ce089c9f", "sighting_of_ref": "indicator--3b27cb1d-df7e-44bd-b925-cdeff0f4d6c2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4128c1dd-22a4-4861-bad5-42f7f691282d", "sighting_of_ref": "indicator--2b6e50d5-39f9-4e60-9eb0-bc0021fa6361", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e883de-6186-4a86-98ad-97fc48b87343", "sighting_of_ref": "indicator--79fcedde-f044-4359-b62e-7270f215391b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93ee90e-d4f1-4410-a284-5f6d18b0c265", "sighting_of_ref": "indicator--ab6665a4-5cb9-4615-93f0-7cf9119edff4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904baf82-f0fd-429a-aa31-83d19fe03105", "sighting_of_ref": "indicator--ab6665a4-5cb9-4615-93f0-7cf9119edff4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab516f5-c388-4235-9ab2-97807ea5d889", "sighting_of_ref": "indicator--c57d575d-8650-4820-968a-286a33ef11f5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705aa0ef-e9de-44fe-8876-0db1b81430d6", "sighting_of_ref": "indicator--c57d575d-8650-4820-968a-286a33ef11f5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2093d1a-2a6e-439f-9004-973589ade720", "sighting_of_ref": "indicator--c57d575d-8650-4820-968a-286a33ef11f5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ccc308-81d7-4759-bbef-c0e8d5752606", "sighting_of_ref": "indicator--8f9bf9f0-14f4-47f6-ad1e-eac8a5d8c1d5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d43c32a-70c2-4d70-85f9-70b5c1a1e351", "sighting_of_ref": "indicator--8f9bf9f0-14f4-47f6-ad1e-eac8a5d8c1d5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed197b5-d3f4-4ba1-b668-45769ccfda32", "sighting_of_ref": "indicator--e7737ae0-c965-44c6-834c-7542787aab5a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87cb4e9-cbaa-461c-aab7-eececb4dc8c5", "sighting_of_ref": "indicator--bdd29508-ded6-442f-a55b-e976fcd53136", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9863a8-bbc9-4737-9588-5e426ffa7b13", "sighting_of_ref": "indicator--a41c2863-c21a-4df7-bf11-e0e9d1114b7c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c618c4-4dee-431c-b896-50250fd66d7c", "sighting_of_ref": "indicator--40a36a47-adf3-49eb-b7ce-4ac76b872588", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421c0fea-4e70-4deb-8aa0-23f3e442b8ce", "sighting_of_ref": "indicator--33f407cc-5524-411e-90a0-f66deef75bf8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0a09de-9445-4207-bcb0-ba7adff5f1b2", "sighting_of_ref": "indicator--90e139c7-7115-4f4c-b142-979693bf7ecd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c678a0d-f572-4dd5-94a7-69362f5f5c52", "sighting_of_ref": "indicator--26c1daa1-a4fa-42e7-95df-693c54ccffff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b7201e-8009-46e6-be38-7bea31f5d3e2", "sighting_of_ref": "indicator--df350b5e-1d5f-4aab-aaea-e8351df9da40", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36033825-df1b-4ae7-b29c-aa0a25b3c29b", "sighting_of_ref": "indicator--ab29075c-ff66-4cb0-a96c-6e5026885f20", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb13dd5-92a4-4301-a813-b9a07027f502", "sighting_of_ref": "indicator--ab29075c-ff66-4cb0-a96c-6e5026885f20", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7abc176-67e6-4066-97c8-2ecc97272ee3", "sighting_of_ref": "indicator--10fb21ca-41c1-47da-a571-59cebeb64f1e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ccde9d-7a66-4ba3-a933-97d7fe7a0e62", "sighting_of_ref": "indicator--a1ddff5c-aa57-4696-bc73-b89305dc8fbd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754296e6-3fb2-410f-b79b-9f420199903e", "sighting_of_ref": "indicator--1ecacaed-a564-4570-aa69-1d8fc756deb9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9de9ed-a5ca-47ff-989f-6d5ec71ba1ea", "sighting_of_ref": "indicator--1ecacaed-a564-4570-aa69-1d8fc756deb9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c2fa35-1d9c-4d21-b6a2-b618e029263b", "sighting_of_ref": "indicator--64e8ad64-2ccb-4347-be7d-562a54a91e91", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a6c4a8-baf1-4ea7-b4c7-d54b57ebfe45", "sighting_of_ref": "indicator--64e8ad64-2ccb-4347-be7d-562a54a91e91", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b467ee-7072-4944-996d-0d6ff110067a", "sighting_of_ref": "indicator--29823620-787a-4eb3-87b7-67a5a51b613d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08419ba9-4690-4dd9-85c0-1d21ef9d9e85", "sighting_of_ref": "indicator--23fa43fb-9b58-449a-b100-0f1b8d23a9b4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac830bd-cccc-4af9-b6f0-c459a55d315d", "sighting_of_ref": "indicator--1a615de1-6a76-44fb-adfa-22cd77ad0f97", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e4e528-184c-49ad-a288-2bcedd656fc6", "sighting_of_ref": "indicator--3df9439a-7e38-465e-bce4-a7f355b38498", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99338df-a84e-410c-b60a-d6d7cf6c99b0", "sighting_of_ref": "indicator--bf8c188f-6bed-4236-9d04-4d4c747ec240", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82dd264-a3c8-432c-b82d-e28c53b29ea8", "sighting_of_ref": "indicator--14cf6be0-7198-447d-8756-86541521abb4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9883445-cb7c-4019-94aa-87408b49c575", "sighting_of_ref": "indicator--eb6c03fc-b706-41f5-9d1a-2d8edf09d5a2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcca700-4099-4446-8918-873d8e874288", "sighting_of_ref": "indicator--af1b71a4-e928-471c-8872-cae22a20522f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c36f0f-0765-44fe-b098-df63552dec1f", "sighting_of_ref": "indicator--1c3109e6-8a43-4a59-9bbb-593f71f3a901", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a864c8-d09d-4435-94f6-60eab369841e", "sighting_of_ref": "indicator--5ac16dd8-a978-4d1a-b07f-c185a45e0f49", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332caa6c-50d6-47fc-ad7d-7ceaeee34c37", "sighting_of_ref": "indicator--68150efd-fd1d-4127-8c2e-8273ec96a50e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82bd8d5-ced6-40b6-97e4-174da57e09f1", "sighting_of_ref": "indicator--eea1f633-e9ef-46bd-9295-849a4661ddda", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc7b536-796e-4ac6-adc2-236ecc2def95", "sighting_of_ref": "indicator--02d6d997-0023-45e5-b808-b5969239a397", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30084bb8-a1b0-4935-97b2-e87762c01e60", "sighting_of_ref": "indicator--d800c2e4-699b-452e-80be-672b0f10862e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213f2abe-6b7a-4b08-b2eb-94acaf77c08a", "sighting_of_ref": "indicator--6a8f287a-1294-410d-bb22-dbf6a5b7edd3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d11719-35f6-4979-8210-28e586282467", "sighting_of_ref": "indicator--12199e46-3442-4d86-b37e-368b8f67786a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5921c9fc-f1ac-4f86-b9c6-0e781d1d9193", "sighting_of_ref": "indicator--7f9b44e4-a25a-4f8d-99cc-ea6449bcabe1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80395f47-9a46-4c25-8928-0d71f1e3c63e", "sighting_of_ref": "indicator--7f9b44e4-a25a-4f8d-99cc-ea6449bcabe1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbab5cc-1cbb-43e8-98aa-9b89dd49ac18", "sighting_of_ref": "indicator--481bc477-a535-4bbd-94b5-2aa54703420a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0737c431-b482-47be-ba98-407eb9950a29", "sighting_of_ref": "indicator--07b536cc-7946-4104-b452-317cda78b434", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfc65cf-80d9-48f0-b9bd-8851352cbfbd", "sighting_of_ref": "indicator--4aba3fbd-f8a4-42a8-a602-109cb360c394", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e9002f-b208-4d9c-897f-0ba91736b506", "sighting_of_ref": "indicator--5ca143e1-5de4-4f8a-b5ef-41dfcce58ac2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ced060-39c1-4951-b004-2db760dfbdec", "sighting_of_ref": "indicator--f803dbf3-502c-4b4f-a210-7c64f39c37e8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e98dae-830c-4e56-905b-8c93b931393c", "sighting_of_ref": "indicator--26fd1885-dd86-4b3a-800f-0259df001616", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea89053-ae2e-4c97-998d-acc3952dbb28", "sighting_of_ref": "indicator--96b83228-a204-458a-a761-26d66886bd50", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90413a3-d21e-4e8e-9e88-9bca3b47eead", "sighting_of_ref": "indicator--96b83228-a204-458a-a761-26d66886bd50", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97d6e78-68e6-4e3e-8ee6-8a5c5ccd9e98", "sighting_of_ref": "indicator--c696bc5f-83a4-4612-bbcb-845436e16398", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37675fec-ccea-4b0a-b8a8-09e11c6386e0", "sighting_of_ref": "indicator--e2e61aad-e38f-4f55-b9af-ab21ed345857", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23249ed9-378d-461f-9c96-90935a970a0e", "sighting_of_ref": "indicator--e2e61aad-e38f-4f55-b9af-ab21ed345857", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792525ab-f129-43d6-99e7-4931722a93a3", "sighting_of_ref": "indicator--7b2f1ae8-ac17-4cf7-a91a-e71473db6de4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d7c5ef-faa4-4a36-98e8-3a6db2a8962d", "sighting_of_ref": "indicator--7b2f1ae8-ac17-4cf7-a91a-e71473db6de4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c821b280-3ec4-420f-9024-1c1c398425d4", "sighting_of_ref": "indicator--655de51a-9297-4db9-bae3-380d813dea83", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5b7076-ad65-4999-baef-909d7b42d710", "sighting_of_ref": "indicator--655de51a-9297-4db9-bae3-380d813dea83", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523ff3b0-d1f0-44f7-9abc-f33c918608b0", "sighting_of_ref": "indicator--655de51a-9297-4db9-bae3-380d813dea83", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc28e828-b5ae-4885-8929-74a1d2e5259c", "sighting_of_ref": "indicator--4b985cd7-ead9-4d72-b8a6-3915ab757864", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d2ec62-0114-4378-bd52-6cd9a20393ed", "sighting_of_ref": "indicator--4b985cd7-ead9-4d72-b8a6-3915ab757864", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0c9ca3-4140-41b2-84fb-2be563a164dc", "sighting_of_ref": "indicator--0972d1bc-a655-413f-a0d7-f3bb4cbdb11c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16ff3ba-f597-4bea-a7e4-914dad9fed4b", "sighting_of_ref": "indicator--0972d1bc-a655-413f-a0d7-f3bb4cbdb11c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4c0e25-2993-4c1e-b44c-2ce54690a834", "sighting_of_ref": "indicator--0972d1bc-a655-413f-a0d7-f3bb4cbdb11c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc694db-498d-4583-b4ff-8a4279a0acb8", "sighting_of_ref": "indicator--c76378e1-e700-46b9-ad31-58c3633a086f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6da660-b954-460e-ac4e-6d7646110e68", "sighting_of_ref": "indicator--0accca65-bb5b-43b4-bd5a-1a267ed495b9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602a72fb-ff9e-42a1-8f48-af40312f915d", "sighting_of_ref": "indicator--0accca65-bb5b-43b4-bd5a-1a267ed495b9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d217aa-0901-41f3-8869-702d7dc62e28", "sighting_of_ref": "indicator--0accca65-bb5b-43b4-bd5a-1a267ed495b9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c7bc81-ea8a-438b-829a-1dcb7307eb10", "sighting_of_ref": "indicator--c2e7d50b-c125-4c99-822d-3733051d1403", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d76098-4299-4d25-abe5-f35813164272", "sighting_of_ref": "indicator--194f6d0f-7cf3-4604-a061-462f60b62895", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0704f33-1c89-403a-9978-e8a5591ee9e9", "sighting_of_ref": "indicator--c5f1f233-ebd3-4aba-95a9-44a21d0ebc4d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c374a60-c85e-4e12-aadb-8c6d19679b61", "sighting_of_ref": "indicator--c5f1f233-ebd3-4aba-95a9-44a21d0ebc4d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3ce94f-a9bf-43bb-83e6-1d905b827f00", "sighting_of_ref": "indicator--7457f712-aba0-4704-bff8-9f5d096aa30c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b569939b-8539-45fe-ac6f-54815ba02ad4", "sighting_of_ref": "indicator--99abac7b-d2dc-4b2c-912c-1638dff602f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fc0109-5572-4d98-8b39-977d7d5b597a", "sighting_of_ref": "indicator--e3a31343-8340-42eb-a2f2-1acfa3f719d8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175cf1e7-0b78-47bc-a1e1-d3655a50a0c7", "sighting_of_ref": "indicator--6cf18b35-9057-4e57-9980-30fbe4d18976", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43236d8e-1d2e-4b9c-aa5f-8b94c5d5f37d", "sighting_of_ref": "indicator--e3e2628c-8a0a-4b21-9576-e214700eda81", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563f313b-34b3-4738-94f5-32d4092a275c", "sighting_of_ref": "indicator--e0c47058-beb9-40cb-8d4b-3df628337b6c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf248569-45a9-4f4e-86a4-fbb41244d505", "sighting_of_ref": "indicator--7008a68c-e275-458f-be5e-0fc0c515a8a2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140b438e-471b-4084-bb33-7dfed16f70e7", "sighting_of_ref": "indicator--86ad887f-dfe0-4454-a02b-c49f45fc6208", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421c0946-616c-4b3a-b80f-58bca1354452", "sighting_of_ref": "indicator--651f855f-e4f8-46b9-b53e-4afc39b77eb6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766e95e4-a440-4a7a-b418-2f9e8b1df8b2", "sighting_of_ref": "indicator--14260a87-4719-4408-939d-c9999ca94fcd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74917989-0da3-466a-8dcd-5f022275bceb", "sighting_of_ref": "indicator--14260a87-4719-4408-939d-c9999ca94fcd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12976d8f-fb95-4434-b674-e58174a0035b", "sighting_of_ref": "indicator--14260a87-4719-4408-939d-c9999ca94fcd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e68281-df10-4e9e-bf9f-04cbc1c8260b", "sighting_of_ref": "indicator--3be95516-2ca2-45c7-9847-f2be09df5607", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f059914-fd79-4aa9-b169-b8fdf1c200f4", "sighting_of_ref": "indicator--68988554-fd11-4c4b-9693-ed0da44c02b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c1f1d5-d3ea-4ba2-a720-f1846cb5f14b", "sighting_of_ref": "indicator--f7e553f1-4bb8-4987-8161-8fae2b9689ae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fba298-5b77-403c-85fa-deeaeb9e438e", "sighting_of_ref": "indicator--eb24e96f-e494-4937-ba8b-4a5d7493b720", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad167633-6474-41e9-be22-526a2ed07d8e", "sighting_of_ref": "indicator--bebbb123-5b6e-44c8-9cda-2ed5bca8058e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0b81b2-af05-4d34-8634-c21bd6d6777b", "sighting_of_ref": "indicator--0d10efd6-ada5-403a-931c-69da25220070", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f169b4-c145-4261-bf2d-89aa9b53f8d7", "sighting_of_ref": "indicator--2af98e25-6f8d-4024-a3ec-4f1aef6a9688", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf1b5d4-ed3b-4b4b-9928-4dd9cec1cf78", "sighting_of_ref": "indicator--89e4da04-82ce-40b7-bcd2-15604efbbfae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bb9b3c-53cf-4df7-b683-ca264bbac20d", "sighting_of_ref": "indicator--a2e715a2-6789-40ed-b8b7-45564dd67aec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eddf86b-038f-463b-bc05-8353d70e909a", "sighting_of_ref": "indicator--d751746d-99a7-45d2-8068-aed8273b266e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234dc45e-5412-4a49-9a33-10505b25f0be", "sighting_of_ref": "indicator--746d1e12-b7c6-4992-b9ed-f6e37a8b3715", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c2d69e-4fcd-40e4-a8ad-fb379d97cb22", "sighting_of_ref": "indicator--746d1e12-b7c6-4992-b9ed-f6e37a8b3715", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd432727-4a2d-4c8f-80c9-812dd6a4693c", "sighting_of_ref": "indicator--746d1e12-b7c6-4992-b9ed-f6e37a8b3715", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6438fef-f210-4a5c-b0e9-ff8bce89551d", "sighting_of_ref": "indicator--168a788b-74f3-4f13-b988-41be0e7ab047", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074c968f-9fdb-4fa1-8e2b-f03cc963c580", "sighting_of_ref": "indicator--c1f20827-87c9-4f60-861e-49d7b0dd1324", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e83e3a4-1608-43c8-a353-94e89f46ac24", "sighting_of_ref": "indicator--c1f20827-87c9-4f60-861e-49d7b0dd1324", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8906a3d9-1188-467b-9b44-60b7ebd489ff", "sighting_of_ref": "indicator--ccb507b3-5710-4bb1-8145-4942df93a56f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bae1b2b-4beb-49bc-85bd-59a150d55d6f", "sighting_of_ref": "indicator--ccb507b3-5710-4bb1-8145-4942df93a56f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18057c0-7da8-44bd-b10d-c41c65205ea9", "sighting_of_ref": "indicator--fae56c96-2cbb-462e-aaa0-e39cfddecf24", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8825df8-01f4-45d6-afa1-b13521877016", "sighting_of_ref": "indicator--951625ca-66e7-424a-9041-dc86b0444a48", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62317232-b025-4927-b9a9-d0d4781997fd", "sighting_of_ref": "indicator--4c967bd9-a91e-4926-a4b5-82777251f761", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe5645b-d050-4e2b-ba14-8ecf11d11f0d", "sighting_of_ref": "indicator--4c967bd9-a91e-4926-a4b5-82777251f761", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930025d4-a3ab-45a1-8d4c-a156b2e57112", "sighting_of_ref": "indicator--253b66cd-9977-4d94-b13d-a320fcc604e7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbc912b-1fd3-4042-b86e-ee8fd6366dc3", "sighting_of_ref": "indicator--2ecbba66-9d58-4539-82b6-5848b46efc12", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838fcf8c-93bb-4d01-932e-12e834e8fc8f", "sighting_of_ref": "indicator--0c8add02-fcbf-4cd2-b2fb-6e2878793ac9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e706c893-b5c0-407e-9443-65974185367a", "sighting_of_ref": "indicator--d67cabaf-9425-4315-9e4f-080f30c48610", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42607e9b-9d4d-46b0-8912-f0e22ea88644", "sighting_of_ref": "indicator--443a728e-775b-443f-900e-409e39abb971", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c5d8b1-a00f-4fd7-be52-40fb41b853d3", "sighting_of_ref": "indicator--2c2340e9-e70f-4168-9758-f1a688233c61", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4df1d0-bcff-4ad2-ab87-372814228bfa", "sighting_of_ref": "indicator--5fa6b152-3597-466d-b218-cb433f62d864", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d49055-c102-44a7-b816-58056af9f977", "sighting_of_ref": "indicator--a91072a7-61cb-48f4-9901-0a443b1e3c5e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a2f83b-4a8a-4cad-9c01-c72ed8bb1b20", "sighting_of_ref": "indicator--845f9be9-e446-448c-ac18-3b18c84bba3b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9a3c8f-5dfc-4a10-87ac-769bfa70b110", "sighting_of_ref": "indicator--11edc5c1-6cd9-4059-9b9d-5ee0bb96815f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8bb4ab-1f03-42b7-bd9a-01c14e6bb98b", "sighting_of_ref": "indicator--1346cc80-1b77-4cc3-a0f5-708ad0aac9f4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31245d14-2cdd-46d2-9e09-4536f3a1ff3c", "sighting_of_ref": "indicator--a408298c-886a-4f20-9dc4-7b6f1c8c1bb6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86e1fe5-3d1b-41f8-aa49-be9aed4d6bb2", "sighting_of_ref": "indicator--444867ca-c088-416d-a723-9fe28b8e0913", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18aaa20b-8fbb-4bc9-b025-4f5eb09fa5b8", "sighting_of_ref": "indicator--3184025b-b801-4afc-8955-23a8d2d40e89", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18021a72-1d7b-4d4c-b978-f1c052fac3d2", "sighting_of_ref": "indicator--594f11ea-a2bf-4e53-890d-237f336a025f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7be49a-c52c-4f24-ad93-6cf3ef53e5c8", "sighting_of_ref": "indicator--3efb236d-4f31-44ac-b4c1-b43e0e03f946", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d2f366-e3b7-4d01-ae71-ff8583f95fbe", "sighting_of_ref": "indicator--3efb236d-4f31-44ac-b4c1-b43e0e03f946", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebdb3c7-2b92-4bb2-9a7d-6b7276876fa6", "sighting_of_ref": "indicator--3efb236d-4f31-44ac-b4c1-b43e0e03f946", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d240c8-d898-42a8-958b-d2a5414b3aae", "sighting_of_ref": "indicator--e035787b-8af4-4534-b624-acee5736e747", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d21a335-f55a-412f-96ff-7631b17cd227", "sighting_of_ref": "indicator--e035787b-8af4-4534-b624-acee5736e747", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2b09ea-5718-4846-b75c-3af51d2b177f", "sighting_of_ref": "indicator--e035787b-8af4-4534-b624-acee5736e747", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe5d927-d203-47cc-977e-95abb83927a8", "sighting_of_ref": "indicator--24578ec6-28b5-4726-b9cd-caed785542ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a45e4d-1dc1-4ca7-b5cf-65599aad34af", "sighting_of_ref": "indicator--24578ec6-28b5-4726-b9cd-caed785542ff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0c181f-7796-4f28-9052-429e55b072b8", "sighting_of_ref": "indicator--24578ec6-28b5-4726-b9cd-caed785542ff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ca1a01-7674-41d2-ab52-4e73defea0fa", "sighting_of_ref": "indicator--7bc8fb51-8d30-40fc-b7b9-2c15decbeff4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcd9c6c-d7e3-477d-9e88-b7c61c4e8c4d", "sighting_of_ref": "indicator--7bc8fb51-8d30-40fc-b7b9-2c15decbeff4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51742654-e77c-49c3-a268-abed7c37773d", "sighting_of_ref": "indicator--7bc8fb51-8d30-40fc-b7b9-2c15decbeff4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b8523d-067e-4bd1-ad3a-b8edae5a591d", "sighting_of_ref": "indicator--e03bc10e-1359-4581-8b44-6422c5b7a444", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae00fbb-1a5b-40de-a2e1-7937398f4c55", "sighting_of_ref": "indicator--41814d8f-a89b-48ad-a978-199699e407c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3993a86-74e3-499f-bfd9-5464be6bde40", "sighting_of_ref": "indicator--41814d8f-a89b-48ad-a978-199699e407c6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccbc5ba-c489-4dd0-bf1b-0f933eb68a77", "sighting_of_ref": "indicator--41814d8f-a89b-48ad-a978-199699e407c6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93fc170-5448-425a-ae03-01732280f349", "sighting_of_ref": "indicator--781da563-ea88-45a2-a5b8-3550286efe8c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4c3c72-13f9-4740-8137-77c495c6d679", "sighting_of_ref": "indicator--781da563-ea88-45a2-a5b8-3550286efe8c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c956a0-6c56-40d8-98de-190b748b4092", "sighting_of_ref": "indicator--781da563-ea88-45a2-a5b8-3550286efe8c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77e061c-a0d7-45a3-a2ad-d13cb2a4cc62", "sighting_of_ref": "indicator--9c937675-33f2-4e81-9dc2-02a0a7ab301d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc5ea28-8c58-4077-9efb-d39af83aece1", "sighting_of_ref": "indicator--5ba8d9c0-ce21-40e0-b0c4-b135acf28e95", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71eb75d2-e8cf-4311-aac2-4ab4d7ea5366", "sighting_of_ref": "indicator--5ba8d9c0-ce21-40e0-b0c4-b135acf28e95", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70c689a-e733-4546-b047-5759582bca07", "sighting_of_ref": "indicator--5ba8d9c0-ce21-40e0-b0c4-b135acf28e95", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa15b5c0-9548-4ecf-8c50-e516d2c755a8", "sighting_of_ref": "indicator--e2fea3bd-d557-4f44-9ed5-45b3cc8c4bb3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6758fa0d-783f-41e5-a781-eea0eebe6b42", "sighting_of_ref": "indicator--e2fea3bd-d557-4f44-9ed5-45b3cc8c4bb3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967c27bb-6cfc-4801-bf77-c29de2f35ae9", "sighting_of_ref": "indicator--e2fea3bd-d557-4f44-9ed5-45b3cc8c4bb3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7819be08-2b01-4595-8d33-3520b1274e38", "sighting_of_ref": "indicator--077b75db-646d-4c84-bef8-ed4ccbfbda22", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff35b910-9bce-4633-99df-6e5ebe5d0592", "sighting_of_ref": "indicator--077b75db-646d-4c84-bef8-ed4ccbfbda22", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51921d9a-2c25-4377-8dc9-65e6d41ba65f", "sighting_of_ref": "indicator--077b75db-646d-4c84-bef8-ed4ccbfbda22", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b517cf6-7f0d-4bb4-898d-c6aab714bfc7", "sighting_of_ref": "indicator--e3fdb459-a095-47b6-b665-51ba445ae885", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8ff213-e07c-45dc-9c1f-c9890d7a3ee7", "sighting_of_ref": "indicator--e3fdb459-a095-47b6-b665-51ba445ae885", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b167c0b-c4e4-40c0-a3da-cdf29dcf9f39", "sighting_of_ref": "indicator--e3fdb459-a095-47b6-b665-51ba445ae885", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd24b83-0e99-451a-9778-9d763c05cf18", "sighting_of_ref": "indicator--dcce8085-9b0f-4ca1-bc4e-caf58881f793", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba8c4da-11f1-4439-9d84-0fdc4130cc34", "sighting_of_ref": "indicator--dcce8085-9b0f-4ca1-bc4e-caf58881f793", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fda5fa2-b63b-4bdb-9de7-a5eb6d638f1b", "sighting_of_ref": "indicator--dcce8085-9b0f-4ca1-bc4e-caf58881f793", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40208904-a7ad-4b77-a505-1a44c3b735b9", "sighting_of_ref": "indicator--8a9a6e0e-cd55-4428-a47d-3884d58440e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc560d5-d0b8-4148-bca2-29a3c349ea6c", "sighting_of_ref": "indicator--8a9a6e0e-cd55-4428-a47d-3884d58440e7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ab3172-de71-48f8-89db-30b0e63ed98d", "sighting_of_ref": "indicator--8a9a6e0e-cd55-4428-a47d-3884d58440e7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af36934e-08bc-4ad8-a39e-72bd11a4315c", "sighting_of_ref": "indicator--dec1b9a9-9d5b-4f66-9694-0f797409671a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d20c8c9-90cf-4c49-b5a5-13e9ef572aa3", "sighting_of_ref": "indicator--dec1b9a9-9d5b-4f66-9694-0f797409671a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66345986-3fa4-4d92-8bf6-c9015e4416ce", "sighting_of_ref": "indicator--dec1b9a9-9d5b-4f66-9694-0f797409671a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc750a3c-fc3c-4129-ae36-d4eac21cdc87", "sighting_of_ref": "indicator--1242ee6c-394c-4c35-ae79-983c9cd858fd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019641fb-1120-44ac-83ea-f60ff06a0e26", "sighting_of_ref": "indicator--a0b41f07-cba9-4c60-a784-0e06cba19fa2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7dba1bd-1b05-4eaa-9535-2c67b1c91b58", "sighting_of_ref": "indicator--a0b41f07-cba9-4c60-a784-0e06cba19fa2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a99a20-3b6f-44c3-9750-3dbf7c882189", "sighting_of_ref": "indicator--a0b41f07-cba9-4c60-a784-0e06cba19fa2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55ddb0d-3d50-4cd3-83a5-d8dcfe906a25", "sighting_of_ref": "indicator--217f1cb3-9c92-4cd6-b7d7-30a05e36daee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a9a473-35f6-40e3-88e2-44f9d23cd1d6", "sighting_of_ref": "indicator--217f1cb3-9c92-4cd6-b7d7-30a05e36daee", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41477f06-17d7-42a0-9433-add6c4a6689b", "sighting_of_ref": "indicator--217f1cb3-9c92-4cd6-b7d7-30a05e36daee", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97630eb-bb63-4a89-839f-64a1a76915be", "sighting_of_ref": "indicator--51d381ea-7196-4788-b202-45c8a059321f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8add73-d2c8-4e85-9cae-130a4ca74f4e", "sighting_of_ref": "indicator--51d381ea-7196-4788-b202-45c8a059321f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bba424a-5cdd-45fc-bbb1-94e78564264b", "sighting_of_ref": "indicator--51d381ea-7196-4788-b202-45c8a059321f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ce88a7-b178-41ab-bc6c-cd580d29bc94", "sighting_of_ref": "indicator--73abcbdf-175a-42bd-825b-911d02e6d447", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0d417c-02da-420a-9ba6-f1eadf5ad537", "sighting_of_ref": "indicator--73abcbdf-175a-42bd-825b-911d02e6d447", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143e0621-1f55-4ad8-8f76-d0f559099193", "sighting_of_ref": "indicator--73abcbdf-175a-42bd-825b-911d02e6d447", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d756862-a892-4580-8dc4-f11986b54bf0", "sighting_of_ref": "indicator--6a62fae3-f726-47e6-96e3-b3eb8f75a8a2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771f5ef4-29ba-4eb5-90c4-86da164b2d14", "sighting_of_ref": "indicator--6a62fae3-f726-47e6-96e3-b3eb8f75a8a2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1bff63-d587-4ec4-88bf-881cdd84809f", "sighting_of_ref": "indicator--6a62fae3-f726-47e6-96e3-b3eb8f75a8a2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3402a5-a115-49ca-a76e-d96828b69d7d", "sighting_of_ref": "indicator--b4cae8a7-396b-4f09-905b-93ed36466390", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1532211e-93a5-47b7-8456-4066718b3109", "sighting_of_ref": "indicator--b4cae8a7-396b-4f09-905b-93ed36466390", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c515f515-65fa-4f16-b2f9-b964e2a1a1c3", "sighting_of_ref": "indicator--b4cae8a7-396b-4f09-905b-93ed36466390", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294ac951-3335-42e6-9b8d-1ddb394599bc", "sighting_of_ref": "indicator--0ab01083-ce01-40ba-8793-ab77e84a818a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a06d5cb-57b2-46a4-8e48-3c1317c8837c", "sighting_of_ref": "indicator--0ab01083-ce01-40ba-8793-ab77e84a818a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d1c402-a33e-438d-a409-18d58cff72ba", "sighting_of_ref": "indicator--0ab01083-ce01-40ba-8793-ab77e84a818a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919b515e-9050-4fd6-85bd-706ab5ad187d", "sighting_of_ref": "indicator--39ed087c-cc03-45d0-9a95-8c5c727dee21", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203603a7-87e2-476d-a32f-a591b7ce43fb", "sighting_of_ref": "indicator--39ed087c-cc03-45d0-9a95-8c5c727dee21", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30e8b2d-9057-4822-819f-d283aefcd386", "sighting_of_ref": "indicator--39ed087c-cc03-45d0-9a95-8c5c727dee21", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd641e8-195f-49c4-9392-c8022e200897", "sighting_of_ref": "indicator--6a2efb49-dc93-4fe3-a8c6-cc3b4c149b27", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25139798-295c-4791-a5a1-ae3037b9abcd", "sighting_of_ref": "indicator--6a2efb49-dc93-4fe3-a8c6-cc3b4c149b27", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b54492e-c87e-4815-8acc-0249e7a90691", "sighting_of_ref": "indicator--6a2efb49-dc93-4fe3-a8c6-cc3b4c149b27", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1406044c-1294-41fe-8267-da6db0750a50", "sighting_of_ref": "indicator--24d61881-b5ab-4a50-8d2a-97ba0202697a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdfa89b-1d30-4f0f-87f0-9d036e05e97f", "sighting_of_ref": "indicator--24d61881-b5ab-4a50-8d2a-97ba0202697a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753d0e18-6b25-499b-b246-d623a2f845af", "sighting_of_ref": "indicator--24d61881-b5ab-4a50-8d2a-97ba0202697a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db8eab5-ff0b-4ea3-9d76-e45945bc0e3b", "sighting_of_ref": "indicator--156b829a-32e8-44a7-ab42-66469d913096", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d16350e-fd82-451c-907e-c9eb348fc961", "sighting_of_ref": "indicator--156b829a-32e8-44a7-ab42-66469d913096", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ab0283-01cd-4260-8adc-ea986ba3a1e3", "sighting_of_ref": "indicator--58cdf83d-9eec-4213-b5fc-1de183cc8977", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d3df5b-9a08-4340-894c-fb4e55361fc9", "sighting_of_ref": "indicator--32496645-1f65-4275-9fba-8724980397b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061e028a-896f-4746-abd8-8935582daf31", "sighting_of_ref": "indicator--eba6a419-d175-491c-922a-ab380379daba", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d746c695-e128-42c9-9ad6-8a9fc1fb4608", "sighting_of_ref": "indicator--eba6a419-d175-491c-922a-ab380379daba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b1410a-d073-49a7-9213-abecc2871aaf", "sighting_of_ref": "indicator--eba6a419-d175-491c-922a-ab380379daba", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0826ccf-4429-4fe0-b442-b13fee236318", "sighting_of_ref": "indicator--55e9fe27-44bc-45d2-b5e6-0ef136471960", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae748d3-33af-4b07-8ee0-3d65e4444260", "sighting_of_ref": "indicator--55e9fe27-44bc-45d2-b5e6-0ef136471960", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24564513-acb9-4593-aabd-632c8436784b", "sighting_of_ref": "indicator--55e9fe27-44bc-45d2-b5e6-0ef136471960", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492fbc73-9a73-42fc-a860-5c96b8465994", "sighting_of_ref": "indicator--648b4ea0-cd6f-4582-899a-a3fff232143a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5885a1f2-6716-4e73-8111-56e0ca824d03", "sighting_of_ref": "indicator--648b4ea0-cd6f-4582-899a-a3fff232143a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51488b16-a7ea-46e4-9c9f-3f7039ce940b", "sighting_of_ref": "indicator--648b4ea0-cd6f-4582-899a-a3fff232143a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f2da99-8136-44de-ad48-a757b8a26c6c", "sighting_of_ref": "indicator--8ee87fa4-29cd-434e-a65f-5b4566dd290b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5737463a-9eee-4f2f-bc00-9ccc672bc713", "sighting_of_ref": "indicator--8ee87fa4-29cd-434e-a65f-5b4566dd290b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788f4648-5f33-41f5-96e7-16a21ada5a79", "sighting_of_ref": "indicator--8ee87fa4-29cd-434e-a65f-5b4566dd290b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70947f01-63be-4548-a647-fdf0a615f24e", "sighting_of_ref": "indicator--90407b79-325e-41b4-985c-8edd662d392f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf91312-72d9-4058-b8c4-85fb3d036274", "sighting_of_ref": "indicator--90407b79-325e-41b4-985c-8edd662d392f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84169f6f-5109-4c87-800b-a775a26cb1e0", "sighting_of_ref": "indicator--90407b79-325e-41b4-985c-8edd662d392f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1263ab-b436-4a23-91ec-7593fc682c4b", "sighting_of_ref": "indicator--4b26da89-8ab4-4426-b33a-376468afc1c3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e715e058-8b24-41c3-a14e-e927741ddea3", "sighting_of_ref": "indicator--4b26da89-8ab4-4426-b33a-376468afc1c3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753c83be-2fd7-4952-91f1-ac912b0ab9b8", "sighting_of_ref": "indicator--4b26da89-8ab4-4426-b33a-376468afc1c3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038a17a3-9a57-41a0-b386-86fe15ca1bb8", "sighting_of_ref": "indicator--5917d584-0c1b-4a4b-b985-eacd089ac444", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6697eb-55bd-4a75-a8ff-f47e6cde0b8d", "sighting_of_ref": "indicator--5917d584-0c1b-4a4b-b985-eacd089ac444", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0363a0bf-3a9b-4a74-ad62-346c8a22c6ac", "sighting_of_ref": "indicator--5917d584-0c1b-4a4b-b985-eacd089ac444", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95085dba-466d-4ea9-ba69-5323aa6254a4", "sighting_of_ref": "indicator--702221ab-a5bb-440d-99d3-ebdd2ec4bda2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb19af90-18d1-4c70-a7b2-ba9ac9e49418", "sighting_of_ref": "indicator--702221ab-a5bb-440d-99d3-ebdd2ec4bda2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e211ef4-7d26-4e43-a4b2-7e493ca192aa", "sighting_of_ref": "indicator--702221ab-a5bb-440d-99d3-ebdd2ec4bda2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea2699b-552b-47bc-a5d0-9ec196fbd5c1", "sighting_of_ref": "indicator--75f263fe-0aaa-4fb1-bbec-03548dfd966c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4cb778-fa13-43c3-8211-c45dc6c7c031", "sighting_of_ref": "indicator--ea7d2688-ad25-46a3-bf75-e1ec2fd3e901", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd4548a-4f8d-4b44-b8b2-5af8d940d0cf", "sighting_of_ref": "indicator--9732e698-1aa5-4523-9e13-50f43e4ee469", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52ef02e-92d9-411f-80a7-a18ff339ad57", "sighting_of_ref": "indicator--86bb515f-76dc-4a23-a37a-0edcdb01c2f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3d1da3-0cbf-402e-9245-fccb0b9a5c9a", "sighting_of_ref": "indicator--86bb515f-76dc-4a23-a37a-0edcdb01c2f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3370950-8d24-4d5b-baf3-455d8a18b4fa", "sighting_of_ref": "indicator--da02d5f6-bb28-4374-9a31-8cd5d7e27419", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d9618c-1d30-4796-9b81-2ba5689a95d9", "sighting_of_ref": "indicator--a667e4da-4368-4e7c-bcad-64698d76b50b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881e6e36-0bcf-463e-9ed8-509a1caac02a", "sighting_of_ref": "indicator--501535e2-d7bc-42cf-972f-2cfe5dfd63dc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ea2e13-8504-4b8b-90de-3bd3934cd4d7", "sighting_of_ref": "indicator--a0975fe8-7209-4efd-84d1-b6b694643e90", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9e3c56-0240-492f-8149-75b57e13a6f0", "sighting_of_ref": "indicator--a0975fe8-7209-4efd-84d1-b6b694643e90", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5454a77e-1042-4340-81c1-2e23ab13d48f", "sighting_of_ref": "indicator--a0975fe8-7209-4efd-84d1-b6b694643e90", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88890904-1b41-43f3-823c-976767143a38", "sighting_of_ref": "indicator--2c065215-a27a-4b46-b858-b179a66b1454", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f31381-821f-45d7-ad11-dd5ecdb2b002", "sighting_of_ref": "indicator--2c065215-a27a-4b46-b858-b179a66b1454", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04171b8-0b78-413c-a91f-e1113d434eab", "sighting_of_ref": "indicator--2c065215-a27a-4b46-b858-b179a66b1454", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63486bec-8bf7-4c69-beac-69db5abeefca", "sighting_of_ref": "indicator--22175c4b-af9e-4b2d-8eeb-6caca2a21528", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f399ed6f-9fc2-4f72-9d9b-cf27bb53cf11", "sighting_of_ref": "indicator--22175c4b-af9e-4b2d-8eeb-6caca2a21528", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855b17f5-7f6e-4bdb-b289-74786a25ac84", "sighting_of_ref": "indicator--22175c4b-af9e-4b2d-8eeb-6caca2a21528", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace82365-7c29-4e7e-8197-f4c71c14ca2f", "sighting_of_ref": "indicator--eeec2f5f-a7a6-404c-a8fb-ab3df0b74493", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4e2120-1d01-47ae-adf7-1492086856e8", "sighting_of_ref": "indicator--eeec2f5f-a7a6-404c-a8fb-ab3df0b74493", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10e6592-ec07-4638-b8ab-e6c260fd8794", "sighting_of_ref": "indicator--eeec2f5f-a7a6-404c-a8fb-ab3df0b74493", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf834694-9f62-4810-8eca-557e604d8ffa", "sighting_of_ref": "indicator--3e7bbcf2-6c99-4dce-88fe-48f5e5b280ae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c12fe66-b8d3-4d8e-bd3a-5d254f5292ad", "sighting_of_ref": "indicator--3e7bbcf2-6c99-4dce-88fe-48f5e5b280ae", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf8f29a-fa19-4a31-b313-f7e118778de1", "sighting_of_ref": "indicator--3e7bbcf2-6c99-4dce-88fe-48f5e5b280ae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40b0ece-04be-40fc-a1d7-e2e45612b2b8", "sighting_of_ref": "indicator--cebda886-1c69-4e38-9662-b0321de45be3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a650ba-cd4c-4d70-b44a-62defa7f4702", "sighting_of_ref": "indicator--cebda886-1c69-4e38-9662-b0321de45be3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc969bc0-623c-4278-9e2a-da7589d61f9f", "sighting_of_ref": "indicator--cebda886-1c69-4e38-9662-b0321de45be3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a83cc7-15c0-49db-8a5c-28ac48d46aeb", "sighting_of_ref": "indicator--a64e7209-d180-4938-96d5-29e8313757f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6020e38-30ca-49db-b690-cf3c40ad3b69", "sighting_of_ref": "indicator--a64e7209-d180-4938-96d5-29e8313757f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94480f8-a39d-4134-bda6-31d1203c3230", "sighting_of_ref": "indicator--a64e7209-d180-4938-96d5-29e8313757f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b38965-d8ed-47cd-ba48-ad4ef67c788d", "sighting_of_ref": "indicator--08930e56-dea8-45ca-9973-04a65a50d6ea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7112af8-d2c0-40fe-b42e-c14a451ffe40", "sighting_of_ref": "indicator--08930e56-dea8-45ca-9973-04a65a50d6ea", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c240e01a-fdbc-44f4-90fd-193b55d62ea0", "sighting_of_ref": "indicator--08930e56-dea8-45ca-9973-04a65a50d6ea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ccdb2c-9ab8-4935-a0af-0991584822dc", "sighting_of_ref": "indicator--777893a3-4a19-4227-bca6-80f0a6982194", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5881d8-a79e-4ec8-b18d-59ddcc31fe14", "sighting_of_ref": "indicator--777893a3-4a19-4227-bca6-80f0a6982194", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6481aad6-a79a-48ea-9c20-b5e0f5a15bd6", "sighting_of_ref": "indicator--777893a3-4a19-4227-bca6-80f0a6982194", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd58ef11-b213-447f-b124-178dcff6c72e", "sighting_of_ref": "indicator--ce2606e6-6ece-482c-9cec-db2fc124604a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6da06b-3b30-4aab-bda2-810c036b2512", "sighting_of_ref": "indicator--ce2606e6-6ece-482c-9cec-db2fc124604a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07515915-cbe2-4699-b428-dd0d75f95c30", "sighting_of_ref": "indicator--ce2606e6-6ece-482c-9cec-db2fc124604a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d330b5c7-e006-476b-92f8-93f65135c48c", "sighting_of_ref": "indicator--97a3fda9-cf86-4805-8856-acb875486f75", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac79a9c0-3f94-4f3d-8923-f9f04d5e240b", "sighting_of_ref": "indicator--97a3fda9-cf86-4805-8856-acb875486f75", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23584604-1925-4aef-8ec5-ed4c5c4ce538", "sighting_of_ref": "indicator--97a3fda9-cf86-4805-8856-acb875486f75", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04649e8-0048-4264-b0e8-4c69b33392d6", "sighting_of_ref": "indicator--1a21687b-bd43-4c03-8653-658844919059", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e520693-a701-40fb-8353-316f52686e33", "sighting_of_ref": "indicator--1a21687b-bd43-4c03-8653-658844919059", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1408b22-e77d-4071-bfd4-7fd7e0b10c3a", "sighting_of_ref": "indicator--1a21687b-bd43-4c03-8653-658844919059", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06909fcb-e3b8-4c9a-9a17-ed65fda5044b", "sighting_of_ref": "indicator--f7c89afd-0f4a-4d82-826c-62ad5c4be4d9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1dd792-19e3-4996-a93c-3d18328fd7c4", "sighting_of_ref": "indicator--f7c89afd-0f4a-4d82-826c-62ad5c4be4d9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f45531-e1aa-4545-8f73-aea18a326553", "sighting_of_ref": "indicator--f7c89afd-0f4a-4d82-826c-62ad5c4be4d9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35f31d2-18e4-41c4-bdd8-8e5d0a740da4", "sighting_of_ref": "indicator--2a630ee1-7e20-44fb-9bc4-7a31e22285a5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1341d7-b072-4d06-ab36-5cffcc2c8a6d", "sighting_of_ref": "indicator--2a630ee1-7e20-44fb-9bc4-7a31e22285a5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a969cf50-ff8c-4159-b47f-a0482d9440e6", "sighting_of_ref": "indicator--2a630ee1-7e20-44fb-9bc4-7a31e22285a5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701f8ebc-42ea-40b3-8d24-582c319889e6", "sighting_of_ref": "indicator--684bb15f-cd95-499c-91f8-ff3794301831", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a3be75-f4f8-4340-a126-ce23ab02e1ff", "sighting_of_ref": "indicator--684bb15f-cd95-499c-91f8-ff3794301831", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b56000-3855-4d05-a31e-ba4a3c28663f", "sighting_of_ref": "indicator--684bb15f-cd95-499c-91f8-ff3794301831", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1a4062-c932-4dfe-ae72-ac931dce07c7", "sighting_of_ref": "indicator--5ab7a6ad-1bea-4c7c-b318-6161e83184b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfd1bec-b24d-431c-8d84-f250fac7ea31", "sighting_of_ref": "indicator--5ab7a6ad-1bea-4c7c-b318-6161e83184b0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c069375c-4e44-4711-b02f-a8c3b04f07ba", "sighting_of_ref": "indicator--5ab7a6ad-1bea-4c7c-b318-6161e83184b0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f281a13-f056-4f0e-8a79-9c907c0ea9ed", "sighting_of_ref": "indicator--ddb6f389-95d3-46b1-816e-ed7fbc2bdc94", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341e6288-f927-41eb-b9d7-dd571582913d", "sighting_of_ref": "indicator--ddb6f389-95d3-46b1-816e-ed7fbc2bdc94", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1b3ccb-930e-4746-ad70-583917256a88", "sighting_of_ref": "indicator--ddb6f389-95d3-46b1-816e-ed7fbc2bdc94", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767840c9-2a31-455b-a230-464f824b546f", "sighting_of_ref": "indicator--aab7b3c4-5600-45ff-a0ca-66aec79f1530", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8d3097-48a7-4b87-bd19-5bea9eba50de", "sighting_of_ref": "indicator--35105fa1-7692-4f70-a56b-706137d9028c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6848b29-3829-4f48-920a-86c066381ae9", "sighting_of_ref": "indicator--f4099359-4472-420e-b5ab-4d94ab4e276a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459096a6-ef09-40f7-89b5-ed7afabe102a", "sighting_of_ref": "indicator--f4099359-4472-420e-b5ab-4d94ab4e276a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b200d126-2dcf-4a96-b154-12bda50b8225", "sighting_of_ref": "indicator--2d45407c-b612-4fab-ac6e-a47bb1344c04", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3744434e-24a5-402a-8c39-1e80f40a5bb9", "sighting_of_ref": "indicator--fdded5fc-cea2-4e24-8fb1-51da8aa03e38", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42640804-c8b8-4722-950e-88ad9ffc95a1", "sighting_of_ref": "indicator--faa17379-ad59-43de-8437-302645df7106", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4009a6e8-b228-4cea-a011-e23a0758d08a", "sighting_of_ref": "indicator--faa17379-ad59-43de-8437-302645df7106", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3684c92e-818d-4799-a423-34d5e863e797", "sighting_of_ref": "indicator--faa17379-ad59-43de-8437-302645df7106", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a96445f-1022-4712-9f00-4ce4a80e2384", "sighting_of_ref": "indicator--28818104-40f8-442e-a81e-efed04da45f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43745c9e-5e47-445b-ac05-2758063a5615", "sighting_of_ref": "indicator--28818104-40f8-442e-a81e-efed04da45f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c71e47-e7ce-46da-91ae-6e5871f2a934", "sighting_of_ref": "indicator--d1de42da-bd71-4199-9b46-dc8166c75635", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02fdaee-854d-4604-b6ed-5083f0b594c6", "sighting_of_ref": "indicator--7407c1c1-abac-4ac9-8771-2d3b4728d6c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c07fa1-47e6-435d-91ef-5616abc388a3", "sighting_of_ref": "indicator--8021ecbf-0848-4cbc-b40f-672d58e7f43d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752126e3-6bbf-44eb-8e4c-5e2ed26fdc28", "sighting_of_ref": "indicator--ebb2559a-63f6-487f-865e-577ffeb41b9e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02314ddf-5d87-43cb-bc00-c9fb9055dd20", "sighting_of_ref": "indicator--2ae7b789-9089-4c90-ab47-87b1b281054d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca6880d-374c-4332-bff0-6a4c567a6f9d", "sighting_of_ref": "indicator--2e17073c-7171-41db-86a8-e9600e30fea5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd4c198-ac03-42f4-ab57-ce983384f6b6", "sighting_of_ref": "indicator--a8d9fed7-7f54-48ec-842b-4e7f8698aaa7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ec16d9-4de1-441b-a2e0-a5dd02216f71", "sighting_of_ref": "indicator--a8d9fed7-7f54-48ec-842b-4e7f8698aaa7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40f2383-035e-41c5-8dd8-2ddc6d84f3e9", "sighting_of_ref": "indicator--a8d9fed7-7f54-48ec-842b-4e7f8698aaa7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4af0c5-7d41-4ff7-b77b-79ce28cf8d50", "sighting_of_ref": "indicator--c7af28e2-e5aa-40d3-9622-57861880b1a1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d3e0ad-7a4d-47e9-9b67-d01ba1b6d889", "sighting_of_ref": "indicator--c7af28e2-e5aa-40d3-9622-57861880b1a1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1525afb-47e1-4217-b3bd-1e3f4a31830c", "sighting_of_ref": "indicator--c7af28e2-e5aa-40d3-9622-57861880b1a1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebb549e-537b-4171-9e95-2559d2f1f6d0", "sighting_of_ref": "indicator--c70c5d17-a2c5-4a4c-ab5b-6e862690d12f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab13a3c0-11bb-43d2-b81e-4d2703bddf13", "sighting_of_ref": "indicator--85ddc8e1-2555-4f7f-b85a-b3615bfb2b19", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f2c26d-af2b-4a14-9896-3190a69af967", "sighting_of_ref": "indicator--85ddc8e1-2555-4f7f-b85a-b3615bfb2b19", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a325aa9-d05e-4a2b-88a6-1a70eeca8786", "sighting_of_ref": "indicator--fbd96ed5-d531-47e5-bfd0-554b68ae84b6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb1b9e5-65c9-4e88-8317-b67b893a7f1e", "sighting_of_ref": "indicator--83b1911b-e5e1-4c0c-9635-163f59144925", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa628ec-f981-4ec6-bba8-a632970452ba", "sighting_of_ref": "indicator--98c4ea02-7ba3-4148-82e4-b8d4cd106888", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ec20a5-c9c5-451f-9b97-7c8b9f63d8b0", "sighting_of_ref": "indicator--98c4ea02-7ba3-4148-82e4-b8d4cd106888", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744fe5b2-67d7-4a5c-b035-4e37064878b5", "sighting_of_ref": "indicator--962952b3-ab50-4eb2-9374-7a6f785bece5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a11eed-05b8-4bed-b47d-2e3e45b3fde0", "sighting_of_ref": "indicator--962952b3-ab50-4eb2-9374-7a6f785bece5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec17ce0-c24d-4d09-a47c-4eb5f2e25b80", "sighting_of_ref": "indicator--94eafe88-64a7-447f-a7fa-dcb85c5fbfa6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658618e5-baf4-463a-bf7e-752dada6a1c9", "sighting_of_ref": "indicator--65d62aa2-a4e1-453a-8e10-21df176006be", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c73ed1-057e-438d-9852-6078b151dac9", "sighting_of_ref": "indicator--55b4fba0-b0ec-4cfc-a966-664b6ae51c15", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99898594-891e-45b1-8095-4c2d3295b482", "sighting_of_ref": "indicator--e2ad2aec-3609-41e1-9d9f-74f1efcf7342", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32562ed-dd7d-4faf-8fff-f9df47856006", "sighting_of_ref": "indicator--e2ad2aec-3609-41e1-9d9f-74f1efcf7342", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc02f41-8fcc-4ebc-aa3f-214bd6c8e236", "sighting_of_ref": "indicator--b1f8abcf-ef83-4135-a2fc-dfd144589caa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4165fd2b-88b7-4e8e-8a7c-2ba7a82484a6", "sighting_of_ref": "indicator--2ce9ca5d-e007-4192-9688-04a40deee44f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5bcbbe-652e-45c5-a2bc-e853810f4a2f", "sighting_of_ref": "indicator--2ce9ca5d-e007-4192-9688-04a40deee44f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc667ac-005b-41e0-b62c-62303a4d43be", "sighting_of_ref": "indicator--2ce9ca5d-e007-4192-9688-04a40deee44f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6f7cd5-d885-4f98-a880-2a70d497858d", "sighting_of_ref": "indicator--b369e1dc-9d01-4c9e-8afb-e61bc5feae3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3500f494-8fae-47f8-8227-c760f1e28b04", "sighting_of_ref": "indicator--b5283165-841c-484c-a9cc-6bc3737d7b79", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffadd7d0-9e15-4780-85a7-22d4d16d38ce", "sighting_of_ref": "indicator--9c7a713d-0d71-4f64-8bc6-a31b9d3b6d6c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88750f5-7ebe-4705-9ab6-4581d2c7420b", "sighting_of_ref": "indicator--f9e86298-f50f-45d9-bab4-8736b0c1991f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f818ab4-e94d-4826-a0eb-32dac1f51c0c", "sighting_of_ref": "indicator--0f4f6990-605f-4b05-bdbf-1a5296979e51", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a152cc2-ba6d-4c17-8719-6d7e81d8a219", "sighting_of_ref": "indicator--dadc1c10-ede3-4cfe-928e-69ee61af1394", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b87460-0aed-444d-8396-2573d7d4ef65", "sighting_of_ref": "indicator--b42bc60a-450a-430d-b0bc-fe01af56f9f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ca185f-37b2-4c20-9900-51fb54091525", "sighting_of_ref": "indicator--fe59a039-1a40-4644-85cb-4e57917b2c98", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced7f198-067c-4ed1-b4ec-56042a722796", "sighting_of_ref": "indicator--f007297a-ab1a-4604-9d5e-a3b4eef68a52", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e262a582-c430-49ae-a170-ffa3b35cfa73", "sighting_of_ref": "indicator--55073bbb-58b1-4e15-9059-edc9a0933938", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1257c4ad-dd63-4b3f-a9a5-5611bba7eac6", "sighting_of_ref": "indicator--7acf1432-9d13-42de-b176-c1f4f06404d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7787fc60-29d2-487d-acc1-4835f36db38d", "sighting_of_ref": "indicator--426209a5-12a6-45da-a0d5-ddee444cd03b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f639d706-2823-4861-85c1-3247eb15ad43", "sighting_of_ref": "indicator--426209a5-12a6-45da-a0d5-ddee444cd03b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e9245d-540e-480e-9837-4cafbd23060f", "sighting_of_ref": "indicator--67d8a17d-9fea-49c7-aec6-442271ecbc4b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47406d0a-4ee6-461e-aef8-f849115d4696", "sighting_of_ref": "indicator--67d8a17d-9fea-49c7-aec6-442271ecbc4b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd70dd55-92fb-485c-b2d1-e0ab75072aec", "sighting_of_ref": "indicator--30894d80-6a69-4f48-a043-f9a493de4cfa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd1a8c9-e32b-4ae4-8ed3-2d4a2e0e2142", "sighting_of_ref": "indicator--30894d80-6a69-4f48-a043-f9a493de4cfa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdee6801-e1c2-4f73-8563-9e9f917a589b", "sighting_of_ref": "indicator--1e6be8b0-540d-4249-ab57-61993fd036d4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d0327d-7970-48db-995e-a9ce304d4336", "sighting_of_ref": "indicator--a37c27ba-28ad-4177-8de8-149993a97a3e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c2db06-a8b5-4922-b5af-326e2df9b403", "sighting_of_ref": "indicator--33aac237-ecc4-4782-b73c-07878bea711f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d834ade-c892-4ba3-8ab6-d3f82befe750", "sighting_of_ref": "indicator--33aac237-ecc4-4782-b73c-07878bea711f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9ed6d1-578a-4856-8391-c2cd6ab3f07f", "sighting_of_ref": "indicator--33aac237-ecc4-4782-b73c-07878bea711f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870f7189-ba5b-4fe4-ba0a-c1f37d638a1e", "sighting_of_ref": "indicator--6dea1653-1b43-4e74-8927-f489cf348ed1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c63a972-b342-4acd-b47c-1e803196e2c1", "sighting_of_ref": "indicator--6dea1653-1b43-4e74-8927-f489cf348ed1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd70b8c-ebe7-4279-8633-43d8996ed10d", "sighting_of_ref": "indicator--6dea1653-1b43-4e74-8927-f489cf348ed1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db663d80-f70a-4862-9c07-4f393d420ce8", "sighting_of_ref": "indicator--39a760aa-3ab2-4b6a-827e-13805197a13d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce81ed0-5499-4674-a631-8d67c6be94ec", "sighting_of_ref": "indicator--39a760aa-3ab2-4b6a-827e-13805197a13d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a6b2fd-5ac9-457c-ac13-a706a646e7d2", "sighting_of_ref": "indicator--39a760aa-3ab2-4b6a-827e-13805197a13d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da46a779-b105-488c-bda0-a4f1b6b3f536", "sighting_of_ref": "indicator--13740471-1ced-41a6-b12e-a207149c9df2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5908f68e-cc6a-4f8e-b76d-d87e0b081c3e", "sighting_of_ref": "indicator--13740471-1ced-41a6-b12e-a207149c9df2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29a4021-ec89-44f7-bd9d-8df9c7f6bbcd", "sighting_of_ref": "indicator--13740471-1ced-41a6-b12e-a207149c9df2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a9642b-ca5f-41e8-96d6-0e00204e9e5d", "sighting_of_ref": "indicator--3ae219b6-3605-4c23-98e9-c9cc0b04459b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff750f3-722a-4f19-bd9a-a790cbd7b0fd", "sighting_of_ref": "indicator--3ae219b6-3605-4c23-98e9-c9cc0b04459b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9fdf79-c78a-434a-b1ae-993d4f19bed1", "sighting_of_ref": "indicator--3ae219b6-3605-4c23-98e9-c9cc0b04459b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885e74c3-9700-4e6a-bfd1-01817117f510", "sighting_of_ref": "indicator--07f98a04-98a7-4b3f-acf9-3ebcbde575dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0309fb95-8974-4383-9eda-72b9bd65767a", "sighting_of_ref": "indicator--07f98a04-98a7-4b3f-acf9-3ebcbde575dd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca4826f-fda8-442a-8a66-fa11f50201cb", "sighting_of_ref": "indicator--07f98a04-98a7-4b3f-acf9-3ebcbde575dd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94f7c46-7545-44de-afe0-418b338ae959", "sighting_of_ref": "indicator--1f6acd1f-45a2-4f24-bf0b-2d9d111f9346", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755198ea-21e1-4d9c-a491-0b7d376b85c3", "sighting_of_ref": "indicator--1f6acd1f-45a2-4f24-bf0b-2d9d111f9346", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5cca3f-a0bc-4cec-b4dc-e70c36ba0b3d", "sighting_of_ref": "indicator--1f6acd1f-45a2-4f24-bf0b-2d9d111f9346", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13744023-8423-44f9-88d9-92d4c94123bf", "sighting_of_ref": "indicator--73184ea4-025c-44b3-b108-43407fb9a02d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7115c41f-8358-4d53-9177-c7caadfc9f5c", "sighting_of_ref": "indicator--73184ea4-025c-44b3-b108-43407fb9a02d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b511866-28b7-4482-b609-41816ffd509e", "sighting_of_ref": "indicator--73184ea4-025c-44b3-b108-43407fb9a02d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb6989a-ddc5-421c-9660-2250e5e940b5", "sighting_of_ref": "indicator--f00bd25e-5f7f-41fc-a277-f851a7faa662", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c4142e-f6c5-4b67-8a84-9a32d6ba3200", "sighting_of_ref": "indicator--f00bd25e-5f7f-41fc-a277-f851a7faa662", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec809cb-487e-4165-9db9-3e0597f25aa9", "sighting_of_ref": "indicator--f00bd25e-5f7f-41fc-a277-f851a7faa662", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112ba56b-1d05-4be6-8125-fa4ba35c14ec", "sighting_of_ref": "indicator--38ca761f-9cf2-4dd9-95dd-b4c4edb906c5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a8f970-aaf4-49fd-8d69-1a2c83cca429", "sighting_of_ref": "indicator--38ca761f-9cf2-4dd9-95dd-b4c4edb906c5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3a3782-7eb7-490e-a37e-4ff050254f04", "sighting_of_ref": "indicator--38ca761f-9cf2-4dd9-95dd-b4c4edb906c5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa90349-72db-46f1-a4f6-ab2fcde96f55", "sighting_of_ref": "indicator--91a3b813-6223-48e6-92c2-b4d86b57331f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46b4665-b288-41c9-b964-e8f22e3d23e2", "sighting_of_ref": "indicator--91a3b813-6223-48e6-92c2-b4d86b57331f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185ba5fb-53d7-4502-83a2-4130067107af", "sighting_of_ref": "indicator--91a3b813-6223-48e6-92c2-b4d86b57331f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ca6db9-f4e8-4542-b05d-4e520031513f", "sighting_of_ref": "indicator--82793b03-9bcc-4260-b0e4-0b88f6e615b1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff0b35f-aeb3-46bc-bbaa-c7a6bb6cfa0a", "sighting_of_ref": "indicator--e46756be-d21a-4201-a82d-d72f860f29b1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbad3e8-9251-416d-846a-59daeb8bfb27", "sighting_of_ref": "indicator--d6a6485c-42c4-4c7e-828d-8fa32bb1b315", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a11a6a2-7ec1-4dcd-b3ad-912ff3a99063", "sighting_of_ref": "indicator--54cc59b9-98ba-482d-bf07-ef59dad698fa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78c98b9-d3be-456b-91bd-e7aeae1a5420", "sighting_of_ref": "indicator--0cdf28db-b286-410d-afa9-c26bb1f8ac33", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21dfadee-80e1-40e7-9154-866b48b0da00", "sighting_of_ref": "indicator--14696538-3adf-4862-bb49-02393c3bef5e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305bffc6-564d-483b-8cdb-148780aa7384", "sighting_of_ref": "indicator--d1c406bb-194d-4ed3-b44d-d9a6c36871ba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb373d55-a284-480e-b6ac-179ae7ef61c6", "sighting_of_ref": "indicator--52c0c692-eb8f-4d76-8b93-be4ed506f1de", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4b9e95-7a55-442e-a4b0-7e83185f5697", "sighting_of_ref": "indicator--ba74b428-f517-4e4d-8147-00891c3fb285", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b94ede-d28d-4564-93ca-e54d4c20c756", "sighting_of_ref": "indicator--befbae05-1d34-4bfb-b543-1f71d5f773f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9e3587-fd96-4b8f-a6ac-6ff7db102d0a", "sighting_of_ref": "indicator--befbae05-1d34-4bfb-b543-1f71d5f773f4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fc74d7-55a7-46cb-873c-e09474548f19", "sighting_of_ref": "indicator--938d433f-a196-4244-a18a-7d087708880b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ec20a3-893a-4f88-ad08-c42fabf3dff7", "sighting_of_ref": "indicator--938d433f-a196-4244-a18a-7d087708880b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35858cf8-52fd-4d6a-9842-6c33530b928d", "sighting_of_ref": "indicator--938d433f-a196-4244-a18a-7d087708880b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ba6add-0780-4f10-9123-4d39f8d90530", "sighting_of_ref": "indicator--79f80a0f-eb26-46ab-bb3d-41bf1fa4f0bb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db371b7-9f1a-496b-86af-7d555441c728", "sighting_of_ref": "indicator--79f80a0f-eb26-46ab-bb3d-41bf1fa4f0bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b1a415-55b5-4d92-aaf3-d7ff6f7c1529", "sighting_of_ref": "indicator--79f80a0f-eb26-46ab-bb3d-41bf1fa4f0bb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4867e32-c2ef-4f7a-a8ea-ac83637308e7", "sighting_of_ref": "indicator--718c7ca6-5acf-4f81-9f68-8017583fbd8c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbd86ad-7855-4032-b0c5-9d2673cd67c9", "sighting_of_ref": "indicator--b4a91b6a-7183-4bfb-a9b5-f8a62c3365d5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86a5a1c-c1aa-45c2-afd3-5c068b5e7b44", "sighting_of_ref": "indicator--b4a91b6a-7183-4bfb-a9b5-f8a62c3365d5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fffabc6-f974-44cb-ad01-7ed0b8507f56", "sighting_of_ref": "indicator--b4a91b6a-7183-4bfb-a9b5-f8a62c3365d5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05275851-fa2d-4e03-a1d9-a3b503338a50", "sighting_of_ref": "indicator--38ee3cea-8643-4bc6-9858-e6f328a98d1d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6046039b-1976-46de-a4cf-2008d14c43ab", "sighting_of_ref": "indicator--726e4ccb-81f6-4409-9f91-6a0f3b5df457", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5da42e-cc9d-4947-aa90-cd8bd4c02c74", "sighting_of_ref": "indicator--aaa97c2b-08d9-451d-bec5-7769a76a7850", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cce0c6-1df4-4b93-abbf-32b5d66142b1", "sighting_of_ref": "indicator--daf1a180-059d-4a5e-94e4-e88abd91eebd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3add10-28e6-4806-bd52-f1ae7683a9ae", "sighting_of_ref": "indicator--a1d1e6a1-7d4b-430c-94f2-51a68755a5a2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7a2f08-8838-4b09-9ff9-1ecd991beba3", "sighting_of_ref": "indicator--e6d78b6b-6de1-446d-b155-82289b0776b6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9a6245-7cba-4a2c-8c97-1196aba19e35", "sighting_of_ref": "indicator--954647a5-d591-4576-8e85-697cb1f150fd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbe0091-2fc5-4ed1-ac3a-0784393764a8", "sighting_of_ref": "indicator--9a2277d1-84d5-4314-8efb-1c257a0d9198", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c052fef-2882-4b28-a008-79e9e285a2de", "sighting_of_ref": "indicator--4066a5d5-4f06-48fe-a82b-39cfefe1f406", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f0d2d1-171c-4985-9ae3-1f8dc47c7ccb", "sighting_of_ref": "indicator--90d935bb-f20d-4335-8c0c-7e2d9d4e6279", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc432af-7c7e-4383-9fc7-ee9bc76e6b48", "sighting_of_ref": "indicator--8a916832-0cbd-4f38-964e-d07914f2ca69", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f631ae64-751e-47d2-b652-07d94c02495f", "sighting_of_ref": "indicator--e08b8383-412b-4cdf-ab8e-369c78bd0017", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8212b7-aa2f-49dc-97eb-44be88b76d9f", "sighting_of_ref": "indicator--11c83a0f-41e7-4eb9-9c0a-7e6032d58a57", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426238c5-53a2-4b7e-ad24-5801dfc42450", "sighting_of_ref": "indicator--d6149d8b-4181-4979-bba7-e86c0bd187ae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcea37b8-8510-4024-964f-de9d992d91be", "sighting_of_ref": "indicator--8cf48fa7-ec09-4a63-8e93-bf67645bc307", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1642ac0-7312-4546-b313-78d54c038449", "sighting_of_ref": "indicator--97e430a9-b069-4ccd-9f88-d939f8fd6d40", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d85f25-ba84-439f-8c50-b20aea90f38d", "sighting_of_ref": "indicator--964c979e-2ef9-49c2-a892-b98bd3edd25b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71026f1e-2aae-438e-a15d-9f4a253015a4", "sighting_of_ref": "indicator--3cd066bc-88c8-4dc1-9844-b4f99ddfff1f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564d79db-7ac6-494b-9e82-b00b10c69b6b", "sighting_of_ref": "indicator--0b15c164-c052-4180-bcdd-bbaac37c46a9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5a1680-e5fd-4b81-8bc9-681fdfa9cd38", "sighting_of_ref": "indicator--38138c39-ea0e-4a25-8d0a-8ac8e07a4417", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46626637-8694-4e29-98cb-7cdce1aced91", "sighting_of_ref": "indicator--977007f1-ebb2-4ff4-a1a0-54c5df848476", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b772918-4b21-48a9-b00d-504853751f58", "sighting_of_ref": "indicator--977007f1-ebb2-4ff4-a1a0-54c5df848476", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4733cc5f-e917-42ab-a9a0-362fbb342127", "sighting_of_ref": "indicator--9e2e668d-2470-4697-9b47-af09a82d39ae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718d69d4-b9b6-4128-a3cb-9a98d6bf124f", "sighting_of_ref": "indicator--9e2e668d-2470-4697-9b47-af09a82d39ae", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a844178-68f4-4e39-9855-ea591876788f", "sighting_of_ref": "indicator--9e2e668d-2470-4697-9b47-af09a82d39ae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f19812-25f4-44fe-9ed6-5f62dcf362a9", "sighting_of_ref": "indicator--fafa0b64-288f-4c3a-9939-801cac428f60", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a341e90f-9994-44d4-98b3-8870ed4fc9b6", "sighting_of_ref": "indicator--fafa0b64-288f-4c3a-9939-801cac428f60", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f801ff-7fa5-451f-9f0a-e72773a3a1b6", "sighting_of_ref": "indicator--385b059c-3458-4d1d-b573-a4216e577bfd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ce3256-f04d-444b-a566-20c7f9ae02dd", "sighting_of_ref": "indicator--385b059c-3458-4d1d-b573-a4216e577bfd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef89de9c-a5db-4e23-af35-fe8e73a91567", "sighting_of_ref": "indicator--385b059c-3458-4d1d-b573-a4216e577bfd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe6d59e-b006-4fd4-8fcb-af12bbe514ff", "sighting_of_ref": "indicator--3981003d-49af-44c9-9169-b9d415162dd3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394f3cd2-31aa-46d4-a710-0bb8ea66dfa9", "sighting_of_ref": "indicator--72cb910f-e970-4294-b211-2185b0406257", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9979b071-28ad-49ee-85ad-6451d7519cf7", "sighting_of_ref": "indicator--72cb910f-e970-4294-b211-2185b0406257", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cb4878-3015-47f6-a189-ea5274c8ffd1", "sighting_of_ref": "indicator--920d828b-9a2e-4037-8f81-932ff6f0189e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a76c38-7b3a-4dba-a200-bf6fce758a21", "sighting_of_ref": "indicator--74d82f68-6955-4d08-88b9-7ee581d4b845", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039fe1f0-5522-4f29-b747-e2a452d0a0c0", "sighting_of_ref": "indicator--025992ce-459f-4ab7-9c04-ef4f52e092fd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cadde32-b46a-4899-932e-ce2a93c93ee7", "sighting_of_ref": "indicator--6c735ffb-0d0a-40b0-b699-c77f8d4e83b6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75cf64f2-1670-4783-a52f-1507c8433277", "sighting_of_ref": "indicator--6c735ffb-0d0a-40b0-b699-c77f8d4e83b6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f58eb6-fd0f-4e83-8352-7935c14cc9d1", "sighting_of_ref": "indicator--6c735ffb-0d0a-40b0-b699-c77f8d4e83b6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1034ce-619a-4fef-a6bb-4d6ceafc1eae", "sighting_of_ref": "indicator--184ec7d6-9d41-4a8f-818e-e70ae7bd4b84", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46eaa0c3-6619-4fe1-bf92-217125c6c7c2", "sighting_of_ref": "indicator--184ec7d6-9d41-4a8f-818e-e70ae7bd4b84", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3400b997-ab97-4276-a018-c6daee9fc0d3", "sighting_of_ref": "indicator--061c57b4-91ab-4596-b757-33198f80fe6b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526e6031-db47-42dc-9a1b-4fa87b6149ba", "sighting_of_ref": "indicator--b9dbe497-4bb5-4838-b700-bba5bc7b7f18", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4ddb34-231f-4eb2-ae23-dd69254ace1f", "sighting_of_ref": "indicator--51f7fb27-2662-4943-bd7e-06198fb4f8e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da28738-d74c-4951-ac17-6d43a504b4b3", "sighting_of_ref": "indicator--aa914d26-18cf-4876-99fd-376b37b3cacc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6319082-41e2-4985-8111-275b0f329e5a", "sighting_of_ref": "indicator--1da96876-9a1c-4baa-8462-982c81c8682d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558855a2-af83-45c1-b3d7-32170f5e080d", "sighting_of_ref": "indicator--d4d87864-be21-4092-9225-e857330f046d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89a35c3-455e-4b66-89e1-23e27b2a1ee1", "sighting_of_ref": "indicator--af4eb32e-ea05-4e99-ab00-efe1e90c529e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c09f310-d5c6-4691-b32e-5bf66989eb29", "sighting_of_ref": "indicator--2f508dce-3473-4d34-8d18-9b47665a9736", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954a89e4-fd02-4608-8cb2-f672642eebcd", "sighting_of_ref": "indicator--2f508dce-3473-4d34-8d18-9b47665a9736", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd64cbd-20de-4fbf-b23d-b3e66b2f660b", "sighting_of_ref": "indicator--2f508dce-3473-4d34-8d18-9b47665a9736", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74c8755-1c0d-494e-93fa-71134c32f91f", "sighting_of_ref": "indicator--93233335-3bce-46ab-95aa-84c43dbb61af", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f262836d-d42f-4006-abab-25426a31915c", "sighting_of_ref": "indicator--93233335-3bce-46ab-95aa-84c43dbb61af", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd50f554-0daa-4ba4-86c5-e5ef2ba8623a", "sighting_of_ref": "indicator--93233335-3bce-46ab-95aa-84c43dbb61af", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56879cfc-cd69-4655-9b64-0adc4bf36179", "sighting_of_ref": "indicator--07fec940-ce00-427f-a5d8-8211fb1dd28d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4b6b6f-4bcd-4d5f-8968-2446ca89f030", "sighting_of_ref": "indicator--07fec940-ce00-427f-a5d8-8211fb1dd28d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d907d46a-7d7c-4bc0-b2f8-37a6792a41b7", "sighting_of_ref": "indicator--9168535a-b5bf-41a3-aa69-8ba8a493a1a8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9733da8d-bce7-4420-9f42-f30fe76c9d3f", "sighting_of_ref": "indicator--d6d00a94-00bb-4581-9f1c-774cab18bb91", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee49f199-218f-4db7-8102-4136600f26dd", "sighting_of_ref": "indicator--d6d00a94-00bb-4581-9f1c-774cab18bb91", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b98f65c-1754-4ca4-9bac-a3361c2d732f", "sighting_of_ref": "indicator--d6d00a94-00bb-4581-9f1c-774cab18bb91", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34b83b6-5d60-4e3a-b8f5-022c95af3c95", "sighting_of_ref": "indicator--7e133c83-8823-4f70-828f-5d257f7251b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0404037-39fb-4499-a610-ada221df05bd", "sighting_of_ref": "indicator--eb7cdee3-37a5-4fb6-bf5c-d8b7eedc290b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e864f3f6-dc7b-4448-8350-5ba411c70db0", "sighting_of_ref": "indicator--fb2f6b04-fcfd-4583-af11-8bf19be49d63", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3228635-db21-4cb4-8ea3-5eda548c27f2", "sighting_of_ref": "indicator--fb2f6b04-fcfd-4583-af11-8bf19be49d63", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526281d5-a178-4d13-a84a-2e6bd53afd4b", "sighting_of_ref": "indicator--367a70ea-f6b6-42f0-85c0-54889c585f7e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa6a309-8cb2-4a15-a7e3-0a2aad1f8ca0", "sighting_of_ref": "indicator--367a70ea-f6b6-42f0-85c0-54889c585f7e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a93a828-2fe5-4946-8085-61ad381e5a5d", "sighting_of_ref": "indicator--367a70ea-f6b6-42f0-85c0-54889c585f7e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4512938-7cab-4e52-b1e0-685762d68641", "sighting_of_ref": "indicator--e28c532f-27ad-4b40-b7b7-f80609522262", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791d0809-9f0d-4385-bf2f-71e4e62ed8ba", "sighting_of_ref": "indicator--e28c532f-27ad-4b40-b7b7-f80609522262", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7257567c-fffd-46db-868d-7868cbae71ef", "sighting_of_ref": "indicator--e28c532f-27ad-4b40-b7b7-f80609522262", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d499ce68-c686-4522-9d66-7981c240183b", "sighting_of_ref": "indicator--88cdf381-b510-486b-8fa7-bd164224573a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cd1896-2c7a-4e42-beb7-0b5f207a1a32", "sighting_of_ref": "indicator--88cdf381-b510-486b-8fa7-bd164224573a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9a3e0a-dff9-459b-b5b6-3851b181b92d", "sighting_of_ref": "indicator--88cdf381-b510-486b-8fa7-bd164224573a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ba758d-a12c-4914-bc98-aac2679075b3", "sighting_of_ref": "indicator--6b69cdea-208f-4ff7-85fd-34117ce47249", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d3e662-d0dd-42ca-a4a6-3e49e69140f9", "sighting_of_ref": "indicator--e1da94c9-cfdd-4e33-a42a-70c630c4e8e8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a626bc6-a4d2-4104-a758-6fb6e1e29feb", "sighting_of_ref": "indicator--e1da94c9-cfdd-4e33-a42a-70c630c4e8e8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc1f980-c2a0-4717-82fc-5eec395a3846", "sighting_of_ref": "indicator--e1da94c9-cfdd-4e33-a42a-70c630c4e8e8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32eeceb9-1787-4df4-9b1b-090add80f680", "sighting_of_ref": "indicator--47987ee4-fc32-4d30-b211-ea06ee1cacc9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e06526-5b8b-4c0a-a667-4b34ed2d4f56", "sighting_of_ref": "indicator--3abc9d7e-47fe-40d3-8ed6-557cf9519afc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99cd46a2-41e4-4035-8796-269f1f621816", "sighting_of_ref": "indicator--3abc9d7e-47fe-40d3-8ed6-557cf9519afc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1adb44-66b2-4d6f-947b-a9fbf7432c1e", "sighting_of_ref": "indicator--3abc9d7e-47fe-40d3-8ed6-557cf9519afc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12fd2d0f-7cb7-461b-9a7e-9b1c59da82cf", "sighting_of_ref": "indicator--02362480-1eea-4f76-9cb6-2c5de2d071a9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1a88a2-1963-4ab4-8188-c0a0172b1043", "sighting_of_ref": "indicator--02362480-1eea-4f76-9cb6-2c5de2d071a9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3be3bd0-44db-4230-88e8-463b253693a6", "sighting_of_ref": "indicator--6ae8b646-948f-4a26-9bc9-b0d938963f69", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c0137a-6cf9-484c-9fcd-0dd420bb538e", "sighting_of_ref": "indicator--6ae8b646-948f-4a26-9bc9-b0d938963f69", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d824c4db-faf1-4326-b1d1-c13a22b7aa02", "sighting_of_ref": "indicator--6ae8b646-948f-4a26-9bc9-b0d938963f69", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b2e850-9296-4db2-8093-c32d6b6cddd9", "sighting_of_ref": "indicator--69e740c5-7fc8-4dd0-90ae-0808f5626442", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216f596a-e4c5-40ba-9d3d-b4729832524f", "sighting_of_ref": "indicator--1a782703-f859-4153-97aa-355de160a151", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da79ef1-90b4-4611-871c-e0c7c963d217", "sighting_of_ref": "indicator--1a782703-f859-4153-97aa-355de160a151", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38daf1bb-d6c0-4b96-a422-edb3623334f6", "sighting_of_ref": "indicator--1a782703-f859-4153-97aa-355de160a151", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a343092-893a-4b87-be73-742d3ce93297", "sighting_of_ref": "indicator--7f4fcf33-7e68-4c6b-8fb3-2601bda98fb2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e80b5a4-e2f0-42a0-bdb9-8151bb7602f4", "sighting_of_ref": "indicator--7f4fcf33-7e68-4c6b-8fb3-2601bda98fb2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9051ce80-2dea-46e9-a689-c5be27a3d664", "sighting_of_ref": "indicator--7f4fcf33-7e68-4c6b-8fb3-2601bda98fb2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2460fbee-0e33-48e7-8418-bc409bc254a1", "sighting_of_ref": "indicator--66e9a128-6f41-4b89-94b4-b7b129c8a34e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76dfd4d-22d0-403f-b628-4479ec201609", "sighting_of_ref": "indicator--66e9a128-6f41-4b89-94b4-b7b129c8a34e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a298516b-d776-424d-829f-288a14f0397e", "sighting_of_ref": "indicator--66e9a128-6f41-4b89-94b4-b7b129c8a34e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23a37b7-e762-4020-978a-b8a12e7da12c", "sighting_of_ref": "indicator--3d55ad1c-0ec1-4741-b986-c3a21e310220", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea333c2d-8d05-4bab-8c9e-2a914d55cd62", "sighting_of_ref": "indicator--3d55ad1c-0ec1-4741-b986-c3a21e310220", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16de869f-f728-4b41-bce3-841647b1bea0", "sighting_of_ref": "indicator--3d55ad1c-0ec1-4741-b986-c3a21e310220", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bd3bc1-1fdc-4b7f-884b-db4f1f25e1e9", "sighting_of_ref": "indicator--eabcfc9f-0ac1-437f-8b2e-d35b1ef8e296", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5752ed2e-77f9-4a39-94d6-bf775ad50a11", "sighting_of_ref": "indicator--eabcfc9f-0ac1-437f-8b2e-d35b1ef8e296", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5f46f4-1138-45a3-80ea-622d2f119e90", "sighting_of_ref": "indicator--eabcfc9f-0ac1-437f-8b2e-d35b1ef8e296", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b247d7fe-a9ef-4eb9-8571-d5b702a00f38", "sighting_of_ref": "indicator--3fd87a7e-3b41-493d-8f13-d769646e93ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ba0ac6-a717-4766-95d7-c4232db8d1e8", "sighting_of_ref": "indicator--3fd87a7e-3b41-493d-8f13-d769646e93ce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67525819-54bd-4634-951c-2f8eeba57de2", "sighting_of_ref": "indicator--6380c3b3-2954-4f6f-b88a-5897299030f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3d1da3-5dfe-4a87-8bbf-5f77deea5511", "sighting_of_ref": "indicator--6380c3b3-2954-4f6f-b88a-5897299030f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721ff9b6-5b20-43c3-90db-462b8049cc32", "sighting_of_ref": "indicator--6380c3b3-2954-4f6f-b88a-5897299030f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefc57c3-96ae-4a09-946b-bd9c07acb9aa", "sighting_of_ref": "indicator--6462ffdb-db6d-4649-b7ff-3822bb23ec27", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44f9393-7d59-4674-a221-edc49753622d", "sighting_of_ref": "indicator--0e8cb1ea-8581-44e1-afdf-17262030340a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717a2a3d-fb8f-40c8-b34c-a31edf53482d", "sighting_of_ref": "indicator--0e8cb1ea-8581-44e1-afdf-17262030340a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772cb120-5a02-41c6-b601-cf4306efd5c0", "sighting_of_ref": "indicator--3dd7c3b2-9c0c-40bd-98b5-aaed06a9012b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17df9000-3623-4e49-83ee-043eb8348bd7", "sighting_of_ref": "indicator--3dd7c3b2-9c0c-40bd-98b5-aaed06a9012b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8a61b6-9eb5-45d5-9a68-9a19e6cbc7d0", "sighting_of_ref": "indicator--3dd7c3b2-9c0c-40bd-98b5-aaed06a9012b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc31772c-1120-4709-a9d2-63b7956bacf7", "sighting_of_ref": "indicator--c103d446-9b1b-4e63-97e2-b1cf75344e43", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a1e279-0eda-4f9c-abdf-415dc4dfd099", "sighting_of_ref": "indicator--969a10a6-7ae1-40ea-bebd-7f884386bc81", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8607584e-47a7-4cd5-97fb-aff546bda7cb", "sighting_of_ref": "indicator--969a10a6-7ae1-40ea-bebd-7f884386bc81", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e99d68-f183-44d8-8be3-298a7d869317", "sighting_of_ref": "indicator--969a10a6-7ae1-40ea-bebd-7f884386bc81", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b151b58b-0317-43be-8e65-643646502beb", "sighting_of_ref": "indicator--eb565316-6f73-415d-8040-f0ef43b56ea4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961ed882-0941-40e3-9cd8-509302976db9", "sighting_of_ref": "indicator--eb565316-6f73-415d-8040-f0ef43b56ea4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f7b89b-1b61-4e86-974f-b5da58b67ce5", "sighting_of_ref": "indicator--eb565316-6f73-415d-8040-f0ef43b56ea4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1399b5-b271-483b-bdde-7941171fb394", "sighting_of_ref": "indicator--5c269fe4-f5a4-4f6b-8b04-7a8ef58d945d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f5b77d-fad6-429c-a84d-3d3ae868894c", "sighting_of_ref": "indicator--5c269fe4-f5a4-4f6b-8b04-7a8ef58d945d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1865303-61b0-423d-9dcf-ef8bfbb2a488", "sighting_of_ref": "indicator--5c269fe4-f5a4-4f6b-8b04-7a8ef58d945d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895a2234-d74a-4bd4-9c44-eb13360af442", "sighting_of_ref": "indicator--f13d0d7f-ad15-40d3-9296-6608b628a90c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56a069e-13b0-48ed-adae-2cc72e8d91c5", "sighting_of_ref": "indicator--f13d0d7f-ad15-40d3-9296-6608b628a90c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9538159d-6392-435a-9464-e8dade6bee1b", "sighting_of_ref": "indicator--f13d0d7f-ad15-40d3-9296-6608b628a90c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f359f0d-54cd-4fe1-a97f-8dac20aac585", "sighting_of_ref": "indicator--0c3a6c6f-c3e8-4f5f-868f-76b838ba8572", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba328032-c670-4e4a-83bc-a94ebbca1dd4", "sighting_of_ref": "indicator--372dfab4-a2cd-442a-9a3d-ea1ee334052c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cf61bd-cdeb-46c0-a0e1-c63eb153eb0e", "sighting_of_ref": "indicator--372dfab4-a2cd-442a-9a3d-ea1ee334052c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c08457-cdd0-4efd-a2b2-75f8a90782ae", "sighting_of_ref": "indicator--372dfab4-a2cd-442a-9a3d-ea1ee334052c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe16720b-3827-4446-bd29-e0ad0505acfb", "sighting_of_ref": "indicator--df9f5306-9c4d-4061-94b1-7ce8ab2a6d77", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede53f8a-5c96-43ea-8c1f-b03dbe2ebb91", "sighting_of_ref": "indicator--df9f5306-9c4d-4061-94b1-7ce8ab2a6d77", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f267c9b-d3e2-4716-80d4-949308edf83c", "sighting_of_ref": "indicator--df9f5306-9c4d-4061-94b1-7ce8ab2a6d77", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036ad329-4d77-4e4e-8bb8-67ecbe26d4ef", "sighting_of_ref": "indicator--c91896a8-7044-4db6-972c-e644471b58c3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23427d9-3c9d-48a5-a664-b7992f1c5b4d", "sighting_of_ref": "indicator--c91896a8-7044-4db6-972c-e644471b58c3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8390d86-c974-42b6-a984-1ab0bf4cd346", "sighting_of_ref": "indicator--c91896a8-7044-4db6-972c-e644471b58c3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18312840-09c0-42bb-8bb6-27e3d1445e69", "sighting_of_ref": "indicator--a5ce04ca-9116-4d32-9080-dce119211d9a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472815ac-2089-4197-91ac-c4bc5a5199cb", "sighting_of_ref": "indicator--5525228b-26f2-4c4f-b386-1f5e934b2fdf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da84473-21ec-4532-b249-96f48e949ac8", "sighting_of_ref": "indicator--c8ce3015-9836-4b71-aaa5-528e7ab1d25e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdd8608-9bd1-4016-a3a9-70cc2e93c162", "sighting_of_ref": "indicator--030feb6f-a321-46be-b752-7f199c4c2d48", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5c2cf4-481b-4286-9fa8-a0eeae18ee31", "sighting_of_ref": "indicator--7affd0ca-9299-42dc-b6c4-92ec56e8fd16", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020f6b01-ef95-4f9e-9934-4a154eba0c4e", "sighting_of_ref": "indicator--c80cf4d7-7460-46df-a987-9447916fa42e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee2470e-cd11-4817-9602-41ac8c268a53", "sighting_of_ref": "indicator--10174e0b-f5c0-4a48-b211-03872b50c608", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef23e73-af3a-4ed0-a187-70fd890f8b50", "sighting_of_ref": "indicator--06cca34b-0f78-43ae-88be-cfb6b740630e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43854f3d-e789-45bd-96c4-65ba739184d6", "sighting_of_ref": "indicator--95333e63-7ddc-4e2f-ae73-1e6e6f7c8c66", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27821cff-98d0-4154-80b5-b8560689e43c", "sighting_of_ref": "indicator--84d88364-e92e-4b73-8fb1-0a208b7661f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9cd345-5b8a-4b08-ac3a-6e8adcef8392", "sighting_of_ref": "indicator--84d88364-e92e-4b73-8fb1-0a208b7661f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40e9c05-c0aa-4047-885c-4fe59352411a", "sighting_of_ref": "indicator--84d88364-e92e-4b73-8fb1-0a208b7661f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a64f10a-2f44-41f8-8c24-d6d1f1d5d385", "sighting_of_ref": "indicator--ba7ae10a-7ba3-4646-b0ab-aa56d18058b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9db58b-6d9c-4c3a-931b-24c489afa015", "sighting_of_ref": "indicator--b579c983-ecaf-4152-a3c0-0314d4a91639", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8fd85f-b99a-44c8-9ef4-4a310996bd79", "sighting_of_ref": "indicator--35f5ee41-46c1-4ff8-a812-e2b0a9b6633f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5e7ff3-1760-4669-8780-6840858c07f8", "sighting_of_ref": "indicator--3e005d09-720c-4fc0-b70e-10a59f433475", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0c99c2-1748-48d6-a6e7-30d46eb88828", "sighting_of_ref": "indicator--1f0f1d50-395e-425a-84bd-feebca4a43ae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f2e657-613d-4306-bf18-e5e6e57e5f71", "sighting_of_ref": "indicator--16edc762-d7e6-4833-9f86-e081a153bcc0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2548a832-6f14-4f43-8c61-506bfc47ac98", "sighting_of_ref": "indicator--6bcbd967-5a01-49c6-9fe5-ef811d046c54", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809957bb-d8c4-4445-b172-c4b876885545", "sighting_of_ref": "indicator--8046fc0f-96b5-4eda-8932-74bdef539acf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a74fb1a-3b84-41c5-b8be-1bc121f938ef", "sighting_of_ref": "indicator--b20be02c-ebf1-4c2f-b654-6f350559b668", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f4c20f-a20a-4507-a425-0272a7476684", "sighting_of_ref": "indicator--963a8fb4-419f-4e6a-9e7f-60c739821d94", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490c5e5a-09f4-4bce-ba00-8898ef9d6877", "sighting_of_ref": "indicator--87c598c8-0af3-423a-a6e3-8b8daa37b35b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a74591-0ef8-4ebf-a2fe-ee762b7cd569", "sighting_of_ref": "indicator--173add55-088e-48f9-a670-5f3e32ccdaac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75df14a0-7cee-4b98-a405-c6af61b7f192", "sighting_of_ref": "indicator--e76dc083-c91d-40c1-b6af-6915c610ca04", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847f9926-6faa-4ad2-8a06-249d65d11055", "sighting_of_ref": "indicator--f96519e4-7ba2-4a66-81c3-bbabf8903814", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9305e0a8-2d81-4905-b38b-8e894452db49", "sighting_of_ref": "indicator--ba38a928-7de8-47af-b9b0-39451b1e9870", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8226f1bf-23e7-43bd-bc3a-5ab0571c8799", "sighting_of_ref": "indicator--ba38a928-7de8-47af-b9b0-39451b1e9870", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb92236-81a9-4933-8c1e-6f2c0b0ba5fe", "sighting_of_ref": "indicator--76b0845e-d3c9-45e1-adda-fe74ede103d0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b92f33b-9414-4823-b139-a23db0d45e99", "sighting_of_ref": "indicator--76b0845e-d3c9-45e1-adda-fe74ede103d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff1cc63-59ff-44fb-82d2-763860c64925", "sighting_of_ref": "indicator--271f2f73-3fe9-4468-afd6-8ffe417fe009", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053b2615-7f98-4875-adc1-ae4c4fc0b6ba", "sighting_of_ref": "indicator--16f95256-f931-4280-8265-797e20caa7e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab29a4bd-c4c9-4734-940b-be657529f1b1", "sighting_of_ref": "indicator--11e9fb52-31fa-46bd-b909-1615abab925c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a152eb77-f00a-47fc-bcc7-97466a6df19f", "sighting_of_ref": "indicator--e34141c6-9efd-4d05-9b6e-0ed0b3a37c72", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb11db5-9c4f-4ce0-83d7-bc6b3886822c", "sighting_of_ref": "indicator--d8e485fc-7907-4b63-a1de-14dacabcb481", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5420608-8cb5-45d1-a991-5983ce7955be", "sighting_of_ref": "indicator--8b8c4f9a-1553-449b-b9a0-5fd91617bdb0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35abda8-2901-4281-8167-3d63efd61cb0", "sighting_of_ref": "indicator--339186ef-475a-4051-8cb6-93f380a73fd0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f2a45f-7b7a-4539-9b83-8d8d2889206e", "sighting_of_ref": "indicator--339186ef-475a-4051-8cb6-93f380a73fd0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00de64d-a9cd-448e-8eaa-cb5041b44914", "sighting_of_ref": "indicator--339186ef-475a-4051-8cb6-93f380a73fd0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb7d8f2-7e22-4db4-b474-6f406cbfb895", "sighting_of_ref": "indicator--146c993e-104b-4c6d-acfd-efbaa08fbf4b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2372397-6fc9-47f2-8e0a-4ec789f25790", "sighting_of_ref": "indicator--146c993e-104b-4c6d-acfd-efbaa08fbf4b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcef1adf-20df-4a7d-991d-d0f83900a1c7", "sighting_of_ref": "indicator--146c993e-104b-4c6d-acfd-efbaa08fbf4b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e19b84-77b2-4b1d-9993-e44e0eca01cc", "sighting_of_ref": "indicator--65164687-d0b6-4138-bb94-bc0d84067e56", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed45a300-36b0-473f-a4c5-8939c993b7dd", "sighting_of_ref": "indicator--1a96a78e-da56-47a2-8e2b-7311deecc609", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1b5342-3356-4777-b92b-c51a3598a315", "sighting_of_ref": "indicator--b029d867-c05a-4620-ace0-6eb4774e36aa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e91dba6-1cfe-49a6-a255-a5c21126af70", "sighting_of_ref": "indicator--1abe2421-db6a-497a-b47a-dc402afe2d22", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d2f584-d535-4d6c-8e0c-b53195eaec4a", "sighting_of_ref": "indicator--0fadd87e-4a98-4f52-adc6-c7e3b5f111cb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14f0ed8-a20f-4530-9b2a-8ec91e807f42", "sighting_of_ref": "indicator--71e7ab08-fd7b-47a9-bdb7-b1b02940910a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c20913-b84b-40cd-905b-e75fee8dd85a", "sighting_of_ref": "indicator--08ce4351-760f-4e9f-bc78-b927a67665e5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bea967c-62df-447a-b201-f17e32a89b10", "sighting_of_ref": "indicator--68f65369-4a37-47e7-ba16-c94c02a2942c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7322f100-baae-4782-9329-19ddc468b807", "sighting_of_ref": "indicator--f400b98e-762c-45b4-9f32-b3f7bbb9066d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21f6401-3391-45f0-a7d6-d2b56bafe7f8", "sighting_of_ref": "indicator--21c69da1-20af-48f1-92ef-c42014082b39", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb66fd8-1260-409d-bcf6-07bdd53cd80e", "sighting_of_ref": "indicator--e06a5327-85c4-405d-9a4d-1442853173dd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cb1eb7-24a1-413b-af76-894bdec406a7", "sighting_of_ref": "indicator--7cdf9915-d291-4dcd-9718-85cc021ce34e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7387f1-ea95-4205-bfb4-69460a54fea9", "sighting_of_ref": "indicator--089761be-8627-4625-9fe5-086bba6d71b2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1090c517-8791-432d-9d34-ff5767467d6e", "sighting_of_ref": "indicator--b3519379-3f14-4be5-9e8b-9aaac2ea985a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6af7473-d6e5-42fd-8721-9377c8f9b6df", "sighting_of_ref": "indicator--42567f40-e06b-481e-a8c7-aa7ac584353e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81e079c-82ff-4b3b-8e51-21eb7da63c59", "sighting_of_ref": "indicator--42567f40-e06b-481e-a8c7-aa7ac584353e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3eac9eb-adec-4735-8a73-f293a29c4497", "sighting_of_ref": "indicator--5885fbee-6a18-4cd3-a39d-b00764d467d7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4904f6a-c72c-479b-bd31-f9349654c724", "sighting_of_ref": "indicator--57800277-4674-458f-b533-038b37a2b52d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2cb9c9-dee8-4e43-add0-069f3e191a53", "sighting_of_ref": "indicator--57800277-4674-458f-b533-038b37a2b52d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6c0f03-153e-4ac9-a569-276c794dbcdb", "sighting_of_ref": "indicator--7e01c3f8-7fd3-4379-815d-f3992e02085c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf67744-854f-4500-b6c9-576c6c830ae6", "sighting_of_ref": "indicator--310c7883-5292-470d-8ec3-8dff650272d1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5414fb-bb3f-45e0-a21c-747950cc48c3", "sighting_of_ref": "indicator--310c7883-5292-470d-8ec3-8dff650272d1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bacfd5f-1e26-4535-8069-20de9b23ec0b", "sighting_of_ref": "indicator--310c7883-5292-470d-8ec3-8dff650272d1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc67fba-91a8-4e68-8176-112c5a810ae9", "sighting_of_ref": "indicator--9eb8d93c-11b6-48bb-8695-4592e705ed09", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6193ce3d-b6f2-4205-a2e1-0a8c7115ee1b", "sighting_of_ref": "indicator--9eb8d93c-11b6-48bb-8695-4592e705ed09", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bab4f95-6ad9-41c0-ab03-a418620f1066", "sighting_of_ref": "indicator--cc39ee86-bafd-454b-9d6d-22263edbb2c1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0e79ec-78c1-42cd-aceb-c384e37bf0c0", "sighting_of_ref": "indicator--c7d8f21b-44de-4998-be4a-25d5c0c398b5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102b8f40-8f74-440f-82ef-c8bc97748dc8", "sighting_of_ref": "indicator--c7d8f21b-44de-4998-be4a-25d5c0c398b5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546d8d60-272d-4aeb-b95d-4bfeb6685d4a", "sighting_of_ref": "indicator--27bc24d5-f0bf-4a3e-a527-3335a1a4103a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52913a3-dcf5-452d-bffd-5259defc6f9f", "sighting_of_ref": "indicator--27bc24d5-f0bf-4a3e-a527-3335a1a4103a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19f8290-441d-44ff-9091-7f92e430e0e9", "sighting_of_ref": "indicator--6907a361-059a-4752-908e-4da6ee420d13", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15c690b-f4bb-4108-9518-afe507ca3852", "sighting_of_ref": "indicator--6907a361-059a-4752-908e-4da6ee420d13", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f09b750-570f-4704-9823-26cee8cb6305", "sighting_of_ref": "indicator--6907a361-059a-4752-908e-4da6ee420d13", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1abebf-9f2d-4650-bf90-2efe6bf0a29a", "sighting_of_ref": "indicator--5ba62c69-9832-4409-9607-7b57a3224880", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac96b3a-8122-4469-a41b-26debc997057", "sighting_of_ref": "indicator--39486cfe-7548-4b0a-9de4-43b0be3e9ce1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc7d758-d740-4cc1-8f30-f59551c3d012", "sighting_of_ref": "indicator--da8d50dd-84cc-4023-9c94-9e830aebfade", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5c7474-7c4f-420a-a775-5746d0976a6e", "sighting_of_ref": "indicator--5a6f4991-5d16-45aa-a2d5-856959877928", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ada7a9-0363-4269-98dc-805a09b048e2", "sighting_of_ref": "indicator--5a6f4991-5d16-45aa-a2d5-856959877928", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4443439b-59be-4db8-bc20-e0a3cc710e02", "sighting_of_ref": "indicator--5a6f4991-5d16-45aa-a2d5-856959877928", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7363912-d556-429e-b4c4-561fe6670937", "sighting_of_ref": "indicator--6aa5582b-4af3-45b5-90d8-feb2bf35f6f5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cf1a46-d0eb-4c91-bb9d-b160e3a48135", "sighting_of_ref": "indicator--6aa5582b-4af3-45b5-90d8-feb2bf35f6f5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fcb6d9-2718-4d89-89d0-4084fa76acd3", "sighting_of_ref": "indicator--6aa5582b-4af3-45b5-90d8-feb2bf35f6f5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92d3f63-25eb-4fa2-923d-413ec07940c5", "sighting_of_ref": "indicator--0655e686-f887-4728-b12e-e911c682eaa0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05eb3663-3c50-462d-8dfb-618ef720135a", "sighting_of_ref": "indicator--0ad8abca-a144-4a91-9f7c-8061632fd5f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09634323-7f0b-4e2b-8e32-fd0804ff2bc3", "sighting_of_ref": "indicator--0ad8abca-a144-4a91-9f7c-8061632fd5f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f3f0b5-5824-434f-843a-0539043c14f5", "sighting_of_ref": "indicator--8ce5ebe6-6833-4067-9f4e-e7f6795a891f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d60ac3-5d2d-42d3-bfa1-acf1c6b98f2d", "sighting_of_ref": "indicator--8ce5ebe6-6833-4067-9f4e-e7f6795a891f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48af7337-175e-469c-adbd-af1cf5c28d47", "sighting_of_ref": "indicator--8ce5ebe6-6833-4067-9f4e-e7f6795a891f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a11d4d1-03f1-4266-84d0-82ae83a9b3f8", "sighting_of_ref": "indicator--5fecaf04-9013-45a6-a133-7cad74a214cc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7f29c3-a52d-4544-913c-67d46aa4c06f", "sighting_of_ref": "indicator--5fecaf04-9013-45a6-a133-7cad74a214cc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8637b30f-d523-4316-b6c8-fef5f96ceee2", "sighting_of_ref": "indicator--6818e5ca-268f-44bb-b08d-706335a68523", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d649cf-a8dd-4665-b22d-949374af5479", "sighting_of_ref": "indicator--4cb0d3f6-2759-4be5-82ff-cd30ebb7eca7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e149ea16-a6c2-4e70-8e9d-d985d0e08ae6", "sighting_of_ref": "indicator--4cb0d3f6-2759-4be5-82ff-cd30ebb7eca7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3c2298-6105-48d8-ab59-d73dbd60fdc2", "sighting_of_ref": "indicator--4cb0d3f6-2759-4be5-82ff-cd30ebb7eca7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fba88c-aa8d-41d9-ae53-aba415f299a1", "sighting_of_ref": "indicator--97f0034f-fec4-4f07-bc82-7f731a22d9c2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb8140e-6f0a-47b1-8f72-5f6e2bc1936f", "sighting_of_ref": "indicator--99cc62e4-44fd-4b05-a772-49ca6a86c1c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabce65d-3120-463e-90e2-eaf6e127d0d8", "sighting_of_ref": "indicator--af59fb6a-6662-40e8-a0ac-433e74cd2bc3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe643ee8-ad80-499b-9436-95a7fe290bfc", "sighting_of_ref": "indicator--af59fb6a-6662-40e8-a0ac-433e74cd2bc3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5709651-3d0a-4dc7-b009-0d9df1c92257", "sighting_of_ref": "indicator--5720a419-e934-4daa-8e8c-f181802290e3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf5198e-e250-4536-af29-65b28649f4dc", "sighting_of_ref": "indicator--832fc0b1-4ce9-4dbd-b048-375d65f575a3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6b3aad-49cc-4e8c-b4a5-0c6d8dd659c0", "sighting_of_ref": "indicator--43a190ab-a199-4116-a734-b64ed32384a8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb06d7d-df31-4008-85de-92c6c4daa104", "sighting_of_ref": "indicator--d691097a-58da-4fed-986a-ef54afc40c31", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb7edc6-d105-413d-ac6b-fb8d7debbe9e", "sighting_of_ref": "indicator--74f6b780-0ee4-4f90-9d76-c98590ea1c14", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57a9e2c-4981-43b8-aca8-0c883d717f9b", "sighting_of_ref": "indicator--8e8d7a93-1a7d-4ffd-9bd6-3d0ec971c618", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffeda2d7-9a3d-4181-bf0b-9a4783f494e9", "sighting_of_ref": "indicator--75ad42fc-494f-4568-b9e7-e9620e218661", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c707c3a-d281-4de5-8544-03bf3dd2111f", "sighting_of_ref": "indicator--5622b010-7116-4456-80ec-31e75f75f00f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a6594e-78d4-4b0c-8d3d-9977ce890147", "sighting_of_ref": "indicator--e21ac1c3-bc6c-4baa-91ed-a023f34b8dc2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf4586b-dacf-4857-8723-513468c64290", "sighting_of_ref": "indicator--02af2f75-6bed-4ded-9e4f-c61ae3b2babb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5d43bb-ad15-4dd6-a715-2452360f24e3", "sighting_of_ref": "indicator--2ef0b66e-517e-43f6-a3e9-dfc75452296f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9ecb77-68f7-4d00-aede-752f583605df", "sighting_of_ref": "indicator--8c9d20f9-ca17-4aa6-9478-9097eeff0de9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6459d97b-b6e0-471f-acdf-83496cab1111", "sighting_of_ref": "indicator--41836347-b26d-4fd4-8334-148dc646dcf8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e2c17a-3119-4f84-9300-ba3691932971", "sighting_of_ref": "indicator--41836347-b26d-4fd4-8334-148dc646dcf8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4762c3d0-4582-4361-9851-61cad00c0be6", "sighting_of_ref": "indicator--41836347-b26d-4fd4-8334-148dc646dcf8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7ba03f-7c0d-40af-82d7-df5c72a85621", "sighting_of_ref": "indicator--9177ac55-7b78-43da-a54e-f8988e5182dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30eb69c-5d65-4eaa-b54e-1755baf4fa02", "sighting_of_ref": "indicator--9177ac55-7b78-43da-a54e-f8988e5182dd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618e3c72-ce74-4e2b-9977-cb27ac244204", "sighting_of_ref": "indicator--9177ac55-7b78-43da-a54e-f8988e5182dd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4286971a-c49a-4db1-bc32-931a226d3ba1", "sighting_of_ref": "indicator--a8fa7196-ef22-4a92-ac95-3f3262017b14", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733554f8-0596-4f14-8fb8-4b8813520ecb", "sighting_of_ref": "indicator--a8fa7196-ef22-4a92-ac95-3f3262017b14", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341b652c-c6bb-46ff-ad72-9bf5c09476a9", "sighting_of_ref": "indicator--a8fa7196-ef22-4a92-ac95-3f3262017b14", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911c066c-d062-4ffc-8918-604668d395b2", "sighting_of_ref": "indicator--bf2916f3-f280-443e-af41-42dffe4a4385", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e63f8a-e341-4451-a645-690764de988f", "sighting_of_ref": "indicator--eb111fec-70ec-458a-acbd-1d4c1f0b5ae3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35956588-fa9d-4455-ac10-9c3d9fc0aa95", "sighting_of_ref": "indicator--10797d1d-ac92-406f-b8bf-67dd268373cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e408fe-ce6c-4adb-9ced-2920a90a49fb", "sighting_of_ref": "indicator--644c6ff5-1034-4bed-b1ab-a411bd910d4b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05a1159-e663-4232-8a67-ea27f8199173", "sighting_of_ref": "indicator--fe7dce8a-86c6-4a32-9da4-6b3c13c59124", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a24c2be-6393-4eb7-b1cc-1f8d74cd66d0", "sighting_of_ref": "indicator--38581e66-db79-432f-acc6-86ab287b465d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b695c5-9810-46c7-8516-dca73c37a398", "sighting_of_ref": "indicator--e9f07bc5-5601-4321-9378-b324ed852127", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991dee2a-a13f-4e78-8518-292033c5cde6", "sighting_of_ref": "indicator--2e1d8c75-fec1-4b58-8095-98d6e3587208", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd993893-659d-428d-909c-76f3f0f73936", "sighting_of_ref": "indicator--f316c16c-d1ac-4fbb-9fd8-b81d372057cd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879638dc-a417-4490-9c75-debd8bd1356b", "sighting_of_ref": "indicator--14fa5e70-7024-4bdf-a4d7-e325992c1712", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab56bb39-d718-4b4b-bf22-ecf0d21a24ce", "sighting_of_ref": "indicator--14fa5e70-7024-4bdf-a4d7-e325992c1712", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8a5bcd-fcf8-4150-868a-fff9b73415a2", "sighting_of_ref": "indicator--5abbb1ca-df74-4901-9e2a-407b08214a7a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c654f2c9-f5dd-4f05-832c-9f50a987d661", "sighting_of_ref": "indicator--7a13e819-cda5-48e8-9560-b5b873bea838", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98411861-9ba9-4335-a07b-610a5e806fea", "sighting_of_ref": "indicator--715f6447-9104-4397-bcf7-cfcf74975ab1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fcb36b-6cb3-4dbf-99ec-279f77feafd6", "sighting_of_ref": "indicator--b83650a0-c078-42b2-b3a6-72f45b89331d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d916fc-392e-4b82-8a36-bff669eb5310", "sighting_of_ref": "indicator--f17302d9-1172-44a0-a4a3-681b6fdbd87e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f355141-4f5f-459a-970c-d974b930402e", "sighting_of_ref": "indicator--9cb9df77-55c3-4a73-8da3-95e338b853f5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f80f3d-e866-4b44-87f5-7e792aba3bdd", "sighting_of_ref": "indicator--121576e7-5e17-4510-b9d2-6a2c89f2ffb7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ac1a0e-4713-4b42-8bb6-0c2b4f815a6d", "sighting_of_ref": "indicator--b065f496-c1d6-4fb1-a576-920aacf7b76c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27425266-002d-4259-b310-701f6c07f0ae", "sighting_of_ref": "indicator--b065f496-c1d6-4fb1-a576-920aacf7b76c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53966bbc-c5d4-4a6e-a627-26c667a7f3b9", "sighting_of_ref": "indicator--d06e3f7f-b1cd-4eb8-a720-b59fa545696e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900641b9-858e-499f-9006-90979a75735e", "sighting_of_ref": "indicator--dcbb9f21-6209-4913-b90f-c7bec37d289b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f4dfce-b55a-4751-9b12-0002a1426ecf", "sighting_of_ref": "indicator--b013b41c-80c0-4d6d-9f4a-6631622b96e4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8368eb8f-2b99-4a66-9904-5919572ca301", "sighting_of_ref": "indicator--5e1c33a7-7d51-45ab-aa1e-7c8269c267d8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4694af5-cab0-4334-bd55-77b526909612", "sighting_of_ref": "indicator--09b05ab6-0b47-4d4c-bc6d-d5f78d9ada88", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6c9fe6-2774-49b6-b78e-b4965fcf9dd7", "sighting_of_ref": "indicator--3ccd69d9-875e-4eb4-9350-d9d4cb873b59", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6c1301-1f2d-4364-bf7c-ba7a140ddd45", "sighting_of_ref": "indicator--3ccd69d9-875e-4eb4-9350-d9d4cb873b59", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd1f2b6-4ccc-4515-b8ff-41f033955556", "sighting_of_ref": "indicator--3ccd69d9-875e-4eb4-9350-d9d4cb873b59", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15eb1e38-b5da-41ca-93b7-c475b75df2a2", "sighting_of_ref": "indicator--cf5a4b6d-3205-4e64-8989-4c5056a1c544", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876ab0c7-92c3-4cfd-92c4-14f625b384d0", "sighting_of_ref": "indicator--ee29476c-e557-48be-aeb8-9a5d60306108", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588a5c57-d549-4210-aec3-43d16134fc19", "sighting_of_ref": "indicator--e9040932-85d7-4164-b3d4-7a9b6481a02f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce675134-b922-4f6f-abb8-46912f4cee4e", "sighting_of_ref": "indicator--36d08a13-05e5-4914-bf7a-4e0a1bd8ab12", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92af98c5-508d-493d-959b-bca0bb45a03e", "sighting_of_ref": "indicator--2bf91f11-8c8f-4503-aab0-046b998be6da", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8269c558-8104-427a-aab7-e0e2adecab02", "sighting_of_ref": "indicator--b4d24825-6afb-4a0a-8979-b039340be25b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee963774-2e1b-42b2-9f5c-2a6e57a8b9f4", "sighting_of_ref": "indicator--569c698d-fdc9-4fdc-bc4c-9a60e2421cc1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c53b6f-9aca-49d4-a186-f769cc397674", "sighting_of_ref": "indicator--f08194c2-535a-4e8d-b65b-ea955fdc157d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1daaf5-8e73-479e-b158-647ebbe41101", "sighting_of_ref": "indicator--4b58c910-334c-4c7b-b317-3fe4c08722f1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736241fe-2d4d-4d06-bfef-2b30d3265666", "sighting_of_ref": "indicator--b7d357e2-fe58-4360-a8f9-417ada2c60e7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c819fb41-37f9-48bc-8946-72f1f4d77fcc", "sighting_of_ref": "indicator--2041e11a-665a-4e0d-8692-dd8933ca12a4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723d2e00-675f-4391-a080-bf05363e30a3", "sighting_of_ref": "indicator--1719b847-64ac-476a-ad7d-7936dd9a3f63", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc0220b-8785-425a-8da4-ab582ff3fb36", "sighting_of_ref": "indicator--46a81143-44df-4ba1-bace-b2eb03685e0b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea16722a-c1c5-45ce-b415-cb2470bf3ea6", "sighting_of_ref": "indicator--b3f25c74-7759-465c-abdd-78c3f4b357ab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41052e61-fca6-43d7-9030-3c3a30cf33c5", "sighting_of_ref": "indicator--40ec2353-ecc9-4866-a348-9730977d59bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f701ec3-2346-4045-9f78-167ed955c8a8", "sighting_of_ref": "indicator--42a7053f-38dd-48c7-99b1-0794052c9ae3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5f5081-5781-48e2-9ca0-73fd7cf4db6f", "sighting_of_ref": "indicator--7dbc6cb4-e56d-4c58-9fe0-941f5f41beed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68774ffd-2b02-4ec6-80c3-e3ea154a5a4b", "sighting_of_ref": "indicator--e9e3be26-af7a-4257-bd52-b3f4af9da5e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97133204-cb3a-4dac-8786-b0a9deac7e05", "sighting_of_ref": "indicator--a0d4548c-6564-49da-9c14-9c91fa4b33cd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429c983e-49e0-45fc-8421-ea72f59e0f99", "sighting_of_ref": "indicator--af399420-d4be-4a27-aac8-072fa4e070c0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009fd2b4-08f9-4275-ab2c-5cdf1b883155", "sighting_of_ref": "indicator--88e43ff9-d199-436f-b2c5-d821a00d220b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e781d2-506c-43b0-90f2-f0a80437f379", "sighting_of_ref": "indicator--36ecccc6-120d-4ca1-a14b-cb8fc3c34ba0", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a0e1c1-d310-4ebe-a647-7bfed27a9bad", "sighting_of_ref": "indicator--209f630a-2302-460a-8189-8a77e0778fee", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8f08e7-afac-4fce-a570-f4222662a01f", "sighting_of_ref": "indicator--8a7f960a-9a9c-4196-ad20-de6d6c78565b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688b68b0-a788-4ef1-989d-29e5b72a4626", "sighting_of_ref": "indicator--944ce636-b266-4fc3-8994-8aa5cc44a02e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a9e9c3-1739-41a3-9856-810aa281ae5a", "sighting_of_ref": "indicator--944ce636-b266-4fc3-8994-8aa5cc44a02e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede34f8e-61b2-4814-8cc7-7bf9b2e8aa71", "sighting_of_ref": "indicator--944ce636-b266-4fc3-8994-8aa5cc44a02e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20a7671-c245-4811-b701-a937b1188c5c", "sighting_of_ref": "indicator--bb8f2c76-9fa9-4b7a-bb40-2e6d6461d2e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903049ab-bad9-48bb-a499-f1070df29f47", "sighting_of_ref": "indicator--bb8f2c76-9fa9-4b7a-bb40-2e6d6461d2e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439cafe9-d7d0-47d5-9c0b-5d6f2c094cac", "sighting_of_ref": "indicator--bb8f2c76-9fa9-4b7a-bb40-2e6d6461d2e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51611892-1e67-4f0d-87fb-f88b12015d94", "sighting_of_ref": "indicator--ccebcc9c-b3c5-47ba-a112-e67c28496698", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13956bfd-5fc0-465b-a7ec-b73911199757", "sighting_of_ref": "indicator--f868546b-b999-4c02-9187-2f43628c5698", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387957f3-d647-4805-8616-67407a3b66f3", "sighting_of_ref": "indicator--add17ee2-3da5-4908-8e35-2b68e028f58e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab0aa29-84b7-4b98-90f3-43b9ae0f7f89", "sighting_of_ref": "indicator--121605ff-2f48-423d-a533-2ae6f82ce6fa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2937db4b-9059-4c3e-86e0-0ca3473420e3", "sighting_of_ref": "indicator--121605ff-2f48-423d-a533-2ae6f82ce6fa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb3e577-3ede-470f-b22a-4caf9f4b496d", "sighting_of_ref": "indicator--baafe5c2-fc5d-48e4-a14c-3b04baee0c18", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8afee1d-0664-4f18-bc41-0e072e35daa7", "sighting_of_ref": "indicator--b104f963-9745-48e1-9c3f-504d0ff97907", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0065588-711b-4443-9d3e-3b6f1c1893e8", "sighting_of_ref": "indicator--275817d8-d544-444d-9650-81b887b1a2e6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09752b40-a2d2-421b-9396-f3b4c4de1949", "sighting_of_ref": "indicator--275817d8-d544-444d-9650-81b887b1a2e6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd5b0bb-de66-4b9e-abc0-7d3e0e2e2de5", "sighting_of_ref": "indicator--275817d8-d544-444d-9650-81b887b1a2e6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a24bed-bfc8-4c76-b96b-2cda7ddf035b", "sighting_of_ref": "indicator--400d8513-1b0d-49d4-9548-11e07229ae8b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5cf763-370b-4e55-a98d-e9a2e2d22859", "sighting_of_ref": "indicator--dd0b952c-3d8c-4173-a62b-97b3bd93398b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad52abaa-56ba-4a60-912f-ccfcb1b4979a", "sighting_of_ref": "indicator--dd0b952c-3d8c-4173-a62b-97b3bd93398b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab10b272-80d2-48b8-b499-f5c9caf24db5", "sighting_of_ref": "indicator--4266cbab-cf11-4967-8ca0-1cb0649dc356", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9590e93-d609-45d9-b6d8-20da63a3a90d", "sighting_of_ref": "indicator--c165431d-b6e4-4688-8b8c-2d68eb1250ca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d9fa8e-f31a-4bfe-8360-8ee0a2ab6f61", "sighting_of_ref": "indicator--307f44ac-0ce7-48dc-ab38-2a643b257993", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83829f93-8198-49df-85c8-80d8df5188df", "sighting_of_ref": "indicator--49a03d82-5aaf-4e00-ae28-b4a80e0a0cfb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5a345a-a370-4e96-85dc-c2c4973aa1aa", "sighting_of_ref": "indicator--d84e7c7e-4fbc-48af-9ef3-c673c499f356", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f06f480-0312-400f-926f-b3c87d480522", "sighting_of_ref": "indicator--d84e7c7e-4fbc-48af-9ef3-c673c499f356", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c1eb3d-0697-4e80-9193-ae01052b3624", "sighting_of_ref": "indicator--d84e7c7e-4fbc-48af-9ef3-c673c499f356", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45df8624-0b2b-426a-b784-ef1a1cb43803", "sighting_of_ref": "indicator--8c54655f-94c3-4e01-ae5e-9e12a78b3ead", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb3c789-0f24-4631-97d0-b2956fee2557", "sighting_of_ref": "indicator--7a48ec83-2d39-4507-9e0a-3a8bdfd9f6f6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6287753a-6356-4dd0-9718-baf7c2cd7a54", "sighting_of_ref": "indicator--0f049deb-be2f-4e77-8726-9548dbab3fe8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12da22d6-f2c6-407c-b011-e3435ebc1501", "sighting_of_ref": "indicator--aff506e1-6e91-4503-ad33-f4194aab9e74", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8664b3a4-e278-43fc-b643-9dbb250d1105", "sighting_of_ref": "indicator--627502fd-3f7c-41a3-8007-67163a6d1dd2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be59e5c-fa00-4275-bec8-9755a1808e71", "sighting_of_ref": "indicator--627502fd-3f7c-41a3-8007-67163a6d1dd2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422b90e8-05fa-4c24-aa74-2f477790a56a", "sighting_of_ref": "indicator--78d572cb-adfb-4ba8-b0f0-e1716d0562e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e920f2-a066-49aa-bd72-aaf60082ee89", "sighting_of_ref": "indicator--06569522-910f-47c7-ac87-7f37d1f447e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7599c501-bcc6-4ad0-857a-1e34d27fd11a", "sighting_of_ref": "indicator--06569522-910f-47c7-ac87-7f37d1f447e2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e6b67c-6141-4a94-be56-f89019f72a2a", "sighting_of_ref": "indicator--c9d39150-bc27-45dc-ad73-460d540a608d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f11ad57-81fc-43b2-89d3-eeecf13c631e", "sighting_of_ref": "indicator--242bedf9-0482-470b-891e-c0559463d92c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c27aa4-6c41-46b5-91c4-9fb7a44ef69f", "sighting_of_ref": "indicator--b463db56-e2f7-40bb-a1d0-334ae61ca0b3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea4765a-3acf-49a0-9015-c8ff2e460a54", "sighting_of_ref": "indicator--b463db56-e2f7-40bb-a1d0-334ae61ca0b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beae3922-4ee0-475d-9832-06d8f38aab96", "sighting_of_ref": "indicator--d0f68c57-90e2-4137-870b-7f28fc64ab8e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccc2239-c0c0-470b-82ed-da240784f54b", "sighting_of_ref": "indicator--719c4e4a-c9cb-4179-a3d7-47a491d56507", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e849b551-bca2-43d3-82ce-061197914bfe", "sighting_of_ref": "indicator--ad342436-7ff6-408a-8eac-0e99eba9960e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbfe0f7-202e-4854-b4bb-c395d1789772", "sighting_of_ref": "indicator--9c1c5f91-3e5b-44ad-8109-606767e03f2a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5c792c-bda3-413f-8f2d-99b30064260f", "sighting_of_ref": "indicator--1441ff92-0e32-4dd7-bf07-68927b0bbb8d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90eba258-26b3-40eb-95c8-1df4233012c7", "sighting_of_ref": "indicator--e2b50ec0-1b66-4885-8e0c-108b635ac014", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acbac7f-7a18-46c0-84fa-fae21a687489", "sighting_of_ref": "indicator--2bd57991-6c6a-450f-b351-35e27c597559", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fc2cf4-db9c-4552-adca-3a73f5b3ea14", "sighting_of_ref": "indicator--3fdb78b5-61d3-4a23-8483-315a4262f287", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d31d4d-1465-4a35-b512-86fe32ceeacb", "sighting_of_ref": "indicator--88d611fa-7961-4234-b543-a78d88384b09", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc807614-c369-4d7c-a75e-ca51bde094d2", "sighting_of_ref": "indicator--a9449e71-2afe-4c81-86e0-13672cee8cc8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ceebb3-b715-4eb8-9cd5-f77ca3b8c8af", "sighting_of_ref": "indicator--6629c92f-be27-4bd9-a4c9-cb9ab29f9848", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f927cf1-6e9f-419c-92a8-8a3fe6a27731", "sighting_of_ref": "indicator--0fdeae5e-8ea2-4bfe-bdf0-3afabd94cff2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24cd1d94-48ef-4189-ada2-1c04447679f4", "sighting_of_ref": "indicator--0fdeae5e-8ea2-4bfe-bdf0-3afabd94cff2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aad16f1-54d0-47e9-9df1-94d20fa9cd1b", "sighting_of_ref": "indicator--b559a7b5-83a3-4156-b38e-52df6c7efb6b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d40e954-0418-4d13-ab61-877bc3c7e452", "sighting_of_ref": "indicator--193fcc23-5b4c-4aa1-81d8-b9674ded00bf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4700e7a8-bd83-4557-bbf4-d5b14be827e1", "sighting_of_ref": "indicator--4fb09747-06dd-4aa5-a429-ba5ebf3562d7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52c6122-60c7-42d0-8285-487cf738bc48", "sighting_of_ref": "indicator--4fb09747-06dd-4aa5-a429-ba5ebf3562d7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b9def8-b0e5-4e54-b682-71bebf7711f9", "sighting_of_ref": "indicator--a2957bdd-a76f-4af4-828f-c154825b794d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82939e44-3032-4d1a-b7f6-0ee9f6bcde87", "sighting_of_ref": "indicator--a2957bdd-a76f-4af4-828f-c154825b794d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8546cedb-964a-45b5-b369-a8831dea598f", "sighting_of_ref": "indicator--72353380-1d0d-49aa-8701-ebe20fb1deac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c05fa6-a9b3-44ee-be46-8a75c294be4e", "sighting_of_ref": "indicator--737e5736-a476-43d2-a5fb-bc9d27caa5c8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a87bb7-e9f6-4056-bdd2-b84f6ae47645", "sighting_of_ref": "indicator--e113a740-d774-46c0-8cd1-ffbb5c20a264", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49d4ce3-8349-460a-b33b-7f2ee418e647", "sighting_of_ref": "indicator--7ada47c2-a785-4850-b152-d0121533de11", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e480d2f-0108-4720-a363-24591e4113e9", "sighting_of_ref": "indicator--7ada47c2-a785-4850-b152-d0121533de11", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5bd5e4-468b-47ba-9e35-27b0cadfd9d9", "sighting_of_ref": "indicator--7cf21e99-45e8-4a6e-95e3-2ee71d6dcc59", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb185a77-2e71-478b-a054-8e8ef6eee805", "sighting_of_ref": "indicator--41b0c6f4-e204-4fd5-9c89-9c13d538c831", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de453b2-709d-4e9d-b6b4-8b7391b519e7", "sighting_of_ref": "indicator--17842c39-f909-4912-b41b-2cfd2f8a187e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032d4bcd-37b8-46b6-8fc8-a54bd16110d0", "sighting_of_ref": "indicator--e441d748-743a-420c-ad40-a733986f4333", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14a3cd9-902e-4dd5-aa81-d8bdf1a73410", "sighting_of_ref": "indicator--e441d748-743a-420c-ad40-a733986f4333", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20091bf-a03a-4ab8-b1c3-712a9884769d", "sighting_of_ref": "indicator--dac452ae-359f-4aaf-b233-87407d3e7715", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d612b14-065c-43d8-a31c-37ac79803f7f", "sighting_of_ref": "indicator--e9a44d6a-7147-4d8a-9c4b-a73bb4d112f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d410b4-d0f5-4149-be95-b4927e29d770", "sighting_of_ref": "indicator--9c7b063b-839b-4c19-839e-4450acbe4dde", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfb6c18-2c79-417c-8837-ee962384f461", "sighting_of_ref": "indicator--13ff6853-94b9-447d-926c-ea703f5dadf3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76451bec-06c8-4e56-bce2-f590cdf2d254", "sighting_of_ref": "indicator--13ff6853-94b9-447d-926c-ea703f5dadf3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab62e480-245a-41ab-b2b2-1500c2836545", "sighting_of_ref": "indicator--d2adaf30-4cda-489e-9088-1a6acef883f0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00479444-7b02-413f-a3fc-3cef6dc243d0", "sighting_of_ref": "indicator--1cb03b7e-7e6c-4121-b71f-9dbd450d50cf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf01f033-13ff-4cd0-acd1-09fa4ec72449", "sighting_of_ref": "indicator--1873eba3-d72f-4b79-9d41-fd8d248e4c0f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d112bf77-a9c1-41b2-841e-a3deb2d81b8b", "sighting_of_ref": "indicator--9fc7280a-1630-4ad5-a03b-d5a1374a24df", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2a7948-ffce-4b84-9d58-8dfd0df3b35c", "sighting_of_ref": "indicator--a9ae3453-6052-46bb-b603-e9210ac1735d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39359228-9738-4727-9d22-850677ace488", "sighting_of_ref": "indicator--5de2fcb4-e098-423e-b80a-857acb4c873b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c7b4de-b38b-43cd-9815-44dc3ced7e89", "sighting_of_ref": "indicator--1f650c33-2fcf-40c4-859d-fcdc9332d8a4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa330a2-7501-4592-b0b5-c054958b65d8", "sighting_of_ref": "indicator--fd1d7159-cedd-439b-801a-a212543b114a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6211a0-7b94-42d4-a37b-8b324e0648a4", "sighting_of_ref": "indicator--dafe59b2-abac-408f-b42a-917d962e505e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fe4cae-d19a-4340-a575-dba40105576e", "sighting_of_ref": "indicator--dafe59b2-abac-408f-b42a-917d962e505e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b78e0ae-fbea-426b-909c-72b0e4af1d23", "sighting_of_ref": "indicator--dafe59b2-abac-408f-b42a-917d962e505e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69179a25-9167-4bd2-915d-7f6a28a4c686", "sighting_of_ref": "indicator--342eaacf-3880-4417-b7c1-ddae7b769e45", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73eac5da-923a-4a2c-b2b4-ffe945158615", "sighting_of_ref": "indicator--a510456c-31ed-42ac-a3bc-db2d311751ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679f076b-b4c9-4ace-8cf3-8eae4024b22e", "sighting_of_ref": "indicator--a510456c-31ed-42ac-a3bc-db2d311751ac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48fea6b-b942-43ed-b555-eba4359f12da", "sighting_of_ref": "indicator--37d878fc-accc-4f4f-b50c-7c36db8d22d5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec8373d-a10c-4603-bf5c-22f8b15a1b23", "sighting_of_ref": "indicator--7aafeb85-6483-455c-9a02-c53aacb39262", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ff2961-4364-4de9-9544-f4fb1691cb4e", "sighting_of_ref": "indicator--d10b45fb-f757-4cfd-9462-f5366ce1d8bf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a806a2a-8702-482d-913b-7f8f26e64a3f", "sighting_of_ref": "indicator--bd8d18f7-5cf4-4910-aa77-833e0a1863ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91c79fc-fc37-4c0c-80eb-fd66c89e816b", "sighting_of_ref": "indicator--bd8d18f7-5cf4-4910-aa77-833e0a1863ce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd156cf5-5735-465c-bfe2-83bce6ab825f", "sighting_of_ref": "indicator--bd8d18f7-5cf4-4910-aa77-833e0a1863ce", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbf92a3-a22c-4686-8366-575f654b9b92", "sighting_of_ref": "indicator--05d55007-aa0a-40b0-b071-7f0db88921f5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c0a84e-089a-4440-bbf4-05af7596f116", "sighting_of_ref": "indicator--05d55007-aa0a-40b0-b071-7f0db88921f5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9660ab29-00e9-4e6f-bc6a-9b960f9860a2", "sighting_of_ref": "indicator--34510b08-8db2-41bf-98c4-00871056ad4a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bf14c7-5876-49b7-af3d-956d246de0ff", "sighting_of_ref": "indicator--09808320-9750-421c-af16-feae0ce0219a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b86517e-bcf1-4c14-b9c2-30d01db284e0", "sighting_of_ref": "indicator--b5b71781-266b-4761-911e-6d9e75dbaadb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd1f025-1d90-4294-b53b-12bcf074788e", "sighting_of_ref": "indicator--b5b71781-266b-4761-911e-6d9e75dbaadb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6459849d-377a-454f-b07e-80775d413dce", "sighting_of_ref": "indicator--b5b71781-266b-4761-911e-6d9e75dbaadb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e91c3d-88ca-471c-96bd-7f95025f07f0", "sighting_of_ref": "indicator--c744901b-8f41-4a91-997e-b190155d80ab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21c9892-155c-4152-9ef3-089f8666389e", "sighting_of_ref": "indicator--e318fc2e-85df-45c4-8e5e-68e541c65d7d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fcb53d-2a71-43a9-80e5-e9c6d1cd6827", "sighting_of_ref": "indicator--e318fc2e-85df-45c4-8e5e-68e541c65d7d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db529f88-a142-457d-9f68-bc3e41a8c507", "sighting_of_ref": "indicator--e318fc2e-85df-45c4-8e5e-68e541c65d7d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215e896d-9e16-4b42-8ece-3aed24eedd7c", "sighting_of_ref": "indicator--3645e05b-01ac-4430-b448-3dc8fe5ded3c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c21810-588b-4cd7-a34e-4337e05bb166", "sighting_of_ref": "indicator--2bbeb3fb-ffc0-427e-8c68-6f37a4b69c00", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a42984-9787-44c6-b9f5-404135c6f6a8", "sighting_of_ref": "indicator--2bbeb3fb-ffc0-427e-8c68-6f37a4b69c00", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52ce337-277f-4c5b-b166-f7a6818a4901", "sighting_of_ref": "indicator--2bbeb3fb-ffc0-427e-8c68-6f37a4b69c00", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b20bb2c-a2d6-41a3-9fce-14c4f7d9dc7d", "sighting_of_ref": "indicator--2de6b52a-a142-4b0c-b090-d13f2006d7ca", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20da181-767c-408c-ac36-d7ad899f5bc2", "sighting_of_ref": "indicator--00839277-54a4-4711-9deb-9011d41c3dbb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a685bda8-9802-4c0b-a9bc-a8a46c239512", "sighting_of_ref": "indicator--752e25fe-d40b-488a-8544-bc565e57e3f0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69dbd5e6-047b-4842-beeb-a365e7b405fb", "sighting_of_ref": "indicator--752e25fe-d40b-488a-8544-bc565e57e3f0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f32ed3-5b6d-4cb4-857e-3a5ef7c417ee", "sighting_of_ref": "indicator--dbc67187-79e5-417e-8ce3-772a03d38120", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830e892b-4676-4521-b3cd-53346f3e43a0", "sighting_of_ref": "indicator--dbc67187-79e5-417e-8ce3-772a03d38120", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb29968-0483-4dc4-a731-627eae30909e", "sighting_of_ref": "indicator--dbc67187-79e5-417e-8ce3-772a03d38120", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4875da-7fdd-4bc9-bf6b-a6a5257732a1", "sighting_of_ref": "indicator--3b5308c6-2c3a-4086-8871-34d827a33755", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2462cc-bb07-4ace-afc2-8df2f1fa7002", "sighting_of_ref": "indicator--3b5308c6-2c3a-4086-8871-34d827a33755", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c10630-21e8-4968-9800-18ed66aad06c", "sighting_of_ref": "indicator--3b5308c6-2c3a-4086-8871-34d827a33755", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216c7a80-d0c9-4073-b279-2930c142356f", "sighting_of_ref": "indicator--7acfbd08-fdd0-4e2e-9723-646d16454d4c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58c535c-ac34-4d2d-a36b-30da90895fc5", "sighting_of_ref": "indicator--1ea34c46-d7d6-4b7c-99d1-3fa526c3f6ed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f793e441-c5f9-4279-811d-7026b8928b46", "sighting_of_ref": "indicator--1ea34c46-d7d6-4b7c-99d1-3fa526c3f6ed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c22e414-674b-40d2-9f74-ff88d1f43975", "sighting_of_ref": "indicator--7340932f-6bec-4aa9-9aea-f4e58db74641", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5929029d-22bf-44b3-a8db-00c812ec13c2", "sighting_of_ref": "indicator--c2ab0dbe-4090-4c22-97b7-2d9cecba8859", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7c4811-e8e3-44c9-996a-f14a82d42d09", "sighting_of_ref": "indicator--bc787098-8173-4036-8c60-452efa8bf8e3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afcf7f0-6ef3-4a63-9105-f1c4e7a651a1", "sighting_of_ref": "indicator--26b209fe-25fa-4ca1-a536-971a67ae55ba", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ce311b-4b82-459e-be8a-866cc320bba4", "sighting_of_ref": "indicator--26b209fe-25fa-4ca1-a536-971a67ae55ba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb557222-b5ed-4cee-9be8-9d6363d60b17", "sighting_of_ref": "indicator--26b209fe-25fa-4ca1-a536-971a67ae55ba", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1190a2b7-9c8b-46c2-bf68-f67440936fa2", "sighting_of_ref": "indicator--ddd5756a-4811-4b71-adde-5f033702507f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b1ac3d-a82c-48bf-bec8-2732137377ce", "sighting_of_ref": "indicator--5da0628f-aeda-43af-94bf-b376f3bbd1a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ccdc81e-366a-46cd-9579-98a3e0381e72", "sighting_of_ref": "indicator--5da0628f-aeda-43af-94bf-b376f3bbd1a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f9ccb3-0934-4264-8349-5547fcb53e05", "sighting_of_ref": "indicator--d1cc6085-d5e9-473c-9701-4356cc919307", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0454efc-4b22-46cd-9559-5f78e58bfc3c", "sighting_of_ref": "indicator--d1cc6085-d5e9-473c-9701-4356cc919307", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fabb58-69d8-4a94-a435-f981e6ec6c25", "sighting_of_ref": "indicator--d1cc6085-d5e9-473c-9701-4356cc919307", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ab4c7e-86ad-4fd5-951f-34be8494a8ea", "sighting_of_ref": "indicator--1e70a35e-99f7-4f80-a920-0fe9517a982f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75cd935-3b46-4e78-896d-b116b372a290", "sighting_of_ref": "indicator--1e70a35e-99f7-4f80-a920-0fe9517a982f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035f13e0-5dd3-4e41-9614-c777cc3447b3", "sighting_of_ref": "indicator--1e70a35e-99f7-4f80-a920-0fe9517a982f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7789fcac-a876-4695-8f84-ef1067805c86", "sighting_of_ref": "indicator--7f9d6cdd-14d1-4aa2-bd43-081cd8afd786", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2988dc-aa97-4f80-883a-576f29364c90", "sighting_of_ref": "indicator--7f9d6cdd-14d1-4aa2-bd43-081cd8afd786", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42583353-5e58-4984-a8b8-b2c26009b5c7", "sighting_of_ref": "indicator--7f9d6cdd-14d1-4aa2-bd43-081cd8afd786", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5792312-c444-4163-877e-f1c31117499a", "sighting_of_ref": "indicator--db94a6de-6b5e-43ee-a489-901c017193fe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463dcca8-1176-4d56-b464-4010e672c7a3", "sighting_of_ref": "indicator--db94a6de-6b5e-43ee-a489-901c017193fe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee4e6a7-8208-4c7d-9de4-c79710dfc366", "sighting_of_ref": "indicator--db94a6de-6b5e-43ee-a489-901c017193fe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765c505d-b0f1-4ea8-b503-344cbcb0c1d1", "sighting_of_ref": "indicator--480fc2a4-c5c0-495f-a5a9-3e48f3f2d71b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d14bb93-d96f-4551-93bb-0779686b9817", "sighting_of_ref": "indicator--4cbb5a70-67f6-440b-abaf-8347fa460fe9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c245f2c0-1f9b-4662-951a-51c1de7d1072", "sighting_of_ref": "indicator--24403bb9-68d2-4c4b-8ee4-2b1853e6536b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae3761c-a4bd-410c-86a2-58b50fa11b94", "sighting_of_ref": "indicator--26c3af4c-2135-4f61-aa65-f0a1076f7efc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0efc5ac-dc87-4ab0-9039-4ef21861fd35", "sighting_of_ref": "indicator--147c412c-ac21-4089-9c9b-84e943c35afa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1200369c-bd0f-4472-8289-d1eb6be9797a", "sighting_of_ref": "indicator--9718ea65-58c1-46e9-9871-1a3aa36be559", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01737c6-a688-42fe-843e-66fb0b333ee9", "sighting_of_ref": "indicator--f9f8cc51-56df-456a-88f3-5c265713851d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659d6459-467b-45ab-93ab-91f8510a2d7d", "sighting_of_ref": "indicator--92dac8f2-3f9b-4509-80fd-61a1ba838aca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11846f00-2e2e-4325-a974-32f6283ec0d2", "sighting_of_ref": "indicator--f3004070-bb80-4e36-96d4-06b8703c0607", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14eac9f6-fda9-4cfd-8620-1afa9c9a3afe", "sighting_of_ref": "indicator--9d95cf6c-556a-4882-b28f-b210ac965d90", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb90a54-c278-4906-b95d-706e34eeab75", "sighting_of_ref": "indicator--135f25da-567f-4e70-8e35-7c3c1c226959", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b4a1d2-e488-449d-b5ef-18f408d70cdf", "sighting_of_ref": "indicator--f1fbc8d4-4453-4618-af4d-c08d9be7f64f", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2f6074-1781-492a-a209-d3259e75e122", "sighting_of_ref": "indicator--28a5c6a7-d06d-451e-9bc9-760b1f8d1f10", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72f5eb7-36e9-47b9-87cf-4f4ad62ff10f", "sighting_of_ref": "indicator--cb489eac-1fe5-46de-bda0-176b83bed736", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cb422d-cf85-443d-88a2-7d647a66a345", "sighting_of_ref": "indicator--d9acf67f-feb4-4a58-865e-2d0ebdb1961e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc2b94d-4f84-47d5-b72e-69d7dbb93b79", "sighting_of_ref": "indicator--ff630bc8-febc-47f9-95a9-bc69fe06ce3b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8a0883-7054-4193-98b6-22acc9629d8a", "sighting_of_ref": "indicator--9a83241b-21ee-4c5b-aaf0-d43413986e02", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1530ac-9df3-40bd-922c-078b524065a3", "sighting_of_ref": "indicator--8f9a254d-ac93-4055-80a3-d6b90f4e1290", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712994e0-fad5-4345-a701-41b275d61e58", "sighting_of_ref": "indicator--559936ef-1bf8-46c6-afc4-cb781d5527b8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f65a710-aa1a-4f32-b4fe-1aaadcd60dd2", "sighting_of_ref": "indicator--559936ef-1bf8-46c6-afc4-cb781d5527b8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3064deae-b301-4ea6-970c-54ada9cee665", "sighting_of_ref": "indicator--01584855-8dda-41f2-8e01-0b4f6f06ff66", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cae178-c7fa-4dea-8f12-5c7b2834ecea", "sighting_of_ref": "indicator--bd2bc65a-c8c4-4c7d-b2eb-f4457b4b34f8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47716aea-8527-4054-a574-ccdecbd2d6ee", "sighting_of_ref": "indicator--f79864ba-a913-4536-907e-05624876ef76", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c976bc-b956-4746-8ce6-411026f687e7", "sighting_of_ref": "indicator--8106d82d-3767-48d5-9dd0-77dcf752a2ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493ec56a-8b83-4137-ab1a-6cfddf3d683b", "sighting_of_ref": "indicator--8106d82d-3767-48d5-9dd0-77dcf752a2ef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e24e33-f918-455d-8aaa-0ff9cc2a7ee6", "sighting_of_ref": "indicator--d2f753e8-71bb-431c-8035-c41b1c09e9c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bba624-b8f1-42c0-bc3c-e17e447af88f", "sighting_of_ref": "indicator--d2f753e8-71bb-431c-8035-c41b1c09e9c6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0d7577-2354-478d-a823-5e128515560a", "sighting_of_ref": "indicator--d2f753e8-71bb-431c-8035-c41b1c09e9c6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdca29b-7f2a-4b76-b82f-6d01de3d5785", "sighting_of_ref": "indicator--3fcb60a4-1723-43d8-b1ac-034b77b42487", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62c9245-69df-414e-97f9-4c1058586fc3", "sighting_of_ref": "indicator--3812dfde-212f-48ee-8466-ab9249b8f468", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2240ed89-1878-4e09-9390-1cd224c30de6", "sighting_of_ref": "indicator--3812dfde-212f-48ee-8466-ab9249b8f468", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15413b87-9383-46c3-8bbc-1432e5423eda", "sighting_of_ref": "indicator--3812dfde-212f-48ee-8466-ab9249b8f468", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1fa6cc-727e-4db4-9dfe-cff7755883ea", "sighting_of_ref": "indicator--f0d70caf-87a2-49ae-80da-8a54c2d96f15", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50161b1c-4d30-45fa-b8bd-436dd9e81d34", "sighting_of_ref": "indicator--cdda179f-78e9-4905-9476-b70fae5ba3e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef67bda-48b8-4a2d-947f-1f63f4ac6cd4", "sighting_of_ref": "indicator--9d09b7ae-c23e-458d-8c35-205eba280a1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15980374-f662-480f-8acd-5c0a3d7319af", "sighting_of_ref": "indicator--2135f9ae-f71b-4280-9700-137b585aadb6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59beaec-9523-4e9a-909d-5f0a22601715", "sighting_of_ref": "indicator--5cc2aff8-395a-4e8b-8710-7fc14b27a911", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4513487-136a-41af-8cbe-f33568dcdaca", "sighting_of_ref": "indicator--9e2aef9d-c605-4a5c-b957-a73d9696a9d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b92904a-7431-4049-948a-11d2d169f8f8", "sighting_of_ref": "indicator--91ae9503-a16c-46f0-b96b-3ae1a3219f20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991ed4c1-1c9e-48af-857e-61d30f7b52b4", "sighting_of_ref": "indicator--7d0de5fc-d1cc-4507-8a7d-7f81c355dcc0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987ecf9a-a7ce-4b5f-b3d3-492759f52e88", "sighting_of_ref": "indicator--49129857-6321-4ef9-aee3-76c6ad522716", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde27fa5-8601-4370-af84-7400155bd651", "sighting_of_ref": "indicator--39b97adb-797d-4266-a991-7ff0a84a78c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cfba97-bffb-4828-bb1e-6da20edd44ad", "sighting_of_ref": "indicator--22160b81-afc4-4c77-b0cc-ec2154b8cf16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6843860d-3cfb-4a91-a55e-7de4f82657ff", "sighting_of_ref": "indicator--4ae15a92-f7a7-4bc3-88c6-217c572eb243", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859e82c0-052d-4358-9cc4-1ff787a852c9", "sighting_of_ref": "indicator--b06ce5be-d187-4ba8-9a19-1393f1d54ec4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a2937b-03f9-4a15-ad1f-cb2b49e2cd09", "sighting_of_ref": "indicator--a3b60572-dfdb-4e68-8eb0-4450b6d26136", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff688091-f12b-49e0-8d82-d0897d2d8b69", "sighting_of_ref": "indicator--6db80fe6-9fcb-4fa5-95b6-036cf9d6fa7f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09f082f-b2f5-45db-87e3-687b05b0d3c3", "sighting_of_ref": "indicator--8fcc0998-f306-47ac-b890-221ce921a4d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c61803-a31a-4972-a8fe-92cecef1fc13", "sighting_of_ref": "indicator--ae7376f0-9e93-4fe2-a0ef-9c04461e1932", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf62bd5-3877-4fe4-8837-55d43e4c0d5d", "sighting_of_ref": "indicator--5b2d0896-78f6-49c0-885d-10872e4bf14a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69543cc-8eb2-4176-8998-4a9f5d5435c6", "sighting_of_ref": "indicator--dc477abc-7519-41db-89a7-a2f5d7460356", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737e7fef-4a4f-42db-bf51-f82d8f3e492f", "sighting_of_ref": "indicator--da46a131-10af-4765-b078-2778f5b0e7c3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e919c06e-b4ef-4abe-8d79-818ba7b20bd3", "sighting_of_ref": "indicator--da46a131-10af-4765-b078-2778f5b0e7c3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0976f92-f92c-43e4-8313-daeef189b7f9", "sighting_of_ref": "indicator--da46a131-10af-4765-b078-2778f5b0e7c3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9147e3b1-b96b-465a-89c5-cd55de0ffffa", "sighting_of_ref": "indicator--322a0bbe-d28a-4280-bf49-4d57dfd657b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65cca44c-e867-4b67-bd0b-02c373804731", "sighting_of_ref": "indicator--322a0bbe-d28a-4280-bf49-4d57dfd657b7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc54f0af-85b8-4228-bd0d-10623399a79c", "sighting_of_ref": "indicator--322a0bbe-d28a-4280-bf49-4d57dfd657b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e26eeaf-aed1-4e8a-bb9c-13fbf413a832", "sighting_of_ref": "indicator--d502a9a3-fd31-4a02-88b7-bb5df7fec470", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0bf6c8-7a85-4d02-ac68-a872789ca617", "sighting_of_ref": "indicator--d502a9a3-fd31-4a02-88b7-bb5df7fec470", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f32a69-2647-41e1-9b2b-355cd3751c8b", "sighting_of_ref": "indicator--d502a9a3-fd31-4a02-88b7-bb5df7fec470", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46845c42-2e73-4e11-8435-2d4d0a30b7f5", "sighting_of_ref": "indicator--d84b17a2-4fdb-41e8-8e0e-7b356a9d0e33", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61d7298-ca77-4ebf-82f3-c737ac959181", "sighting_of_ref": "indicator--d84b17a2-4fdb-41e8-8e0e-7b356a9d0e33", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da09b42f-edfc-4604-905a-7509ef201910", "sighting_of_ref": "indicator--d84b17a2-4fdb-41e8-8e0e-7b356a9d0e33", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438e35f3-4b63-4071-90cd-787e1bad2bef", "sighting_of_ref": "indicator--6e6eacc3-9430-4970-b8cd-e4d2f1ee0efe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e289b0-923a-4457-b841-825293447dbf", "sighting_of_ref": "indicator--6e6eacc3-9430-4970-b8cd-e4d2f1ee0efe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2982ef8f-3a6a-4066-90b9-dba0d9cee85e", "sighting_of_ref": "indicator--405686a4-90a9-4e07-9d59-a9f15784721b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dc902e-d6ed-41e3-96a1-f2e70ba5ae94", "sighting_of_ref": "indicator--405686a4-90a9-4e07-9d59-a9f15784721b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ce210d-b2bf-4c6c-89e5-7aa2c2927a0b", "sighting_of_ref": "indicator--405686a4-90a9-4e07-9d59-a9f15784721b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a676691-867c-416f-8f24-ab78ae4ace17", "sighting_of_ref": "indicator--16c81a88-8eab-4867-91d0-f7ab0031149b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409350ea-5a98-4c83-a6b8-6ab6992ea5ed", "sighting_of_ref": "indicator--16c81a88-8eab-4867-91d0-f7ab0031149b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d328c66-db3d-4749-ab16-a3fbfa62953c", "sighting_of_ref": "indicator--16c81a88-8eab-4867-91d0-f7ab0031149b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86753cd-952c-4e9b-950b-54636679a9e7", "sighting_of_ref": "indicator--a74ee920-14d1-4d67-9235-b5db731116f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7388ed02-fe74-4a9f-9acc-736d2cb6df31", "sighting_of_ref": "indicator--a74ee920-14d1-4d67-9235-b5db731116f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adc2565-7d1b-443a-926a-95a412637f73", "sighting_of_ref": "indicator--a74ee920-14d1-4d67-9235-b5db731116f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3893528d-a591-4f0f-b04c-e13ef0b2e81d", "sighting_of_ref": "indicator--76966a23-ee1a-4678-9028-dad8a7457955", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619b45f2-da3d-4303-b6c8-d986f0fd078e", "sighting_of_ref": "indicator--83a472df-4059-4d39-938d-7413ba913131", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6770b83d-0061-440b-b1e5-57545b62509c", "sighting_of_ref": "indicator--83a472df-4059-4d39-938d-7413ba913131", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38061263-1978-49af-9155-eeead6ef292e", "sighting_of_ref": "indicator--96db7194-7494-4677-973a-d23f32cf2e6a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad75d18-544a-471b-8d18-1f254ad5bc0a", "sighting_of_ref": "indicator--96db7194-7494-4677-973a-d23f32cf2e6a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbe015a-c2c8-4ad3-a46d-60dbd210093e", "sighting_of_ref": "indicator--96db7194-7494-4677-973a-d23f32cf2e6a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceddca58-738e-48e6-8a31-e299b73d97c8", "sighting_of_ref": "indicator--44747194-425d-4553-9f33-95f08f0baa3a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ae317f-3ba4-4fae-9e0c-85dd23c5dcae", "sighting_of_ref": "indicator--c0630bd6-ae4e-408f-8fbf-94d820f5b008", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38932d8e-cb66-4e58-acfa-21cb559a432f", "sighting_of_ref": "indicator--c0630bd6-ae4e-408f-8fbf-94d820f5b008", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627d3f3a-c6f4-4a91-8736-4df8898b4584", "sighting_of_ref": "indicator--a06d26a6-5ee4-407c-8fad-a413c9b9ef25", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b525072-f7c0-4f33-9000-b87be0f0eb43", "sighting_of_ref": "indicator--a06d26a6-5ee4-407c-8fad-a413c9b9ef25", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60d727d-118c-4bab-9cde-bc9f4df9b50c", "sighting_of_ref": "indicator--a06d26a6-5ee4-407c-8fad-a413c9b9ef25", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287e5401-3bd0-4aec-9ffe-10f8f8d7e629", "sighting_of_ref": "indicator--fef0f744-6bc9-4a2e-9dcc-3ffa6e0a95c2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c631b4-b78c-4670-b425-ffd135a45128", "sighting_of_ref": "indicator--fef0f744-6bc9-4a2e-9dcc-3ffa6e0a95c2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25747405-2b5d-4bf4-bee5-d6839043f5ec", "sighting_of_ref": "indicator--fef0f744-6bc9-4a2e-9dcc-3ffa6e0a95c2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95307823-273d-4b98-beec-d66a4b826c09", "sighting_of_ref": "indicator--6e9a0124-046b-436e-94f6-781c693a001f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a945fc-9f04-42b8-9d44-7dd01c6f895c", "sighting_of_ref": "indicator--6e9a0124-046b-436e-94f6-781c693a001f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56943180-a51a-4879-81f7-9947dd0e42d9", "sighting_of_ref": "indicator--6e9a0124-046b-436e-94f6-781c693a001f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ba1dd4-09e9-4b8b-befd-a795c15266f6", "sighting_of_ref": "indicator--8e764dff-1d31-4eb5-be6f-d5eb9c46fbf5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976a8c22-52d2-4bcf-8397-a42f20c0c723", "sighting_of_ref": "indicator--3b5e2bff-55f3-4100-9645-085cb64a1b2a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6866e26f-adc4-41d7-83cd-45c85d13718b", "sighting_of_ref": "indicator--3b5e2bff-55f3-4100-9645-085cb64a1b2a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b78fd79-baf6-4665-8c98-52fc9df974c7", "sighting_of_ref": "indicator--b7463069-fb1a-4c8c-8863-c4193d1aad20", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c97f6a6-1c33-4b2c-9eb0-6fe794dfe40c", "sighting_of_ref": "indicator--722f461e-d917-454a-b170-33c94988e3bb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0149d9-8e6b-4bb0-ade3-16d301a97db5", "sighting_of_ref": "indicator--722f461e-d917-454a-b170-33c94988e3bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c509188e-b151-49c8-aec3-870c6a84a4b8", "sighting_of_ref": "indicator--6b8cf8cc-9d7f-413f-aa98-55b256719318", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4dc6185-50ac-4163-ae1b-4252e4497a58", "sighting_of_ref": "indicator--6b8cf8cc-9d7f-413f-aa98-55b256719318", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e535cd-d25b-4a06-b7d0-2ee2f8a35023", "sighting_of_ref": "indicator--6b8cf8cc-9d7f-413f-aa98-55b256719318", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6458e726-5c3c-4d1e-a27e-f95536946355", "sighting_of_ref": "indicator--d132f04a-e653-47ea-8a12-600270081162", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e98fe67-cc8c-47b6-b5d7-e239702db961", "sighting_of_ref": "indicator--f13c59f9-054a-4814-8609-e2f022eee932", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ab4d9b-9b2c-4dfd-b1b8-fa4d47effcea", "sighting_of_ref": "indicator--f13c59f9-054a-4814-8609-e2f022eee932", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112620fa-b925-4689-b660-348ab87877db", "sighting_of_ref": "indicator--f13c59f9-054a-4814-8609-e2f022eee932", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e149dcf2-a36c-4ee8-ac3e-7732df7a2a52", "sighting_of_ref": "indicator--15da90c1-04e5-456f-87ca-61b18c028ea6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9673d5e8-1b3b-4c74-b0b8-508483255199", "sighting_of_ref": "indicator--15da90c1-04e5-456f-87ca-61b18c028ea6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c4ca9c-1fba-46b9-8ce3-a6eeb11049b8", "sighting_of_ref": "indicator--15da90c1-04e5-456f-87ca-61b18c028ea6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd132f2-2302-44cb-be84-666f7a49cc27", "sighting_of_ref": "indicator--adced7e4-4343-4780-bad1-3ecd0d7fa6b0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aadc970-8347-4a26-af41-65591d495f77", "sighting_of_ref": "indicator--adced7e4-4343-4780-bad1-3ecd0d7fa6b0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3be1531-ead4-4a87-8dae-60ce3f271664", "sighting_of_ref": "indicator--9223eb33-4060-4941-84f0-29a9890ce134", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97714b09-97bb-43c4-b7e5-b928483339aa", "sighting_of_ref": "indicator--9223eb33-4060-4941-84f0-29a9890ce134", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0ec6eb-ba06-4d5c-9efe-dbd1f05607ac", "sighting_of_ref": "indicator--9223eb33-4060-4941-84f0-29a9890ce134", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50687028-7222-4cb8-ba8f-0afc3e62efca", "sighting_of_ref": "indicator--e871dba9-1097-44cf-a628-7c82d7caf63f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce90e17b-ab81-420e-8b5e-c78e15f3b68e", "sighting_of_ref": "indicator--e871dba9-1097-44cf-a628-7c82d7caf63f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa0bc91-0ae8-4d9b-ace8-1411c086aa19", "sighting_of_ref": "indicator--e871dba9-1097-44cf-a628-7c82d7caf63f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc2f69f-7226-418c-b01f-57f5528e79ee", "sighting_of_ref": "indicator--dd371bb1-fc43-4491-9f6d-69298404a0a1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9cc40e-e9d1-4ca1-9e90-6609b79ecd7a", "sighting_of_ref": "indicator--dd371bb1-fc43-4491-9f6d-69298404a0a1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d9dda6-0b85-4e66-a5a1-6ba605f72e3d", "sighting_of_ref": "indicator--dd371bb1-fc43-4491-9f6d-69298404a0a1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f4ed3c-8514-4ba0-9dee-41453014be78", "sighting_of_ref": "indicator--21ebacb2-9800-48a3-9d0e-c8638768365d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a5fdff-c8f0-4763-b561-0cbb4ecaf9ca", "sighting_of_ref": "indicator--21ebacb2-9800-48a3-9d0e-c8638768365d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e04e55-26bc-4922-80e2-fe7c5f3c86ee", "sighting_of_ref": "indicator--21ebacb2-9800-48a3-9d0e-c8638768365d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37de5e46-6fe6-4cd1-992b-7426934cacf8", "sighting_of_ref": "indicator--26eb1b0b-4e56-4fc2-96d8-a15a0e75ac7a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae54967-6fdc-4e31-803b-64a7445e27d6", "sighting_of_ref": "indicator--26eb1b0b-4e56-4fc2-96d8-a15a0e75ac7a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3286e0cb-c816-4c76-a8a8-381957244bca", "sighting_of_ref": "indicator--26eb1b0b-4e56-4fc2-96d8-a15a0e75ac7a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba1f1f2-715a-4c8d-afa9-9df06678bbc8", "sighting_of_ref": "indicator--2171f52e-9946-4f7a-9b61-1975e9e736e6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9525f679-b0ae-4415-b0fe-d9b005de54f1", "sighting_of_ref": "indicator--2171f52e-9946-4f7a-9b61-1975e9e736e6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5ebec0-258f-4a78-982d-2d594de30e5f", "sighting_of_ref": "indicator--2171f52e-9946-4f7a-9b61-1975e9e736e6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c29a7cc-d42a-44e5-8d4a-0766a18364e8", "sighting_of_ref": "indicator--81197200-1430-498d-9b1a-7ffe28e358b4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eeb9522-f8f7-4660-a7e8-e9884a048998", "sighting_of_ref": "indicator--81197200-1430-498d-9b1a-7ffe28e358b4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25db6bd9-fac5-40a8-96b5-42135297a89e", "sighting_of_ref": "indicator--81197200-1430-498d-9b1a-7ffe28e358b4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245ad560-a744-42c2-aa79-4b6e613d7074", "sighting_of_ref": "indicator--cb099ef9-be7c-4178-a134-fcc83f8636ee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be938662-3252-4529-85ee-149b242b9f52", "sighting_of_ref": "indicator--161772b2-c8ad-477b-9e6e-cc6f9b21a015", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aefadca7-bb94-410f-a90c-63d81bc7375e", "sighting_of_ref": "indicator--161772b2-c8ad-477b-9e6e-cc6f9b21a015", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0240d5c0-eb48-41af-82f2-733bf4a4a40f", "sighting_of_ref": "indicator--161772b2-c8ad-477b-9e6e-cc6f9b21a015", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cf3d88-e942-4813-9391-613a97c88d02", "sighting_of_ref": "indicator--7c9867a8-127c-40b2-9064-acfe75a8cf70", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a2f554-059c-4eba-bb63-6450ff99acd5", "sighting_of_ref": "indicator--7c9867a8-127c-40b2-9064-acfe75a8cf70", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc9a1b6-90b2-44fd-8080-ee502e16f9e7", "sighting_of_ref": "indicator--7c9867a8-127c-40b2-9064-acfe75a8cf70", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555c295c-94e1-435a-a5a4-3a3ae966bf40", "sighting_of_ref": "indicator--0c17bb0d-f081-4f91-8fb5-7b599f9bce66", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf0dbc7-160d-4b31-b589-cb410d65f721", "sighting_of_ref": "indicator--0c17bb0d-f081-4f91-8fb5-7b599f9bce66", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce1d813-4add-4019-9393-635316ed4340", "sighting_of_ref": "indicator--0c17bb0d-f081-4f91-8fb5-7b599f9bce66", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a624f7-abf7-401e-ab12-53d8fc462a89", "sighting_of_ref": "indicator--8a8c41d3-200c-43c2-b24b-f41caffbd0b5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e48b791-a78a-4107-a1d3-851c69a659bc", "sighting_of_ref": "indicator--8a8c41d3-200c-43c2-b24b-f41caffbd0b5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cb5bb2-5c62-4045-847b-14ecffde07fc", "sighting_of_ref": "indicator--8ea39efd-20a4-4d6f-bfaf-8e44739777da", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc8c049-4340-4fe7-bb23-1ff0842f47d1", "sighting_of_ref": "indicator--8ea39efd-20a4-4d6f-bfaf-8e44739777da", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f1a6cc-a769-4eaf-ba2a-7c46bb1c288f", "sighting_of_ref": "indicator--54e8130c-5d86-4eef-8b15-a20fdb59d088", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89869e1c-fcd1-4141-87eb-10cddda1b659", "sighting_of_ref": "indicator--54e8130c-5d86-4eef-8b15-a20fdb59d088", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d462ea72-c230-4ca8-b8f8-11fc287cb3d3", "sighting_of_ref": "indicator--54e8130c-5d86-4eef-8b15-a20fdb59d088", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68831774-e00e-4f06-8efa-734674c453e1", "sighting_of_ref": "indicator--ef231e7b-a567-46cf-bed0-91eedf70ad11", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12df30d1-a7c2-499d-aec7-e78a8d0d43d6", "sighting_of_ref": "indicator--ef231e7b-a567-46cf-bed0-91eedf70ad11", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2cc4e3-b88f-4505-8f5d-b29344921fad", "sighting_of_ref": "indicator--ef231e7b-a567-46cf-bed0-91eedf70ad11", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0db0b49-fb1b-482c-bd4e-ddf5d947af1c", "sighting_of_ref": "indicator--0c80ee5a-c9d3-4c43-a956-c30d9431310b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b75387-4196-45a2-b46d-11cd830c0991", "sighting_of_ref": "indicator--0c80ee5a-c9d3-4c43-a956-c30d9431310b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58801911-735f-44b9-98da-2d96ca82b07f", "sighting_of_ref": "indicator--0c80ee5a-c9d3-4c43-a956-c30d9431310b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072ea237-e95d-4ef1-949d-25bcc3833118", "sighting_of_ref": "indicator--b5fec191-6044-46ee-bed6-8e2fa2f4d560", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2579161a-4bbb-4324-b146-3849f5fb3be0", "sighting_of_ref": "indicator--b5fec191-6044-46ee-bed6-8e2fa2f4d560", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccd3ad8-3d5a-4e05-aba9-7a83ac646c64", "sighting_of_ref": "indicator--b5fec191-6044-46ee-bed6-8e2fa2f4d560", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b438a2-1a4d-4aff-84ba-4d967781e247", "sighting_of_ref": "indicator--6921bcaf-d491-44f1-b866-658837a789c0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f321d8d6-5c70-427e-824a-d2abbed7d963", "sighting_of_ref": "indicator--6921bcaf-d491-44f1-b866-658837a789c0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e77099-8c53-4817-afee-ab6e98f44d00", "sighting_of_ref": "indicator--6921bcaf-d491-44f1-b866-658837a789c0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6570db-0d09-4188-967a-7572b24d33db", "sighting_of_ref": "indicator--dc0d44c9-a105-44af-be44-09c412dd430b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1012ee4-87db-452a-9126-696ae9ce81cd", "sighting_of_ref": "indicator--dc0d44c9-a105-44af-be44-09c412dd430b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0eaf576-b3ee-4581-b0de-d3aa81a47348", "sighting_of_ref": "indicator--dc0d44c9-a105-44af-be44-09c412dd430b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1eb7ea3-24f9-4389-b5bb-3af5f58827c5", "sighting_of_ref": "indicator--303568db-6a7a-4fc5-9202-26f4453a1674", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1006b19-dc23-4961-8a3c-521c5e978571", "sighting_of_ref": "indicator--303568db-6a7a-4fc5-9202-26f4453a1674", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d26af84-662e-4538-9df7-fba29cc4ae13", "sighting_of_ref": "indicator--303568db-6a7a-4fc5-9202-26f4453a1674", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86eb9071-422d-48fa-ac22-bdae5245f309", "sighting_of_ref": "indicator--4b42654c-c20f-4f63-a8e5-e2a05d2c5c6b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f4c23e-88e6-420f-aee9-2b953baa1821", "sighting_of_ref": "indicator--4b42654c-c20f-4f63-a8e5-e2a05d2c5c6b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba26d574-54b1-44c2-9320-109935662cae", "sighting_of_ref": "indicator--4b42654c-c20f-4f63-a8e5-e2a05d2c5c6b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55eb48c0-b4a0-435c-8810-593fcaaf663a", "sighting_of_ref": "indicator--cf3082a2-aca7-4c96-b0b2-32ae92c31a08", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee7f4c0-a2b5-4a19-97d1-78f28d932594", "sighting_of_ref": "indicator--b99f36b1-75b0-4abd-ae3d-7f2bdf9ff882", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489a1461-d0fb-4148-ac7e-d7033f664969", "sighting_of_ref": "indicator--b99f36b1-75b0-4abd-ae3d-7f2bdf9ff882", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b5ef15-e78e-4847-9dc9-17f9ab2a7646", "sighting_of_ref": "indicator--b99f36b1-75b0-4abd-ae3d-7f2bdf9ff882", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224851af-9a8d-441b-a51a-fcb41f6e08c9", "sighting_of_ref": "indicator--d673b964-bc90-4574-b209-d45df15a8904", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd5536a-0b1d-4e77-ba62-83b0e9972eae", "sighting_of_ref": "indicator--d673b964-bc90-4574-b209-d45df15a8904", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4c45c6-4fc5-4ff6-a150-7b1d5a7b60c6", "sighting_of_ref": "indicator--d673b964-bc90-4574-b209-d45df15a8904", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efffa1a-b859-4c0e-9de6-974fb4da6263", "sighting_of_ref": "indicator--7320dbaf-8e97-4b31-9529-c9c1feebb1e4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9be83e-ea5b-4654-9985-01b2440726a1", "sighting_of_ref": "indicator--7320dbaf-8e97-4b31-9529-c9c1feebb1e4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d281c67-1264-429d-88ca-a3456f8d11ed", "sighting_of_ref": "indicator--7320dbaf-8e97-4b31-9529-c9c1feebb1e4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9af8913-0125-4e65-883e-1b3ff719ac62", "sighting_of_ref": "indicator--b8eab79f-7252-4332-ab81-7b9386bd706d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab65cbd-6de5-40e5-a3bc-26e2b6e4f00d", "sighting_of_ref": "indicator--b8eab79f-7252-4332-ab81-7b9386bd706d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a0bcc2-f464-44f0-b16f-dafc3f1f8ffb", "sighting_of_ref": "indicator--b8eab79f-7252-4332-ab81-7b9386bd706d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10c9fed-95bd-4498-be85-94281df75fe3", "sighting_of_ref": "indicator--f9dc999e-9dd0-488f-8419-f016e1412b5f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73e792d-cf7b-49ab-b1f0-7e71b40153ba", "sighting_of_ref": "indicator--f9dc999e-9dd0-488f-8419-f016e1412b5f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7637b869-5302-4635-8430-b38662d36616", "sighting_of_ref": "indicator--f9dc999e-9dd0-488f-8419-f016e1412b5f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cb02d3-cd48-4d7e-b7a0-c1c966286378", "sighting_of_ref": "indicator--6e70d88f-2513-4494-97d7-cc14ebc19b39", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078d40b1-d85d-4e6f-95a0-df522782a946", "sighting_of_ref": "indicator--7b43cabf-423d-457d-a54c-fd862f87bdcf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60b150b-a491-47a4-b905-1f389f13be94", "sighting_of_ref": "indicator--7b43cabf-423d-457d-a54c-fd862f87bdcf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e02190f-4d15-40a3-8dbe-c6bb784c6d0c", "sighting_of_ref": "indicator--7b43cabf-423d-457d-a54c-fd862f87bdcf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98265937-a772-4b4f-82c3-1370e1b7703a", "sighting_of_ref": "indicator--7f454863-8d42-40a9-85db-954d7f312718", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777427d6-986e-4850-8153-eb2e47554115", "sighting_of_ref": "indicator--7f454863-8d42-40a9-85db-954d7f312718", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4a808e-f255-4a19-9306-be884c9158d7", "sighting_of_ref": "indicator--7f454863-8d42-40a9-85db-954d7f312718", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d5e8bb-6422-4126-9561-5a102de8ca29", "sighting_of_ref": "indicator--5f4a8c26-895b-4497-9862-84dfd263f2f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de146de4-942c-42b2-a922-b7bb68a7b23f", "sighting_of_ref": "indicator--5f4a8c26-895b-4497-9862-84dfd263f2f8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90408724-6195-41c3-9e0d-36e9594f6b47", "sighting_of_ref": "indicator--5f4a8c26-895b-4497-9862-84dfd263f2f8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cb12aa-098a-4947-bec5-386e78e76c2c", "sighting_of_ref": "indicator--75620661-aa66-4424-8ee6-df3ce68997e4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a278ad8-a6a0-42d8-ac0a-b813110e07c0", "sighting_of_ref": "indicator--ad4d29fe-a4f6-4dc6-809d-ea63c6bb88f9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05b2e66-c8ab-43bf-86cd-d390b9df70d5", "sighting_of_ref": "indicator--a8ae0f35-9462-407d-983e-19d7fbea1914", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13280db-0a97-4688-ad3b-b5ecd150121c", "sighting_of_ref": "indicator--90149aed-80ee-4e0e-ae92-412417bbde54", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add8cfa7-4acc-438e-938d-e6b3a3b3e418", "sighting_of_ref": "indicator--90149aed-80ee-4e0e-ae92-412417bbde54", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8208c659-59f5-4dee-90f6-323e4fe93548", "sighting_of_ref": "indicator--639453bb-7b87-4c98-bade-6a3f43c55243", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdb5dff-66db-4f8c-b647-2b2f3d499b1b", "sighting_of_ref": "indicator--83c35e99-94af-484a-b680-5c66301b0da2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8037bb-d882-4be6-ac66-06a95629ff86", "sighting_of_ref": "indicator--25007d5b-7acf-440d-9f8a-b54580bab2ef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33cd8db-e914-402f-88c8-c0d41d60f63b", "sighting_of_ref": "indicator--b1f8c148-3602-4e18-974d-76f040776abd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691633ea-9e6d-4d57-89db-bb776e65e2ea", "sighting_of_ref": "indicator--b1f8c148-3602-4e18-974d-76f040776abd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bce840d-ad3b-4e42-b997-ee9d44d3e547", "sighting_of_ref": "indicator--1849f988-02d6-4697-9034-cd995ac57844", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32935ed9-feec-4009-896e-b6c232829733", "sighting_of_ref": "indicator--1849f988-02d6-4697-9034-cd995ac57844", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973bb6cf-f080-4b28-bbeb-83b908a77a65", "sighting_of_ref": "indicator--29e77235-8ee8-481f-82bd-8c94dfbd3c2c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c16d18-9142-48a8-a674-667961385adf", "sighting_of_ref": "indicator--19cdb150-a99f-4df9-9bb3-72828b033972", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b473079-bb57-4340-b87a-dac96d86156f", "sighting_of_ref": "indicator--726292c1-686e-44fb-b500-af224c3573dd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28414f1-59d8-4037-a9ad-f98f68f50897", "sighting_of_ref": "indicator--e34ab641-4918-4572-ba43-30f4b8468230", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789c6055-2d47-423d-9428-843c92ab25b4", "sighting_of_ref": "indicator--bf87104f-2fb4-4573-8c46-f9a3bd4ce251", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8502edcd-1610-4160-82a1-a4d77986b7b5", "sighting_of_ref": "indicator--e45bf7e0-340c-4ada-bcf3-58c0b8a45dac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d02b32f-3ae8-4dab-b93d-43f1cff4c4e3", "sighting_of_ref": "indicator--c588ed6d-bdb5-448c-854d-18e829aef27f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c54af4-0aae-4428-be09-9d53365626d4", "sighting_of_ref": "indicator--cde6df13-dae7-4efe-9e79-e806ae43c515", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd84096-60ce-4eab-b3a3-a1753cab8333", "sighting_of_ref": "indicator--cde6df13-dae7-4efe-9e79-e806ae43c515", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0e853a-49ce-4c43-acbb-0249ae855866", "sighting_of_ref": "indicator--be8cc498-3508-4a22-a17c-9a326641d750", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87784043-3776-4073-8d1a-43a777a0368c", "sighting_of_ref": "indicator--ac830069-7411-4b17-90dd-2a73495f8e6d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73054594-f8be-451f-9fe6-b0c51c154d58", "sighting_of_ref": "indicator--c5cd7bb6-19dc-4fec-876d-63b987e55976", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d5c67e-13bc-4ffe-a517-646aa9f7c781", "sighting_of_ref": "indicator--1dc76dc9-1598-4bb9-9ac5-78c58801be54", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f45929-a36d-4f01-be83-17eade011fb0", "sighting_of_ref": "indicator--80ba3505-bb82-4485-afbb-e240a53e35c9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c5cc53-b27e-41b2-bf5f-f07979521e8d", "sighting_of_ref": "indicator--411608c7-594b-473e-930a-a2d19372e7b9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1148ed-4111-4f91-a1b0-4dbc4b1f8677", "sighting_of_ref": "indicator--cadce57e-58fd-4d64-aae9-427fbea831f0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefcef1e-480a-4912-ab9d-2527d6a29086", "sighting_of_ref": "indicator--cadce57e-58fd-4d64-aae9-427fbea831f0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4023d4c7-5e35-4932-8934-c24bdc217518", "sighting_of_ref": "indicator--cadce57e-58fd-4d64-aae9-427fbea831f0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a631236-2e1f-48d8-b5fe-085121c9e4d6", "sighting_of_ref": "indicator--0f7023fc-318a-4f3f-bb17-a9ec340f3260", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a618e5-a336-41b2-9715-1e69d1765060", "sighting_of_ref": "indicator--0f7023fc-318a-4f3f-bb17-a9ec340f3260", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b0dc95-5881-49a9-aaa7-551c484ecc4a", "sighting_of_ref": "indicator--0f7023fc-318a-4f3f-bb17-a9ec340f3260", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbb3a9f-7b0b-4ba1-bd35-3f4bf8c93982", "sighting_of_ref": "indicator--2f487165-6f80-4ee4-958d-2109743b4a0f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada08623-0a7e-43ff-bede-fa067270318d", "sighting_of_ref": "indicator--77f91430-bb2d-4600-b58f-1c6d3c4198ff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999d38b7-4723-4abf-a4a3-eb3ad7d52015", "sighting_of_ref": "indicator--91d960f2-73ee-4732-8eeb-e3203a8283cf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959dce99-bd8b-4995-889a-ba699d74fa2e", "sighting_of_ref": "indicator--6e9a112a-f433-4cf8-bde8-830a590baa83", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369382c0-984a-4d33-812f-7badb86dc015", "sighting_of_ref": "indicator--6e9a112a-f433-4cf8-bde8-830a590baa83", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba45831-61cb-492d-bd55-e29da8159f6b", "sighting_of_ref": "indicator--6e9a112a-f433-4cf8-bde8-830a590baa83", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de84a713-2fef-4adc-b072-987f7fd43cfb", "sighting_of_ref": "indicator--c46f6b73-c9b8-4294-8667-6f379ae6e9bf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87e3c05-8581-47f2-b26e-e6684dea5143", "sighting_of_ref": "indicator--c46f6b73-c9b8-4294-8667-6f379ae6e9bf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501ff0cb-3e81-413e-8677-47cf55340e24", "sighting_of_ref": "indicator--c46f6b73-c9b8-4294-8667-6f379ae6e9bf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3a6191-25e7-4506-b6d6-e1dae322a860", "sighting_of_ref": "indicator--e6c06018-f7eb-468f-9096-cdb831bf821b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b077f8a-3ffd-4577-845a-33f990a9cb05", "sighting_of_ref": "indicator--e6c06018-f7eb-468f-9096-cdb831bf821b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f0520d-24ff-4505-a004-4b76b9f791ca", "sighting_of_ref": "indicator--e6c06018-f7eb-468f-9096-cdb831bf821b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de300cf-7694-421b-a982-e7e00a780cad", "sighting_of_ref": "indicator--ad75f573-2750-4744-8519-78e5555a9105", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ed8514-8dc4-466b-a838-c68f329b86a7", "sighting_of_ref": "indicator--ad75f573-2750-4744-8519-78e5555a9105", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34b3fb3-c3c7-4f6e-b6de-bd480afb14a7", "sighting_of_ref": "indicator--ad75f573-2750-4744-8519-78e5555a9105", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f164f5a8-83b8-48ba-9d15-e0ece9cc7775", "sighting_of_ref": "indicator--c7d0ebc5-6d62-4956-a52a-5969a13e50bc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68ec31e-13ed-4baa-831d-4b06fcc4ee65", "sighting_of_ref": "indicator--514d56f4-ed39-4757-aa77-060d21048e5d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f104da13-6d06-44ba-9ab4-18ec35baa517", "sighting_of_ref": "indicator--514d56f4-ed39-4757-aa77-060d21048e5d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584a6009-a853-4917-b18f-ae0771bdc8ad", "sighting_of_ref": "indicator--514d56f4-ed39-4757-aa77-060d21048e5d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d613751e-c32c-42d4-8bbd-249313ad10fb", "sighting_of_ref": "indicator--a18367bb-bb88-4e7e-94a7-2dab1fb3e37a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7b53b7-18d6-4768-b89e-53e1937a0f74", "sighting_of_ref": "indicator--a18367bb-bb88-4e7e-94a7-2dab1fb3e37a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5234692-a27e-4277-9aec-e4ddda399bde", "sighting_of_ref": "indicator--77db4d79-6a9d-4564-a388-5d75ead06fa7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19474ac9-8444-4c36-87c3-514ff1d0c764", "sighting_of_ref": "indicator--77db4d79-6a9d-4564-a388-5d75ead06fa7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90014c02-b7ca-4b95-9f56-43fb6b50a1eb", "sighting_of_ref": "indicator--5b8d71b3-3cf6-4138-b616-506d5e37c512", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe96d5e-f2c5-4f2a-bd4c-5e19e096febb", "sighting_of_ref": "indicator--5b8d71b3-3cf6-4138-b616-506d5e37c512", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d9cd2a-23af-4cab-aea1-b9065a66348d", "sighting_of_ref": "indicator--77003e96-e184-4f37-b0ff-d43b7c818087", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba340f26-ac38-4db2-aa77-1b68a3146539", "sighting_of_ref": "indicator--4891b82e-a2b1-490a-8d90-697e8a3946af", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08462185-8275-4f15-b609-ad937dbb6d5b", "sighting_of_ref": "indicator--4891b82e-a2b1-490a-8d90-697e8a3946af", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813e8ddb-3e72-4925-ae9a-d24ebc427027", "sighting_of_ref": "indicator--4876963f-63bb-4f96-8b0a-68e7c872bb56", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a237c80-d302-4a89-a541-fc1294f86026", "sighting_of_ref": "indicator--4876963f-63bb-4f96-8b0a-68e7c872bb56", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076e4454-eb73-42fb-806c-0d9bcb14c1ce", "sighting_of_ref": "indicator--4876963f-63bb-4f96-8b0a-68e7c872bb56", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86861a54-0e7c-4e2b-b6a3-b9e03c5ed60e", "sighting_of_ref": "indicator--0f17e19f-e132-4aa8-b32d-4e29e50b6055", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d010605-6a0d-4577-ad34-dc50333cb82b", "sighting_of_ref": "indicator--0f17e19f-e132-4aa8-b32d-4e29e50b6055", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e431b3b-4d9c-402c-9b1a-6de16fb6bdde", "sighting_of_ref": "indicator--0f17e19f-e132-4aa8-b32d-4e29e50b6055", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6bc7d5a-f0ac-4ed8-83d1-e5d1d3668ecd", "sighting_of_ref": "indicator--b091bdbf-dee8-4e0c-9846-765f0d41f421", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebaaf02e-1db8-4cbb-851f-ae8d6c4c4f54", "sighting_of_ref": "indicator--b091bdbf-dee8-4e0c-9846-765f0d41f421", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba2eef3-7bdf-4575-b326-021ec2590aba", "sighting_of_ref": "indicator--b091bdbf-dee8-4e0c-9846-765f0d41f421", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb698fd-af36-4b1a-9207-4e3d09fb3348", "sighting_of_ref": "indicator--d4e17645-6aac-4c31-9997-e10711fbc54a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65ad3f8-0f9d-4d6e-a730-f514003e741b", "sighting_of_ref": "indicator--d4e17645-6aac-4c31-9997-e10711fbc54a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba6013d-f0f1-4dba-8964-b631d39e0742", "sighting_of_ref": "indicator--d4e17645-6aac-4c31-9997-e10711fbc54a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a292089-dbca-4782-9d27-3a39d74b081b", "sighting_of_ref": "indicator--cb0d89e1-9baa-4ff8-8916-eac1f780a9f9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51021eec-ebaa-494e-b800-58cae6a605b5", "sighting_of_ref": "indicator--ed41b2bd-7bf8-48fd-aa5d-53e2683af4bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6558f926-11ab-4bd2-9ad0-e5f2bf0353db", "sighting_of_ref": "indicator--ed41b2bd-7bf8-48fd-aa5d-53e2683af4bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf364ac8-6dbd-4812-81a0-1238f3fd2711", "sighting_of_ref": "indicator--ed41b2bd-7bf8-48fd-aa5d-53e2683af4bd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ea34f8-56b0-41ba-a1fb-33ec878fc716", "sighting_of_ref": "indicator--6c77d330-800a-46d3-883b-919d0b34a8a3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92001339-9ea3-4708-988a-36fdd4f87db0", "sighting_of_ref": "indicator--6c77d330-800a-46d3-883b-919d0b34a8a3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50458f50-7de9-40c5-acfc-d9d982cd4dc5", "sighting_of_ref": "indicator--6c77d330-800a-46d3-883b-919d0b34a8a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a26128-82bc-41ca-8d67-19f86eb48ae9", "sighting_of_ref": "indicator--a7b778cd-34fc-4f05-b4db-d55622f2616a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32fe171-6068-47f7-aa84-1a74ea2a1c56", "sighting_of_ref": "indicator--a7b778cd-34fc-4f05-b4db-d55622f2616a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f587b953-a67a-4593-9223-34592b302314", "sighting_of_ref": "indicator--a7b778cd-34fc-4f05-b4db-d55622f2616a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbc8590-4d2e-452b-9ca1-d27797998a1d", "sighting_of_ref": "indicator--823444d7-7cb3-450f-9a53-b09bef91c605", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2727f6a-aa7b-4bf5-b277-c410c61f0381", "sighting_of_ref": "indicator--cd214d28-9b6f-4fb8-bc1a-0bd579e63399", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260e09cc-589d-4f68-9c24-171ea0166adc", "sighting_of_ref": "indicator--87fff037-930f-4701-a5f7-02196e9995d6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d1f152-a86b-4e5c-abda-0eccd1df93bd", "sighting_of_ref": "indicator--456fdda6-95ae-46f2-8ec6-8bb09523afee", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5ebe27-1283-42c4-9f67-804cfa5ae61f", "sighting_of_ref": "indicator--896f83f8-5985-414f-baff-66611240791d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba689a1-f2b0-4a30-b919-7c4ba4e62a06", "sighting_of_ref": "indicator--896f83f8-5985-414f-baff-66611240791d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8caa4846-8f4c-4a2a-9604-176a2826aa5e", "sighting_of_ref": "indicator--53c95a78-8763-4f8d-875e-daa80b987083", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644da742-1fd8-4610-b1d4-3236fb15ef9c", "sighting_of_ref": "indicator--53c95a78-8763-4f8d-875e-daa80b987083", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b847f08a-925b-49f4-9aa4-07e900ea6592", "sighting_of_ref": "indicator--e701eda2-a70a-488a-a8ca-da60f940987c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cf400f-4e26-448e-8c72-3b4e7406549f", "sighting_of_ref": "indicator--e701eda2-a70a-488a-a8ca-da60f940987c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e93564-b1d9-4039-8fba-f6eaa063ba1e", "sighting_of_ref": "indicator--1a2b4256-2681-45a9-80fe-911d08c94a57", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0c8a51-c284-4aff-8e7f-3bba5317dfb5", "sighting_of_ref": "indicator--1a2b4256-2681-45a9-80fe-911d08c94a57", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a594d6-50ea-40ab-b289-b3bba35a920f", "sighting_of_ref": "indicator--1a2b4256-2681-45a9-80fe-911d08c94a57", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3433279f-48eb-4094-832e-f9a87814b893", "sighting_of_ref": "indicator--4a73361b-5f15-4d93-9e5d-f326d5b4881f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8da292-f676-45ff-a877-c3b431d5ff72", "sighting_of_ref": "indicator--b51a3dac-2e7d-4e17-a1fb-373305ec2b04", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25419eda-de2e-4c37-ad92-09dd932751d7", "sighting_of_ref": "indicator--a4c1b366-605a-43d3-830f-091e1030b38a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53421b57-13b9-4b0d-a106-845621c3f00e", "sighting_of_ref": "indicator--7280d8ff-3ed3-4fed-807d-7ad3a4e2beec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16020cc1-89eb-4eee-b6a0-b907e6a28ead", "sighting_of_ref": "indicator--519384f1-68ec-45ee-81cc-3d671df9a039", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d468c89-0b29-4fab-8499-24a1397b277b", "sighting_of_ref": "indicator--c9bc2aa2-c2de-4f36-9817-42a95401f2e0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5ff119-112f-4a73-ba41-f5d12d5bf5b4", "sighting_of_ref": "indicator--03cc2c31-e77a-4e4c-bc20-4d52ff1456f9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56a9b7b-4cba-4495-916d-834a28ada9d0", "sighting_of_ref": "indicator--b3646a11-8b63-4b7f-88a6-2ee833a866f0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8668a9-4017-4246-8618-4a389fe8196b", "sighting_of_ref": "indicator--d9e567c5-f620-467f-9248-752543b73083", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875652ab-ed15-4669-94e1-18d7aff94e50", "sighting_of_ref": "indicator--a815ea85-cc32-4692-b3df-a77196b8f3f0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3cdd2e-86d5-4a44-b330-f2a552365688", "sighting_of_ref": "indicator--f92fa99d-74d5-478a-a921-f0084ec259de", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eacf7af-9a37-4dbc-8386-8de19ab2f4d4", "sighting_of_ref": "indicator--d0925a0f-dc68-4bed-90f8-dec0685092e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5015f1bf-0113-4e19-862b-b67ea30147dc", "sighting_of_ref": "indicator--d0925a0f-dc68-4bed-90f8-dec0685092e2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5fd42b-2a2e-4afc-8d16-07f8ca784624", "sighting_of_ref": "indicator--f80ca00f-5bbc-4afc-9525-75753ceb00b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e8d48e-f983-4698-8d34-9ef9b490484d", "sighting_of_ref": "indicator--f614b980-e696-4134-84e6-5d1b3fd1fb41", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043ad183-7ad7-4cbe-81fe-1dd6aadb0edc", "sighting_of_ref": "indicator--8c715626-ec1a-4495-9767-34a8a238e0a5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dea05a3-fb7c-42c9-86ea-34fba852a687", "sighting_of_ref": "indicator--8c715626-ec1a-4495-9767-34a8a238e0a5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2506869f-6127-4056-b99c-97a601d7c759", "sighting_of_ref": "indicator--5965149d-1d31-4266-bdab-b21e35509475", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f101ccb0-1d4c-498a-a16a-9feca6b0ee4c", "sighting_of_ref": "indicator--5965149d-1d31-4266-bdab-b21e35509475", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59258b39-022b-4e54-a1e1-77ccbfefdfd7", "sighting_of_ref": "indicator--5965149d-1d31-4266-bdab-b21e35509475", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92dd23c8-8c5a-43e1-abb7-8142b6046fc3", "sighting_of_ref": "indicator--3e43ac3c-f41d-45b7-bb15-6ac45114ab24", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09938f16-a601-4843-9347-e7583a3f0202", "sighting_of_ref": "indicator--3e43ac3c-f41d-45b7-bb15-6ac45114ab24", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f33e03-c05e-4782-a74b-35ce2a5cf095", "sighting_of_ref": "indicator--d47bd703-c198-43b3-bc7d-1ecce9f3ec34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947228c9-4c13-4930-9884-75440bec0693", "sighting_of_ref": "indicator--1d665131-8a1a-4e55-aeb2-8cae880cb746", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e53d942-4dbb-4ff6-85da-8d3a6e03f38e", "sighting_of_ref": "indicator--e879c630-a8d1-4a1b-aefc-add0785033df", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e3ddb7-7646-468c-ba6e-8c6b52858c08", "sighting_of_ref": "indicator--e879c630-a8d1-4a1b-aefc-add0785033df", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e38f16-38db-404f-9072-a35bdd9530c2", "sighting_of_ref": "indicator--e879c630-a8d1-4a1b-aefc-add0785033df", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c97f14-0017-426b-a069-71345a9fef74", "sighting_of_ref": "indicator--5c306580-d160-4421-a2fa-948f6d86dc36", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d89b290-bbad-498c-a961-3aa43d2cd189", "sighting_of_ref": "indicator--5c306580-d160-4421-a2fa-948f6d86dc36", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fceb1608-88ae-45ee-880c-eb0bd185311d", "sighting_of_ref": "indicator--5c306580-d160-4421-a2fa-948f6d86dc36", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7edc12f-ea7e-4006-a353-71e6aaacf7bf", "sighting_of_ref": "indicator--bbfc6aa7-a0df-46d2-b1f9-de15fb04332d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6716f7b1-a8fd-40bc-b6fe-a912e002cf8e", "sighting_of_ref": "indicator--bbfc6aa7-a0df-46d2-b1f9-de15fb04332d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1857a0e-162f-4930-b100-7ed2bab51619", "sighting_of_ref": "indicator--6251f627-bc71-4435-a54c-712d40631cc7", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8bbe8ce-bfdb-484a-987e-04bc9b188ab7", "sighting_of_ref": "indicator--f77151da-a0da-45d7-b3d0-4dc21b0cd8f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5968b07-ac0e-4041-b8fc-ec58ed8aee6e", "sighting_of_ref": "indicator--7c9a2a53-864a-4537-8ad9-3cf4c7778bd2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95582023-6abd-4965-b530-0be71eada9c0", "sighting_of_ref": "indicator--70d287c1-f6d7-4e69-b5ce-77aadf961f2a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1167a9ab-71f4-4e14-9651-8f1ca306adda", "sighting_of_ref": "indicator--23e3ed37-821a-447f-8458-854429412d64", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9952d1a-b2dc-4b08-8ab9-abb9025db1b8", "sighting_of_ref": "indicator--00b908e9-7a14-4def-af02-0f9839b6f2dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884a191c-05b8-414f-9672-b128a51bef1b", "sighting_of_ref": "indicator--00b908e9-7a14-4def-af02-0f9839b6f2dd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0627a251-b82e-426a-bbde-46c7dc01fa0c", "sighting_of_ref": "indicator--06293238-5999-45bc-951d-cc0eee08ff00", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfaddcf-2813-4d2c-b188-df8dbbef61cf", "sighting_of_ref": "indicator--06293238-5999-45bc-951d-cc0eee08ff00", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089fbc10-c937-48df-8ab5-2b50b990d86b", "sighting_of_ref": "indicator--80c2af64-1fcc-441f-b9de-94d0d1d20848", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef15460-029a-4d59-949b-b2851b7879a2", "sighting_of_ref": "indicator--80c2af64-1fcc-441f-b9de-94d0d1d20848", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1954fe27-e38b-41c2-b800-46d6c0dd7140", "sighting_of_ref": "indicator--896c5d8f-eb1d-4d0e-b013-c8d1335e9d27", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085fa632-f733-4633-a097-ace83f0ed30a", "sighting_of_ref": "indicator--0f0db787-b233-427e-b4bd-3e6ff15b3412", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae3c43f-86c3-40ba-b32e-018905973337", "sighting_of_ref": "indicator--d523a3c4-1c63-4d45-b1ba-ca66f0d6130d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafa004f-e4f8-43d9-8096-bd2534fb0340", "sighting_of_ref": "indicator--d523a3c4-1c63-4d45-b1ba-ca66f0d6130d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01665e54-c93a-4675-a4d4-cffcf86e26a5", "sighting_of_ref": "indicator--d523a3c4-1c63-4d45-b1ba-ca66f0d6130d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e754fe-1ce2-4a1f-a892-d7eebb1f73f9", "sighting_of_ref": "indicator--293521c1-e832-4ff4-8373-43c42d7cd5d7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9704af44-c2c0-4ea2-9704-a98adf6a2e4b", "sighting_of_ref": "indicator--ce1b166f-f28a-47ae-b24f-eee57bdc62b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8ee94b-73b1-4fd9-8a55-a9beb61cc6dd", "sighting_of_ref": "indicator--43d3f10e-1d02-4662-99a7-84fb22fe8748", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd6fb51-0f13-4919-95ab-213b6591c162", "sighting_of_ref": "indicator--07ac1051-17c8-4379-a698-c7c68d353ab4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3207ca62-f58f-45ac-9770-812fa5852579", "sighting_of_ref": "indicator--3e34cb2a-b3c9-4611-b004-dae2c044f1f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e9e8ca-3b88-41ae-b52b-0657828608c2", "sighting_of_ref": "indicator--3e34cb2a-b3c9-4611-b004-dae2c044f1f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e90ece-8eee-46a7-b127-9697a308dbfd", "sighting_of_ref": "indicator--45ea46de-4e42-4bf7-a4e0-1ddc12824ad7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca863572-f0f0-4750-a74b-acfbf6070577", "sighting_of_ref": "indicator--8956200e-a73d-4007-8593-07cc5f25c355", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bb8b4f-1e11-4fe0-86e6-82c4a061c9c4", "sighting_of_ref": "indicator--bf6c59ea-d5ac-4761-be79-4644698ec0f3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ca9eba-fedd-45ae-a8d3-251e18af84d3", "sighting_of_ref": "indicator--74cfc122-cddb-42d9-8821-17f8a616cb63", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac304312-9b72-448d-a138-36d0ff10a2d9", "sighting_of_ref": "indicator--12ffb0dd-12a8-4988-9b01-b9cbc2b700bc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3121de08-9c54-429e-8d7a-84a78004472a", "sighting_of_ref": "indicator--8d03895d-7ddf-4876-b545-03896e17c22c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58633b99-4718-4ca2-a881-1bd074390bb2", "sighting_of_ref": "indicator--2610b0c8-fb4c-4b11-b7ac-3e5691519a12", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8405cf98-3e5e-47e1-b654-7465de606a9c", "sighting_of_ref": "indicator--ea044ef4-4d0c-4b75-b126-654c687e2ec4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991cc262-d743-498b-9e8b-85a16589e4bf", "sighting_of_ref": "indicator--ed9cbba4-8746-4ad4-819a-b6a523c98e75", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b892de9-3feb-44ad-b00f-db3c0b0af669", "sighting_of_ref": "indicator--ed9cbba4-8746-4ad4-819a-b6a523c98e75", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f2b8d6-b0b9-492a-a622-2b92ef75d799", "sighting_of_ref": "indicator--ed9cbba4-8746-4ad4-819a-b6a523c98e75", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334f48d6-8799-45d4-915f-54eb14b50fd5", "sighting_of_ref": "indicator--a2984aa7-6943-4706-ba4b-9ac84f112e40", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad499a24-ca4b-4ff4-a34c-af2f26d52cd6", "sighting_of_ref": "indicator--933e124d-c625-4f49-bd06-f50012f6c449", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47135db6-108c-4c2f-afb5-b6479ac993b6", "sighting_of_ref": "indicator--8b620c1e-df49-44d6-9a06-03e885c8a63d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe30eb5a-5fa0-4733-8fe7-b4042bcb9ba8", "sighting_of_ref": "indicator--ce8bb939-171c-4d77-8e63-92180f1dae0b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0ff09f-b28b-407f-8eb2-3159c3b0f96a", "sighting_of_ref": "indicator--31be8d36-1233-44b7-a774-e8b1c2452478", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a536d2-9615-43a0-9230-d05b6856be8b", "sighting_of_ref": "indicator--23bd5ba7-34f9-43f9-957b-ee704442a08e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a4dd4d-045b-427d-ad15-e2719c3e642f", "sighting_of_ref": "indicator--e570ccee-0341-45cc-bb2b-3db6118c7108", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2cafad2-7f57-4342-a169-95d31e58590b", "sighting_of_ref": "indicator--18c13ffb-0e94-46be-865a-cd93402baeef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251fa685-0b3a-412a-8856-fb964db7ffb5", "sighting_of_ref": "indicator--b58d5877-addc-4696-9dcc-d296e11846db", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0292c83a-e90b-492f-b565-747e7c13843c", "sighting_of_ref": "indicator--a2066baf-2340-4161-bd21-20ea36c0a319", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee32f89-ae84-43a0-bc7d-258ed9ae00cd", "sighting_of_ref": "indicator--2bb1c78b-388e-4753-bda5-cfb4800892a8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182046a4-7b6f-45eb-9dec-b63c1ef1fb8d", "sighting_of_ref": "indicator--44648622-5451-4a32-8bbb-1fc91db398a6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7729fdf9-1214-4652-abe0-a770322bf882", "sighting_of_ref": "indicator--dbf403cf-4153-4415-a926-4006f2a14f8a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe218d05-1310-464d-b95d-72f8dca9fe12", "sighting_of_ref": "indicator--b0ec7c57-cabc-4de0-9a99-ecf863922ca5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f573345f-953e-4780-8d47-bcbd61a03f8c", "sighting_of_ref": "indicator--06e8a6a9-07a0-47b5-bbd8-902b25e00361", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f28423-de34-469c-bffa-5fea1a0e5fd0", "sighting_of_ref": "indicator--b749a2e7-4bf6-4043-b8e6-ffc14ad42114", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c158b39-44db-450a-a14f-6853128afab8", "sighting_of_ref": "indicator--794c52df-94fd-4842-a40b-e2522683efa8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3712c6eb-2097-4350-99eb-7d25c853b9da", "sighting_of_ref": "indicator--6b9eacbe-6041-4b84-86a7-1919a2b30341", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2d3a71-078f-44ec-9898-939c56737511", "sighting_of_ref": "indicator--842c385e-60eb-4747-84f1-0a18daf2a577", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e43d4e-8b5b-43ab-a016-e6d242b6cc22", "sighting_of_ref": "indicator--fe552dd5-43ce-4bad-a270-772bc60cf796", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f60bf8-998b-4c86-ab92-35ea08d4cde5", "sighting_of_ref": "indicator--956a6890-7baf-4dbe-9f3e-a62186ed5465", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3c4f59-3d59-4063-bfdf-9c59ca2e79b3", "sighting_of_ref": "indicator--bd330786-c946-40db-8754-2d7f38918c96", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d02adbd-500a-4716-b121-fd45d20188d3", "sighting_of_ref": "indicator--17eb47ff-232c-4fee-8d9a-cb5e737678fa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c92d63-97c9-42af-aa8e-fa3e21bf0d98", "sighting_of_ref": "indicator--4d38b45d-2251-4de3-b2fa-c5e61fd84226", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f19033-2c9c-45eb-aaac-d7a6b0ab9517", "sighting_of_ref": "indicator--c61e924c-65fe-411a-9a95-553084e5ff84", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6a0b5e-c509-4052-94a0-cf52439020df", "sighting_of_ref": "indicator--a92ac4e1-e2db-4562-8b2a-59b708a61a35", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d42ada0-95ad-4e17-8bf6-a44279c9f4d3", "sighting_of_ref": "indicator--35c5ecd5-9c29-4d3c-bc4a-7c543bd4e6c9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3e40d3-67c5-4f85-9fbb-3b55866ab612", "sighting_of_ref": "indicator--3d285083-3e5a-45bf-86dc-9a4b8f8f2147", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48028a08-d938-47a1-944e-8cc18743b180", "sighting_of_ref": "indicator--33db07df-b0c8-46ac-bb78-327c5474619e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a049c77-8907-422c-adfb-d98c91ac4d93", "sighting_of_ref": "indicator--4db136f3-cf2c-4c48-b4f8-26e38ace2bf1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2918d973-4544-4bfd-8f5b-726540536748", "sighting_of_ref": "indicator--cca0f3e0-8e49-41d1-9a14-1e973f6358ba", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b23c9f-ec3d-44f2-b952-f4a2ec32c27c", "sighting_of_ref": "indicator--794acac1-9ed5-4fd7-b041-0885454f9225", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49ca4ff-61e3-4f1d-8ebe-15c8a73c76c9", "sighting_of_ref": "indicator--2a3dcd85-51af-4da6-aa9b-72d621f46cda", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491c9955-03ca-47fa-a7fe-affda10fe6dc", "sighting_of_ref": "indicator--1cea50ad-bf81-413a-873a-a21e69ba0081", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f81b11d-b007-48e0-a4e2-6041fa65b39c", "sighting_of_ref": "indicator--84579b28-944b-4d47-b405-ea81af57cac4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa1fb85-637d-43b8-8553-c9dc140188d8", "sighting_of_ref": "indicator--a86db7fb-32fa-4f9d-8b65-4febd58fa00e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2dc509-907d-442c-a1e2-c3e539603f2b", "sighting_of_ref": "indicator--e50de232-e76e-4d84-b558-4e0ec9ec93f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a129b10d-9be6-45a6-870e-2c1bbe9a92ef", "sighting_of_ref": "indicator--8c23faa7-39e9-4cb5-ad02-4b3f069b51de", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17edd13-92e1-42c8-9580-06f005ae6bf6", "sighting_of_ref": "indicator--a4335aa7-4fc7-4285-b439-51b6d19cc091", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530dd0c2-5b43-442c-99cf-9c969a7798f1", "sighting_of_ref": "indicator--0082238b-8e20-4117-8851-cd09a53041ce", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7599c1a8-62d6-492f-aa50-9c18b6abd680", "sighting_of_ref": "indicator--059cd58f-33d9-47a2-b9c1-78e448f4b93b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638c3183-273a-4e54-9f03-84143df81458", "sighting_of_ref": "indicator--a83b166f-266b-4d47-a0f6-62ce29ddac87", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01f5659-b65b-486e-b461-e6b147569582", "sighting_of_ref": "indicator--885636ca-a439-4eac-b8f5-12248f50882c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21eeca1d-a0da-49b3-b159-ed8ffdaeafef", "sighting_of_ref": "indicator--12512e4d-a32d-4f35-8c43-4cec54475d9a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a73c47-63b5-479a-87fc-e380a3d5136a", "sighting_of_ref": "indicator--51418dce-efbb-49a6-b235-7c6b945e7930", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270d7ea7-78ce-4b4d-bcc0-5960d3e1c2ec", "sighting_of_ref": "indicator--51418dce-efbb-49a6-b235-7c6b945e7930", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d289430e-8498-4b3b-96e5-2d0c6a6b5e12", "sighting_of_ref": "indicator--438caeff-42e5-4403-86e4-a4245f5de054", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023c3c4e-99bf-4a24-b6d7-6aa7997bc9bf", "sighting_of_ref": "indicator--438caeff-42e5-4403-86e4-a4245f5de054", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6708a0d9-71ff-4d33-9bd4-b27a8153c994", "sighting_of_ref": "indicator--438caeff-42e5-4403-86e4-a4245f5de054", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239c06d2-d412-4a86-b86f-4f8642748c8e", "sighting_of_ref": "indicator--eba4d1ac-148d-43e3-965c-0cc2eccb001a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3518e40b-fb10-47e2-ae14-71d73ccaaa94", "sighting_of_ref": "indicator--f183c470-3dc5-40a4-b82d-b7cf0aff55d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff78e128-fe5a-4d04-aac5-7476ed482c8b", "sighting_of_ref": "indicator--f183c470-3dc5-40a4-b82d-b7cf0aff55d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afeae2c0-b46f-4be8-a429-fa72cd32d1bd", "sighting_of_ref": "indicator--b88cbab6-3f6e-4381-82cd-35e6d80de252", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c4f075-8689-4bb4-8d54-b6f28d484483", "sighting_of_ref": "indicator--0845293f-d702-4309-a29f-27300f81595d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d129172b-f48a-4b00-876c-58895d03a123", "sighting_of_ref": "indicator--0845293f-d702-4309-a29f-27300f81595d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1eb2808-a2ef-4557-9b6d-759b462bf132", "sighting_of_ref": "indicator--0845293f-d702-4309-a29f-27300f81595d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62ef134-ea08-4533-b205-c0e954daaa36", "sighting_of_ref": "indicator--1532e3e9-1075-4e73-8d15-0acfb8f6a8ab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0ba4ff-c76e-4102-a037-26a5855dcfef", "sighting_of_ref": "indicator--1532e3e9-1075-4e73-8d15-0acfb8f6a8ab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e0f8a6-ab7d-478f-aa8c-20e5b9b10cb6", "sighting_of_ref": "indicator--a19a4ea4-9c41-4c2e-9ebc-8bf72b3ec0df", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f104eb87-bf29-48a3-b903-583a7c70081a", "sighting_of_ref": "indicator--7fc11b97-e406-46a0-9213-0c10e25e405f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64127a88-bbfb-4921-a350-30b88ca570ce", "sighting_of_ref": "indicator--ed9ee46a-d272-4a9d-9faf-c9df645433d0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548cce06-2633-4fef-892a-27d55beec57f", "sighting_of_ref": "indicator--94f6a7a4-889f-401d-a57c-32d6ae72a694", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5866e10e-8979-4090-9665-fd6901a31674", "sighting_of_ref": "indicator--94f6a7a4-889f-401d-a57c-32d6ae72a694", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932e8348-1ea5-489e-a4d4-aab1ac475c96", "sighting_of_ref": "indicator--94f6a7a4-889f-401d-a57c-32d6ae72a694", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70835937-1827-4c69-852e-3aa55d499e95", "sighting_of_ref": "indicator--2aecc71d-47d4-4b2d-a723-3dd9a896e4fe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df330fea-4017-49b2-8bf9-c2918dc3f742", "sighting_of_ref": "indicator--2aecc71d-47d4-4b2d-a723-3dd9a896e4fe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748b01ba-bdc7-4978-acbf-84dc4b9fc2c5", "sighting_of_ref": "indicator--2aecc71d-47d4-4b2d-a723-3dd9a896e4fe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad97f75-f218-40bc-8b5c-8e76b9790f47", "sighting_of_ref": "indicator--25897b48-d3ec-4f5c-91d5-31e9069e8490", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabcbdd3-e7c6-45f3-beba-993ed9606f22", "sighting_of_ref": "indicator--20a69689-2867-4fe3-8fe2-31a2b61bc380", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f4c5f8-3221-448e-9507-6a718f982da7", "sighting_of_ref": "indicator--063c13bd-6c6b-4a2e-b97f-7bd065785697", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e21ae4a-2cba-4ff5-adf8-949b12c260ce", "sighting_of_ref": "indicator--063c13bd-6c6b-4a2e-b97f-7bd065785697", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555125ea-6c03-4a36-97e7-f2cb9c67f945", "sighting_of_ref": "indicator--063c13bd-6c6b-4a2e-b97f-7bd065785697", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b05611b-78a2-471b-a602-3781313b2f27", "sighting_of_ref": "indicator--46a9769f-02ab-47c0-9838-c828bce8f80e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6518e234-0411-463d-b6d9-c5bacfef4aab", "sighting_of_ref": "indicator--209b94d8-9a58-4799-bfbe-b1f18ed453cf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bacb9948-e865-4db5-8a6a-1127405811af", "sighting_of_ref": "indicator--ad362f82-ef66-4fc1-b8e8-b6f9d6b71b9b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcdb5fe-ee49-4a70-b119-63eee81c410b", "sighting_of_ref": "indicator--870d8f7b-20f7-4a9f-8af0-63ecb0eb0a22", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa4a053-1132-41fe-b796-8776154f4407", "sighting_of_ref": "indicator--d20f0047-b52e-4caf-9d21-8158ecf50513", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d45fbc3-cdae-4430-b576-25845fdb44d6", "sighting_of_ref": "indicator--f44e50aa-7fa0-42bb-babd-a5d17fddd085", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298dfd64-c8eb-41c6-8836-1bb080397b88", "sighting_of_ref": "indicator--ed6668ea-62eb-4a9a-8375-79446356b2c3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5825a64-444c-42af-9358-a69969e10752", "sighting_of_ref": "indicator--2965bead-8d55-496e-acc1-103f6981c22b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0daa8d-eb1d-46e1-9135-262a30ff087c", "sighting_of_ref": "indicator--9bf58745-26bf-41e7-b332-99582c8f664c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff01212-124b-4e3f-a299-24d0742326a7", "sighting_of_ref": "indicator--9bf58745-26bf-41e7-b332-99582c8f664c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ebdb9c-92e5-45fc-9c90-de00ab3bd75b", "sighting_of_ref": "indicator--f234a7d6-c4b5-41af-8910-62bd3ead746c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8547a83-562b-4e05-8aa3-5a3bd4004123", "sighting_of_ref": "indicator--4abcb5b9-8ee7-4544-b9d3-3812a2212d85", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676ae8b5-2962-407b-a8f1-eef61edd142f", "sighting_of_ref": "indicator--6680fe0c-1b15-4aa6-a7ff-4232595c20e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ac9f85-32b2-4c83-8ac1-95a32e32954e", "sighting_of_ref": "indicator--c068f87f-d07d-444c-88ec-f8b24fe38119", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd44d84c-79fc-4611-8f0f-17971c229713", "sighting_of_ref": "indicator--b2e4f6a7-562a-4a3a-a6e7-3c24a53deb11", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5479657-dae5-4d81-857b-dc6861b3b3ed", "sighting_of_ref": "indicator--b2e4f6a7-562a-4a3a-a6e7-3c24a53deb11", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6592f3f1-efcd-402c-bcb2-6c063d0e33ad", "sighting_of_ref": "indicator--9669d2cb-4775-45ff-8cdb-3dd406c98c4b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca481d1b-5889-4017-9251-697c1b85e99e", "sighting_of_ref": "indicator--ae1bf20c-dbbc-4d69-91ae-e48b2083125b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62232a9d-7c49-43a6-b62f-ed6a23a61fb2", "sighting_of_ref": "indicator--b4ad4e6c-f189-40e8-8908-3b99ffc81565", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4e751c-5e03-4652-87d9-a7e242531ffd", "sighting_of_ref": "indicator--b4ad4e6c-f189-40e8-8908-3b99ffc81565", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5427bb2a-3a7a-4e30-9ab4-adfc1c855579", "sighting_of_ref": "indicator--ac2b85c7-33e9-4b63-ba83-cee9604a4b8a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81bbbc0-9706-4c23-87ae-56fa1b38749f", "sighting_of_ref": "indicator--f3b1b071-d2c3-4661-a4a4-18f8930d5a96", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88a21e6-5e9d-4a08-8c61-83eb853e8792", "sighting_of_ref": "indicator--1476f1a4-360a-4a2d-be05-fa90ad1ee164", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024de495-a879-4c14-a0f4-b05364c9421f", "sighting_of_ref": "indicator--3fbd0f15-ead2-4c86-aa6a-f793ea84aaaf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6cc308-5e56-481d-a339-8b13f51e2ac7", "sighting_of_ref": "indicator--b384d126-8048-46e4-81dc-a716d744264f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3389f8ea-7375-46da-aa6d-0e9a706a4cd0", "sighting_of_ref": "indicator--fab449f4-e543-46b2-8dde-c3c5579ea029", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46cfcc2-852a-4391-ab13-b834d14acac7", "sighting_of_ref": "indicator--3bd22f05-6c1d-4d74-810c-e305d84280b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c429a74-ad6f-4309-b856-64ee0e03e6ea", "sighting_of_ref": "indicator--3bd22f05-6c1d-4d74-810c-e305d84280b2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052db866-5b9f-4558-a189-007b08114337", "sighting_of_ref": "indicator--3bd22f05-6c1d-4d74-810c-e305d84280b2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac49a99-69ce-4684-9574-90b28cd0af5d", "sighting_of_ref": "indicator--d12d3ea5-08d5-4e5d-a1b1-5a7156f239dc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4e4a73-92f7-435a-9c25-b7c7f1906e82", "sighting_of_ref": "indicator--da276da7-35f7-44aa-b1ac-7c196309bfdd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed80d35-7ca7-4e96-b6fb-81bff46aca05", "sighting_of_ref": "indicator--c3411a24-4586-4437-8048-8b33c1c6bcdd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbe525e-6b0d-4ba8-8d7c-b71c15b18b5b", "sighting_of_ref": "indicator--b42e8c80-084e-469f-9568-6010e51d6741", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf8118d-827b-4ac9-944b-2040cf970f46", "sighting_of_ref": "indicator--399800a8-c586-47a4-a99f-a1c5740f248f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92d9150-37e4-46c8-9d8d-c2b2d3106902", "sighting_of_ref": "indicator--5abc80ab-61dd-4a9e-aaac-454033fc5901", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9fa041-9e08-4925-924c-3b123e2be284", "sighting_of_ref": "indicator--995a64c0-0a8c-40b4-aad5-631f33576400", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8cd147-47ce-41b0-a686-5e6ee1a00138", "sighting_of_ref": "indicator--995a64c0-0a8c-40b4-aad5-631f33576400", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219d1e8e-bef7-4cf7-81ec-574cf027aa00", "sighting_of_ref": "indicator--1c0ce1d2-b16e-49ac-b790-858a9e5a8ddc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1707481e-79af-459b-8bd1-fb889564e0fc", "sighting_of_ref": "indicator--1c0ce1d2-b16e-49ac-b790-858a9e5a8ddc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30c9178-44ad-4c5a-a54d-581a95e2a19f", "sighting_of_ref": "indicator--121ad4cf-cb0f-4142-8028-81a145f30e3a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86341ba3-36bb-47df-a22f-a231ff9e5e42", "sighting_of_ref": "indicator--a0cceea8-1138-4f8b-8b68-53c38bd348b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477ef2bd-8b1b-47d2-832e-bc1f42c745bb", "sighting_of_ref": "indicator--33d6bb15-8e6a-4b24-be37-6fa1c2c1823c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779794e3-d41b-47dd-a623-2936fe1858ed", "sighting_of_ref": "indicator--33d6bb15-8e6a-4b24-be37-6fa1c2c1823c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739b67f7-02f4-462c-9608-0d0c26b79dd8", "sighting_of_ref": "indicator--b76d4c30-0f53-41b5-803a-faf8b5c2c17b", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd4f7ab-1422-443b-9d4c-a399fa2ab66a", "sighting_of_ref": "indicator--6b48d41d-2931-4d2e-917f-5d0c8ef204f5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f81595c-e1fb-43d9-9567-8ea1effa3e3a", "sighting_of_ref": "indicator--f1a1ef3f-9aa1-48fb-9395-cdaed5859830", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca90a51-17cb-438e-87e9-4d7b1ada761d", "sighting_of_ref": "indicator--c5c60388-c9b7-4710-80ec-08fc15908064", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47dbb255-91e1-4218-9cc8-e2e2ba8782fc", "sighting_of_ref": "indicator--1bd5cffc-21a8-421e-86b6-bfc3cdfbd0ea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7c95c1-e1df-4e5c-a57f-87fe9e0de9a8", "sighting_of_ref": "indicator--ad3aafb9-34cd-4a5c-ac9b-6c3eae4f3f8a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d797b477-d205-474c-b9b1-3ede079d727f", "sighting_of_ref": "indicator--3512508d-d12b-4a94-8c29-21a19dfd62b3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572b7661-c21d-40d3-ada0-c8f7e81c98ab", "sighting_of_ref": "indicator--22e8485d-63e6-4cb5-8c22-85df4656f61e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce610b92-9fb0-48ad-8442-497d7b99c766", "sighting_of_ref": "indicator--8d8d94d9-cae5-4b8e-a987-1e4bdcc1db6e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5325105e-840c-408c-a90e-5cfc645cd60d", "sighting_of_ref": "indicator--2d8b5791-fb86-440f-971c-a748fda7074d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdfbf24-860a-40f6-b177-63a733ca8fa2", "sighting_of_ref": "indicator--7f217525-5d5e-4db5-aebe-b125f6cab800", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55115c71-7d56-4fef-a278-bb2a053faf7c", "sighting_of_ref": "indicator--59478eac-80de-4e4d-aeb7-8bcb38ffe91a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a929c024-1f8a-4608-ba92-5eff982f5702", "sighting_of_ref": "indicator--1f926805-d4db-43f0-86b4-c85c1a77e7fd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d96b75-1699-47c9-8994-56fa77f3764a", "sighting_of_ref": "indicator--1f926805-d4db-43f0-86b4-c85c1a77e7fd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35f086a-997a-4999-9ae1-fddc9fd9ae70", "sighting_of_ref": "indicator--d99062fc-1fb9-4255-9e6b-01bfe188f150", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879ccc2d-cbbc-477a-858a-6ab7e290cc90", "sighting_of_ref": "indicator--b21654ce-a79d-44cd-b856-cbf2966d46da", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b6bbea-b887-4c64-8708-1dcc92fe55b5", "sighting_of_ref": "indicator--8a484244-0893-43d3-8cfc-22b5fbbdf8b1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d61757-d845-44d1-b0b6-14eaa16f059b", "sighting_of_ref": "indicator--7b3ebbca-2a97-4885-b50e-be47bd095e84", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da439a8-0c35-4f85-a1d2-21b856629050", "sighting_of_ref": "indicator--9c5a57b5-a3c0-46f9-bea0-6428d2c7039c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9315249-493a-475a-bf8e-01fb6a7900b9", "sighting_of_ref": "indicator--bd2ccce2-7983-4605-b366-ca76837fbc91", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17845313-41c9-4d27-b017-7d6dd4d66443", "sighting_of_ref": "indicator--4cc9f8b9-53c2-49db-96e9-ecb5676b57a2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64fbe07-2a9d-45f8-9fe1-113231253317", "sighting_of_ref": "indicator--2fa30d22-cf96-4796-aecb-9c0a044d1192", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be8e4ec-0947-4017-a69a-275d4d461ea1", "sighting_of_ref": "indicator--248145b2-794d-4f00-9da7-ecb83c250ffa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc23d7bc-8db5-4a96-a351-5513337cff43", "sighting_of_ref": "indicator--5311056e-978f-40e1-80c4-c47aea6cb72e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc32df2-adb2-43a2-83bf-91f096026f90", "sighting_of_ref": "indicator--4113ee4c-547f-4dac-8334-71073d6b424e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f289bfd2-ff96-4246-a1c9-98e8566efc6e", "sighting_of_ref": "indicator--ead68767-d64c-4dd8-9261-e069e2eecfea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29e31b0-21c8-45a6-8999-86823afa8620", "sighting_of_ref": "indicator--d3963a80-b193-41a1-82db-1e36e23a68d9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e7e715-a8f9-4405-b8db-c58f099c9d3a", "sighting_of_ref": "indicator--d3963a80-b193-41a1-82db-1e36e23a68d9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0004bd-24c9-45cf-8205-4a95543386eb", "sighting_of_ref": "indicator--d3963a80-b193-41a1-82db-1e36e23a68d9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d115e1-1a5a-440f-81e6-c26702c2548d", "sighting_of_ref": "indicator--1e0fdd6f-dbad-4a24-877c-d147ada68309", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e3d285-77c3-4bbd-ad52-68b6a1bd6c41", "sighting_of_ref": "indicator--1e0fdd6f-dbad-4a24-877c-d147ada68309", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b78d3d-3087-4e1e-afc1-e10810a2a077", "sighting_of_ref": "indicator--1e0fdd6f-dbad-4a24-877c-d147ada68309", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f60f7b9-d4e9-4786-be9d-40a3a813295e", "sighting_of_ref": "indicator--96bb382f-1cc8-40c0-a1a1-ac0cbd4e06cb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be3dcdd-4812-4ec6-94d4-e036fce8df83", "sighting_of_ref": "indicator--96bb382f-1cc8-40c0-a1a1-ac0cbd4e06cb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e19cb1-d1af-4cc0-b6d9-6622e1e5ea96", "sighting_of_ref": "indicator--96bb382f-1cc8-40c0-a1a1-ac0cbd4e06cb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2a1c9c-80ed-45d5-9e50-6349ec97293c", "sighting_of_ref": "indicator--2c12bab1-a6d1-45ac-87f3-2687ef6ce8e1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef277b6-e65e-4c36-b13a-cc223abca64a", "sighting_of_ref": "indicator--2c12bab1-a6d1-45ac-87f3-2687ef6ce8e1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29aec71f-42ba-4e00-bb6d-d0e6926d0fe5", "sighting_of_ref": "indicator--2c12bab1-a6d1-45ac-87f3-2687ef6ce8e1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794bf38a-ddb9-4885-85b6-666eef6ff410", "sighting_of_ref": "indicator--bcccc036-e483-44d1-990d-34f41a8f711c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2325665d-fe4d-4ecd-bd7e-379395468c7f", "sighting_of_ref": "indicator--bcccc036-e483-44d1-990d-34f41a8f711c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4059e4a9-edd4-465d-aded-f6be451a01ce", "sighting_of_ref": "indicator--bcccc036-e483-44d1-990d-34f41a8f711c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e75c6bb-daef-4058-8269-4e6395576037", "sighting_of_ref": "indicator--697260dd-1d77-4074-acc4-05d113de59d8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3a73c5-c5ec-4978-acb4-3eb06aa6445b", "sighting_of_ref": "indicator--697260dd-1d77-4074-acc4-05d113de59d8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf38be5-20e7-48bf-b64a-ad467dd118b9", "sighting_of_ref": "indicator--37d97b99-41af-4e50-a5bc-a3dd47a40c25", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f5aa0f-97f3-4c9e-a95b-4f4635475985", "sighting_of_ref": "indicator--50aeaef1-fa52-442b-83ef-85cadb33a8e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b553f5-0088-4edd-bd4c-c84c2c7edd30", "sighting_of_ref": "indicator--50aeaef1-fa52-442b-83ef-85cadb33a8e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27c2322-27e7-4c78-955d-4f80d54b2640", "sighting_of_ref": "indicator--438ad929-195a-42be-a2e5-7bf18654c83d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d594d3-45dc-4a6e-bb60-7acbaf9fc0a8", "sighting_of_ref": "indicator--d3a74f0f-baed-4c27-aba5-19ec999c230d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d688638-4c14-4bc1-9c98-2eca33920eb3", "sighting_of_ref": "indicator--d3a74f0f-baed-4c27-aba5-19ec999c230d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6129ce2-12a7-4edf-a508-83bf41c7e8ef", "sighting_of_ref": "indicator--ea085f40-7fc1-4779-b374-c1d9a7834387", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becfb53d-8b43-42d6-b690-8f41b5362e51", "sighting_of_ref": "indicator--293cdd06-224c-4e20-8e30-4b8a9c384359", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06183c07-8580-4db8-a09f-dfeefe5321d6", "sighting_of_ref": "indicator--559dd129-63f0-4468-b33f-6ff58c9406a9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b521a3-dc70-49ba-8642-11f78329b4a8", "sighting_of_ref": "indicator--559dd129-63f0-4468-b33f-6ff58c9406a9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f859f3a4-ed0b-4cbd-be95-92565ecf0814", "sighting_of_ref": "indicator--c5e8f38c-7ef5-4dde-83bf-f0848ba5013e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e96a0aa-8ea3-4484-94cf-69eb34555d7d", "sighting_of_ref": "indicator--c5e8f38c-7ef5-4dde-83bf-f0848ba5013e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39af766b-fe2a-4708-abea-570b75d31a37", "sighting_of_ref": "indicator--a1fe51dc-83a6-4e3a-8635-61db4c8216c2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eaecb34-89d6-4552-9077-df1c65e5ce5c", "sighting_of_ref": "indicator--a1fe51dc-83a6-4e3a-8635-61db4c8216c2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b7bc82-c369-44c9-83b0-babe1304efa8", "sighting_of_ref": "indicator--a1fe51dc-83a6-4e3a-8635-61db4c8216c2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0260a56d-c3ed-4a00-b7be-33abd591c508", "sighting_of_ref": "indicator--bc05174d-fbe4-4bfe-b9da-94602edd0c0e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dee9215-dc7a-4a43-a528-ec6fa3426feb", "sighting_of_ref": "indicator--bc05174d-fbe4-4bfe-b9da-94602edd0c0e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52165f71-bae9-4be3-a74a-ba7c1be48c4b", "sighting_of_ref": "indicator--f95c0537-35e0-454f-bc87-5cf5d12f3581", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e0a785-2441-4811-8181-ee7c41cdf30f", "sighting_of_ref": "indicator--f95c0537-35e0-454f-bc87-5cf5d12f3581", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de519016-15a6-4bde-ba98-7c5392590052", "sighting_of_ref": "indicator--105b1527-3cfe-4d72-b74f-a20735f83fac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4534d843-f754-4bde-8004-ecb9399cda1c", "sighting_of_ref": "indicator--105b1527-3cfe-4d72-b74f-a20735f83fac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c51b0c-18ed-4058-a50f-f918c67b6f3e", "sighting_of_ref": "indicator--105b1527-3cfe-4d72-b74f-a20735f83fac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c44f4da-bb30-4ea0-ab81-6f0df5f87222", "sighting_of_ref": "indicator--8a797a85-8c39-47c3-8b2a-5bc49c9f3b94", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3331442-1834-493f-8e2c-e2eae2034f1c", "sighting_of_ref": "indicator--8a797a85-8c39-47c3-8b2a-5bc49c9f3b94", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108e5c0e-9c50-49aa-aae7-33257a6155e3", "sighting_of_ref": "indicator--4c38fc37-6d84-4013-b9d2-5ce13e389893", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a117c4-6deb-4c95-90a1-88ab0c6a5dca", "sighting_of_ref": "indicator--4c38fc37-6d84-4013-b9d2-5ce13e389893", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409681d4-97bb-4ccb-b8fb-d590ee90fe0f", "sighting_of_ref": "indicator--c91d6a62-45ec-46ba-ad2f-9ac9f39e97cd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10f1e35-99fc-4ebc-9198-8a427dd6e49b", "sighting_of_ref": "indicator--c91d6a62-45ec-46ba-ad2f-9ac9f39e97cd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27da9c96-86a1-4a95-822e-4bc411d2dcc8", "sighting_of_ref": "indicator--fc38eeb6-cc7a-4a06-a167-3ef9c853c548", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32be8a5a-9fd9-4b33-946e-2c9e526a7bc0", "sighting_of_ref": "indicator--fc38eeb6-cc7a-4a06-a167-3ef9c853c548", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8085b2-a45d-460d-af30-d6265d29fc8c", "sighting_of_ref": "indicator--d8c19a69-d8b6-43e3-920f-c1d4a557f0c9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27d8031-cf4e-4de6-8fa0-517078a25691", "sighting_of_ref": "indicator--43a103a2-d99a-4dfb-9c6d-e210afabf38b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e92b6a-5bfc-40e0-a4a5-9ca8e9c7cfac", "sighting_of_ref": "indicator--43a103a2-d99a-4dfb-9c6d-e210afabf38b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8b6bd8-48e9-4af0-aad7-038e8758538e", "sighting_of_ref": "indicator--e8fb4d9a-4d41-49a5-b08d-dcf216de4715", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46bf7a81-b76c-47ba-8a8f-17949717eb70", "sighting_of_ref": "indicator--5b7633ca-602d-41d8-bbd8-77ca9e7e5468", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafa6438-83cb-43bc-91aa-3982bfed454c", "sighting_of_ref": "indicator--5b7633ca-602d-41d8-bbd8-77ca9e7e5468", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49df1ad6-3141-4b3e-ab40-9f162948d50b", "sighting_of_ref": "indicator--63247f10-825c-439d-a5ea-1e87db7e3b2f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5123ba97-f2c4-4911-ba3c-8e15ed9d63fd", "sighting_of_ref": "indicator--63247f10-825c-439d-a5ea-1e87db7e3b2f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37561416-e9f6-44cf-8742-2167fe4e225b", "sighting_of_ref": "indicator--d8bdb33b-d1ae-4449-bfc4-d2b22b5875d1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36616b98-42ab-4085-9e6c-0a6f0fc653fb", "sighting_of_ref": "indicator--d8bdb33b-d1ae-4449-bfc4-d2b22b5875d1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a23a33-722b-44f7-8e6f-dc9878575f23", "sighting_of_ref": "indicator--a458bd1e-1a8b-4487-aaee-667a671f574c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ce5874-8cb6-44f0-880b-ddd05b6917ed", "sighting_of_ref": "indicator--a458bd1e-1a8b-4487-aaee-667a671f574c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de9c590-ada9-4e1f-ac93-53ef563d439e", "sighting_of_ref": "indicator--14b6f082-d82e-4d7f-98d7-067f02bb3a46", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6328e0-9c7b-4031-a186-a40372b7b953", "sighting_of_ref": "indicator--14b6f082-d82e-4d7f-98d7-067f02bb3a46", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de4240a-975c-4ea8-9c07-12edb0c86fd7", "sighting_of_ref": "indicator--b508353b-394c-4a4d-9f78-d116c97369a1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5353729a-0710-4b04-9fe5-7d324ac8232f", "sighting_of_ref": "indicator--971af5d8-731d-4f03-9196-687c35c58ddd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650ae5bc-3a6e-45e7-9edb-b0a2697099a5", "sighting_of_ref": "indicator--acc156ec-f65d-4e79-b436-c1ea7c79e6e6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd5cb28-89fa-4aea-b7a0-c7f51098fb0a", "sighting_of_ref": "indicator--acc156ec-f65d-4e79-b436-c1ea7c79e6e6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51defbc6-9e9f-49ce-a427-09bacb87a73f", "sighting_of_ref": "indicator--958b168b-5793-4e5c-9575-4e1c738fa27e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fab6cd4-e412-4eb2-bbb1-865e578de061", "sighting_of_ref": "indicator--958b168b-5793-4e5c-9575-4e1c738fa27e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59c0380-1752-4225-817f-1069a05ed01b", "sighting_of_ref": "indicator--e84f6d84-e021-4a82-ba8f-8b0d8059c5e3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1255dc-67ca-492f-83a4-b7a0beffca2e", "sighting_of_ref": "indicator--e84f6d84-e021-4a82-ba8f-8b0d8059c5e3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a472200-540d-43bb-8cdd-7fd383497cde", "sighting_of_ref": "indicator--facb1abb-3677-4fef-8c3d-c62eda0ffc3f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3af64d9-aa45-4eda-8aeb-8774f8f6a250", "sighting_of_ref": "indicator--facb1abb-3677-4fef-8c3d-c62eda0ffc3f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5641f92-8729-499c-8b7d-60bdb596913a", "sighting_of_ref": "indicator--543d314a-495e-42d5-aec0-d77adb934208", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcc2902-29c9-417d-aedc-7afa7d7360c6", "sighting_of_ref": "indicator--543d314a-495e-42d5-aec0-d77adb934208", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbefe1f-0ee6-4623-8a52-776a6d08d92d", "sighting_of_ref": "indicator--4a449b28-1be6-4fd0-acbf-e5052ed3a586", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7cdaf3-4be9-4c8d-be90-d3effff8e01d", "sighting_of_ref": "indicator--4a449b28-1be6-4fd0-acbf-e5052ed3a586", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e508d30-0a55-4b4e-9c1a-6c1292b6c1f9", "sighting_of_ref": "indicator--870f5f15-08bc-4707-b403-5d7bd49f999b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f52752c-6901-4208-8043-1ad7471c6b87", "sighting_of_ref": "indicator--870f5f15-08bc-4707-b403-5d7bd49f999b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b5f674-2b52-4c50-a4a0-8a527dd6fe3f", "sighting_of_ref": "indicator--8d7f05fa-d837-456c-b5ca-7a4afa031fe8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e9c305-8da2-4121-87b5-4aa9b60a6d21", "sighting_of_ref": "indicator--8d7f05fa-d837-456c-b5ca-7a4afa031fe8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f803368-5728-401f-b415-9a7ef81fcf9a", "sighting_of_ref": "indicator--bcf95832-7290-46f3-a7c8-352b4f9f2dbe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b29289-d8dd-4b87-a00c-ccad7e124d47", "sighting_of_ref": "indicator--bcf95832-7290-46f3-a7c8-352b4f9f2dbe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0570b610-1979-4386-9b4a-60ae76a60824", "sighting_of_ref": "indicator--ff533348-dc1c-4a68-abbb-b80019f514a4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfe5cb7-0765-4928-810a-9f3ad7fb5d1e", "sighting_of_ref": "indicator--ff533348-dc1c-4a68-abbb-b80019f514a4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f100b5-5641-46f9-b1dd-8afe16f22300", "sighting_of_ref": "indicator--14a06141-3d37-428a-a996-816bb361e2ca", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3eb069-d604-40dc-a023-2f3ba0e07d13", "sighting_of_ref": "indicator--14a06141-3d37-428a-a996-816bb361e2ca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96168bc-9170-4a6c-bab0-13ca122ede6e", "sighting_of_ref": "indicator--72a39457-f28e-4bf0-ac5f-c9ff4e73bced", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fce01b-01eb-49a6-af58-2cc543e54e04", "sighting_of_ref": "indicator--72a39457-f28e-4bf0-ac5f-c9ff4e73bced", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a660bb-a535-406e-b0aa-61edb11127c4", "sighting_of_ref": "indicator--72a39457-f28e-4bf0-ac5f-c9ff4e73bced", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f5e8aa-2e92-421a-8bfe-5e9cb49c9ec3", "sighting_of_ref": "indicator--e921067a-7438-4da6-8052-2dd6e9e5a683", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6c4473-72f8-42a1-b0a6-f5063b272f9b", "sighting_of_ref": "indicator--e921067a-7438-4da6-8052-2dd6e9e5a683", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ae1971-00d9-46d9-aaff-dfb4f5be5a4e", "sighting_of_ref": "indicator--3f075a60-61e5-40fd-a61d-36b3ab4e90eb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c740efe-edca-4715-ac64-ea6304c893db", "sighting_of_ref": "indicator--3f075a60-61e5-40fd-a61d-36b3ab4e90eb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7162e9d-d904-4b0d-96d5-4c5705f2bb51", "sighting_of_ref": "indicator--0d6aedcc-8af1-4961-b2a1-94e42743b1c4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8c3922-250b-4f32-8cfc-c0824042e94a", "sighting_of_ref": "indicator--0d6aedcc-8af1-4961-b2a1-94e42743b1c4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5dca69d-2656-417f-9678-784bd322b09a", "sighting_of_ref": "indicator--40331452-6c48-489f-99c1-40277c0a86ef", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e950852f-5b0d-45e6-a818-80fd71295f5d", "sighting_of_ref": "indicator--40331452-6c48-489f-99c1-40277c0a86ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e773f9-519b-4c3f-b3c7-d8fe25235c36", "sighting_of_ref": "indicator--7d32477f-d293-44d6-9e1f-26c67d71cf9b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372501c5-7c7d-4a04-b359-aa83ec845874", "sighting_of_ref": "indicator--7d32477f-d293-44d6-9e1f-26c67d71cf9b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089026d9-1754-48ee-85b7-5542905e8d1a", "sighting_of_ref": "indicator--c19e75dd-4363-4e65-8c36-58134596e7fc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a336d0f6-51cb-436f-ba54-caa9b25923ec", "sighting_of_ref": "indicator--c19e75dd-4363-4e65-8c36-58134596e7fc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6835c9db-fdb2-42fb-bcf1-a4b5befe2160", "sighting_of_ref": "indicator--4c2f8df1-9f36-41db-a740-29716297e36a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ab2d0b-1e7f-42e3-b2ad-48f0b93ada7a", "sighting_of_ref": "indicator--4c2f8df1-9f36-41db-a740-29716297e36a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507b2e59-b97e-45ce-a8b8-13e7acc6461d", "sighting_of_ref": "indicator--b6c65ab2-1aaf-44d3-984c-b539ea4753cf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6a5d70-1a0f-4216-82ee-d33dda229446", "sighting_of_ref": "indicator--b6c65ab2-1aaf-44d3-984c-b539ea4753cf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ea512e-698c-4c47-8292-eadec8e019ea", "sighting_of_ref": "indicator--7d2d494f-f251-4408-813b-f2c6e5920d60", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c1ed46-4abe-4269-8d28-f9b625fd34f8", "sighting_of_ref": "indicator--7d2d494f-f251-4408-813b-f2c6e5920d60", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c224880-4ede-40df-a258-4f1bdebba815", "sighting_of_ref": "indicator--9113f94f-2f84-4c4d-9398-6d0861680e85", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5a2e34-1814-4682-9cd3-366727205b8c", "sighting_of_ref": "indicator--9113f94f-2f84-4c4d-9398-6d0861680e85", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce3f847-a8f1-4c5b-82ba-ab774dace5f9", "sighting_of_ref": "indicator--2b847d91-5fb9-42c2-a322-8b592242f77f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463ca365-db17-4902-983c-c473c4053d37", "sighting_of_ref": "indicator--2b847d91-5fb9-42c2-a322-8b592242f77f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31f8ff7-fd56-4b3d-be46-c013597da637", "sighting_of_ref": "indicator--98fa0576-af3a-44d8-b399-64bf11bbbf8e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267cc473-5481-403a-94f2-ecfec529f3c1", "sighting_of_ref": "indicator--98fa0576-af3a-44d8-b399-64bf11bbbf8e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e513e193-0aa0-41c9-a50d-4fcc4d2a135e", "sighting_of_ref": "indicator--230db436-31e9-4b58-99ab-aca19fa892fe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6378391b-d400-4c79-8c55-1fa1d5e15ca3", "sighting_of_ref": "indicator--230db436-31e9-4b58-99ab-aca19fa892fe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb1e2fa-9764-4456-8d40-38e0d4465b34", "sighting_of_ref": "indicator--2e2f7c87-7c8d-44be-859e-d513e9295aba", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33455026-01e5-4107-a07a-6806f4ffb1ec", "sighting_of_ref": "indicator--3bcca0c7-fcf9-4d98-96c5-2b007babedf9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee524c43-b781-4589-9d0a-b2ec0808c538", "sighting_of_ref": "indicator--d92560ec-87cc-4493-9876-91bb83a1f2c4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c3da91-fc14-4868-a345-a9c30049bc29", "sighting_of_ref": "indicator--d92560ec-87cc-4493-9876-91bb83a1f2c4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def01698-06a6-466e-80b9-d31cebedbf61", "sighting_of_ref": "indicator--02cca31c-00d4-4a00-b722-efe7eba1a5c1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034d4d96-7d22-47a9-b508-7665d8e8aa00", "sighting_of_ref": "indicator--cb156f71-64f9-4381-ac7f-b9a7c6402861", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb1f6f9-8580-423c-85c8-37c59236ca20", "sighting_of_ref": "indicator--1663dbe2-555f-436c-8cc9-2adcbda67587", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf25252-b61e-4d9c-ad98-2cd47228873f", "sighting_of_ref": "indicator--e38ffb06-62ec-4cdd-bc27-e3b7b7a23c7e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7453aff-3c81-4f9a-9906-9272271806a1", "sighting_of_ref": "indicator--68a1d937-6d74-486f-8f61-368feaf0af97", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac6b3ba-51ce-413b-8627-7cd76fc7420c", "sighting_of_ref": "indicator--09ed22d3-c149-4f18-b5f1-e7e6854f74bf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0a153b-aa3f-4624-b970-86b549a7279a", "sighting_of_ref": "indicator--06015445-d1de-4ce2-a871-833949e5e967", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee26428-6492-4a43-a767-31a5394e3544", "sighting_of_ref": "indicator--925a2b6a-c50d-4b38-b5e0-b84c1de4cc2a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0d0b24-d125-4e18-85bc-55ad115072f7", "sighting_of_ref": "indicator--5b290c3a-01ae-4f3f-931f-6678f3e45cf7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307a9881-217b-4228-ada7-8999f8f50527", "sighting_of_ref": "indicator--d52a29e5-8105-45ff-bea5-3f0cab3eca12", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a924cd0-b1d4-4849-8b16-061492d178e0", "sighting_of_ref": "indicator--2afe98de-de0c-4f59-9ec1-782abf936710", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35bf169-1408-469f-960a-2fdf2effa267", "sighting_of_ref": "indicator--2afe98de-de0c-4f59-9ec1-782abf936710", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be340ae-b243-4d79-bc4c-2d2ef28788b5", "sighting_of_ref": "indicator--a57c3e01-3c44-4925-a6c7-71d4de304b1b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e085cf84-aba0-4866-8686-ed314fa75eb4", "sighting_of_ref": "indicator--03cb925d-b012-41cb-93ba-fb9bdffb9729", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfed669-d291-44af-bcc1-e1d8bdb22c70", "sighting_of_ref": "indicator--8de8c6b4-7978-473f-9b3b-e01f120ddd31", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7636b7-a186-44cc-9623-f0ae229983ac", "sighting_of_ref": "indicator--5e8cdc43-a270-43bc-a735-e547da3fc7ec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6c415f-8b20-40b5-b03b-9e6a3a4a27a4", "sighting_of_ref": "indicator--96c0b2e2-f2ab-4801-ba60-e37c1522fd64", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed353655-9481-4810-88ac-aeb7409f8539", "sighting_of_ref": "indicator--25a8131e-7e88-4c6a-8240-96e07b5c7ed1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39418636-3067-4e07-9f6f-91423f1e374f", "sighting_of_ref": "indicator--93b0f3e7-6bb8-4bf6-923e-55d92a645a23", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17853e64-c468-42cc-9077-2291ec24a534", "sighting_of_ref": "indicator--f4afed4f-ff55-47c1-95c4-289bcb77f374", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef4157f-067d-40bb-9f6b-cf6277fe4e1b", "sighting_of_ref": "indicator--134df95c-967e-4b37-98b8-f9c85efb105e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ad8883-b6f4-49b5-901b-d7959522b70e", "sighting_of_ref": "indicator--971883fb-d600-41a3-b05f-1297f86f0851", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2229ce22-e61f-46ac-8552-f1c90d7c85f2", "sighting_of_ref": "indicator--971883fb-d600-41a3-b05f-1297f86f0851", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a901547-e021-4a22-89e6-ceb2c26cf58c", "sighting_of_ref": "indicator--8feb3372-58ac-4213-a726-921a50a31deb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e04ef1-8b7d-48bb-a731-8b514049de37", "sighting_of_ref": "indicator--77627cee-a0fb-433c-9d42-3ec4c08c217f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004f7549-d5f5-4d87-b392-696aaa6a108f", "sighting_of_ref": "indicator--17b8155d-3f77-4322-b107-2d358d3786bd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca9bdfe-72d8-4d56-8a52-0de631111272", "sighting_of_ref": "indicator--eb239db5-0cd4-4e6a-8275-82653734c251", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f356ce5-3cc5-4c2b-954d-ff4abad04154", "sighting_of_ref": "indicator--d63be1d1-1527-47bb-aac2-c37e774670d8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf0f891-04cd-49fc-9026-2c8785594cee", "sighting_of_ref": "indicator--6fc4703d-88ec-46bf-96d7-10264acd8717", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a68452-6bdd-4cd5-ab2c-ad5ab2de569e", "sighting_of_ref": "indicator--c7a6ec36-21b9-4322-b814-5156dae9ef14", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4438609d-56fe-4cea-81cb-bfda55ac3408", "sighting_of_ref": "indicator--69a0a116-72be-446a-bfa8-314c51648963", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa72cbdf-2237-4937-ac01-d098f4101bbc", "sighting_of_ref": "indicator--d22d9310-f5ff-4bc6-8330-c98fb998e626", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4183c48e-43a3-425e-a39e-4a2e4fe701ff", "sighting_of_ref": "indicator--cb56877f-4155-46bd-89eb-5deb533ad1c9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fe7bee-1c3e-443b-80bc-bd1427a920d4", "sighting_of_ref": "indicator--6a94a6d5-2c1b-4588-9259-3114b4e2972e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f517972-dcb6-4c4b-8b44-da82c69637b0", "sighting_of_ref": "indicator--6a94a6d5-2c1b-4588-9259-3114b4e2972e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096b5de9-aadd-43d2-89d6-0f008a7278f4", "sighting_of_ref": "indicator--a161bfd2-1b49-40d0-abe4-9d109b08c6e2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228414df-dc77-4439-a822-33986be1420a", "sighting_of_ref": "indicator--e680e907-c399-4da4-9f15-9486d9afb568", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a945e84f-3165-4728-bbe8-68bc0396ae57", "sighting_of_ref": "indicator--9613d426-e170-4a95-8db9-2fbce3b4e074", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0fc350-8297-4bc3-8db8-b19b18a8c647", "sighting_of_ref": "indicator--149bba78-a4f6-43c3-9999-d3ceafe0e68d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bebc4d-428b-49dd-a7e6-4d2ba36b7e01", "sighting_of_ref": "indicator--06c2f740-fbb2-4fe8-a358-a465d91196ca", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cbb391-e37a-4423-b8e0-6f008f696626", "sighting_of_ref": "indicator--06c2f740-fbb2-4fe8-a358-a465d91196ca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641240df-5d7d-43e9-822c-469fa874b428", "sighting_of_ref": "indicator--93bc7299-9c70-4f56-8366-3d7a10eae938", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d310f74-7b3a-4105-b87a-7bf56a1173a7", "sighting_of_ref": "indicator--93bc7299-9c70-4f56-8366-3d7a10eae938", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828d25a6-c114-4dd0-ae82-cfe572c3af7f", "sighting_of_ref": "indicator--4cd628d2-fa03-4d5d-a8cd-13e3d4daa0a1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76db508-eac6-405e-93ec-2bcdf6caeda8", "sighting_of_ref": "indicator--4cd628d2-fa03-4d5d-a8cd-13e3d4daa0a1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607c4f95-7bac-42a2-9eb8-238f3e8a7867", "sighting_of_ref": "indicator--4cd628d2-fa03-4d5d-a8cd-13e3d4daa0a1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3e4882-3cfe-46ff-9ba1-8298e7abae6c", "sighting_of_ref": "indicator--06111d2b-f1c9-4689-9045-663026ef71bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5f5682-cf3d-47b7-923b-b5db832fac12", "sighting_of_ref": "indicator--06111d2b-f1c9-4689-9045-663026ef71bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d068210-8594-468e-a1e7-b778d1e73cbd", "sighting_of_ref": "indicator--06111d2b-f1c9-4689-9045-663026ef71bd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6e7043-2e82-40ea-a28a-9316cf0088be", "sighting_of_ref": "indicator--1e258218-7794-4fd3-8edc-f56c392d1326", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c024a0-5ecf-4fee-8b60-a5efa7e4cd2f", "sighting_of_ref": "indicator--1e258218-7794-4fd3-8edc-f56c392d1326", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56266e0b-82ee-4faf-8868-2c38d5be30cc", "sighting_of_ref": "indicator--9426fa94-5a1a-46e6-ba1d-337a7adfd4c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717d3489-7877-47bd-a3ea-60e6bf083671", "sighting_of_ref": "indicator--9426fa94-5a1a-46e6-ba1d-337a7adfd4c6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1fe841-4cce-4184-99fc-530caa083908", "sighting_of_ref": "indicator--9426fa94-5a1a-46e6-ba1d-337a7adfd4c6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209a9959-de2b-4f83-ba17-d046d4d9b7ff", "sighting_of_ref": "indicator--b6e64403-8429-458b-9adf-75d3398179b9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c0efe4-b91b-44f7-b8e9-d6beca86a9a1", "sighting_of_ref": "indicator--b6e64403-8429-458b-9adf-75d3398179b9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880e71fc-c2ef-4978-8761-d75de2c97e41", "sighting_of_ref": "indicator--b6e64403-8429-458b-9adf-75d3398179b9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a5c057-98d4-4d54-a7df-9643e80779c2", "sighting_of_ref": "indicator--a262023c-4897-48f6-a1da-9eb099aeadef", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9872ef6-9307-419e-852d-929e846f1567", "sighting_of_ref": "indicator--a262023c-4897-48f6-a1da-9eb099aeadef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a552f045-c5c3-4642-b421-686b02defb84", "sighting_of_ref": "indicator--a262023c-4897-48f6-a1da-9eb099aeadef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77127c14-d6c6-49fe-b0fb-d03c0983de92", "sighting_of_ref": "indicator--3fd4ae94-6ea7-45fe-bb60-8c52b61ad7f5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b46a83-3b09-49c1-904d-4f7ecf0c8088", "sighting_of_ref": "indicator--3fd4ae94-6ea7-45fe-bb60-8c52b61ad7f5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95bea8f-fd0e-4b78-a19b-1fad68f889bc", "sighting_of_ref": "indicator--656a55b3-2985-4481-b82d-d088801f1b8e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8953bc82-bec1-4aa4-a579-4a7a512851b5", "sighting_of_ref": "indicator--322b2949-0d40-463d-8873-3f60b170f1ae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a262d18-5950-4282-9973-e903be2d9f45", "sighting_of_ref": "indicator--322b2949-0d40-463d-8873-3f60b170f1ae", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e560b26-a838-4323-b6a6-aac567bfe66e", "sighting_of_ref": "indicator--322b2949-0d40-463d-8873-3f60b170f1ae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83094dcd-eccb-4b44-b589-47c32232bb15", "sighting_of_ref": "indicator--481f5ace-c354-43d8-9d8f-c9e7f04b0c7c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a83f5c-ddd7-42bc-abaa-701aa3e3b359", "sighting_of_ref": "indicator--481f5ace-c354-43d8-9d8f-c9e7f04b0c7c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e88d359-65a9-4f49-bd27-ec34b1d7ac1f", "sighting_of_ref": "indicator--1fbabd18-4208-485f-bfbe-6640a6b1b98b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a0cb49-0240-47db-b994-228e0360da56", "sighting_of_ref": "indicator--1fbabd18-4208-485f-bfbe-6640a6b1b98b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6b6b1f-23e7-4468-8832-0e982407afdb", "sighting_of_ref": "indicator--a3bb19b5-3b0a-4658-a7ff-221233bd50be", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bad2c68-bd0e-4043-8bc9-17d4e1ddc499", "sighting_of_ref": "indicator--5dc58a92-f2dd-4f32-b670-72bc6ac9e2cd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fc0898-1209-454b-91e3-767b285369ba", "sighting_of_ref": "indicator--5dc58a92-f2dd-4f32-b670-72bc6ac9e2cd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3134cdd-5657-4966-ac0a-3dcd738db492", "sighting_of_ref": "indicator--5dc58a92-f2dd-4f32-b670-72bc6ac9e2cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcd7140-ab19-4530-9e6a-c883f8eb56ee", "sighting_of_ref": "indicator--9b599797-a88f-4975-a77d-ecb1eaf79c3a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d0ed87-6ab4-4578-ab9e-7e9f6a98dbec", "sighting_of_ref": "indicator--9b599797-a88f-4975-a77d-ecb1eaf79c3a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf73fb6b-35d2-49e0-a74b-0910f3ea7827", "sighting_of_ref": "indicator--3b5635b0-d4c2-46e9-9442-ceb9af326ce2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b9be12-e9b8-4b21-9c1d-7198f161376a", "sighting_of_ref": "indicator--3b5635b0-d4c2-46e9-9442-ceb9af326ce2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f632e17a-cfdd-4b2e-9563-3b22d607f39a", "sighting_of_ref": "indicator--3b5635b0-d4c2-46e9-9442-ceb9af326ce2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061fecd2-c3db-40d7-b023-382c0172eb5b", "sighting_of_ref": "indicator--edbd7be9-88eb-4191-9638-a16b5b35e68b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0923f18d-055b-4a5c-ad1f-8421153c337e", "sighting_of_ref": "indicator--edbd7be9-88eb-4191-9638-a16b5b35e68b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc26a120-5b4a-48c0-b397-c6090dee21b4", "sighting_of_ref": "indicator--7d21dd64-418c-4737-ae58-8dc7c33e86d0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b50d8a-223a-4162-9855-b669f700e0ad", "sighting_of_ref": "indicator--c37fc0b0-3906-484e-a57b-85975713e1d4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881e560e-f5c7-45c2-af11-2b48e79b553b", "sighting_of_ref": "indicator--6eb9eb6c-daff-42c9-9959-21ff657e6651", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc0101c-5156-413f-b754-c6d309e3dd30", "sighting_of_ref": "indicator--6eb9eb6c-daff-42c9-9959-21ff657e6651", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f0452e-83c0-4844-864f-ebf622a7a1fb", "sighting_of_ref": "indicator--6eb9eb6c-daff-42c9-9959-21ff657e6651", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e512d98-1777-4806-a4ba-1e71d0a5ab10", "sighting_of_ref": "indicator--606fb21f-9a84-4c21-964e-634fbf0d52af", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3f1679-642e-46b3-98aa-28c15c986296", "sighting_of_ref": "indicator--4d4434de-4ca6-4722-998a-a5781319be66", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b15304a-f0fb-48ef-b4a7-0cad3f515837", "sighting_of_ref": "indicator--9afda6b1-037e-4654-a505-4d1f5685b069", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2893145a-bcaa-40c1-882c-e829fc61869c", "sighting_of_ref": "indicator--9afda6b1-037e-4654-a505-4d1f5685b069", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c9f15b-37d1-4431-bc39-3de058e17126", "sighting_of_ref": "indicator--9afda6b1-037e-4654-a505-4d1f5685b069", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667e5584-4165-40c2-be57-5acd286e7fbd", "sighting_of_ref": "indicator--692ee1c6-cfd8-40a7-9022-4b91d29d0593", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b087f8-2147-4ac5-b1fe-0ea615a7e31d", "sighting_of_ref": "indicator--692ee1c6-cfd8-40a7-9022-4b91d29d0593", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79564a42-5bdb-410b-96ce-06eb887efb41", "sighting_of_ref": "indicator--692ee1c6-cfd8-40a7-9022-4b91d29d0593", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba2f550-0981-40b7-bc5d-f665e1d2c895", "sighting_of_ref": "indicator--fbf96478-8f96-4028-8bc7-352f4bc8b98b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d0c4e8-8465-4008-9a12-48f972bb3bfe", "sighting_of_ref": "indicator--fbf96478-8f96-4028-8bc7-352f4bc8b98b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56b8764-a7eb-40b6-bd56-4660d7f67f87", "sighting_of_ref": "indicator--fbf96478-8f96-4028-8bc7-352f4bc8b98b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775b3fce-f158-4418-a813-20a933773e96", "sighting_of_ref": "indicator--35ed1543-c9dd-4a94-b849-49c86a20de10", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9caf3f2d-96cd-46bc-bfdf-e1af2ff45e86", "sighting_of_ref": "indicator--35ed1543-c9dd-4a94-b849-49c86a20de10", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75fe390-9714-4c11-ab35-83d143c624a3", "sighting_of_ref": "indicator--35ed1543-c9dd-4a94-b849-49c86a20de10", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75be116-61f7-4c52-a0c3-cf7fd8092649", "sighting_of_ref": "indicator--1148b22c-9f49-4322-af8e-2a0fa86a161f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c02770-ecac-4b86-987f-b5707eed32ec", "sighting_of_ref": "indicator--337a1038-4b09-4601-903e-8ef2c890ea9e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e1a46b-0926-4afe-9c40-b244afb2b6c3", "sighting_of_ref": "indicator--337a1038-4b09-4601-903e-8ef2c890ea9e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c365a3da-7ecf-4cf1-b009-a2120f920833", "sighting_of_ref": "indicator--337a1038-4b09-4601-903e-8ef2c890ea9e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b73418-d72d-48f9-9918-fd1940da036b", "sighting_of_ref": "indicator--737d637c-2bec-4c55-9b51-3b14c8bd35da", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f996b9c1-b30b-4397-8aba-fd8dd772e92e", "sighting_of_ref": "indicator--737d637c-2bec-4c55-9b51-3b14c8bd35da", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d39f15-3ad8-4bae-a2f3-227e82ee33de", "sighting_of_ref": "indicator--737d637c-2bec-4c55-9b51-3b14c8bd35da", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae98fcf-ad87-4b11-9e2f-a0437d1106f1", "sighting_of_ref": "indicator--14b91111-4f53-4f1a-abef-8851cadc7a6a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933a38dc-d69a-4d16-93b3-09959a897e1c", "sighting_of_ref": "indicator--14b91111-4f53-4f1a-abef-8851cadc7a6a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85218899-72ec-4450-866b-ffd8c4a643e7", "sighting_of_ref": "indicator--14b91111-4f53-4f1a-abef-8851cadc7a6a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bbd8f1-fcd9-4191-946f-a5889dca7147", "sighting_of_ref": "indicator--b230ea61-113a-491b-9e93-d0a8104dd8ef", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c36997-7857-4be4-9ccc-eb4592fc1c7c", "sighting_of_ref": "indicator--b230ea61-113a-491b-9e93-d0a8104dd8ef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227cb729-c1e7-4cd3-a8f1-fc989cf63328", "sighting_of_ref": "indicator--03d980f5-0260-46dd-82dd-35df1a7ff3da", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e78b425-8e80-42e6-a545-0e13d7c7c8f7", "sighting_of_ref": "indicator--03d980f5-0260-46dd-82dd-35df1a7ff3da", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253bb2f2-51b8-455a-9b35-0afa21daccef", "sighting_of_ref": "indicator--03d980f5-0260-46dd-82dd-35df1a7ff3da", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292b020d-26fb-4de1-9970-a6b73ee1df82", "sighting_of_ref": "indicator--2ce02da3-fe0d-4368-b699-221c95368402", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c727955c-6a0b-43ba-8170-c19e146dc160", "sighting_of_ref": "indicator--2ce02da3-fe0d-4368-b699-221c95368402", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1723b9bc-5177-4d78-96a0-b950f22e5a4a", "sighting_of_ref": "indicator--2ce02da3-fe0d-4368-b699-221c95368402", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d67b4b-eda9-4a40-80b7-afdd53bfdefb", "sighting_of_ref": "indicator--771f0e7c-aa0d-4a22-a010-39243533dad5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14dc6359-caca-473e-85b0-71294d839221", "sighting_of_ref": "indicator--771f0e7c-aa0d-4a22-a010-39243533dad5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e377b62-788f-472c-a876-43c5686089ac", "sighting_of_ref": "indicator--9231813e-2209-45db-9229-5169b0f4ec3f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d3d9e8-93b2-44fe-941b-31026d493f57", "sighting_of_ref": "indicator--9231813e-2209-45db-9229-5169b0f4ec3f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1194c65-fc7a-46ac-adf5-4b154bbce701", "sighting_of_ref": "indicator--9231813e-2209-45db-9229-5169b0f4ec3f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf33f26-ba35-4c0d-9c0b-99448f7b0dea", "sighting_of_ref": "indicator--7c13237b-4eb0-4290-a349-a1fd13194a4a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74faa28-588f-4588-aa58-bb7ce82efb1b", "sighting_of_ref": "indicator--7c13237b-4eb0-4290-a349-a1fd13194a4a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c92dcda-0f1e-430e-810b-13b6f6924aec", "sighting_of_ref": "indicator--7c13237b-4eb0-4290-a349-a1fd13194a4a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfda4ed-81f8-40f3-b5aa-73a26df31ba4", "sighting_of_ref": "indicator--51117663-fd87-4a96-b7fd-543edfd814a8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52912ebb-569b-4961-95ca-7559628d2acf", "sighting_of_ref": "indicator--51117663-fd87-4a96-b7fd-543edfd814a8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb88c44-b6c7-4ed6-8519-2dc4f95349ef", "sighting_of_ref": "indicator--51117663-fd87-4a96-b7fd-543edfd814a8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0549c5e-02c3-4cd8-8122-57da1c37120b", "sighting_of_ref": "indicator--7c7adbd3-b8c5-4b9e-8cf6-ac61e6817a51", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4388b26e-6d09-4197-b0a2-3b3296652815", "sighting_of_ref": "indicator--7c7adbd3-b8c5-4b9e-8cf6-ac61e6817a51", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42aa5df-21ee-4f4e-90c7-2be3005a876d", "sighting_of_ref": "indicator--723f3383-b790-42a5-88b1-ccd06adfbbe9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceecffa6-46b6-4feb-a8bf-bd9e0c4c4d2c", "sighting_of_ref": "indicator--723f3383-b790-42a5-88b1-ccd06adfbbe9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f1ff59-9d6d-44c0-be33-741c18812cd9", "sighting_of_ref": "indicator--723f3383-b790-42a5-88b1-ccd06adfbbe9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53347127-2a4d-4a9a-8130-14e55a7ef096", "sighting_of_ref": "indicator--c5bc0a1b-0beb-4398-bd48-8ce3d672d6ec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3943be-ea6a-439c-91d5-c371a3cda539", "sighting_of_ref": "indicator--c67fc98a-9b4e-43e6-baa0-20616d05f440", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369c0875-71e8-4dd4-bcf5-998c7f93c4d2", "sighting_of_ref": "indicator--295cdc04-3ac1-4c64-9053-143d13b9cce2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a67f28-03a8-4667-9cca-facda5d8193c", "sighting_of_ref": "indicator--c7636bbf-7cef-45eb-9c0c-1800726b8690", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281a03ee-10c0-4b41-870d-01a989878afa", "sighting_of_ref": "indicator--f64ee25e-fd6e-4cbb-8745-aa242727136d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148db9e9-4bba-4217-8bd8-f4859560567a", "sighting_of_ref": "indicator--e7480e21-a24e-4578-9c33-e28290b9ec54", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f430260-84c2-49b5-b6d3-dba727cc3d23", "sighting_of_ref": "indicator--e7480e21-a24e-4578-9c33-e28290b9ec54", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fabe1d5-5fe6-432f-8128-ccdde1b06df8", "sighting_of_ref": "indicator--cf0b2c5e-f2f2-41da-99a1-35d3428b05c5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97010a2-2203-4eec-94a1-7a7e4668d8aa", "sighting_of_ref": "indicator--628193ac-c3ab-4c73-a2a4-7584bdbe218a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176782dc-6b34-4713-9044-1623b07946f5", "sighting_of_ref": "indicator--628193ac-c3ab-4c73-a2a4-7584bdbe218a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d8e914-7546-48b2-b952-24ffd9ec15f1", "sighting_of_ref": "indicator--628193ac-c3ab-4c73-a2a4-7584bdbe218a", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e82d5e-d818-4aaa-b5d5-6af5fbed840f", "sighting_of_ref": "indicator--3c7284c8-1dc2-4bc1-bd14-d5dcbee1a54e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b16298d-025e-4d19-b21a-30ee8ba4e27e", "sighting_of_ref": "indicator--3c7284c8-1dc2-4bc1-bd14-d5dcbee1a54e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886d474f-ef2a-4a29-b1ac-b3d1cd915561", "sighting_of_ref": "indicator--3c7284c8-1dc2-4bc1-bd14-d5dcbee1a54e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0946c60-887c-4a8b-b33b-24ef8e9216c2", "sighting_of_ref": "indicator--a3b35164-306b-43ce-b198-f7d2cb3d79f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824e1e7b-33c1-48f6-afc1-21126c3b656c", "sighting_of_ref": "indicator--a3b35164-306b-43ce-b198-f7d2cb3d79f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f823368-f83f-4c3c-8bd1-f1f897af0129", "sighting_of_ref": "indicator--a3b35164-306b-43ce-b198-f7d2cb3d79f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e2c8c8-5c52-4c85-aa7a-f6be02be4392", "sighting_of_ref": "indicator--02a13a3d-24bb-4dc4-b38f-7b0593b77193", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62148fde-01df-423d-82de-b2a045fd5d6b", "sighting_of_ref": "indicator--d0dd47f9-a7ca-4ff3-b547-788f80b3bc93", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a79ff7-fc25-4f97-b8b7-f00079199793", "sighting_of_ref": "indicator--d0dd47f9-a7ca-4ff3-b547-788f80b3bc93", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6d5d32-d509-4c39-973a-72358f230a9d", "sighting_of_ref": "indicator--c5560cea-3323-457e-b529-9c7aafc1fa38", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947cbf69-17ee-4a2f-931a-f29d91508f93", "sighting_of_ref": "indicator--2172fd20-9eb1-4fb3-ba64-c422f4469171", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d6abd4-481a-43e8-986d-14f85cdb3a68", "sighting_of_ref": "indicator--92850f3e-3955-4362-b60b-258aa16bcfd0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb920d0-056a-41bd-bb00-bd235ee99d1a", "sighting_of_ref": "indicator--92850f3e-3955-4362-b60b-258aa16bcfd0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b648a8-e1e1-4ed6-a3fc-342a882c1d65", "sighting_of_ref": "indicator--92850f3e-3955-4362-b60b-258aa16bcfd0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8df1ec-91c5-4eec-a75f-e5c277c5c28a", "sighting_of_ref": "indicator--68d3b9fe-3b24-4b89-a394-70a536007b5f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465f428b-c7b6-4b69-b368-3256a00447fb", "sighting_of_ref": "indicator--68d3b9fe-3b24-4b89-a394-70a536007b5f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe54687-7c05-4932-a0e2-d54d63d9e478", "sighting_of_ref": "indicator--07f6024b-2f89-4a14-88c2-b118514d0af4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360b2007-ba4e-4ef7-9e69-ce7f60d6a3bc", "sighting_of_ref": "indicator--07f6024b-2f89-4a14-88c2-b118514d0af4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab633608-c6db-4369-84a1-c4715de8b0d8", "sighting_of_ref": "indicator--07f6024b-2f89-4a14-88c2-b118514d0af4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0752cb74-5b4e-4318-b913-e3f8e2537d57", "sighting_of_ref": "indicator--2fdb8378-a4e0-4065-975a-836c5a5b51f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99a433a-fe98-4d00-b559-cb1aaa22cb7f", "sighting_of_ref": "indicator--2fdb8378-a4e0-4065-975a-836c5a5b51f4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2f27df-e05c-4658-9326-cd5337b682c8", "sighting_of_ref": "indicator--2fdb8378-a4e0-4065-975a-836c5a5b51f4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d217b4-524e-4561-9373-dceec637db7f", "sighting_of_ref": "indicator--4d129f57-6db8-4202-8227-f112540829d8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8254ef0-471b-4cde-9b60-20f84f592e9b", "sighting_of_ref": "indicator--4d129f57-6db8-4202-8227-f112540829d8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b2358e-5848-44ed-b258-ba3625829452", "sighting_of_ref": "indicator--f3edbb4d-9e3b-4113-88c2-d5a5f5f6ff60", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c60b46-5d94-495d-bb07-bf30517ddb52", "sighting_of_ref": "indicator--9e4fe5b5-6be4-45cb-994f-2d35fac81955", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee66f2ec-3050-4e43-96e9-9d5be783553d", "sighting_of_ref": "indicator--f0119697-5492-4410-aa95-bbb6e0901957", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f005b71-1f5d-434e-960b-1c5ec931f986", "sighting_of_ref": "indicator--bd8b98e7-66d3-4420-bd5a-031cbbd5300f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9983f17-772c-4789-9e54-18c410226d92", "sighting_of_ref": "indicator--936191ae-9188-4142-a4cd-858c0083dbef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b67361-345d-44dd-9ac8-cd232baff1c9", "sighting_of_ref": "indicator--8c277b1b-c870-46de-a655-8ac7a10125fc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08117f6-5625-4914-b84f-bedc7745888f", "sighting_of_ref": "indicator--8082f8d4-4d0b-41c3-83d3-18407abe4940", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487e9bf4-86c7-4034-a6f6-24d4ef182809", "sighting_of_ref": "indicator--3135a469-26db-468c-9877-636058096736", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd6fffe-933c-4c8f-8691-7926693bcf51", "sighting_of_ref": "indicator--6529281f-22d3-4d35-9a9e-99fcec1c8f98", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8b7ca4-f9c9-42c3-a5ee-c4b51a76508f", "sighting_of_ref": "indicator--e3a5e788-315a-4bdf-b253-37f97cfa45ca", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6044b889-e31c-4d9f-a4f3-6e1130b12c63", "sighting_of_ref": "indicator--8b41688c-1be5-4976-b4d0-c610ac99ca0a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c61921-ed2e-4985-9d3f-da86d3c7298d", "sighting_of_ref": "indicator--ca9b580a-9c01-472d-8798-84f392561f38", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13cfd5b9-b2bf-405c-a1a5-8240a1e89716", "sighting_of_ref": "indicator--ca9b580a-9c01-472d-8798-84f392561f38", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f445404-dc89-4f84-98f0-d2aad4c95ef4", "sighting_of_ref": "indicator--eb8b8b23-ff9a-4ed6-a006-b035f36721a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc6246e-9a8f-4a95-a2af-d474e93e4d22", "sighting_of_ref": "indicator--eb8b8b23-ff9a-4ed6-a006-b035f36721a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8759e1e7-f32f-4e21-8a8a-aad6e44df2c7", "sighting_of_ref": "indicator--eb8b8b23-ff9a-4ed6-a006-b035f36721a7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ea3788-a050-44f4-87d0-6f06fa33a104", "sighting_of_ref": "indicator--eb8b8b23-ff9a-4ed6-a006-b035f36721a7", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72daeebc-6f86-4fcc-bfd7-592bec15773d", "sighting_of_ref": "indicator--f272b7f1-d5ba-4469-b969-3774c2012dfb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36434fda-5036-4868-ae88-93d4928df099", "sighting_of_ref": "indicator--f272b7f1-d5ba-4469-b969-3774c2012dfb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52551f6-9e3d-4c12-b1ee-e5a7f44939ce", "sighting_of_ref": "indicator--9a40c897-8565-40fb-a3e7-d26f07269569", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2755f5db-93f9-45bf-bef6-2b1254dbc812", "sighting_of_ref": "indicator--dc83deb6-dccf-4746-bb67-cabe52d404f4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503f8832-5214-4339-84b2-04c2c62c798e", "sighting_of_ref": "indicator--e4b7344b-d9e6-4bcb-be0d-bc22f7675982", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679b33fc-cdd3-43fe-9c33-edb684d15dab", "sighting_of_ref": "indicator--e4b7344b-d9e6-4bcb-be0d-bc22f7675982", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32020e98-af33-4562-b453-0eba93c08eb0", "sighting_of_ref": "indicator--d2a78595-dc50-4e35-a93a-dbaf39ab4949", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a34d834-580a-4523-a1d0-0dba1c5b3553", "sighting_of_ref": "indicator--d2a78595-dc50-4e35-a93a-dbaf39ab4949", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93dfaa65-1cbf-433a-9892-54942815080d", "sighting_of_ref": "indicator--d2a78595-dc50-4e35-a93a-dbaf39ab4949", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42e86e8-dbd7-4263-a85d-9a0026837963", "sighting_of_ref": "indicator--1085f95c-068f-4f92-9836-551e6f7ad848", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671763e3-eae7-46c0-a1c7-21af1d8675a3", "sighting_of_ref": "indicator--d8ed01bc-9af3-4f0b-92c8-f678c93b4958", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a99d8cd-5271-4670-945f-3a29090a57d6", "sighting_of_ref": "indicator--e47c8d06-097b-4ccb-9ec3-b5f39f68c058", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93228443-12fb-43e0-bbf8-303e13b3873a", "sighting_of_ref": "indicator--e47c8d06-097b-4ccb-9ec3-b5f39f68c058", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3bb126-2675-4636-9ff5-a1e2d8f0a2f9", "sighting_of_ref": "indicator--5d8d9b98-52a5-4e38-8127-c091fd2b1e08", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10cbe499-d470-447b-99da-21c3a897ea06", "sighting_of_ref": "indicator--14e78630-9779-44dc-aca7-75b6f53632d0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efc116b-6d9f-4c5d-be82-4c8132227d03", "sighting_of_ref": "indicator--14e78630-9779-44dc-aca7-75b6f53632d0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac601d06-1127-43eb-8475-cc49d5cf30ec", "sighting_of_ref": "indicator--7f763b85-8348-4f84-9ec5-7e2f62111872", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1ebf01-e1a4-4a29-bdc6-59dce0f7fe76", "sighting_of_ref": "indicator--7f763b85-8348-4f84-9ec5-7e2f62111872", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3255379a-bc18-4a7b-aade-c7d901f6808f", "sighting_of_ref": "indicator--2056ed3a-38ac-4bd5-b83c-47c33a91c979", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2cec39-8dfc-480f-848d-7bc01792b115", "sighting_of_ref": "indicator--c8ea4c5b-19f5-4969-9f8c-6350fa32e85f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e508a488-792f-443b-89d1-1a1a0b5543cb", "sighting_of_ref": "indicator--837a9027-fa5a-46d9-8c49-85d3bd48dee2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524d2abf-90a1-4f1e-9def-0003e226785e", "sighting_of_ref": "indicator--e520c989-3d3b-4dd2-8cb6-58020522e780", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2041fe1-835f-4d9d-9569-93c1ca88a519", "sighting_of_ref": "indicator--779b1595-8850-4011-9cfe-0d0ca996c81e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c72d76-db53-4e10-b064-3125dc1ee5f7", "sighting_of_ref": "indicator--fa068d47-c959-4c0f-ae71-45acac32d6e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a690d2-6009-4191-a64f-a3d0a7850835", "sighting_of_ref": "indicator--0aafdca9-0795-4af3-bf14-c7fbf988dda2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9031c9-ab86-4fbf-aa60-71c59471d594", "sighting_of_ref": "indicator--e63db6f6-94c7-43a3-b143-454f59db288d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9a28da-f740-4c0d-a05c-7873868e641e", "sighting_of_ref": "indicator--a067cd91-d1bd-4d5f-a0a2-8ffe85fcea96", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb67bd39-fe2a-4bbb-aed6-e7a8881e7b26", "sighting_of_ref": "indicator--9eb63b72-b724-44aa-b13c-ddfb7b9df61e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9fe50a-9dad-44bc-9fe9-242d5cf8d261", "sighting_of_ref": "indicator--9719f40e-6eb9-4f2f-bed1-329d53019464", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b50e810-bd20-4961-a2e6-8d6a18d67071", "sighting_of_ref": "indicator--83854e8a-0889-4ffe-8e70-b9c603142ca8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64ae93b-816a-4c17-a8f7-86f4f9a58bb5", "sighting_of_ref": "indicator--052b8e3e-d76c-4b24-80fb-c1eb76579243", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec09b6e-1f1d-4b5a-977f-64e0253e48b0", "sighting_of_ref": "indicator--052b8e3e-d76c-4b24-80fb-c1eb76579243", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b7551f-d9d9-4280-919b-a885a671f849", "sighting_of_ref": "indicator--052b8e3e-d76c-4b24-80fb-c1eb76579243", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9f3a59-33e0-4d30-9660-d23bf0cbcba8", "sighting_of_ref": "indicator--7dec8b8b-178e-4dbf-9395-8a22f3853a79", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c9f855-9afa-456a-beac-ab4a9171a894", "sighting_of_ref": "indicator--7dec8b8b-178e-4dbf-9395-8a22f3853a79", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687c46f9-eb6f-441e-a4a8-d1e63db2652c", "sighting_of_ref": "indicator--7dec8b8b-178e-4dbf-9395-8a22f3853a79", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ea5dcd-18c9-4669-851b-e482683e9ce7", "sighting_of_ref": "indicator--6d938733-eae9-481b-a4ce-343911923f01", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c37062-833f-4983-87b4-b54d8070cdb7", "sighting_of_ref": "indicator--63a36ccc-6c0c-49d4-8022-55c08ca2baa5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c89da2-7195-465c-8f0c-a2e0a279e887", "sighting_of_ref": "indicator--63a36ccc-6c0c-49d4-8022-55c08ca2baa5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e04873-b913-4c1c-ab39-3026fa1fbf05", "sighting_of_ref": "indicator--63a36ccc-6c0c-49d4-8022-55c08ca2baa5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811a913c-abab-4360-be2c-23e459875a21", "sighting_of_ref": "indicator--5f736810-480e-4cf5-aedb-6f548b0b1134", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3752dcc-89d5-403b-9ad4-b1f42bc9e97e", "sighting_of_ref": "indicator--5f736810-480e-4cf5-aedb-6f548b0b1134", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0def72e4-a480-4487-b8f5-e1945953fb7f", "sighting_of_ref": "indicator--5f736810-480e-4cf5-aedb-6f548b0b1134", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2696cc41-bccd-448d-82e1-7406878a0184", "sighting_of_ref": "indicator--0026237c-311e-4182-b5e5-b54fccf1bd17", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1062df09-2889-460d-945f-eab6ada7c09d", "sighting_of_ref": "indicator--abe2bfe8-869b-4461-a039-1ddf0c4cd359", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03bf7886-9aa1-46c1-805a-df1934f614e6", "sighting_of_ref": "indicator--d153c6ae-b8b4-4681-9361-599ad1abdc7a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2345c8-c4ad-43b6-9466-cb3dcf308ab7", "sighting_of_ref": "indicator--5638a98b-01df-4c7c-ab32-9ec687dec38c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4bd166-c79e-4095-b3f2-29f2ab9d8e57", "sighting_of_ref": "indicator--52f5ad3f-9171-47a0-b4ec-66b3e443bfe2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf5c38d-15c1-4183-bb3d-bfe537813376", "sighting_of_ref": "indicator--0a5d7455-8ccb-47f6-ba49-93b4f5ac72ea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9cac3f-366a-4636-b31d-d9ba9bb75ff8", "sighting_of_ref": "indicator--f544a023-b6f7-4382-932f-03b7bfba86b1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6211553f-c66d-4961-9f0f-88215ed3588e", "sighting_of_ref": "indicator--d821e5bc-1009-455b-ae0e-103fde4a56b8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3755a79-885f-4c77-afd3-28cf7e359479", "sighting_of_ref": "indicator--00c7aef9-f5de-4b90-a9a9-3d4a9163e025", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980c1c0a-fc67-4872-98e0-30f30a11c8b5", "sighting_of_ref": "indicator--50d15727-da11-4ec4-8eee-48d91917018e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4282361-9136-404c-9967-5bfbada4c4a6", "sighting_of_ref": "indicator--50d15727-da11-4ec4-8eee-48d91917018e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdf5c42-e0cd-4f25-b24b-62819f8e7f01", "sighting_of_ref": "indicator--50d15727-da11-4ec4-8eee-48d91917018e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c6fc34-b1f3-4fe0-abe4-c4f8a6b4037e", "sighting_of_ref": "indicator--eee03b28-58fb-4251-af5a-5072cff879a9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8739ce63-f3d5-44f1-bbd7-ead045ef0003", "sighting_of_ref": "indicator--0ea9e666-32d5-491c-919c-49ff3fa68760", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d27b0e7-a789-4ec2-bbfe-794309f6d1a6", "sighting_of_ref": "indicator--0ea9e666-32d5-491c-919c-49ff3fa68760", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d75c35-2417-4360-a3df-c5ba4b02430a", "sighting_of_ref": "indicator--feb82b18-4598-4026-998b-49692340946e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e82f03-3807-45bc-8bbf-12c177c7cc4b", "sighting_of_ref": "indicator--feb82b18-4598-4026-998b-49692340946e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd6fa4f-3930-408e-8904-142a1258eba5", "sighting_of_ref": "indicator--feb82b18-4598-4026-998b-49692340946e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fb51dc-acf7-4342-a959-a5e3f70e0372", "sighting_of_ref": "indicator--d8345330-750f-4c49-9a6d-44bdc87745ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e224e158-7b05-4673-abc3-91b31d8efe18", "sighting_of_ref": "indicator--e5fe47bb-5c57-4896-a53c-4587e7b533f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12183e9c-d8cf-421d-a9ab-1cd85b78b8ab", "sighting_of_ref": "indicator--508bc9a8-875a-4eb5-be0d-bc156ecd5613", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59ae8bb-ae28-4f4e-a820-1eaf2f582a17", "sighting_of_ref": "indicator--2d12ff3b-0e8c-475e-87c5-80c1e673bd38", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aff11f2-a41f-4f8b-a612-2ce5686484f9", "sighting_of_ref": "indicator--9a3d4045-319f-4b57-afa3-952bbfdcfb53", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e66ff2d-cdeb-4b9b-8a0e-ec506b21aff4", "sighting_of_ref": "indicator--840d96d8-23b5-4735-95a5-6d605061d232", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0788a534-4af7-491a-acac-30cca1c3e9d1", "sighting_of_ref": "indicator--840d96d8-23b5-4735-95a5-6d605061d232", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41c58d5-d919-41e1-a704-fc64940ddd5b", "sighting_of_ref": "indicator--840d96d8-23b5-4735-95a5-6d605061d232", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb3b72e-e577-40e8-9980-bb569b6278ba", "sighting_of_ref": "indicator--e2f3b155-5b72-4b98-a50c-dd1084953dd2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279f512a-24a3-470d-b38b-af068e823a38", "sighting_of_ref": "indicator--db9be75a-7113-4996-9038-dc456ef85d54", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada5c244-5cac-4b19-a5fc-587b6bb5aa4c", "sighting_of_ref": "indicator--db9be75a-7113-4996-9038-dc456ef85d54", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3b5d96-19f8-4984-b8af-17b6488a1be4", "sighting_of_ref": "indicator--db9be75a-7113-4996-9038-dc456ef85d54", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acc57f8-1fdd-4e70-a349-1f9a5051fe5c", "sighting_of_ref": "indicator--b5de9120-3dcb-4c7b-bbad-5bcc67e4ff7d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1dbeb2-2e5a-4d39-8a35-ffcca68630a7", "sighting_of_ref": "indicator--b5de9120-3dcb-4c7b-bbad-5bcc67e4ff7d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a451b506-d545-42f7-af20-847f22233763", "sighting_of_ref": "indicator--63aea80f-ea8d-4536-a38d-62ad6dea6543", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a260393-565b-48d6-af48-97addd53e95d", "sighting_of_ref": "indicator--63aea80f-ea8d-4536-a38d-62ad6dea6543", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157483c2-d508-4e8c-a9a0-a56ff7ba2ac5", "sighting_of_ref": "indicator--10d8f950-c63c-4597-b4d3-39c8cfc1809f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a03f4be-5023-43eb-bbdd-ec2a4b2fa93a", "sighting_of_ref": "indicator--10d8f950-c63c-4597-b4d3-39c8cfc1809f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbc5ec7-0239-4b70-a588-3e78593ceff5", "sighting_of_ref": "indicator--10d8f950-c63c-4597-b4d3-39c8cfc1809f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2a7eac-b15d-44a5-bb69-0846d299a1a9", "sighting_of_ref": "indicator--dba8d6f6-52a3-4c08-99d0-e144eb73473f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eefc8c0-daa8-486b-8ca1-56c6b0c80c71", "sighting_of_ref": "indicator--dba8d6f6-52a3-4c08-99d0-e144eb73473f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48b4e00-3abd-43b9-ac27-1e5e06d37d0c", "sighting_of_ref": "indicator--dba8d6f6-52a3-4c08-99d0-e144eb73473f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa84f02-de54-4629-be25-c9978b3d8d95", "sighting_of_ref": "indicator--83daff4c-2093-4231-8550-78a81d09f264", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e76085-5126-4b08-a5dc-c8c70314dfda", "sighting_of_ref": "indicator--83daff4c-2093-4231-8550-78a81d09f264", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a61daa4-d8e6-4f8c-ba72-d403581c54ca", "sighting_of_ref": "indicator--fbc62623-74cb-448c-9084-201a6f94fdf5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f889a9d0-850a-4d9b-a2e4-1cedef97cb01", "sighting_of_ref": "indicator--c88b88d6-61b1-4879-9aa6-c1959919d495", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfffa5d6-c94b-42c6-9ebb-ee8f0633e6ed", "sighting_of_ref": "indicator--c88b88d6-61b1-4879-9aa6-c1959919d495", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed396646-66f1-46b2-8d1f-eabd2d327b0d", "sighting_of_ref": "indicator--c88b88d6-61b1-4879-9aa6-c1959919d495", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7122ecc-52de-4fac-8f0a-097e607ecad2", "sighting_of_ref": "indicator--635d05df-b8f8-47c9-aaa0-fa1ed5ac2463", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69ce8fa-7499-4952-8554-fbdf6dafae16", "sighting_of_ref": "indicator--635d05df-b8f8-47c9-aaa0-fa1ed5ac2463", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd34c0d-454a-45ab-97fc-766d93e304a0", "sighting_of_ref": "indicator--635d05df-b8f8-47c9-aaa0-fa1ed5ac2463", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153aec37-ba78-467e-a842-ca404288c6f4", "sighting_of_ref": "indicator--f11eba81-052d-4684-a680-5784d5cc6fc1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bd3461-e2cd-40e9-8245-444733cb403f", "sighting_of_ref": "indicator--f11eba81-052d-4684-a680-5784d5cc6fc1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574ce7dc-b88f-4155-8e3e-1f93f8db3045", "sighting_of_ref": "indicator--f11eba81-052d-4684-a680-5784d5cc6fc1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3937f4-deb9-442b-88de-eea1fe041ee8", "sighting_of_ref": "indicator--58ce7c37-6720-4985-94af-766714b2537c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f0c2a5-e0b9-4f78-9c23-ef95345c338c", "sighting_of_ref": "indicator--58ce7c37-6720-4985-94af-766714b2537c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa59e94-d4a6-4838-b310-253fe46384b7", "sighting_of_ref": "indicator--3f4645ef-ed81-4203-a4b0-2d5f3ec230b3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720f07b7-144f-434a-b539-f4bdb561c744", "sighting_of_ref": "indicator--3f4645ef-ed81-4203-a4b0-2d5f3ec230b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55453e4-6874-4c0d-af5f-e24f6510ed0a", "sighting_of_ref": "indicator--3f4645ef-ed81-4203-a4b0-2d5f3ec230b3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f063851-b48b-48dd-b493-8fee0ddb4110", "sighting_of_ref": "indicator--d4d96059-a247-4b66-a3a8-212facc38f18", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5e9f72-5d2d-409f-8072-4e911f6ce838", "sighting_of_ref": "indicator--d4d96059-a247-4b66-a3a8-212facc38f18", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9c0a83-5255-40b4-953d-87991a1fc316", "sighting_of_ref": "indicator--d4d96059-a247-4b66-a3a8-212facc38f18", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d7da80-e71c-48e5-8913-e9fd7cb8719b", "sighting_of_ref": "indicator--7827a153-0385-4534-979f-d135bf34ddfb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef6d6fa-0f48-4bec-949d-4f6458701da8", "sighting_of_ref": "indicator--7827a153-0385-4534-979f-d135bf34ddfb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b7ff69-fa2b-480e-ae78-1f76071a8d2a", "sighting_of_ref": "indicator--325e10c4-f56d-4509-890e-2a853ba19d68", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c38a713-f1aa-4a75-8e5a-450e55c4f939", "sighting_of_ref": "indicator--325e10c4-f56d-4509-890e-2a853ba19d68", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142a7747-e992-4dd6-9df0-62b5e56f334a", "sighting_of_ref": "indicator--546f48d3-1a13-4ef8-8340-c4825f8a700b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60ba1f9-0da8-4877-886d-47b54b594027", "sighting_of_ref": "indicator--546f48d3-1a13-4ef8-8340-c4825f8a700b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41836ff-c1bd-43dd-8624-4ddbf0ca8af7", "sighting_of_ref": "indicator--fb29d3dc-8dc9-4d5d-aaa1-a9584e08d7c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46596420-0e87-4b6b-a27e-4e1e5a57a8d1", "sighting_of_ref": "indicator--33b5dc82-0740-4273-88ab-5004d5477bab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6587ad38-6856-4bfb-a541-42381f209cc5", "sighting_of_ref": "indicator--33b5dc82-0740-4273-88ab-5004d5477bab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b69cab0-f51f-4502-a07e-e7b0058f0f4a", "sighting_of_ref": "indicator--9bc65a68-63d9-4b6f-9b09-e91466bbd29e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3862af6-f910-4e66-8b2f-3eba1bc282be", "sighting_of_ref": "indicator--9bc65a68-63d9-4b6f-9b09-e91466bbd29e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206292d9-a1af-431c-99d2-1d0010562f7a", "sighting_of_ref": "indicator--712e601b-8704-479f-a406-47fd39a4df2a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda46c24-d27e-41cb-8d1b-7d1a4eccd6d3", "sighting_of_ref": "indicator--30db2cff-4d7a-49e0-bf30-99a1b5d778be", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d55e17f-8556-4f7d-b0d5-66ba25eb9aa4", "sighting_of_ref": "indicator--30db2cff-4d7a-49e0-bf30-99a1b5d778be", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0867b4-0758-440d-a050-58f3c4524433", "sighting_of_ref": "indicator--e32f9829-2e15-4802-a1dc-8b8cbe0604f0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881e106e-1b34-421d-8e0b-5a5d03220fba", "sighting_of_ref": "indicator--e32f9829-2e15-4802-a1dc-8b8cbe0604f0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e64beb-6bd9-4ed3-94d6-13da0a53a286", "sighting_of_ref": "indicator--e32f9829-2e15-4802-a1dc-8b8cbe0604f0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25715ae8-7f6e-49a1-850c-97e861df145c", "sighting_of_ref": "indicator--d7916c7b-e4ec-45c8-8de1-a74dfd3e1f2f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b948a929-8f46-4a1c-97a2-ab091c4fbbd5", "sighting_of_ref": "indicator--d7916c7b-e4ec-45c8-8de1-a74dfd3e1f2f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4aa2d3-0ee2-4219-9ae8-efd2e40462e8", "sighting_of_ref": "indicator--02b46eb2-08e4-4ff8-aa83-6de0d36daadc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbbe608-18b1-4bb7-b451-2de97936d2dc", "sighting_of_ref": "indicator--02b46eb2-08e4-4ff8-aa83-6de0d36daadc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6572f2b-8b32-4bbd-91cf-2584bcc51d92", "sighting_of_ref": "indicator--8aa3f3ca-a13c-4833-826e-adcfb08abb34", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bdb5db-9485-4423-b046-60fa664dc797", "sighting_of_ref": "indicator--8aa3f3ca-a13c-4833-826e-adcfb08abb34", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030eb4d3-8fda-4fd7-9e96-9a2174a8b8c4", "sighting_of_ref": "indicator--2521f5da-6c2c-4ef8-abed-5626f52def17", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1fcee4-7864-470c-91a5-2bd58acd291e", "sighting_of_ref": "indicator--2521f5da-6c2c-4ef8-abed-5626f52def17", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed3af8e-5ec2-4f9f-b37c-db7735e70d2e", "sighting_of_ref": "indicator--850eb8eb-19aa-4b06-af75-54acdf81a9c6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3d7d91-d6e4-43ef-b675-ee97b84b7060", "sighting_of_ref": "indicator--850eb8eb-19aa-4b06-af75-54acdf81a9c6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce51639-f093-49fd-afba-376f7b50e745", "sighting_of_ref": "indicator--b3538d2a-b902-4cf3-96c2-37f4bfff8e6e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42b5d78-86f1-408e-a9e1-7209a8728064", "sighting_of_ref": "indicator--b3538d2a-b902-4cf3-96c2-37f4bfff8e6e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614f3cac-88f1-4c52-ad9b-da7460f2a1ef", "sighting_of_ref": "indicator--b3538d2a-b902-4cf3-96c2-37f4bfff8e6e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a0507d-a1ec-4412-bb05-1c73eb6b2ae5", "sighting_of_ref": "indicator--d40c7617-874f-4619-a18c-e8fa4586369d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13c8f7d-e45b-4fdc-a6cd-2fdec7cd0821", "sighting_of_ref": "indicator--d40c7617-874f-4619-a18c-e8fa4586369d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f18974-5145-4460-be8b-dd03d46ef71b", "sighting_of_ref": "indicator--d40c7617-874f-4619-a18c-e8fa4586369d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34b71b9-3ef1-4e16-8708-b8722efb3a82", "sighting_of_ref": "indicator--d72999e3-3cfe-4494-94bb-15ef9c62bf04", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f857f22b-6659-4021-8b29-4cc3c599fa74", "sighting_of_ref": "indicator--d72999e3-3cfe-4494-94bb-15ef9c62bf04", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c010aa0-2713-49f6-980e-9b0de02c155b", "sighting_of_ref": "indicator--d72999e3-3cfe-4494-94bb-15ef9c62bf04", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93bf01a-5007-4e62-aa23-fee6c9c3b76a", "sighting_of_ref": "indicator--852b6210-d86b-4021-b91d-340720799ec1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da396abc-d7cb-4b62-b163-33cddbd48f3a", "sighting_of_ref": "indicator--852b6210-d86b-4021-b91d-340720799ec1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e5e3cf-e8ad-45e0-a6d6-e105ff5d0898", "sighting_of_ref": "indicator--852b6210-d86b-4021-b91d-340720799ec1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481d5acf-0b82-426e-9059-13c24bec8938", "sighting_of_ref": "indicator--fecb3558-a36c-41b0-9daa-102e0d24e869", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf9aa34-207a-47af-84b3-5f71267b4927", "sighting_of_ref": "indicator--fecb3558-a36c-41b0-9daa-102e0d24e869", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a357480-3f27-4479-b0c4-399c6d85940e", "sighting_of_ref": "indicator--fecb3558-a36c-41b0-9daa-102e0d24e869", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44d4efd-81f2-48a3-a827-9b4893ea8482", "sighting_of_ref": "indicator--45331235-c587-4b1c-b0e0-d947962e9539", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5581d793-80ad-44ae-a2ea-bd02d94364e5", "sighting_of_ref": "indicator--45331235-c587-4b1c-b0e0-d947962e9539", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005061ff-eda2-434c-914a-79b8ba495ed0", "sighting_of_ref": "indicator--45331235-c587-4b1c-b0e0-d947962e9539", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52923043-9faf-4f54-98bb-f46e919a6e9b", "sighting_of_ref": "indicator--68a38cd0-827a-4d31-b755-99e7ecf84c38", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5574b74a-c3c1-44dc-81a0-588ebab1ba97", "sighting_of_ref": "indicator--68a38cd0-827a-4d31-b755-99e7ecf84c38", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9456f64-e52a-4153-a2f1-155132ba4a04", "sighting_of_ref": "indicator--1aaa603f-9c6f-4bac-8521-d2eb0cd106af", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b15073-9986-4efe-95f9-5d3f7b44cbd8", "sighting_of_ref": "indicator--1aaa603f-9c6f-4bac-8521-d2eb0cd106af", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4af00c9-5680-435b-a370-d09d33f78d2b", "sighting_of_ref": "indicator--1aaa603f-9c6f-4bac-8521-d2eb0cd106af", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ace610-b0df-4c46-b327-1f14caaba293", "sighting_of_ref": "indicator--d3549103-d411-47fa-a967-4ae46363e95f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67189776-1372-49a4-9d57-2abbf41f3b4b", "sighting_of_ref": "indicator--d3549103-d411-47fa-a967-4ae46363e95f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5272cd-83f4-400a-bb15-34673509011b", "sighting_of_ref": "indicator--d3549103-d411-47fa-a967-4ae46363e95f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c5b422-d3b0-4af1-9c3d-e977f6842bec", "sighting_of_ref": "indicator--36a59518-a536-4cae-a9b3-67689daac752", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d91f23-71c4-4792-9464-e557f88e9cce", "sighting_of_ref": "indicator--36a59518-a536-4cae-a9b3-67689daac752", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ed9a34-9d8c-485f-b0be-14064ceebf69", "sighting_of_ref": "indicator--36a59518-a536-4cae-a9b3-67689daac752", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d150880-6a02-49d9-b251-4287ed537c0a", "sighting_of_ref": "indicator--f9ea27c1-7223-4949-81a9-1b7ec75f5f23", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83e166d-d01c-419b-8d90-6fd9a4c61ebb", "sighting_of_ref": "indicator--f9ea27c1-7223-4949-81a9-1b7ec75f5f23", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c61602-3277-4f41-9099-bb64f6fef240", "sighting_of_ref": "indicator--f9ea27c1-7223-4949-81a9-1b7ec75f5f23", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b76d43-e262-48cc-97ce-acf5de6b3974", "sighting_of_ref": "indicator--622a9493-1aa6-4d2b-a589-5be1639e20a5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814b783d-9d7f-449f-8f86-23ce09a8e068", "sighting_of_ref": "indicator--622a9493-1aa6-4d2b-a589-5be1639e20a5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c2a90e-8c31-4801-9043-24e4d63237a7", "sighting_of_ref": "indicator--bdee08e0-acbf-40ea-a283-671747d31625", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c0b526-f43d-4463-ab0d-da9dea0529cb", "sighting_of_ref": "indicator--bdee08e0-acbf-40ea-a283-671747d31625", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346e5a24-0383-4131-938d-7d2de1df4b22", "sighting_of_ref": "indicator--dd7f59f4-d6ea-429b-a33e-79c65c21e847", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788a64c4-66cf-4b87-bf9e-13377dc1d92d", "sighting_of_ref": "indicator--93ac9df5-803f-4828-8dbb-a3148d502124", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2a71f3-3109-4c0a-9aa0-eb91d8b2c95c", "sighting_of_ref": "indicator--ae7f2e55-dba7-4a99-97e1-e564229aa30d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136c0561-c17e-4b6a-afb4-e2ca4ea3bff1", "sighting_of_ref": "indicator--352b5ff1-ef4d-4403-8ed7-429715d5873c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ebcdaf-9b77-4129-82f1-5949f6b1f95b", "sighting_of_ref": "indicator--352b5ff1-ef4d-4403-8ed7-429715d5873c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f0bce8-2abd-4f7e-97bc-0c62273a3c30", "sighting_of_ref": "indicator--f057cad6-04bb-498d-a17a-7a0f3e9dec91", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ffef8f-9216-4aa9-8f1a-6be1422948a6", "sighting_of_ref": "indicator--f057cad6-04bb-498d-a17a-7a0f3e9dec91", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbb6d01-2042-498b-bd95-459072ec6bb9", "sighting_of_ref": "indicator--f057cad6-04bb-498d-a17a-7a0f3e9dec91", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f5750d-e474-4824-b89e-f6fe2e2644e0", "sighting_of_ref": "indicator--63f46c80-181c-4714-a7f1-f8b24d3e560b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fd304b-7d20-44bf-945c-8c17cffabc3b", "sighting_of_ref": "indicator--63f46c80-181c-4714-a7f1-f8b24d3e560b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c3f706-ad3f-4ada-947b-21e30eda0bd6", "sighting_of_ref": "indicator--63f46c80-181c-4714-a7f1-f8b24d3e560b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a81a2a9-ef12-4d7c-9940-4b4e107e9819", "sighting_of_ref": "indicator--881f3918-505a-41aa-b92f-201163077fe0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fb07f8-2794-4a71-8872-bd47cb9b4f94", "sighting_of_ref": "indicator--c5d4fb10-87e5-4dc7-b634-c366b43c3e3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c23eb13-805d-47ab-9b21-1509658f97ed", "sighting_of_ref": "indicator--ed4b436c-2e62-4cde-b025-10049e522802", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47cc4ef-d184-4d77-a829-77a3671e1e73", "sighting_of_ref": "indicator--ed4b436c-2e62-4cde-b025-10049e522802", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfb242a-2896-46e8-ad94-75cd303805e1", "sighting_of_ref": "indicator--ed4b436c-2e62-4cde-b025-10049e522802", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585bb2f5-4b10-458e-a52e-221a0ad63037", "sighting_of_ref": "indicator--582e3ad3-2592-46fd-abc7-a37fdd7895cb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7cf432-7ff9-4a49-ada9-9983221c4c56", "sighting_of_ref": "indicator--286ea5a3-897a-4df8-8148-899662c2578c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac4e730-7978-4490-9fb6-1fa627afe995", "sighting_of_ref": "indicator--962e1de1-089b-44f5-b859-d3323d4e7b64", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca148a7f-e68c-4378-a76a-610165ab249b", "sighting_of_ref": "indicator--2f8658a3-03d2-42a4-a131-9878fe1bea26", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a2d347-cf75-4523-bd06-2d538b6dff20", "sighting_of_ref": "indicator--85249fed-f85f-4857-b277-e4a4891890b7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431bc569-b3d1-4fb6-9fe8-914b08890038", "sighting_of_ref": "indicator--85249fed-f85f-4857-b277-e4a4891890b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591d8aa0-81ff-4f13-ad8d-b0a904128c63", "sighting_of_ref": "indicator--2bbaa242-a750-4b3d-9867-6b1dfc65563a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8631b880-6a72-4a3a-87b7-36c3d48a6666", "sighting_of_ref": "indicator--2bbaa242-a750-4b3d-9867-6b1dfc65563a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c451c3-3129-4491-8b71-d2c9327494da", "sighting_of_ref": "indicator--439626c9-599f-4c80-b785-f8579cc73cc3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1d9438-b491-42ad-a2f0-6c69949ed3b5", "sighting_of_ref": "indicator--439626c9-599f-4c80-b785-f8579cc73cc3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0b006c-1c09-4755-b7b2-2a209b42e125", "sighting_of_ref": "indicator--c40e22fd-3b51-42d2-ab83-4b8e82b47ce8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7f57e3-1f9c-4c48-8f99-020b6ef848e3", "sighting_of_ref": "indicator--c40e22fd-3b51-42d2-ab83-4b8e82b47ce8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886d19eb-9469-4356-89c0-7f43c549bd9b", "sighting_of_ref": "indicator--c40e22fd-3b51-42d2-ab83-4b8e82b47ce8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8671e8ad-697b-4f88-bd61-e73a79873a96", "sighting_of_ref": "indicator--f4666b98-2f80-48a2-83b3-9c3e5eca6c39", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1daa6e-97f1-440b-ad1c-37acf8aa562c", "sighting_of_ref": "indicator--21db1cb4-68e9-47ed-a810-6d09a60fbdce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25ac179-a3d3-4d0e-8865-485176b91e0e", "sighting_of_ref": "indicator--6d0c0c87-d4ed-4e01-ac51-1abc62dd6428", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d242df-ce21-4e55-b84a-c773f26cde9a", "sighting_of_ref": "indicator--6d0c0c87-d4ed-4e01-ac51-1abc62dd6428", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1466fab3-bbd5-46c8-9bf0-8532c28608b2", "sighting_of_ref": "indicator--5b210dde-f329-4f8f-9536-1df8a0634e32", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c85927-ec24-4d39-bf04-3bade9a5c0ef", "sighting_of_ref": "indicator--5b210dde-f329-4f8f-9536-1df8a0634e32", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40ad4b8-cdc0-4c94-bb6d-2b28b6bc16f4", "sighting_of_ref": "indicator--0dd170cd-01dc-43b0-8a9d-6ff41297d6b4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6e70fb-8312-4ecf-874f-0d8de0b19d91", "sighting_of_ref": "indicator--0dd170cd-01dc-43b0-8a9d-6ff41297d6b4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2927ac7-00bc-4ba0-a7e3-d780cfa8314c", "sighting_of_ref": "indicator--e397795a-69b0-4dc6-b8b2-b287e7266308", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1407649a-9cd9-45b4-8182-dcc619884986", "sighting_of_ref": "indicator--e397795a-69b0-4dc6-b8b2-b287e7266308", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c394247a-14a3-4c98-9409-d03abff5e654", "sighting_of_ref": "indicator--9adb9364-80b2-464d-907f-7da422f549e5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e2c23f-dc67-46aa-97cb-cb370c060b28", "sighting_of_ref": "indicator--9adb9364-80b2-464d-907f-7da422f549e5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7299739-6fb3-4ac2-ac8c-da70e349615e", "sighting_of_ref": "indicator--39b9fe8b-4cc7-409d-88ab-e40875c7f8e1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b1cf12-eab0-4600-b2fe-14f12b8bf9fb", "sighting_of_ref": "indicator--39b9fe8b-4cc7-409d-88ab-e40875c7f8e1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813cddbb-303d-4362-9294-692a5608cca5", "sighting_of_ref": "indicator--8a63d979-11c7-4061-a2c1-a95367120fb1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352fbe60-9817-4408-a62d-e948009f2e80", "sighting_of_ref": "indicator--8a63d979-11c7-4061-a2c1-a95367120fb1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cd4338-298e-4cf9-b51c-b26607eae9d2", "sighting_of_ref": "indicator--f7873ae2-c1b2-4d11-8839-bc93e94dfa11", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8cf3cd-87df-4884-bce1-bbab2a24c78b", "sighting_of_ref": "indicator--f7873ae2-c1b2-4d11-8839-bc93e94dfa11", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72a5e27-dce2-4758-9262-5ca4bfc23f9b", "sighting_of_ref": "indicator--ce9c9495-1663-4c91-839b-97244f9063fd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e56166d-cda0-4349-8367-03ab5975af98", "sighting_of_ref": "indicator--9450b7fc-db20-4617-918c-2d6b4eea1314", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0935f6c-4472-436f-8dae-c76b1253fdc1", "sighting_of_ref": "indicator--592deb6d-541d-47a0-90c4-14e0cba444d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1991eda-7d55-44a1-bb91-d675eddf4e31", "sighting_of_ref": "indicator--592deb6d-541d-47a0-90c4-14e0cba444d6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a03fdf-1b04-4c97-a487-893e98622dfe", "sighting_of_ref": "indicator--32c78700-98e6-497d-8d1d-161f42290b82", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44299725-ebff-4e28-b250-dc4867c86b5d", "sighting_of_ref": "indicator--32c78700-98e6-497d-8d1d-161f42290b82", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c518634f-f9f3-434d-b084-ef63979cc088", "sighting_of_ref": "indicator--82e3acf0-d0bd-414e-8530-4a91140d8d99", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5e7902-68a3-4eca-a96b-0331cf775cf0", "sighting_of_ref": "indicator--82e3acf0-d0bd-414e-8530-4a91140d8d99", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69c3c41-6d93-461c-bde1-a55153d40ad1", "sighting_of_ref": "indicator--7ccb8f4c-0720-432d-bef1-245f75fced64", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928f2087-7a23-446d-97da-a077f93b28fd", "sighting_of_ref": "indicator--7ccb8f4c-0720-432d-bef1-245f75fced64", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de28c8e-3278-4dfa-b420-33cc006f27d7", "sighting_of_ref": "indicator--0bfa9fb4-d40a-449e-99b6-c4171e6f2dcc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915aec6b-6c38-450f-b823-e2fed98a9d25", "sighting_of_ref": "indicator--0bfa9fb4-d40a-449e-99b6-c4171e6f2dcc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b782da2-dfe8-4b9a-83ea-3d04aebd67f7", "sighting_of_ref": "indicator--c3555ee1-0809-45aa-9f9d-bbfe1a9f340a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1cfbd0-221e-4259-9ba3-009988f658f1", "sighting_of_ref": "indicator--c3555ee1-0809-45aa-9f9d-bbfe1a9f340a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcf71d3-b879-4d3b-b08e-6b3537e78ce1", "sighting_of_ref": "indicator--f0b87859-19a9-46e5-8ce7-f158d007af0b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b16ca7-fb47-43a6-bf37-0c05a52d3635", "sighting_of_ref": "indicator--f0b87859-19a9-46e5-8ce7-f158d007af0b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000ed20f-dc36-4762-a57a-3223f7e906eb", "sighting_of_ref": "indicator--3f2e70c1-a1af-4c0f-98af-a02ada8cd18f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9972f812-f611-4fe3-93d1-cb7ba6588824", "sighting_of_ref": "indicator--3f2e70c1-a1af-4c0f-98af-a02ada8cd18f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb5b600-4187-45d9-8e22-25567b130a81", "sighting_of_ref": "indicator--26465d7b-600a-4e26-9391-3c7e95d26fe7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b221a5-85cd-4064-afbe-efe2ced6dcb9", "sighting_of_ref": "indicator--26465d7b-600a-4e26-9391-3c7e95d26fe7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ef3a76-74c7-43af-97f5-57ba8162749a", "sighting_of_ref": "indicator--d3044649-e0eb-4d17-bad9-f7fbb95c9856", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40355948-b28e-40ca-b528-f5e29ffd607c", "sighting_of_ref": "indicator--d3044649-e0eb-4d17-bad9-f7fbb95c9856", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e0bb54-a1e1-4e56-9343-bc5698c37b18", "sighting_of_ref": "indicator--a576bc98-ded8-4ee9-b3f8-91fdc6aedd8e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13399f2c-fe11-4404-a388-c0e1af48f6f1", "sighting_of_ref": "indicator--a576bc98-ded8-4ee9-b3f8-91fdc6aedd8e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee70ade7-9a36-4074-9ab1-2d892f676e02", "sighting_of_ref": "indicator--83c41306-7cce-4546-a6ac-68c10fbdb1c7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3f4dfa-670a-4818-a423-a19810de2b05", "sighting_of_ref": "indicator--83c41306-7cce-4546-a6ac-68c10fbdb1c7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e03123-2451-4f2f-8875-3cc6b14b1991", "sighting_of_ref": "indicator--ade0818d-361b-41a1-85f7-1d263eb05253", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4805559-ac48-42d9-8cb2-0fbe066bfe3f", "sighting_of_ref": "indicator--ade0818d-361b-41a1-85f7-1d263eb05253", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3044df4a-3e7e-4031-90e9-92c3b9cb2b90", "sighting_of_ref": "indicator--87acb68b-76ff-4374-850b-77cc2be1a43a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e303ce62-2a1f-4cf6-92df-6e5f67dafd16", "sighting_of_ref": "indicator--87acb68b-76ff-4374-850b-77cc2be1a43a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74996f73-a88f-4729-9f8b-d413e6e0c7d7", "sighting_of_ref": "indicator--ac1fbc23-1439-430e-9f3e-90c83276107c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189fc8bd-3d94-4ab2-893e-d31c1e8bc600", "sighting_of_ref": "indicator--ac1fbc23-1439-430e-9f3e-90c83276107c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5dbef99-2a71-494e-8953-0cc001bfce93", "sighting_of_ref": "indicator--ac1fbc23-1439-430e-9f3e-90c83276107c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fba37a3-615e-4a86-a2fe-a840d7df7ec0", "sighting_of_ref": "indicator--df9f9c53-9828-41d8-883e-1c05e313f1ff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae93724-de74-4e48-9f2f-f3c760e6d311", "sighting_of_ref": "indicator--df9f9c53-9828-41d8-883e-1c05e313f1ff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e721629-da07-4c9f-967f-45d3bb762a58", "sighting_of_ref": "indicator--e0d9f088-5556-4fd2-84f0-81e0bcd6bb0e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154d2ee4-dba9-481b-ad6c-a9c23fefb84a", "sighting_of_ref": "indicator--e0d9f088-5556-4fd2-84f0-81e0bcd6bb0e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d142d8-4a47-4d47-b82e-00ece93e5ef3", "sighting_of_ref": "indicator--4dcac4bb-80ef-4594-81fc-858a961f1e79", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9b9d87-d6e6-4de1-99a7-aecbcc7d0772", "sighting_of_ref": "indicator--4dcac4bb-80ef-4594-81fc-858a961f1e79", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68737271-fcce-44f7-bfb7-266e7a0a59e8", "sighting_of_ref": "indicator--1a45a53c-30d6-4bcc-92f6-1ae5914f0bcc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f43f37c-0338-44d9-8d95-07d48da31e93", "sighting_of_ref": "indicator--1a45a53c-30d6-4bcc-92f6-1ae5914f0bcc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585cc4ac-162b-461a-b952-a2fc9d1ad66e", "sighting_of_ref": "indicator--2f64c0e5-d329-4663-9693-3f181443f0a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f93f739-e754-4906-904f-1cf0bbf6b709", "sighting_of_ref": "indicator--2f64c0e5-d329-4663-9693-3f181443f0a7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9b1516-1540-4dba-93b7-c868bf8f67cd", "sighting_of_ref": "indicator--4ef09d1a-b154-4cc4-a91a-efddd7ef8a65", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91cf8a5b-1a36-462d-9d79-63e11c628dc4", "sighting_of_ref": "indicator--4ef09d1a-b154-4cc4-a91a-efddd7ef8a65", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee741fa5-c578-4a17-a9a2-d28a43b82bf8", "sighting_of_ref": "indicator--7e6b8d98-2ffc-4711-917b-e6eec504f367", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e831c14-bd85-4efa-8254-d48b49a05ebf", "sighting_of_ref": "indicator--7e6b8d98-2ffc-4711-917b-e6eec504f367", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed68b5c-ef31-48e0-b32c-aa0affccb2dc", "sighting_of_ref": "indicator--2aadb69f-afcd-446b-b4eb-c3db10031723", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0501273a-9ef9-497a-9126-aecf4abedc13", "sighting_of_ref": "indicator--2aadb69f-afcd-446b-b4eb-c3db10031723", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389d0dd3-0022-447e-ab43-37c6531d3d91", "sighting_of_ref": "indicator--5cd70264-c0c2-41fb-a76f-b6be7fc5c7c7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc8630a-2bc4-4ee0-a1eb-41ef0fe3db62", "sighting_of_ref": "indicator--5cd70264-c0c2-41fb-a76f-b6be7fc5c7c7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549fea61-2236-4e75-a750-49e279630e39", "sighting_of_ref": "indicator--66b32a65-1e8b-4b3c-8f1e-6ba77ea156c1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fe1828-85dc-454d-a05e-ee95b057a530", "sighting_of_ref": "indicator--66b32a65-1e8b-4b3c-8f1e-6ba77ea156c1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d74ecf6-e680-4fcb-9077-ad31e7f92dc4", "sighting_of_ref": "indicator--1fcf1b5f-562a-4c62-adf3-b1182a4126a4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf66735-7f17-4bd4-a9ae-65ce0b64ab21", "sighting_of_ref": "indicator--1fcf1b5f-562a-4c62-adf3-b1182a4126a4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14330680-27cd-4050-a3d5-dd874787650c", "sighting_of_ref": "indicator--badb24a9-7ca7-4183-8811-dca088868132", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12739b8a-f185-430d-8c56-f1920abf8651", "sighting_of_ref": "indicator--badb24a9-7ca7-4183-8811-dca088868132", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e192e0d-4b20-4b3e-9b02-562b1e549762", "sighting_of_ref": "indicator--7f9de293-790a-4b9a-8673-ee4f7498a4a4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09295a0-e2e1-4b51-8c66-f3a5d466f9d6", "sighting_of_ref": "indicator--bd282454-3e1d-441d-afc7-5effad729b66", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b354a2d-f65a-49b7-a45f-77dc3b5221eb", "sighting_of_ref": "indicator--a3682c38-4d0c-430b-ae95-5bd30f0cdb05", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f9186e-4aae-4314-b88a-99cb92101c25", "sighting_of_ref": "indicator--a3682c38-4d0c-430b-ae95-5bd30f0cdb05", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3333bf1d-fd83-414d-8e6e-3f57f097a265", "sighting_of_ref": "indicator--7b49aada-7d7d-456f-82d6-c4f0fd5aaca4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d250f20c-7b7c-4007-8b4e-6847a45ea5c8", "sighting_of_ref": "indicator--980ff2ee-651f-4847-8416-135e91244b19", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0811c1c-81b5-4a59-8cbc-9215945f5545", "sighting_of_ref": "indicator--f25058b3-7f9a-45b4-bfde-66739bab8410", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c698110-8421-46a7-929f-a4eba9fd8fb9", "sighting_of_ref": "indicator--f25058b3-7f9a-45b4-bfde-66739bab8410", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d548a7e-0b36-4724-9c94-5499bfe41579", "sighting_of_ref": "indicator--acda41cb-b860-48a0-a897-05834e7174d7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dcc7d41-f04e-4b33-8604-d582b8622354", "sighting_of_ref": "indicator--acda41cb-b860-48a0-a897-05834e7174d7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e597f40d-8e36-418c-968a-416a608405dc", "sighting_of_ref": "indicator--0fb7bc5e-ddb4-4eee-80bb-15e10d7d40bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4249315c-013b-447e-b9f0-bfd033ed99b0", "sighting_of_ref": "indicator--0fb7bc5e-ddb4-4eee-80bb-15e10d7d40bb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f1b6df-052b-48d3-a365-65fb0155f1be", "sighting_of_ref": "indicator--47ca80ef-3459-4e4b-88e6-0a3bc3797bbb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e87b68-37ac-4c39-b9bb-e919d2e0a96e", "sighting_of_ref": "indicator--47ca80ef-3459-4e4b-88e6-0a3bc3797bbb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a4950f-65f6-423a-85f5-cd038f74af33", "sighting_of_ref": "indicator--91d17423-2977-4dca-9e47-ff45f82b6c45", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77021f1a-0b40-4733-9ad5-f318ab30d667", "sighting_of_ref": "indicator--f278709a-3f1e-4373-aede-36112a9fdf44", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e31b05-80d7-4ea8-b3b9-01a4b4c52101", "sighting_of_ref": "indicator--89917256-cae9-4da6-bc0f-29c2ecb90643", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba88fad-22d1-47fd-bd49-5ed9e97582ae", "sighting_of_ref": "indicator--89917256-cae9-4da6-bc0f-29c2ecb90643", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1ef6e8-79b2-410e-9ef1-5c13e5adb36e", "sighting_of_ref": "indicator--808eae2f-66d6-44bf-ac5f-f11430318b9c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43e4932-e139-4d34-b206-10d0611d78d3", "sighting_of_ref": "indicator--808eae2f-66d6-44bf-ac5f-f11430318b9c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256cdef8-a758-4d17-9e5b-e3545b0379dd", "sighting_of_ref": "indicator--1bd37055-6f3e-4dc0-847c-477cf5b7d6d0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d6e616-560e-4e96-895f-83b24f04ca48", "sighting_of_ref": "indicator--1bd37055-6f3e-4dc0-847c-477cf5b7d6d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bd2057-387a-46f3-b275-af4927fa1dad", "sighting_of_ref": "indicator--5036b766-21ee-4e84-97df-6d0d79811e18", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a86adcc-bfc0-4b74-a425-ad769751c06c", "sighting_of_ref": "indicator--5036b766-21ee-4e84-97df-6d0d79811e18", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefe366b-639b-4818-84a7-4f37c66fc3f5", "sighting_of_ref": "indicator--84aea28a-fc0a-471a-9dd1-59934b0c5852", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d88503-8acd-43dd-823f-228d565ca8b2", "sighting_of_ref": "indicator--84aea28a-fc0a-471a-9dd1-59934b0c5852", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad29bcfb-9843-4fbb-a873-9ebe833f402a", "sighting_of_ref": "indicator--8e07dc33-4e04-463a-857a-92804c360e2e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94463b59-b97d-4f4b-a790-676b5ae95e1c", "sighting_of_ref": "indicator--8e07dc33-4e04-463a-857a-92804c360e2e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7f8861-3b2d-4b2f-9b38-7c1b960658a5", "sighting_of_ref": "indicator--1060c7fa-ed89-4443-8021-cd09c07e8f23", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15fcfdb-3e7e-441d-bf16-3bc82b2e26d1", "sighting_of_ref": "indicator--1060c7fa-ed89-4443-8021-cd09c07e8f23", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af905875-eeec-4d22-87b9-4916c5d664ac", "sighting_of_ref": "indicator--05b9ef05-4f93-4987-a8c0-4066ce118343", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b344c3bd-acad-456e-b351-06d884d479bc", "sighting_of_ref": "indicator--05b9ef05-4f93-4987-a8c0-4066ce118343", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c581466-7f03-4ce1-8d04-b8e4ddfa1e08", "sighting_of_ref": "indicator--c2bc7e1d-b46e-4ea2-ae82-63f7c5e6bbd5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28b9840-514a-4fcf-a722-aa353ffa7a96", "sighting_of_ref": "indicator--9aa0828b-932d-45ed-ab0a-510da87c0f87", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c7454a-8086-4ed7-9892-bb1e98e153cb", "sighting_of_ref": "indicator--90519595-4d9f-4af4-8ebc-4d2c9c499eba", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142a9f14-d29b-4150-b0d1-6855c9c264df", "sighting_of_ref": "indicator--d6aa52c3-8f1d-448e-9fa7-e7befa7e6232", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c1031c-affd-4539-bc34-e6bc605a26d6", "sighting_of_ref": "indicator--2dccabb1-ea62-45ca-8e1b-7d1553f09446", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f144533-5f80-4964-9764-fa465f59a2fb", "sighting_of_ref": "indicator--2dccabb1-ea62-45ca-8e1b-7d1553f09446", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0c5fa0-901a-40df-afe8-695c5124be17", "sighting_of_ref": "indicator--eb0ec398-d770-4ee6-982f-b1057ab739e4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054a64a3-cf5d-4c0b-8b72-144b91eca618", "sighting_of_ref": "indicator--eb0ec398-d770-4ee6-982f-b1057ab739e4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16ff32d-b30e-4cd8-8bfd-172c713809ef", "sighting_of_ref": "indicator--107eaf9a-4df9-4139-889a-4ddd694c889a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfca972b-7b4b-4573-b10c-b173c18d5c7f", "sighting_of_ref": "indicator--107eaf9a-4df9-4139-889a-4ddd694c889a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4c03ab-1850-4c9e-a20d-153a7772be57", "sighting_of_ref": "indicator--fc6fab76-d105-468e-a3d3-f8c73a7af122", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f78b02c-9fca-4935-ae25-bab0740748c7", "sighting_of_ref": "indicator--fc6fab76-d105-468e-a3d3-f8c73a7af122", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a70d3e3-2dd8-4a55-91e4-12865158ac43", "sighting_of_ref": "indicator--53e1267d-a3a5-4347-9868-845dc6c43366", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf571e3f-590b-434e-b186-8346f793b8d1", "sighting_of_ref": "indicator--24a3b4b6-e077-4446-a1e5-43edd38db4e0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bc0c28-a7a7-4ffd-94cb-002701a01e7d", "sighting_of_ref": "indicator--fbcf6b0b-8cbf-4c01-967c-5d3a8e33fa3c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3395fc-ab4b-4012-b2e4-67fd6097caaa", "sighting_of_ref": "indicator--3b385222-c4ba-453f-add2-0f084332818a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4e76a8-9cc8-4ac5-88d9-2fb7287b7bde", "sighting_of_ref": "indicator--5ff07feb-ad94-4c51-8a13-d1cbfb99bd8d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab16b87f-64a5-4e68-a9e8-b460ce3987ed", "sighting_of_ref": "indicator--bafeb0d2-01b8-4747-b840-3f61609845a6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd980257-6f33-49d5-bd82-cab433754a7a", "sighting_of_ref": "indicator--9d4c6557-e37a-49f8-991f-22c093796611", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5a2a28-4eec-4e19-81d4-5231aa7ec6d5", "sighting_of_ref": "indicator--fe5ef7bf-a8a7-479e-ba5f-52823b6ce8f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12219bd6-3518-4612-adab-396f832928cd", "sighting_of_ref": "indicator--6f6c7c90-83dd-4f8f-8803-dcbf99d990dd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0e71e6-67d3-4e74-86c2-6aad0295a60c", "sighting_of_ref": "indicator--439b6303-57e7-45f4-b76b-597344919e03", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4428986-8e5d-4d90-8229-0bf6b909f280", "sighting_of_ref": "indicator--93b1c677-f905-47f2-be35-14f3bf448eb7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d9ecb6-08a0-400f-810c-d0e51c47759e", "sighting_of_ref": "indicator--93b1c677-f905-47f2-be35-14f3bf448eb7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5dade7-fc36-46a7-8804-1cdadd3e9e0c", "sighting_of_ref": "indicator--cdafa78f-2d1f-495d-a8d0-834156bcfc0d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57194c7f-5d4e-4a09-a993-952703a38c3c", "sighting_of_ref": "indicator--cdafa78f-2d1f-495d-a8d0-834156bcfc0d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d572925e-3c36-4f26-8f96-191676775b34", "sighting_of_ref": "indicator--a2a61a5e-9c3a-472c-81d6-e9c7e99a69e8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7332812-26b7-4f50-b981-d463e3257c14", "sighting_of_ref": "indicator--bf6186bf-bc8f-41ea-aeae-26f868290ca4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a00756d-9e3e-49bb-8c11-2075331f8d1f", "sighting_of_ref": "indicator--44558cf3-8516-47dc-ba58-a08554e50daa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22d24f5-4d71-442f-8c32-4037f5650b7b", "sighting_of_ref": "indicator--b182c85b-4da6-4c41-b439-f70703061988", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70259c27-4e87-4747-8a37-75a155755576", "sighting_of_ref": "indicator--6fe5950f-9780-4b42-b2bd-4b42a30443a9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3fa9d1-0863-44aa-af88-ea999d3b01c3", "sighting_of_ref": "indicator--6fe5950f-9780-4b42-b2bd-4b42a30443a9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fe763f-01f0-4126-9f4a-fc4f45e7c0a6", "sighting_of_ref": "indicator--72ffc794-035f-42c7-8ea0-c07166681bda", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54943a6-2c51-48cc-9eba-7820d458d12b", "sighting_of_ref": "indicator--72ffc794-035f-42c7-8ea0-c07166681bda", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3440869d-7a77-44e7-8595-f85a21a37f5f", "sighting_of_ref": "indicator--72ffc794-035f-42c7-8ea0-c07166681bda", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85cff72-75af-4618-82bb-ed5d1ba26dc2", "sighting_of_ref": "indicator--6668272c-39ab-4e1a-ab9a-ed58d8ae3eca", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d1efb3-3fa5-4f2b-bb81-fcf349c47161", "sighting_of_ref": "indicator--6668272c-39ab-4e1a-ab9a-ed58d8ae3eca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba215cb9-fca4-4e5d-bbe7-93abdc694f8b", "sighting_of_ref": "indicator--fe9320b0-d820-4e12-85c7-9ecc181ba17c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c249b70f-28f8-4760-8b8a-a7208e6263f8", "sighting_of_ref": "indicator--fe9320b0-d820-4e12-85c7-9ecc181ba17c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee59958c-d23f-45d9-beb9-28ce8a7b48a3", "sighting_of_ref": "indicator--d042a7c7-6b03-4417-a539-348d6dcdfdb5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519daae9-2260-4542-aa4c-983cd5aa1c90", "sighting_of_ref": "indicator--7067585f-ecfb-4121-8283-58e7f7910a78", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6cbd4e-c039-4921-a1f1-400d565d1df4", "sighting_of_ref": "indicator--76337978-2687-4c19-a91e-ca01941b538d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78314a38-3ad6-4ee6-b58f-ab737c99d718", "sighting_of_ref": "indicator--a7e9c2fb-94b1-4836-b32c-09c36f2ef093", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6eae518-33d3-4e8c-98ad-30cfe126a117", "sighting_of_ref": "indicator--ccdc9dc5-91b7-4833-942c-9f40900a84f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6bd159-8217-43ae-856a-a77d052402ee", "sighting_of_ref": "indicator--933eb70a-ab0a-4b9c-8e28-d28144543ee8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816eead2-e918-4a5a-b557-186bf567e3ec", "sighting_of_ref": "indicator--5c024ada-8b64-47e8-881a-65043f45231a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac093d1-dd25-4b87-99ab-6dd42a3d4e13", "sighting_of_ref": "indicator--ceb93868-5141-475b-aacd-cf3109a0f360", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb92d81-cc99-4b0c-942a-2d7d9e379b24", "sighting_of_ref": "indicator--8bc281d4-3615-468a-8644-8d2b3ca60833", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791d575a-2abf-4139-a493-0f68ce1fad41", "sighting_of_ref": "indicator--cc560db2-f8ac-4782-b5d4-5d5a9b369ddc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--183168ea-0dde-49c7-a4e0-59f44e2b5bf8", "sighting_of_ref": "indicator--cddec9b4-251c-4251-b3ad-1fea854c0c59", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a7d232-2974-484f-8473-d615c276335a", "sighting_of_ref": "indicator--30ec24f1-ce18-469d-805f-dfef49ccdc54", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e9c7cf-a637-4337-b856-db5e094c7f19", "sighting_of_ref": "indicator--30ec24f1-ce18-469d-805f-dfef49ccdc54", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19bda2f-d3e4-4d3d-8f61-fb12c18030b2", "sighting_of_ref": "indicator--8ff4cfc9-5219-4462-8d21-04197a267cfe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d36f21-faa1-4f3f-8f03-2b2906db635f", "sighting_of_ref": "indicator--fe4a7c65-7134-4224-ae99-d24ae851dc5d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44df1011-ccb1-43c9-bd52-67c21462592c", "sighting_of_ref": "indicator--2b8e91cf-dd09-4411-978c-4bb29b2de8b8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccb9a17-3438-4aec-b58e-3a8a2df5e85c", "sighting_of_ref": "indicator--8dc58ab4-474a-45d9-bf89-60f3c7014b8b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3e728d-c1ee-4674-901e-2231046a80f1", "sighting_of_ref": "indicator--64011e87-a5de-49bf-b441-d86060006f4e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbab735a-7965-41e7-8204-8b84eed0460b", "sighting_of_ref": "indicator--e23fdf89-9b65-4629-8b5c-0c1a466e6608", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a541450b-37bd-43e0-9794-75ade5630fd5", "sighting_of_ref": "indicator--e23fdf89-9b65-4629-8b5c-0c1a466e6608", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074efb2f-8b4c-45eb-9db8-c92bb34c278a", "sighting_of_ref": "indicator--70c9e1b6-9aad-4380-8837-56a599e3ab11", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f017df-8d53-49c2-985c-d1dbfe95ee0b", "sighting_of_ref": "indicator--09867f0e-f8dd-4546-9e1b-c567de80398e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b84264a-2629-4948-99af-dbbc2d9fd2df", "sighting_of_ref": "indicator--d1ba4c33-ea1d-4678-8598-9756dcf39f03", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3f05c3-64a1-41b5-b9a6-16d8d338dc1d", "sighting_of_ref": "indicator--d1ba4c33-ea1d-4678-8598-9756dcf39f03", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0759f0-a0b0-40d9-8361-8e0da5c97262", "sighting_of_ref": "indicator--daab4d02-d705-4ba1-a670-c2a350fdb949", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74644ffe-7eef-419f-b5bc-801fb4802fa9", "sighting_of_ref": "indicator--d0c0c491-8fe8-4c97-a6be-2823c04ac585", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3879466b-17fb-4a98-991c-a04b3bf654fb", "sighting_of_ref": "indicator--0816bc75-3d2d-434e-bf8d-af5bdaf0d396", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e03015-b773-43b3-b914-129530643f0d", "sighting_of_ref": "indicator--f4cd996e-e0a2-4ac7-8d57-e32931977ca4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee6441a-c51f-4d27-9c8f-65b096cfc339", "sighting_of_ref": "indicator--f10ef2bb-5e98-4ba3-9db5-3b6bb93341a9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68ac1ac-3adc-4e68-91e2-e7e5a82cf36f", "sighting_of_ref": "indicator--0158dca3-4120-4ce9-a849-1837762bc1fc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0d9e37-fe75-4456-9a9e-f14f610c09d5", "sighting_of_ref": "indicator--4792267e-7787-4891-bebb-484e076d3d5b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c6eb2e-5f36-46c5-99ef-bfc482f2e9ba", "sighting_of_ref": "indicator--4792267e-7787-4891-bebb-484e076d3d5b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e7d85d-3969-4dd7-9e2c-60d3819fa919", "sighting_of_ref": "indicator--81cdbece-64f6-4179-bbc2-607d5cc6db7b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92bba5a-22e4-44f4-aa53-79d35941f9c1", "sighting_of_ref": "indicator--81cdbece-64f6-4179-bbc2-607d5cc6db7b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907f3e1d-dac6-442a-86fd-0b779195604a", "sighting_of_ref": "indicator--62a94851-114c-45ae-908c-067665d3a0e3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c803a5d0-e0e8-4ead-8c9c-eb5861628eb7", "sighting_of_ref": "indicator--314b9040-3b04-4595-b31c-a2dbbe3d1c3f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07770f5d-b13d-4520-a987-3cc07b6d4fd0", "sighting_of_ref": "indicator--6c7de57f-a8c1-4040-affe-19e58af2cb17", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b86db6-65fe-47e4-a72f-b316747ef827", "sighting_of_ref": "indicator--803373d6-3da1-446d-badd-59db2d1a3034", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a07190c-0db6-4de8-ab6d-8c7bc384dcb9", "sighting_of_ref": "indicator--90a59622-9256-415a-b541-d5261dc70d07", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69d6f0a-5260-44f2-96bf-95d0a84a6367", "sighting_of_ref": "indicator--90a59622-9256-415a-b541-d5261dc70d07", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad705d1-25dc-40f4-91bd-c86caf5038c1", "sighting_of_ref": "indicator--4f85718a-2d2c-4c51-be01-3e7aa167928c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0c7fce-7967-4f45-be1e-958ae268ba00", "sighting_of_ref": "indicator--4f85718a-2d2c-4c51-be01-3e7aa167928c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706ba328-0b58-4160-bda7-c0f654679ed7", "sighting_of_ref": "indicator--51477b62-f374-41ee-ae5c-e1557cf1fa5b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc983a20-bba7-4c23-b4d5-2d1016de5e57", "sighting_of_ref": "indicator--0f6a2d23-211c-418a-9480-8b3c122b0bd4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61d042e-d6e7-498a-8e1e-72744ede5904", "sighting_of_ref": "indicator--0f6a2d23-211c-418a-9480-8b3c122b0bd4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d775968-9990-4677-8bf7-4ef4483ddaea", "sighting_of_ref": "indicator--0f6a2d23-211c-418a-9480-8b3c122b0bd4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc6f8c0-fad1-4faf-b1b3-12e314b9248d", "sighting_of_ref": "indicator--3d5498c2-c108-4800-80e4-eb24456baecf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9c66f5-8640-4786-b29b-5a477e85a3ed", "sighting_of_ref": "indicator--3d5498c2-c108-4800-80e4-eb24456baecf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a44f9d4-82bc-446b-a851-51fc566fca18", "sighting_of_ref": "indicator--ee39ddc7-f43b-4a14-b0ed-f4be182f7682", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52efab8-8cdc-4014-adca-be9cd7030bc7", "sighting_of_ref": "indicator--2a1604f7-84da-417b-955e-8151221dfa34", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f1300d-d491-4a43-8bb3-508aae737f27", "sighting_of_ref": "indicator--2a1604f7-84da-417b-955e-8151221dfa34", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabac22b-d535-438d-89a0-f753181e36ba", "sighting_of_ref": "indicator--715d42d5-8348-4035-a34f-de4b6e47b070", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58938621-6bb6-46bd-9945-00e9885beb1a", "sighting_of_ref": "indicator--715d42d5-8348-4035-a34f-de4b6e47b070", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b9cf6b-87c9-45f9-a4c9-86a3ce929074", "sighting_of_ref": "indicator--715d42d5-8348-4035-a34f-de4b6e47b070", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e35e4d-500d-430c-b027-5a0483b85a1e", "sighting_of_ref": "indicator--d1acc04c-deb1-474c-9a07-3d96fce88d95", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263c78a1-d3fd-400a-adcc-06a08ba01325", "sighting_of_ref": "indicator--13de28a1-f3c3-43e4-9a07-00111207cc46", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c07db9-4c35-4250-a75f-38e53ac88bab", "sighting_of_ref": "indicator--13de28a1-f3c3-43e4-9a07-00111207cc46", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ed6abe-b073-45a0-a669-cd6fa62d3c86", "sighting_of_ref": "indicator--c344d328-92f7-483a-a3d8-9ae128005b1c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ecd033-6ae9-460f-a5ab-d36ebd986d82", "sighting_of_ref": "indicator--c344d328-92f7-483a-a3d8-9ae128005b1c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bd241c-4440-4abf-abb2-07e33eeb2a7e", "sighting_of_ref": "indicator--31e39ef4-a74c-48a2-a66a-aab10ef200d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3272ce-5f9f-4595-8c80-7f3ac03d20c2", "sighting_of_ref": "indicator--b72842af-02a9-49d6-82e8-dc91d5413772", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf4d92a-025e-45b0-ad3f-9e378a642608", "sighting_of_ref": "indicator--b72842af-02a9-49d6-82e8-dc91d5413772", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9657ef2b-90db-4d0a-9bd9-b9222a841621", "sighting_of_ref": "indicator--180da26d-5cc0-425e-8334-75baa1833e1c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a021a6-80b6-448b-aa92-7030245932d9", "sighting_of_ref": "indicator--180da26d-5cc0-425e-8334-75baa1833e1c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d23002-d864-4769-a2ea-f332e9ae6d0c", "sighting_of_ref": "indicator--180da26d-5cc0-425e-8334-75baa1833e1c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58d6fb8-a99f-4ba4-ae21-bb04607be91e", "sighting_of_ref": "indicator--9f862666-84f9-4708-b1f7-4aaafdc59b8f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8a574c-09ed-4076-a5ac-dc48ad76a2ba", "sighting_of_ref": "indicator--9f862666-84f9-4708-b1f7-4aaafdc59b8f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26f40d3-fedb-4dff-bc5a-758e960640ed", "sighting_of_ref": "indicator--9f862666-84f9-4708-b1f7-4aaafdc59b8f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293aff71-6bcc-440c-b214-842a471ef73f", "sighting_of_ref": "indicator--41230bb6-46de-4fd8-8ca0-f19ccc020568", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b14147-fcfc-42e2-b898-66783ba77d32", "sighting_of_ref": "indicator--41230bb6-46de-4fd8-8ca0-f19ccc020568", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c537616-1ada-4587-a783-79a5f8463a1a", "sighting_of_ref": "indicator--41230bb6-46de-4fd8-8ca0-f19ccc020568", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4f5184-e2d4-41d3-adbc-cb3f71056f85", "sighting_of_ref": "indicator--fdbe145e-f76b-4a4b-b21e-822ac01244f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b117bb8-e9f4-45fe-a51c-5298778079b9", "sighting_of_ref": "indicator--fdbe145e-f76b-4a4b-b21e-822ac01244f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4907a0c9-3b49-464a-979d-03ac61bfca81", "sighting_of_ref": "indicator--236a50ca-d36c-43b2-aeef-796ff5c7f5b4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170d1e0b-6b40-4223-9747-9434252f1fbe", "sighting_of_ref": "indicator--236a50ca-d36c-43b2-aeef-796ff5c7f5b4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8494c257-a31b-47fa-b8bd-428a10a308dc", "sighting_of_ref": "indicator--410eb209-8a54-4c65-a2a8-b4e96c99578d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332d87a2-ecf1-4681-b252-52c16c50a1e3", "sighting_of_ref": "indicator--410eb209-8a54-4c65-a2a8-b4e96c99578d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8578ab31-ccd6-4b21-ab47-b02ba74356e7", "sighting_of_ref": "indicator--410eb209-8a54-4c65-a2a8-b4e96c99578d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e318fb41-0674-44dc-a84d-601bd844c497", "sighting_of_ref": "indicator--f6c2db9b-f78c-4130-894a-aaf9e2010b5c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683060d1-e35a-4fe0-864e-a936e0becbd3", "sighting_of_ref": "indicator--263be5d2-3f72-4980-a5eb-2d8f13ebd998", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5773b0-0324-4a96-87f4-06f6d1d4423f", "sighting_of_ref": "indicator--263be5d2-3f72-4980-a5eb-2d8f13ebd998", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f42dd9-dcab-4812-9181-749f81f77249", "sighting_of_ref": "indicator--147cefda-2e50-4990-9cbb-83d45d35edb3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99ac7e7-7766-45c0-9782-3c3b5c420a61", "sighting_of_ref": "indicator--12ab825b-6fe6-41e7-8b30-da94a16848db", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37324d8-dff7-4981-b8ef-ef6d1fcdea1a", "sighting_of_ref": "indicator--d65c34f9-1241-4e94-b928-164e9bbe26af", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d3273c-58d0-4764-bbd7-7039738a0e7b", "sighting_of_ref": "indicator--c18b5c07-96aa-444b-87cf-c1442545b2e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a1ddca-e78f-4003-a796-ba9538cbbc13", "sighting_of_ref": "indicator--c18b5c07-96aa-444b-87cf-c1442545b2e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3171c5-f39f-403a-9f7d-90d59ce0d291", "sighting_of_ref": "indicator--e4c32c6b-dae0-4c38-bc6a-d9627c0be413", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648737f2-63dc-4b90-ace9-f558deb9948a", "sighting_of_ref": "indicator--3b03b3a7-5818-418e-8038-6215ca0714a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09b3b9c-2939-4ad7-9a9f-67b2f05db158", "sighting_of_ref": "indicator--9c010006-986b-4db9-819f-ed37820bfb86", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ed577f-c60c-4749-89db-fd374d303ab9", "sighting_of_ref": "indicator--4eae93c6-c785-4769-aec7-b63155429a16", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdaecba2-fae4-4f16-a31c-1d01fe7bded1", "sighting_of_ref": "indicator--737aa3aa-a9ba-4996-9414-d1340713e33a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103556de-e1b8-4858-b5cf-42ab027c0e06", "sighting_of_ref": "indicator--ca28f660-e7b8-46f6-87e8-19415d271052", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8c3f82-e4f3-4106-b9e1-aefa9187a751", "sighting_of_ref": "indicator--f5c6272d-2904-4ea6-a7b0-affc27f3456d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266a6ed5-5625-455f-ae0e-f8daef8dfa91", "sighting_of_ref": "indicator--4e875ea7-d33d-404f-b0fc-fe3e451a1b33", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bc0bb5-b1f1-4a57-8c9b-54155d8936e0", "sighting_of_ref": "indicator--4e875ea7-d33d-404f-b0fc-fe3e451a1b33", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ac7ba2-6f8a-4ef4-9251-8e9c5b4a97c0", "sighting_of_ref": "indicator--d916b2ef-9cdd-4b83-afbd-9895bea80daa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b122cb15-d53b-4ec8-aafe-08894e7d153a", "sighting_of_ref": "indicator--d916b2ef-9cdd-4b83-afbd-9895bea80daa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174e1aa7-c260-40a6-9502-ce10918d96fe", "sighting_of_ref": "indicator--108ca366-2504-4919-9da6-fe88eea3e85a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d6d356-a51c-4bb7-90c4-6ca406ae0195", "sighting_of_ref": "indicator--67424ea5-d4a8-4736-9340-a754ca84b473", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038674c2-431b-4d78-92c9-6b0d12e455f8", "sighting_of_ref": "indicator--67424ea5-d4a8-4736-9340-a754ca84b473", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d633899-22bd-436d-a999-18b6a88164b0", "sighting_of_ref": "indicator--6cb7a218-388b-4b71-9e05-00c54674439d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379277d3-605e-49a4-9f4f-5380981a121c", "sighting_of_ref": "indicator--eec97eb3-631b-4cc7-b4f7-f1d2f0487e2c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5c7094-1bc3-4c68-aed0-6da63c006812", "sighting_of_ref": "indicator--a3165541-3ff7-4641-bec0-9e5b51a6a101", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34acfff-20a8-4479-aed0-29ad88ba4579", "sighting_of_ref": "indicator--a3165541-3ff7-4641-bec0-9e5b51a6a101", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d305253-722d-40bb-9e16-48f8091a0e1b", "sighting_of_ref": "indicator--a3165541-3ff7-4641-bec0-9e5b51a6a101", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecbcd0e-62b9-4965-92fa-1319de0d2598", "sighting_of_ref": "indicator--17bd56d7-f1ae-4a9d-a71c-6be5242ec877", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812132a0-dc6d-48f9-bd49-c72c91c244a3", "sighting_of_ref": "indicator--6c4d69a9-c734-4300-8ec9-8af959efb316", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0f66db-6151-4170-8c1c-b33b0f90c445", "sighting_of_ref": "indicator--61b38862-cf63-462e-8235-d7a2a1426eac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93255d7e-b1e4-41f2-a37d-d786ec71a981", "sighting_of_ref": "indicator--1b4af467-d241-478b-9900-f0536d6dd93b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8c88c4-665d-4ffe-9e21-0d1501cb2a39", "sighting_of_ref": "indicator--ee0c5cbb-9811-4528-960d-45657e2d14c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6508939b-b42d-4dab-84df-6dbc5e0cfbba", "sighting_of_ref": "indicator--f5cd9956-9a92-4452-894c-82b88f026bce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983b9705-e7c6-4f38-b841-4993a4dffa0d", "sighting_of_ref": "indicator--a0efefa7-17f1-455b-be1f-9c4481e60fd6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bba2c3-4b30-4a8f-a5c7-9dad0d3734e6", "sighting_of_ref": "indicator--a0efefa7-17f1-455b-be1f-9c4481e60fd6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1c2bd8-5469-48ed-93ff-7512ecbc5c07", "sighting_of_ref": "indicator--a0efefa7-17f1-455b-be1f-9c4481e60fd6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc75380-e576-4e80-bb29-2c8a4de5dac2", "sighting_of_ref": "indicator--c4c83486-cb84-459a-9b7a-ea1d41509361", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c44fe5-548d-49f3-b76e-395083917069", "sighting_of_ref": "indicator--f9f7c069-e456-422a-ae5a-c25cc5583786", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4adca00-06bd-4093-bfde-6067817036dd", "sighting_of_ref": "indicator--3cb58138-0677-4dd4-b2d2-e529a9067076", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe03710-11c6-49f9-b6e4-66c214c493b4", "sighting_of_ref": "indicator--f4682a54-6bbb-4735-ace1-fb1e5e664980", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35967622-cc1f-4c0e-bf07-16e39fd666c2", "sighting_of_ref": "indicator--f4682a54-6bbb-4735-ace1-fb1e5e664980", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d867c9b-cbb6-44d2-8338-aa37f3b105f7", "sighting_of_ref": "indicator--fff57b18-bf11-4d3c-8c86-1b9e676f67b3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b5c288-79d5-403e-9db1-e0dd14f0d8ce", "sighting_of_ref": "indicator--8f0597ab-91f1-45df-ad8d-bafc0b6aec50", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb67e0f6-7344-446d-bc66-4f5366f8a580", "sighting_of_ref": "indicator--9071a696-5de3-4b13-b7ad-e3590ccfa5f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d241aeaa-f50e-4824-b38d-0f5c055e4b9c", "sighting_of_ref": "indicator--9071a696-5de3-4b13-b7ad-e3590ccfa5f9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce101e78-bd81-4077-b838-afbd9adb9c9b", "sighting_of_ref": "indicator--7a3e4723-3c4f-4267-86ae-78a781c4988c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba78c722-0649-4157-80d7-dfaf284c2340", "sighting_of_ref": "indicator--7a3e4723-3c4f-4267-86ae-78a781c4988c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989a4290-99b8-4186-8bb4-f6f7aff59105", "sighting_of_ref": "indicator--9929a1f9-ec54-4dbf-97b5-7971d1219d8b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ba3e0f-ad86-49c7-aae6-57cd074098d8", "sighting_of_ref": "indicator--9929a1f9-ec54-4dbf-97b5-7971d1219d8b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa87857-3f24-42e5-a727-b1d46efecd6e", "sighting_of_ref": "indicator--ccc95b83-b2ae-41c5-8e9c-649ed84e188d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe382d5e-8a87-4ecd-93bf-75b0461a36c2", "sighting_of_ref": "indicator--ccc95b83-b2ae-41c5-8e9c-649ed84e188d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e16a581-f772-46c5-87b2-b9827f4ec0f7", "sighting_of_ref": "indicator--eeebc42c-6b64-4cbb-9512-88e37bc5b794", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dff2c2a-b918-4b26-b45d-c9422e7a8f18", "sighting_of_ref": "indicator--494c948f-2335-4b61-8a7f-f49049926824", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e35f42-b253-4664-857d-67f52e46a2ca", "sighting_of_ref": "indicator--494c948f-2335-4b61-8a7f-f49049926824", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf25673-76e4-4252-9489-61341225a920", "sighting_of_ref": "indicator--9bc1c8c7-3d9a-4ed6-bf19-a439176cc175", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d958255-7e94-4c60-bbf6-7b7e14971df4", "sighting_of_ref": "indicator--9bc1c8c7-3d9a-4ed6-bf19-a439176cc175", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a0f49c-16eb-4fcf-9899-4391d619f4df", "sighting_of_ref": "indicator--120040a7-5e9c-49b4-9c46-67b4bd77da84", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec61f8a-223f-4c4f-a2e7-b146007e2a87", "sighting_of_ref": "indicator--55b8d00d-1fc5-4f04-b595-d2e1d0678bc4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2582f914-b015-416a-b29b-2b9c7b6dc44e", "sighting_of_ref": "indicator--55b8d00d-1fc5-4f04-b595-d2e1d0678bc4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c19ea38-7297-45cc-82ef-1e0f77d04d7c", "sighting_of_ref": "indicator--d992bbc6-9801-4f29-8ad5-7d32c12a76f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fca0db4-9af4-458f-a62c-a72146d9c950", "sighting_of_ref": "indicator--d992bbc6-9801-4f29-8ad5-7d32c12a76f4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ec8581-071f-4ffb-ae5f-d8cde0422fe1", "sighting_of_ref": "indicator--d992bbc6-9801-4f29-8ad5-7d32c12a76f4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2b2abf-839b-47d0-94a0-fd7411411bbd", "sighting_of_ref": "indicator--1742c319-ddfc-431c-9831-0fcc3eb4a6ed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926c3eaa-e3fa-4571-bd8c-992252ecbcc7", "sighting_of_ref": "indicator--c4e6d883-330e-4eb8-b5c7-ec62c176534a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03b2214-95d7-40d4-b710-9d14fa8ba3a0", "sighting_of_ref": "indicator--c4e6d883-330e-4eb8-b5c7-ec62c176534a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f233f2-2a5b-4b0e-a059-026e750336bd", "sighting_of_ref": "indicator--ca9b31ba-afff-45c8-b020-2166e6cd7e76", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06768cd-ff18-4dc0-bb91-300353a4d801", "sighting_of_ref": "indicator--aa306947-63fe-4d4d-9c96-d46ec2512f64", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45170579-ac03-4d79-ae1a-a7ca61e9af98", "sighting_of_ref": "indicator--8912360e-4fcf-4642-9b4e-fd81755c97d5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc65739d-6b98-4a95-98fb-82c7a6dea4d7", "sighting_of_ref": "indicator--b09886c8-9109-4cb2-9839-2f468b2cc96d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df70cb3-b96f-4981-b2e9-2aced41a7c06", "sighting_of_ref": "indicator--b09886c8-9109-4cb2-9839-2f468b2cc96d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a169924e-7a48-45e4-a056-fad37d716e36", "sighting_of_ref": "indicator--b09886c8-9109-4cb2-9839-2f468b2cc96d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfbd2d3-bb59-44f2-82e1-1745660d65df", "sighting_of_ref": "indicator--75b4a657-b6b5-4558-8f7d-0d422f77f59a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4039d7-018a-4af3-ae58-d95076a2fc75", "sighting_of_ref": "indicator--75b4a657-b6b5-4558-8f7d-0d422f77f59a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adacc51-5e7c-4125-b2f6-787b8db6758f", "sighting_of_ref": "indicator--292d803a-eeeb-4f8a-88cc-1f1fd3b6e8c8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0fb282-88ce-454d-8b23-159496c021d7", "sighting_of_ref": "indicator--292d803a-eeeb-4f8a-88cc-1f1fd3b6e8c8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5332c4-e656-4cb3-a65d-d9aecdbba391", "sighting_of_ref": "indicator--df812cd5-7092-4a4c-a05c-9c93aa706bc9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3e724e-e084-4039-be43-2c061e3a88c1", "sighting_of_ref": "indicator--df812cd5-7092-4a4c-a05c-9c93aa706bc9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e055a6-9512-4347-bb53-4ad42e39c234", "sighting_of_ref": "indicator--5d1d5a7a-17eb-42c2-a16f-4c5f7375b893", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c61e28a-ea8b-4d26-afd3-36952644fc84", "sighting_of_ref": "indicator--5d1d5a7a-17eb-42c2-a16f-4c5f7375b893", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357281a4-8b89-4c62-88a7-d603467a084c", "sighting_of_ref": "indicator--5d1d5a7a-17eb-42c2-a16f-4c5f7375b893", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cda208-5310-4fd2-bc51-0cb9bc15f4c3", "sighting_of_ref": "indicator--c2a73d45-9ec4-44cf-bdcc-e95518ca06af", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d5d977-729d-4041-bb68-e67c06741cea", "sighting_of_ref": "indicator--de15d720-a237-48a3-9d74-47226ee214d9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ea7481-afc2-40c0-afbf-af8ac24b0cc7", "sighting_of_ref": "indicator--de15d720-a237-48a3-9d74-47226ee214d9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3dad12-f27c-4dd6-a25e-b1e32fe793c9", "sighting_of_ref": "indicator--de15d720-a237-48a3-9d74-47226ee214d9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5645a8-50e9-422d-860e-5ddf0b3a4a2a", "sighting_of_ref": "indicator--66c87b33-fa94-4ade-92ce-6564b1d319ac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa0f132-78da-4968-ae8e-1f19d4393f4b", "sighting_of_ref": "indicator--66c87b33-fa94-4ade-92ce-6564b1d319ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6b78cc-d74b-42da-b7a1-2bda43f7e5f9", "sighting_of_ref": "indicator--66c87b33-fa94-4ade-92ce-6564b1d319ac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35babd3c-62e6-411d-a07b-9040263e0d34", "sighting_of_ref": "indicator--0682bdc5-05d8-4c7d-a559-be02855491b8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec0d17a-0e74-404d-a794-4a4ca5d355e9", "sighting_of_ref": "indicator--987a4588-3113-4c07-9d8b-eb082ab165bf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97105a28-4ed8-46de-abfe-1432d5073bcb", "sighting_of_ref": "indicator--1d78fbaf-b885-4632-97be-b747eb7f676a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe4737f-ddee-4c59-a4e1-cb7aac5eb047", "sighting_of_ref": "indicator--1d78fbaf-b885-4632-97be-b747eb7f676a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda67791-b571-4a00-9cf5-e0f995071478", "sighting_of_ref": "indicator--1d78fbaf-b885-4632-97be-b747eb7f676a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b320c4a1-730a-4626-bcb4-140535417004", "sighting_of_ref": "indicator--86ff2a52-f177-4c85-949a-d693d9338060", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b92c4f-000f-48f6-8568-2d7385229c4a", "sighting_of_ref": "indicator--86ff2a52-f177-4c85-949a-d693d9338060", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549a6efc-2200-440f-9219-394e07a53352", "sighting_of_ref": "indicator--164879eb-9e47-4e3c-9d1d-23af04d02092", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15385731-bb19-44fa-80ba-b54beffbac65", "sighting_of_ref": "indicator--164879eb-9e47-4e3c-9d1d-23af04d02092", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06cf9a7-a84a-4ee9-a748-ac5572e91beb", "sighting_of_ref": "indicator--82ed21b5-45f9-459a-8574-5db3312b2f2a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819d4a27-b055-4e5e-86ed-56b42dab3d45", "sighting_of_ref": "indicator--71b91795-87f4-493d-823f-4f5318509b2d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a875eb-11f1-44c2-b5d0-0eaedc071aea", "sighting_of_ref": "indicator--71b91795-87f4-493d-823f-4f5318509b2d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7de687e-2147-4d25-9aca-b908075fd96a", "sighting_of_ref": "indicator--2973f454-5eeb-4bb3-a529-d30d37baa7b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144cb0af-3622-44c3-91a1-a1945651dc2e", "sighting_of_ref": "indicator--d8478324-0182-493b-be50-127fc7b5f5c8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbaeaea-7137-48e2-b894-f5d2c414ee42", "sighting_of_ref": "indicator--49e5264b-19e1-4e6a-bbb7-73c8fb890fa9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7227951c-ca50-4791-bbca-d7ff70e27df8", "sighting_of_ref": "indicator--bdc8720a-279a-4b77-88cd-450a22499cd0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbcbd42a-0f29-4d26-9adb-d4de1666d8c9", "sighting_of_ref": "indicator--bdc8720a-279a-4b77-88cd-450a22499cd0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4af614-6dea-46a5-b73a-0781ce2224a8", "sighting_of_ref": "indicator--32b98ab2-2b37-4e3e-a011-ca02dbb793d1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a6bbaf-73e3-4019-af1d-382b10c20d3c", "sighting_of_ref": "indicator--32b98ab2-2b37-4e3e-a011-ca02dbb793d1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a789136f-b335-4ebf-a4ac-6a44570249a4", "sighting_of_ref": "indicator--330745c7-b6f4-47d7-a536-a073773e6d84", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4513de28-0f92-48cc-b877-e7ebe402e2d6", "sighting_of_ref": "indicator--330745c7-b6f4-47d7-a536-a073773e6d84", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4ee7e9-b59d-4a21-b6df-e07d5f78a65b", "sighting_of_ref": "indicator--330745c7-b6f4-47d7-a536-a073773e6d84", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe143cf-80c1-42e1-9cd1-478f07c0e0e7", "sighting_of_ref": "indicator--b552f2ad-9e50-407d-a096-fcfac6737cee", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639201f5-614d-416e-b696-cd0f18b61b51", "sighting_of_ref": "indicator--a4dd0797-3f72-494d-90a0-f119d46d3db4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfe1a33-ea13-40a9-82ab-3b59332a1ea4", "sighting_of_ref": "indicator--ee6aeb38-d768-48a4-ab37-1571dd546ea2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b025b1-0420-488d-a2e9-1ceb9bec23e6", "sighting_of_ref": "indicator--ee6aeb38-d768-48a4-ab37-1571dd546ea2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7c39d4-eef1-405d-8b52-3d58902aa22d", "sighting_of_ref": "indicator--93e45a68-48c9-4c2d-8718-cac6dc9527e2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df913b1-6886-40ab-9a59-9a667332b807", "sighting_of_ref": "indicator--025d4d8a-1fbc-4bd7-aa8f-9a0e383c3b53", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e1b63d-3100-4d59-8579-42e87a496550", "sighting_of_ref": "indicator--025d4d8a-1fbc-4bd7-aa8f-9a0e383c3b53", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6640c77-a7ea-4454-933b-6ac00376742e", "sighting_of_ref": "indicator--08f4cac3-fa50-4723-bf74-219a63cd374b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741ed66a-8a00-4034-a28a-715a1795df89", "sighting_of_ref": "indicator--08f4cac3-fa50-4723-bf74-219a63cd374b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4c4fbf-4f78-45a8-90dd-c50abf0076ac", "sighting_of_ref": "indicator--08f4cac3-fa50-4723-bf74-219a63cd374b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb099b9b-27be-4d37-8c0b-8f139175f5b1", "sighting_of_ref": "indicator--08f4cac3-fa50-4723-bf74-219a63cd374b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14ffb6f-4bd1-47d8-99d2-b59f8cf1f513", "sighting_of_ref": "indicator--a90cea41-7f5b-4592-99ba-53598bc3b360", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef07633-5d22-40e8-9c1e-a523ea726d79", "sighting_of_ref": "indicator--a90cea41-7f5b-4592-99ba-53598bc3b360", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6908a22-596d-4916-bcc9-81e09e77b168", "sighting_of_ref": "indicator--a90cea41-7f5b-4592-99ba-53598bc3b360", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86f294d-5de4-40fb-be50-e57f76b5029e", "sighting_of_ref": "indicator--882eec0c-b16b-4893-94dc-9deffd709fbd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3911ad9a-6d39-4151-8752-c64fe00525a1", "sighting_of_ref": "indicator--882eec0c-b16b-4893-94dc-9deffd709fbd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436d9aa5-3754-420b-b94e-80c494875d76", "sighting_of_ref": "indicator--c9546cd7-25f1-4d1b-a3f2-ae6f43b17623", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0ddd82-7e66-46d5-bc11-6ebed820181e", "sighting_of_ref": "indicator--c9546cd7-25f1-4d1b-a3f2-ae6f43b17623", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ded746-35a9-4296-b5c1-7705f6bfe7bf", "sighting_of_ref": "indicator--c9546cd7-25f1-4d1b-a3f2-ae6f43b17623", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7dc930-6f18-44b8-84a8-ecde952d0bf9", "sighting_of_ref": "indicator--76bc0b5a-5258-4f4b-8762-2d07505fce45", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b05fe45-4d8f-4da0-9d65-17d8cd665edd", "sighting_of_ref": "indicator--76bc0b5a-5258-4f4b-8762-2d07505fce45", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3aee8e-f2de-42dd-beae-be588ec94031", "sighting_of_ref": "indicator--c372e4dc-4c40-4098-96e4-933bdf960234", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e291e6-f1d4-4e23-9388-49ee619ef6cf", "sighting_of_ref": "indicator--c372e4dc-4c40-4098-96e4-933bdf960234", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28126b1b-b5e4-439d-9c82-d006be9c8b5d", "sighting_of_ref": "indicator--c372e4dc-4c40-4098-96e4-933bdf960234", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36240dc0-e03f-4918-888f-47a9e06789c8", "sighting_of_ref": "indicator--430a3697-2397-4d15-9a9f-5f803dce144d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6939b34c-defc-48eb-a777-da48fc5ef352", "sighting_of_ref": "indicator--430a3697-2397-4d15-9a9f-5f803dce144d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad55fe4-0990-456c-b0d2-b84f05d521b6", "sighting_of_ref": "indicator--ee4ee041-8533-482c-9709-422dc4ad3b1e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc0eb22-c885-4d1e-955f-2f0e37b1e607", "sighting_of_ref": "indicator--ee4ee041-8533-482c-9709-422dc4ad3b1e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39686fb-04d7-4278-bca9-dd3261aba755", "sighting_of_ref": "indicator--cc2f6a72-2ceb-4c31-abcf-dd9df7658eff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6dc8de6-60df-4834-a73f-6beff39cd502", "sighting_of_ref": "indicator--cc2f6a72-2ceb-4c31-abcf-dd9df7658eff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cab260-1589-4f5d-b647-75f612d8eeba", "sighting_of_ref": "indicator--83cdcec5-4e3b-4e7c-9f49-2ad554fa3119", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59d7ef8-5a30-4100-9f51-1ab2d2418965", "sighting_of_ref": "indicator--e20eaeea-78f4-4270-8602-7512bb9558b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f040cbba-376e-4354-ab0d-ebef5c7d9ce1", "sighting_of_ref": "indicator--e20eaeea-78f4-4270-8602-7512bb9558b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cf3f3e-0581-4fdd-a605-ff8e6f4f9f36", "sighting_of_ref": "indicator--e5be1b2b-fb01-4a87-ad16-9efffd2ac903", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2e52f4-ad02-422d-8f0c-4571ce3e40e0", "sighting_of_ref": "indicator--e5be1b2b-fb01-4a87-ad16-9efffd2ac903", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cae1a13-9b97-4dcb-a8e4-55cc713092db", "sighting_of_ref": "indicator--b93083d7-a12f-4515-aec4-e5f352543857", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f0fdbb-ee80-4aec-ac0f-f8db0701f79d", "sighting_of_ref": "indicator--b93083d7-a12f-4515-aec4-e5f352543857", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74be4d5b-0969-415a-8f83-33e3180d7665", "sighting_of_ref": "indicator--b93083d7-a12f-4515-aec4-e5f352543857", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8f15eb-2bd6-4858-8551-c1e7d277ebeb", "sighting_of_ref": "indicator--0f1a5dd5-25b1-4c09-9abe-f3e1bc851b1b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bf3b24-34b0-4647-83b9-85420c150063", "sighting_of_ref": "indicator--48e48749-4e92-468d-8e0c-82a514100af8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d977e5-3cc8-45f3-b9b5-3bd01b3a355f", "sighting_of_ref": "indicator--48e48749-4e92-468d-8e0c-82a514100af8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdc9951-5060-4634-9511-d4721d37e18e", "sighting_of_ref": "indicator--7322f7d5-b59f-47eb-976d-baa549723bf3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a898deb-e172-44ab-a1e0-62f3a8a38c3f", "sighting_of_ref": "indicator--28bbf73e-b4af-459e-9188-49046ef47392", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757fa17d-d834-4551-b6a6-57a5b1d373d5", "sighting_of_ref": "indicator--28bbf73e-b4af-459e-9188-49046ef47392", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5fdd633-c17d-4c43-9725-e2fd10754267", "sighting_of_ref": "indicator--f24050da-4f07-4d68-8c4b-399492c762ad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377a6e97-28d2-4544-bba2-92a6539995cf", "sighting_of_ref": "indicator--f24050da-4f07-4d68-8c4b-399492c762ad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c0fd76-de22-4605-b9a6-a0519fc6e5e7", "sighting_of_ref": "indicator--f24050da-4f07-4d68-8c4b-399492c762ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b100b2f-2e0d-49bf-8a79-15162dd6bd61", "sighting_of_ref": "indicator--f1f2f035-6968-492b-b4d1-2984374cae22", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3d71e2-0911-4d71-9a7d-12ff971ce8d5", "sighting_of_ref": "indicator--f1f2f035-6968-492b-b4d1-2984374cae22", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b06b9f5-44c2-42c6-8b76-d4825fe69a8c", "sighting_of_ref": "indicator--f1f2f035-6968-492b-b4d1-2984374cae22", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a28bad8-8430-42ed-a9ab-ab30c60cba16", "sighting_of_ref": "indicator--e766aa25-b62b-4645-ba48-685461b27295", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e6deb0-3c1b-4ace-a72c-a6d1b816b3b8", "sighting_of_ref": "indicator--c9fbe654-2348-42f2-b610-609d283a4279", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047a4de3-fe79-4f22-8c53-c2470eff6cfa", "sighting_of_ref": "indicator--c9fbe654-2348-42f2-b610-609d283a4279", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3330076-c244-482f-838a-124a0e1625eb", "sighting_of_ref": "indicator--c9fbe654-2348-42f2-b610-609d283a4279", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434de322-5813-4614-9cdd-af37f258ec51", "sighting_of_ref": "indicator--7365df30-7600-4243-a56c-3009b1eaffcc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611605df-a85c-4a46-92db-2598cb0b12e5", "sighting_of_ref": "indicator--5e25b31b-ebc1-4918-92cf-3db7eee8a546", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e877ba-8727-41dc-8123-ec6420a47f14", "sighting_of_ref": "indicator--5e25b31b-ebc1-4918-92cf-3db7eee8a546", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15af55a6-e90b-42c4-89b0-2f99ec9c9bc5", "sighting_of_ref": "indicator--5e25b31b-ebc1-4918-92cf-3db7eee8a546", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31afafc8-41f6-4d0f-9a49-fab86ba1755e", "sighting_of_ref": "indicator--fcb4263e-7870-47f6-9089-2106209e5e35", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3ca3ac-211c-47f0-a3b2-f76a30a2ad58", "sighting_of_ref": "indicator--fcb4263e-7870-47f6-9089-2106209e5e35", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d207c27-b1ee-4c31-9513-81a3b4939358", "sighting_of_ref": "indicator--fcb4263e-7870-47f6-9089-2106209e5e35", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb67678-f3be-4690-a1cb-40e44a12a57c", "sighting_of_ref": "indicator--fb2d9840-f574-4bec-b1a7-9e092dc4a61f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e14d904-a173-4865-854f-10a8428b35ea", "sighting_of_ref": "indicator--7092ed44-3154-4f9a-bccc-a2bbea02f23f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc0ccd7-b1d1-428a-97e7-780a876870a4", "sighting_of_ref": "indicator--51fa89e1-a57a-4f8c-81ca-649ade3533e8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6049c02a-db72-4b03-a336-601d31792ff8", "sighting_of_ref": "indicator--b97bd410-4bc9-466a-bfc6-830d09517052", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8874d44-6455-458c-a477-144ff885cc6c", "sighting_of_ref": "indicator--b97bd410-4bc9-466a-bfc6-830d09517052", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00001195-3002-4e4b-bf99-dd199640d750", "sighting_of_ref": "indicator--49fe30df-4673-45e7-8e21-32f261bce9b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc1cca9-e6db-4a0b-92a2-9732ada09c75", "sighting_of_ref": "indicator--fe29d330-788b-4d03-88ff-94d7309253b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f082832d-916f-46a2-aaa3-715f8c798e06", "sighting_of_ref": "indicator--7848af6c-9a55-4ff0-bfcc-ae932fc37dcb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d48870a-3f94-42e5-9b3b-1b1285f5fca5", "sighting_of_ref": "indicator--b1bd7f34-63f1-49a8-84eb-d3bc286f506e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56fb0e3-0e1c-4974-a2f0-4d089111d9b3", "sighting_of_ref": "indicator--b1bd7f34-63f1-49a8-84eb-d3bc286f506e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9fcd7f-0b0d-4885-bf31-e10535da4b30", "sighting_of_ref": "indicator--b1bd7f34-63f1-49a8-84eb-d3bc286f506e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f43f570-664d-4ce3-a92a-85dba712e068", "sighting_of_ref": "indicator--c5fb0792-51ad-4a9c-8d87-ef79a7a41c53", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445d32aa-15d5-4d98-aeea-cc336a81c81c", "sighting_of_ref": "indicator--c5fb0792-51ad-4a9c-8d87-ef79a7a41c53", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4b144a-80d8-4c2a-b262-948078cf88f9", "sighting_of_ref": "indicator--49a9430c-7a59-4901-a9d3-63a841f201ec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2452274f-ba48-443f-8581-80f2d89aa5b7", "sighting_of_ref": "indicator--49a9430c-7a59-4901-a9d3-63a841f201ec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae3508f-17f8-426e-abfc-4b01d5b1c04b", "sighting_of_ref": "indicator--49a9430c-7a59-4901-a9d3-63a841f201ec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9480ef-cf6e-4658-92d8-5255d5c979ad", "sighting_of_ref": "indicator--99faa02e-7bfc-435f-9fb0-c0ccb71bb76b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8c980e-3522-45d2-8a89-e691630ea2fb", "sighting_of_ref": "indicator--99faa02e-7bfc-435f-9fb0-c0ccb71bb76b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5089c251-ac1c-430b-bbaf-9dda8cbfd61d", "sighting_of_ref": "indicator--e70933ee-83d4-43e2-ae0a-df56cde94a6d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe93b41-6ecc-4b75-b0c3-77868e84a049", "sighting_of_ref": "indicator--e70933ee-83d4-43e2-ae0a-df56cde94a6d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91383b63-3aa0-4c6b-ba3b-2e3f2dba7e58", "sighting_of_ref": "indicator--3cd4b5e4-8884-4e7b-9d37-4f8d584a5cae", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f49c780-0a05-4179-b4fe-f51ac034bd89", "sighting_of_ref": "indicator--802a7806-6959-4683-a004-98bf1228e647", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb940c86-f60a-41ac-b2b6-19701a777322", "sighting_of_ref": "indicator--802a7806-6959-4683-a004-98bf1228e647", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf871a9-dbf1-4fcb-8e25-a4a6c79733e2", "sighting_of_ref": "indicator--802a7806-6959-4683-a004-98bf1228e647", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1188c634-fc6b-4f27-b817-08edda9ee007", "sighting_of_ref": "indicator--d708004a-2112-4784-80eb-00da46f25198", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec8c7e3-08d0-4dce-9387-c654bea4348d", "sighting_of_ref": "indicator--f3a8663a-a2d5-410c-adb2-e98307ef0bab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d4dc3b-32c8-4c2f-a62d-f63c691d1399", "sighting_of_ref": "indicator--f3a8663a-a2d5-410c-adb2-e98307ef0bab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829dcc8f-899c-469e-8974-bc27f8c9dddf", "sighting_of_ref": "indicator--f3a8663a-a2d5-410c-adb2-e98307ef0bab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963d93e6-36ef-47a7-af12-0ef3dd89c7e3", "sighting_of_ref": "indicator--22d3ca78-ee9f-4b5c-a2bf-0688932e0a7a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf439d5-3371-467f-8e81-c6593d022122", "sighting_of_ref": "indicator--22d3ca78-ee9f-4b5c-a2bf-0688932e0a7a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f0bc20-c717-40cb-ac96-dbc3dc00b09d", "sighting_of_ref": "indicator--32bc75b2-8e27-4c92-b6b1-a42ab06c85e3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856c074d-bad6-4d1b-85eb-a1a8cda1d02e", "sighting_of_ref": "indicator--5e826be5-4115-4391-b125-9a1d75c465c9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575f87b9-e284-419c-8e6f-1a4e83dabce0", "sighting_of_ref": "indicator--5e826be5-4115-4391-b125-9a1d75c465c9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3d651c-69a1-40a2-af68-277ce187db73", "sighting_of_ref": "indicator--c0cb6623-073b-4035-9d61-b561b47c037b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08867819-68b5-428d-8b22-a2dbe8c7a413", "sighting_of_ref": "indicator--1136d07e-ca84-4776-8c16-6c592056e217", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8139a3bb-cd1f-4549-8e50-5d252c47781f", "sighting_of_ref": "indicator--cfa43b9c-2ab6-465d-b681-4bccf93d9b59", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1271ec3d-b8d1-4892-8160-1c41e6cf32ae", "sighting_of_ref": "indicator--2ec72d3c-417b-48ac-9a3f-7335acbba6f3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b779dd2b-3450-4cb1-8909-314fde3a8b97", "sighting_of_ref": "indicator--98108fe6-d8ac-41c7-b203-065cd1b3427b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd2f0dc-af2f-48ab-8eb6-e4e274167d67", "sighting_of_ref": "indicator--504076ed-fd78-4866-8b9c-37ed4e95591d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cd2d42-a5c1-4359-9cac-5a88911863be", "sighting_of_ref": "indicator--504076ed-fd78-4866-8b9c-37ed4e95591d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66a03bf-c00b-4f8d-9650-c052e620fcf4", "sighting_of_ref": "indicator--62ff101a-a55e-4f87-a7a6-808300231a14", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156e620a-ce19-4dcc-9e08-93ae46188e2a", "sighting_of_ref": "indicator--62ff101a-a55e-4f87-a7a6-808300231a14", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29f9723-d35a-48f2-be08-2e6dc2d78de9", "sighting_of_ref": "indicator--05f10ac9-f9fb-46f9-a2cd-1b8e4b3e7620", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32948589-72e2-4de8-9006-305fd8b17e91", "sighting_of_ref": "indicator--77134067-6f2b-4586-960d-f128535174c5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d046b27-7db3-4c62-8af4-d30fd4282658", "sighting_of_ref": "indicator--07615c46-e231-46f2-b800-bf21e34d043f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588f5808-df31-43e5-add7-6b4d6f16f178", "sighting_of_ref": "indicator--64d9535a-e512-473c-a83d-0976128adc78", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d3e214-15cf-4368-b8b1-5db7a13bb911", "sighting_of_ref": "indicator--64d9535a-e512-473c-a83d-0976128adc78", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503fbd4f-ea9f-47cf-bb4b-de2843fef692", "sighting_of_ref": "indicator--af3162db-c17f-40d8-a395-24d32461ffb3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f79b820-ede9-498a-b05b-4b8d60ac220b", "sighting_of_ref": "indicator--af3162db-c17f-40d8-a395-24d32461ffb3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53156164-d041-4df9-9442-798b53566ba7", "sighting_of_ref": "indicator--af3162db-c17f-40d8-a395-24d32461ffb3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103f53d2-c8ce-46be-9adb-c4998c174943", "sighting_of_ref": "indicator--6b542671-7c99-400f-acf4-dc4d9e62d80c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b45afa-d10d-4b3c-88f2-52a936a31014", "sighting_of_ref": "indicator--76e7b8a3-1b3a-4d47-b7c4-4f365c0f71cb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5b1dfe-6dc1-4258-9ebe-dc5fb3b6c6f8", "sighting_of_ref": "indicator--d6fbf221-b116-4865-b8a8-e6656751fb89", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498a5c12-7c2a-4643-83fd-ef956e9d51ae", "sighting_of_ref": "indicator--57850bc9-09f4-4cd6-aa8d-a9c64fa2c4a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e96085-c835-4598-9cb9-69d7a36c647d", "sighting_of_ref": "indicator--57850bc9-09f4-4cd6-aa8d-a9c64fa2c4a7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806c5494-5f4f-4618-95bc-ece57f3d237b", "sighting_of_ref": "indicator--61dededd-59c8-4271-8a36-2b3593d8a52a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8314c3-09aa-4082-8284-57f11cae84e0", "sighting_of_ref": "indicator--86eb17a5-77b7-45f9-957a-4a6ef832f56a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8138cefe-b301-4511-aea9-4f2be21392cc", "sighting_of_ref": "indicator--86eb17a5-77b7-45f9-957a-4a6ef832f56a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a02832-3089-4f1f-83b4-f93082118acd", "sighting_of_ref": "indicator--6f42ae73-82fa-464e-8ad8-0f3f00345b5f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5781adfe-87b6-4ae5-a4ad-172743ce4eab", "sighting_of_ref": "indicator--6f42ae73-82fa-464e-8ad8-0f3f00345b5f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3a7368-23c0-4089-bc01-7bccb79b4c04", "sighting_of_ref": "indicator--54593630-1b51-43ac-b7f5-759671e3dd14", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7509c7-0094-4cd1-992c-a860bc64b5aa", "sighting_of_ref": "indicator--54593630-1b51-43ac-b7f5-759671e3dd14", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8249fff7-982f-4cab-9eb5-34a4706cb6ca", "sighting_of_ref": "indicator--54593630-1b51-43ac-b7f5-759671e3dd14", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d7369c-5146-4350-a382-15c1bc078944", "sighting_of_ref": "indicator--b0200cf4-e71c-4c8c-afbc-ffafa674c0b7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0407abb6-de9a-4b3b-b966-3f4c2de6f619", "sighting_of_ref": "indicator--588f8e00-c669-437e-8035-04da343c7963", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3967c5a9-f576-48db-82a6-fdb6e069b7ef", "sighting_of_ref": "indicator--588f8e00-c669-437e-8035-04da343c7963", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407dcdf8-37da-4a9f-b787-9825e0d018d8", "sighting_of_ref": "indicator--018a1a0d-39c9-4ff3-bae0-17c356625493", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7376fffa-caac-4ebc-9fe3-04d078b8fea0", "sighting_of_ref": "indicator--07be5d81-9a37-4d9c-a463-a2f1a7a23059", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41311a3-b059-4951-bb5a-272fc2301de7", "sighting_of_ref": "indicator--07be5d81-9a37-4d9c-a463-a2f1a7a23059", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9843a1ce-018e-4647-a120-695c5fefa270", "sighting_of_ref": "indicator--07be5d81-9a37-4d9c-a463-a2f1a7a23059", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f055cda8-e484-4f44-8cb9-43899b0a77d8", "sighting_of_ref": "indicator--052a7313-3b7c-4f9a-8951-909c9decdceb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bcfa57-968e-4556-ac06-d3c4446453bf", "sighting_of_ref": "indicator--052a7313-3b7c-4f9a-8951-909c9decdceb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5539af0-c220-4e44-8f20-f4e16182b097", "sighting_of_ref": "indicator--8522d785-276a-431e-b915-79281964ca65", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1ac366-792a-4bbb-89cb-3883ad079c36", "sighting_of_ref": "indicator--1dc5bc94-9e6a-4435-a7ef-79cc7b8cd4e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5abdbeb1-6ea2-4898-81aa-b37ae873f0e2", "sighting_of_ref": "indicator--1dc5bc94-9e6a-4435-a7ef-79cc7b8cd4e7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37667738-c313-42c2-bde6-cdc2afbd4372", "sighting_of_ref": "indicator--187ecaac-16fa-4079-968d-6864435fe917", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7121f31-ba0b-4a87-b1b9-2f6075b9d53a", "sighting_of_ref": "indicator--0def017d-c1a9-4d12-8be0-3add0f4c445a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0c8eb6-28b8-4eff-8cec-dad189b7cee7", "sighting_of_ref": "indicator--0def017d-c1a9-4d12-8be0-3add0f4c445a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf80626a-3f70-4316-acae-cb7bfd10ce37", "sighting_of_ref": "indicator--f9b12f89-a6a4-4fb6-9bae-213bbae3ccf5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793b3373-6905-43ab-83c2-895fa6b9d45d", "sighting_of_ref": "indicator--f9b12f89-a6a4-4fb6-9bae-213bbae3ccf5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe8c43f-b719-4728-933c-b5ad6321ed39", "sighting_of_ref": "indicator--97d875da-9165-4dfd-9d59-6103ccb3836f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292b8a04-3055-4236-9f8c-d22f7884f248", "sighting_of_ref": "indicator--662116f0-cdad-4b63-b05a-a72f440e127f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52668585-e485-4d0e-af73-a3ffb0ced00d", "sighting_of_ref": "indicator--662116f0-cdad-4b63-b05a-a72f440e127f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0313764e-d670-4288-9ee9-e097957ea065", "sighting_of_ref": "indicator--1758dbfb-6afe-45eb-ac3d-33c43dc5b5aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730639aa-5f34-4ebf-8e12-b633c856ea04", "sighting_of_ref": "indicator--7fe35744-f0e7-4988-9116-30780c566660", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f431255f-dfd5-4784-b91f-a23f4af36fe7", "sighting_of_ref": "indicator--2315312b-63d0-429a-bdb0-b03aa1283a25", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123a735c-9044-4c7a-a873-0aa090396548", "sighting_of_ref": "indicator--3554af9e-8a63-4d7e-858c-4f6ef3efdb67", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb36e156-9f9e-4e22-a191-9fb440e81111", "sighting_of_ref": "indicator--560df764-5d1f-4cc8-bba0-a3466982234f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a2d2f0-933f-470d-915f-c32e60c86690", "sighting_of_ref": "indicator--560df764-5d1f-4cc8-bba0-a3466982234f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7367ea-a9d4-45dc-8e70-2cbae37bf097", "sighting_of_ref": "indicator--560df764-5d1f-4cc8-bba0-a3466982234f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582d95c2-78dc-465c-b947-89e460c56a68", "sighting_of_ref": "indicator--460247fe-6e4c-4eef-b6e4-8d1cca6d18ee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef842c1-4511-42d4-b5e7-2f3092c2dab5", "sighting_of_ref": "indicator--45b03e9f-2463-4970-9b18-98e26642da7d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675c7a52-87fd-49c2-8e55-f929a36579bc", "sighting_of_ref": "indicator--45b03e9f-2463-4970-9b18-98e26642da7d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51158844-1d33-4b11-8a8f-52b42319dc3e", "sighting_of_ref": "indicator--8a8da866-fab9-41cb-bfc0-ce8b2d7bbdd5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9b2ee6-af18-45ca-96db-66914adbbe58", "sighting_of_ref": "indicator--7cb5c4db-7c6d-400c-b0f0-41c40667a58d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30f4909-6acf-4e47-9354-4ec7e11d903c", "sighting_of_ref": "indicator--7cb5c4db-7c6d-400c-b0f0-41c40667a58d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e50baa4-d922-442f-99a1-afcbe6aab5e9", "sighting_of_ref": "indicator--686a4716-28e7-455f-addb-8e0da6bac105", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19568ba8-4415-4f73-a290-b041d1d69af6", "sighting_of_ref": "indicator--2164ad8b-93b5-4a04-8ac6-5389312f04f5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69cc5db-be10-4040-bed6-5720ecbba384", "sighting_of_ref": "indicator--2164ad8b-93b5-4a04-8ac6-5389312f04f5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a0d895-f2ed-4879-8f4a-19fef3916e11", "sighting_of_ref": "indicator--2164ad8b-93b5-4a04-8ac6-5389312f04f5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680ae2ed-de0b-4cc3-9783-7be57cf6d85d", "sighting_of_ref": "indicator--1f041113-1a9b-42b1-9648-42ee8d817913", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d25afe-0ca3-49a9-aec0-98ace37e04e7", "sighting_of_ref": "indicator--8c04264b-6ee4-4f4f-93ec-f641867cf9d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de32c94b-7288-4432-b44b-d40d25b30e78", "sighting_of_ref": "indicator--8c04264b-6ee4-4f4f-93ec-f641867cf9d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aaf9495-ad5e-47f5-8b44-9d99467ba2ff", "sighting_of_ref": "indicator--cf9283bc-f8be-47b5-bcee-912f7de45780", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb0cfbd-3756-40f6-bd82-550b28717165", "sighting_of_ref": "indicator--bf74777b-edb2-4faf-ae28-c77b2ad93d60", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41667d95-f6e7-4fdd-beaf-3bb8fdc14927", "sighting_of_ref": "indicator--bf74777b-edb2-4faf-ae28-c77b2ad93d60", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a02ee1-5088-4282-89f1-49ce86daa47b", "sighting_of_ref": "indicator--f1770949-a2b6-49eb-8ed7-7300765e9607", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe68a97-32c8-4e06-8606-05661858f115", "sighting_of_ref": "indicator--2b3c2b88-30a0-44fd-bdde-1100767db4c5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62dd0981-2882-49ab-85a6-2d531dd759b6", "sighting_of_ref": "indicator--2b3c2b88-30a0-44fd-bdde-1100767db4c5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d191b09b-fb37-4eb2-9e8a-8ef4a73e7324", "sighting_of_ref": "indicator--2b3c2b88-30a0-44fd-bdde-1100767db4c5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1ab6e8-8cb9-4951-84d8-74ccd367d12d", "sighting_of_ref": "indicator--fe07807a-e927-4f5d-bae2-7e8a34f815c3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de33995-f688-41f2-b026-6df18b89c9c2", "sighting_of_ref": "indicator--fe07807a-e927-4f5d-bae2-7e8a34f815c3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5ed636-bf61-412a-9ff3-ad5648c2288b", "sighting_of_ref": "indicator--6c403fcd-1133-4bdc-97af-7af056857643", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00298275-612d-4181-b4bf-66a88a324eae", "sighting_of_ref": "indicator--6c403fcd-1133-4bdc-97af-7af056857643", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d64f08-bb6c-46b8-b911-fd6179d55fe6", "sighting_of_ref": "indicator--f70e0d99-c602-408e-9a96-326f50890554", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494a918f-99fa-4e8f-a068-03ebb8f59a47", "sighting_of_ref": "indicator--2ba11f89-9f49-473c-93bf-7d3f94ba6308", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb70af61-614a-48e6-bdd8-2037801386f9", "sighting_of_ref": "indicator--d98b2cf2-b331-4ca3-adff-f86e95aea505", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaec2683-cbf8-42a6-8768-97ebcbb74920", "sighting_of_ref": "indicator--d98b2cf2-b331-4ca3-adff-f86e95aea505", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa571fd-e746-469b-800f-b95277345571", "sighting_of_ref": "indicator--7bc8ed28-c91e-4558-a2de-3770e1c650a2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2ff187-7cba-40d7-9431-50ce83456cb8", "sighting_of_ref": "indicator--48ae394e-d918-49b0-b9b9-c20edac5a0d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893e14e4-5ff0-4475-94ef-423aaa9b4915", "sighting_of_ref": "indicator--364805f6-e649-40a6-bb44-64555ae1c1e1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71a90a1-3dbf-4fcc-b15b-ec173a434a8a", "sighting_of_ref": "indicator--5b619af1-285e-43fd-be23-3fc33a265b0f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d7a8bd-023c-4b92-b8f7-137092cae257", "sighting_of_ref": "indicator--5b619af1-285e-43fd-be23-3fc33a265b0f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f5a421-fc6b-4673-8648-f57d48bfe255", "sighting_of_ref": "indicator--91f8266c-2981-4a4d-9665-6bb598b0763f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff37e130-300e-4c22-bee3-2021cf1d7bea", "sighting_of_ref": "indicator--543e06d7-5b7c-4aa2-b0a4-dc88ac0a3b89", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbc0a24-b3c6-41c6-8cf7-1e34fc30768e", "sighting_of_ref": "indicator--8338bbba-d90c-4364-a485-c7862c20a5ea", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f59c83-5e1e-4d50-83fc-afbafc7e1f4e", "sighting_of_ref": "indicator--8338bbba-d90c-4364-a485-c7862c20a5ea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e871cb7-ae36-4625-abb7-d295920b6f1d", "sighting_of_ref": "indicator--ac9fe11a-66bc-49e0-a46a-c44d0d75b7e1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994e2078-9856-46ac-9fdf-8757be4e68bd", "sighting_of_ref": "indicator--ac9fe11a-66bc-49e0-a46a-c44d0d75b7e1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad5e7c7-6b7b-4499-8cdb-2cbfa05a93cf", "sighting_of_ref": "indicator--0fa7eea0-50e9-47e3-ad76-82496a3162ce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e45906-1295-408a-bef3-88a6dc15d2bc", "sighting_of_ref": "indicator--0fa7eea0-50e9-47e3-ad76-82496a3162ce", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b107e5d4-0d7a-4ff6-83d5-c7f4aeeda339", "sighting_of_ref": "indicator--24f7a8cc-f58f-4c40-afcd-afa627491b3f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3007ae-3ee4-4a06-b936-cbc353f3e637", "sighting_of_ref": "indicator--520c1ff3-3f5e-46f3-9cb0-af7c80a51419", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b5e593-d8a1-49d2-991f-52746f6981a7", "sighting_of_ref": "indicator--6e5670b7-537b-4936-861e-cfac4bb311ae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8473fff2-6c41-4af1-b7fc-bf652e366921", "sighting_of_ref": "indicator--6e5670b7-537b-4936-861e-cfac4bb311ae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e08a60e-bb7c-4dc2-8308-ac303473ac54", "sighting_of_ref": "indicator--4abdf1a8-4bb5-4752-a711-155dbae93215", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ea7f73-4dc0-46fb-bbc4-2ebc237bb7a6", "sighting_of_ref": "indicator--583c8f51-18e2-4838-9f64-d16a12285ec9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05aabe07-2b6a-40fb-a68a-425834b91167", "sighting_of_ref": "indicator--81e91610-92f2-4824-ac1b-1004a2c9b32e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786e52ad-0d30-4e16-92a2-b6bdbed880d3", "sighting_of_ref": "indicator--81e91610-92f2-4824-ac1b-1004a2c9b32e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ceffe48-359e-4e7b-a4ae-ddd75d94678f", "sighting_of_ref": "indicator--fd884758-1ce1-4d6a-85ee-ba879e0dea1b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239008fc-a036-4396-9b9d-c1b474d0653f", "sighting_of_ref": "indicator--c5c709f9-f930-4855-91c8-9fed66f3d919", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bebfed6-d3be-446b-a536-937ff8ccf3b5", "sighting_of_ref": "indicator--c5c709f9-f930-4855-91c8-9fed66f3d919", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b5e098-4644-4a9c-a902-d663471908e2", "sighting_of_ref": "indicator--d77350e5-feb9-4a95-934e-996a9315ad68", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b872eb-e122-47d9-9c56-606d95245144", "sighting_of_ref": "indicator--d77350e5-feb9-4a95-934e-996a9315ad68", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d861bb55-45db-48bb-8d63-1907b2745133", "sighting_of_ref": "indicator--d77350e5-feb9-4a95-934e-996a9315ad68", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39410648-fd7a-475c-8693-6f37c93da25b", "sighting_of_ref": "indicator--04429c83-a1c1-467c-ae53-875a3c24e41c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e12bfa-1bbf-4e01-bfd7-219e7e588eba", "sighting_of_ref": "indicator--04429c83-a1c1-467c-ae53-875a3c24e41c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae12895-e1cf-4d08-832c-c1745166f011", "sighting_of_ref": "indicator--04429c83-a1c1-467c-ae53-875a3c24e41c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbd4510-e492-4622-b5f5-a7ffb2fc0e00", "sighting_of_ref": "indicator--5c5fa490-5521-4076-b414-1f69631a0533", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6edb08-5944-45a3-8813-1d9ec28512f6", "sighting_of_ref": "indicator--5c5fa490-5521-4076-b414-1f69631a0533", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51dbe65c-d905-476f-9433-58d4ac0c7a9a", "sighting_of_ref": "indicator--5c5fa490-5521-4076-b414-1f69631a0533", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8385750-00ce-4851-958a-450546df0ebb", "sighting_of_ref": "indicator--c3ff9a42-b41e-4d0c-b7bc-321e5a38eed1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2f0497-edeb-4aa3-8090-5fc416485019", "sighting_of_ref": "indicator--c3ff9a42-b41e-4d0c-b7bc-321e5a38eed1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2354445c-7e32-4bd4-9fc4-97c73204d20f", "sighting_of_ref": "indicator--c3ff9a42-b41e-4d0c-b7bc-321e5a38eed1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973dcb4d-a43c-444c-88a6-eef9399976cc", "sighting_of_ref": "indicator--462dee51-59ab-4255-9baa-747f46f14b62", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5828c8a-b64e-44e7-92a5-a0eec9a9b0e4", "sighting_of_ref": "indicator--462dee51-59ab-4255-9baa-747f46f14b62", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849ad3ea-9c16-49a5-a766-257ec03c5fe5", "sighting_of_ref": "indicator--462dee51-59ab-4255-9baa-747f46f14b62", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173a7c7a-a81a-4d88-942d-b35d8c409c29", "sighting_of_ref": "indicator--90e86c76-ec9d-47a2-887a-124657b7d17b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b63164-efa7-4d98-b60d-0f2179eac2c7", "sighting_of_ref": "indicator--90e86c76-ec9d-47a2-887a-124657b7d17b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534ca09a-1a3d-42ce-b87b-5fca610b8427", "sighting_of_ref": "indicator--90e86c76-ec9d-47a2-887a-124657b7d17b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6504fc-bd76-47b3-a710-c54fc1ef42ff", "sighting_of_ref": "indicator--45e45785-e338-4641-a426-30a03c0e7556", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8433244-b2c7-4c67-be11-6cd1451fee78", "sighting_of_ref": "indicator--45e45785-e338-4641-a426-30a03c0e7556", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce253fa-d9b1-4e4f-8815-385c7edfdafa", "sighting_of_ref": "indicator--45e45785-e338-4641-a426-30a03c0e7556", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07ff7fa-bc72-4438-83cf-8521bbd6e5e8", "sighting_of_ref": "indicator--ba49f4df-67fa-4863-a148-2c7970cf81f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d26f14-18b4-4536-a56e-00bc6a1379ec", "sighting_of_ref": "indicator--ba49f4df-67fa-4863-a148-2c7970cf81f8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157c5167-dab8-446d-9226-5b0f25c03c1d", "sighting_of_ref": "indicator--ba49f4df-67fa-4863-a148-2c7970cf81f8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d35e9c-8f1c-4c00-8fac-5a0e4c557104", "sighting_of_ref": "indicator--0e76b647-5281-4e85-ad71-62a4e3e370ab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9b77fa-edaa-4868-902f-f20536aecd31", "sighting_of_ref": "indicator--0e76b647-5281-4e85-ad71-62a4e3e370ab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63b1973-9e93-40c8-9e84-33627d3ff24f", "sighting_of_ref": "indicator--057b132c-6743-4dd8-80fa-3d22a4a394f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbafad7-278b-4556-885e-0383315d0ebc", "sighting_of_ref": "indicator--01a2e9b0-4c95-45a6-97c1-88a17ca6fe62", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d30045-e9cd-4345-bdbb-ca953b9f334b", "sighting_of_ref": "indicator--01a2e9b0-4c95-45a6-97c1-88a17ca6fe62", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc85b0d-d2fd-473b-80f5-854fddd64efe", "sighting_of_ref": "indicator--01a2e9b0-4c95-45a6-97c1-88a17ca6fe62", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca74e6ad-e83e-481f-b161-b3d3f8cd87f8", "sighting_of_ref": "indicator--0e4ae3c2-49c1-465e-92f6-bb9e0602b2ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f39e28b-a5aa-4da3-83e7-cc7194d5991b", "sighting_of_ref": "indicator--0e4ae3c2-49c1-465e-92f6-bb9e0602b2ef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ee8b9a-3625-48e7-a7e0-a47d0c2233c7", "sighting_of_ref": "indicator--d3fd486f-ed27-4ea8-954b-f505e98fed04", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237e11a4-d129-4476-9311-ec9f6a199c6c", "sighting_of_ref": "indicator--d3fd486f-ed27-4ea8-954b-f505e98fed04", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4e4bb0-786c-4fd1-8c50-5d3f27fa7759", "sighting_of_ref": "indicator--d3fd486f-ed27-4ea8-954b-f505e98fed04", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5348f3-04fa-4510-bd4e-8d0a891c79b1", "sighting_of_ref": "indicator--785c8900-155b-4bfc-bc34-b7209d1bd742", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d44be6b-caa3-4e68-8103-53f50d90e4ce", "sighting_of_ref": "indicator--785c8900-155b-4bfc-bc34-b7209d1bd742", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74948c03-d88c-45e3-893d-404e80c68427", "sighting_of_ref": "indicator--785c8900-155b-4bfc-bc34-b7209d1bd742", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60830971-bdfd-4da9-be38-2b1e128937e4", "sighting_of_ref": "indicator--766ccb07-bced-42fb-bfed-9be7a75b8f5d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95e4e55-081e-42f5-9a71-869c596da615", "sighting_of_ref": "indicator--766ccb07-bced-42fb-bfed-9be7a75b8f5d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f145936-5ac8-4d6b-9a99-e9c07316c68f", "sighting_of_ref": "indicator--aac563e8-86ed-4564-ae23-08d4f669ad31", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6f6fdb-49ff-4cf3-ad50-7efc6e0e8f9d", "sighting_of_ref": "indicator--aac563e8-86ed-4564-ae23-08d4f669ad31", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0419bc-8cfd-43aa-8a43-27d3817d192c", "sighting_of_ref": "indicator--aac563e8-86ed-4564-ae23-08d4f669ad31", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4f86b2-d1c8-46ee-bfbf-9616f6d69dfd", "sighting_of_ref": "indicator--c389aae0-ab1b-42b9-ba94-43a1e3051be7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb62592-cf57-4727-b64f-e605e927f57c", "sighting_of_ref": "indicator--c389aae0-ab1b-42b9-ba94-43a1e3051be7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e437eb-1c55-4dff-9337-a89d2603cb52", "sighting_of_ref": "indicator--c389aae0-ab1b-42b9-ba94-43a1e3051be7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78a5948-797c-4637-a201-b4efcd22a36e", "sighting_of_ref": "indicator--b1d9c441-0b1a-4da5-8071-1b02f33d1f14", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e345fe84-e3de-48ce-9f74-e27aa440a43b", "sighting_of_ref": "indicator--45c2a3b9-3d29-4bda-93fb-b02a8d820200", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b6abdc-6363-4f16-b38a-523b0ec059e6", "sighting_of_ref": "indicator--ccd0abd6-6068-4676-9d72-7a8fa05cd459", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78910c3d-b727-43fe-97ab-3690d0842f7e", "sighting_of_ref": "indicator--03d6cadc-09ca-4a89-b7bf-7a8f00c1928d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29325df-b501-4f76-886d-bc4807e8ab99", "sighting_of_ref": "indicator--03d6cadc-09ca-4a89-b7bf-7a8f00c1928d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470c8c8e-a472-49ec-956b-733d148ac90f", "sighting_of_ref": "indicator--03d6cadc-09ca-4a89-b7bf-7a8f00c1928d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c670dc46-1583-4e4d-afec-23d50eae497e", "sighting_of_ref": "indicator--26a001bc-0ee6-4df8-978b-571a1caa08a9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23534c7-a754-4791-9aab-8ee0eb9688a4", "sighting_of_ref": "indicator--59c00031-38df-4561-8016-7c9197bbebe8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78e8f5f-b81d-4f85-a924-1d9ce60c6966", "sighting_of_ref": "indicator--99f62db0-e293-434a-829e-06b182e1d421", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e64dc8-b766-49a6-9d4b-ac1f2443dd0d", "sighting_of_ref": "indicator--acb71fcd-57a2-42a8-b467-b40b28ccfe94", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c21042-baf0-46a1-bc8b-4a677a8a732a", "sighting_of_ref": "indicator--8668bf49-3d8b-46a6-bba7-e31b38b10e71", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37557c65-6f4c-455c-af4f-1c282eb48ed4", "sighting_of_ref": "indicator--61745ebf-d6b7-4954-b333-530c1941cd8f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236553df-836c-461b-b1b1-b886bc48b97a", "sighting_of_ref": "indicator--be0f2f63-20d4-4fd5-adf7-095150850867", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf23023e-cf87-4e49-8e19-8464cf28f160", "sighting_of_ref": "indicator--be0f2f63-20d4-4fd5-adf7-095150850867", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d30da36-0858-48b9-9ed9-d47835fb2767", "sighting_of_ref": "indicator--bec457a8-b7e4-46fc-81a7-650d6032cc8f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0538b5da-0773-4263-af1e-39eb58edf7df", "sighting_of_ref": "indicator--c6f01def-87ff-4b58-ac96-d49df6ddd1b4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862d4825-9521-4814-be4d-ffb91ef0856d", "sighting_of_ref": "indicator--61a12b18-35d1-4134-a76b-8ccdc75a1884", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73939f69-5f53-44fe-9830-392f483615ac", "sighting_of_ref": "indicator--1f6cf4db-4268-4bae-8456-298873a57774", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b79777e-021b-48c3-b4aa-6448d842526f", "sighting_of_ref": "indicator--d0b9fe07-0cb4-42b8-9945-a43b2ba810ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867c0164-3566-4e92-bef2-2574aee866ec", "sighting_of_ref": "indicator--d0b9fe07-0cb4-42b8-9945-a43b2ba810ce", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6009266-c656-4a07-9a52-9e4d2335df54", "sighting_of_ref": "indicator--9e050392-19dd-4b4d-a08f-2a6b76590788", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e08bf84-3244-400c-8b4e-afe7761a28cd", "sighting_of_ref": "indicator--b781ebb9-35b7-448d-b2e9-efdd7c968013", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea28c2b-1ec3-4101-b5cb-1566bbd9f424", "sighting_of_ref": "indicator--b95330bd-bd72-4666-a97c-e284edb63e86", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fed7735-f894-417f-bf6c-4ea234fffb45", "sighting_of_ref": "indicator--daa48d2d-fbcb-4b9e-be6f-25a7deb5f07e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e59b1b-8fe1-4d2a-831c-40bedeacd98b", "sighting_of_ref": "indicator--4e4935d8-a3e2-46e3-93d3-1de371d6d18e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec357a3-685e-4959-843c-56696691774c", "sighting_of_ref": "indicator--8b87147c-8102-4ed7-b3c9-926745b78cc4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5419141f-93a5-4d31-9c28-23bfa6fd4589", "sighting_of_ref": "indicator--d3d22ca6-28ce-415f-9f20-140f52770804", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed63a0b4-ab33-460d-b677-d9a605786c32", "sighting_of_ref": "indicator--8e00c879-613c-415b-8638-d92265eecb62", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9f8b24-dc80-4913-a61d-727689e8554d", "sighting_of_ref": "indicator--706b107f-33d2-4833-831e-370c712ce5e8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7601ef9-544a-4317-889a-a6055189e3af", "sighting_of_ref": "indicator--651f2dff-5b75-4c58-b68d-8117e13cae0e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06c8a61-f343-4712-98f1-0dec6fadd274", "sighting_of_ref": "indicator--e87deb6a-6a59-4d97-8a69-09793e0714c1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b2c89c-6f7e-47d8-aa2f-9f70e1f85d59", "sighting_of_ref": "indicator--b4c937fd-e39e-45a6-81e4-484102badf25", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4b7009-1e69-429f-baf2-b8dcd3af6afb", "sighting_of_ref": "indicator--936df916-15be-4f30-b5d2-24faee57162a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d6d53f-e8cd-4814-8d72-c324f643d0e6", "sighting_of_ref": "indicator--56d9e74c-9657-4c1f-923d-c956b7b8c602", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0ea0df-2107-453c-866f-3d9a275b4039", "sighting_of_ref": "indicator--086bd5a9-4cc3-4bad-8188-8966330cdf81", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e5c2e7-f037-49eb-8916-d3443ebddd36", "sighting_of_ref": "indicator--086bd5a9-4cc3-4bad-8188-8966330cdf81", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c1353d-b2be-4166-af9a-f1f3a19e47ce", "sighting_of_ref": "indicator--5a38ddb5-52cc-4759-acfe-33932ebb70f9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a3449b-998f-4fa2-8757-e3221cf388df", "sighting_of_ref": "indicator--5a38ddb5-52cc-4759-acfe-33932ebb70f9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d4c089-784a-4ead-a421-fe0a27736baf", "sighting_of_ref": "indicator--5a38ddb5-52cc-4759-acfe-33932ebb70f9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0ff1ab-b1c6-469b-98a8-d1447dde6819", "sighting_of_ref": "indicator--5a38ddb5-52cc-4759-acfe-33932ebb70f9", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a083557e-3d77-44a5-bf1f-1a207532f07f", "sighting_of_ref": "indicator--a82d1d50-22f7-4274-ab51-fe54f642e612", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc56ce91-ec63-4d11-80dd-9937e8e7483a", "sighting_of_ref": "indicator--a82d1d50-22f7-4274-ab51-fe54f642e612", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e6322a-d2ce-4268-891b-ca246b452e93", "sighting_of_ref": "indicator--a82d1d50-22f7-4274-ab51-fe54f642e612", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c3aa55-e8f3-4766-b97d-b82e3be0a240", "sighting_of_ref": "indicator--a82d1d50-22f7-4274-ab51-fe54f642e612", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbba9dd-ebff-4ccc-a53a-6b5e5143197f", "sighting_of_ref": "indicator--66d22f26-0086-403d-8f26-e571cd4ce928", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47b8c87-7478-46e9-ab13-198497c2867f", "sighting_of_ref": "indicator--66d22f26-0086-403d-8f26-e571cd4ce928", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2119a723-e49b-456a-8083-e38c365ec57b", "sighting_of_ref": "indicator--66d22f26-0086-403d-8f26-e571cd4ce928", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00884742-7149-4cc9-b8f0-18756ac4fe43", "sighting_of_ref": "indicator--88286650-cd5a-4d81-a4bb-eacfc05a5b17", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ba38fc-a1cb-4d92-a11f-7edf28a6f75e", "sighting_of_ref": "indicator--cf18226a-f297-4f06-86b5-3374ea0a8bd1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc9bd03-cee2-47b0-b9f0-632443aea431", "sighting_of_ref": "indicator--117b31de-8947-422e-83f2-04dc5fa8b61b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245af9af-5333-4509-beb6-561476f3a656", "sighting_of_ref": "indicator--ef63dddb-07e9-4b54-ae6c-195f22c3a140", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb17275-79ed-4812-9a71-15affd152ebd", "sighting_of_ref": "indicator--ef63dddb-07e9-4b54-ae6c-195f22c3a140", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614e84ef-fc16-4b45-b654-02cbbe5ae8f2", "sighting_of_ref": "indicator--aeef7aa6-476f-4748-a8c1-8d485b847fae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e495911-6ebe-48be-a1a2-54e64315a02d", "sighting_of_ref": "indicator--fe64c3a1-71fe-4624-90ee-89010d292648", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63ab20d-ea49-4b13-b606-efddff215ac3", "sighting_of_ref": "indicator--86d05b02-1c76-401b-a542-10d7b2a99cb5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622712e5-9206-4fc7-b83d-510754e33109", "sighting_of_ref": "indicator--3a59951b-acec-40fa-9d47-6c006d73d615", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b05f9b0-3e13-4514-af2f-080d68fac25b", "sighting_of_ref": "indicator--4c2c7bb1-06fc-4434-95d5-66e12e8965d0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e33b262-c468-4d2a-ae63-054a3cd2a627", "sighting_of_ref": "indicator--b5d8f0ac-bc50-4737-8dd4-d07abccffedf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69365dec-2140-42a2-b55d-a9444d9f837e", "sighting_of_ref": "indicator--84f7201b-11ae-4343-8aeb-78297abd3e0a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e22804-f7ed-4ae9-8822-3454bb432411", "sighting_of_ref": "indicator--35d3f0b1-1315-42e2-b84f-06cab6ab6e82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef77a45c-cff9-4ac1-9efb-5c70ffbfb83e", "sighting_of_ref": "indicator--3bf3dbe3-570e-440f-8d77-d41374761680", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3d8de9-8088-40ab-a306-74c8478e264d", "sighting_of_ref": "indicator--3bf3dbe3-570e-440f-8d77-d41374761680", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bcb5659-aa99-458f-81b8-ce609ff5184a", "sighting_of_ref": "indicator--1cf3d2f2-273a-4b59-a011-9d6d2b8b6b6c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f510e7d2-6ebb-4b05-98cf-33f76229df35", "sighting_of_ref": "indicator--7fff50dd-d67a-4900-acb2-90d3c0075fc4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd78fec-c0f1-4c63-a608-62ad8ad74b3a", "sighting_of_ref": "indicator--03ab9a11-f2f5-45d9-8e52-bd59bafef507", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc8b50e-35bb-4b10-9ab7-12a4f937bb75", "sighting_of_ref": "indicator--d9e0b59c-5328-4757-9682-32ec611b36f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cedade-7077-4c47-a4db-6488320a9ae4", "sighting_of_ref": "indicator--efd4c2bf-ce41-4d70-acac-e5184a4bb135", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225dbbe6-4203-4a77-afff-a7869be7d180", "sighting_of_ref": "indicator--944afbdc-388e-457f-9e2d-4704bd7373e2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e6fa55-067b-436f-8eef-ffe83931a6d8", "sighting_of_ref": "indicator--2477fcae-8f09-4d24-a2ac-9e1da63a2e6d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2fbc84b-f85c-4f64-a353-0f9698273d0c", "sighting_of_ref": "indicator--7827b1c8-2d66-4e27-a3fd-1ebd8883bad0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d2e410-1fc1-47f3-93d7-e6e3f980138b", "sighting_of_ref": "indicator--81259331-e3b7-4e0d-9dc3-edaf252cbd67", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8406b30-856b-45c5-a83e-cce107962b6d", "sighting_of_ref": "indicator--88facbd4-db31-4038-96a4-45ca7f24d12d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92edc7ce-354b-49bf-90a6-f3382f59473c", "sighting_of_ref": "indicator--88facbd4-db31-4038-96a4-45ca7f24d12d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d14fac-f34a-4edc-aba4-59a04b4af2ce", "sighting_of_ref": "indicator--51a6d39c-1071-48a5-a335-e06eb0a8d63d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf1974a-7ef6-44b9-8112-3a6945e3c931", "sighting_of_ref": "indicator--e421313f-d599-4e5f-86fd-26038762e5ea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d0a961-dfa1-4652-b584-6b5a6de66351", "sighting_of_ref": "indicator--30fde035-746e-4453-897d-cbe9f708cfc1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f14487-4c3a-49bd-9215-a638422ed399", "sighting_of_ref": "indicator--2c1d6214-d839-4fa4-b29e-33da6702397f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f0bbf4-47e0-47cd-b50e-b2bff940281d", "sighting_of_ref": "indicator--f72c1e53-c3a2-493f-a755-0ee3231191c6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bab324-64f5-42f2-8650-2513b2efc31b", "sighting_of_ref": "indicator--bc73e281-713d-4f35-9b3c-31ea001af720", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1655ed-23a9-4726-be9f-d125d429ec9c", "sighting_of_ref": "indicator--4e3bd178-718f-4e31-bdc0-7bc74481fd4f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fb8ed3-1db9-4c38-8e76-c0a02a84eff5", "sighting_of_ref": "indicator--d0cee009-f531-4988-baca-b8b71b0f184d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec2091a-c6ee-470d-a839-1fb3df8dd812", "sighting_of_ref": "indicator--d0cee009-f531-4988-baca-b8b71b0f184d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72323388-da7e-4447-a3ce-a9b52a1a7403", "sighting_of_ref": "indicator--1d38c753-d85d-4100-b1ba-8d6a969843c3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36f4705-f549-4449-a422-ae2c1ffff789", "sighting_of_ref": "indicator--8ba45166-9d28-4279-9ecb-689a40a0aa1f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9543bff7-4dfd-4702-82b6-e1ccbf88e6a8", "sighting_of_ref": "indicator--fbdfd862-ca93-49be-b0ab-714c2a9b3d4a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5909c6a2-299c-4a50-b741-9bf7362e0dbd", "sighting_of_ref": "indicator--36dd867f-9eda-48b5-89b1-a704c3ed1b02", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313f2605-b47b-4317-bd02-1a1d3ab1b96c", "sighting_of_ref": "indicator--724fa564-9f46-4fca-98f9-5916af26a7e5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf003df-2a69-4af4-b007-aa0004d2e581", "sighting_of_ref": "indicator--fb42ac8a-e22b-46d3-a32f-0535235a6a76", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc99d23-6ed5-48b9-a343-a8ddd6ca63f7", "sighting_of_ref": "indicator--fb42ac8a-e22b-46d3-a32f-0535235a6a76", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372026a3-3185-46e4-80fb-5f5c6d84bf5f", "sighting_of_ref": "indicator--c8d63e4f-6f02-430f-8455-187aae3e0740", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e82165-2384-4eca-9869-15bffff48eda", "sighting_of_ref": "indicator--c8d63e4f-6f02-430f-8455-187aae3e0740", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901d65f9-c0c9-47a6-975c-a1315d076c54", "sighting_of_ref": "indicator--23f4269f-5d9d-4b7b-abd9-ebed1b4428f1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ec88c2-b2f2-4129-8adc-a93e4cd8bf27", "sighting_of_ref": "indicator--23f4269f-5d9d-4b7b-abd9-ebed1b4428f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd2291a-518f-4c04-8e7c-70003b0dcd47", "sighting_of_ref": "indicator--1f07a731-b0f9-4261-903c-ebbbe4768625", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0ca020-ad98-4b61-b59a-611e0bb7d3d0", "sighting_of_ref": "indicator--53f8b3a1-0b5c-4b81-9bd6-e0640465c39a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a59d69-d41c-4f2d-8fa5-5af0b672729c", "sighting_of_ref": "indicator--18e97b92-d8b8-46c6-94be-36943ec905f9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99aa78cf-64a1-4364-96d4-ecfe604f4e1b", "sighting_of_ref": "indicator--59b7720d-7d0b-49b0-954c-868ea567e18e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3a5517-fad5-4f04-89b1-d576b250b816", "sighting_of_ref": "indicator--17504300-ae26-43af-ae12-891a2bdd6f13", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a005a30-22ce-4ba3-96c2-9788fc924327", "sighting_of_ref": "indicator--005de425-8c08-47f8-adce-5d12dbcf8f60", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4607568-a4c7-4bf9-a454-b3ed683bdc0f", "sighting_of_ref": "indicator--be4d065a-9af0-465b-98de-7a26e291fa85", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd862ee-3726-4de4-8652-47ac6ae2df35", "sighting_of_ref": "indicator--78612445-03ce-4785-8224-8ce758f800f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8372add3-158e-4504-8d3a-d47596f550b2", "sighting_of_ref": "indicator--78612445-03ce-4785-8224-8ce758f800f4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1440e7-0fa1-4dc4-96ea-3833aeeb006f", "sighting_of_ref": "indicator--75f952d9-29e4-4861-ad5a-5cd7951464ab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d944add-4507-43a6-97c0-9c7e4be8eb9e", "sighting_of_ref": "indicator--f732e4cb-4640-4af2-9fb2-2bf9068a8763", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae12895-7b1e-45ef-8e15-13f119731f20", "sighting_of_ref": "indicator--cce729cf-4880-4745-8af1-74d53a6f1396", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5ee580-e19d-47c5-9e0a-7777dc059622", "sighting_of_ref": "indicator--733b1bd0-f39f-43cd-8e6f-b1178267ee65", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58b4b63-bdc0-4cc4-ac88-d82809e59412", "sighting_of_ref": "indicator--46fec94a-b18b-4a99-8001-a7c4d5b2ad83", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435771c8-e9f8-43ae-b283-ad98158c527b", "sighting_of_ref": "indicator--5b9ff5cd-8f3d-445d-bca9-2f27ee752ddc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e6fd92-ced6-478c-817a-635a910c117f", "sighting_of_ref": "indicator--66497916-b2d9-4331-8cf3-e09a644d4f3b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b06e29c-a61c-4d93-a00e-22cd8421ac15", "sighting_of_ref": "indicator--3a01d26b-fe35-4a7c-9a70-cefb77880486", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc60c44c-036e-4b94-a07d-c87b8e26f926", "sighting_of_ref": "indicator--6feb0ed9-2c98-4dbd-a463-83d43277e91d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22240960-a00b-4d4f-86c4-8952cf960567", "sighting_of_ref": "indicator--e4fe83f2-3754-4740-8b9e-0206fb466b60", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9499f810-bd2e-426e-bfd8-e464068682b3", "sighting_of_ref": "indicator--8441d581-06eb-4464-99a0-6714e40f1e6c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ad2018-816f-430d-973f-ed86d6a7334b", "sighting_of_ref": "indicator--eda5ad36-d8e6-4ce8-8826-6dad8340b64c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1771fd52-f828-4796-8e50-bd9e50367b49", "sighting_of_ref": "indicator--474703da-f588-40ab-b3ee-a7ba1aab4abf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e69d5db-206c-4228-9d86-ff4a9b2a35e8", "sighting_of_ref": "indicator--474703da-f588-40ab-b3ee-a7ba1aab4abf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063ef99d-5552-43db-adc9-7355a30be872", "sighting_of_ref": "indicator--47fb06dc-45b2-42e7-9d06-739f6fbb8e6f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49844bc6-67cb-487e-9b80-a1f2b4cd3f27", "sighting_of_ref": "indicator--47fb06dc-45b2-42e7-9d06-739f6fbb8e6f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66b05c4-c5db-49f6-b8a1-801c0f03b58c", "sighting_of_ref": "indicator--ea6f18cf-9097-4cd0-b7c2-8b8cc2d34778", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69761508-3ab5-4e22-8c2b-fac12cc1ab9e", "sighting_of_ref": "indicator--609f160b-929d-43c7-83f0-8416dd341c1c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9720121-a530-4de2-b5e4-05f6d3e53935", "sighting_of_ref": "indicator--b43eec82-cffd-4de6-810c-4fd0dd03f1c9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee0abe2-2761-4d4b-bbd2-eccaab9b9f2b", "sighting_of_ref": "indicator--5c721469-3d37-4d19-bff5-f69955484f10", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf0b4e9-6354-4243-b82f-c4f0b1f766aa", "sighting_of_ref": "indicator--5c721469-3d37-4d19-bff5-f69955484f10", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806f665b-c346-4225-8292-c7a15cbab67a", "sighting_of_ref": "indicator--5c721469-3d37-4d19-bff5-f69955484f10", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77739dc7-4480-4856-ac0d-179db51dce7f", "sighting_of_ref": "indicator--e559ca6c-c22a-4f52-b364-a898b920263a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925181fb-2ff1-4a73-9d81-48fe052fa30c", "sighting_of_ref": "indicator--49776d21-35fd-4786-ad46-11504c5f15d0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7760954-ae4c-42c6-b009-e48c142ae924", "sighting_of_ref": "indicator--fd7a85e9-f8fb-4743-9b74-6074dad9717c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3c3dc1-aebe-4188-960d-8c1f069cae04", "sighting_of_ref": "indicator--4c177976-7eeb-4c6f-82f4-19ef6a7fae1a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adba5bdc-efa9-41a0-b3a6-c99ea4a42a14", "sighting_of_ref": "indicator--10100437-5d96-445e-a743-4b100b08b06c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b625321-3250-4ab8-a0c9-fd9cd0c02c55", "sighting_of_ref": "indicator--dd40eda0-6aa2-4e47-9b76-0f8e4f5fabb8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7ded4e-3f38-48a1-94db-34045f6ba787", "sighting_of_ref": "indicator--28748851-9920-4ec3-b7aa-a6fa500d2d37", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463304cc-7d80-4bba-b133-870574342eea", "sighting_of_ref": "indicator--5d2438be-3825-494d-802b-da99682d0e81", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47aa2d07-cbe3-4b89-a07f-43b4ba511c29", "sighting_of_ref": "indicator--71dfc2d8-04a2-4595-bb60-d348ab0b14b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06119997-5b79-4da7-a3ef-62b6d116674f", "sighting_of_ref": "indicator--cc55ec4e-aa02-4479-9f60-e5d4293edb45", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66425a00-cd6a-41b2-8540-753a72122027", "sighting_of_ref": "indicator--78bb1b66-5a72-47e0-a341-48bd964d6e10", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4879b134-ec8e-408a-856d-570fc5e0756a", "sighting_of_ref": "indicator--78bb1b66-5a72-47e0-a341-48bd964d6e10", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54348eb3-b63d-49c8-ae07-bc3bcc11a5f1", "sighting_of_ref": "indicator--d42989c8-3899-49d7-af1b-ae95eadd7ea8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf68399-d4e1-4796-8498-35819fac9f72", "sighting_of_ref": "indicator--5bdcd47a-61be-4c2d-8226-63ba5a33f50d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59863a49-094f-4dee-9b8b-128f3594ef83", "sighting_of_ref": "indicator--19551a88-9ad9-45a7-ad94-d74fc4ebec86", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a60aa36-ac13-4230-b30f-e67c3067a715", "sighting_of_ref": "indicator--36cb2015-c4c8-47b6-bc66-5cc336abf194", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838088fb-f739-4021-a178-f06bf29dd3b8", "sighting_of_ref": "indicator--cdd8c611-366c-4824-bb7e-bd9361820882", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1b9f7d-3c32-4ba8-9d3f-425caff5fefa", "sighting_of_ref": "indicator--402b3cd4-5ce5-4e2c-a9a2-f7c0d63deb32", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075ddb9d-d643-439a-bd63-95b194bf530b", "sighting_of_ref": "indicator--ef495043-4291-4673-9850-5062fb93b8eb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad43c73d-2c1b-42c2-b7c8-a1037128abfc", "sighting_of_ref": "indicator--531a0a71-1c2c-4eec-9bdb-2137899a787e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8c74b7-9dc3-4965-b0a9-4355847a01d2", "sighting_of_ref": "indicator--531a0a71-1c2c-4eec-9bdb-2137899a787e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ec1d0a-ff23-4f59-bd6f-47a5bbd29b13", "sighting_of_ref": "indicator--20fe97c3-f11a-4aaa-bd1b-a454268bf185", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52b098a-55e1-4dde-b5a0-b6dac1673c37", "sighting_of_ref": "indicator--673f366b-cf2e-4385-9d5e-23a927e9ed2b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0fa0bb-48f3-4115-b051-a78ae456bbca", "sighting_of_ref": "indicator--9e6f22c6-d80b-4a8b-af52-8ed55f7eaa7b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec04287-0701-4b4b-bf51-4e9d26c18511", "sighting_of_ref": "indicator--1e627a0f-c3e5-4764-b571-8ec0c43ec035", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14111335-31d2-4b00-8dde-555311147677", "sighting_of_ref": "indicator--b4841ee8-ebf4-4249-b0d9-695a6eca069f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ef79ba-3675-4549-948b-aa7fad2e3dc0", "sighting_of_ref": "indicator--ae43fe80-efd2-4f91-a0f8-1b2a892707d6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ddb3f1-104a-4c5f-968c-c1d0000b5f9e", "sighting_of_ref": "indicator--b034f36d-a25c-41b7-b7fa-44f194356e69", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65b55ab-c8a9-45c6-82e0-2c74ef10e650", "sighting_of_ref": "indicator--36444c77-2ebe-45b2-a6c4-7a5d090a1be3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d13ec6-3091-42be-9ad3-99b501c9a5a2", "sighting_of_ref": "indicator--c60b6184-a92c-431c-9ec3-b266e675013a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb105e61-bdae-4b10-8a6f-daf8ac4da1e1", "sighting_of_ref": "indicator--c60b6184-a92c-431c-9ec3-b266e675013a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271c87d5-fde3-43a7-9256-159b98f5c776", "sighting_of_ref": "indicator--49d2bc5c-589d-4593-9563-6235c083bfbb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba636d19-15f2-41e7-9181-ef5c6c69d9ee", "sighting_of_ref": "indicator--39594b7a-8de5-4b66-ac00-d552df4210f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3058be51-0025-4a7a-9f0e-57584e9cbdc7", "sighting_of_ref": "indicator--9ad56256-21ec-416c-9f5a-492fba57f79c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd90beb2-afa3-4711-92fa-4b64a63b8862", "sighting_of_ref": "indicator--ec5ce1cb-f6d3-4f66-ac96-055c657aa694", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755f2486-425c-4ebf-be10-e0168ca01f60", "sighting_of_ref": "indicator--e5d7eb32-dbd9-473b-991f-7ff4901bc6c0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0979aab-18d5-44e7-83ef-2e25eb660c7a", "sighting_of_ref": "indicator--656d8dbc-0dfe-415d-8a1c-d9e147bc0098", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a561bec-983f-4471-ad77-5a11f80c99fa", "sighting_of_ref": "indicator--d5703ae1-a5f5-41c8-9ab4-94b051a9c26b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cafb785-4813-4e53-b27c-3abb725b8c8a", "sighting_of_ref": "indicator--4ff8e753-fce5-4ff0-a771-4afc25c23c9e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7e4ab5-a8a1-4251-816e-369e0f420815", "sighting_of_ref": "indicator--4ff8e753-fce5-4ff0-a771-4afc25c23c9e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b43a78-01d5-467d-84a8-ed9a54012e09", "sighting_of_ref": "indicator--a610c449-f7a7-4f7e-80c4-fd8e860afca7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14791ab6-2f0c-4033-9251-e1aa5f3e4684", "sighting_of_ref": "indicator--c9b084ed-ba87-4e58-9a2b-1d6b88cf7634", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0088b6-d429-4cbe-b59a-1217b40e6ba7", "sighting_of_ref": "indicator--d87e0b6e-2b7d-4379-99fd-f1493d917a43", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510acc46-8eea-4d82-8578-456db308028c", "sighting_of_ref": "indicator--d7530cd3-bc0f-4669-881c-7043e0c22837", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aca6e68-df4b-4dfb-aea8-ef455285066a", "sighting_of_ref": "indicator--7b758c7a-bf58-47fc-b12f-7cb05aec2774", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adb21fd-c04b-4941-ab2f-df1c58da252d", "sighting_of_ref": "indicator--62f175ab-d15e-457e-828f-7a294e01afae", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2278d1-71fe-4e8a-908d-14ed89e3a147", "sighting_of_ref": "indicator--96b78a60-a3da-4a39-a995-d44a1ba3bac6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998afbeb-fdb3-40fa-974d-7f1733e172eb", "sighting_of_ref": "indicator--f2949a91-3af3-4723-b43f-b4d9ea4549cd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414ae2fc-ec79-4299-a042-7b88a1f4f645", "sighting_of_ref": "indicator--f2949a91-3af3-4723-b43f-b4d9ea4549cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefb9765-aa1f-4c2e-afe1-0c89074b876a", "sighting_of_ref": "indicator--ac7dd9a0-46fe-4021-b093-9b01de27469a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1739d6-8001-4178-bb17-ce7c833d37f0", "sighting_of_ref": "indicator--459e9db0-9e99-481c-96b5-3599e77dd2f8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefa7427-a592-4873-8a12-f1eb136e1f86", "sighting_of_ref": "indicator--3000aaad-4e01-41f8-aa81-5db78d4c4e1a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8dd0aa-5e3e-4e42-b52d-edf6c8110af4", "sighting_of_ref": "indicator--3000aaad-4e01-41f8-aa81-5db78d4c4e1a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e719761e-71ec-446c-a92f-ecc3a67fc9cb", "sighting_of_ref": "indicator--060c48dd-411e-447a-bd7b-0ee2fa286981", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c987dd1b-958f-4f86-a7bd-bba0aa26771f", "sighting_of_ref": "indicator--c37ff75d-50d5-452e-b985-8b8f8e35620f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60b9a4e-a0a3-40c3-bd01-92d19310439c", "sighting_of_ref": "indicator--6d09b818-85b9-406f-b7f3-3b16558826b5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23b7218-dfdc-492a-91f6-bc4db4cf9627", "sighting_of_ref": "indicator--4e87073a-6cec-445d-9967-636673f4deab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37d6764-39ba-49a9-8d65-245af2783769", "sighting_of_ref": "indicator--cee28f15-49ac-43cf-b90e-53548d5c0836", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6462c5a6-bb69-4628-905d-8dfa609fa376", "sighting_of_ref": "indicator--d74498a2-658a-405f-a047-85b25a285447", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415a0636-d373-4491-9605-1c4decf00997", "sighting_of_ref": "indicator--970f143b-848f-4e75-ab79-cacae4002d5e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f4747c-edaa-4095-a05f-9d6b18bda5e6", "sighting_of_ref": "indicator--970f143b-848f-4e75-ab79-cacae4002d5e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f91dd4-df58-4883-bf83-fb9baa3a5408", "sighting_of_ref": "indicator--a62d67fd-66e6-4aa0-b068-ce845365af7d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b226e3-a70c-4f7f-89ff-aa73e07c3ddc", "sighting_of_ref": "indicator--627fbeda-6961-4fa6-b42f-cdfbf6b0aa22", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59620f9-522a-47f9-b6b3-7494f3a01388", "sighting_of_ref": "indicator--de781286-a6de-402b-add9-3fb0a4050e07", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ede4d2-3bff-49d2-89cc-0c3e3434db81", "sighting_of_ref": "indicator--ef079996-d96e-4648-abf3-1575a68194bf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7d472d-d56a-426d-a7de-9b5c7f389722", "sighting_of_ref": "indicator--52a11715-03bf-4014-920e-237ed7f6101e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246efdf9-4c63-47bf-9333-8957d3d16127", "sighting_of_ref": "indicator--581ee6db-0268-4464-b6e4-a44ab142d3bc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae21f766-7832-4aad-bf67-d72e3c492f77", "sighting_of_ref": "indicator--7ded6f02-7eca-4843-9484-39a7667cb006", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fb9115-503b-4c01-a15e-5b80f5f83bf5", "sighting_of_ref": "indicator--5fffdd11-80de-4b52-940c-627e1e3ae2d3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74e60d6-7cb0-4e1e-ab55-92d2f0acc4fb", "sighting_of_ref": "indicator--92033a9c-0594-4ece-81fb-08e03d7be0df", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab540bb-1e7c-4fb2-bc86-01e86904f0ed", "sighting_of_ref": "indicator--c370e87a-ff55-4c7b-80bd-c5715196806c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77e1059-18b8-42af-80a3-86147bdd03e8", "sighting_of_ref": "indicator--b3fa1755-5251-4902-86db-bff93199b400", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe638e54-e8a4-40eb-a59e-4be595c92f64", "sighting_of_ref": "indicator--17295ee0-5b9b-41d2-b2fb-1fa81ea35f92", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24712669-18f4-42d5-be21-085f6263aeb1", "sighting_of_ref": "indicator--1eec9b70-2934-4869-9931-6f28f602d8df", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f213935d-418a-4835-acf5-87f1a2681c1a", "sighting_of_ref": "indicator--106c38cf-6c03-490c-8f4f-3bddc6f43c2b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5715e68a-27b2-4695-bf82-42c7b56bafd0", "sighting_of_ref": "indicator--106c38cf-6c03-490c-8f4f-3bddc6f43c2b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99fab59-4e63-4b3c-b7d3-6d6a796400c1", "sighting_of_ref": "indicator--9e8ae825-7339-493d-be07-10d71db96fd1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def144bf-3ea6-4b39-a28f-ff5a0ec75fde", "sighting_of_ref": "indicator--8e1a6f98-953d-4140-a36a-bb0960bbeaec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1f5aba-3902-4cb4-9bbd-9065bee6ddd0", "sighting_of_ref": "indicator--8e1a6f98-953d-4140-a36a-bb0960bbeaec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e856cf46-78ee-4513-9c16-d8ca09419e2b", "sighting_of_ref": "indicator--a8a9860d-83ae-4c33-9ccc-00723c43aa23", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df7aa5a-c83a-4d3d-a0ae-d39aab6fe142", "sighting_of_ref": "indicator--a24d52c4-3372-4f9d-82e0-393467e6e8e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48beb754-d870-4ccf-8af6-26d4a08c5cd0", "sighting_of_ref": "indicator--29e8c8c8-d2f9-4a97-9713-1a8f33c6d968", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbd4399-e1ea-4b1f-8e6a-5f61833e2aab", "sighting_of_ref": "indicator--8ebd8f35-c332-45e6-960d-e8b0349770d5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ea3f5b-5ce0-4960-bcff-55258e42a20d", "sighting_of_ref": "indicator--3b6a751e-c5e7-40cb-b781-56fef397bed2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0b48e1-b529-4f1a-ba01-305fd5acc1bc", "sighting_of_ref": "indicator--7b0a72a3-a92a-4f54-a7fb-924be19cef94", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90f8d60-685c-4dec-a863-661137a1822a", "sighting_of_ref": "indicator--fdf2ad34-927e-4066-95d4-d6f816b8ee50", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d386d477-a64c-48e6-b4bb-7bae46de3691", "sighting_of_ref": "indicator--b52f2808-7500-4ecf-8228-19124d9567b6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb263891-1fc3-4c23-b2a6-c524b97bc0b3", "sighting_of_ref": "indicator--b52f2808-7500-4ecf-8228-19124d9567b6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89783826-95ce-4dbc-9c13-b8d4db73e2d1", "sighting_of_ref": "indicator--eb14c709-049e-4136-9b47-00012632e591", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d75ced9-6aaf-47d2-939e-dae712de2fbc", "sighting_of_ref": "indicator--4b35cbc1-b77e-4f2d-be89-7bf7f9eeb858", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db252349-50f9-4ef8-af9c-6dbd96fa4f35", "sighting_of_ref": "indicator--0eb6f0a1-56e2-487c-a753-5df830162dc5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41f6565-7f03-453c-9317-eb9f3d00708e", "sighting_of_ref": "indicator--7122b39f-2875-47a8-8565-9cda3bae8374", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205379c3-4591-4959-8d2e-f2da1a3ec711", "sighting_of_ref": "indicator--7b93937e-43f1-4130-8a37-2034ce63d21e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10c12c0-c341-4b85-9bca-10e5d44bed07", "sighting_of_ref": "indicator--fd6197b2-4a1d-4e66-9dad-931f2b99adbc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011a01ce-e262-4837-98e9-eda3f7497722", "sighting_of_ref": "indicator--42fec8e9-e2f5-4969-b1dc-cd07ddc3d16e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17dc26ed-e9f2-41fe-87fb-3ee6aab2a856", "sighting_of_ref": "indicator--b7df5f7a-096e-4a3b-bde3-c3de6846c684", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c880d299-6cfd-4ff1-a6ff-fa1d3a395596", "sighting_of_ref": "indicator--012de7c0-7c69-48e0-8f98-6c850095f3e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdd8f51-3827-496e-87a4-cf1a4a64d9bd", "sighting_of_ref": "indicator--1b7cf7b5-4d9f-4b41-87ac-7502371b83fe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f8100e-143b-4681-8898-e85f0b1345e7", "sighting_of_ref": "indicator--1d22977e-33d6-406d-a7e9-1a6b67263d83", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6cccc5-0210-4f85-b61b-6594f9a48915", "sighting_of_ref": "indicator--6c4b3818-56ae-47c6-a355-2a7bde5b4d25", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13812058-4838-463a-9f93-9d5c6ffb70c1", "sighting_of_ref": "indicator--27e760fd-4642-4626-b8e5-76391f77cc6b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f38d6c4-2d29-4f82-a734-3d4d3be55aa5", "sighting_of_ref": "indicator--b992efc3-efd2-4069-86ee-d8dd604c1ebc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853e982c-ceb5-41f0-8e82-769e3188a9bb", "sighting_of_ref": "indicator--b6319f92-9c80-4f34-8f97-822b6956194e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055ef25c-4e17-45e7-ac52-5d39093df6c9", "sighting_of_ref": "indicator--40cb3d0c-cc07-4f78-8cfe-829e434d2b85", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bed086d-68b2-4ed0-8f3a-dea59ade4fcf", "sighting_of_ref": "indicator--40cb3d0c-cc07-4f78-8cfe-829e434d2b85", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5dd8ed-170c-4fb8-be62-4f7a75c1c664", "sighting_of_ref": "indicator--78660c93-37f8-4240-b264-e93d4cb7b332", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a699de6-2d51-47a9-8350-e751049a745e", "sighting_of_ref": "indicator--91b57301-95d0-4d9a-869b-3b2068ffee73", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eda0d82-3c3f-4464-b82f-6971c44d3120", "sighting_of_ref": "indicator--b1a64b01-ebbd-4926-879b-ec821c516cf2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81388fe-5838-4e40-ae97-56ffc9107594", "sighting_of_ref": "indicator--aced61ad-bf97-4bea-815e-11b7f5daba7b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cfa8fa-6d9b-44ea-be29-114a91df55f3", "sighting_of_ref": "indicator--d887580f-f1eb-411c-b101-290465e08a8e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa9116d-314a-4749-8e95-289bc4c5db85", "sighting_of_ref": "indicator--be15722d-daaf-43cd-a7b2-328dbf83fcd8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24ca2fd-f1bd-47e2-a875-a7ac5b9d9700", "sighting_of_ref": "indicator--252464e7-a23c-4cf4-966c-177f13d13184", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f60413-f1c3-4aea-aece-b580f35292fe", "sighting_of_ref": "indicator--c3a56320-11d7-4ffa-96dc-123ba6afabe6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b349ffa-4952-4a44-9e7a-c2ad606ad3b2", "sighting_of_ref": "indicator--5900ab94-a109-4311-9c0e-5557711410ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a340a127-5c3f-4196-ac54-da3ea93192d7", "sighting_of_ref": "indicator--93baaffd-c36b-44e9-88a4-86224ad87958", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0978e10b-195c-4e70-9872-9501683a43d8", "sighting_of_ref": "indicator--fe5c471d-48b5-4ecb-9abf-67c6914b18e1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a25dad-7cee-4326-a912-854bbc01a438", "sighting_of_ref": "indicator--d9f3cc1a-bd92-4499-a87c-d5555c379bd6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42259eeb-7221-4955-a2c3-1bde1974c755", "sighting_of_ref": "indicator--986eeb48-3eea-45e8-a1b0-76ba3c9100b9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76bb8cfa-566a-4133-a2cc-bd869d95b68c", "sighting_of_ref": "indicator--cc854c4b-9f1d-45aa-a6a7-b3b43b4f4fe5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99e3ef8-8d80-4dd3-beae-208787a4fc6b", "sighting_of_ref": "indicator--7deeb656-700b-4944-a414-914ec55f5a04", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014075a4-9a99-4301-bd24-445569fdd412", "sighting_of_ref": "indicator--71b0d5b7-4617-41d5-87a2-f53f7fbbd91c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401e04c2-455d-4246-867e-5d155ada7fc8", "sighting_of_ref": "indicator--71b0d5b7-4617-41d5-87a2-f53f7fbbd91c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c51d6d-3e21-4a94-990b-74f482d6c974", "sighting_of_ref": "indicator--3364945f-a1a4-4ded-afdd-dd049516d220", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5af24d1-9b45-4b5a-95a1-ae3be2bfe7a5", "sighting_of_ref": "indicator--b5d7a443-d77a-4506-92cb-f0fe1b1ce1ba", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98456299-0dcf-41f3-aba1-2da67ac2e041", "sighting_of_ref": "indicator--b5d7a443-d77a-4506-92cb-f0fe1b1ce1ba", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cc0922-d57b-4773-90c8-1986e94fc13c", "sighting_of_ref": "indicator--06b6a9d0-e4b6-4593-b023-79bc32802e7a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a3eb2c-a32c-4e25-bbcf-38bb690624e7", "sighting_of_ref": "indicator--f9f64168-18e1-4471-b985-524bcf861565", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fbf433-7aff-4610-843b-4bd5f28e31f9", "sighting_of_ref": "indicator--607d386b-54d5-4350-8e6d-44cfa5e14550", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf5670a-0aad-49ac-a9a2-7cce8e3eecb1", "sighting_of_ref": "indicator--956901d1-249c-4916-ad78-f8406005ec2b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5ca54c-0a06-41da-9535-31f1dab8f7d0", "sighting_of_ref": "indicator--5afca054-5b47-464c-8155-18a23b57f048", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d708d777-e444-425f-a8c4-61dd8c912022", "sighting_of_ref": "indicator--5afca054-5b47-464c-8155-18a23b57f048", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7b9e9e-c22b-4e10-a65a-613acd5b5fbc", "sighting_of_ref": "indicator--1349da26-c8f8-47a7-a658-8ab3f77cd8ae", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88549487-2938-47e1-806e-042fc3385645", "sighting_of_ref": "indicator--1349da26-c8f8-47a7-a658-8ab3f77cd8ae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35da8dd-f0cb-4251-b344-9406f0aaa61e", "sighting_of_ref": "indicator--e82b5d63-8076-486b-b98e-81e40d111411", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04197454-f182-472d-bb37-3816cb91ffd8", "sighting_of_ref": "indicator--34727166-4f39-4a45-8107-16ea9ffe9739", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da04a9e-6d38-4984-823c-6c82198a3e24", "sighting_of_ref": "indicator--cd95d671-089e-4f9e-b7ac-9f115cdad4c3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549dd855-0a72-4906-bd60-d9154c93a63f", "sighting_of_ref": "indicator--9db350b3-f74c-413c-954d-8c692a63c6d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d71244-9623-4b11-9309-a6d1113ce791", "sighting_of_ref": "indicator--5ffaf4a0-0945-437f-8493-5cefe001b9ca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a300fd28-cfc7-4e4e-94e2-6dba34d7bcc7", "sighting_of_ref": "indicator--96d029c8-9768-4e83-b241-dff638e40ea7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5d5118-0c48-4b86-805a-1f94435345f8", "sighting_of_ref": "indicator--96d029c8-9768-4e83-b241-dff638e40ea7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429050e3-ea1f-49b5-8b72-df265b600335", "sighting_of_ref": "indicator--7c2682b6-0130-4ade-b30e-c85ae1f2fe73", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccaa3148-e5e5-4d21-9847-c11ec36819de", "sighting_of_ref": "indicator--7c2682b6-0130-4ade-b30e-c85ae1f2fe73", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca854388-1263-423a-b611-d581afc16b87", "sighting_of_ref": "indicator--0221fef6-7541-4c0a-9728-082df71f879b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ebc5af-fe7b-4edd-ab3e-9b8759813a88", "sighting_of_ref": "indicator--3bc08a7f-bc6a-4a3e-be5a-7966383ee6c6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085c888f-bdc8-4968-8887-55be595a4610", "sighting_of_ref": "indicator--241077c1-bb78-44c5-a4e6-6db244e84b5c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4440dce2-6702-4a78-85c3-1cdfa3aea152", "sighting_of_ref": "indicator--ebe8a212-00ce-464f-9354-f304be22bf0f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ee7eb2-bb5e-43b0-9ef9-bcc7c5f1a1bd", "sighting_of_ref": "indicator--04fa047c-8e86-4239-9f64-1d7b0803c52b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a75b5b-bc20-4640-bce0-f0206579613d", "sighting_of_ref": "indicator--d91c1bac-7313-43a3-b055-8f84922c4d28", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cba2cd-f73e-4404-8c01-f1f391bb8c41", "sighting_of_ref": "indicator--95580cc4-5f0c-46b1-980e-cf1a33f18cbf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69a56e1-9992-4acd-9960-9837c4b413b9", "sighting_of_ref": "indicator--cc64cb17-989b-4f04-8bec-30390b688f74", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64b43be-c368-4585-8a90-fcd360482680", "sighting_of_ref": "indicator--069eb601-ddf0-4588-861a-2e07056bde75", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd25971a-2177-41d1-9273-88ca1212ff27", "sighting_of_ref": "indicator--ef4c3bdb-2af3-4be7-9320-6bf8ec909101", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07cbd4d-8442-4c8f-bb51-1e8ad93a77a3", "sighting_of_ref": "indicator--2f5b81c8-21be-466b-8fd7-fc315a5c4fc0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1416102-fd66-4973-841f-c6ceb19c5d85", "sighting_of_ref": "indicator--1228d7a1-ca5c-4587-9bb6-ed5314dd6ec9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b356c3db-ef73-4302-b366-670c901590cc", "sighting_of_ref": "indicator--9fb53eb6-5dc9-4d51-bc67-0253def0861a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7861d2b5-344a-4ceb-b646-6137476959d5", "sighting_of_ref": "indicator--9fb53eb6-5dc9-4d51-bc67-0253def0861a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e64154-d0cf-4f01-8d77-bac28c78fe86", "sighting_of_ref": "indicator--fbf8c0b3-396c-4d65-8767-d13224c73975", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a3f436-c02d-4010-aeff-f0b14f156ca0", "sighting_of_ref": "indicator--c4b424c5-3024-4a1e-bdaf-7fddcb0300e4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7622ccac-e071-4239-8bcb-25882a249128", "sighting_of_ref": "indicator--3fa9b5bb-c8a3-4ce8-b12e-8ed521f7d8f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae2778a-4af1-4296-9a0e-715760bb6169", "sighting_of_ref": "indicator--ddcddf72-4e8c-454b-9da9-acbc93a5a721", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f82264c-e203-4c7a-8216-c366474356fb", "sighting_of_ref": "indicator--99397450-6749-4584-832d-57c26a19d6b3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d19f0c-e383-4677-a658-f0f7b9fa5c48", "sighting_of_ref": "indicator--18b888ee-6a1d-4a9a-8602-a5b069f8d192", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735af067-fd31-4255-8dcb-ea39a0245934", "sighting_of_ref": "indicator--3e5203eb-2752-4afb-a780-bb4cbabc904c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bef2061-5ab1-444e-a5b5-089d21d14f5c", "sighting_of_ref": "indicator--c84fb6a2-25fb-482c-bef9-fb50f6c0ec65", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de926f5a-b081-43ed-a6d5-ce53ee158845", "sighting_of_ref": "indicator--e384f8df-f9fc-403e-84bd-9df8de4dbec2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d405ec-16b1-4482-bac3-3a098d9779cd", "sighting_of_ref": "indicator--e384f8df-f9fc-403e-84bd-9df8de4dbec2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9865fb85-5933-4f6e-948a-8b9d2081dcaf", "sighting_of_ref": "indicator--fe07881f-09ee-43fc-ad33-c33cad7dff6a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430da87a-da49-4bc4-ba2b-5ee7c025712e", "sighting_of_ref": "indicator--8c998b71-0ae7-4ba4-9144-a9896f62438f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ee9552-a88e-4d21-9aec-3fef07c7b216", "sighting_of_ref": "indicator--2b963062-ebbe-497b-b953-5572a3874fc4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e52390-57fa-4190-b9ce-ef1dc219655f", "sighting_of_ref": "indicator--ad81f782-3a8d-48d2-adb1-e3ed46add3fa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03378d7a-1fed-4489-939f-39fd5f0f0efe", "sighting_of_ref": "indicator--9249c8ae-f6e7-49b2-9a4a-1ed28cae125a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0f971a-9096-4c21-8d63-2efb69da415e", "sighting_of_ref": "indicator--bfc140c2-43ad-4d3a-bf2b-11d5f8cdbb10", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bd539b-c9dd-40ab-8401-dfa76d4c71c7", "sighting_of_ref": "indicator--bfc140c2-43ad-4d3a-bf2b-11d5f8cdbb10", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798fec66-474e-4dbd-9ac5-d1526aa0f2cd", "sighting_of_ref": "indicator--9512207d-1992-4ae2-af39-1ef528175aec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198d4050-9456-41c8-81d4-dbe5d2b2894c", "sighting_of_ref": "indicator--da339c30-0178-40c4-9020-d73d9a5aa620", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea885a3-322c-4392-82ef-87d0e6174776", "sighting_of_ref": "indicator--1d746692-e2c0-4c97-a84f-78190c9cd2b1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033a422a-f18d-4ee2-a86f-d82ec5ba02eb", "sighting_of_ref": "indicator--313529fb-2f97-4452-8546-b36211e9e394", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bff0f8-fa67-4fd4-8aac-78ea498a4fb6", "sighting_of_ref": "indicator--7749dd84-dfa4-4202-b192-9841dc459e80", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69176f55-564a-45ac-85be-1489ad98ca7f", "sighting_of_ref": "indicator--0b404a0b-017a-4c2f-b36f-7b6cc34c6f5d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a7a117-0777-478a-821b-cdd349c79f99", "sighting_of_ref": "indicator--b1fb6181-052a-45e0-893f-9a48236949cb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f50e255-afe8-40a3-ab7f-4e976458fcf1", "sighting_of_ref": "indicator--8d874167-f7fb-462a-9a32-babd51f0ae51", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b29023-5abd-4938-8f38-35c81427589b", "sighting_of_ref": "indicator--8d874167-f7fb-462a-9a32-babd51f0ae51", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776ca834-38a3-46aa-89cd-a54679f962d7", "sighting_of_ref": "indicator--521965f5-d29a-43b1-94eb-0f9f96dd7a7c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70babaa-5485-4024-9f92-d20582ace393", "sighting_of_ref": "indicator--eb2a876e-f120-42eb-be85-32d4c82431bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad86960-4a55-4bf9-bad9-1415b59a964c", "sighting_of_ref": "indicator--eb2a876e-f120-42eb-be85-32d4c82431bb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169549fc-cef2-411c-8418-d5d2faf64926", "sighting_of_ref": "indicator--d99fe7af-f9a1-40d8-9acd-e8f36e620eee", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a7ab43-301f-4ba7-b6ce-23459fbfba23", "sighting_of_ref": "indicator--0c798acf-a89d-4624-88d5-5d659a260515", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49482b53-6bbd-4ff7-8c06-b8a30c56c451", "sighting_of_ref": "indicator--3808901b-47cc-4985-b9a2-a3b056cbaf9c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ab03f3-3ead-40a4-85b2-83073320efad", "sighting_of_ref": "indicator--c0d29523-dc08-449d-b8d7-509ff1947417", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a382c5e-cb8e-4f9b-86f5-99ac71856254", "sighting_of_ref": "indicator--110f46ca-feb5-4d3f-9b6b-564e0935378d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fbe325-2d06-4970-a3d1-fd51d291b03e", "sighting_of_ref": "indicator--110f46ca-feb5-4d3f-9b6b-564e0935378d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbd1a07-347f-45f8-93ad-fbfbe8a70c7b", "sighting_of_ref": "indicator--4192c960-b742-4672-9e11-947b1e4edf61", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc240db-e2aa-43dc-8295-08780706f7cf", "sighting_of_ref": "indicator--363a34c6-17d8-4621-a037-c73317e937bf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224dd3d6-b756-4e44-b938-839f9cec8055", "sighting_of_ref": "indicator--66348aa9-6c3a-4115-81bd-7cafa3a3cfc7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5bbb6ae-42db-40d2-8fee-b3db956b70c0", "sighting_of_ref": "indicator--4e539d23-2db0-4304-904a-96e0f9a05cff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05c8cac-920f-4224-b810-88fd2988b159", "sighting_of_ref": "indicator--bf2d8fef-3c18-41a1-9204-c18d9fb61fa2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f73036a-7f13-4ea4-9e25-acccb65a3c3e", "sighting_of_ref": "indicator--a400ce23-d0e4-448e-80f5-f06ecac11c90", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d30a5a9-c949-4fdc-a0a0-c09731e18a2e", "sighting_of_ref": "indicator--816b14a6-f333-4a6c-a61b-7d8af33b7162", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9005571f-cbc6-4426-8c43-8ebaf55449ba", "sighting_of_ref": "indicator--5a0c59b7-14d7-477a-86dd-d0234b16f1d1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ecabdf7-1a9e-4b6a-9eeb-808546040193", "sighting_of_ref": "indicator--5c57cf52-619a-40fb-811e-2bf0416cac59", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c35a9d-d748-40a8-b70e-148fff03787c", "sighting_of_ref": "indicator--fe5a15ef-25bf-46b5-9247-8781a088635b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b59cd2c-d435-461d-84e6-4fb8216e242d", "sighting_of_ref": "indicator--3e0f8b13-84b4-4034-b10c-012d9682ee4e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098c467f-b875-4ead-a7ce-1d7a416bd608", "sighting_of_ref": "indicator--a71c9df5-8fa4-46a1-a1db-b08ec409f6f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5d0c02-ee68-416d-92e4-9bd36e8c6207", "sighting_of_ref": "indicator--007603dc-7c8e-465b-ada4-1cb8d08f9b9e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0f60df-dfcc-4880-ace0-7145fc292af0", "sighting_of_ref": "indicator--22fe4ef7-786d-4f61-8078-7dc0cfc8600e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd2bc5e-220f-4f42-9a17-5856dd9f5010", "sighting_of_ref": "indicator--22fe4ef7-786d-4f61-8078-7dc0cfc8600e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac82d386-6fe1-49ef-ae09-15f634b15201", "sighting_of_ref": "indicator--96523f51-2b64-4d3b-bf27-94a0bd8cb947", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beda86c2-da56-4764-a863-f0b8077917e7", "sighting_of_ref": "indicator--93b199a6-f391-491d-bedf-e326e0609deb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d84c8b1-a15e-4405-a887-720daa2f7d9e", "sighting_of_ref": "indicator--1133fdce-1e97-4784-af76-5ade4e823656", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9a99e9-3db4-451c-a9be-2e2cff223f2d", "sighting_of_ref": "indicator--69dc764c-9b5d-4ca2-954c-2c61e6f20240", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffe97a5-7f4e-4d79-b43d-39b082612cf4", "sighting_of_ref": "indicator--aa365427-9f9a-48a4-985c-fd47096ebd1d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf6c9df-1c12-4fa0-ba21-521d13de7a27", "sighting_of_ref": "indicator--348ee22a-c1da-46ba-8859-b37a48d51037", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967cc5fe-961e-4ee2-9856-39a5f971527c", "sighting_of_ref": "indicator--3b8e727d-2aa4-4ddf-b23c-9b315b07db7f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940aa460-4b98-477c-8a7c-6084d595485d", "sighting_of_ref": "indicator--3b8e727d-2aa4-4ddf-b23c-9b315b07db7f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302509cf-ee5d-4a3e-9354-3e4ead00cca8", "sighting_of_ref": "indicator--8e18cb3b-9dfa-409d-98a8-4a695ca970b7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98509483-00bc-4937-8115-06581de155ab", "sighting_of_ref": "indicator--29702ca0-19ce-4a9f-89e1-77a1ade917f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698115cc-edba-4517-98ed-dfdc94ae749e", "sighting_of_ref": "indicator--c950ec9e-44d5-47ac-a35a-18a7b3fe6464", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ff7ed5-d84e-4b07-856f-ef7cda259e0d", "sighting_of_ref": "indicator--8a686548-3cf2-4d05-b5fe-c7a34b0a4c05", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa71291-eff5-4f93-a233-ec68bbc81dbb", "sighting_of_ref": "indicator--c68a1b94-1de6-48b9-a986-20c0c3e6f166", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cda7ad-9e11-47a3-a42e-b07b6b55bd79", "sighting_of_ref": "indicator--a50ec27f-8be1-4c72-9575-9b2677bbd820", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db714ab-bcfe-485f-a730-a35e1865e1b7", "sighting_of_ref": "indicator--15c51f22-4600-4696-ad66-b29d2bcd5a29", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff8dfaa-747a-4bf0-a9db-d757ad8ed852", "sighting_of_ref": "indicator--7b7fe2b0-5b78-4f7f-80a2-11fd2106fda0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56951825-f281-4c72-aff8-f4c5215b0f24", "sighting_of_ref": "indicator--69473c9c-3a54-40f9-a0ec-5d19fd50b0d8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5250c921-b840-4af2-94ee-0850263e7cfa", "sighting_of_ref": "indicator--5b7f19b5-fd30-489f-ac73-72b6e666643d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6dac54-97fe-4aca-8521-341105e290f2", "sighting_of_ref": "indicator--de596edb-49b0-4920-9e85-3d9b911a5388", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa93a92-61c1-4e07-a4b4-5ba0659c1cbf", "sighting_of_ref": "indicator--b918ab9c-260d-4531-a1ce-e6e295f836f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4279745c-be38-4b33-8732-4e2faca5d93a", "sighting_of_ref": "indicator--b918ab9c-260d-4531-a1ce-e6e295f836f4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79edddc5-c32d-4730-a5d6-d04288f5e4f3", "sighting_of_ref": "indicator--ec458ddb-1b18-4ca7-b50e-c9de71af3391", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee516ce-3486-4242-900d-b2034227a878", "sighting_of_ref": "indicator--2c8749c6-88e3-4880-9d0a-bd9913da5392", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702baeff-50a7-48ea-9082-40c81d10a187", "sighting_of_ref": "indicator--9d8eba86-4e17-42f4-b459-d2afe90777d4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a361d5d3-d78a-48f6-a16c-573b7869c3ed", "sighting_of_ref": "indicator--331dd4cc-a5ab-42f3-89fe-cf6fc0af9419", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f718fc-4ce3-461c-8a82-56f594f3facb", "sighting_of_ref": "indicator--0797eb3f-3866-45c1-88f4-99399a0e1a3b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20191489-abbc-4f1f-b850-1c0de3d958fe", "sighting_of_ref": "indicator--0797eb3f-3866-45c1-88f4-99399a0e1a3b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6a9f95-c403-4032-b5f3-5c18ec043290", "sighting_of_ref": "indicator--3a76f298-b2fb-4fc4-9690-2fdadce66615", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95eb421c-f722-4f09-9400-9ed0d82507c3", "sighting_of_ref": "indicator--3a76f298-b2fb-4fc4-9690-2fdadce66615", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576c7a4b-1c49-4f2b-8f8e-b71a393a88b2", "sighting_of_ref": "indicator--4e03ca67-bdbe-43cd-ab39-640d79af3cc0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4260025-8465-49cc-94da-173cf0fc5934", "sighting_of_ref": "indicator--b8999efd-d418-4db9-8fe0-699955d41ba3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf22e00-5df4-4dcd-9f67-72d927924a0e", "sighting_of_ref": "indicator--81635049-20ca-487b-abca-2da624dfd1aa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14e9036-930a-4cf9-88bc-a2bdc93167b1", "sighting_of_ref": "indicator--b84f81d8-059c-4175-8994-d388f2ea0612", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bab7ba-91c5-48f2-8b19-a350d5554562", "sighting_of_ref": "indicator--4503cf7b-1444-4c8d-96fd-47a176e47951", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a080b2de-2c09-4b09-aea6-834c0f51bc38", "sighting_of_ref": "indicator--4503cf7b-1444-4c8d-96fd-47a176e47951", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd177388-770d-4fd1-b779-df15bb8088be", "sighting_of_ref": "indicator--95212c5f-5d75-4b00-ad53-490736c2bbf8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287f7d6e-b8cf-4b4a-8eea-35eb2dbd9fcc", "sighting_of_ref": "indicator--8a48c06c-6b13-4890-b71c-a65954073bee", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bba064-a465-49bd-8ef5-9f7e0450c265", "sighting_of_ref": "indicator--fa03a340-ca01-463b-be76-8281935c48a9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dce1025-aeee-4098-bb4e-1acd8b7c0021", "sighting_of_ref": "indicator--9ebaf2ee-2817-4c86-b719-fb1b8786fdc9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c81781-d94a-4fe5-b2b9-584ca95b41ea", "sighting_of_ref": "indicator--95242856-35ca-4f0a-af00-53e715d08531", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684a5dbc-1e7d-419e-bc49-ca27577b9c0a", "sighting_of_ref": "indicator--13e10069-0c64-45f4-a5b1-b9b96bbeada6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773390cd-a5c0-45ec-a758-3a641cbcf809", "sighting_of_ref": "indicator--ee4c215f-49bf-4513-8f54-f313606c6620", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c4c794-dfbc-4fc5-bfd3-d913d69026db", "sighting_of_ref": "indicator--80255f7e-68db-4e3f-9773-ce6d731cf319", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51248397-e972-4e4d-838d-b666053aea69", "sighting_of_ref": "indicator--83e3923d-8d13-45ca-8e22-e54ce86ca7c0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48364de-cf23-43f1-ac2f-4dbc2aaa33dc", "sighting_of_ref": "indicator--83e3923d-8d13-45ca-8e22-e54ce86ca7c0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa28d679-9414-448d-a9e0-4ce34dc067ff", "sighting_of_ref": "indicator--36520153-2a09-4c22-ae54-08492cb9918c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9887f41e-d0f1-4e69-840c-a368772ab5c4", "sighting_of_ref": "indicator--b91b7766-d01a-4895-953c-238eec13e89a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e264a53-f432-408a-b6c1-bebf5d3111db", "sighting_of_ref": "indicator--b91b7766-d01a-4895-953c-238eec13e89a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9413b8-d348-44c9-981d-7cc993d38f54", "sighting_of_ref": "indicator--b0472b65-dde1-46b3-958e-2afa514f8db9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d8a8b6-91b1-48e1-a6d7-215d54147131", "sighting_of_ref": "indicator--424774a8-1791-45a3-87e3-1405fddd21cd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c0ebae-2f43-4e9b-86ea-4ad1515bd31e", "sighting_of_ref": "indicator--424774a8-1791-45a3-87e3-1405fddd21cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07605fb-1825-429a-9d24-342946c4f0de", "sighting_of_ref": "indicator--1fc71f96-1278-4e00-a3a7-997912416c5d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3384ab9d-f05e-4cd0-9aa5-92576598f0e1", "sighting_of_ref": "indicator--d0924614-d3b6-44a0-891c-9a264109bd37", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a760a7-25c4-4488-b792-7f3084cc1a3b", "sighting_of_ref": "indicator--bcd4403f-bf60-4b2e-a93f-b08aa2400250", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ce09bf-0050-4eb4-95f3-9e31c5066fad", "sighting_of_ref": "indicator--37cd0e07-03dd-4084-a070-7a65d29fb077", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1ea060-d563-4b8f-aa28-8fe7f5b6ac73", "sighting_of_ref": "indicator--e78ed885-8760-4b93-b239-05ce403906e8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3407bb1a-0db6-4b31-b4a4-c6d6e315365e", "sighting_of_ref": "indicator--6bbf27ad-4a08-4e76-a18a-993f03202442", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433fe088-28eb-4b28-857a-c0578b5d1569", "sighting_of_ref": "indicator--d23e2472-2059-4901-a3cc-1349daa23417", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb41054d-07bd-4722-98f6-0dd0c0ac447f", "sighting_of_ref": "indicator--dc5bf01d-30d9-4cb5-8419-4385c2c4c808", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c217dfae-c5fe-4888-9cfb-0835af556525", "sighting_of_ref": "indicator--7819400d-9384-4a8f-a5ca-4ed610187310", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c3e4d9-462f-4225-9bc7-c43ba7ee9a2f", "sighting_of_ref": "indicator--be1242ea-6629-4c77-a90c-7908b078ecf1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc75e45-4839-42fd-97bf-b84e0a06d720", "sighting_of_ref": "indicator--aa1a76dc-be01-4341-87fc-1dd1f7ccc1b6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4776d83e-97a6-48df-9990-73c30288f89f", "sighting_of_ref": "indicator--2ac396b6-a9e2-49a8-84e8-0a20c2801393", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1689a518-c4f7-4c30-afd4-90534a16e05d", "sighting_of_ref": "indicator--34fe6289-72f5-4705-b5b7-24b74afc05d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3bbbbe3-4150-4aa8-b318-3a5a67cb24ab", "sighting_of_ref": "indicator--14f98854-c0fd-4a99-ac22-75002b4f26ee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8c9d87-ffc5-4b38-ad15-6dcfa4a51064", "sighting_of_ref": "indicator--95bc9d69-591c-4058-9abd-1dd9e0ad957a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96b0966-fdf9-4a41-8a7b-4a154eba87b6", "sighting_of_ref": "indicator--f0e868f8-8de4-4baa-9c99-89167ae5264d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82c3421-fb9c-46b0-b367-63aaa691705c", "sighting_of_ref": "indicator--64cadc68-1340-4aef-9e7e-cb0ffe101142", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db97ec7-c56d-4023-b74b-428d16a52c37", "sighting_of_ref": "indicator--2e367a9c-7297-4a9b-b8e9-7c4966e1b988", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c647d017-4321-4f00-9db3-986518bac981", "sighting_of_ref": "indicator--49730cb4-5dd1-416e-adf6-a4d513d6bfab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e7b46d-a5b7-416a-847d-f781aa4480bf", "sighting_of_ref": "indicator--41e61ec6-df32-4bf2-bdba-355d53510a82", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3175313c-9a41-4770-a00d-333e7c361102", "sighting_of_ref": "indicator--41e61ec6-df32-4bf2-bdba-355d53510a82", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a909f99-4632-4aac-a06b-f7aa9bdde7ac", "sighting_of_ref": "indicator--2daf69f1-b386-49ab-98dc-0f5cea3f0e92", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54b8457-3ce6-4bda-8870-abcba1583261", "sighting_of_ref": "indicator--81310f98-a8b3-426a-bc1f-3ab5f1dc80bc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a4910a-5c32-4572-8114-b65a905fff23", "sighting_of_ref": "indicator--81310f98-a8b3-426a-bc1f-3ab5f1dc80bc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3c7218-bd0d-453d-91cb-b93f57888756", "sighting_of_ref": "indicator--dd9d22c7-7dd2-4b5a-93c5-0be2d3b7d711", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbf0244-88ec-40e0-ab30-b723d23c1965", "sighting_of_ref": "indicator--87c2f5d8-7759-478e-a607-6f67a59f03cc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326b1d81-f261-475a-89b6-bb388a27bd45", "sighting_of_ref": "indicator--8b95916d-c414-4bbf-a143-2eac85063f7a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40288ff1-02dd-4410-8ee1-dbfea25dc007", "sighting_of_ref": "indicator--d61aaf0f-deac-4946-b204-ae84b63b8f8c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ff4455-2676-4915-aa95-e7526fda50e1", "sighting_of_ref": "indicator--b0fb9f1a-5111-4a34-b48d-536323bbd175", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8687b4-c345-48dd-829b-d2b43db9f8aa", "sighting_of_ref": "indicator--0368c25d-6800-45fc-b5b9-b1818f6bb293", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82da7ba-c861-419b-9cd0-4faefd319e06", "sighting_of_ref": "indicator--669ae1fd-4e8b-40c1-8db5-019ed76bee2d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4d7949-f780-4cde-ac1f-a386983709d2", "sighting_of_ref": "indicator--80b7fd42-8e16-4da9-a704-bcb5304f3210", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c710063d-3f11-4ce2-987d-2126427c680c", "sighting_of_ref": "indicator--b9b91326-2972-4822-b7ca-1f5a3751938b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e9527b-8a68-41e0-a289-155b07d7385b", "sighting_of_ref": "indicator--8409ad5b-cbcb-47ed-852b-28648f4833db", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b604d931-32ae-4a1d-bb0e-9d854acb0883", "sighting_of_ref": "indicator--8ed5fe30-3acc-4aec-ac31-b64849782fcf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e0da95-8d4d-47ac-815e-533d6d84e055", "sighting_of_ref": "indicator--49b0343a-415b-4147-a31b-2fd4d30f6dc6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d35876a-33b7-4273-8f04-27dfc725b4bf", "sighting_of_ref": "indicator--9a7c7972-c0ac-4baa-89bb-5161931384bc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97b5d73-3fdf-49c6-b571-bc368bd7c06a", "sighting_of_ref": "indicator--33654ced-9d71-4118-a10c-4991a037f5eb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb365005-c1b8-40b8-805a-c6bbfb2be224", "sighting_of_ref": "indicator--33654ced-9d71-4118-a10c-4991a037f5eb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea32c6c-63d9-43e6-8b4b-690db568668d", "sighting_of_ref": "indicator--1e5e87a3-d527-4d3a-9aaa-016ff3e9be39", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfc9fc7-d686-4e8d-a4c2-f04c6c8bf640", "sighting_of_ref": "indicator--7ba4555f-a688-4049-9b74-53b07c19d250", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a04f09-2dcf-42d9-aad3-546fb88db32b", "sighting_of_ref": "indicator--07263ebd-47ad-455b-ac39-b378c6940795", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819c87c7-d99f-4a96-bf87-18f08b097f4d", "sighting_of_ref": "indicator--05709633-44cf-4b64-b757-08cdbcbbfef7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1c3b89-c2d6-4a2a-9c69-14c472fba901", "sighting_of_ref": "indicator--8716238f-9c8e-438f-9925-ab7376f4d76b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d8c364-e351-4351-9f0e-aa6f56819287", "sighting_of_ref": "indicator--80153370-f786-4c3b-88d6-1fe498d196e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036b7b37-2709-410e-840f-f3276ea88944", "sighting_of_ref": "indicator--c6ba083b-5eba-44af-8efb-432cf61f4728", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71382688-da85-48db-8cd1-4534afb84ddc", "sighting_of_ref": "indicator--1a0173e8-b366-4949-9196-e3f3aa0fdc9f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c252d595-301f-473c-a8ac-f2840c90bf68", "sighting_of_ref": "indicator--a6f7ea2b-e52b-44fa-b286-06306bd1d3c9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8129b1fa-ed32-45bd-b707-b79a9213668e", "sighting_of_ref": "indicator--54f59b3c-ed05-4ae6-99b6-cfe793f07896", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213fca62-0528-42fe-9466-9baeceda0250", "sighting_of_ref": "indicator--a2b06fd5-cf88-4239-9858-74b303ad0116", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4e7dba-dc14-4c49-9f32-49b834413f96", "sighting_of_ref": "indicator--da8a9439-4e55-4257-a43b-4fd72bd4cde6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee6a127-6300-4e8c-8921-0212b86836bf", "sighting_of_ref": "indicator--8080824e-2259-4bdf-9939-091395c6881f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98aba05-5fa2-495a-b00c-09e70435c195", "sighting_of_ref": "indicator--b38f9f47-106f-47e3-b1cd-e6bc11da678f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e26643-93a0-4fa3-a122-aae09f66b480", "sighting_of_ref": "indicator--388f0493-ffaa-4b47-824e-83c571cecd7c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c0e2d0-053b-4ccf-9710-29571e5b30ba", "sighting_of_ref": "indicator--bf428219-2ddd-40c4-9f36-3a8315a7b417", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e90ac67-6fab-4f7e-9fab-9ae772c3c9e8", "sighting_of_ref": "indicator--255ef8e2-c9fd-421f-9210-59b1a2b6dc80", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59c9c8a-f7da-449f-b27b-f8fad56ffb80", "sighting_of_ref": "indicator--8f66b63b-cebf-42ff-9bd4-3eac99309580", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b983d437-c0df-49cf-bf74-7acc8c47bd91", "sighting_of_ref": "indicator--a7834e22-8fcd-4eee-9dd9-b561aec9c594", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439cbcbd-b4cc-4fae-b050-ed2b3f9c3aaf", "sighting_of_ref": "indicator--a7834e22-8fcd-4eee-9dd9-b561aec9c594", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c3a7ad-8128-492d-89b5-48c569700f16", "sighting_of_ref": "indicator--8011d41d-b3e6-4c58-a082-8fa723ee6c29", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c0bef6-b014-4805-b310-bc5237bd5693", "sighting_of_ref": "indicator--8cf68021-5e85-4b6c-971f-7624e2bc4411", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa849328-0f88-492b-b271-b00145b1b672", "sighting_of_ref": "indicator--5776a0b8-c4a2-463d-866e-7ef2fcbaf74f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619e02d9-271a-458d-a791-f4e7531f019f", "sighting_of_ref": "indicator--c7ad74c0-ee6c-4107-baae-cb5fdd210291", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f0b91a-b7ff-45ef-b5ca-920318160c60", "sighting_of_ref": "indicator--9a85bcae-46e1-4705-84fe-6a82f713a283", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ee49b2-de5d-4b8f-b83c-303b0c99daee", "sighting_of_ref": "indicator--f1178330-d4e8-4445-a3f4-ee583919dd65", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a1d11f-9094-4ac0-b8c0-88edaaad1304", "sighting_of_ref": "indicator--1252bc1a-605b-40ec-a9cb-dab22d0c1085", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba6f18a-1830-4ad2-8491-2089c4662653", "sighting_of_ref": "indicator--1252bc1a-605b-40ec-a9cb-dab22d0c1085", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9c2da0-9413-4dda-b94a-b43d819d73f4", "sighting_of_ref": "indicator--bc151cb0-43cd-4f92-8668-83193d85f4c5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490c1573-de7e-4b14-a2ae-1087b1eaffe1", "sighting_of_ref": "indicator--3ad4683a-ac60-4016-8095-6cc3fa17d4df", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ad0853-c7f0-40e1-8f0a-3098f7d87254", "sighting_of_ref": "indicator--222cf25f-e590-45c3-89cd-c4a28423f0c5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66a358e-d6b6-4860-a9dc-1eea9fff52be", "sighting_of_ref": "indicator--9ce545f4-fa70-4de3-af23-ec72c4dfd0c9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60dfbac-5a7f-4477-a8b7-269a6f0fe6b1", "sighting_of_ref": "indicator--59bc9dbf-5e55-4fd1-b61a-f35d9d9ef706", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af237d28-52b1-4a1e-a74f-b699cd21f7a6", "sighting_of_ref": "indicator--0b0f820d-bf62-47e0-872d-c7476432e2a6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2bba050-64f1-454f-b01d-e137482a06a8", "sighting_of_ref": "indicator--79d1da16-a9a8-49cb-8eb8-9e3ddcaf5fe2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3be90f1-6c2b-4186-9304-a02a8352cf73", "sighting_of_ref": "indicator--79d1da16-a9a8-49cb-8eb8-9e3ddcaf5fe2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763d33d3-4638-4e06-9567-ac02e39e48cb", "sighting_of_ref": "indicator--8ba9ad2e-baa5-47c3-b327-6fef29a25da6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4897984f-34eb-4820-a65c-43c82c62b755", "sighting_of_ref": "indicator--8689b74e-8ed5-48ae-9476-130ad78aa586", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d640351-beba-4b42-9206-623398697bb9", "sighting_of_ref": "indicator--31265fff-0a6d-43ce-a830-65cef47d9edd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf49a085-ba52-4fc2-9470-ebc043fa314b", "sighting_of_ref": "indicator--93dbd1d9-47d3-4589-a7f4-f396ecf2ddde", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a605d5b-2d0f-4dba-9713-51e006ae9497", "sighting_of_ref": "indicator--93dbd1d9-47d3-4589-a7f4-f396ecf2ddde", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f0c74b-b038-4cb2-b9a0-d23ea317a7e1", "sighting_of_ref": "indicator--e157a826-43d8-482f-b263-3e5f5e168a93", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e780fb-0dea-4ccd-9a61-ac7799317cc2", "sighting_of_ref": "indicator--e157a826-43d8-482f-b263-3e5f5e168a93", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9582ce-24b9-400c-a200-8bead9f7c4fc", "sighting_of_ref": "indicator--c168ba46-1733-4848-a5b9-2151e71ab99e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6290774-9bdd-4605-8993-9d49f478e052", "sighting_of_ref": "indicator--c1cdd0e7-b171-4b05-91c4-58a354632373", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c4fa41-36ca-4833-b213-92b0b4095460", "sighting_of_ref": "indicator--3a64d022-37b8-45b7-8c74-edb01186b5cf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ba5b4d-c202-48b4-bfa1-546d0bbf21a9", "sighting_of_ref": "indicator--3a64d022-37b8-45b7-8c74-edb01186b5cf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23c449b-d570-4801-89d3-e59ac7dcd824", "sighting_of_ref": "indicator--de193e3b-0bb7-4bfc-9baf-a71eb7d122fb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86eea9a8-a191-4e2e-a5d9-526d801bbe9f", "sighting_of_ref": "indicator--92a02505-a195-499d-b860-48314d5364d5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a576054f-1247-44f7-9f51-31a2061164b8", "sighting_of_ref": "indicator--286e4412-6970-4bf9-8eda-c93cd8459980", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11917236-cf1a-40cd-b2e7-6aa498328aa5", "sighting_of_ref": "indicator--af43f976-6808-4aa7-9c47-c5f92c219f0f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ec6b9c-40ba-4de8-afc8-e6e49cf40bd2", "sighting_of_ref": "indicator--af43f976-6808-4aa7-9c47-c5f92c219f0f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37788b9e-59c8-49d1-b83b-c3b34fc9eb19", "sighting_of_ref": "indicator--af43f976-6808-4aa7-9c47-c5f92c219f0f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec0064d-d452-4955-a87f-e6e07a94ff6c", "sighting_of_ref": "indicator--b0a2c6ef-af7d-41ce-8715-06ee44bebb5b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9313b7-d7e2-4317-8426-7669b772d099", "sighting_of_ref": "indicator--84709316-5b56-4961-b5c2-e7ee8af9ed89", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102bf1ed-bbdd-4e40-9dae-e4f2147c02f9", "sighting_of_ref": "indicator--7727e8e1-124f-436e-b8a7-396d0e88d234", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c111a99e-00fb-4fa8-89bb-4dbb47ed7afe", "sighting_of_ref": "indicator--b810f98d-1fe1-4017-8fd2-020a8a8fac33", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1675ada-63ae-47e9-8fc6-cc2d54ec0130", "sighting_of_ref": "indicator--2076ed5e-2424-40e0-8210-11d439efab6d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0ee55a-7b8d-47f8-9f1c-5bc2f7e6a9ee", "sighting_of_ref": "indicator--a01273cf-e887-467a-886a-7016bb3a4fd1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba99bf87-685f-48c7-9f9f-270ffcd32e99", "sighting_of_ref": "indicator--69123683-2367-4cc1-862b-d814cf3f70de", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52959b6-88d1-424f-a133-288f41364e24", "sighting_of_ref": "indicator--cbb28bf6-0b0e-41ef-bd0e-ce08b81fd875", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed582a0-7fd1-479b-856a-1fb3ea74c212", "sighting_of_ref": "indicator--d48bf286-628e-4521-9c88-0647d8472acb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207d79ca-8a69-46df-a4d4-6a11fe136b0c", "sighting_of_ref": "indicator--ede478b5-1e0f-4cac-9042-7ba8499e8617", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee0c659-648c-4f92-aeb1-0a035aa73e17", "sighting_of_ref": "indicator--474f26e2-8b40-43cb-a551-8e38ebd675de", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b052ea-b356-4833-8d4b-94a9598ecdb7", "sighting_of_ref": "indicator--474f26e2-8b40-43cb-a551-8e38ebd675de", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a2eb06-4457-46b7-aa1e-60f43c54fab1", "sighting_of_ref": "indicator--d871c61b-efee-452d-b88a-c2bc88a9ee61", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a71f139-94c3-420b-ab13-10c8b812f385", "sighting_of_ref": "indicator--57310e96-933c-4c2b-af52-f70f076ac4b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad4dbae-7aeb-4151-8ab4-36aa4a89955a", "sighting_of_ref": "indicator--d3318701-af0a-4d49-9a59-056ff1290f60", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4269c308-39ee-469d-9dfc-6d28fc4f7654", "sighting_of_ref": "indicator--39572d2c-911e-4f99-98e0-00b39422f906", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f1d46c-f19b-4671-94ac-cdee5a517c45", "sighting_of_ref": "indicator--39572d2c-911e-4f99-98e0-00b39422f906", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42798114-acbe-40b6-aa3a-6163543e004f", "sighting_of_ref": "indicator--4f452a8c-7430-46cb-99fb-30843e214e59", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f863f730-bf9b-48e2-8d5f-099dd95cb7ee", "sighting_of_ref": "indicator--6adc32dc-cdd6-4c2d-829e-164fb1341ebe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438a7622-1013-478c-a739-d6d6f9e3b62a", "sighting_of_ref": "indicator--23ef7e9e-8697-49a5-b0d7-9aaee3383b7b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0d17eb-090d-4cea-9675-773510edc811", "sighting_of_ref": "indicator--4c737e9e-149e-4287-888d-1ffe2f4fb915", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351e76ce-520d-4e09-b854-3e9492fc71b3", "sighting_of_ref": "indicator--c2830b3b-21b9-446c-ab4b-3a933ad4d0f8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471a91e4-c292-49fb-bcb7-b1918b7503ed", "sighting_of_ref": "indicator--f8f3b3ab-a73c-4625-9aaf-a9c39e87db6b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1b49f9-c016-4cc7-9ecd-fca18ac5aed6", "sighting_of_ref": "indicator--65436c62-ff68-4a48-bcd1-6a5b66ea7971", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f760e95-14ad-4001-bcf9-8a1d60a99370", "sighting_of_ref": "indicator--57373ee4-762a-4d2d-8ba9-c2e6a56c1a7a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc769e71-b7d2-479d-9f60-b06da400867f", "sighting_of_ref": "indicator--dc3aef62-64d8-4c50-b002-9c93a7345292", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41fca5ce-4be1-455b-8274-7f3e40f071dd", "sighting_of_ref": "indicator--c298c48a-00b5-4ec9-82a7-4c39f99871ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641a1f5c-4af3-4b6c-8ee8-9418883168e3", "sighting_of_ref": "indicator--cf307210-492d-4744-9754-70d077eb2d00", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6f4f11-e683-4df6-b6ae-dd532638b5c4", "sighting_of_ref": "indicator--4f857ac2-1726-4013-8b17-545242b39720", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a75a25c-18f7-4af9-9cdc-1c0ef75ca704", "sighting_of_ref": "indicator--cdf2e780-4d3e-4914-8bcd-5e37d7267ecb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d45448e-8b1d-4a83-ac7d-fed1210af7e2", "sighting_of_ref": "indicator--26bd35dc-2df7-4a3c-9a53-eec5e95781d1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0e7209-d6ee-4552-b875-6dc65d9c99ed", "sighting_of_ref": "indicator--76c57c7d-3aea-4daf-8668-c8df8c23f7cf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8e161f-0e2e-4fa6-bc7f-ceb72e7f5ae4", "sighting_of_ref": "indicator--bcd17a39-ba4b-4776-9787-37d3e90f94c2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82b839d-d9e6-4b5f-9223-e6694ec009c3", "sighting_of_ref": "indicator--114568ab-c34b-4381-92a0-476bdead0fd9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d556e083-7032-4ec1-9706-9171099be019", "sighting_of_ref": "indicator--114568ab-c34b-4381-92a0-476bdead0fd9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd87ba6-5388-40fb-b78f-253bf6c0e7ef", "sighting_of_ref": "indicator--7a6cc5fd-7dc1-4c5b-b942-b1db5d859dc2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15bce3e8-d0e0-4b72-bc91-09816f7fc877", "sighting_of_ref": "indicator--6192dd0d-e0bb-4d27-9db1-d8a8c8eb4b52", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3d99bc-cc30-495e-8aa1-e87c973c579c", "sighting_of_ref": "indicator--d24f0a21-8b40-4056-ada6-7c123350b7d8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9c34df-3203-4daa-9439-cf0adc86e4ac", "sighting_of_ref": "indicator--ed80a632-3247-4014-b4bc-119ac2fefe29", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5717f0a-1f7c-4383-9a73-36397d31dbf6", "sighting_of_ref": "indicator--398af9ef-5a4a-4437-9dfc-b817018e88a3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b2bee3-c27e-4365-9637-690c8c1af19f", "sighting_of_ref": "indicator--398af9ef-5a4a-4437-9dfc-b817018e88a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970c7f21-5b13-4f1d-9f91-76bbcb416aba", "sighting_of_ref": "indicator--ae4d02f6-d35e-4852-8c35-78a9a27bc4f5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b4feb1-b632-4e33-bcb9-5d9ba9fc53b5", "sighting_of_ref": "indicator--47c3c37e-50e9-4730-a9ff-d698899fa3ba", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21effd3f-798f-40fd-8422-3f8e3f2f3927", "sighting_of_ref": "indicator--47c3c37e-50e9-4730-a9ff-d698899fa3ba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e5693b-7e52-42b2-81f3-8392d2fece83", "sighting_of_ref": "indicator--4847a9ac-6cf4-4366-83d7-8dfe60acf0a6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b421cb-6412-465f-b932-f7f9a317e7f5", "sighting_of_ref": "indicator--665f18bc-d747-4928-a699-6966e363beb6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25164ab-fa26-4f51-9b56-41824f2e07c6", "sighting_of_ref": "indicator--500b265b-9823-41f7-a3be-c377e42d38a5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab9738c-8076-4e0e-a651-a972ae857652", "sighting_of_ref": "indicator--6876a4b0-d911-452f-a815-89a1c8ec6bfa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d62678-b637-4218-a791-884cafe1cbac", "sighting_of_ref": "indicator--6876a4b0-d911-452f-a815-89a1c8ec6bfa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b91438-1359-40eb-9e4a-01c3f7a7236c", "sighting_of_ref": "indicator--a7ccd9cc-e4d5-4c1d-8b5a-0e06ac1ca612", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d90544-fbee-4741-97b2-62abf844b910", "sighting_of_ref": "indicator--324d72c3-c1c1-4b89-a851-5acbfe8e9973", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f6a4db-acf0-4693-8c8a-9dc238c0d7af", "sighting_of_ref": "indicator--0c027542-67c0-4705-bd45-da39261b62c8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18356f4-3963-4f7d-aa17-8f25cec44c16", "sighting_of_ref": "indicator--8b24f582-251a-4e4b-ae8b-e79d5a232b39", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69446de-a5b1-4c8e-8d14-1fbe54d5537e", "sighting_of_ref": "indicator--de37a914-868d-49b0-b6b2-0cd314fa1b5d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848d5540-d4ae-4270-afba-223b7b5fe393", "sighting_of_ref": "indicator--b5fc5e44-1eed-4ac1-888d-ec5998c8107e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c52912-1169-4e29-9de5-46b56b0d2c8d", "sighting_of_ref": "indicator--9ced657c-7642-4103-a510-2f1d697d275e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c597ae-2119-4fad-99ca-2ca27647285c", "sighting_of_ref": "indicator--b21b9057-b59f-40a8-99f3-01b11bc0c41e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355924b0-d51c-4650-88be-f511560886a2", "sighting_of_ref": "indicator--b21b9057-b59f-40a8-99f3-01b11bc0c41e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b049ad-4ba0-4993-899c-27dbe79007ad", "sighting_of_ref": "indicator--cc8427c6-d160-449d-a836-66c4fd355423", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d6307d-c517-4067-b4ab-2787126d0e20", "sighting_of_ref": "indicator--e46c4a3e-19fa-4f05-ae52-84b8d5e836ee", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c747037-e1e6-421c-8f27-fb83eed3b356", "sighting_of_ref": "indicator--baebd091-c173-4de9-9448-93688a970316", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3439e29-58de-4be4-9448-75d6fa8bbc6e", "sighting_of_ref": "indicator--baebd091-c173-4de9-9448-93688a970316", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d78998-ac62-442b-8cbb-5994a28434af", "sighting_of_ref": "indicator--db1a79ab-249d-4204-a9d6-04433bac1b1c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca2243c-dd3f-489e-a5f9-d6f5e9f1ca8a", "sighting_of_ref": "indicator--840268e5-0663-4b70-a349-97b1b9f7b46d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e7924e-5d4d-4c39-9134-4be64837548b", "sighting_of_ref": "indicator--d58623da-943b-4f60-b5e2-efc15279677b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfd6b20-7b50-4b54-b33c-77e9dbd94738", "sighting_of_ref": "indicator--40eef7e9-6d46-4c03-825c-eca700060699", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e60f286-c26e-4321-9114-1fa012bd4d6d", "sighting_of_ref": "indicator--fec16e55-ca31-4cc2-83e9-abd8d10ce6ae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3872ad8e-2f75-4c6f-a5c2-c14829901bc7", "sighting_of_ref": "indicator--975ff407-964f-4ff1-8fad-2811630e0bb6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141fb4b2-f9e4-4a8a-984d-1a326ce9de35", "sighting_of_ref": "indicator--cf8dbe7b-4b65-43e3-8661-3071cf1a36cf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b224759-547c-4080-8373-85ad3ac2ed98", "sighting_of_ref": "indicator--7b1eddc9-2c08-48f3-b839-6732a002039a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846b54ee-ccd7-4452-84d5-d5a60fed5267", "sighting_of_ref": "indicator--0e46132c-b67c-44a5-91fd-677679a26e3b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecbe379-bf51-432d-acc4-be6d13a50fc0", "sighting_of_ref": "indicator--0f5c51a4-f785-40af-aa7c-9e031efdb638", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2170eb5d-a43f-4ee2-9852-7ee1fd59bfce", "sighting_of_ref": "indicator--50920943-a720-4c6f-9a00-1918b5aa7f06", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77155500-4302-4d0b-9fc3-3152e666ac88", "sighting_of_ref": "indicator--fde74456-d4dd-4dd0-ad0b-4edf9613adb2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea03b66b-1eec-44e3-9fc2-8c36886eb174", "sighting_of_ref": "indicator--2770ef52-4a55-4acf-8e95-349164b59525", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07ccb16-23a2-43e8-a9d2-bb5cad91e8d9", "sighting_of_ref": "indicator--14095b08-c62f-416e-a582-3a8fd851cb74", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1592c3-a585-4336-917c-749227d33a8e", "sighting_of_ref": "indicator--c4714096-eb0d-4fdc-a577-089967c3f387", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30dd8a48-c7c3-4676-af46-8c113b5797c0", "sighting_of_ref": "indicator--7b364578-c26b-4870-a033-4ea5eb2dd46c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7065eae6-1e54-4192-839a-dd8a67141a49", "sighting_of_ref": "indicator--e4430123-ff8b-444b-81a8-5c3780c4ca54", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a94eba-0244-4a25-9e75-66c2745b1e9e", "sighting_of_ref": "indicator--180d7325-9d72-40ab-b68b-03f4c241f5c2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880b97d0-c839-4358-8a86-6da998e03a50", "sighting_of_ref": "indicator--180d7325-9d72-40ab-b68b-03f4c241f5c2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903122af-607d-4cb7-ba00-81e11866efd1", "sighting_of_ref": "indicator--a6967671-cb7a-428c-9b84-b74a02ccf906", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b2d92e-fcd6-4714-9704-6ecb08b462f3", "sighting_of_ref": "indicator--a6967671-cb7a-428c-9b84-b74a02ccf906", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abaa54f6-4e61-4241-948e-30d3433282fa", "sighting_of_ref": "indicator--ea0f4731-9c56-4368-b923-924c76a7453f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8869fc-fdb5-4820-b2db-4c679f72d20b", "sighting_of_ref": "indicator--7e5d1d95-4952-4b26-a5af-8141556fbe1c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5fb52a-cea5-4272-b7e2-949233409153", "sighting_of_ref": "indicator--a5f14b18-04f9-407f-abfa-9da8931be118", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb27552-44b2-40f3-b555-2006260cf9b3", "sighting_of_ref": "indicator--c08a60cc-0168-4b2c-8711-67635aa2325d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21216fb-581e-4d15-9e72-93b8c88ba2b2", "sighting_of_ref": "indicator--294219d1-4c24-4577-a224-3be0d993d713", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e4ed65-8941-4bce-af42-199c6e2e83cc", "sighting_of_ref": "indicator--50be6176-aa7e-4d7f-99eb-e9fb123fe1a9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6f8537-42ba-45fe-984f-a84f8eb98e27", "sighting_of_ref": "indicator--50be6176-aa7e-4d7f-99eb-e9fb123fe1a9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55bb65cd-bd06-4fd8-8cc2-0db35ef4165a", "sighting_of_ref": "indicator--f89bbea0-61ac-48b4-a3b8-9457d05e87b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7da64f5-87e2-4957-a8b6-5fa832bd235e", "sighting_of_ref": "indicator--fb74caa5-5290-4647-9b4a-54c8e085cd88", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90c460d-95fc-447f-9588-a7b4cf3239f3", "sighting_of_ref": "indicator--69529b1f-7df3-4560-a8c1-d0ee03206469", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d52334e-5bb6-4f40-92ee-0cb320a65cf5", "sighting_of_ref": "indicator--80f4c5f5-9c76-44f3-978e-75bd1e1ed5f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aab5033-180a-43dc-9944-c48d2ad20ac5", "sighting_of_ref": "indicator--2d8a00cb-1b37-4a27-941a-cef22e38e917", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87798c05-aee4-4802-a740-85cdda23f0bd", "sighting_of_ref": "indicator--e709a10e-3896-4876-bfb9-9b6119f95ac5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0979bb-f4c9-481c-8013-a3088fc48a08", "sighting_of_ref": "indicator--14fb5d32-76b6-4a61-8e99-4cc672399da8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99a38d7-d28b-4c3e-9d68-ff19cd2e611f", "sighting_of_ref": "indicator--14fb5d32-76b6-4a61-8e99-4cc672399da8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e9d8f8-d0e8-4a51-a678-c79a2b77b569", "sighting_of_ref": "indicator--697dcafa-77ae-4256-bb83-d1fefa1fe272", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a627fc2-e800-472c-ad2f-d2bd37c03fdd", "sighting_of_ref": "indicator--e409b4e5-6a0e-4212-b692-5b494d64f0a6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b7684a-a002-45c2-a6ae-9bf8eb78b8a1", "sighting_of_ref": "indicator--e5820b55-8cc2-475d-9d33-a6f9228ab8dc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80143b54-babd-47f6-a150-5c9a7941ef6a", "sighting_of_ref": "indicator--1223a6c1-4f37-4bf9-bf25-b8b5fdf58bf8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c92cc8-a85c-4f75-a4df-de6b78a5d044", "sighting_of_ref": "indicator--9e1fde4f-9d21-4ea7-99a5-6f7be371bc70", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6f8578-aa55-4e46-ba98-2b25b401e3c0", "sighting_of_ref": "indicator--597e9d0b-c76a-42d2-ace9-7fbed722a7cc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8030a44-8f06-492c-9c87-afd349d314c1", "sighting_of_ref": "indicator--882ef3cc-f590-4619-9599-943d01c128fd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ffa39a-bcdc-45ef-89b2-fffdfdefd0c2", "sighting_of_ref": "indicator--2c2f2007-4bf1-4716-9eeb-23c6e3a6d1b8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaec9516-cee2-467c-9d65-fefa9d7884de", "sighting_of_ref": "indicator--b755a704-4b78-4d4d-9bd1-7fbb6ab0ef5e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17852b47-c860-4d36-bc7f-857f2a9316d6", "sighting_of_ref": "indicator--be0f84a2-d049-4912-9d1c-4a3696390437", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf328c3f-1d4d-4b20-8fb3-1b48de2bfce8", "sighting_of_ref": "indicator--be0f84a2-d049-4912-9d1c-4a3696390437", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2e85b0-5179-4f28-9fb1-a4179f16de45", "sighting_of_ref": "indicator--05234771-9cd9-478c-8e74-2d6f2ea82d67", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d54c9b-4a7f-4973-8c02-0719252194f3", "sighting_of_ref": "indicator--d42ccdbb-d634-4120-b818-3f34d6bd6093", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd0c122-eafa-4bd8-9d69-b0cd448a48ce", "sighting_of_ref": "indicator--35571936-4681-4cf1-87a6-adf4fd10e737", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc5e78b-4c49-473d-a11a-5caaed3488c7", "sighting_of_ref": "indicator--8685dac3-73c2-4fdc-aca1-2270d67abd53", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e54d621-286e-4624-bc75-f1c666d31f23", "sighting_of_ref": "indicator--40803ae4-d3b4-491b-a0b8-ae0f33cee964", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f5f562-d700-49f7-a3d7-a127082e5eb0", "sighting_of_ref": "indicator--f5553de1-52fc-4946-b99f-127a4b12a5c9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2024e501-276c-4f27-a2d4-68db33398432", "sighting_of_ref": "indicator--d40bd14a-7b82-4ca0-8fe2-26bdf317c744", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1370ef1-2d9d-4f1c-854f-293e2139a20f", "sighting_of_ref": "indicator--07861cba-6cdf-4904-bb9d-970b4ee5a32b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a948e8d-6545-4db9-8e48-0c4fab4cb144", "sighting_of_ref": "indicator--551944d8-793f-439b-8b15-ab9affc7f418", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc47d49-5f4b-42c8-93d6-099016feb849", "sighting_of_ref": "indicator--551944d8-793f-439b-8b15-ab9affc7f418", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735a83c7-d9d3-4ee0-ba48-3ca279f33032", "sighting_of_ref": "indicator--28854bcf-5f0c-490a-924a-7e567ba40d9a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3068268-fd19-4ad5-8d24-f82a817b7345", "sighting_of_ref": "indicator--f04b8b24-b73b-41f7-9a6b-85a41c219a14", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02150028-d151-4e93-b268-ff93c07748dd", "sighting_of_ref": "indicator--9b6cd1f6-e8cb-4157-881b-7e048d312418", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22176694-def2-4736-8b38-6392cab792e4", "sighting_of_ref": "indicator--ea519e21-bb5f-4cbd-bac5-3504163e6e40", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b60ca2-8e65-42ad-9c41-5a91c55721a2", "sighting_of_ref": "indicator--ea519e21-bb5f-4cbd-bac5-3504163e6e40", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520c581f-eaab-485f-9730-807a4a550185", "sighting_of_ref": "indicator--e087387d-9ac8-4b08-8849-15aa85dfa29d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7aff43e-fa24-4724-9827-cf3642ef14b7", "sighting_of_ref": "indicator--e087387d-9ac8-4b08-8849-15aa85dfa29d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9296412a-3f08-4505-8c30-921b8edd53ad", "sighting_of_ref": "indicator--3e7bb309-e9b8-4c8e-b00c-b5bc7814e377", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8748b386-2c7c-42ce-9464-70f698f6ac67", "sighting_of_ref": "indicator--15d59411-4f82-4be6-be7e-e3753451cafa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03c7415-e806-4a5c-bc06-54456824c663", "sighting_of_ref": "indicator--f9ea0562-3205-45bf-9954-f687e3eac6e3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03da0ea-03c4-4c92-9665-79b6918c5187", "sighting_of_ref": "indicator--d13aded0-4ebc-4acd-b5ef-45df7066535b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2fc6fd-28d0-4e6f-b230-cfca3a6c9fe2", "sighting_of_ref": "indicator--97499ebe-1c00-4c08-88ab-829b5caf4dbe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f5636f-5abb-450b-a56c-1fa395482a86", "sighting_of_ref": "indicator--a7459bc5-9961-4155-9f8d-8463ebc31af5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b33b94-7b1b-4eaf-9907-3dee732e7d7b", "sighting_of_ref": "indicator--b4c2bad7-3b64-4838-add7-ab5b50e7eeaa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cedf2ca-2fba-46e9-807f-a5f8818cbb40", "sighting_of_ref": "indicator--b4c2bad7-3b64-4838-add7-ab5b50e7eeaa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2e0a32-26e7-40cc-9a6c-5cb41828d29c", "sighting_of_ref": "indicator--b4c2bad7-3b64-4838-add7-ab5b50e7eeaa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2260834d-031c-4b55-a575-d95eb783ac7d", "sighting_of_ref": "indicator--60a96d98-5e3e-4e55-bd6e-648faf90ed99", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2867bb18-9847-46eb-bc73-88812cfc278f", "sighting_of_ref": "indicator--60a96d98-5e3e-4e55-bd6e-648faf90ed99", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153922dd-37af-4dc3-a41f-813241c71f40", "sighting_of_ref": "indicator--60a96d98-5e3e-4e55-bd6e-648faf90ed99", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7a60e6-2774-4da7-81f5-3bdd72ed1399", "sighting_of_ref": "indicator--a0cd57e5-4ab7-437e-9f4b-7dfe063e0b79", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f325f66d-f44f-4af3-b9b0-5def8c1566f3", "sighting_of_ref": "indicator--8ab9baf0-b291-4fe0-bb46-5d6d4ba7dd26", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f8148d-be71-49ab-9801-4fe3d02bd4bc", "sighting_of_ref": "indicator--6f67df0b-a0e2-4589-82ac-7c5fe60ce7ef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1e7446-bc5b-4465-b966-1108216fa711", "sighting_of_ref": "indicator--aeeeae3d-7d13-4208-a69a-a4e3050d6754", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662cc2b5-9079-4ed6-af6a-fd1e78855d4a", "sighting_of_ref": "indicator--ea0d1698-25ac-43f3-9ea9-9d212bbd757f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfe3a8a-e195-46a8-b58e-656cdf8cf2b2", "sighting_of_ref": "indicator--99dba369-2d32-45eb-8550-cb5e4e407898", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dec735a-a424-4316-b601-c2d457c01ca1", "sighting_of_ref": "indicator--16b853ab-a88f-4fad-8edb-dd4b5af88375", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56a5a4a-5684-4e2f-badb-7b4d979a0429", "sighting_of_ref": "indicator--6265017a-9f14-4a0a-b309-75f96f66117b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27712a36-037f-417a-95fd-a0add73528db", "sighting_of_ref": "indicator--7a8cbf41-0d99-466a-a13f-b2ce6b661e11", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa216d25-07dc-43ee-ae12-ae1e98bc1373", "sighting_of_ref": "indicator--7a8cbf41-0d99-466a-a13f-b2ce6b661e11", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c92d241-14de-4877-8c08-a0e36f89d95f", "sighting_of_ref": "indicator--7a8cbf41-0d99-466a-a13f-b2ce6b661e11", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2cfd29-ffd1-4a7c-af58-04ebae4d0f9c", "sighting_of_ref": "indicator--ea8d4a1a-096f-40d6-a3ed-89b56fa14892", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c213f5b7-fadc-4105-a801-e5e586b138b7", "sighting_of_ref": "indicator--1b863c22-d189-4435-bc37-c188c50ff613", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79abc75-0e79-4322-a169-84fa45b50388", "sighting_of_ref": "indicator--9cbe926a-58ad-4988-9106-62bc9903a11f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09262490-ef51-49f8-8709-aad50376994a", "sighting_of_ref": "indicator--9cbe926a-58ad-4988-9106-62bc9903a11f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00ff5fb-b78c-4b70-9cb9-d8cce2562c38", "sighting_of_ref": "indicator--9cbe926a-58ad-4988-9106-62bc9903a11f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30b7ba4-1c4e-4d91-86b2-ce70fa880c71", "sighting_of_ref": "indicator--d2c57bb3-fbaf-41d9-85d3-23c397a10c2d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9166a7f-8a40-4e63-ba56-43932abd124d", "sighting_of_ref": "indicator--0de26baa-4399-4767-8c65-3ef0e73e6baa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a1ae29-d1dd-4bde-929c-94f9fc0f1675", "sighting_of_ref": "indicator--15adf90c-12b7-4021-b4dd-1fd5000ebda4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a67b36-dacf-46fe-a45a-d343153765dd", "sighting_of_ref": "indicator--0fc38af0-2901-4ebb-b1fe-d8c1b408ebaa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d29e1e-075f-4d86-b0d0-b45771d48fad", "sighting_of_ref": "indicator--f5de9825-5000-42e3-953f-3d8e49518a7c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1def8dd7-6b83-4430-bddf-261005cba693", "sighting_of_ref": "indicator--ac9a967c-5754-48d0-a476-f131e487b256", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a057d74-4023-4916-b67b-158542f2bf0f", "sighting_of_ref": "indicator--5b860252-aecc-4939-822f-32467298b655", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb961c90-a582-4007-b7d0-f0df7fca4502", "sighting_of_ref": "indicator--99119071-bb69-4f05-a74c-64a177d3e2ee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71e75c1-fa30-411f-8ca3-d7da72a0d870", "sighting_of_ref": "indicator--8263454f-7f7c-4532-9fef-dbe6c491ed28", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e271d1-b847-4719-ab04-e72c43cdfe6e", "sighting_of_ref": "indicator--d0f1da36-9df2-48cc-bbe9-4f0a4447d93f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abf0cf6-e39c-4690-b203-8b244f16ecda", "sighting_of_ref": "indicator--ab92e3f7-9c37-407c-8dec-6d89658da441", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d687e5b-e6b7-47cc-8d15-b6f9ce1ec678", "sighting_of_ref": "indicator--245ad358-f10f-4a5a-8443-e29e6c74eb8d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48225e0-4354-48bd-ad7e-3a5309745b8b", "sighting_of_ref": "indicator--ae3e55aa-ecd3-4714-932d-9e0f83336dd0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc32d506-b502-4fcf-bfda-ad4d478d59b1", "sighting_of_ref": "indicator--d8b543f6-280b-41c8-84da-19346fc21ecf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed311723-3f87-4bb4-b6d7-f3bc912c99fb", "sighting_of_ref": "indicator--d8b543f6-280b-41c8-84da-19346fc21ecf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47461159-4b20-4279-9c87-09a0d888bdac", "sighting_of_ref": "indicator--d8b543f6-280b-41c8-84da-19346fc21ecf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986441ed-0419-44e2-9759-274f4d554b35", "sighting_of_ref": "indicator--63890165-e58d-4d12-b190-6cd0c2b0bfff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbf9491-ea84-45e3-a713-d82b84969d36", "sighting_of_ref": "indicator--559b9b8a-d73e-46e2-ad37-baba1345b92a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15addd76-2dc5-46f3-bf85-a6d39da57d6f", "sighting_of_ref": "indicator--f349ff32-6bca-4754-ae37-3e58acc29079", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca78e2f-b784-477c-a6e5-6fcb8c698120", "sighting_of_ref": "indicator--dbc5361b-3e6c-4a1b-9d3c-352da57e4d25", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f3a349-eba5-4d1f-85d6-89f9dd099e67", "sighting_of_ref": "indicator--32687172-e7e8-4676-a930-a5ab16425bbb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd877337-0d47-4727-a886-2dece6728e13", "sighting_of_ref": "indicator--32687172-e7e8-4676-a930-a5ab16425bbb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07eadec6-8b4c-4788-805d-bd24db2c1846", "sighting_of_ref": "indicator--506598dc-bfe8-4ac1-a526-12fe5899cf17", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bfe21b-f8d4-427e-bc41-99ee642ad0d7", "sighting_of_ref": "indicator--a5236bbc-b66d-47cb-b04b-cbe15f356bcd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aef5e80-2610-4aec-815a-b2e6859101b9", "sighting_of_ref": "indicator--a5236bbc-b66d-47cb-b04b-cbe15f356bcd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8b58fb-5dd9-4d9e-9c97-f34860502931", "sighting_of_ref": "indicator--2e147531-59cb-4483-8114-e03af4c998da", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d7890a-b366-4b00-af22-c172aae66e9e", "sighting_of_ref": "indicator--c167cad7-bbc2-464c-b978-932f7e471fdc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00ae7f8-147b-4a8a-b780-6ebfe35f9f6f", "sighting_of_ref": "indicator--f1d1c7a8-ffa0-49e2-b86b-8235b32be9bc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdda615-78cd-490e-8ce0-2b4848a69aa2", "sighting_of_ref": "indicator--5125ac9e-81d2-4d86-b976-26fcd9b7d378", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106e3e5b-9a7e-4349-bd1d-ed932919ad76", "sighting_of_ref": "indicator--ca1142b5-51e7-473d-aa7a-7ebe599c7992", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e36ba6-6e88-41ed-a1a8-9c9b54bdcf14", "sighting_of_ref": "indicator--ca1142b5-51e7-473d-aa7a-7ebe599c7992", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb9a900-8460-4535-a1a5-3e915e18c7f9", "sighting_of_ref": "indicator--448f5f42-ecd5-4d2c-b61f-cc48b7bd291c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b573973a-0ea4-43b2-95d5-74da237a2328", "sighting_of_ref": "indicator--448f5f42-ecd5-4d2c-b61f-cc48b7bd291c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a720d062-5b51-475f-87b5-66b527622b55", "sighting_of_ref": "indicator--9481c526-f9c9-44de-bacf-5ca7560cae1e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f495ab-3c25-4f27-b710-d6ce8304c39d", "sighting_of_ref": "indicator--4cd95a41-064a-4b7b-a3e5-a062d2d98615", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5fa4ac-912c-4aee-9a9a-924b586ac0b1", "sighting_of_ref": "indicator--4cd95a41-064a-4b7b-a3e5-a062d2d98615", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb8543f-75b7-4381-85e4-0fcf1aafe379", "sighting_of_ref": "indicator--f1648f5a-ba45-4562-832c-0337c18c9965", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18408104-89fa-4cb1-8fb1-3653f4ed004b", "sighting_of_ref": "indicator--f1648f5a-ba45-4562-832c-0337c18c9965", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925fafbd-934b-40d0-9003-cf2fda9b63cf", "sighting_of_ref": "indicator--f1648f5a-ba45-4562-832c-0337c18c9965", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a2bb82-86f6-4bcf-b0a9-d0a697f0c5e5", "sighting_of_ref": "indicator--15ece04a-cefa-4084-851b-ae8248c08239", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d658cf3-bea1-44b4-b3e3-a8f2e698351f", "sighting_of_ref": "indicator--14e0a1f1-b0d3-490a-a57d-9f800bda0aae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edcb774-81c7-4a6d-a598-ebc66cdbc352", "sighting_of_ref": "indicator--14e0a1f1-b0d3-490a-a57d-9f800bda0aae", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667a6866-cf71-4727-8920-e11baeb4c1a6", "sighting_of_ref": "indicator--14e0a1f1-b0d3-490a-a57d-9f800bda0aae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01db0c3c-b4eb-4690-8da6-e0c25452a5b7", "sighting_of_ref": "indicator--56e3d717-cf1d-4f2e-8215-b6f04081e54f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0da8a7-dd4e-46a6-a80d-e5380c1f2512", "sighting_of_ref": "indicator--0e188c7b-c4cb-491c-a785-49117dba3d97", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0c8fd6-b65d-4a83-99ae-d2a3b8f2af24", "sighting_of_ref": "indicator--8021c687-7e33-4096-b951-ebb274ef1633", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8c4648-ed32-446b-807d-dfe00853ffd7", "sighting_of_ref": "indicator--8021c687-7e33-4096-b951-ebb274ef1633", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1950563f-a390-48fb-9dc4-40d4052392b1", "sighting_of_ref": "indicator--fdbd6237-231a-4083-9dbd-e31a1bf7a469", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4375720e-a5d9-4810-a303-0e1117ef3599", "sighting_of_ref": "indicator--fdbd6237-231a-4083-9dbd-e31a1bf7a469", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa780f84-1cc0-4a19-8b8a-cb0bb9517f64", "sighting_of_ref": "indicator--0fb6d653-67a1-4ad6-898c-35e0a2af1e5f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4e1433-0f38-44e0-b231-3ba824a7ea37", "sighting_of_ref": "indicator--61a6f34b-861d-4e2b-a260-1c20bc0f844c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d249004b-63e9-4c92-8e93-18690d1dd349", "sighting_of_ref": "indicator--49b823ac-51f2-47e1-afc9-008a90eb3d45", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea39328-9cec-4ed0-b128-f02118abd131", "sighting_of_ref": "indicator--6302ef4d-ab35-4cc5-bcc5-d0bd5021f15d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6080ae8-e5b4-4541-90d4-109a0eb94cdc", "sighting_of_ref": "indicator--6302ef4d-ab35-4cc5-bcc5-d0bd5021f15d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c5d145-001b-44dc-b84d-dc801faa0dfd", "sighting_of_ref": "indicator--4f2a3efc-b419-4b32-9fd2-7775872c6028", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695f9a8b-9700-4a62-bf4f-9509263e83e2", "sighting_of_ref": "indicator--79c651ca-50a6-4b0f-9999-e216f4301d5f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c1e596-ff20-4302-a7d0-d5eb81e3bba3", "sighting_of_ref": "indicator--79c651ca-50a6-4b0f-9999-e216f4301d5f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da0784e-fc08-4c7c-8c57-9aae4e97c6f1", "sighting_of_ref": "indicator--79c651ca-50a6-4b0f-9999-e216f4301d5f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7be61b-54ba-40d3-b660-68537ae1a946", "sighting_of_ref": "indicator--d08a1142-0278-43d3-b997-b8a8d8eee9e0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c67383-d7ab-4d4e-a801-0908fc777489", "sighting_of_ref": "indicator--cca47724-665b-457a-9c2c-47bc70f2efb4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55266f0-8f79-4087-b09f-d9155fa9a231", "sighting_of_ref": "indicator--b075e654-e238-4fda-b462-482561aaad67", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17850126-4339-469b-9221-b360b719d77e", "sighting_of_ref": "indicator--dee575d4-8b14-4917-be03-cb4e8c91e00c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdeec9ac-d538-4c84-bdc0-61942f85fcad", "sighting_of_ref": "indicator--d48b0569-6fd5-4a49-b9fc-017bf05ea5bc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23546ef-13d2-42f9-b10a-74b12e81094c", "sighting_of_ref": "indicator--d48b0569-6fd5-4a49-b9fc-017bf05ea5bc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e0f61c-4cf4-4a21-8c40-21cccf4441c9", "sighting_of_ref": "indicator--539e03d1-b82a-41fd-a336-f29d9c68d214", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bafa4b-e8fe-4d9b-a72a-f4aed5fa287e", "sighting_of_ref": "indicator--88639d66-141e-43ab-97b6-655a4f451aff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8223ca-ab2b-47a4-b5e8-c6b20252e1c3", "sighting_of_ref": "indicator--56378d58-07ae-4c4a-ad64-ff084225e468", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df8a509-656c-4f48-94ce-2f3c9b071ee4", "sighting_of_ref": "indicator--14862245-3ac0-4a25-b636-9bc8f93fd2e6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c6a284-59e6-4e97-a3d0-eb3108e9517d", "sighting_of_ref": "indicator--1510ce0a-bbc9-4133-bd4e-08572db63032", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ab0982-4256-4512-a6e7-5dd719e13e50", "sighting_of_ref": "indicator--5f1d6920-b641-418a-b353-10502104cd57", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e53151b-c17e-48dd-95c4-e3ec9ebb60f9", "sighting_of_ref": "indicator--6d1b0e3b-5e27-4edb-8497-181ff9dcee3f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54809ca-caf8-4b62-88b5-fa99be508b3b", "sighting_of_ref": "indicator--6d1b0e3b-5e27-4edb-8497-181ff9dcee3f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2072734-ba8a-4e8e-b3e9-ab957bbb56e9", "sighting_of_ref": "indicator--c9e1e5a7-84d5-47dc-8b25-acc94134e668", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb94e199-ff81-448b-8e88-3f44c79e2a2c", "sighting_of_ref": "indicator--c9e1e5a7-84d5-47dc-8b25-acc94134e668", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e68485b-566f-419c-b2f7-3f278a788c1e", "sighting_of_ref": "indicator--d935ef78-23b5-4abd-84b6-e246620c3737", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44afd63-9b72-4bdd-a978-80d810c0ea15", "sighting_of_ref": "indicator--f989c042-fe14-431a-a8c3-d0410692916b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2380557-d528-41ad-84c1-d01c34f6131e", "sighting_of_ref": "indicator--f989c042-fe14-431a-a8c3-d0410692916b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880dab92-8be4-40c1-9ea9-1f2f98cbeccd", "sighting_of_ref": "indicator--f989c042-fe14-431a-a8c3-d0410692916b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757c1dd5-251d-4c69-b9cd-b258dfe1368e", "sighting_of_ref": "indicator--05f2bc5a-84ff-4763-a8ef-ad6e5be08a32", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1678435-b316-4b4d-875f-077d7c3708b1", "sighting_of_ref": "indicator--05f2bc5a-84ff-4763-a8ef-ad6e5be08a32", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c87d6e-72f7-413f-a524-6cf9bef7b3c3", "sighting_of_ref": "indicator--109af669-566a-4b2b-a137-d7f2598a850d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f56d03e-0cbf-4ad3-9fc4-4dcb00480a30", "sighting_of_ref": "indicator--109af669-566a-4b2b-a137-d7f2598a850d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0523632c-36f7-4be6-b2d5-255e136ad4c8", "sighting_of_ref": "indicator--f4cb1409-ff8c-4345-b6fc-34f7b2733243", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c987a725-f584-438c-a79d-aefd441da1d6", "sighting_of_ref": "indicator--f4cb1409-ff8c-4345-b6fc-34f7b2733243", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176d88c9-0954-4f73-a14c-3d8312b6d300", "sighting_of_ref": "indicator--84fd6d94-06e8-4758-b415-2cf460c7ce29", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba54105-bc60-41fa-8a27-57ff6e7453dc", "sighting_of_ref": "indicator--d9816678-e205-448e-ab5b-acd4c1676804", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fee3377-c29e-48f5-aa19-48714802330f", "sighting_of_ref": "indicator--12801a6c-ac26-43b2-b364-9c78fb91c140", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed54aa6-a8c3-44f2-95df-dc96f56ada02", "sighting_of_ref": "indicator--0b9a473d-d632-4c43-b639-291fbc32e112", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a9680f-558c-43a7-b833-260628acb8e2", "sighting_of_ref": "indicator--c1775501-15c8-43b4-b7a2-4b73af11aa91", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c769925c-c91e-4f67-90e4-5d6ac74e8c8d", "sighting_of_ref": "indicator--7aeed6fb-e97a-4b07-a6af-bea7ee256f76", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ce4beb-c24a-40ae-896e-5769eff7bf00", "sighting_of_ref": "indicator--27ee5d69-d3a0-452f-bc24-637cf786248e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87af8621-19e6-4be7-8f89-a4589c586e4f", "sighting_of_ref": "indicator--db3b9c65-63ea-477b-a0a9-7972b106c7d4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67c8296-b7e9-4dd0-a516-b93f90529e9f", "sighting_of_ref": "indicator--db3b9c65-63ea-477b-a0a9-7972b106c7d4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697bb0a1-6cfa-40c4-b7ed-e968eb4656d7", "sighting_of_ref": "indicator--db3b9c65-63ea-477b-a0a9-7972b106c7d4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67dd9f71-91c8-4482-bebd-dfe396bd4648", "sighting_of_ref": "indicator--812626ee-699b-4288-a32f-09205fc775bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4dd447-f1b9-41d7-8369-1905abed97cb", "sighting_of_ref": "indicator--812626ee-699b-4288-a32f-09205fc775bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcca055f-bc71-438a-90c4-c884a7dd7490", "sighting_of_ref": "indicator--812626ee-699b-4288-a32f-09205fc775bd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249df71b-70e1-4a2e-802a-43376e7144d6", "sighting_of_ref": "indicator--3380aa48-22a2-4849-a185-d82a022e7fca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459f9266-fe37-4776-9792-e7907c9b4397", "sighting_of_ref": "indicator--3380aa48-22a2-4849-a185-d82a022e7fca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f95695-c065-438b-8f92-0592a5ad42da", "sighting_of_ref": "indicator--f44188fe-5531-43d8-b427-2c03f28922b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097981d0-be10-4316-97a6-be3f8dc3a1b0", "sighting_of_ref": "indicator--54f39038-6403-42b8-9963-052920531df7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc39872-616a-4003-b16f-a91499cc86b9", "sighting_of_ref": "indicator--54f39038-6403-42b8-9963-052920531df7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52027469-930f-4401-b862-19d4f207218e", "sighting_of_ref": "indicator--9c122033-f3bb-487b-8261-62e978e882d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2d5ae6-3107-4633-ac51-a60bccc43f9e", "sighting_of_ref": "indicator--85642d50-a3d7-42c4-b165-ee83fc731f9d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f381ce2f-faeb-4e10-889d-900a56581906", "sighting_of_ref": "indicator--23c94d45-70bf-4b7a-b288-13e10657dc35", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bba2ba7-ee36-43d9-be2f-0490993f4686", "sighting_of_ref": "indicator--23c94d45-70bf-4b7a-b288-13e10657dc35", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd8afa1-68c6-48a4-b60c-2fb2d01107d0", "sighting_of_ref": "indicator--057f51fe-d871-4ab8-aa21-414fc7ad39af", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e865d1-5cf4-416c-813a-ac92cdef7763", "sighting_of_ref": "indicator--057f51fe-d871-4ab8-aa21-414fc7ad39af", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6370392-06bf-427d-b4d9-5c56d697c5d2", "sighting_of_ref": "indicator--63e544a5-8dac-477f-8da4-7ed922939c5c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4079f626-9887-410d-babe-122ad4ec0d2c", "sighting_of_ref": "indicator--65210c6b-ae36-41b1-8839-ee048da0d5df", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3607fcb-c6a3-4d97-b0f2-d34c0f1e34b8", "sighting_of_ref": "indicator--65210c6b-ae36-41b1-8839-ee048da0d5df", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551567b1-f1b6-4c65-bf88-a542084172ac", "sighting_of_ref": "indicator--af8abcdd-b624-41c9-9896-48fc6231f864", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937507ba-5c56-4955-990c-e7944ae3a202", "sighting_of_ref": "indicator--af8abcdd-b624-41c9-9896-48fc6231f864", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4935e12-14f5-41b7-909b-e8759d77de08", "sighting_of_ref": "indicator--af8abcdd-b624-41c9-9896-48fc6231f864", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5756276-747c-4b3a-90e2-95e6fa2213b8", "sighting_of_ref": "indicator--087099f7-4206-4598-9236-1594d6564167", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5dbac61-178c-498a-aa34-2727d891f8a5", "sighting_of_ref": "indicator--1ec296f2-3b71-4a86-8931-72e593f3d226", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10085c38-d3ac-4e57-9ec0-93996b48a1e3", "sighting_of_ref": "indicator--1ec296f2-3b71-4a86-8931-72e593f3d226", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96522a5a-6aa6-4f6d-845d-ae6ad1c09939", "sighting_of_ref": "indicator--73dbc099-7ddb-4e5a-b644-6c717840161e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5f33dc-4511-4144-9fc2-12e810dcf2e8", "sighting_of_ref": "indicator--d028ac30-8c00-4f61-b986-7d2883078e7f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e112a841-6707-4e9a-bcd8-accc4ac46132", "sighting_of_ref": "indicator--d028ac30-8c00-4f61-b986-7d2883078e7f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86580ac-4a8d-47ac-aa29-1422e7785476", "sighting_of_ref": "indicator--d028ac30-8c00-4f61-b986-7d2883078e7f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41d3432-315c-4bb7-91fa-b197572082c6", "sighting_of_ref": "indicator--0f676d92-8bac-4d5b-8fc5-705d4ba6d44c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3ae4eb-da20-48b1-b97b-6cfca45258cb", "sighting_of_ref": "indicator--0e92a444-2dd2-406f-96bc-136504504446", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1d19c3-c15a-4fac-8b3f-cce3b76fab59", "sighting_of_ref": "indicator--0e92a444-2dd2-406f-96bc-136504504446", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d0adff-ec5d-4f03-b770-2bd4951fc91a", "sighting_of_ref": "indicator--0e92a444-2dd2-406f-96bc-136504504446", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a861d8-d974-4c32-82cc-5a8b6093dd01", "sighting_of_ref": "indicator--18127406-9012-4ef7-9a2a-c96b5f06c4b7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef66fa8-faa9-4215-b3e1-7458b6add637", "sighting_of_ref": "indicator--350b24fe-9df3-4d9b-8a36-5dd7befd28b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0f5123-681b-46fb-ac59-ed18bb999706", "sighting_of_ref": "indicator--9e071118-b995-448c-ba25-45dc101a9d09", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b504897c-26c3-46cf-a27c-d23871494254", "sighting_of_ref": "indicator--80196f41-b290-4579-9e9b-b8d7206b70cc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec0964f-01bd-429c-93b4-a401432a4231", "sighting_of_ref": "indicator--07ccf427-49cb-4546-9879-1f595aea07ba", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a336cf9b-cd68-4874-8740-125c74575bd3", "sighting_of_ref": "indicator--07ccf427-49cb-4546-9879-1f595aea07ba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a04ccc5-602c-462e-a33e-90f584490890", "sighting_of_ref": "indicator--1abaeb17-8352-4993-a586-81991ca7ea8b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb02165-5ca1-402d-8074-372b3655e0e6", "sighting_of_ref": "indicator--1abaeb17-8352-4993-a586-81991ca7ea8b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d404ff72-0ef1-476a-b430-7e1d7f956aad", "sighting_of_ref": "indicator--3b8ca1fc-99ac-4c3e-aff8-61996120e367", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55f6f55-da99-439b-ad5e-c587b443beee", "sighting_of_ref": "indicator--c6827172-b387-4fd8-af27-5975d943d8c8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752da083-bd28-4b03-820c-27a2244678a1", "sighting_of_ref": "indicator--0788a31d-4704-4e25-a2d4-0e63b2266aa3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1351e74c-b578-4332-8a73-af1297c492ca", "sighting_of_ref": "indicator--f1878ca9-5c32-4a82-92d9-38f191cc8f10", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888319c0-86b8-44f5-bfc1-4b2d4ac0154d", "sighting_of_ref": "indicator--f1878ca9-5c32-4a82-92d9-38f191cc8f10", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14ef009-e2a5-419d-b2f6-97bc439e4d44", "sighting_of_ref": "indicator--abbf2714-67ab-4fa6-81cc-9ef0237fa2a8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe94342-3668-453a-8967-1672f1e4c9b8", "sighting_of_ref": "indicator--f662ce4c-7912-41f6-bacc-1eaba689b1ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37d662d-1234-4a2d-816f-4033cc80b0a5", "sighting_of_ref": "indicator--b5c96ded-f693-4be0-bc68-1402405f21ab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ceeb2a0-dbe7-4f2e-b2cc-fe4c1c621fc5", "sighting_of_ref": "indicator--af71ec2e-76d3-49ec-bfc0-b4ebab85e6be", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737cc41c-aaca-4bc3-abb2-bbb187224e81", "sighting_of_ref": "indicator--af71ec2e-76d3-49ec-bfc0-b4ebab85e6be", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94597ff8-05fd-4073-b62f-17287f0f87b7", "sighting_of_ref": "indicator--a8780f81-8610-466d-8720-cae89be883d4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c81831-07b8-4c1a-9a9a-d6f10be7547f", "sighting_of_ref": "indicator--3f69378f-f61f-4ed7-a552-8ad2a4f2bad5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c077f895-2fa6-4cf3-8ef9-e33b17ab428b", "sighting_of_ref": "indicator--03339770-d50f-4ba7-94e9-89beb17520b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd1bd08-8964-4be5-9987-b50ec68e4e53", "sighting_of_ref": "indicator--03339770-d50f-4ba7-94e9-89beb17520b2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad3cb52-13ee-49db-afd8-35fe9216e207", "sighting_of_ref": "indicator--03339770-d50f-4ba7-94e9-89beb17520b2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f567770d-e2e0-46f9-bfc5-58a39c636500", "sighting_of_ref": "indicator--9fbd0c08-f5ad-4457-ac16-c063d04d9efb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b8a072-0dbd-4db1-9d35-38bd39b6f775", "sighting_of_ref": "indicator--9fbd0c08-f5ad-4457-ac16-c063d04d9efb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17525d8a-d1bf-4d86-9e0a-17d80679bb2d", "sighting_of_ref": "indicator--9fbd0c08-f5ad-4457-ac16-c063d04d9efb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12e22e1-ba58-44b3-b3e7-2e95cd6ff202", "sighting_of_ref": "indicator--83446bcb-9cfe-4bf4-a487-7bfccf499ebd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3b8e02-607d-450a-a4fc-12660d5845de", "sighting_of_ref": "indicator--676fb5e1-f79e-4af1-b8e8-3d7626d4ab39", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc8dd76-7993-4abf-b6dd-384607446f4f", "sighting_of_ref": "indicator--c23f3e9c-e5c7-4f59-aa77-67947b693ebd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f392a49-fcc6-4ef9-b965-c12c5af47d6d", "sighting_of_ref": "indicator--c23f3e9c-e5c7-4f59-aa77-67947b693ebd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41af094b-9ca7-48f0-94bf-41d471a7af48", "sighting_of_ref": "indicator--c23f3e9c-e5c7-4f59-aa77-67947b693ebd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0055db1-afcf-40a3-bfd2-e81fef9a9d4e", "sighting_of_ref": "indicator--cdcd250f-e998-4b8a-8256-1287a560498d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32e37d1-3d5c-46b5-9ec8-316bf64ab26e", "sighting_of_ref": "indicator--c48e9455-cd46-4185-b084-c96d7d3f291f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55c5961-6199-4aa4-853f-8f9594d8a7f7", "sighting_of_ref": "indicator--c48e9455-cd46-4185-b084-c96d7d3f291f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f968a8c5-a72a-4786-8bd6-16cd1271a534", "sighting_of_ref": "indicator--d918491b-a580-4252-b39d-8cf4ae23882e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bb65a2-9079-4e68-8a02-fa7bbe43094f", "sighting_of_ref": "indicator--0cd54bed-c1e0-4337-97f0-85f11d71b955", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39d3b9d-7670-4640-89a6-d8c43df1c41f", "sighting_of_ref": "indicator--0cd54bed-c1e0-4337-97f0-85f11d71b955", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2987d63c-3313-41c3-be3c-64052b9281b4", "sighting_of_ref": "indicator--541dfbd6-fcb5-4933-a177-3b6ad3deb3d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84f5085-acad-4f9f-8da7-b161ecf7c1c8", "sighting_of_ref": "indicator--8a9c7c60-5e97-4dc9-9b57-7bfe176c043d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba4a577-a2fc-46bf-a8b3-f0cebee456b1", "sighting_of_ref": "indicator--c6429398-5a72-49dc-9f7a-680b56fddbbb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7a40ff-da3e-47d4-b83c-d301b7a65805", "sighting_of_ref": "indicator--c6429398-5a72-49dc-9f7a-680b56fddbbb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9b0d9e-5733-4991-b2a5-5c67079050f4", "sighting_of_ref": "indicator--c6429398-5a72-49dc-9f7a-680b56fddbbb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3249a8-2d2a-4f21-853a-cd024c97f42b", "sighting_of_ref": "indicator--1acc1d6e-e339-406f-8a35-958a87dcb0b0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6778cb-5f65-4e63-a481-30d9a70dd58c", "sighting_of_ref": "indicator--1acc1d6e-e339-406f-8a35-958a87dcb0b0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf10d91-584f-45ec-a3e1-d81465164d70", "sighting_of_ref": "indicator--5f8ac91f-a41e-4aed-bd11-7413af9f55ac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4806e407-fbe0-4ca6-a771-c4fb02c831a4", "sighting_of_ref": "indicator--5f8ac91f-a41e-4aed-bd11-7413af9f55ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c665f9-9420-471c-b454-7ce00645641d", "sighting_of_ref": "indicator--aed169b0-e840-43f5-a052-e4279448e150", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194be144-ff0e-4be0-b494-975b939ed72b", "sighting_of_ref": "indicator--aed169b0-e840-43f5-a052-e4279448e150", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7960543a-dc93-4e00-b2af-0b8b544b295c", "sighting_of_ref": "indicator--f24e83b5-a2b0-46d3-9541-ee70b193c966", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6748662f-21c1-473b-b68b-faf146b83419", "sighting_of_ref": "indicator--efae24cf-669a-4077-8f3d-3327b807bfbf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012cc429-7e03-4b0b-8945-a5cf92fd1bac", "sighting_of_ref": "indicator--efae24cf-669a-4077-8f3d-3327b807bfbf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d000b7b7-f6d0-4f83-899a-d710ab5d7050", "sighting_of_ref": "indicator--066b2692-aec8-4a7b-a32a-9f144012a49e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874ab8c2-ffa1-45d6-8e48-d06b6d3641b0", "sighting_of_ref": "indicator--066b2692-aec8-4a7b-a32a-9f144012a49e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646dc3b4-2170-4600-bee9-c47f0b7aa562", "sighting_of_ref": "indicator--3cf3bf53-e23e-44e6-9fab-708eed190f57", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1a8da7-a2ff-4b63-99a8-1654b22e9b5f", "sighting_of_ref": "indicator--3cf3bf53-e23e-44e6-9fab-708eed190f57", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594b953b-0fe8-4a2f-9624-f72253104705", "sighting_of_ref": "indicator--3cf3bf53-e23e-44e6-9fab-708eed190f57", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb7e020-0821-4db0-9cd5-d2dce65ab00d", "sighting_of_ref": "indicator--5c083254-c0d2-43ca-84c0-229e16ef8683", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f477f71e-27d0-478c-839e-2e87e899b305", "sighting_of_ref": "indicator--35249453-4ba4-4e6e-ac81-9bbffb682eea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4dc11bb-1b87-44b1-b989-7e0c5a789b6f", "sighting_of_ref": "indicator--8f41f32a-7bda-4996-ac2c-448736943e81", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767e5840-684b-4f46-b158-2a7898088a2d", "sighting_of_ref": "indicator--02dfcc1c-edbb-4e05-b88a-27473d62ceba", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b161b2-913a-40fc-a7e9-95ca3675032f", "sighting_of_ref": "indicator--02dfcc1c-edbb-4e05-b88a-27473d62ceba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8402ad-7a2f-4c11-bdd7-8574985231c7", "sighting_of_ref": "indicator--481a0c05-8532-4ac1-b37e-969f58400842", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f323746-3e50-4d69-9fbe-8d8bc720614b", "sighting_of_ref": "indicator--481a0c05-8532-4ac1-b37e-969f58400842", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b39121-0f55-40b0-ba96-6b9b1db24b43", "sighting_of_ref": "indicator--5934ee24-3f04-4f87-9628-3a6a33762379", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6320b7ef-4b9c-4075-b757-6d5f0c3643fc", "sighting_of_ref": "indicator--5934ee24-3f04-4f87-9628-3a6a33762379", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51306fa0-f065-44b7-965e-64baa50c1eef", "sighting_of_ref": "indicator--959a439b-d5f6-454f-8039-5e6d65a8812f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c31d94-d91a-40da-aca6-fc3e7aa89ed4", "sighting_of_ref": "indicator--959a439b-d5f6-454f-8039-5e6d65a8812f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f237f1e7-65a5-4b9e-96cf-ddd4f3e06cb5", "sighting_of_ref": "indicator--959a439b-d5f6-454f-8039-5e6d65a8812f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b767f53c-32cb-46dd-8791-c132cba09c78", "sighting_of_ref": "indicator--f66ee8f0-a558-476f-8527-876c8d6be957", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7590f762-a426-4d79-be9c-9db3990e05ab", "sighting_of_ref": "indicator--f66ee8f0-a558-476f-8527-876c8d6be957", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c300dd3-32c8-4408-96d8-bfe76f006838", "sighting_of_ref": "indicator--f66ee8f0-a558-476f-8527-876c8d6be957", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b006cd-a263-4da8-91c1-afb298a84bcc", "sighting_of_ref": "indicator--1762b849-89ad-4184-8f66-af6f37f50f87", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3e3ae4-2a28-4237-b53a-05ba3a8e3b5a", "sighting_of_ref": "indicator--44c94ddf-f3e3-4ca5-876c-53f7d7320af3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c538a2-81b8-43a8-b126-38d114027282", "sighting_of_ref": "indicator--a46b3df0-4137-4a16-ba3d-8414fa0a9c7f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504838ba-6966-48fd-acaf-1aa077da3fec", "sighting_of_ref": "indicator--a46b3df0-4137-4a16-ba3d-8414fa0a9c7f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d7b49c-fe0c-47a6-911a-a19d639042c9", "sighting_of_ref": "indicator--a46b3df0-4137-4a16-ba3d-8414fa0a9c7f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2801b7-dba5-4a4e-a18c-9e87cfa6dff8", "sighting_of_ref": "indicator--d34053c0-d0d5-4f70-8192-9c5eaa376f1a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b9a5c6-4ebb-42e0-b006-a1ef1d0215b4", "sighting_of_ref": "indicator--d34053c0-d0d5-4f70-8192-9c5eaa376f1a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae92bbe-101c-4f46-b6c9-c96576d705dc", "sighting_of_ref": "indicator--1a58365b-cdd3-437c-ad77-d4850fc65641", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41c65df-aa5c-4ba6-b7eb-a0bd7278c0b6", "sighting_of_ref": "indicator--1a58365b-cdd3-437c-ad77-d4850fc65641", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797f6e5f-6e53-451a-95c7-8c3d903b3875", "sighting_of_ref": "indicator--db8a9118-fb84-4cf1-a3cf-2f31300cefa0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ededc6-6e0a-48b8-826e-a99236e71bf8", "sighting_of_ref": "indicator--db8a9118-fb84-4cf1-a3cf-2f31300cefa0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8d0e5e-282f-4417-8e1a-4409caded468", "sighting_of_ref": "indicator--8604c7d0-c4c1-415a-850a-3d1e442a660f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff71890-1e33-4fa3-80b3-02538ff4fe58", "sighting_of_ref": "indicator--805a2d7d-eefe-4ec8-bba8-89e29483e569", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a88900-aa85-4c8d-a968-fcc4219b87c3", "sighting_of_ref": "indicator--805a2d7d-eefe-4ec8-bba8-89e29483e569", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938962ec-b09d-448a-9d10-56b3bf192702", "sighting_of_ref": "indicator--805a2d7d-eefe-4ec8-bba8-89e29483e569", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e09ad7-fb5b-4b0f-9b9c-1d287eec7672", "sighting_of_ref": "indicator--5c9f8bfe-5e0c-44d7-b17e-26a170485ab1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3dba43c-5a76-4f12-88ee-1d4c674f0223", "sighting_of_ref": "indicator--58e4c372-6ed9-4bb1-9981-5c344a390986", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baee5c44-0a95-49c3-af71-ee1bac631946", "sighting_of_ref": "indicator--08070a68-3544-4805-b7b4-2790103167ed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e8929f-6860-4ff5-8dc8-6cec4734eeda", "sighting_of_ref": "indicator--08070a68-3544-4805-b7b4-2790103167ed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ef22b6-dabd-4596-a76a-1d48fdd8b35d", "sighting_of_ref": "indicator--08070a68-3544-4805-b7b4-2790103167ed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba68922b-1ac3-4731-b6fa-464547c7d5e8", "sighting_of_ref": "indicator--74d0d4d7-da2a-4fbf-ac98-0089ea2a564f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399f1901-8b7a-4f01-b7bf-7a29e5676c67", "sighting_of_ref": "indicator--e2ac7114-3557-4c16-9a9d-29b229e1136e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b73261-9ecc-42ef-be5a-c28c2ae209ad", "sighting_of_ref": "indicator--e2ac7114-3557-4c16-9a9d-29b229e1136e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddb504f-602f-4f06-8719-79ddb4283ee0", "sighting_of_ref": "indicator--d756783b-a521-4074-9d60-e85795f54346", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d28b58-20d9-4e64-9c2b-d71055e93bb4", "sighting_of_ref": "indicator--d756783b-a521-4074-9d60-e85795f54346", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffef3ff-95c3-420f-bcf5-b24f109122c2", "sighting_of_ref": "indicator--d756783b-a521-4074-9d60-e85795f54346", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849dd3d6-0f83-4ecb-bd2d-6fb95db6c361", "sighting_of_ref": "indicator--2772fac6-76b9-43d8-a1fa-d53f6853bc24", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346c3b24-2760-42bb-a447-e1fda62cd3e1", "sighting_of_ref": "indicator--a562d287-432c-462d-b2dc-6926e2615c61", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648b90d6-2495-4e31-9735-5cd07cb3f851", "sighting_of_ref": "indicator--b6b0a1fd-29a0-420b-8344-6f5656054f2a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93855af8-516c-4311-85bc-44d5fd8e6273", "sighting_of_ref": "indicator--b6b0a1fd-29a0-420b-8344-6f5656054f2a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa74906-1ea8-4979-ac63-1dd53b3a72a7", "sighting_of_ref": "indicator--b9b9e1ed-2117-42ff-afcb-9e5dc59ac492", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f02688-55a1-43d2-9d31-2588bba6b56b", "sighting_of_ref": "indicator--1993ea27-d472-45a5-9424-2df5a0f54177", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3f3309-c52f-41e9-a8ee-c5a8c7e3bff6", "sighting_of_ref": "indicator--1993ea27-d472-45a5-9424-2df5a0f54177", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1b4e81-7328-4cf0-8b54-d9a83dbd8d02", "sighting_of_ref": "indicator--160ae6db-2552-43b1-ab87-b2eab8c237f1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d31f5b2-3c9f-4fb1-ae06-814723142ef0", "sighting_of_ref": "indicator--cafd0b2d-5edd-4eb0-a0a8-b28d552450ac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4507994-c6b1-4e64-af4b-99fe63535b7d", "sighting_of_ref": "indicator--cafd0b2d-5edd-4eb0-a0a8-b28d552450ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7507931-055a-41a5-9f12-f45aba10799c", "sighting_of_ref": "indicator--4d839e6f-42d7-4e45-b4b3-d1424941826d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd047e0-e95b-4c26-8243-0048f4be4d83", "sighting_of_ref": "indicator--c49a43ad-d297-4385-a005-17f9e90972cd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58962932-3dbd-453c-8a1d-37e55060e0db", "sighting_of_ref": "indicator--c49a43ad-d297-4385-a005-17f9e90972cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7c2d9d-b158-49f8-aa56-4bf17d55400e", "sighting_of_ref": "indicator--75ecf778-b9eb-47eb-b1ad-9b34b7c15812", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43a1369-8f82-46eb-bf02-658a4ad1c818", "sighting_of_ref": "indicator--75ecf778-b9eb-47eb-b1ad-9b34b7c15812", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd040cd-9777-48f5-871f-739a20886108", "sighting_of_ref": "indicator--75ecf778-b9eb-47eb-b1ad-9b34b7c15812", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7caa0de-e1b0-476f-ab04-9f66c5313a69", "sighting_of_ref": "indicator--a8d6a43e-4c32-4ed3-ad2b-f19fe5a339d1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6564773a-a0c6-41a1-aa65-26fa277e572a", "sighting_of_ref": "indicator--52b78289-16b4-4bd2-b9f0-e53e5534c8c4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239ea511-3537-44ea-9973-6b2956cbc951", "sighting_of_ref": "indicator--52b78289-16b4-4bd2-b9f0-e53e5534c8c4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24795e35-66b7-4031-8be5-984ec2114960", "sighting_of_ref": "indicator--c1abcc7e-e23d-42af-8415-def5aa6a8272", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee63de62-2c0c-4a77-91de-3d2f5398b529", "sighting_of_ref": "indicator--927915dc-c168-4ce5-9594-f9fdd11b2e6f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63b826e-c74f-4ab3-9b3d-a00fd6fbcd6f", "sighting_of_ref": "indicator--927915dc-c168-4ce5-9594-f9fdd11b2e6f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c63f83b-832c-4590-92fc-0cf356dcf7a4", "sighting_of_ref": "indicator--927915dc-c168-4ce5-9594-f9fdd11b2e6f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe82bd34-ca49-4be3-b48f-56db44d87399", "sighting_of_ref": "indicator--93030c41-33e1-4b17-b9ca-db9fe124bfa4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e2373d-e206-4ae9-9936-7d110e0660af", "sighting_of_ref": "indicator--93030c41-33e1-4b17-b9ca-db9fe124bfa4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cf69e3-8db1-4fa4-8219-3ad0d9c032d6", "sighting_of_ref": "indicator--93030c41-33e1-4b17-b9ca-db9fe124bfa4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca784fcd-34dc-4cba-82b2-c75f9d1223ed", "sighting_of_ref": "indicator--d4500d3d-e4e0-4a78-98e0-099b673dce0c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13200ed4-df67-4319-bc1d-ca99d4cd3201", "sighting_of_ref": "indicator--207e2e54-595b-4f15-9119-8e7f97110e06", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e8fe6c-2f25-474c-ac6d-f63d0b31dbc3", "sighting_of_ref": "indicator--b6c66e45-afaa-4f18-a189-29009916f042", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df4fd23-9453-46ab-baa1-027ff9b5f054", "sighting_of_ref": "indicator--b6c66e45-afaa-4f18-a189-29009916f042", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62803dc5-cc07-4a4b-9b96-d2547717f1e2", "sighting_of_ref": "indicator--b6c66e45-afaa-4f18-a189-29009916f042", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5daf08f6-1998-4fe8-98a6-5e3e827dc9d2", "sighting_of_ref": "indicator--863c0e8d-ec2d-41dd-b025-d1af5c365382", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb86b07-e14f-46fc-bfb0-4997bb4fcbe7", "sighting_of_ref": "indicator--863c0e8d-ec2d-41dd-b025-d1af5c365382", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c466baeb-3b00-416a-8d5b-2c235480a358", "sighting_of_ref": "indicator--d90f66d5-b6a0-4abe-a900-1fecd144571d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcf08dd-9d6c-414a-ad7f-841faa1b3f76", "sighting_of_ref": "indicator--294600e0-98d2-4000-9a3a-bb77d861afd4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a802474-a62b-4263-9a1c-60be1a3f2803", "sighting_of_ref": "indicator--bbdf11cf-fa74-4966-976f-8807fa3f5b83", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cced04-1187-4bab-8fe9-c66c109ab012", "sighting_of_ref": "indicator--cc1dd58f-13a3-4590-a3f8-e5cdb4103c21", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4e8f89-b9e2-460a-9d28-27b6ac8c7acc", "sighting_of_ref": "indicator--cc1dd58f-13a3-4590-a3f8-e5cdb4103c21", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ca9117-3925-4974-832d-80a5cd13767f", "sighting_of_ref": "indicator--cc1dd58f-13a3-4590-a3f8-e5cdb4103c21", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496d5ba6-e56f-4a3b-9d3d-bd485e627c96", "sighting_of_ref": "indicator--f7a0cadf-33ad-432c-bd2d-284e6361f6f0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb70bef-32b0-49ea-8a61-41c2cdaa46d9", "sighting_of_ref": "indicator--f7a0cadf-33ad-432c-bd2d-284e6361f6f0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9fca599-6390-4aaa-900b-8c0e4bbf21c6", "sighting_of_ref": "indicator--055cad51-5d1e-4675-be6e-e927410d7da1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2d9220-32b1-4104-a131-dd19141d3c39", "sighting_of_ref": "indicator--7940c1b0-0f9e-4b78-b288-83aefbfeef5e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba681d9d-a817-46aa-8317-83979d912cd7", "sighting_of_ref": "indicator--7940c1b0-0f9e-4b78-b288-83aefbfeef5e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb884ae-a36e-4e6c-af29-2c6b652a750f", "sighting_of_ref": "indicator--f3a00e0e-d9ec-4bb7-a28a-9f192fc6a119", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e797bcf8-9dbe-4a23-95ab-fa570a92ad4e", "sighting_of_ref": "indicator--f3a00e0e-d9ec-4bb7-a28a-9f192fc6a119", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f552d1-f06f-4d21-815c-281b15ce41a6", "sighting_of_ref": "indicator--f3a00e0e-d9ec-4bb7-a28a-9f192fc6a119", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549a62b3-1f30-4f4f-b30a-9105f6b08e96", "sighting_of_ref": "indicator--f32dfd6d-5381-429c-9e76-14aee00fe73e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327d5417-a9c6-475f-836a-48307d04051a", "sighting_of_ref": "indicator--f32dfd6d-5381-429c-9e76-14aee00fe73e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71234755-d513-4783-82af-4af7f693f63a", "sighting_of_ref": "indicator--a769ab7c-2b65-4bc0-a427-e4644e6f65ca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40a9046-0415-4de2-b8ed-0660583f8080", "sighting_of_ref": "indicator--21fc464b-358c-4ebe-a83c-d078cfd0cf37", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc0296d-08cb-4cd2-8588-2db817937b2c", "sighting_of_ref": "indicator--599af747-37e2-4d0e-af76-dad1ca159cbe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9802bdc-5b82-49d1-8419-acf1db2f0122", "sighting_of_ref": "indicator--599af747-37e2-4d0e-af76-dad1ca159cbe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a134c87-6ad5-4707-9d37-3b8c0c564650", "sighting_of_ref": "indicator--599af747-37e2-4d0e-af76-dad1ca159cbe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96eef755-536b-45f6-b87b-99c05ddb45f9", "sighting_of_ref": "indicator--0fb08bc4-75a4-43d4-978d-5b332452f5e6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81f3d44-18bb-4d1f-a7f6-043810aefd34", "sighting_of_ref": "indicator--0fb08bc4-75a4-43d4-978d-5b332452f5e6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdae955-11f5-48aa-b3bf-e26c8a1d5203", "sighting_of_ref": "indicator--0fb08bc4-75a4-43d4-978d-5b332452f5e6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbe5db0-c5b4-422d-86bb-184b9e14ed21", "sighting_of_ref": "indicator--ead3d34a-7ea3-47c4-bc17-0841a5d84a8a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc979da-44c2-4e64-95dd-a844d05aad69", "sighting_of_ref": "indicator--ac8f060b-c8c5-4917-b6cc-0bbd393cdcb8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d01042-b7d0-40f2-af38-a31a108c6ead", "sighting_of_ref": "indicator--549491e6-53a3-43df-9888-7179fb793550", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26842c01-8414-4fd2-8c2d-7ab010709a98", "sighting_of_ref": "indicator--531e3c85-8605-4ea5-bf7a-4fd60683d079", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912c9698-ab2d-4964-a548-be9a1d0345c5", "sighting_of_ref": "indicator--531e3c85-8605-4ea5-bf7a-4fd60683d079", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ed470d-41f1-488f-90fe-1341d3d2fffd", "sighting_of_ref": "indicator--dce76947-bc36-4a0f-8355-9118bf84d238", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4513aa8-4441-43c7-80f2-357b7adccb6f", "sighting_of_ref": "indicator--335af512-1a25-43a0-a4b3-8b74a0b8a356", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37bdbafe-7ae0-4686-b6cf-a6eabca1a44b", "sighting_of_ref": "indicator--d898ae16-197c-488c-8517-ce72f0d88b37", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b583b8-16e8-40d8-82f0-fa02f9be04de", "sighting_of_ref": "indicator--558b42a1-42da-4577-b409-9dba629858fb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1faa523-0538-4ac3-abe3-a8abb81cc2bf", "sighting_of_ref": "indicator--13e1e7ae-960e-4376-9c17-189793d4de66", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83764aa-e4e9-4f5c-8e1f-ce259fe53218", "sighting_of_ref": "indicator--60a70d75-9381-448f-bae5-a8464fb02af1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2afed4-8a81-47bd-9c5c-ad80a033ec6f", "sighting_of_ref": "indicator--9be09489-aec2-4af3-aac6-e583ccd9a8d2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc83495c-e9cb-45e9-a34a-8c952c5d73d5", "sighting_of_ref": "indicator--10d0e389-9647-481f-96b0-0ed031d98ec2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902317d9-5df4-4fa4-80dd-43f30706b260", "sighting_of_ref": "indicator--10d0e389-9647-481f-96b0-0ed031d98ec2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8734cb5-ec6f-4a5b-b934-7477798c76da", "sighting_of_ref": "indicator--49c2fb5d-2ca7-4e16-8815-a1678fdea13b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c532c3-5907-4991-b12f-644dccb7b2ec", "sighting_of_ref": "indicator--49c2fb5d-2ca7-4e16-8815-a1678fdea13b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd53be7-66a9-48a5-9522-b6ca70f7a33c", "sighting_of_ref": "indicator--49c2fb5d-2ca7-4e16-8815-a1678fdea13b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbbe951-b4e8-464b-bb5b-3f0df92f220a", "sighting_of_ref": "indicator--495dfb73-aaf3-402c-ae0a-1c9c801fa2d9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eeda360-b632-4364-a85f-8ce17b877298", "sighting_of_ref": "indicator--495dfb73-aaf3-402c-ae0a-1c9c801fa2d9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2285cea-a135-459c-8536-15d72c5a7ee7", "sighting_of_ref": "indicator--495dfb73-aaf3-402c-ae0a-1c9c801fa2d9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34566c4d-d1ea-41ed-8817-dafb4acaa230", "sighting_of_ref": "indicator--8b36850f-7c3c-44e8-ab60-f43b23029ae4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25c707f-35c1-477b-8924-e59f1de1aa4a", "sighting_of_ref": "indicator--52e6c559-7995-4576-aec7-072458199b10", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b353dad6-2b9e-4dbf-b180-97a7c264eba5", "sighting_of_ref": "indicator--1f8240e3-9671-4598-bab6-541d931fafaa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89853449-d989-4d80-a1ed-6d7871f1a6f4", "sighting_of_ref": "indicator--9605882a-01d5-40fa-b8fe-2fa90e06688f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c2cb9b-4742-4bcb-b868-685dc6633158", "sighting_of_ref": "indicator--ed31feba-2bfb-464c-9ada-d2a553307f2c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f3834b-3e4a-4c2e-a72f-7bbe044a93e7", "sighting_of_ref": "indicator--462106a3-4c86-48a4-8f5f-1a106919288e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e6adb6-5a8f-4c2e-b8d0-c5be2bc6915c", "sighting_of_ref": "indicator--59788c07-863b-4ed8-830d-88a3bad5d98d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040b1151-82ed-450e-a724-c3abf7771aad", "sighting_of_ref": "indicator--ab0d4066-4f18-4306-87aa-58b4decf59bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3180c1a0-39d5-4e11-9bdc-870bfa14e629", "sighting_of_ref": "indicator--06c2926b-9d37-46a7-81f0-225b09dee326", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0738ea-e8e2-4736-b413-8b5e15a6fd76", "sighting_of_ref": "indicator--30f4d203-a89d-445d-a5d5-b7c37f0d29f7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b25dc56-9a8b-4dd0-b8fd-a72c88440ce8", "sighting_of_ref": "indicator--30f4d203-a89d-445d-a5d5-b7c37f0d29f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87caaea-09f5-49a5-9d11-ce72fc882cd0", "sighting_of_ref": "indicator--30f4d203-a89d-445d-a5d5-b7c37f0d29f7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7676a42c-37cd-4931-9512-c40059f73e25", "sighting_of_ref": "indicator--0857cc3c-6d24-4c88-8da7-9694070f4f75", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e96b588-ff77-487e-82c1-be6eec4fce9b", "sighting_of_ref": "indicator--0857cc3c-6d24-4c88-8da7-9694070f4f75", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb2da35-192a-404e-a62b-1f602e5f610e", "sighting_of_ref": "indicator--c95adbba-9a9b-48cb-b45a-85fe4374815e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca2f71f-6430-474d-bddc-74da92465194", "sighting_of_ref": "indicator--0bf924bf-f67c-4950-a5dc-6cd0329ace1e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3671762b-79e1-4ce9-9a82-a8fb493639c2", "sighting_of_ref": "indicator--3379f563-cabb-4b1a-94f6-f1cabb3de364", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea39ccaa-ad5e-43dc-b868-b29c8c7fd49d", "sighting_of_ref": "indicator--b31d588a-64cf-46de-a0f3-172c3537f072", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7009f3-8245-4f8a-9c28-db9c44ee6f02", "sighting_of_ref": "indicator--d3f735d3-207e-4a03-b11d-83c2dbaf34e3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6375c4-bfe7-471a-876e-67ba185e211b", "sighting_of_ref": "indicator--fd50c140-3f7b-4c69-a199-10139fbd3390", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba36557-b18f-4018-8ad2-efd1de4bb43a", "sighting_of_ref": "indicator--fd50c140-3f7b-4c69-a199-10139fbd3390", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a059a2d6-a9d4-4881-b440-4254ac26e837", "sighting_of_ref": "indicator--fd50c140-3f7b-4c69-a199-10139fbd3390", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605cf397-ce35-46e6-969f-3e3396f7f7dd", "sighting_of_ref": "indicator--8c5acc10-e4b1-4040-8779-3c1655c4818d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fcfaca-4a24-43d5-8871-127ba78fbb7a", "sighting_of_ref": "indicator--8c5acc10-e4b1-4040-8779-3c1655c4818d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cda753e-8f6b-43ad-b216-ad9d2b39a615", "sighting_of_ref": "indicator--8c5acc10-e4b1-4040-8779-3c1655c4818d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7454e4-fbac-4e4c-9925-20f41d3baa26", "sighting_of_ref": "indicator--a11737bb-d280-4734-8874-d8130dd502b1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5839c3f-84ff-4bc0-80c7-d1fa6e0993db", "sighting_of_ref": "indicator--a11737bb-d280-4734-8874-d8130dd502b1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6861a0de-8105-4bbd-a98d-551a6d9c485e", "sighting_of_ref": "indicator--a11737bb-d280-4734-8874-d8130dd502b1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef40806-3529-4a17-ba35-637c2e352d64", "sighting_of_ref": "indicator--ef19a9f3-cdcc-4154-bc8d-8dca54a56c2e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0535bb-3cb9-4195-815b-482e45a80980", "sighting_of_ref": "indicator--ef19a9f3-cdcc-4154-bc8d-8dca54a56c2e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b53c55-a0ee-41a1-affe-05200f776341", "sighting_of_ref": "indicator--ef19a9f3-cdcc-4154-bc8d-8dca54a56c2e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aebe19f-848f-459a-9850-1fc721204b33", "sighting_of_ref": "indicator--7c53ad19-233f-4df4-be3d-9781e53d3b95", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d288c5b1-4315-4e81-a19d-3b4760ce1505", "sighting_of_ref": "indicator--7c53ad19-233f-4df4-be3d-9781e53d3b95", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68c926c-fd4c-45dd-9ee4-e2a880076c7c", "sighting_of_ref": "indicator--7c53ad19-233f-4df4-be3d-9781e53d3b95", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c72b5a-100c-4ffa-9c96-353328e68aa5", "sighting_of_ref": "indicator--949e642e-464c-41e4-9b84-234e3bc5ac09", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e0e85d-0e54-418d-821a-a788a7e3e016", "sighting_of_ref": "indicator--949e642e-464c-41e4-9b84-234e3bc5ac09", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5274ff-4936-47cb-a45a-eadf0e657298", "sighting_of_ref": "indicator--949e642e-464c-41e4-9b84-234e3bc5ac09", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a0ebd4-b7e1-457e-9179-a5169f9d8ddb", "sighting_of_ref": "indicator--1bb9a9a2-641f-437e-8f9e-f5f3281599a9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06e9d14-f90c-4dee-aff8-feb1f83750eb", "sighting_of_ref": "indicator--1964b98c-09a2-4866-8a76-5bd1a8268708", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b382c6-1e3d-4d4a-9d63-cf3beae2f28e", "sighting_of_ref": "indicator--3a899651-53e0-4cd6-83cf-08137fbd1584", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469a738e-c7c9-426d-938a-08b541073fbd", "sighting_of_ref": "indicator--3a899651-53e0-4cd6-83cf-08137fbd1584", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fb7b94-fd27-487a-bbf7-43dcde4cf2c3", "sighting_of_ref": "indicator--39b51c2b-f04f-4c43-ad80-a25b743fbaf9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6479617e-c322-4966-8d30-6d0a5279d02b", "sighting_of_ref": "indicator--39b51c2b-f04f-4c43-ad80-a25b743fbaf9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1982dd21-9f3c-4d38-bf73-32bdffceb7fa", "sighting_of_ref": "indicator--39b51c2b-f04f-4c43-ad80-a25b743fbaf9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7b655c-fad2-4a6c-b77c-e7445130807c", "sighting_of_ref": "indicator--50824338-af8b-4bc1-b805-8e1f190a45c5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e65ad38-7313-471d-8d75-92f81cfe810a", "sighting_of_ref": "indicator--6fb647c1-ee15-4009-827c-043e786bb9a2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0549ff5a-2965-4160-8765-164dd4587691", "sighting_of_ref": "indicator--1f03757b-96ad-4327-b243-690cda697b4e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ff7f3a-ec46-48c6-8774-270a3617a492", "sighting_of_ref": "indicator--1f03757b-96ad-4327-b243-690cda697b4e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db82d057-eab1-4a24-8aef-3c6eb5cf8a30", "sighting_of_ref": "indicator--1f03757b-96ad-4327-b243-690cda697b4e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556d1fab-8e62-4297-a4ee-41bbd5730499", "sighting_of_ref": "indicator--c1a75d3f-4a47-48ff-8868-aad017d5c9d1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4331381d-0bba-47ea-895a-e61278f4c045", "sighting_of_ref": "indicator--97847eea-9032-4534-9a89-677b05d22d81", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9e3afd-968e-410d-b4fa-6dc2e3d022fc", "sighting_of_ref": "indicator--97847eea-9032-4534-9a89-677b05d22d81", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2e84da-be7d-4f03-aa7d-68bb0b7f4aee", "sighting_of_ref": "indicator--9b542845-c8bb-4b56-a8e2-49d2b143ff8d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307c3429-4190-46d4-9c21-46f89f5b0548", "sighting_of_ref": "indicator--9b542845-c8bb-4b56-a8e2-49d2b143ff8d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57e2f95-ff19-4da7-a6dc-93f95414c104", "sighting_of_ref": "indicator--9b542845-c8bb-4b56-a8e2-49d2b143ff8d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a20726-3dc1-4a47-8df0-35651e15b4ec", "sighting_of_ref": "indicator--a814db4f-dc90-40c4-b241-0e1448a89351", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb84c69-bd75-4e60-a8a5-38279b95050d", "sighting_of_ref": "indicator--6c005273-2aa1-4824-96a6-872b2f1d5a6b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0f1946-1518-4eae-bc09-92018db9eeec", "sighting_of_ref": "indicator--bb57823f-bf40-494d-af38-acbb75f3c8ab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8850ddb0-776d-4ac1-9c56-947135dc985d", "sighting_of_ref": "indicator--9148d8d7-3ea3-4977-899c-e9a8bd11805e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df5e026-c918-4593-98a2-e982a0993ccf", "sighting_of_ref": "indicator--7ee73bf1-8741-4961-8893-8fc4be0f6aed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942a49ff-a4a3-43a9-a884-f3f113854796", "sighting_of_ref": "indicator--2bf92266-61bb-4ce0-a667-329f036577b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217f1fc0-5941-4ae1-9dc1-98113245b8e2", "sighting_of_ref": "indicator--089b8b79-31c9-4102-bde3-2878bfd33f79", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfabc91-52db-43ec-8ad2-eb35908b070d", "sighting_of_ref": "indicator--8b81bf7d-6a13-447f-b76b-af3df22ba5b1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74832e88-52b0-4144-9a20-16bf32da95b4", "sighting_of_ref": "indicator--1e6a8185-e536-4e08-aabb-2b8ae4ba411a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33d1d34-bc12-47e3-bf54-3497ad1ba2a5", "sighting_of_ref": "indicator--73ddd384-20c0-4a52-8653-dd577ecff27b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83164a95-ca9c-4c10-a9c7-35c6e22f12ef", "sighting_of_ref": "indicator--f6f77409-ceb9-4abb-9df0-9bcf6e21f963", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631d63fb-091c-47b7-b2ca-cec514cfce31", "sighting_of_ref": "indicator--036779aa-2b85-4f72-82ca-a9fc6371e6a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886ccaa9-1c79-4849-b5bc-5a33e44d33f6", "sighting_of_ref": "indicator--01cc36fb-b280-4b20-b333-11b78fc62b79", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fce97bd-f896-4ce0-ba8b-492c90fe506a", "sighting_of_ref": "indicator--79db3f61-8020-4252-a079-e4595c85f7fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac964138-343a-40c7-9f59-dc76461604c6", "sighting_of_ref": "indicator--01b8f3eb-2367-420c-94e5-d8748320f13e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c9cb81-11b3-4f74-8e57-5d2715117cb4", "sighting_of_ref": "indicator--b52e8b65-47fe-497b-86ec-d8f3a96e2baa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6011ef90-6074-46fa-8a37-3c058339b1f5", "sighting_of_ref": "indicator--b52e8b65-47fe-497b-86ec-d8f3a96e2baa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0296e1bf-00ea-4ab1-9c63-08c2b3185915", "sighting_of_ref": "indicator--f2d0560c-a969-4396-9bba-dcd2c80384b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934b8d4c-b9e5-4a8d-97b9-d480b651100f", "sighting_of_ref": "indicator--f2d0560c-a969-4396-9bba-dcd2c80384b7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdd00b0-f1c1-4ab3-a674-38a8a87b2531", "sighting_of_ref": "indicator--f2d0560c-a969-4396-9bba-dcd2c80384b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8931e978-707f-49f2-964a-7bd2e47c78b6", "sighting_of_ref": "indicator--dade76e1-cc55-4541-bd85-59fe5c8e704b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c81088-6242-40a3-8a0d-31c902e8eea3", "sighting_of_ref": "indicator--dade76e1-cc55-4541-bd85-59fe5c8e704b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8db548-4cce-4ff6-8ad1-ca2b50a1b86f", "sighting_of_ref": "indicator--81f719c7-537e-478a-91b9-620933f04749", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b2092c-17e2-4225-b6f5-cd19ac43e7aa", "sighting_of_ref": "indicator--bbf97203-c22b-480a-89ef-3a8f33c0b5ed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a970b5-8001-4e25-8212-637a91dda5d1", "sighting_of_ref": "indicator--087c3085-6a19-4215-abd7-eb8f8823eb0b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb13f3a0-6a97-43db-89db-7259e24289a3", "sighting_of_ref": "indicator--b319a47f-c326-44cb-9ecb-8cc5448f9fc4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86248dd4-523c-4228-8331-c57e632affda", "sighting_of_ref": "indicator--3e4ddb16-5720-4e52-ad9b-fd660b3a9e22", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a168d797-66bb-4d94-9e0e-ccf247d741c5", "sighting_of_ref": "indicator--3e4ddb16-5720-4e52-ad9b-fd660b3a9e22", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adcd5ad-cbf1-427f-b814-f0146013124d", "sighting_of_ref": "indicator--17de240b-25ca-42de-87a3-5d773b04a8ca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190f5de5-f19b-4cf3-9bd4-2e9199711fa1", "sighting_of_ref": "indicator--9e7b0db9-c155-4442-a999-f83e1a329fed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07c6421-c7f2-41b7-a7e5-5bade3593298", "sighting_of_ref": "indicator--9e7b0db9-c155-4442-a999-f83e1a329fed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7cb056-1a60-45d1-83f0-6759aa0fd705", "sighting_of_ref": "indicator--890de0e0-6e0c-4652-9fc1-b3497c76b317", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3b87b8-c135-4996-9114-58fb9d68c7a2", "sighting_of_ref": "indicator--e4ccf58e-f6fe-413f-a990-8ef0f69b64d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00341e85-a001-4246-9bc2-6e4a4f07e7b3", "sighting_of_ref": "indicator--6c0c96f6-54a3-462d-870e-a09995b79d63", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c22d22c-9908-4977-bb9e-9cabbfb85f28", "sighting_of_ref": "indicator--1b60bcb3-495e-49e6-b937-f6cba5715e2b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebab87d-2b15-4fdb-87e2-3a89b862bd6a", "sighting_of_ref": "indicator--df4914d6-b294-4926-b2ba-763f5fcb2655", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec65a758-2a77-4c00-af90-8b8797a90aee", "sighting_of_ref": "indicator--584b746d-0daf-4055-b371-d59df48bb4ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072b64b5-4fca-494f-8ca0-8448ae90065d", "sighting_of_ref": "indicator--2b8cd9e8-ddbc-4d1f-917c-be081089e019", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b976796-ad6d-4381-9601-ccdb53f03505", "sighting_of_ref": "indicator--869c6492-5442-49d9-88bc-b716f8c83f49", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bf20c4-0fa4-400d-b1b8-76e9833c3ba4", "sighting_of_ref": "indicator--86ea02ce-a555-4888-b8dd-8b30f4fa3f54", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25d2bfb-94a0-4805-9510-c2f64306761d", "sighting_of_ref": "indicator--1ecd33f4-8c88-4739-be02-f3558bde4efb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f705f4-c102-448d-ba5d-1bb3f15eb77b", "sighting_of_ref": "indicator--cbcf910c-ea8b-43d0-8f12-556f76bb5cf3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aac633c-92cf-4814-be26-4b6ea076cf9e", "sighting_of_ref": "indicator--05567894-9eaf-4775-8ac8-fbfb43d49787", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966c288a-3003-4074-8840-e32ec45c8bd2", "sighting_of_ref": "indicator--46c2e659-fd5c-44da-a3ad-1f6f4ac623bd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f835abff-0843-4e9d-80b2-3ce2cf97d931", "sighting_of_ref": "indicator--823d9f27-63d2-48b8-91be-1ad27eff1ae5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1781b1-6d25-4afb-9599-411e16f7533a", "sighting_of_ref": "indicator--823d9f27-63d2-48b8-91be-1ad27eff1ae5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195a81a8-788c-44c6-aecb-505f41233b2b", "sighting_of_ref": "indicator--a43e7f27-01ad-42d3-8cce-8b5d5e622579", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57833f7-ed1e-4c6d-be32-57f0a86d069e", "sighting_of_ref": "indicator--a43e7f27-01ad-42d3-8cce-8b5d5e622579", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79db05af-3b86-4f33-a3ae-55ed98b9941c", "sighting_of_ref": "indicator--a43e7f27-01ad-42d3-8cce-8b5d5e622579", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb479cad-44eb-49ac-8fc9-ace1b6e01238", "sighting_of_ref": "indicator--f1c1fe86-054b-41e0-8931-be06a28688bf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b023cc-ce90-434c-b758-0e5d4e906a9a", "sighting_of_ref": "indicator--76d639ec-3f4f-488f-ad48-3ac6dd219ea6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ad9dea-eab0-47bd-86f0-d8a4169b44d9", "sighting_of_ref": "indicator--e5ec2ebc-5c46-410c-977f-825fee487bf6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2a81cd-0631-4e8a-9261-0929647ad61b", "sighting_of_ref": "indicator--39116a14-4df8-4f97-b9cb-051c5c901031", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c0d03e-6f1f-4c90-9d3f-366044517336", "sighting_of_ref": "indicator--24b8f2c4-6df3-45b3-926a-8dd8e60e9780", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d98974d-a8c3-462d-a3b9-688dbbfae6b7", "sighting_of_ref": "indicator--e42aea78-9834-45ec-9ae5-c12201e2c156", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c3a50e-f477-4d97-9883-8e0355ac475c", "sighting_of_ref": "indicator--8f83716b-f95a-40b5-a9c6-d2faa2cb0265", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4890c1-642a-4a0c-8a53-a643199bda77", "sighting_of_ref": "indicator--8f83716b-f95a-40b5-a9c6-d2faa2cb0265", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70610e25-257b-4470-91a0-7ca8fb9a5722", "sighting_of_ref": "indicator--8f83716b-f95a-40b5-a9c6-d2faa2cb0265", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b62b348-6bbc-4cf5-8def-707948df12b8", "sighting_of_ref": "indicator--4a8cd0f9-9b83-4623-b636-903f93f025ed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d914ae43-34fa-4d90-a5c7-92c803bd6aea", "sighting_of_ref": "indicator--61f3282f-b763-4f66-be68-3b5217637571", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138a523a-4b65-495c-90d9-fffec4584201", "sighting_of_ref": "indicator--61f3282f-b763-4f66-be68-3b5217637571", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d488b13a-9b42-48d7-832e-6ed114bab180", "sighting_of_ref": "indicator--e3948425-1efa-420b-ba24-e21c2f72af2d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512e3761-01e5-44bc-98ae-e3892e67d365", "sighting_of_ref": "indicator--ea9ad69a-6230-421f-a4be-91c6f78ffa29", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965fee21-ff1a-4989-85ff-d9194aeca811", "sighting_of_ref": "indicator--ea9ad69a-6230-421f-a4be-91c6f78ffa29", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3d26de-627a-46db-933f-8679f664a759", "sighting_of_ref": "indicator--ed6fa204-db90-4a70-bb0e-01ed8582b8ee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a01658-bbf6-45eb-9109-1090ae7a4e1b", "sighting_of_ref": "indicator--ed6fa204-db90-4a70-bb0e-01ed8582b8ee", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc379de5-4a0e-4df1-9958-24be1b68c8cb", "sighting_of_ref": "indicator--ed6fa204-db90-4a70-bb0e-01ed8582b8ee", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d73abd-b352-4253-9110-f8e663e2b0b4", "sighting_of_ref": "indicator--22c180b8-c9b5-41f4-a1a7-46e1e0398e9d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b46db1-590d-44b5-9ebc-2c0b7e10138e", "sighting_of_ref": "indicator--481b95c4-ba98-430d-8472-639a99d04a2d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e91b62e-3eac-495a-a9fc-e2974c21a899", "sighting_of_ref": "indicator--7b8f6970-2f99-4108-92b2-39128d2a2ea3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6b21de-6374-43f7-b5bd-e768a178d19c", "sighting_of_ref": "indicator--dfd5c681-7313-4158-a3b8-61876afb8433", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f93fb3c-b5ae-4bcb-8f2f-e0ef7bea48d1", "sighting_of_ref": "indicator--868feb7d-5a6f-4942-afe2-0b2e18cf2b9f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283ce166-dc50-44dc-9139-921bf49a551c", "sighting_of_ref": "indicator--6037bff2-f3df-497c-ad0f-190e57d1665f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94afdc0-c616-40c8-b6fd-87f72f1f4221", "sighting_of_ref": "indicator--6037bff2-f3df-497c-ad0f-190e57d1665f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde09458-beaf-4ce6-9a65-0e428ec883ce", "sighting_of_ref": "indicator--6037bff2-f3df-497c-ad0f-190e57d1665f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948b66b3-3650-4bf2-a66f-1058b3e19260", "sighting_of_ref": "indicator--9d103610-73c8-43a1-9351-45467e0b73ec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcc8d0f-f838-4c4f-bc6b-8b517a1345bc", "sighting_of_ref": "indicator--9d103610-73c8-43a1-9351-45467e0b73ec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34af4e4e-2f68-4fb4-8b7b-34714fb2f92e", "sighting_of_ref": "indicator--65a00258-7b2d-4e15-be5f-ce57b5712cbe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a391237-9599-43de-ba64-34cef738c593", "sighting_of_ref": "indicator--c3c784fc-66ad-4b2f-8c3b-43133891b1a6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c32ff3-8ac9-43da-8ced-c62a48f3f136", "sighting_of_ref": "indicator--c3c784fc-66ad-4b2f-8c3b-43133891b1a6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d033aba9-de5d-4a95-99a7-456d5d52c4d7", "sighting_of_ref": "indicator--ff953ac9-f15a-4594-81ae-bfe874df1dc3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9e1b24-0d7d-417b-8300-d6a1ff130744", "sighting_of_ref": "indicator--100b5b33-efaf-48d3-abb2-f71fd1135789", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bc7c18-78b2-4890-ba81-f03c7d2662e7", "sighting_of_ref": "indicator--d410b922-362c-4b4b-8456-bfc82c98439b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4009db63-c053-4040-8301-b818b5d2c01f", "sighting_of_ref": "indicator--435ad33a-77a1-4504-803d-96223ba01e8d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0daadc-0a63-4410-9111-a64f79db3ee6", "sighting_of_ref": "indicator--0b390e80-9116-4f06-9ea2-ea1326aa76ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c68c4a-fca5-4d2a-9547-48a64c02841b", "sighting_of_ref": "indicator--09fb0b8d-72bf-40cf-b0e2-81d8a066b6fd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19049542-e601-4667-8b06-97f60bff1f55", "sighting_of_ref": "indicator--05e940e4-b1c7-4a1c-8543-c01d2a5fa2d4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e61efd-cd25-441a-b973-88afa74b0193", "sighting_of_ref": "indicator--43c11061-9317-47d3-962e-4c5c1bd210be", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad95588b-6525-4681-87f8-4e8a1cec059d", "sighting_of_ref": "indicator--43c11061-9317-47d3-962e-4c5c1bd210be", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47b38fa-4a70-456c-b89b-565626833852", "sighting_of_ref": "indicator--ef0b9bae-dc8a-4d02-aae2-0941813852c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379947cb-0df7-41dd-b2bb-6b27920c82c4", "sighting_of_ref": "indicator--4b6d96cd-03c6-40b4-9546-18c2c5394463", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff3dc38-7124-4b71-825a-1c571581404a", "sighting_of_ref": "indicator--4b6d96cd-03c6-40b4-9546-18c2c5394463", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28b4d8d-b880-461b-b527-3e5a017dc401", "sighting_of_ref": "indicator--4b6d96cd-03c6-40b4-9546-18c2c5394463", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b6d295-a731-4f07-8b05-d1cec64dee44", "sighting_of_ref": "indicator--e1e0668a-31c8-4524-af9b-bcba60684ed4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0752b416-6ac0-4fcf-8a4d-50c29bd5a881", "sighting_of_ref": "indicator--e1e0668a-31c8-4524-af9b-bcba60684ed4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7faff86a-9033-410d-9440-15ac0cec0bf5", "sighting_of_ref": "indicator--0ac0598e-62b5-4b2c-b3fd-d1c6d8390dea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf9e8a7-10a2-4de3-9ad0-1b9d10e98473", "sighting_of_ref": "indicator--0ac0598e-62b5-4b2c-b3fd-d1c6d8390dea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7af901d-1ab7-40b5-9183-1a8a4f397b56", "sighting_of_ref": "indicator--0ac0598e-62b5-4b2c-b3fd-d1c6d8390dea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9d957d-befd-4bdb-8eda-afaef781fa97", "sighting_of_ref": "indicator--6702c043-dca4-462b-9c2e-40249405702e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a43a989-3d4f-48e8-8c20-ff18c8418860", "sighting_of_ref": "indicator--d94ce43b-1ea8-4c6d-9e4f-489768d4d64e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139a26c4-bcf9-48a7-bf88-838eb026dffd", "sighting_of_ref": "indicator--d94ce43b-1ea8-4c6d-9e4f-489768d4d64e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6f6cd7-b161-4d54-8b44-37b5a93565ce", "sighting_of_ref": "indicator--d94ce43b-1ea8-4c6d-9e4f-489768d4d64e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9720a84-ac60-49c6-b285-7f888a1ae52a", "sighting_of_ref": "indicator--d94ce43b-1ea8-4c6d-9e4f-489768d4d64e", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c883a2c2-ac1c-4418-b388-48e9a56a46b8", "sighting_of_ref": "indicator--eff74145-07f9-44cd-9449-defc506cda4e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdbbafe-ddef-41e8-9fab-e87b0d259890", "sighting_of_ref": "indicator--eff74145-07f9-44cd-9449-defc506cda4e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5715878e-6fcf-4a57-9e47-b944514e0d95", "sighting_of_ref": "indicator--eff74145-07f9-44cd-9449-defc506cda4e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68ea495-c148-4b51-af6e-56b155aa8a63", "sighting_of_ref": "indicator--821f8cf8-c8df-4ee1-ad5d-f282660c92b2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59db5e8a-ea90-4a48-9fd0-35ea756a9f36", "sighting_of_ref": "indicator--c1132fe3-0f33-440e-9ff6-8b4129a90dca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d53f8e2-5482-46e6-b231-fdd699b73e6e", "sighting_of_ref": "indicator--d264752a-6330-485e-9b0c-cf70747cef80", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad5f7b9-6984-4eab-aa8b-f5649411c5e0", "sighting_of_ref": "indicator--8cd23860-7f3a-4b61-968b-85c7c3729916", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fa4005-98e9-4c55-a065-793dff2c2b00", "sighting_of_ref": "indicator--8cd23860-7f3a-4b61-968b-85c7c3729916", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1dad150-eaa3-421e-92cd-0c3238b6ed0b", "sighting_of_ref": "indicator--8cd23860-7f3a-4b61-968b-85c7c3729916", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51286d2-3e0c-46c0-a56a-7dad0c994571", "sighting_of_ref": "indicator--3759590e-a620-41f8-9a62-28f8d8ed68bc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e948006a-2791-4ea0-aecd-8728ed46b3c0", "sighting_of_ref": "indicator--e0dc866e-356e-4ce1-962d-1df692b9b7f9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c68821a-a1e5-46cc-873a-b46c5445a72c", "sighting_of_ref": "indicator--8f395017-fbb0-4b63-8a7e-701f4558e31c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb27021-71df-4251-895f-b32351cf37aa", "sighting_of_ref": "indicator--a93132ff-f3fc-4966-8ecf-c29cf95aa3d1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7817c3e-0436-4c4d-b3a8-7c60363f6fb1", "sighting_of_ref": "indicator--5e116106-1315-4fc7-908d-ded5d4b1a880", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93c1e1f-1417-4dcc-b78f-4817cf6e01fc", "sighting_of_ref": "indicator--4cbb0486-2d5a-41a9-932d-b1349580df0c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42c9fa0-b637-4ccc-a9f8-c7fb7a87fcd9", "sighting_of_ref": "indicator--6931934c-e413-46ce-81dd-c68a3aec394f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4071bf50-08a4-40d8-bd3f-1347c30b3107", "sighting_of_ref": "indicator--3bd15b3e-c9c5-464b-8cd9-6bb77cc28d93", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92f6cfc-90fa-430a-8dc2-431764ed5068", "sighting_of_ref": "indicator--d707e3b8-0f9a-4c3e-b0a8-37284ef9d595", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf0bfd1-03ef-4e31-9f44-2f3b680e77a8", "sighting_of_ref": "indicator--c7da13bc-0dea-40ff-9c67-ba2812869b86", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca291b4-c64e-434d-852d-2dddab8efc7f", "sighting_of_ref": "indicator--07f1294d-e776-4c86-9032-98e097f7f056", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdda9d0-59ba-465b-bf7a-973ef43547fb", "sighting_of_ref": "indicator--7bdfa2fd-5f2c-4d1c-abe1-00a0cbec9710", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15660c5d-2913-4002-8224-fb49190b2306", "sighting_of_ref": "indicator--7bdfa2fd-5f2c-4d1c-abe1-00a0cbec9710", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c8e4b2-b98f-4808-9fe4-7de16df16df7", "sighting_of_ref": "indicator--5349f3f3-b05b-4cbe-b643-e9818efaf9e6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9b1a76-70ac-43a2-bc85-bec04b348e0d", "sighting_of_ref": "indicator--e66f96e9-bda1-4497-a5cd-e75b4ab1f511", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b3e8b7-3d58-4e5c-8374-328720aa5d6a", "sighting_of_ref": "indicator--97e4683e-08a5-4628-9441-625dc2a52304", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b0f1e7-a73b-4f41-bd21-0764129dea27", "sighting_of_ref": "indicator--97e4683e-08a5-4628-9441-625dc2a52304", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13febc3d-1161-4fcb-b1ae-8e7cb8826bd4", "sighting_of_ref": "indicator--ab684675-63a7-48c1-9290-a5818ac5072f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3cd3be-f411-4b5c-9b8a-87b361596616", "sighting_of_ref": "indicator--6994e3fb-e5ce-4e75-b682-21907223b476", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d97e4c-1ca5-40a1-85c8-3b30087bfb0f", "sighting_of_ref": "indicator--2f614811-e7af-417d-aef5-38518550d984", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b75b2d1-7e3f-425f-9ed6-8650a0084c53", "sighting_of_ref": "indicator--4505fa62-bccf-4609-be8e-eca916e6775f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f64938a-6ec8-42d3-bbb8-a87d9da3ab7a", "sighting_of_ref": "indicator--4505fa62-bccf-4609-be8e-eca916e6775f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e59817-3827-4776-a6be-d500506c3b0c", "sighting_of_ref": "indicator--7baa220f-3261-4622-b429-2975064db0f9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b79e33d-192f-4d89-bae7-3d0515c481a5", "sighting_of_ref": "indicator--530666a1-c1fa-4f9a-89d5-5428a22a9153", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9bd0bfb-48f1-4543-83fd-87e040df8c49", "sighting_of_ref": "indicator--530666a1-c1fa-4f9a-89d5-5428a22a9153", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad65349-c71a-4838-95fa-7c77a6177f0c", "sighting_of_ref": "indicator--0a217702-f132-4c6c-a49d-af27425ea0c2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8632b2f9-3caa-4a4e-be6b-eb3655b1835c", "sighting_of_ref": "indicator--de9f65a8-a2a2-4565-8ab0-9ffa00a2cbd8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4749484c-daff-41a9-84c8-cbfe461b1a82", "sighting_of_ref": "indicator--1c976d1c-0479-4d20-a83c-e7c4b20906a7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7686f5f4-7fbe-47a8-a2d9-508656ee5876", "sighting_of_ref": "indicator--4989d45b-1c52-43a3-b320-ae2765bbd8e0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bdccbe-140f-4d2c-a556-8d65c57cf3e7", "sighting_of_ref": "indicator--0ee03bf5-6f46-4869-aded-5aba6ba9a622", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241952ca-a088-44f2-8234-94432fb139d4", "sighting_of_ref": "indicator--c2040b28-19ef-4c9b-b9c2-0c3d10945d41", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a762cd-b2de-4a1d-ad86-77a349d9a59d", "sighting_of_ref": "indicator--c2040b28-19ef-4c9b-b9c2-0c3d10945d41", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38854a63-ef9f-4088-8904-14acd57def74", "sighting_of_ref": "indicator--40732532-8fcd-4ed9-ac12-ea4367866987", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a9f28e-5813-4f5e-9327-de4996cad5c4", "sighting_of_ref": "indicator--f3ff8697-0d54-4346-b61c-4cd70c65fe8c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c96dffa-32d8-4495-82f7-920b794f4f11", "sighting_of_ref": "indicator--8a53ed0b-346c-4115-a624-6919e8029bd8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f5332d-4265-4432-8468-793195e5d72f", "sighting_of_ref": "indicator--8b038869-1e94-43b1-8844-e9ea00bec8e7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bbaad9-2aa8-4d44-a7cf-eecef7f2f035", "sighting_of_ref": "indicator--92aeac79-b4a5-43f5-b380-b4cc4289c622", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d06c49-9137-48f2-ad96-f04c7d4ac005", "sighting_of_ref": "indicator--92aeac79-b4a5-43f5-b380-b4cc4289c622", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d273116e-ac33-4648-a1bf-e1816822eddf", "sighting_of_ref": "indicator--4ce0262b-95e3-413c-a420-3af693e71ada", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0270c10-5654-490c-bd1e-abdadf5ffeee", "sighting_of_ref": "indicator--604b39a9-991d-4e7d-8a23-b95f20afad75", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c84dff0-7ccf-4183-b58e-b8aed059a10d", "sighting_of_ref": "indicator--64d6d02a-1f88-4bf3-b762-629a18ec197a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073a948b-50fd-4551-8a48-1216ed5c875b", "sighting_of_ref": "indicator--0f809dff-671c-4c94-8254-c14ff5174dfd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cc39b0-4d95-4f9d-831b-908e176a5f8f", "sighting_of_ref": "indicator--4b6c5f8d-f07d-4711-8129-51140ac66942", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c025e16-bc03-4300-bbe5-0f7c21e76e19", "sighting_of_ref": "indicator--9ef80807-0c56-4253-bd24-f8cbf3f54bd7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59f9636-ac55-4436-8dbe-35fefd5a8cdc", "sighting_of_ref": "indicator--51e5d862-1e18-4c16-b7d3-8e337cb634b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9787bfef-dae5-43e2-b694-74782cdc5799", "sighting_of_ref": "indicator--02d802a2-f39c-44ba-acc2-3e02e58238c3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4bd0eee-3d2f-4e7a-a8fd-484d1d46e8df", "sighting_of_ref": "indicator--7ebf880b-7a22-4a57-9054-6508b15c1dc7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e3d0bf-a8b9-48e9-85d9-d32f0e29012f", "sighting_of_ref": "indicator--7ebf880b-7a22-4a57-9054-6508b15c1dc7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d233b220-d4ef-4565-b04b-c8081b9c0738", "sighting_of_ref": "indicator--7ebf880b-7a22-4a57-9054-6508b15c1dc7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0a9a10-a2ee-4592-bc8d-4a680badc77f", "sighting_of_ref": "indicator--4aa8e6cb-26bc-479a-8ba9-858709894a78", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a18ac1-a8a4-401c-aa23-6011317116b5", "sighting_of_ref": "indicator--fe50204a-02e6-48cd-b548-c253067956bc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e80f13-728e-45c5-9729-5a104517e7b2", "sighting_of_ref": "indicator--0a0c1fc7-a2d1-43af-a295-9dc6b8fbc340", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70de68d1-dd05-49a1-a3b4-a5faf941d64c", "sighting_of_ref": "indicator--9d0d273d-8a9a-4e69-b355-8c4a44e7c4e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df1b29e-2daf-480b-98b8-a7500aff9c4d", "sighting_of_ref": "indicator--9efe7bd6-7b45-40b8-9085-e50ab05708bb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79578de3-6efa-4900-9227-2a3ba928395e", "sighting_of_ref": "indicator--9efe7bd6-7b45-40b8-9085-e50ab05708bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd49b89-04db-49d7-bb6b-395432f133c5", "sighting_of_ref": "indicator--9efe7bd6-7b45-40b8-9085-e50ab05708bb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411c27ed-5c3c-4b18-85be-9638cbdb6c45", "sighting_of_ref": "indicator--5d8a7082-c4b5-41d9-bd99-5be87fe748ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee43de2-fe83-4215-8781-884fe98df7af", "sighting_of_ref": "indicator--5d8a7082-c4b5-41d9-bd99-5be87fe748ff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69318a67-39bb-4a0c-84f4-9da6d64e8978", "sighting_of_ref": "indicator--5d8a7082-c4b5-41d9-bd99-5be87fe748ff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87639e65-8dbb-41dd-a581-edd417acf8c7", "sighting_of_ref": "indicator--2d170d97-30c9-420b-b42f-253094e40ee6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab04be0-f5dd-4cef-8b57-d1a2d2e0a7be", "sighting_of_ref": "indicator--2d170d97-30c9-420b-b42f-253094e40ee6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e29a819-edc5-45ea-b5a9-00ecf9f705c1", "sighting_of_ref": "indicator--62822c37-92db-4a33-9bb2-41b7bf2b241a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90a9c52-0956-49b1-bdff-da9d805d4e5a", "sighting_of_ref": "indicator--c086dc0e-a5ef-4dbb-89d6-ea4229393093", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907e5265-fe4b-4a2d-af3e-8802698911ed", "sighting_of_ref": "indicator--c086dc0e-a5ef-4dbb-89d6-ea4229393093", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89513ed2-6104-44a1-99c5-9c209f9f0ce6", "sighting_of_ref": "indicator--72ade922-f8bf-46b4-a52e-3f53e8775eb0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa04e349-616f-4c25-8ca5-76062d10b9be", "sighting_of_ref": "indicator--abc109a1-97bd-4257-b3f7-62bffe83eaf5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236838d3-3146-4273-9527-c8c5f507f7f8", "sighting_of_ref": "indicator--abc109a1-97bd-4257-b3f7-62bffe83eaf5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f367c506-8750-4ebe-8a83-4601fc35328e", "sighting_of_ref": "indicator--abc109a1-97bd-4257-b3f7-62bffe83eaf5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec4f58a-3ad0-43b4-8fc7-babfe0f253e2", "sighting_of_ref": "indicator--6d03deb1-f290-47c0-a6eb-154ca6e15016", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1651980f-4aa8-4340-8956-8c054537ca57", "sighting_of_ref": "indicator--6d03deb1-f290-47c0-a6eb-154ca6e15016", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75702f5-2645-4ccf-b7b9-0da14d8bf831", "sighting_of_ref": "indicator--7e3ce935-e42c-46f4-9f31-4da92075c3ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8d601c-335c-492e-9314-7a6bc468dad2", "sighting_of_ref": "indicator--7e3ce935-e42c-46f4-9f31-4da92075c3ce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2015fe-ab65-48f6-befa-0df589db3b3a", "sighting_of_ref": "indicator--7845008b-6049-4079-bf1d-ca6bb9fcf1fa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a467cb-ad03-4aae-ae13-65feab7c4c0c", "sighting_of_ref": "indicator--4f1357ad-eb65-49c5-ac1a-a2149883a839", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f01fcd-c276-41b3-984e-ae0c0fecf98a", "sighting_of_ref": "indicator--4f1357ad-eb65-49c5-ac1a-a2149883a839", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c228501f-09ca-40af-8428-8f98d1e316f1", "sighting_of_ref": "indicator--d4ec28a8-4d59-4125-b3fd-b4325f1f8266", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e2dfdb-cb45-4743-af2f-8641074030d5", "sighting_of_ref": "indicator--7f3148f6-9ff7-4e7a-9979-7caa187f8b56", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3549c77d-0864-4c64-9e41-1dad93946fcd", "sighting_of_ref": "indicator--7f3148f6-9ff7-4e7a-9979-7caa187f8b56", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6428e8fc-8f91-46f8-a10c-22189cc2d41e", "sighting_of_ref": "indicator--70d083ec-71e4-43c9-94cf-c924f964b49b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53176f6b-4d76-4f65-8e66-363135de42a5", "sighting_of_ref": "indicator--70d083ec-71e4-43c9-94cf-c924f964b49b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d9fed7-2e5b-4e5f-8f27-28880214f69a", "sighting_of_ref": "indicator--0d8db3f4-4314-4e68-828a-92a7fcd934eb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2775cc-2bdf-41a3-9ac0-41db16559975", "sighting_of_ref": "indicator--1f4956d6-8109-444f-9668-1556d2d87466", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c2a5f3-0085-4c66-99de-c153d4586852", "sighting_of_ref": "indicator--1f4956d6-8109-444f-9668-1556d2d87466", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be39982-3dfb-486a-99b3-8cb28afed08a", "sighting_of_ref": "indicator--1f4956d6-8109-444f-9668-1556d2d87466", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b55ed2-8c61-4f7a-9992-34e4899279b0", "sighting_of_ref": "indicator--440d7542-a2b3-4a9c-9543-0bfe51935662", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53abbfa-c651-4e25-9971-b00f44dd1cd2", "sighting_of_ref": "indicator--440d7542-a2b3-4a9c-9543-0bfe51935662", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04369dba-9899-42a0-af2f-d0ff8878aef9", "sighting_of_ref": "indicator--846ed58c-38cc-432d-bdbd-c0f303799aaa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b8d000-c982-4bc9-bd87-0529fa0c2eeb", "sighting_of_ref": "indicator--846ed58c-38cc-432d-bdbd-c0f303799aaa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3d90c9-f612-4a17-a5c4-38cc7a71aebd", "sighting_of_ref": "indicator--41aa3350-5e60-45ef-944b-afd17e812690", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbe1789-2b6c-4520-9d57-bc6b77b7a051", "sighting_of_ref": "indicator--41aa3350-5e60-45ef-944b-afd17e812690", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a1cb6c-df1e-4b21-b5a4-ebd6fda8d041", "sighting_of_ref": "indicator--7c27df85-dda1-4ef3-8388-8f07ad3cad3e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edd934f-0e41-43bf-a305-0e7fa32a45c3", "sighting_of_ref": "indicator--7c27df85-dda1-4ef3-8388-8f07ad3cad3e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497f829e-3ccf-4d9e-848c-767ca1ac269e", "sighting_of_ref": "indicator--736c017f-50f7-4d2a-812d-e771c823aac5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7a9611-7a73-4797-86cd-4ba2b016680b", "sighting_of_ref": "indicator--736c017f-50f7-4d2a-812d-e771c823aac5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4808ad-3cea-45ef-b020-d6e8abc28347", "sighting_of_ref": "indicator--46bc4b57-6ce7-4428-b9f1-ebc1c39dc275", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0067575-1bb8-4684-84df-4d0396f804a9", "sighting_of_ref": "indicator--46bc4b57-6ce7-4428-b9f1-ebc1c39dc275", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46eecbe7-ce6d-4971-bd62-4e7dbdca0fb2", "sighting_of_ref": "indicator--46bc4b57-6ce7-4428-b9f1-ebc1c39dc275", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04759da-4968-400d-a253-b8c57bad84a4", "sighting_of_ref": "indicator--78da77e4-1989-459c-bdf8-f83d3751010c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870919ad-2b84-49e3-9929-2e3d6223cc41", "sighting_of_ref": "indicator--6886c053-739b-4180-9c39-f6e45bc639fe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719d3388-acb6-4096-a6b2-b8672804f6a7", "sighting_of_ref": "indicator--b4b9ad60-1126-47f5-9010-e16bbc0209d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83f9972-58da-4598-94bd-e2f96dbfbef0", "sighting_of_ref": "indicator--b4b9ad60-1126-47f5-9010-e16bbc0209d3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c578502d-1e26-42d7-b36b-ac9dc6438812", "sighting_of_ref": "indicator--b4b9ad60-1126-47f5-9010-e16bbc0209d3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0054a4f-b731-4703-8176-b3e196f78445", "sighting_of_ref": "indicator--97e61989-4918-413f-bd6e-6d4cdaab9cb4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e67ab82-d6fb-4929-8ec7-9e78825c13e2", "sighting_of_ref": "indicator--6901aa52-5fd7-4b7e-a91d-e996fbdd3425", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83aa71f6-5e72-4d4f-95e1-b98fe1154733", "sighting_of_ref": "indicator--6901aa52-5fd7-4b7e-a91d-e996fbdd3425", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c634ac4a-62b3-452e-bd57-a6ea112a6bf5", "sighting_of_ref": "indicator--1be7780b-6125-4707-a7f5-876dfa86cda3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcea7fd-d363-4437-8116-38c4fd5f5b98", "sighting_of_ref": "indicator--c666683a-4795-4b9a-9c1c-cc6f60374c9c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2117dcf-476f-42e2-885d-ecec73c9ddc9", "sighting_of_ref": "indicator--099d74fe-bbb4-4ecd-8008-4099e61e5e1f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d71c5a-e85f-45b3-a7da-23f4893e234b", "sighting_of_ref": "indicator--099d74fe-bbb4-4ecd-8008-4099e61e5e1f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182cd364-1966-465c-be86-4efff11cd687", "sighting_of_ref": "indicator--593a949c-dba4-4e9a-9d0f-35cd9a142270", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfade8fb-a572-4199-919c-4fef72ccb52a", "sighting_of_ref": "indicator--593a949c-dba4-4e9a-9d0f-35cd9a142270", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da5da3c-b31a-45ef-91f6-255f09b4c061", "sighting_of_ref": "indicator--649665a7-5321-4fd8-96b0-1ca13f9c3201", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd43c60-6563-400f-a8ae-a390cc477fdf", "sighting_of_ref": "indicator--649665a7-5321-4fd8-96b0-1ca13f9c3201", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1850a42-ba39-48da-b80a-0dbb84a21a32", "sighting_of_ref": "indicator--94eb91e2-3c08-409f-b46d-eeba460e9f68", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74117bb-2618-45b3-95f5-10bda3eb03ad", "sighting_of_ref": "indicator--94eb91e2-3c08-409f-b46d-eeba460e9f68", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e1cd67-04c1-4826-b7cb-e410c7bda781", "sighting_of_ref": "indicator--f575a70a-8c53-4e20-81d2-8196faa9a6a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b494138d-710e-4ad5-b17d-3fac389bbdaa", "sighting_of_ref": "indicator--6318f2be-4ebb-4639-80d3-b97bc08f0856", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291d310a-8b2e-4308-b524-15179cfd4471", "sighting_of_ref": "indicator--d26e65bb-003f-4c91-8e23-da54381ac790", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce9db3b-8cf3-4923-a62c-4adfaa79b2a0", "sighting_of_ref": "indicator--d26e65bb-003f-4c91-8e23-da54381ac790", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8b816d-55d6-40e3-a37a-ed6ed2b7c5f8", "sighting_of_ref": "indicator--d26e65bb-003f-4c91-8e23-da54381ac790", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b10aa7-749c-4279-a847-5d441766dbf2", "sighting_of_ref": "indicator--899f6977-ccc6-40c1-a29e-c9768d6dffa1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a459f82-a1a4-45fb-8a91-9443a2aa2798", "sighting_of_ref": "indicator--899f6977-ccc6-40c1-a29e-c9768d6dffa1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c560d2b3-d366-4fd7-94cc-2184b2bd9f0b", "sighting_of_ref": "indicator--214c1fe5-806c-4859-9415-327298bcfb12", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076de291-a345-4332-8f2b-0fc6030af821", "sighting_of_ref": "indicator--214c1fe5-806c-4859-9415-327298bcfb12", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e50646-c60d-484a-90c5-a55edc1fcd04", "sighting_of_ref": "indicator--7c4f19c9-b3eb-40ad-a254-4d29adc09d48", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a68b3c-7e09-4713-a96c-2bf655feddc9", "sighting_of_ref": "indicator--2110c982-791e-4211-af0d-eeabe3d6dc4e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9016058-29e6-4c43-bc0d-9f2a27d5786c", "sighting_of_ref": "indicator--2110c982-791e-4211-af0d-eeabe3d6dc4e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c03f5e-a294-4c53-975d-61ed99da30ff", "sighting_of_ref": "indicator--6236ab96-3fba-43fa-9290-53f163f4a3f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b58c97-4ebc-4e1b-8357-0c47a40e6347", "sighting_of_ref": "indicator--6236ab96-3fba-43fa-9290-53f163f4a3f7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8eb2f7-3d73-466b-92a9-6a364965a797", "sighting_of_ref": "indicator--912f7de4-7885-467c-b516-bf651cea8d0a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc91314c-a928-4619-8def-c8ff37733624", "sighting_of_ref": "indicator--f8ef0dc9-ee9c-4e84-9a1d-15b416a1f0d4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc85e28-c37a-4637-a55f-b37b6a235e9d", "sighting_of_ref": "indicator--1bdf5773-3495-4ed5-a678-6e82be5c5d09", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d19af33-5357-4fb9-b871-465325ba8011", "sighting_of_ref": "indicator--1bdf5773-3495-4ed5-a678-6e82be5c5d09", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd72e944-d1bf-492d-ae65-21049d90142a", "sighting_of_ref": "indicator--94cea1c4-e5ff-40fd-9674-3a0a2a0e05d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9878a49-90de-43fa-b5c8-08586c38fa6f", "sighting_of_ref": "indicator--94cea1c4-e5ff-40fd-9674-3a0a2a0e05d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad834c4-1d62-42dd-84c6-d7feaef1e85a", "sighting_of_ref": "indicator--a621d562-1b93-4bcb-a85c-3a05da6c69ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a19ac86-9e7a-4474-87ac-6eae58117bf6", "sighting_of_ref": "indicator--a621d562-1b93-4bcb-a85c-3a05da6c69ff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a43f9f-15a2-4a93-8af6-2e11ad255abe", "sighting_of_ref": "indicator--a621d562-1b93-4bcb-a85c-3a05da6c69ff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6948b5b3-a973-4bd3-bcd7-bd6461a70cfa", "sighting_of_ref": "indicator--fd1b35bc-e0e4-4f1b-a12e-ed1ab7f2451a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fb1c84-ba93-4d03-ab3a-72d258fa4b39", "sighting_of_ref": "indicator--fd1b35bc-e0e4-4f1b-a12e-ed1ab7f2451a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f92eb8e-6c83-4d42-86e2-fc123ed47b77", "sighting_of_ref": "indicator--9ab95d2c-bdeb-48dd-863a-20c497a26d8a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1108e1da-c5dd-4dce-aa5f-133dd965ad67", "sighting_of_ref": "indicator--9ab95d2c-bdeb-48dd-863a-20c497a26d8a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4367aa6d-84de-4470-a138-7116004cbf46", "sighting_of_ref": "indicator--1b6f3e1b-8fe3-424e-a99c-4fed0820f958", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e035481-cf72-4149-8678-a5ad0d3f6bf4", "sighting_of_ref": "indicator--1b6f3e1b-8fe3-424e-a99c-4fed0820f958", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96889cf-5fe9-4834-b1e0-d921a1feff31", "sighting_of_ref": "indicator--5e9bf276-787f-4113-986d-f441f2ad6e47", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb6b11a-f50c-44b7-9724-0b9649896c22", "sighting_of_ref": "indicator--5e9bf276-787f-4113-986d-f441f2ad6e47", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92d3000-765e-417d-8e9e-8bd9d061e32c", "sighting_of_ref": "indicator--6f28ddc6-bb1d-458a-b7cc-54252845d5bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36518f4-a93d-42ae-9c0c-f403ac082cb6", "sighting_of_ref": "indicator--6f28ddc6-bb1d-458a-b7cc-54252845d5bb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bfe02f-1407-4e84-88bd-c034233736e7", "sighting_of_ref": "indicator--10f6236d-ed30-4797-a06d-b195edc168c8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420d2ef5-ad1d-4b4d-ba94-b5a4435779e1", "sighting_of_ref": "indicator--b6bb40f6-e880-4222-9c7c-ced92635a50c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c3310f-637d-4581-b9f0-97900f76c06d", "sighting_of_ref": "indicator--b6bb40f6-e880-4222-9c7c-ced92635a50c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d647c3a6-b122-4868-ab24-44213716ddef", "sighting_of_ref": "indicator--b6bb40f6-e880-4222-9c7c-ced92635a50c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea96f13-bcb2-4840-85da-9208b5a0224a", "sighting_of_ref": "indicator--513ea32a-080a-44a4-ae38-c9443b4b556c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debd8cb8-8038-4052-b6e8-ce7b0987b853", "sighting_of_ref": "indicator--513ea32a-080a-44a4-ae38-c9443b4b556c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22179f93-3420-4b5f-b116-cd9a7e3c62f1", "sighting_of_ref": "indicator--e4544985-3791-449b-862a-22a14b800605", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4fe46b-ec45-4278-b467-d92231168aa9", "sighting_of_ref": "indicator--e4544985-3791-449b-862a-22a14b800605", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6820ad2c-e3c6-4968-b7e8-ca39ca2ad821", "sighting_of_ref": "indicator--bb30dfce-4057-4e48-ac90-372b7ad50748", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf9e97f-0118-4f50-8e1f-1bbff114f766", "sighting_of_ref": "indicator--bb30dfce-4057-4e48-ac90-372b7ad50748", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a6e8e0-61a2-47f9-9838-13b2e8fd0934", "sighting_of_ref": "indicator--bb30dfce-4057-4e48-ac90-372b7ad50748", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e7970c-d438-48d9-8c32-a3cbdc4b867a", "sighting_of_ref": "indicator--dee40834-fee6-48f0-918c-ffe0a5fc2999", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18888890-15a4-4229-aa8c-90804286a45a", "sighting_of_ref": "indicator--dee40834-fee6-48f0-918c-ffe0a5fc2999", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d7d059-e2ab-4be2-88db-c37ddc44c4d4", "sighting_of_ref": "indicator--dee40834-fee6-48f0-918c-ffe0a5fc2999", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40de8cb8-fee9-4490-a999-54d4eda0d124", "sighting_of_ref": "indicator--41f124c0-c846-469f-9b8d-0fdb54eec7bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531cedc0-25ec-4815-b266-89bcfa7a59f4", "sighting_of_ref": "indicator--8c457ea4-6106-43d2-b13a-0208d7d1ddab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cca147-91f2-4905-9c3f-eccca9d441c8", "sighting_of_ref": "indicator--b5677cf5-25ed-46e4-a5ba-4e49a3d3a035", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1393d3f-9430-4bf6-aa04-5433a77c578a", "sighting_of_ref": "indicator--b5677cf5-25ed-46e4-a5ba-4e49a3d3a035", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25549c6b-c109-4adb-b4e3-d9e8c6fc4c53", "sighting_of_ref": "indicator--e8d28ab9-1acf-4ee4-84eb-36f7377761cc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd802db6-e117-4d5e-9c16-8e07d9924b46", "sighting_of_ref": "indicator--e8d28ab9-1acf-4ee4-84eb-36f7377761cc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04018229-2e26-4123-a63e-9bcf4b47455a", "sighting_of_ref": "indicator--3bfa6ddc-1d52-44b2-a938-1b5a4678dfc9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4939342-9df4-4cad-b082-feec67c75e9e", "sighting_of_ref": "indicator--739b9067-7270-4eab-8002-2f8487337645", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcce1ca-b4fd-42bb-8003-84102f96e476", "sighting_of_ref": "indicator--205b01b9-1246-483c-ac0a-98f0f29c5d15", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f11335a-bd41-4af9-a68b-c6a296e0542a", "sighting_of_ref": "indicator--205b01b9-1246-483c-ac0a-98f0f29c5d15", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c635f1-744a-4b0c-884d-71e8bc5d913f", "sighting_of_ref": "indicator--8eb65b14-c666-4f7e-92da-0171afd73a2c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c22d10f-6ecf-4371-8c0e-cdf3d3f7850c", "sighting_of_ref": "indicator--8eb65b14-c666-4f7e-92da-0171afd73a2c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a64e323-4890-4426-a8a7-653280124d9b", "sighting_of_ref": "indicator--8eb65b14-c666-4f7e-92da-0171afd73a2c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161b9895-4cd0-484f-bb07-64dfccd3a740", "sighting_of_ref": "indicator--20544d71-6d1d-4cf9-8692-700c4536377d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f8155b-1283-4d7b-b4b5-5a02617241fc", "sighting_of_ref": "indicator--20544d71-6d1d-4cf9-8692-700c4536377d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb65401f-6262-4c2c-b0c1-5e028958aa0d", "sighting_of_ref": "indicator--c3492cac-bd1c-4567-83f8-a8441def85aa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9170861b-5d95-4905-accf-ebf645779deb", "sighting_of_ref": "indicator--3782ab2c-1611-4d5a-b449-e69f8b4aaa26", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70e21c0-8ca7-486c-a8d2-4776c357fd7e", "sighting_of_ref": "indicator--3782ab2c-1611-4d5a-b449-e69f8b4aaa26", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b66e373-c3b4-4842-b585-ff71145db63b", "sighting_of_ref": "indicator--7b07f646-be9f-4070-b0b1-1d988af7a6db", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e80455-66ef-4d0f-b8e5-238afc145961", "sighting_of_ref": "indicator--107816d6-ffd7-4bf3-bc48-7155f0366113", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2b3026-f384-41be-94db-d237faec226d", "sighting_of_ref": "indicator--107816d6-ffd7-4bf3-bc48-7155f0366113", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d618dd0e-4cf7-44ec-9cc2-12841788c25e", "sighting_of_ref": "indicator--3caf92e9-4f8f-424a-a362-212bd7a4bc51", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff4b04e-0bb0-4763-aacc-c2c378e69844", "sighting_of_ref": "indicator--3caf92e9-4f8f-424a-a362-212bd7a4bc51", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd229671-c273-4254-913a-b863132161db", "sighting_of_ref": "indicator--d1c931a0-b179-4062-8c49-a199ced143e1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a8b7a3-be39-40b9-a8e1-e7ba8fbb00cc", "sighting_of_ref": "indicator--d1c931a0-b179-4062-8c49-a199ced143e1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28a8b3d-39b0-477d-869a-9fcb571efe62", "sighting_of_ref": "indicator--555e409b-bbc1-455a-95c7-a5883f71295f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14933f01-d23e-4e67-9886-8d9eb3f12ed1", "sighting_of_ref": "indicator--555e409b-bbc1-455a-95c7-a5883f71295f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3b91c2-1ebc-4410-8960-008dbc8e733f", "sighting_of_ref": "indicator--1c5c0006-a0d9-4ea7-92fc-7ac63de3738b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e13c2d-2591-4a24-9298-05e8e05c7510", "sighting_of_ref": "indicator--07b012b5-5c33-45c5-99e6-7ddc7067b700", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8ce3b2-289f-402d-bfbb-dd03eb7d4eae", "sighting_of_ref": "indicator--07b012b5-5c33-45c5-99e6-7ddc7067b700", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba986e5-b641-4c34-a5f2-8f63da77e92d", "sighting_of_ref": "indicator--07b012b5-5c33-45c5-99e6-7ddc7067b700", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e0f0ff-6d68-4083-907c-a4fdcae4e931", "sighting_of_ref": "indicator--54666791-91d8-443f-a74b-ae2aa583ec97", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d93265-6b46-4c3d-ae46-6c3344026c32", "sighting_of_ref": "indicator--54666791-91d8-443f-a74b-ae2aa583ec97", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a089ecb-4495-4d33-8b50-ab76634bb696", "sighting_of_ref": "indicator--c770a5eb-bcb0-45fe-9743-26c3b7dacd38", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05ac213-5d1a-4191-b205-066370c327dd", "sighting_of_ref": "indicator--6cf691ca-03e8-4828-ade5-71fd80f08286", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da039c88-b83b-4ca9-82e6-c9288367b6fb", "sighting_of_ref": "indicator--6cf691ca-03e8-4828-ade5-71fd80f08286", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ebbf20-474e-4329-b3c3-f73ed9c1ab92", "sighting_of_ref": "indicator--e6380402-1c2d-4007-b95e-b52e556ed4fd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2069f940-c552-4ea8-860e-d3563217cd3d", "sighting_of_ref": "indicator--9d9d2f82-a077-46f7-80fa-d4b964f0827a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d883406b-26f0-404b-aef5-2fea4c480222", "sighting_of_ref": "indicator--750723f2-1ea1-4c2a-a7ac-1fad929e4086", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09065125-f660-4b7a-a668-9b10c6e2ce3e", "sighting_of_ref": "indicator--a0147ae3-73cf-48bd-9696-f4a2dfb1839d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba156dd-1c59-4418-9845-eec4642d5a7d", "sighting_of_ref": "indicator--a7175866-d9dc-4d3a-8ce7-0fafc96f22ca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc2d613-d539-4801-9bee-393ab6b7793c", "sighting_of_ref": "indicator--b665110c-f168-4c28-b642-f21f928e03b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbe2110-e643-45bd-bd92-e06486cbde83", "sighting_of_ref": "indicator--f7d944bf-9cb2-44f2-8f75-1224e74a06c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a5ce7b-38c7-4ed5-9aa1-66655d26d6a6", "sighting_of_ref": "indicator--7d09454e-a3f0-4656-8643-2decccbc84b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89699f8-89fd-4d4d-bb57-e0be9420a8ca", "sighting_of_ref": "indicator--123acad7-3066-4772-a43f-5afd91763638", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e88498-8a69-46d8-8614-a2f341afae91", "sighting_of_ref": "indicator--5916c2a6-9427-46fb-ac2e-216c19794dc0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c76046-09c1-4c44-8928-36eb47e86897", "sighting_of_ref": "indicator--35fcc0d6-5e5b-465f-951b-9412e3c9c9f4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022379de-6044-4bb7-9b98-339cedc10b3e", "sighting_of_ref": "indicator--83b0c284-33e7-4b53-93f5-d9a0bc5ceeda", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f13e5c-d5a8-43db-90f4-358a4abfb73f", "sighting_of_ref": "indicator--9ec89b42-90d0-46ca-93dc-9c4f498fc10d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a5bbff-f819-44de-91d8-a6482a997d02", "sighting_of_ref": "indicator--2ce77e79-3eca-42f9-b9a1-48d33a1b93fe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc41be90-2245-4441-afce-cbbbb1591fce", "sighting_of_ref": "indicator--8c5bfd9a-8e2a-4379-b84b-7879c24f4c07", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309d3ba2-ab37-4fb5-ac7a-cf564648a883", "sighting_of_ref": "indicator--569de541-84fc-409a-9918-8670e1a8e9c4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d681d4-762c-4523-bd17-152a4c76026e", "sighting_of_ref": "indicator--46eb79d5-9684-42c1-a881-bfaf394956b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cb23e3-9893-425c-94ea-fb41d568b141", "sighting_of_ref": "indicator--1e361bf5-3f0b-4ef7-bcdf-6a80efc82825", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f8b870-bfec-4223-8a04-a6b42a11bc9b", "sighting_of_ref": "indicator--1e361bf5-3f0b-4ef7-bcdf-6a80efc82825", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d6f425-52d0-4a66-99db-73961d2a4bc1", "sighting_of_ref": "indicator--5bc71de0-f2a9-4c63-a8bb-311c3558dd28", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7817e7b1-83c7-4b0a-b3de-ffd755d3b3ee", "sighting_of_ref": "indicator--c28075ab-a620-40ae-a51e-33ebd41a1fcc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19785299-dbee-433e-b262-ede2315a9a96", "sighting_of_ref": "indicator--ede696fd-309d-4c8c-9bf3-0bc86dcbe658", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c50044-a0ce-4621-a972-b8257c7cb917", "sighting_of_ref": "indicator--ede696fd-309d-4c8c-9bf3-0bc86dcbe658", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a174f1-3a85-485b-988f-81246d5afb58", "sighting_of_ref": "indicator--ede696fd-309d-4c8c-9bf3-0bc86dcbe658", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e45feff-5552-434e-99d1-66d8bf328770", "sighting_of_ref": "indicator--364e745c-f126-454c-b1e6-b8c9a8e207e4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0665a20-f6ab-43ce-adb0-79b676277aa7", "sighting_of_ref": "indicator--364e745c-f126-454c-b1e6-b8c9a8e207e4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783bddb9-82e6-4c99-94cb-1ab3f5783015", "sighting_of_ref": "indicator--364e745c-f126-454c-b1e6-b8c9a8e207e4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427fe0da-3fea-4e85-9f12-dcaadd9dcc9e", "sighting_of_ref": "indicator--ce5e205e-e2b7-475d-8569-d122192b5430", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7140ba62-1beb-4c23-8eec-ecd88e55e7b8", "sighting_of_ref": "indicator--32bd1c40-4525-4c16-80c2-e36c78ddb2a3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faad8919-d9ef-4cc7-ac21-9445d690406f", "sighting_of_ref": "indicator--8c7fbd8d-c02b-45d5-85e2-bd3ef0bafa42", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae451d2-8077-46ef-a752-861ad1287e2b", "sighting_of_ref": "indicator--6e355c48-e403-4845-ab47-6e686061dce2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a608b0d3-8905-4625-8d39-52f95d28e89f", "sighting_of_ref": "indicator--ed853ab5-177d-41e1-9911-bf5adf71f65c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75947fc-4fc2-4bf6-8fd3-1203680bfec1", "sighting_of_ref": "indicator--2c989785-9220-4bac-ae6b-d505f407899e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31bbe8b9-e735-4d9f-926e-12c8f415c097", "sighting_of_ref": "indicator--c2d00ec0-ee11-48ce-aaf9-0a90dfe5c479", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c5f40c-a044-4ec0-b1f0-a6b43e97c116", "sighting_of_ref": "indicator--f851184e-aef1-44ff-a7fc-13d202e7d094", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839729a5-f03a-422a-9f8a-ac0c90a393f2", "sighting_of_ref": "indicator--f851184e-aef1-44ff-a7fc-13d202e7d094", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d081de69-de7d-49a1-8f66-30d2edd5dc6e", "sighting_of_ref": "indicator--f851184e-aef1-44ff-a7fc-13d202e7d094", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b7a916-3b47-491c-b0a3-ef4b5ad1d3db", "sighting_of_ref": "indicator--f48c72c6-bb3d-466e-99ae-befbc4495f8c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a02f1b-3343-4de9-9b5f-c27fea6ab665", "sighting_of_ref": "indicator--b3d3f5c8-0599-4a1a-ba71-25c781469d2a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97610f1-a9f7-4bd3-abc3-5fd0d211b7f1", "sighting_of_ref": "indicator--c38d577c-bffa-418d-bfc2-54dbfbc3a870", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d662843-d80b-4eb8-80f3-3dd30c40dd04", "sighting_of_ref": "indicator--071453b1-88c2-4d0b-a8d7-b35e6243f4cc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cd1211-8585-43b3-8230-2e521f07e066", "sighting_of_ref": "indicator--25f73ad8-de17-4b17-8178-d9996daa6cd4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b05e13-9da7-40af-a7c0-f8bd94381d7e", "sighting_of_ref": "indicator--25f73ad8-de17-4b17-8178-d9996daa6cd4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ef3738-625c-466f-af0e-3b997fc563f9", "sighting_of_ref": "indicator--66c704d8-d2ca-463f-add1-a24b0db6d298", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68476fcc-87e9-417c-ab2c-139857cfa5af", "sighting_of_ref": "indicator--5b6a7c92-2a27-4e70-a993-32f2aa78158a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b78ab2-9333-4281-9c23-ad08c6a5d94c", "sighting_of_ref": "indicator--9e80f2fe-dd27-4cfb-abab-7dfe2bac28c0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58708f80-4091-4bc8-af83-2a9fcffc1eeb", "sighting_of_ref": "indicator--57a27174-14ca-4453-9179-cf4c04e285ac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9a5f4b-a706-404e-a77d-70f4a8eca2e5", "sighting_of_ref": "indicator--41e2f396-a297-4e0d-a918-98eef09d4094", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57cea56-85bb-48a0-a5a9-d0d92db86c18", "sighting_of_ref": "indicator--16a4b156-daa3-4aa8-9312-7a7fda10f96b", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf11242-cde4-4bdc-80b6-17df98f331f7", "sighting_of_ref": "indicator--94cf84e3-b09d-4d0a-a630-b025e22cff0c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac93c881-49f4-4446-beae-b26d938e7319", "sighting_of_ref": "indicator--94cf84e3-b09d-4d0a-a630-b025e22cff0c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f5ecf1-6e20-4c3e-9ba9-1969b48d7579", "sighting_of_ref": "indicator--7bc872dc-9d02-4189-bdd5-d25de7761462", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76dfbba-e134-4143-92b9-39c3ec415c0b", "sighting_of_ref": "indicator--08b270d0-af17-49eb-9f7d-47d40f66f617", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a155ae2c-58ad-4125-82d3-4b1b7debac6e", "sighting_of_ref": "indicator--acd07762-8e3e-45f9-829f-0533ec0177af", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64c69c7-fba2-4c90-b6e0-cc2df9f64a2f", "sighting_of_ref": "indicator--aed82908-5e92-4015-9801-5fe373400f71", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f1b1a4-8d0b-45cf-9317-5bf27491d2b7", "sighting_of_ref": "indicator--26d5ecef-6d06-4c54-9e22-6ad6c66c6078", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74be843b-835d-4fd5-86be-b6e5c0b78574", "sighting_of_ref": "indicator--dcd267e2-2555-4f74-adb3-c88ead26eb46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97d710c-320b-4059-bed0-e7f3ee797762", "sighting_of_ref": "indicator--1a822e26-774c-4aa1-8460-aceb7f7e46e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042b33ea-46c0-4f8c-a87a-ac6e5a928697", "sighting_of_ref": "indicator--7df44cce-a19e-4cc0-acbf-c721f2d98cc9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64ec137-b0db-421f-bc92-faa66378bb8d", "sighting_of_ref": "indicator--c2c90022-11f1-40bf-a3d5-2493e729f5f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b616ed-b599-4e89-a58e-6d765ac9f09c", "sighting_of_ref": "indicator--a73ac764-788a-4112-9a80-ef6e4a0a2c2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff708d55-4a75-4d3a-bf8e-1bed1221ad25", "sighting_of_ref": "indicator--f30fccf5-26b3-437b-b071-bcc4a65d499c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c629dc5e-b3e3-4664-86f0-17388713f3aa", "sighting_of_ref": "indicator--22ce5662-1703-4d2a-84a0-6b1ea70353af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ab8d26-7092-4d74-bccf-99d89559560d", "sighting_of_ref": "indicator--7ead4ea9-9962-4536-8d8c-7c4886047ed1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9f303e-9e4c-4a56-9b0c-0668f0dfc4bd", "sighting_of_ref": "indicator--7c66d15c-a4ad-40ed-b1da-fd2a52871875", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7b7f2f-a532-444c-9ba4-5704de3bc21b", "sighting_of_ref": "indicator--01e91b1f-a53d-44a9-82b7-2765acf61af0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e88048-4c28-429a-b526-3c3711745f91", "sighting_of_ref": "indicator--30d55c00-26fb-4c49-b705-c85ccc73b701", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415ae493-c5d1-4249-ae97-e74903f1a729", "sighting_of_ref": "indicator--6923b812-17a0-466e-8ce8-9360ea7aa3b9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb9b662-67d4-473c-b208-603cf9c7c8b2", "sighting_of_ref": "indicator--8f0b64f3-927a-4050-afdc-0e29b959f45a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a94ce14-1e79-4d09-9a2a-c4cd1f84e1a9", "sighting_of_ref": "indicator--084d90bd-c753-47cf-a19f-22ef16541b18", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94aced8-18d1-4887-8213-a9218d65959c", "sighting_of_ref": "indicator--e43a8d9a-0f31-4941-9483-2892de6a1901", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d131c8b-5a1c-4656-90b6-925ca74df1fa", "sighting_of_ref": "indicator--8698b379-12f6-4412-8c8c-26cf0064a611", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47853b2-7137-4942-ae60-53c75c779974", "sighting_of_ref": "indicator--a2ee99d8-db09-43e2-a616-f9459405678e", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adc1f70-4dd7-43cf-8d96-fbd232e9f61e", "sighting_of_ref": "indicator--ebdecb85-60b6-4446-ab11-111d5bea8f68", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e62463-270e-4243-a3d9-69fc9e535d1c", "sighting_of_ref": "indicator--13ae5441-0eb9-42c0-874b-cfdb257c51aa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fb25d8-24b2-4399-ba4e-869fbc22a3e5", "sighting_of_ref": "indicator--c766ec93-12e0-4e6e-b13a-2f35f3455693", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05d1a42-b105-4f8a-9102-47d8e3471de7", "sighting_of_ref": "indicator--4b05859c-a231-4663-af4f-3a3cf0168f9b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35502619-a4cc-4cce-a33a-ce56ee348c25", "sighting_of_ref": "indicator--38c376dd-4e58-45b9-9b3a-acb30936efc8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b609aec7-4ba0-46ec-be19-f50fd1d15377", "sighting_of_ref": "indicator--470012e9-6777-46a8-b61a-9a3f5664c574", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa030b3c-6db5-4b73-999f-5f096bd73660", "sighting_of_ref": "indicator--9bd49032-7925-4afc-b889-82b70dac0b24", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa45f252-3018-410b-9ea3-d844865ee484", "sighting_of_ref": "indicator--f025efc1-ddc4-491c-96fe-096255b041ca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985efeb9-6f79-4658-9034-50cdead8fef5", "sighting_of_ref": "indicator--3cd5a253-409c-4b91-ba09-559db8d9dd3a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3963ce2f-3437-4004-a4c2-8a7fc39eb7ce", "sighting_of_ref": "indicator--72f7b6b6-1bad-4f2c-8a37-efaeedef6aa9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e268bd32-9a10-47fb-8526-5635eec5f8c5", "sighting_of_ref": "indicator--ce0ae77f-0c04-4fdc-9b2e-77e56a819757", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad448cce-59a1-4542-8a17-fc801713ffd6", "sighting_of_ref": "indicator--8f2db2b2-1900-4510-a2d3-6173aac4699e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526cfe4b-a534-4d94-9fd5-d3c3a4f11f45", "sighting_of_ref": "indicator--8f2db2b2-1900-4510-a2d3-6173aac4699e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b02822-3304-45cc-bbcc-faac3f994466", "sighting_of_ref": "indicator--a0c21007-7e2a-4d49-9565-c64bae2837bf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba968350-318a-4ba7-9bff-405fb806721b", "sighting_of_ref": "indicator--048ec40b-fd55-4591-9cf9-afe36b422994", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217dab32-6a79-4e26-b872-b620372c4071", "sighting_of_ref": "indicator--898d6879-f45c-4c4f-91f4-60627fc3af71", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc7287b-3d0e-481a-8903-7f2600452a4f", "sighting_of_ref": "indicator--6ef12bf4-e403-4875-8276-154612b27134", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77a59dc-30fd-4455-9b34-62a10f54fecb", "sighting_of_ref": "indicator--1da80127-7971-450e-a792-56148d3eb0be", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4fa1d8-4a36-455f-94c0-74e08fff853b", "sighting_of_ref": "indicator--13d0db43-279e-49a7-b624-fbc753fcc2f3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0572cc-98f6-491d-b936-15022c9e5585", "sighting_of_ref": "indicator--bdf86e64-110f-4a20-aef8-96fb2fb52e68", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45353acb-7bf8-44be-85e8-d942324c4a07", "sighting_of_ref": "indicator--926fb297-c9a2-448d-86cb-7f816831beac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e4601b-ae22-4c30-bf1b-f93390559f4d", "sighting_of_ref": "indicator--7f461a0f-a813-458f-a339-4d21b23bf06d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bb9627-bc7e-4a41-a2ca-3550fbc8f78a", "sighting_of_ref": "indicator--ca7d4dd8-56b6-4044-97da-06942ba02af8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44407c12-4265-423d-8ac5-4222279fb491", "sighting_of_ref": "indicator--6bf30f9e-70a3-4388-a702-e88f37f84cb7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51fe091-dcd7-4a40-a3a4-2b9ce37b882c", "sighting_of_ref": "indicator--6d961a76-2fa1-4949-8daf-6036448e34a3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ae1604-9711-48d6-a561-434d204087bd", "sighting_of_ref": "indicator--6d961a76-2fa1-4949-8daf-6036448e34a3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e803e5c5-8d90-43ba-9fec-7f69f9d37cbc", "sighting_of_ref": "indicator--e1af6aa3-6873-4da8-a933-b02300e4f917", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd3e992-8e99-49c5-89ad-a04f9bf21497", "sighting_of_ref": "indicator--44ee7957-db1e-4d96-9f79-e2c9629063c3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcae51d5-b07c-4f26-b53a-61fd24a59b5e", "sighting_of_ref": "indicator--44ee7957-db1e-4d96-9f79-e2c9629063c3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecf2f4e-b109-4ebb-884c-cf10da944316", "sighting_of_ref": "indicator--7ce0fd08-49fe-4077-9c71-005b01aa1a9b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfaacf58-6430-48b5-8839-68c68b10a6b8", "sighting_of_ref": "indicator--427dbae8-3ac7-46a0-9f8a-d2d55a335ef9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5c9076-3544-4fb5-a1a5-8f360bcc557b", "sighting_of_ref": "indicator--8eeb9230-52bb-4231-967e-82f307d7641d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ae7cf3-adbb-4dc5-a430-9464847da1f3", "sighting_of_ref": "indicator--61a0ac74-dd1e-45a2-8905-85f0416a7714", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6986427-5408-4704-a638-6b93ec3dd654", "sighting_of_ref": "indicator--af9c7803-d234-4b67-bb24-d03ca79a3c96", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb476db8-dd03-4c35-ad4f-a6468ac1dde3", "sighting_of_ref": "indicator--d3529df7-93c3-42e3-93b8-e501e56042d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d124aa3-bd57-405f-97fc-089ad4757b31", "sighting_of_ref": "indicator--ada8eef9-0d87-4bb1-bcfd-1f276c461800", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe557e9-0a99-4261-87a4-142ffba8621c", "sighting_of_ref": "indicator--62782686-ae2c-4482-b86e-0da342b16805", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f582df-369c-4596-989e-0ecf9c138687", "sighting_of_ref": "indicator--2132b5ec-7ef3-4890-ae02-8dadc892ad15", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38050d89-d6a3-46a7-8e06-b4e4a112f8cb", "sighting_of_ref": "indicator--2132b5ec-7ef3-4890-ae02-8dadc892ad15", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee645f9-7708-4cc4-a05a-150f0144a119", "sighting_of_ref": "indicator--2132b5ec-7ef3-4890-ae02-8dadc892ad15", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ddfcfd-3a62-47b2-b096-a5f20364afb7", "sighting_of_ref": "indicator--fcdfb507-0dae-4aeb-b909-72d80c1a32e8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4146ba-04d5-4b7a-a34c-c403f1ddb9ec", "sighting_of_ref": "indicator--08d1b4bd-f1c1-409c-91e7-43fb3436e51e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb30b16-da33-4375-bf22-cba8a44ae817", "sighting_of_ref": "indicator--08d1b4bd-f1c1-409c-91e7-43fb3436e51e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab9ea38-4f4d-4710-bcdc-12ee7a98b483", "sighting_of_ref": "indicator--08d1b4bd-f1c1-409c-91e7-43fb3436e51e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3000b088-8729-48ba-ad3c-f32152936dc7", "sighting_of_ref": "indicator--cc027842-2c7b-4e6f-a25f-e7f17d5d001f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd69511-02d5-4eb3-8734-aaf786945076", "sighting_of_ref": "indicator--d1d9fab7-9122-4695-9c42-869550095337", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464ef5b0-d5c8-4a3e-8780-75489660ed5f", "sighting_of_ref": "indicator--103f0f8c-ad00-4bf7-9045-5b8ab4ddfd99", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a646f3-61b8-43ef-b715-6ac09ed5663e", "sighting_of_ref": "indicator--a4f70128-2e6d-428b-b3eb-3adef2a502cd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecf9f3e-09fc-4c5a-9456-f7f4d94bc1ce", "sighting_of_ref": "indicator--a630b5ac-8341-489f-8d22-59b99d1e7a02", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65210c9d-5627-45f0-974c-07962c4388fc", "sighting_of_ref": "indicator--ca149806-821b-43df-a7ae-9daaab5f8d13", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e0322f-5235-43d8-a6dc-ada9c0fefa38", "sighting_of_ref": "indicator--8be0483c-8448-46f4-ac29-e85dfeab4c6a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8083fb93-69ef-451d-8956-c5e11f64c63f", "sighting_of_ref": "indicator--4d1443ea-f1bf-41ab-be9a-bc012ce1bd11", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4902d30e-b088-4ce6-aa9b-22de1f191c72", "sighting_of_ref": "indicator--63f7602f-6c0a-48b1-b314-8412a6d4b2c0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff44444-c258-4e85-bc91-fc6c5df332b9", "sighting_of_ref": "indicator--7ee73e12-e64a-45ce-885a-5a2b9376ae5f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf1fd96-d94e-43ac-a840-618cfb390db3", "sighting_of_ref": "indicator--9ec9470c-6722-4986-add7-121fa3788048", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52f3f0f-e4f7-4986-896c-bad825ad2120", "sighting_of_ref": "indicator--ce92b82f-9672-4f2c-832f-21cd15031120", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5110fba0-e2a9-4b24-88e1-4b6728d5cbe7", "sighting_of_ref": "indicator--1316ff2c-544e-43d3-b980-8fa7cfc12937", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d3f9da-0970-4001-b3d8-eb88e2a0d1a3", "sighting_of_ref": "indicator--1316ff2c-544e-43d3-b980-8fa7cfc12937", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adc8638-2eb0-4fc3-96b3-01edb7fe4da2", "sighting_of_ref": "indicator--072336f4-edda-45f8-a18d-03d305618853", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49afaef4-f0e5-4a79-9f04-764d39716852", "sighting_of_ref": "indicator--072336f4-edda-45f8-a18d-03d305618853", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a67e10d-e081-45ec-8aaf-b300dda67a25", "sighting_of_ref": "indicator--072336f4-edda-45f8-a18d-03d305618853", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc9f4e8-bf99-4777-aab7-8a76ef38e482", "sighting_of_ref": "indicator--e11fab77-1710-4cf6-b906-434ddbe6ec01", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a17d8a-9997-4817-9a7d-c96a0d26bdce", "sighting_of_ref": "indicator--2ea82219-2e3e-49ce-9c99-7949f9e0ed25", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8bc8b6-a2a2-45d0-a7b0-b178e5599fbb", "sighting_of_ref": "indicator--bd04609c-33cb-49f5-9c06-abab7682c42c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ccbbb9-18b4-45d1-9c29-668919b05bcc", "sighting_of_ref": "indicator--bd04609c-33cb-49f5-9c06-abab7682c42c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4323e0-8add-4577-80cc-e1feec4fed59", "sighting_of_ref": "indicator--d507f076-a085-4535-b68a-d21df925de4e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5306ed8b-c709-46bf-b8ea-e25663591a40", "sighting_of_ref": "indicator--6c20ccb8-07e0-43e4-a83d-456801779d76", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8733b9-b53e-4b05-8524-870d79c74bfa", "sighting_of_ref": "indicator--51aa9d01-67a5-4801-addb-2b698ae91c94", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c00e5a6-9b0e-4319-9879-701d3cc3b0b6", "sighting_of_ref": "indicator--94e938df-48dc-4803-843f-66b219275600", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e915baa8-c8c7-4852-bd8f-925fe86c959c", "sighting_of_ref": "indicator--d4b31889-4f2b-44c9-8386-fce647cad7df", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48239f0-133c-4899-a2c2-dd8dfb7f35e6", "sighting_of_ref": "indicator--e345c3a6-e194-4aa1-bba1-2e462c7ec4a3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb1bd38-b7ce-4188-bbd9-5c9769635c74", "sighting_of_ref": "indicator--19e349f3-17e7-4983-884d-0567dd4aa75d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14774c48-0cc8-4b26-87af-a08d70077882", "sighting_of_ref": "indicator--7356e3e9-2916-4518-a1c1-e1c444e39c3b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d5fc51-b6ef-4aab-913f-67a75ed4427c", "sighting_of_ref": "indicator--7ed7bdaf-b23b-4540-a2cd-6ed204e2178d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d41e3cb-a387-4dac-841d-b822484c4ed8", "sighting_of_ref": "indicator--7ed7bdaf-b23b-4540-a2cd-6ed204e2178d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5285a7d4-57e4-4959-9439-63b9f8e42404", "sighting_of_ref": "indicator--cf2da509-4e04-48aa-a9d3-d3602a1078e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff962cb0-f19f-4f24-9c5d-c4117a94ddb7", "sighting_of_ref": "indicator--298cd8e8-aeee-4397-a2c9-86bc8e7c3bb6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f81980-667c-40c8-b0f4-e0d6eebc7560", "sighting_of_ref": "indicator--7705c570-f1e0-43a6-9a2b-0c71f371d815", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778b4389-088c-4894-83d1-e2e81de8e344", "sighting_of_ref": "indicator--caf0270e-6aa1-4598-80ba-ae28f6c4e035", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a004bb-97d5-431c-9d28-67896f3854bd", "sighting_of_ref": "indicator--40124fcd-4699-4cd2-be01-9183040d8b8a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628c85cd-49fd-4f27-847b-4fa5a9d7f57f", "sighting_of_ref": "indicator--e104e315-50e0-4a50-b059-28d787474af3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811e1bd9-9b9f-417f-bee9-5e862ac1df25", "sighting_of_ref": "indicator--390ef16c-5036-47c9-a728-6605bd8f8574", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428f774b-9410-441c-876f-f4e67be3fcba", "sighting_of_ref": "indicator--390ef16c-5036-47c9-a728-6605bd8f8574", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f612e75d-f349-482d-8c95-999e29bb976f", "sighting_of_ref": "indicator--8734b409-e88b-4888-ba60-4da471247582", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce04a9db-d8bc-4238-a0f1-1e1afd66eb21", "sighting_of_ref": "indicator--7470fe3b-4a15-4496-ac26-f26143784dd1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8dba90b-5547-433e-ae00-660778cf9034", "sighting_of_ref": "indicator--7470fe3b-4a15-4496-ac26-f26143784dd1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bbbb97-61a9-454b-a7f7-019069c5c5e0", "sighting_of_ref": "indicator--7470fe3b-4a15-4496-ac26-f26143784dd1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb86706a-692f-4952-85f4-1beff6462b35", "sighting_of_ref": "indicator--44acb86d-4489-4e8b-b9dd-d74edc9ad743", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5506eeef-d35f-4998-8c4b-ed2f852a7656", "sighting_of_ref": "indicator--5de2b9b7-2733-4d27-bebc-e09147dacfce", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2594381e-882b-4e40-84cd-dffe8f8b07d9", "sighting_of_ref": "indicator--11dc5db9-812d-4c74-844b-d9072dcd3f14", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa733cc-dc6b-4534-a415-f1f71d44f0c7", "sighting_of_ref": "indicator--7e317b88-75bb-45c4-b69d-4973be280409", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c7e572-5bf7-4e59-b947-4246d24be754", "sighting_of_ref": "indicator--41eb1e1a-fc70-4404-bac6-47e7fb4bb871", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ea2c1f-6dcf-4014-bffd-6aa1d7765da4", "sighting_of_ref": "indicator--3817a84b-a837-4ba0-abf4-0698a0349fec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90526593-3b35-4959-8204-fbbacb7d2d40", "sighting_of_ref": "indicator--c16fdbac-8cd1-414d-a15c-2aaa1fcadef7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd63e06-4f2e-4c5e-8d26-d868ed3a44d9", "sighting_of_ref": "indicator--c16fdbac-8cd1-414d-a15c-2aaa1fcadef7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2fba79d-4629-4090-9dd0-b8b299941c79", "sighting_of_ref": "indicator--ee5063cf-3703-4c9b-a72b-262f6323e969", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69a86e2-fbfc-4c52-a57a-ed2911311a78", "sighting_of_ref": "indicator--700a0ebb-1823-461c-be91-e1b88e7aad14", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d8f547-b8e2-4931-bd9c-316400fb0fa7", "sighting_of_ref": "indicator--79a53bab-a98d-4347-b15b-5362bcecf9e3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f6b764-e824-4713-944b-c15d71b8da29", "sighting_of_ref": "indicator--fd2be193-8426-4c50-abfa-ce9e0ce63137", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa3b7c1-94f1-40bc-8482-f477b2cbea5f", "sighting_of_ref": "indicator--e6dbe4aa-c785-46af-81ee-37dcdd7143ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c06bd65-8628-4908-85eb-5eb904d5dc4b", "sighting_of_ref": "indicator--bc6af6b0-6ccc-4d2f-a506-e0f49a3d4d23", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dec01a3-9f24-4b1d-8995-fdb188631139", "sighting_of_ref": "indicator--bc6af6b0-6ccc-4d2f-a506-e0f49a3d4d23", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c239a57-47b1-4e7f-bbac-62c84686fbb1", "sighting_of_ref": "indicator--ad74e846-9bf7-4532-84ca-83724f09a721", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f81357c-1e63-40fa-85c5-474904313969", "sighting_of_ref": "indicator--ad74e846-9bf7-4532-84ca-83724f09a721", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69724c8-c4b5-45c7-ae72-a3c96abe665c", "sighting_of_ref": "indicator--ad74e846-9bf7-4532-84ca-83724f09a721", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b83a22a-c672-4b3d-a18e-96de0ac61016", "sighting_of_ref": "indicator--2c75ae1b-1d33-45a6-a6b3-86b415934766", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898da342-3a38-4907-822f-4a9a9e41b018", "sighting_of_ref": "indicator--2c75ae1b-1d33-45a6-a6b3-86b415934766", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51dc3b15-ffba-459c-a483-ace90e2518e4", "sighting_of_ref": "indicator--2c75ae1b-1d33-45a6-a6b3-86b415934766", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a942b04-bcc3-4a17-a1e9-9cac480629b8", "sighting_of_ref": "indicator--7365777e-3e5e-46f5-be5f-81ec274424fe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759b6cc0-5367-4ea0-b661-137a74dd4eaf", "sighting_of_ref": "indicator--083b70d8-4451-4b14-9eb4-0030e1e2e04b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7f9ddf-b3ef-40c5-bde4-4eb10615ddac", "sighting_of_ref": "indicator--20cb1b2b-954f-455f-a03a-15dc4570717d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24b9928-68b1-473b-82a7-43cb85ea32a7", "sighting_of_ref": "indicator--4e831738-b164-4235-9143-db0c95f7165e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ff82bc-4145-4cd7-9d3c-ae754c8bf552", "sighting_of_ref": "indicator--8f5e04df-3086-4f45-926e-edf1ff825334", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9d570c-717d-42a2-b181-28bb008f40ef", "sighting_of_ref": "indicator--8f5e04df-3086-4f45-926e-edf1ff825334", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72de9ff9-b677-4268-a220-acaad07513a0", "sighting_of_ref": "indicator--c7f0da09-b72a-4f0c-ae33-00763d6bc68d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5e26d5-e518-4d9f-adf8-63e0b9082c4f", "sighting_of_ref": "indicator--8c514d7d-7da2-483e-a1e0-33bfd036c5f3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9adf3e8-a4d2-4f3b-8c47-141a6e4a230b", "sighting_of_ref": "indicator--81ff7f29-8902-4888-a6b5-39689b6383ba", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0691ec05-d45c-4920-925c-11e5405b4cd6", "sighting_of_ref": "indicator--e8d3ff86-4fed-4d9b-baba-c4171bf60c25", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c7a08d-b7f9-4b84-9d50-570206eed49d", "sighting_of_ref": "indicator--1bfb3b53-e5d4-4cb4-95f0-cee535da23f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d76433f-9d7c-4fd3-a40a-6c209225c276", "sighting_of_ref": "indicator--213e5c06-a60a-4d24-86e3-7aa4c709aedf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d691ba74-7791-43ce-bce8-69c248121d13", "sighting_of_ref": "indicator--213e5c06-a60a-4d24-86e3-7aa4c709aedf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd94ccd-9d1d-4db3-b99f-f32793c58d85", "sighting_of_ref": "indicator--213e5c06-a60a-4d24-86e3-7aa4c709aedf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95578015-5a16-4f41-89fd-c812cf100c50", "sighting_of_ref": "indicator--4add3936-93cf-4c51-b90d-8ebe1be42151", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552746a6-39fb-4e2e-acf3-bf8d5aee9d7e", "sighting_of_ref": "indicator--4add3936-93cf-4c51-b90d-8ebe1be42151", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf546483-d373-4db1-ba0d-7f9d348f3144", "sighting_of_ref": "indicator--e76e1bf4-bf28-4553-894c-47e714898651", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea42fe7-0f4b-47fd-a09a-36b9d2264712", "sighting_of_ref": "indicator--79c7dff6-e8ea-4949-a909-31de36c9b008", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7edfd3-163b-455d-ba68-bbfd43eb7200", "sighting_of_ref": "indicator--d0cee9ef-28b0-47d5-80f2-38117cb82b4a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c304ca6-0cc1-40c1-ba7d-e35f1a3cbcb2", "sighting_of_ref": "indicator--3b751385-7934-490f-ab24-d3d5995fdb5c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbd342c-092f-4269-905f-6fc553d2647c", "sighting_of_ref": "indicator--4fa989dc-7c31-4bbd-acc0-608beda6c9ea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144afd0a-7e4c-4e44-9d70-be38c79d89c8", "sighting_of_ref": "indicator--6eb70266-97bb-43b9-b947-13a284e97978", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e086aa16-9797-4fb2-900b-cb9a1c2cefa8", "sighting_of_ref": "indicator--dc6d3a4c-e740-4b18-a4b9-c160de64294e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ab28aa-d422-412e-b93c-7ded4cc196fb", "sighting_of_ref": "indicator--dc6d3a4c-e740-4b18-a4b9-c160de64294e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8810a3-723c-44d3-a9d6-0ce29d734c95", "sighting_of_ref": "indicator--af494a42-aa1c-4aa7-885d-97edd1440684", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4166d0-f9d9-4512-887d-77c228f68249", "sighting_of_ref": "indicator--a89d5d33-40ca-47ed-ac24-a58eeb32bd54", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee44a8b-dd07-4011-8695-831012d4454f", "sighting_of_ref": "indicator--14667d2b-0c79-4b1b-a4a4-6dffb6f7118b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfded2b-4485-424c-8e57-fb4fe557dbea", "sighting_of_ref": "indicator--988a3b71-0b06-4d67-b37a-ebecee0e403b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00054dd-0a97-4064-9cda-65cfed6e9611", "sighting_of_ref": "indicator--ac588da8-be96-4e08-98ce-52ecf673094e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127ebdb2-e69d-41c9-a34c-8e6de467be1c", "sighting_of_ref": "indicator--bcf4d4fa-4c70-4339-bad9-fb731c5838cc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c563ed-d6b9-4f1d-a10b-eaa5da5f2d6f", "sighting_of_ref": "indicator--f2f16bbd-d98d-4ff9-a31a-33ebe80621c5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a7358d-2d65-4164-9eaf-ec48392462fb", "sighting_of_ref": "indicator--384c878f-8ca3-4d47-917f-f05bb3d6dfd2", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c79806-03e6-41bf-a0e4-69575476e210", "sighting_of_ref": "indicator--20e1bd28-4021-4c72-b61d-26014e70741c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89375e04-c4d3-4cc5-a8bb-7ea2c33536b7", "sighting_of_ref": "indicator--96383eeb-d865-4e9c-a767-6d8bba6a822e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34879e47-d181-4820-9244-41c2b7fe63bb", "sighting_of_ref": "indicator--6e8c7f75-a932-491e-ab63-63f31095ffa7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412725b1-cb6b-4c8e-a811-34703574bbd1", "sighting_of_ref": "indicator--69a76d13-c095-4192-af29-1457a886ab8d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7781e32-1687-4d41-8372-d2a304512352", "sighting_of_ref": "indicator--652e0cb1-ca24-4771-809b-cf572c8e1f66", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d686eef7-a15b-45da-a201-b75deb92b7dc", "sighting_of_ref": "indicator--60b9f7d1-42c3-4d8b-9957-9d7f72357a4b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f557fa1-3386-44fa-883d-9b19408469ac", "sighting_of_ref": "indicator--7a808727-aad2-4c41-8686-17c3e9becdd6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586ff946-89c4-4615-9f61-c94c8772b8bc", "sighting_of_ref": "indicator--72993472-9e2f-4471-b985-b6dced41b084", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9ca14e-82b7-46bc-afce-016e7a5e4173", "sighting_of_ref": "indicator--95a15e05-6581-4383-a0af-e0dc14f782f6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85341096-ba6e-4935-9aa0-93c833b86c24", "sighting_of_ref": "indicator--5f222f27-5a7b-43dd-a7de-e0d0daeee438", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e319e024-8b9b-41b0-ae7e-31bd5697a2a1", "sighting_of_ref": "indicator--fe9a1dcd-d955-4310-991f-047dd6faee35", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1deb98-59e8-48cc-ac2f-5d7ba074909b", "sighting_of_ref": "indicator--1c908ada-bb1a-4258-bfa0-fe8a9fb80f4a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf1faa5-288f-4f84-82e4-2ecdb678615d", "sighting_of_ref": "indicator--52a4d609-9d9c-4ea7-9a97-4b21c58909f9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b420fe-52af-4e62-8198-1a2ab1256aae", "sighting_of_ref": "indicator--ddb09eec-2fd0-4bb3-bf10-bd8e7c550327", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4143326a-7bc0-4cbc-92a5-0a544995c813", "sighting_of_ref": "indicator--ddb09eec-2fd0-4bb3-bf10-bd8e7c550327", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95799b71-e37f-4b5a-9b5a-62ecaeb19279", "sighting_of_ref": "indicator--17f32a2d-b603-4256-9012-f3f899d73875", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0b81e7-e2d7-4855-b5f7-bec82dc30fef", "sighting_of_ref": "indicator--de09cc34-8f4f-444d-a0e8-bedf85223b8f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e3eda3-32b5-49cb-af07-1fb08bba3703", "sighting_of_ref": "indicator--f37262d8-26c2-4d4d-90cc-3a031229698b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86391b2-175d-4949-a241-46c77e3b7324", "sighting_of_ref": "indicator--5ff068cd-0f52-4b4e-90b0-6c2f9b113db8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c897e41e-5aa5-4391-bd79-92ac0ce3a82e", "sighting_of_ref": "indicator--5ff068cd-0f52-4b4e-90b0-6c2f9b113db8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c895fc8-2800-4412-94c6-30eb7c9e7653", "sighting_of_ref": "indicator--30676323-af3e-4996-9a84-873fa4f0f544", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab21f5c-74f3-491f-a2b4-bef725318fe3", "sighting_of_ref": "indicator--30676323-af3e-4996-9a84-873fa4f0f544", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce13951e-8cfd-44a6-a991-fb8673f53e2f", "sighting_of_ref": "indicator--c970d6b3-dc5b-4b9a-bbd5-70268cd6539f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a3a74a-c873-4ea1-9b2f-7e4a58d60520", "sighting_of_ref": "indicator--c970d6b3-dc5b-4b9a-bbd5-70268cd6539f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d87e090-4f8c-41a2-afcb-538168e409f4", "sighting_of_ref": "indicator--c970d6b3-dc5b-4b9a-bbd5-70268cd6539f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f479ed0-4e8d-4aec-8da7-bbfcca08dd2f", "sighting_of_ref": "indicator--72fc7914-afb2-4593-84bb-f0f607b19abf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03a1aac-27ed-4d9a-a26d-e17ba0a73271", "sighting_of_ref": "indicator--72fc7914-afb2-4593-84bb-f0f607b19abf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d2500f-ba29-4225-829a-43d9a7160443", "sighting_of_ref": "indicator--0094b34e-4b1c-4b3d-b3e2-337145f42f5c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6dd6f8-c45c-429d-a153-5d2b6332ea34", "sighting_of_ref": "indicator--0094b34e-4b1c-4b3d-b3e2-337145f42f5c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8d8801-a26b-4460-828a-2ff7dd88f7b6", "sighting_of_ref": "indicator--0094b34e-4b1c-4b3d-b3e2-337145f42f5c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e7c58e-8614-442d-8239-bf152810e5da", "sighting_of_ref": "indicator--c54d4b58-e24e-43fd-9d53-7cd1fa31feb6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0df3ea-3cdd-4c46-828a-8b4d87c6f9e2", "sighting_of_ref": "indicator--3ba236a5-0352-48e9-9117-c910db485884", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44e4e0a-6bf6-4586-9e30-fc004406e5cd", "sighting_of_ref": "indicator--2c37e1d5-66e7-488f-9802-6f04aea42ede", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637a6f97-8797-4cb8-afa7-c3c757fb714d", "sighting_of_ref": "indicator--2c37e1d5-66e7-488f-9802-6f04aea42ede", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6b1b2b-8251-42d6-918e-8ebaa71c36da", "sighting_of_ref": "indicator--82167688-f9f2-4ae5-ab1d-4d99d0162e54", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91cba22-8195-4c8c-b769-3cf5134acdb6", "sighting_of_ref": "indicator--e72951a5-c0bf-4d07-a9f2-331be99d6db5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecff367b-c9f8-4f7b-b4f4-fdded1b161ea", "sighting_of_ref": "indicator--48a2792c-3efe-45ae-873b-028753d21ce9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1968820-0a66-402e-9f25-71f9d7e235a0", "sighting_of_ref": "indicator--879a1a8b-3329-478e-9a3f-8752b15355c6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23fe7e41-6a41-4250-ba50-07abd4ce741a", "sighting_of_ref": "indicator--e51bed1c-feed-4378-8d5e-24f0cd0afabf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82907a92-b40f-4cef-b13a-ef531580ecf7", "sighting_of_ref": "indicator--e51bed1c-feed-4378-8d5e-24f0cd0afabf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a5ac59-fcbd-4edc-9e1a-60e904490397", "sighting_of_ref": "indicator--83039b6d-9ce2-42b3-b40c-1ca8e9a1d4bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf91764-9b8d-44d5-b0bd-fa7c71e24447", "sighting_of_ref": "indicator--fe2d6f26-fab9-4372-b2ad-89b8f1624abf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29842a01-8e55-48b8-9ee1-fb2d4e8160ed", "sighting_of_ref": "indicator--fe2d6f26-fab9-4372-b2ad-89b8f1624abf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126f4d5e-0530-430c-8028-17b4c87a49a4", "sighting_of_ref": "indicator--fe2d6f26-fab9-4372-b2ad-89b8f1624abf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee6471a-c607-4522-8a8d-221381b8910d", "sighting_of_ref": "indicator--7e90ad06-0a5e-4e34-8918-3a76d73a1f2a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8ac2f4-4660-4406-ba29-85653073011f", "sighting_of_ref": "indicator--be968277-a1cb-4f94-b463-bfd6046ab432", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39919611-3b00-4fee-9ebd-6beedf4e4fa2", "sighting_of_ref": "indicator--be968277-a1cb-4f94-b463-bfd6046ab432", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac3333b-998a-4e34-928e-440b0521319e", "sighting_of_ref": "indicator--be968277-a1cb-4f94-b463-bfd6046ab432", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c7ca8b-09aa-4c92-86f1-613989268003", "sighting_of_ref": "indicator--7c115321-378e-4e5f-8976-c02539178b51", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b82662-b280-40de-a475-825b62d6922d", "sighting_of_ref": "indicator--fb6a7198-0316-4796-99fa-882acbce9f30", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efcbcdc0-917a-487e-bbf2-83564a07b06a", "sighting_of_ref": "indicator--3c077769-6817-45d6-96fd-866700f18758", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09d7b68-eb5d-4add-9226-e051bbee8975", "sighting_of_ref": "indicator--5f02daaa-fea6-437f-a8e1-c9eed67861d4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c049a5-69d8-4ffd-8dfb-7af78c8ba596", "sighting_of_ref": "indicator--d76a3df9-9b12-4242-80ff-5547caa46dd9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b392b4e-858f-48a4-94e4-2d2b3a6c3a0d", "sighting_of_ref": "indicator--cc030695-23d1-4a04-8388-99edc6c3e69f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8037f8e-b386-46f5-877d-c9fa6bc4e02e", "sighting_of_ref": "indicator--de914405-faef-4c97-a602-318fce43cbde", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cf8bb3-168f-4e7a-8c85-6d62fc2a1407", "sighting_of_ref": "indicator--29035e45-fae7-46b4-a65e-a1303d510ff8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae468a6-0bf1-4eba-9f30-734311dac802", "sighting_of_ref": "indicator--d0f20b05-6d53-431e-9f08-d409affc0848", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c36fe8-f9e7-4672-82dd-aacc2b121617", "sighting_of_ref": "indicator--fd9d8220-9fc3-43b2-a2ca-cd4480c85e8e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb20577b-2af3-4ec7-b39f-72528aae0e4e", "sighting_of_ref": "indicator--f4ff4329-0153-4d4b-805e-e36253a09e23", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b21267-6063-47d1-9035-42b1046b0a12", "sighting_of_ref": "indicator--3ea0596a-6736-46fb-83e8-fef63c5f3f25", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cff0932-63a5-4b83-a40c-719c8366339e", "sighting_of_ref": "indicator--c4c45e22-0f24-40e8-860d-81b0d7d740a0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28843b6e-8c64-4134-847b-81bcb4a4d769", "sighting_of_ref": "indicator--6c631caa-2a34-460e-aee5-1c2c63ef5f1a", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d2ca2e-861b-415a-ae05-d8a6ec8af4b6", "sighting_of_ref": "indicator--d8b382ff-68f4-48f3-b54d-8a620b6ee1d7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a1d1bc-6812-438d-84ea-86d827ebe9ad", "sighting_of_ref": "indicator--d8b382ff-68f4-48f3-b54d-8a620b6ee1d7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d9734d-63c1-4558-a5d0-139bb8dcc3b0", "sighting_of_ref": "indicator--588cb43f-8608-4477-af2d-7eddb6567a15", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bb25b0-1b4a-49d7-b635-5908fe4ae8c0", "sighting_of_ref": "indicator--4eebb200-b747-43b2-b80a-4acb60b2bee9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992a812f-b44c-4d50-9e80-2d74cda52cc1", "sighting_of_ref": "indicator--4eebb200-b747-43b2-b80a-4acb60b2bee9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45076146-0142-4e14-a9de-36f1afdd12d5", "sighting_of_ref": "indicator--4eebb200-b747-43b2-b80a-4acb60b2bee9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3e747b-0cfc-4f22-aa2c-d452b89db439", "sighting_of_ref": "indicator--a93896c3-6d6f-41f9-86fd-45d0e17cd048", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1457e170-37dc-4905-ad79-938601142779", "sighting_of_ref": "indicator--a93896c3-6d6f-41f9-86fd-45d0e17cd048", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69618f26-bae8-438e-a0ff-4c9efd5c5314", "sighting_of_ref": "indicator--275b5f73-0685-4b71-96ea-4b42d29e8810", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4f802e-bbd7-4178-9a8f-5c40175c001c", "sighting_of_ref": "indicator--275b5f73-0685-4b71-96ea-4b42d29e8810", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16cfbb3c-72ca-465d-adda-c6e3b2076d5d", "sighting_of_ref": "indicator--01574972-f03d-42d7-b195-cff748e00290", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c883e570-1f3d-4fc5-8af7-7691b94f4cbe", "sighting_of_ref": "indicator--01574972-f03d-42d7-b195-cff748e00290", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feabc33f-3f85-4c28-a976-25f0e850e56f", "sighting_of_ref": "indicator--b3d3605d-b83f-4e27-bb59-6c112067d1c0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331898bf-0b89-46e6-b2cc-a5de73bb32db", "sighting_of_ref": "indicator--b3d3605d-b83f-4e27-bb59-6c112067d1c0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59893791-c7db-4465-81de-57bbd4fb3f5c", "sighting_of_ref": "indicator--8f08a917-551a-444d-b0e6-6000cde0a13f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cdff8a1-4175-4428-ba9c-b3f7fd691c59", "sighting_of_ref": "indicator--8f08a917-551a-444d-b0e6-6000cde0a13f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4c3e98-95f3-4bd4-8b58-32775440ab74", "sighting_of_ref": "indicator--14fe7417-7713-4864-ba6b-e2d50fec531e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e416745-d5df-4cb6-bf23-cdbb723bc553", "sighting_of_ref": "indicator--fd6baf4c-bd66-4a98-b313-ea4ef86a7e14", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56f443c-961f-4134-9405-bbdc490b978e", "sighting_of_ref": "indicator--c6847b93-84ae-4e89-b764-75f8ee8f17e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4be17d5-fc3d-46a8-ab8c-d15ef90e6871", "sighting_of_ref": "indicator--171da56c-875a-4bb8-a42d-73561ce07bd3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150dbad7-784c-41ca-87c7-942e1691661c", "sighting_of_ref": "indicator--7668f295-3369-4eb8-a594-e4d1ca802581", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3906b149-70e3-420a-b7a9-e8644d3d74eb", "sighting_of_ref": "indicator--7668f295-3369-4eb8-a594-e4d1ca802581", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c2f267-c4b5-4b2b-bf37-73d535a42ac7", "sighting_of_ref": "indicator--7668f295-3369-4eb8-a594-e4d1ca802581", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4a1367-99e3-4228-ba03-cd3d9cb5cad0", "sighting_of_ref": "indicator--4a78bddd-51e3-4153-9c62-49f9073514ab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc06b01-b6a2-4859-93cd-72bc3a150b72", "sighting_of_ref": "indicator--8e5af488-b049-44ad-a090-f2fc2edab195", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee36f60-dcb5-4be9-b3c4-0b26b3a31be9", "sighting_of_ref": "indicator--e272ef02-37bf-4684-bbfb-9c78800fcec0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6bf8e98-6fe6-49b5-b8ef-3cca9011fa0f", "sighting_of_ref": "indicator--ca0f9532-292c-440f-8b12-46a76e8e1fcd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3be188-de80-419d-b87f-47f10a75cf36", "sighting_of_ref": "indicator--505c3496-f159-4ee8-a4c4-6880a0f18392", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517993a9-c330-486b-9e56-0e9c6359a853", "sighting_of_ref": "indicator--cb3bb448-8c72-45fa-90db-3e0bf70c5327", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61274ba7-e933-4105-9dc8-8f8ddfb701ed", "sighting_of_ref": "indicator--cb3bb448-8c72-45fa-90db-3e0bf70c5327", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57983a71-49b1-4a85-a20b-835511706ea5", "sighting_of_ref": "indicator--daeeac09-ba0b-4dbb-b9c1-1ff233a527d5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d78f760-f34e-4ffe-9325-e69f21f3eb5b", "sighting_of_ref": "indicator--c0a921e9-3429-4ee4-893c-102bbe1132c2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406e5c62-9454-432b-a3f8-d8bb4c67c3ec", "sighting_of_ref": "indicator--fc8b626c-f30c-4827-92da-ff869943e3fb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bdaa0a-5e7e-43a7-9ee3-c69e25fca9d0", "sighting_of_ref": "indicator--fc8b626c-f30c-4827-92da-ff869943e3fb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879adcbc-3d41-43ac-adc1-fd9cf1a5a2e5", "sighting_of_ref": "indicator--fc8b626c-f30c-4827-92da-ff869943e3fb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4cd523-fb4c-4405-aa21-59fb0a3b1bb8", "sighting_of_ref": "indicator--7f2295f7-2def-45e4-a942-9180b1b69c3e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9329cef6-0159-4905-b597-f39f06407cf4", "sighting_of_ref": "indicator--7f2295f7-2def-45e4-a942-9180b1b69c3e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db29244-6677-4c31-a921-9449ef94c0b1", "sighting_of_ref": "indicator--7f2295f7-2def-45e4-a942-9180b1b69c3e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d31c23-b0e7-4e09-985d-9f49fb694e5d", "sighting_of_ref": "indicator--329f7283-10eb-4697-a288-b81b9e126a6a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33088ad-e081-419c-be9e-62f9671813fa", "sighting_of_ref": "indicator--579464c7-b5f2-4d5b-b616-48e2ed17f9a4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9eda993-8365-42e7-8e1f-95755beb25c6", "sighting_of_ref": "indicator--702fa37c-e221-4599-bcab-573ce52c8e34", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf2a13b-71a1-4af5-bc5c-936b366d56c5", "sighting_of_ref": "indicator--06aaab37-e5bb-401d-bbc4-cb1c4ebde523", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30d0ecd-64bb-49a2-9d7e-55ce42ac9cf2", "sighting_of_ref": "indicator--06aaab37-e5bb-401d-bbc4-cb1c4ebde523", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07181d7-8d67-49e2-85e9-f391a51e7cfe", "sighting_of_ref": "indicator--1131d132-2feb-4fc9-9511-5c8a39e9bab0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6ea068-1c86-4ce6-8d79-e920f90c5b61", "sighting_of_ref": "indicator--d7d6aa69-393e-4a35-a70c-642f6e41d564", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38545bbc-0ba5-4ea3-84ec-f69e36e4b2e0", "sighting_of_ref": "indicator--fc9922d1-9e76-4b87-aaca-30a3e1ce3466", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7db82d0-f037-4281-a31f-19d5c56eaff9", "sighting_of_ref": "indicator--933340c2-f389-4166-b886-77852efe4215", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71dde531-b3e5-4ec6-8af0-31042b3708a0", "sighting_of_ref": "indicator--933340c2-f389-4166-b886-77852efe4215", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eae48ac-6e0a-4fe9-91ed-35a89395457f", "sighting_of_ref": "indicator--933340c2-f389-4166-b886-77852efe4215", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b12005-323b-4d5b-9e9b-c50ff6b35a14", "sighting_of_ref": "indicator--b767ea20-b4fa-4f0c-b85c-995a66f2ef71", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe648b44-8e0c-4af8-83b9-05637ec7e5f8", "sighting_of_ref": "indicator--0bf5a122-026d-4a88-af9e-9d40fbf37555", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8cc0dd-6f70-4c04-907f-4162ac5ed9a3", "sighting_of_ref": "indicator--0bf5a122-026d-4a88-af9e-9d40fbf37555", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca07665d-b69a-45bf-9f7b-b86cd684b45d", "sighting_of_ref": "indicator--9f857cc4-76b1-4081-a80a-6994cd9376f9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c0a7a2-7aa5-4145-91a6-5b2fc215701d", "sighting_of_ref": "indicator--7a94853b-15c9-4d0f-b71f-74c35fe08d3f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d221cf79-a13f-4c31-b13c-110329994d4b", "sighting_of_ref": "indicator--93f7876e-01fa-4ebb-98f4-70d0535b8db8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7cc436-2965-43c3-86ae-797814c17df6", "sighting_of_ref": "indicator--343f3744-5ab9-4839-894f-a571e0ee5cda", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c853ed-a84f-4643-9b3b-e82088ff1886", "sighting_of_ref": "indicator--343f3744-5ab9-4839-894f-a571e0ee5cda", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f5699a-7446-41a2-ae10-16a991cbd408", "sighting_of_ref": "indicator--7d49696a-8a53-4748-bf8b-fb86754a1a4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b62a8f2-85fd-4eb4-8334-5ada378ad43a", "sighting_of_ref": "indicator--33768eae-9938-4f91-83d6-d2e79b518247", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bdb335-0da1-4113-9466-91edc6101f04", "sighting_of_ref": "indicator--6b6fb883-e95e-4612-8840-2a1b9f826080", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17538091-0395-441b-9d7f-c973ee6375bc", "sighting_of_ref": "indicator--57d1263d-a81d-4008-98e0-908e0afb2930", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849ac60e-d07a-45b8-8481-194406f17825", "sighting_of_ref": "indicator--e9c4c442-d0fb-435f-a7da-be361548cfb8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8933961f-261a-4494-88e8-b9ba0ec39f5c", "sighting_of_ref": "indicator--e9c4c442-d0fb-435f-a7da-be361548cfb8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31479ba-fe05-4b98-84f7-7f00629391e7", "sighting_of_ref": "indicator--148a6d88-94d4-411d-b2a9-9e06bbdbf570", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8134ab01-7275-4f73-93a5-34a9fc69b117", "sighting_of_ref": "indicator--03e0446e-5341-492f-8711-c16586554814", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bcecbb-4c30-429b-8926-93c883002cc3", "sighting_of_ref": "indicator--b3c0be19-8fc6-41ae-a35e-d70d4316ce28", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9c7bd4-3bf3-4829-9e96-50ef878ea835", "sighting_of_ref": "indicator--821888b8-e588-42b1-8c80-17011ce82aef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76840dea-cea2-4174-b6ce-a4b7b6980378", "sighting_of_ref": "indicator--daefa025-791a-4bfe-bfe0-74ec0f6a2625", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8cb291-15a7-4b50-98fb-a8a8a9500c13", "sighting_of_ref": "indicator--42cc4aea-3fcd-4e7e-a85c-7d55cd725c7e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267cbbac-1bf0-42ad-9cdc-c3a95ab543b7", "sighting_of_ref": "indicator--42cc4aea-3fcd-4e7e-a85c-7d55cd725c7e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c7c62b-11b3-4ddc-b721-a97efa5ad9f0", "sighting_of_ref": "indicator--3c641c86-0dfc-44a4-886b-1feb26287645", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f32c717-7d7d-4234-be27-4b25f4a87a69", "sighting_of_ref": "indicator--1b4053c4-50d7-48fa-90e9-90188c24f176", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa29890-f372-499f-9b5c-75c7ab9c6b13", "sighting_of_ref": "indicator--1b4053c4-50d7-48fa-90e9-90188c24f176", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56caa92c-05ea-4c14-be04-988617adff33", "sighting_of_ref": "indicator--1b4053c4-50d7-48fa-90e9-90188c24f176", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d9438d-3055-4819-9f21-6e2005dabcb2", "sighting_of_ref": "indicator--8384b198-ec7c-4945-96f2-e5a95cad033f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257ddd1c-4b98-43a2-a47a-af6f0c5417f8", "sighting_of_ref": "indicator--8384b198-ec7c-4945-96f2-e5a95cad033f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc70285a-0281-4f22-abf8-1b533e092d30", "sighting_of_ref": "indicator--8384b198-ec7c-4945-96f2-e5a95cad033f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9acaf7-1fd7-4537-8aa4-3b01a0f23f9a", "sighting_of_ref": "indicator--5b026fb3-9e17-46e7-94d4-90d40f789b04", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99b5098-da2e-4a15-9825-3c77078a926f", "sighting_of_ref": "indicator--5b026fb3-9e17-46e7-94d4-90d40f789b04", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3977ec-3168-4c36-aab2-b24bcafd9127", "sighting_of_ref": "indicator--550a1b0f-428e-485b-828e-12e057a0de20", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea37f95-0696-42ab-870b-a84a54652c7d", "sighting_of_ref": "indicator--ae55f90c-0985-47ca-8d6a-016a9ce5a0a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b69880-ee5d-4ad2-9032-484c1bc14ebd", "sighting_of_ref": "indicator--e6472152-ab61-40f6-8074-12c7631d5cda", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daae9d53-7bc7-47ac-8a7d-f9280a603840", "sighting_of_ref": "indicator--4cc334e4-ab10-41d4-9605-7c32b1d93a01", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96b9212-eb37-4b94-863e-666b37c0ed82", "sighting_of_ref": "indicator--51534715-0236-4132-a419-ccbd54942d20", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2fa63c9-b61f-43df-815d-b3213003e361", "sighting_of_ref": "indicator--51534715-0236-4132-a419-ccbd54942d20", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f25fc63-5695-4820-8029-1c5b4e873095", "sighting_of_ref": "indicator--e483a833-91cb-4cbb-ac35-f13f016f2dba", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81982dd-935c-478e-8e0d-35f59b2ffff2", "sighting_of_ref": "indicator--03db8aad-38ae-4fb0-8f37-56557ec8e47a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220d8378-b3ea-4213-b0ff-5c24a0156495", "sighting_of_ref": "indicator--bbf9eca0-55a1-4823-9c9b-351c88fe91ba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3466acd6-d842-4257-b783-914db215296d", "sighting_of_ref": "indicator--0f076c3f-d086-4d7e-85b1-a8168699fda8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f79026-c9d6-429d-a848-d7c177ec6a4e", "sighting_of_ref": "indicator--0f076c3f-d086-4d7e-85b1-a8168699fda8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248fe447-46fd-498b-b23d-99306ec73f2e", "sighting_of_ref": "indicator--4c9f62a1-c07a-4e92-a37c-a3f27c066451", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f86cb05-f9b4-45f4-b334-0981bfe23726", "sighting_of_ref": "indicator--4c9f62a1-c07a-4e92-a37c-a3f27c066451", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5268ac6c-b010-4a3c-9324-96b14f10363c", "sighting_of_ref": "indicator--4c9f62a1-c07a-4e92-a37c-a3f27c066451", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0bbf52-67ab-4ed0-9058-57fd371c733d", "sighting_of_ref": "indicator--d551fda6-27ec-48c4-8d0a-e09857fbd144", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5855f398-e275-48e2-a4c5-178e3c8b31b2", "sighting_of_ref": "indicator--499002af-f2d7-4c54-a025-297074b0a901", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191a34ff-630e-4e33-8680-a0b21f25f79c", "sighting_of_ref": "indicator--074e5b0c-3ed1-4c49-959a-497bd09d70e5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb840b5b-1130-4425-9ec5-ce1735f814b9", "sighting_of_ref": "indicator--17cac058-5007-4fcc-99bc-48c40c464cb8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef2f282-b815-4b51-bea6-85f9f3d42635", "sighting_of_ref": "indicator--774719e1-73c6-4712-b73f-db5882a90384", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ef4236-f9ce-4169-85f9-f098a40fe63b", "sighting_of_ref": "indicator--b857ffc9-394c-4a68-b991-348ef265b09f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79f482d-32e1-4fc6-9721-63a0b4f12e07", "sighting_of_ref": "indicator--765c2342-587d-4b48-b614-23e40f805b14", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e77e3d-46b2-46cc-a443-4418dd086ea5", "sighting_of_ref": "indicator--765c2342-587d-4b48-b614-23e40f805b14", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae4a5af-5476-40bc-97da-2012384375dc", "sighting_of_ref": "indicator--765c2342-587d-4b48-b614-23e40f805b14", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d740b060-27de-47be-a991-ac3f44e0a05c", "sighting_of_ref": "indicator--2d969820-2da7-4b15-8ca1-12218475b5c4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09f832c-a796-448e-9ebc-e4058867dbb1", "sighting_of_ref": "indicator--2d969820-2da7-4b15-8ca1-12218475b5c4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1286205e-1240-4c45-abe9-1d2bc59aab3c", "sighting_of_ref": "indicator--2d969820-2da7-4b15-8ca1-12218475b5c4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d9e72a-2637-4ccb-b811-574c500b73bb", "sighting_of_ref": "indicator--252609d2-4e15-4be3-a5b7-b7bba19739be", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6835d69-1cc1-4be3-92e9-d07ad5a5c89f", "sighting_of_ref": "indicator--113c4f1d-c90e-4fe9-8a4b-f0367ffcb657", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a0999e-2ca6-48f0-8560-269331b2f038", "sighting_of_ref": "indicator--a391c34b-b632-4e10-9828-69f0996cb37d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f24fcfb-8978-4a96-b846-6ab4e9fea029", "sighting_of_ref": "indicator--2e6b3974-8777-4746-8fd3-585d39b9f791", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89d5844-79c3-4b4e-8c11-860375f5ad9a", "sighting_of_ref": "indicator--27be7aca-18fc-43d4-9eb3-1df29cbf8db9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77486d7-859d-480a-b21e-4e58501aa625", "sighting_of_ref": "indicator--27be7aca-18fc-43d4-9eb3-1df29cbf8db9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a67dbb-af4f-4900-a345-37747aceffd0", "sighting_of_ref": "indicator--7aae80e3-6993-4745-b1d1-e755a38f48b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e794feb6-9704-41c7-bc5b-4da8e6189707", "sighting_of_ref": "indicator--f1089bdd-b187-45f2-87ef-cd1032ecd836", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e267b84-7899-47a2-ad94-89a0600d996f", "sighting_of_ref": "indicator--f1089bdd-b187-45f2-87ef-cd1032ecd836", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47da2952-6b2a-4da6-a2a0-94a7581f7d6f", "sighting_of_ref": "indicator--0f0eaad2-399e-489d-85ce-6a1731f58f9e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7424be-ce80-4796-8e4f-22579f3b5311", "sighting_of_ref": "indicator--567c1af7-82b4-4751-a11a-618fff0126b8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73648886-0bae-4545-9850-ef8981a92424", "sighting_of_ref": "indicator--567c1af7-82b4-4751-a11a-618fff0126b8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4407735d-18be-433f-948c-4ef5f73d451d", "sighting_of_ref": "indicator--0563e0db-61ef-418d-9586-e2340f90ed4a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d36785a-c6ce-4446-92b5-f505be3e7609", "sighting_of_ref": "indicator--0563e0db-61ef-418d-9586-e2340f90ed4a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0545b211-7a72-4bbf-8799-bdf68b09a12c", "sighting_of_ref": "indicator--0563e0db-61ef-418d-9586-e2340f90ed4a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bef0010-c58f-4afe-b014-d573187358b4", "sighting_of_ref": "indicator--7ed8c05e-5fe8-4107-8577-b49341dd1329", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc9e7ac-f263-44d9-8aa7-f35a755e527b", "sighting_of_ref": "indicator--7ed8c05e-5fe8-4107-8577-b49341dd1329", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af78e9d-5858-4f6a-a2eb-f5dcf4347495", "sighting_of_ref": "indicator--0ae79011-806e-4b75-86c4-2fd769fc649b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82588038-124c-4a28-aa3d-c4fe27473d34", "sighting_of_ref": "indicator--00c52e8f-bc18-4e2a-9f1e-fd77460a2f38", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2752c40c-b7e2-446b-8158-a2adc2d2cc03", "sighting_of_ref": "indicator--1defb4d8-01c5-4bd5-af37-4d503f3eda38", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcea3e73-3541-4a90-8234-7bf69317c0b2", "sighting_of_ref": "indicator--1defb4d8-01c5-4bd5-af37-4d503f3eda38", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c210da0a-9834-45d9-b88a-3ea212ecf1c8", "sighting_of_ref": "indicator--ebf0c9de-265c-4c48-969a-aadaf8281dca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf423836-6e04-42d6-8b11-aab1fdb5a4b5", "sighting_of_ref": "indicator--5c2e113f-16e1-4650-932e-7428a506fde9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56a408d-171d-4ffd-a412-89e574bd1020", "sighting_of_ref": "indicator--4a03320e-2053-4ab2-9a9e-7cfa82e80253", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe3b11a-584a-4b8b-9afb-4714759861b7", "sighting_of_ref": "indicator--4a03320e-2053-4ab2-9a9e-7cfa82e80253", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3b5298-338f-4b57-868d-53e9de6e258d", "sighting_of_ref": "indicator--4a03320e-2053-4ab2-9a9e-7cfa82e80253", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f670614c-a0e9-4a2c-bcdd-c90171e9e9c1", "sighting_of_ref": "indicator--1f242125-8353-4fbb-8dbb-1700164195e0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07e5d88-9e94-4865-9e23-25ac5e85031f", "sighting_of_ref": "indicator--ab7acb25-165b-4763-870e-5d86f16d856b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1313eb4-d536-43f2-b48f-db0ef0b97ea8", "sighting_of_ref": "indicator--0d23172c-4c91-4696-b7de-0b4fe49663e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af84271e-ad56-437f-b29e-0453bd7d3301", "sighting_of_ref": "indicator--a9995468-2311-4132-9efc-d40710dcf5be", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525f8ca8-6403-4e93-a0fc-5eabf460d124", "sighting_of_ref": "indicator--dd9dd38f-74dd-4bc1-8df0-1c2350d12a2c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c3f96e-9558-4dc0-ac56-b9f9d8547366", "sighting_of_ref": "indicator--dd9dd38f-74dd-4bc1-8df0-1c2350d12a2c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6215899-b709-4a95-b254-19fd6c6e9d7a", "sighting_of_ref": "indicator--dd9dd38f-74dd-4bc1-8df0-1c2350d12a2c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8d87c4-97c8-4fa3-ac12-548f7d8c02fd", "sighting_of_ref": "indicator--21fbc7ba-0634-476c-89d6-1f2163b9bc82", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bd1283-563d-4299-b42a-cac0105ddcf0", "sighting_of_ref": "indicator--7be25cd0-0b8d-4a83-b4b6-9a436b1c32c5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863cad3e-1b06-4cb1-b7f1-32dbc0e10732", "sighting_of_ref": "indicator--ad55071e-99c5-4ef5-a9ff-ca76dea7ba5e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997930ee-56cb-4e96-a046-6cbe122b5780", "sighting_of_ref": "indicator--ad55071e-99c5-4ef5-a9ff-ca76dea7ba5e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0446d9ae-7db2-415a-bcfc-eeeead82eea3", "sighting_of_ref": "indicator--7bdb94d9-ac77-4381-bea5-f2f47f2dedf1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8380b41-7dba-44ea-be8f-99a8adb369b2", "sighting_of_ref": "indicator--ac84593c-e77c-47ab-8188-9e80fbbc4a20", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b39703-73ec-4644-a4ce-49b3e544673f", "sighting_of_ref": "indicator--ac84593c-e77c-47ab-8188-9e80fbbc4a20", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd06140-507d-42c6-9ceb-465568cafb3d", "sighting_of_ref": "indicator--ac84593c-e77c-47ab-8188-9e80fbbc4a20", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb6dbc6-a519-4afb-87bd-34ae05f535dc", "sighting_of_ref": "indicator--2e1f5e02-c2bd-42ca-a797-c7e5034b936e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afde008-282d-49fa-a5f1-4ab6ea182dd7", "sighting_of_ref": "indicator--2e1f5e02-c2bd-42ca-a797-c7e5034b936e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc39a48-0ac9-42e4-982c-b067fc17ec1e", "sighting_of_ref": "indicator--98b47a5e-6a74-4414-adc7-406e59100b33", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29dbcb2b-0e67-4527-91ae-69e697e3a669", "sighting_of_ref": "indicator--98b47a5e-6a74-4414-adc7-406e59100b33", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b31a54-87e2-409d-b7b9-8e5108e71777", "sighting_of_ref": "indicator--3ac2c7eb-c10b-4019-97ff-6b1bab7a3e0b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57a1230-4f66-4266-86ef-a90fcde2263a", "sighting_of_ref": "indicator--3ac2c7eb-c10b-4019-97ff-6b1bab7a3e0b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67f412c-eb67-412a-895c-49125a1329df", "sighting_of_ref": "indicator--3ac2c7eb-c10b-4019-97ff-6b1bab7a3e0b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02720445-f2a8-4ac1-aacf-4d4ac0b3c86f", "sighting_of_ref": "indicator--62291007-654f-4278-8523-71e9e2ea1163", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d633cd-c8a9-499e-93ce-e016ff17b349", "sighting_of_ref": "indicator--62291007-654f-4278-8523-71e9e2ea1163", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16930c5b-2a9b-4059-ac61-f6af2a8e9d38", "sighting_of_ref": "indicator--62291007-654f-4278-8523-71e9e2ea1163", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb804248-9c8b-46d7-9a7b-8f18c91985d0", "sighting_of_ref": "indicator--bed9cd75-91e4-40ab-bad7-ed8d297c0bf6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508a439f-0a10-45ea-ae4a-6432c56cec79", "sighting_of_ref": "indicator--ab597a03-d482-4894-8220-cc73bcde966e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780bc59f-6764-4baf-8fdd-18278623a0a5", "sighting_of_ref": "indicator--ab597a03-d482-4894-8220-cc73bcde966e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810b1cfb-2289-4c75-9e95-6a6c031dd5ab", "sighting_of_ref": "indicator--ab597a03-d482-4894-8220-cc73bcde966e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7116abed-a62c-497b-bec2-9e9559fb0ef7", "sighting_of_ref": "indicator--56a6858d-486f-4cf5-9650-a459b9e92704", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb66c79b-88fa-4f7f-b041-386c565fb113", "sighting_of_ref": "indicator--56a6858d-486f-4cf5-9650-a459b9e92704", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00441be2-5c94-44c4-9142-c5fd1d1708a2", "sighting_of_ref": "indicator--56a6858d-486f-4cf5-9650-a459b9e92704", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24962f1f-a036-4d3b-a5b8-bfd6551ff3fb", "sighting_of_ref": "indicator--2c3a3c71-261e-4509-8cd5-6b909b92bc99", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f677f6dc-4057-4572-aa58-0e68d641acb2", "sighting_of_ref": "indicator--2c3a3c71-261e-4509-8cd5-6b909b92bc99", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b386a4-20d3-48da-a7fe-da985a1ab712", "sighting_of_ref": "indicator--2c3a3c71-261e-4509-8cd5-6b909b92bc99", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9db9755-f865-41f5-a9c1-28c3d0a086fb", "sighting_of_ref": "indicator--7848c957-a119-4185-acb5-331282a7b14a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d232bf-866d-466a-8d6e-02f263c5b0f3", "sighting_of_ref": "indicator--7848c957-a119-4185-acb5-331282a7b14a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93eb6b8-26bc-4a3a-a221-4681972132fb", "sighting_of_ref": "indicator--505ff148-f11e-4591-8465-dac00c910ad4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6f4ed4-3446-44ec-b076-a6340c2a377f", "sighting_of_ref": "indicator--53917a88-aa82-4fde-b5d0-9826b8b40c16", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4ffab1-d731-4e53-b73d-9cc9f51b2c78", "sighting_of_ref": "indicator--0dcfdf4b-d638-4803-8f06-b484fafb0a61", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adac108-3a9a-4866-adba-92a2afb4a271", "sighting_of_ref": "indicator--0dcfdf4b-d638-4803-8f06-b484fafb0a61", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b1367f-b32c-4146-a6f8-88880a899ae7", "sighting_of_ref": "indicator--8eba5a70-3b5f-41d8-bc87-53cb98f31066", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a5742d-ff31-4706-89e3-ad2fac84125a", "sighting_of_ref": "indicator--064a0808-387f-4e9a-bcdf-ed436ddf2180", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499f1658-b577-4c29-b175-091a6e0a7840", "sighting_of_ref": "indicator--064a0808-387f-4e9a-bcdf-ed436ddf2180", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0192ed11-38b8-4d96-9f4e-e6792b10a3ac", "sighting_of_ref": "indicator--2fa46640-4d89-4f2d-82bd-5b3f7f3742c4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2358d87-4beb-489a-ae9f-9e3690586bb3", "sighting_of_ref": "indicator--f2bb2522-afe4-4240-9bc6-e321152fe36d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50505467-db15-46c6-99cb-ad8d21d6a8f0", "sighting_of_ref": "indicator--92826c32-db19-44cf-915e-ed08487d8090", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8358aaed-5722-473d-9288-0f394b43c72a", "sighting_of_ref": "indicator--c4b0df49-e7b0-47ef-91ad-8bf30f6832bc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37815ea9-aca5-4ebd-9dfc-5e2781e1b001", "sighting_of_ref": "indicator--a2007f09-f3a8-480e-917a-72182601f3b4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e32ad2e-12ca-433b-8323-d9a50a4076a9", "sighting_of_ref": "indicator--a2007f09-f3a8-480e-917a-72182601f3b4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609b005e-3dde-4a24-891d-d876d556d4b3", "sighting_of_ref": "indicator--a2007f09-f3a8-480e-917a-72182601f3b4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc496bd7-dab2-47e5-937b-1027ebd5b4f7", "sighting_of_ref": "indicator--1de5e450-454c-4235-8a9b-3c74b953b2e0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a844491-ce53-4a24-a2e7-bf1bec08dd7b", "sighting_of_ref": "indicator--c9093caf-d33d-46f7-a3d0-5c182aaad6c1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51acc507-4ab2-48d5-bb15-dfcdac1efb82", "sighting_of_ref": "indicator--a2f68527-1fb4-4c07-9eec-da337382b953", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a5d58b-77c8-45aa-ad0e-d9d3ea07c66d", "sighting_of_ref": "indicator--844d7581-2832-4847-83e5-f91455047c28", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397eec62-b604-4f2b-93d7-c78ffbc76fb4", "sighting_of_ref": "indicator--2a5a7a7e-4ab8-4bb2-8102-ed7235777637", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30898402-cb6e-498b-b5af-3c38e0a1f654", "sighting_of_ref": "indicator--2a5a7a7e-4ab8-4bb2-8102-ed7235777637", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ca12dc-f18c-43f4-9e01-261b7e2604dc", "sighting_of_ref": "indicator--9c5ba644-025c-404d-be16-81c9aab7789f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3fcfc89-5b05-46fb-9945-9a89d0b9d152", "sighting_of_ref": "indicator--71fc9ceb-6190-4ca2-bb1d-99d6b17c8c00", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88da440e-6ab9-498c-b61f-470974bc7972", "sighting_of_ref": "indicator--a05bc00e-2879-40f9-8792-ff7102f56125", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78124aff-a3b0-427a-b76f-cbf615571b2b", "sighting_of_ref": "indicator--f9a2f796-1310-410a-aa22-0ff4cc14b5ba", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06131e1-9540-4527-9701-728e707fe345", "sighting_of_ref": "indicator--5241ce3a-4d2f-4f18-a327-748ed3e832cf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206e1be5-a555-43ba-8bd5-0d0f2dada9b7", "sighting_of_ref": "indicator--43f1872e-5a18-446d-a3a8-a411ecac6309", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77dfc29c-b578-4274-b962-5bf5568a980f", "sighting_of_ref": "indicator--18705b54-cc34-4365-912e-0da7727aed2c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768e7b68-0bb3-4000-8172-e36ea75e0a9a", "sighting_of_ref": "indicator--1e918195-3ea8-4c7b-9e02-6cd51908c318", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b6e4f6-1979-464c-a481-be22db73b9ae", "sighting_of_ref": "indicator--1e918195-3ea8-4c7b-9e02-6cd51908c318", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62646c26-fcbd-4ba6-8bdc-5d196ffd376c", "sighting_of_ref": "indicator--d322215d-9eae-4dd7-8799-f0d7770c2506", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e3f8a8-af1f-43da-b779-fe1c66b6c2c8", "sighting_of_ref": "indicator--15a2e5b1-7cf9-44ad-9e53-4dfa236167c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0ac32a-e474-4ecf-ada0-514cfbf8663a", "sighting_of_ref": "indicator--15a2e5b1-7cf9-44ad-9e53-4dfa236167c7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f00b5c6-29ed-4b86-8ce0-8cde1fdc34ce", "sighting_of_ref": "indicator--baf4dcc8-18e7-4774-8d1d-5abaabcd35ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d869a472-a21e-448c-b2e3-c9abeadc24ac", "sighting_of_ref": "indicator--5b914ae4-5e65-48a4-8db3-e516437a0595", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d45ab3-00b2-4057-bfaf-61b4b642ad06", "sighting_of_ref": "indicator--5b914ae4-5e65-48a4-8db3-e516437a0595", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcec3e0b-89af-4229-bacf-c05ecfbe1963", "sighting_of_ref": "indicator--1d3ac632-4633-49d3-bf3b-79eff1dc1f0c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e342a0-78de-408e-bd79-71b304258080", "sighting_of_ref": "indicator--1d3ac632-4633-49d3-bf3b-79eff1dc1f0c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c5d5b7-9fc6-4822-ab8d-c9c7b9e0abbc", "sighting_of_ref": "indicator--1d3ac632-4633-49d3-bf3b-79eff1dc1f0c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d06bc1-ab83-4ac8-b3bf-37f2f625b2af", "sighting_of_ref": "indicator--353f0d36-c408-4185-9547-76b26b486b6d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9a9cdb-2f68-4b82-9fab-367efb45cf20", "sighting_of_ref": "indicator--9d4ec654-1c80-4bf0-a548-166a1228074f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2656202-a910-48cb-8b85-d384d53de647", "sighting_of_ref": "indicator--9d4ec654-1c80-4bf0-a548-166a1228074f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a33b04-0c92-4982-871f-8b73cd120342", "sighting_of_ref": "indicator--116f8b3b-c098-420e-a0ab-1db10c32e5bf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7455845e-ff56-4787-9881-b848d2ef9d97", "sighting_of_ref": "indicator--116f8b3b-c098-420e-a0ab-1db10c32e5bf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9d1c1c-9e1e-4877-9e32-5d9c06a56b7d", "sighting_of_ref": "indicator--b2ac3f75-afb7-4717-bf15-fa1d792bc93b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9671fc48-efb9-4248-8d1a-3c2c13dbb173", "sighting_of_ref": "indicator--d6750dec-6373-45b6-aad6-fccc71ae0932", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d38670b-3011-4330-bf98-b9e546d00d61", "sighting_of_ref": "indicator--d6750dec-6373-45b6-aad6-fccc71ae0932", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217a02dc-a670-436f-8d74-1bf963893fb8", "sighting_of_ref": "indicator--3bc017d7-86da-4d6f-b8df-0f8955a89623", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccaf8d9-7cf3-430c-a088-dcc5430bbfc1", "sighting_of_ref": "indicator--3bc017d7-86da-4d6f-b8df-0f8955a89623", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e6766e-7cff-4e2d-a08c-3be2d0df5951", "sighting_of_ref": "indicator--3bc017d7-86da-4d6f-b8df-0f8955a89623", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7679220f-b1b6-4a09-ba89-5f97f7260472", "sighting_of_ref": "indicator--78ce640b-a756-4546-ba5b-84db4f2a5ee0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c119e474-bb1a-4d3a-9766-e6f088f7c654", "sighting_of_ref": "indicator--2b4f24fe-5d66-426e-b47e-28c4d24f72cb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397c91dc-1847-48e7-91eb-e1b1a22af95b", "sighting_of_ref": "indicator--2b4f24fe-5d66-426e-b47e-28c4d24f72cb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd6cec0-09cd-4a18-8b5c-a4b7f90c8c56", "sighting_of_ref": "indicator--2b4f24fe-5d66-426e-b47e-28c4d24f72cb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f160fc88-c8f3-4c94-81e7-5d6bacb87285", "sighting_of_ref": "indicator--0ac673ac-388e-42a1-9e27-a71cb028e198", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12374f75-3bd8-4dff-96fa-e499d583813a", "sighting_of_ref": "indicator--f44e8cc8-cfdd-45c5-859c-237db07779fb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7372bd9c-8223-42ec-9674-a9b0eff3badd", "sighting_of_ref": "indicator--f44e8cc8-cfdd-45c5-859c-237db07779fb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d875e587-6be2-4006-9363-e369f8dc16a7", "sighting_of_ref": "indicator--f44e8cc8-cfdd-45c5-859c-237db07779fb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be763059-f354-4b8b-91e6-faf3dbaaa298", "sighting_of_ref": "indicator--bb9fa749-c0a4-47cd-8461-d072edfa4840", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37497c3e-48c0-47d3-bfbf-924e152f9989", "sighting_of_ref": "indicator--85842a05-fd20-4422-90ab-a8385641a4ce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2045c6b-2307-4d6e-8ced-20f265415232", "sighting_of_ref": "indicator--d5385b3d-39c4-47c6-b0e4-f4290f69d891", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cd5051-0568-49b7-a153-823fd342f2cf", "sighting_of_ref": "indicator--edc1a9e0-fb1f-416b-81f5-3e4f2714d8aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebce0953-21db-407e-b47f-e74c404d7a3a", "sighting_of_ref": "indicator--841ba471-e915-4f3f-9db4-7b36dbab2234", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e536e5a-02c6-446f-8c79-526ed94cdd0d", "sighting_of_ref": "indicator--841ba471-e915-4f3f-9db4-7b36dbab2234", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6db7ead-972c-4626-b8c1-34047c2c2585", "sighting_of_ref": "indicator--841ba471-e915-4f3f-9db4-7b36dbab2234", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c4fe88-ab31-4e57-8aba-e655c1d542c4", "sighting_of_ref": "indicator--889db58b-2874-4852-b013-85ae8c331b81", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275f851a-2366-408e-84d3-11062da3f217", "sighting_of_ref": "indicator--889db58b-2874-4852-b013-85ae8c331b81", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f96a73-fa7e-4c9b-a7bf-716c8d349a15", "sighting_of_ref": "indicator--1c1995b5-7f71-4a9f-b0ac-c8acdcd0853a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde9872d-8740-4101-a658-cddb18b3ff46", "sighting_of_ref": "indicator--1c1995b5-7f71-4a9f-b0ac-c8acdcd0853a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa311395-0c8b-4bac-9749-f0736b8fd7a9", "sighting_of_ref": "indicator--4efe0eae-3e5a-4fb9-9716-f952968decf0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e47b5f-1b07-48c3-80cc-3f5c258ddb5c", "sighting_of_ref": "indicator--4efe0eae-3e5a-4fb9-9716-f952968decf0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6f8214-2b3e-4c36-854e-6ef2991a65ca", "sighting_of_ref": "indicator--9123ea23-90f4-454d-94eb-9403a4bf253e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d842b0-8971-4f29-bf9d-b7024bc9f59f", "sighting_of_ref": "indicator--a9f57354-914c-4a3d-ae1a-32470f656a27", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a35fd60-dd50-4de4-b488-ce7f68e510ca", "sighting_of_ref": "indicator--0ea9ab53-7c6b-4440-80c2-8c12aba9a283", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5c3644-a96b-4fac-8668-bdd36a94b4b6", "sighting_of_ref": "indicator--0ea9ab53-7c6b-4440-80c2-8c12aba9a283", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad92327d-3672-4fb2-8794-41c3f02560b4", "sighting_of_ref": "indicator--55c21624-09de-4323-baee-e898ad86b98e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd52504-64b0-4654-8c01-07794cd99efb", "sighting_of_ref": "indicator--a3aabfe1-c3b6-46cc-853f-360bf0cabef3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfba6f86-e12b-465e-b4d9-e443414c1464", "sighting_of_ref": "indicator--9002234c-8866-45f2-bca8-161e6db0fd4c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1447415-63ec-49a3-b085-2bf9448cef7e", "sighting_of_ref": "indicator--9cad93ea-07f5-472b-993f-28a6449f1b8b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1986d09d-a85b-4d39-870b-02777766f2ef", "sighting_of_ref": "indicator--6fca93d1-77ae-4b1b-82a2-031897a07353", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fec875a-3dd8-471b-a0a4-1ce78132346a", "sighting_of_ref": "indicator--10e84bc0-241c-423d-9873-f7bd6a199e2d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71f8fb1-5086-428f-80b3-6037f6488de9", "sighting_of_ref": "indicator--7bd2b959-51b5-4a31-a012-50252d4803fc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aab5ae8-3232-4df7-94f2-7d036e7966f7", "sighting_of_ref": "indicator--958fd933-1ec6-4a49-b340-2ce31e00c69e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1144fac5-cf23-4966-af0d-1ec8695219d0", "sighting_of_ref": "indicator--3e757ee9-5b41-4612-8872-57e6e0e51425", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45517774-a479-4d54-845b-2902abe01c6c", "sighting_of_ref": "indicator--3e757ee9-5b41-4612-8872-57e6e0e51425", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11df544-5183-4b83-943d-f54a62df3ccb", "sighting_of_ref": "indicator--3e757ee9-5b41-4612-8872-57e6e0e51425", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ec43bd-cfe1-43ca-a748-4e42f2a20e3c", "sighting_of_ref": "indicator--9f0f08e8-3c28-4683-b6dc-2a9e22b0460a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e5fa86-ab98-445d-bf2d-5bd3d3044635", "sighting_of_ref": "indicator--9f0f08e8-3c28-4683-b6dc-2a9e22b0460a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4531cd-921e-43e5-93bf-b02d56dc314b", "sighting_of_ref": "indicator--9f0f08e8-3c28-4683-b6dc-2a9e22b0460a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f725aff4-1e97-477f-94a4-f5615dfa86b3", "sighting_of_ref": "indicator--dc94c76c-6fa8-45b5-b12d-e581c785cfc2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87287037-4659-4228-b5a9-a1b8f94a491b", "sighting_of_ref": "indicator--4f8fb32e-bea6-4747-ab81-9dc3d0a79c05", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c31a80-c8a5-4b9f-8ccd-54356a2d368c", "sighting_of_ref": "indicator--4f8fb32e-bea6-4747-ab81-9dc3d0a79c05", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a826506-5d57-4109-ba53-971089d3a116", "sighting_of_ref": "indicator--f7d49cf5-7584-4ee8-abe2-07358004bc4d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a26c32-95e2-45c7-991b-092dcde47d6d", "sighting_of_ref": "indicator--4e12beb5-a42b-490b-b9e4-d443d20d3b98", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda9a617-4a5b-4d22-a0b7-e67619f3e8ab", "sighting_of_ref": "indicator--4e12beb5-a42b-490b-b9e4-d443d20d3b98", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cff030-cee8-413d-a1fa-4034e58b72bc", "sighting_of_ref": "indicator--4972144d-a6b7-4e20-b59b-1e53460ac1db", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94111d4b-0bf3-4b13-b3d7-cefaa6f8aba5", "sighting_of_ref": "indicator--4972144d-a6b7-4e20-b59b-1e53460ac1db", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a216a24-9526-43e8-8172-59119117b62a", "sighting_of_ref": "indicator--9245d2b3-b77f-42a0-a4c0-290113c0d048", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b593471-958e-46ef-bc20-c2261896afc4", "sighting_of_ref": "indicator--b90b7878-e1ce-44eb-9f03-8885dc539cee", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670c708d-b109-46d2-9593-f86d15539789", "sighting_of_ref": "indicator--5f1e2ff1-ef17-407d-a585-5dd6c2acdf02", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2946ebcc-9c36-43ef-88dc-4d5162029c1c", "sighting_of_ref": "indicator--a289e1d9-a326-43a6-add7-11b41c4bebab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603607e4-7d70-4555-95f5-d8a2573bab5c", "sighting_of_ref": "indicator--8fa5ce79-180e-44ad-863b-5b04aa291818", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a640bd8e-7b83-45ba-90b9-a8b7c2072dad", "sighting_of_ref": "indicator--6e6f331d-c336-4941-962c-f572c1896bf5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d6ad96-2a33-4c70-8995-1f12c5f9778d", "sighting_of_ref": "indicator--a79b8f68-7cc2-401e-ae64-3d59c4206641", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffd6acd-5078-419e-88f8-aac3d3c8c984", "sighting_of_ref": "indicator--41cbffee-5444-438f-8423-a7c422dfcf1f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0af4c29-57f1-4082-92ea-4912e7feef76", "sighting_of_ref": "indicator--4989b981-e9d5-4f39-9f8e-52b920dd9a9a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adb4d76-6433-46dc-a637-d9ff1647fbf8", "sighting_of_ref": "indicator--ecd01f9a-1e1c-4dc2-bb51-fcba140b17db", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cb28c0-6985-4b12-9183-46e92b0c9d7c", "sighting_of_ref": "indicator--ecd01f9a-1e1c-4dc2-bb51-fcba140b17db", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca07afed-6c5e-4331-aff4-df677b39afdf", "sighting_of_ref": "indicator--ecd01f9a-1e1c-4dc2-bb51-fcba140b17db", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d91a1db-c89d-4e56-848d-4f0524753311", "sighting_of_ref": "indicator--12b4b0d9-76ce-49dd-a124-a793f958d4ed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab3e92d-57ca-4930-8cbe-a5c5b23a14cb", "sighting_of_ref": "indicator--12b4b0d9-76ce-49dd-a124-a793f958d4ed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe2040c-6a08-4e6f-bbd8-e1b7655ef1fd", "sighting_of_ref": "indicator--5cb08cff-ce6b-4251-be7b-f73d0d79764e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fa1c7b-d883-4c47-8612-118439212ce0", "sighting_of_ref": "indicator--a9cda3e2-211b-41fa-be9f-0bc60f9af4a1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616d0012-ece7-4db3-a5e0-baff55e5c9dc", "sighting_of_ref": "indicator--a9cda3e2-211b-41fa-be9f-0bc60f9af4a1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893f05be-5792-43f5-94b2-8f8b00a78850", "sighting_of_ref": "indicator--0b36f772-6fed-4a21-8a11-afac27956f3e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6102a8-64b8-4e9d-babb-0aaa1eec5912", "sighting_of_ref": "indicator--e3b80d83-426c-452a-92ac-3cfb96cd2a96", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fd42ba-b559-4cd0-a301-2e39fb936f84", "sighting_of_ref": "indicator--e3b80d83-426c-452a-92ac-3cfb96cd2a96", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0310f190-4b8d-482f-8700-5968b7296360", "sighting_of_ref": "indicator--4c58e4da-db87-4d5c-808a-b10cd402c66e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ed57ae-fed9-45f7-adf0-7068045673fc", "sighting_of_ref": "indicator--4c58e4da-db87-4d5c-808a-b10cd402c66e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae34b680-c032-40c5-b35e-e693b9648a6e", "sighting_of_ref": "indicator--4c58e4da-db87-4d5c-808a-b10cd402c66e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d490bd9c-91b8-43d2-9c4c-56f7d7666b49", "sighting_of_ref": "indicator--f6ef6bab-9ebc-48fb-9570-fb1cb7904c11", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee86d14e-e01c-4f5c-b23a-db9042c14764", "sighting_of_ref": "indicator--f6ef6bab-9ebc-48fb-9570-fb1cb7904c11", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c54e81-5d9f-4483-b3c6-3699d08f4c27", "sighting_of_ref": "indicator--19374939-028e-4873-9400-0fc136f6f5dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bfe205-873e-46c5-bd5f-ad3586b1db62", "sighting_of_ref": "indicator--0ad8935e-f4e7-42fd-b71c-f067713885e7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33db1271-539c-471b-8cf9-e32d49def7e1", "sighting_of_ref": "indicator--42707ba8-62aa-422f-ae94-a61fefbd2749", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3f54b4-6f46-44cb-a50c-db0d134faefc", "sighting_of_ref": "indicator--42707ba8-62aa-422f-ae94-a61fefbd2749", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f8fa65-2aae-4d10-83ca-060f80a9ec12", "sighting_of_ref": "indicator--1e7030c3-6dd6-4c67-9e29-1f27ded76529", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5e8407-1493-4f1b-bb64-cc4629e3a0b1", "sighting_of_ref": "indicator--de89664d-ea20-4fe9-829c-2507b9c6d144", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292b739a-dd6c-4c94-8ea7-523aba9aa193", "sighting_of_ref": "indicator--de89664d-ea20-4fe9-829c-2507b9c6d144", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbdd2962-3022-4763-a293-0a5a678da382", "sighting_of_ref": "indicator--94f8b919-ec07-49f6-94ea-1e5613a79147", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb87e79-a8c5-4727-9459-e36d43604a3e", "sighting_of_ref": "indicator--94f8b919-ec07-49f6-94ea-1e5613a79147", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d44df43-a90b-4158-9c28-b6666d9ed7c5", "sighting_of_ref": "indicator--4c3d8ed6-583b-4e59-b886-405960e1f44c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d268006c-6766-4538-a2c7-b6ddc6b51b18", "sighting_of_ref": "indicator--4c3d8ed6-583b-4e59-b886-405960e1f44c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4139d83-ec89-498a-95e2-779b2ba54043", "sighting_of_ref": "indicator--72396ddd-8fb9-4d16-bf5a-ac976503d78c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5564eebb-6157-4aba-828d-3a63d055e732", "sighting_of_ref": "indicator--a50a5001-154b-4ab9-9d85-8f6acb5059db", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7d4af0-6c1e-4243-a930-d4fca392bdf5", "sighting_of_ref": "indicator--a50a5001-154b-4ab9-9d85-8f6acb5059db", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4513b2df-670c-4c09-b3ee-9f9b8f2f2504", "sighting_of_ref": "indicator--75d8ee8e-1f38-43e6-bfc5-88130b122cec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d20faf6-718f-4bd0-8a4a-76d08e66f5fd", "sighting_of_ref": "indicator--75d8ee8e-1f38-43e6-bfc5-88130b122cec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9bea52-130c-4354-b2f9-9fb96f7e78e9", "sighting_of_ref": "indicator--20d48270-4490-4c1b-bd4d-bef7815d5220", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439158cb-e381-4da8-8c57-02b69e0cac3e", "sighting_of_ref": "indicator--a1e2cb69-165a-4649-8d19-9cbe5557133a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89f380f-8375-43a7-9ccb-b98059bb95f7", "sighting_of_ref": "indicator--a1e2cb69-165a-4649-8d19-9cbe5557133a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42413e6-03f6-4c6c-8a81-c0a73f87c033", "sighting_of_ref": "indicator--dadf66ba-66f9-498f-a94b-a0a2e33484a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c65a10-eff2-4f01-8039-c659930de805", "sighting_of_ref": "indicator--a471ffc6-a902-43c6-88ef-6d854ab2d922", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f41ee6f-c408-4a11-89df-4d85052ba830", "sighting_of_ref": "indicator--834e2a94-de46-4de7-8b1e-5124a0c606f1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7729839-509c-4d03-970a-b83bc22afac2", "sighting_of_ref": "indicator--834e2a94-de46-4de7-8b1e-5124a0c606f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2987e0d-acc6-4783-8ce0-32bf759442c2", "sighting_of_ref": "indicator--3e4172e0-d340-4157-8cec-290ab2b1468c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2906fe-77fa-4b8a-b541-7ae6ebaea4a0", "sighting_of_ref": "indicator--324b6a45-7f23-4966-ba16-ce95628d1fb0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63046b98-4a78-40ea-ab59-47d6bbbf4dff", "sighting_of_ref": "indicator--cfcd715f-7e3b-4c1a-8c01-938eb93f4c00", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23577ff7-50ca-4f9f-b632-5247cb873e65", "sighting_of_ref": "indicator--4b13cf9a-26a8-452a-b3d0-431a7a988730", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66061349-1f52-4ac0-8daa-63b930fe69ac", "sighting_of_ref": "indicator--4b13cf9a-26a8-452a-b3d0-431a7a988730", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9968d1b6-e243-469b-96fc-dce52886fb8f", "sighting_of_ref": "indicator--44fa926f-2f9b-4a11-9274-7461433d42d4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a39ffd-9b8e-42b1-9fec-7289c7d84c26", "sighting_of_ref": "indicator--b20871ee-8837-4858-82be-e0b90823a71c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76730fe-ac2b-4d69-88d6-a7bf0565b5d3", "sighting_of_ref": "indicator--17ad4c69-28ca-433e-a101-1d92ce992ddd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b219e3da-5d3a-488f-a5f0-1d2044ae59be", "sighting_of_ref": "indicator--17ad4c69-28ca-433e-a101-1d92ce992ddd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb92def-8f89-42b1-9ac1-9b0fa6c574f9", "sighting_of_ref": "indicator--fac22504-b753-4dee-b97f-9812c02770a0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a51006c-a84f-4b03-a612-92f87268195d", "sighting_of_ref": "indicator--fac22504-b753-4dee-b97f-9812c02770a0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dd6d55-1452-417f-8f2a-5288142cc4b8", "sighting_of_ref": "indicator--af246acc-6a1d-46f6-bde0-cf2e6c0a53ad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bd4a5d-e3c9-46c5-86d5-a873ceccdd1d", "sighting_of_ref": "indicator--b7806b23-bf7e-4852-b62b-6aa2181d464c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b27330-287a-4427-ac7f-159c0c2d3c81", "sighting_of_ref": "indicator--b7806b23-bf7e-4852-b62b-6aa2181d464c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ee9bf0-695b-4966-a28a-b4fe33abbb99", "sighting_of_ref": "indicator--d2caaa8c-9588-498e-8eae-3d3cb7ce0382", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4bf3a7-41ff-4d76-b209-742f6c66ee74", "sighting_of_ref": "indicator--d2caaa8c-9588-498e-8eae-3d3cb7ce0382", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0532668d-0fe3-4d6f-aa5e-98985a25bcc1", "sighting_of_ref": "indicator--766b93ea-f242-4e63-8244-baf23322e336", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62dd1352-d46e-4e55-90b7-d7c5889bb1ad", "sighting_of_ref": "indicator--5bbb55fd-a4d5-4874-8729-870da6a88dfd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edb5c1a-4535-406d-a22b-c8b4d05fd484", "sighting_of_ref": "indicator--c1e605d3-8273-464d-93e2-c20daf670c03", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ad5e12-821b-41de-8730-f78e2096a1d5", "sighting_of_ref": "indicator--c1e605d3-8273-464d-93e2-c20daf670c03", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717530ef-31cd-496b-aa97-a2be264c498e", "sighting_of_ref": "indicator--da8836e4-0c82-4bdb-b5d0-5f380a84ca48", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edf38f5-cc52-48bd-8fca-2b9171709a24", "sighting_of_ref": "indicator--eecb5d6e-a8be-4953-bd0a-31b97ddb374c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da22670-7269-4038-bf24-8b163c482693", "sighting_of_ref": "indicator--eecb5d6e-a8be-4953-bd0a-31b97ddb374c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd0f186-b93e-4154-9007-2a18d233ce70", "sighting_of_ref": "indicator--3905d50c-8f23-4628-839e-f1d6e035f3db", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71074cba-05f9-4920-8d12-6a62438c83e5", "sighting_of_ref": "indicator--3905d50c-8f23-4628-839e-f1d6e035f3db", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633d0f4f-658f-44c7-acf9-b02fcd111b76", "sighting_of_ref": "indicator--3905d50c-8f23-4628-839e-f1d6e035f3db", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363a488c-4941-4d43-ac5a-5537c2db40a7", "sighting_of_ref": "indicator--d0d843bf-bb5a-4b90-9446-39c9bdb68f27", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff08211-0842-4583-83f9-6057e299122d", "sighting_of_ref": "indicator--668e4738-2c55-41ed-8ef8-21773609b331", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0e97bc-5f5d-419b-83e4-85924c43b748", "sighting_of_ref": "indicator--d148e196-9f51-45ce-9d91-7143e2aaca44", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15816149-ec27-4990-b81b-d43bfdffa7fe", "sighting_of_ref": "indicator--cfb8458f-dfbd-4055-b270-c7e6c2fda619", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03cd543d-b981-4191-a80c-9ac3134c4a96", "sighting_of_ref": "indicator--0546af1d-442b-4d0f-962d-9426494662ef", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24ed795-2647-412d-bd68-d7022a16e429", "sighting_of_ref": "indicator--0546af1d-442b-4d0f-962d-9426494662ef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7310ec9f-6abe-438f-9532-3014d3a07ddb", "sighting_of_ref": "indicator--1a541cbb-e745-40a5-b214-a5812ac0b98e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609d48f0-1a15-452d-90db-7335a8c4df7c", "sighting_of_ref": "indicator--1a541cbb-e745-40a5-b214-a5812ac0b98e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c713f23f-7cac-4752-9858-2e868b98a723", "sighting_of_ref": "indicator--c5debe8f-21c2-4672-af71-1869c70fe699", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99356114-c870-4fa4-aa3f-a42c0d036b84", "sighting_of_ref": "indicator--c5debe8f-21c2-4672-af71-1869c70fe699", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a067e3-8fc3-457d-b58d-4d631d2d1f1b", "sighting_of_ref": "indicator--bfd2fa61-bda4-4e66-81e5-2023675ffe40", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35248f59-5813-40bd-b0e8-8912c229c6d3", "sighting_of_ref": "indicator--c569b2db-ffbe-4ba4-9b3e-df644d5cdbec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff384df-65d2-43c9-9337-6fe40dd54d39", "sighting_of_ref": "indicator--41cb31f8-f51e-4727-bca9-0608815ca658", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c48e9a-a3ea-4c13-a1da-d95b82852b1d", "sighting_of_ref": "indicator--41cfe97c-4e0f-4552-8a5e-5063d2caedb2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdae2c39-9502-4066-8382-0d7109082a78", "sighting_of_ref": "indicator--e6417d76-120a-42f0-a486-07a47963d944", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0533d75c-f989-4a00-81e6-ea3f97742b27", "sighting_of_ref": "indicator--e6417d76-120a-42f0-a486-07a47963d944", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b35d4d3-b33b-42c8-83fb-2ee1bb0c538c", "sighting_of_ref": "indicator--13ca8885-e609-4a95-8f90-fa6cec12bbb4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e93d2ad-3cea-420e-ba8f-9dba5a8b766b", "sighting_of_ref": "indicator--13ca8885-e609-4a95-8f90-fa6cec12bbb4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06d4985-51ea-417a-b25e-81529f83bf00", "sighting_of_ref": "indicator--f3f81a00-ecb2-427b-baf8-1a6667e73d12", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202f529e-c990-40ed-9453-bd047ed87265", "sighting_of_ref": "indicator--f3f81a00-ecb2-427b-baf8-1a6667e73d12", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75ba80e-8804-4601-bf19-7abf5c522209", "sighting_of_ref": "indicator--8dcfb8c6-7fa6-4813-b8a8-309295f83e66", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d18555-ddfb-486d-adfc-c8db3bc4a4ad", "sighting_of_ref": "indicator--9b165749-fb28-4015-8297-56a2fa4baede", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d27b58-1cb4-4041-b3df-1b13beaf8c7f", "sighting_of_ref": "indicator--c1b20a32-451c-4eff-b2a2-14f46dca53b2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738c741e-e3ab-4f26-abd6-3c6d005cf4a7", "sighting_of_ref": "indicator--47e0bd6c-f241-4e3a-8753-3cd8d097692b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbe4ef9-ceae-49cd-97e5-0fe0e5c01fd2", "sighting_of_ref": "indicator--47e0bd6c-f241-4e3a-8753-3cd8d097692b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e4761a-3b49-4932-a0f0-d917367a6250", "sighting_of_ref": "indicator--d2af094e-583f-45d0-a271-1445151e4ebc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aebe887-19e9-4425-bbe9-43b160d35555", "sighting_of_ref": "indicator--d2af094e-583f-45d0-a271-1445151e4ebc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9cadcd2-9787-4d27-8b10-52dba6e061ac", "sighting_of_ref": "indicator--546cd97a-c040-4c3f-a2d0-8329e49ecc76", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2142496e-f8fc-4b9a-b7fb-68daf0920a07", "sighting_of_ref": "indicator--2db0743d-12d1-4c61-b4d3-9da0ba896101", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bf4aa0-32c5-46e9-8844-d8b8d0e8d623", "sighting_of_ref": "indicator--657d3507-e978-4ebb-8d41-c00043cb88e7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e0a2f3-caf5-4f22-97f5-7cb9ee7e91ee", "sighting_of_ref": "indicator--657d3507-e978-4ebb-8d41-c00043cb88e7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791c7ae5-9591-474c-bdd7-8d056b9cfea3", "sighting_of_ref": "indicator--76f7a290-bfbc-4779-9672-6ed9511c5570", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fbfdec-c358-4d74-ba52-b1a4579d0245", "sighting_of_ref": "indicator--9160c55a-9c75-48d7-962b-407ecc18cb5c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d952e4a4-8d07-481f-9963-591f73ade042", "sighting_of_ref": "indicator--9160c55a-9c75-48d7-962b-407ecc18cb5c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f8c602-8f6e-4ca7-ae71-e509c90b3c1b", "sighting_of_ref": "indicator--c99d2dd8-1ff8-4e7c-9ec1-68a90c8b65cb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e98a1c-bac9-4119-8875-43501f772571", "sighting_of_ref": "indicator--d7bc6218-27fc-4b99-8563-f3a6f98d31dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6460d43-188d-4505-ae46-d40c42253a58", "sighting_of_ref": "indicator--b3dadf0d-43f0-494d-89af-ea77102a3cc7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ef9f39-2a0b-46e5-8dcd-11b3f0112116", "sighting_of_ref": "indicator--4010d9a6-62b9-4571-bf18-a7a30dbcf88f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1896245f-ac9d-4db5-8b32-3ec3376eeb33", "sighting_of_ref": "indicator--4010d9a6-62b9-4571-bf18-a7a30dbcf88f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d1d7a6-c15a-472c-b589-b6d3aa5d8bac", "sighting_of_ref": "indicator--624e7a31-ff4b-454d-b4bd-adc25171dc35", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87607c47-62ac-4b7a-8fe2-a86d1219d1de", "sighting_of_ref": "indicator--624e7a31-ff4b-454d-b4bd-adc25171dc35", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc60544b-3b3b-48b8-854b-f5b01e5977e0", "sighting_of_ref": "indicator--624e7a31-ff4b-454d-b4bd-adc25171dc35", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945f88ac-2506-4471-abc5-f00a690be81a", "sighting_of_ref": "indicator--29fe6b85-749d-4ea5-9b22-f7ddd2ea3867", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f15296f-bc29-4cf7-92fb-0ca1f47c9c60", "sighting_of_ref": "indicator--daf1c848-ac12-4378-b5b6-90ff62e76af2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc60acf-29c3-4097-852e-4f40a30e5eb2", "sighting_of_ref": "indicator--3067381c-edaa-432b-8d60-6403a70ef311", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75f5a14-ccef-4217-8ab5-409989e846bc", "sighting_of_ref": "indicator--ba0179fd-fbdf-437d-a41c-cf6b98a0ba03", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a7cb29-5481-47c1-b2a9-b706fd45cf96", "sighting_of_ref": "indicator--19b425ea-5ebc-43a2-ae19-042487c12396", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d958ebb-8382-4a79-a616-2d093c11c8d4", "sighting_of_ref": "indicator--8ea8b851-d70e-46c9-8449-1e0ea7c8f3b1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13acee27-56a4-4cdb-8717-af51106ca466", "sighting_of_ref": "indicator--aec77c98-c93f-4daa-8494-f2d97ed6c35d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7871bb03-e98c-4b93-b2e0-8cf8e2a03322", "sighting_of_ref": "indicator--aec77c98-c93f-4daa-8494-f2d97ed6c35d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb52fac0-9dc7-4488-9ca7-373ce3fb5309", "sighting_of_ref": "indicator--aec77c98-c93f-4daa-8494-f2d97ed6c35d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4386635-0666-45ca-9734-bb0d806decbb", "sighting_of_ref": "indicator--9ac039d5-4360-4bcc-94f9-8e5231014ff8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a04319d-7f27-48b6-a710-5bbcff0ee94a", "sighting_of_ref": "indicator--1b2d1cc4-9599-4bb7-b12d-cb9452bfc3ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25181c87-1a22-456f-b80f-0373e47106af", "sighting_of_ref": "indicator--1b2d1cc4-9599-4bb7-b12d-cb9452bfc3ac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5eeae1-290d-46b8-b929-196e3e7c54ac", "sighting_of_ref": "indicator--d961b8cf-b5b3-4ef0-ad3e-5b50021ffa05", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e341a1b-7fb6-4471-80b5-63b0361894df", "sighting_of_ref": "indicator--d961b8cf-b5b3-4ef0-ad3e-5b50021ffa05", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484bded9-9810-4e0e-9168-f942da23fe7b", "sighting_of_ref": "indicator--d961b8cf-b5b3-4ef0-ad3e-5b50021ffa05", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57745a4-bbc6-4977-bac0-93fa29a57b1e", "sighting_of_ref": "indicator--2e046a02-7369-407d-b2ff-7e6221f42ce5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c253554-d613-4a4b-9414-b11f26b6120f", "sighting_of_ref": "indicator--f5bd0b5f-7418-4a78-bf73-ced550f40683", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ed9f09-a814-4db9-ad27-ab21e3a28dee", "sighting_of_ref": "indicator--82f676db-643c-4d31-9b41-c62f74c3d919", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df0ec7c-db7d-447c-9258-4988ed2432c3", "sighting_of_ref": "indicator--82f676db-643c-4d31-9b41-c62f74c3d919", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1277de17-db7c-4654-a528-c3b1ecc047a8", "sighting_of_ref": "indicator--82f676db-643c-4d31-9b41-c62f74c3d919", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0eae035-f61b-49df-87cf-f3d4f7daf768", "sighting_of_ref": "indicator--34dac270-0a10-40ed-a377-10773605b9ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97db93cb-4bd6-443b-b912-ffcdb0ca5401", "sighting_of_ref": "indicator--34dac270-0a10-40ed-a377-10773605b9ff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b77adfc-cbd8-4822-8145-067e10ffe053", "sighting_of_ref": "indicator--34dac270-0a10-40ed-a377-10773605b9ff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c338742-46aa-4109-8b41-21214bc61b81", "sighting_of_ref": "indicator--b293290f-9b9a-44de-aea5-fa08774a8664", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b9f013-d769-4615-8a1d-e283380aee50", "sighting_of_ref": "indicator--b293290f-9b9a-44de-aea5-fa08774a8664", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b0c280-0172-4ce4-b7a8-d4fb449024e5", "sighting_of_ref": "indicator--b293290f-9b9a-44de-aea5-fa08774a8664", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25f901e-9e9b-4943-ac5c-8fee9a0ac81d", "sighting_of_ref": "indicator--c489c24e-9086-4d73-aad8-35bc3a988a5d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4609cb-6a11-40d4-8bfa-97527fa6e455", "sighting_of_ref": "indicator--c489c24e-9086-4d73-aad8-35bc3a988a5d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964214c7-5a96-436c-96fa-bbea76080dba", "sighting_of_ref": "indicator--c489c24e-9086-4d73-aad8-35bc3a988a5d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435d262c-4f46-47aa-a526-7dbd544099a2", "sighting_of_ref": "indicator--a81225c3-40a0-401d-aff2-0af09b4f67b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45933129-830a-43dd-bc43-cd6d02d71d1b", "sighting_of_ref": "indicator--889ee700-9419-4c09-bf2a-ab1e8d8d0150", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2349af-576b-43cc-b320-8b26f371db94", "sighting_of_ref": "indicator--7ba80647-1d6e-49b3-a6c0-323fb3122447", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5893e165-3298-4b56-934c-b8e21eb43bcd", "sighting_of_ref": "indicator--7ba80647-1d6e-49b3-a6c0-323fb3122447", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f865b0b-5abe-4299-a43b-348285d7948a", "sighting_of_ref": "indicator--0affeb20-1039-4a1d-83b9-df0476f4c56c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50aa7dbf-0876-4307-a001-26f2d62a2d34", "sighting_of_ref": "indicator--0affeb20-1039-4a1d-83b9-df0476f4c56c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af328cb2-0094-4c9a-b7e3-b2988b51c6ce", "sighting_of_ref": "indicator--c6e446fc-af4a-4af4-8330-54918c554f3a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98304ad-f253-4fb3-bdba-38d41f2528a8", "sighting_of_ref": "indicator--398fde07-781f-4585-b86f-b275c2a82587", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90d3daf-d1b5-452e-8220-afe629d74f74", "sighting_of_ref": "indicator--70b817bb-f5be-4206-b4cf-0924be1dce88", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1f065a-d554-4746-86a1-735ffbcdfcd0", "sighting_of_ref": "indicator--70b817bb-f5be-4206-b4cf-0924be1dce88", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47bbee99-1092-4c8c-86a4-b806eb251abb", "sighting_of_ref": "indicator--ec4af933-7c97-48e4-849a-3f70e5f6b6f6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a9dc0c-2771-43b5-9697-5b5d4f7a019d", "sighting_of_ref": "indicator--ec4af933-7c97-48e4-849a-3f70e5f6b6f6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c727bb7c-8a71-4811-bfbc-f7dfb709bd59", "sighting_of_ref": "indicator--dae7d8d6-d401-4c1a-8d90-1040d45be189", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b447e40-1fc3-4710-a000-09f76c5cb362", "sighting_of_ref": "indicator--fd002bf2-e9f6-4b2a-961b-a4c26a08b106", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597c00b2-7efb-4b9a-9e9a-6c1b761d074b", "sighting_of_ref": "indicator--fd002bf2-e9f6-4b2a-961b-a4c26a08b106", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4862cc-4ee5-4bf8-90c5-0cd7f2e45fef", "sighting_of_ref": "indicator--63e4bee2-9037-4ec6-981e-63b43256f834", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0c2ed6-e66c-4314-ba6a-39e0394ccea8", "sighting_of_ref": "indicator--ec952a53-c21f-44b0-9107-e5e1375e8c9f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48414037-6e94-42fa-90ca-6bf3ed30150a", "sighting_of_ref": "indicator--956213fc-fb63-4dc3-8d10-3204de97d8f7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a005cf-8d2e-465a-ab84-20e3745b3799", "sighting_of_ref": "indicator--1bfe525a-c7a3-466e-8e58-af8202840975", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe8a157-2461-48b2-a69f-c092bcdbbe40", "sighting_of_ref": "indicator--1bfe525a-c7a3-466e-8e58-af8202840975", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0de642-ca5e-4f43-8dff-3116119e27ac", "sighting_of_ref": "indicator--092de6ad-4536-4ebb-b89d-e385833a55ba", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6afd847-3aeb-4300-970e-c962e5bca6e5", "sighting_of_ref": "indicator--8dc4cddb-cd2b-47e8-94ef-ef00c3218c3c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477881de-52c4-476c-bc68-acab8d0e328b", "sighting_of_ref": "indicator--616ed128-272f-43c7-a424-e23d1ed9d1da", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21af3b3-1d75-428d-88d0-28ed3b50c0d5", "sighting_of_ref": "indicator--5840c6a8-96dd-4118-a6cf-7f3aade75390", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd57297-0114-45cc-8765-87b5c04040a9", "sighting_of_ref": "indicator--5840c6a8-96dd-4118-a6cf-7f3aade75390", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ff9cfa-9d07-4f31-a5c7-c4e60926accd", "sighting_of_ref": "indicator--252be129-2261-4989-b3cb-d0343b2b7dff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4309521e-838e-4e85-a0a0-6e6054799f23", "sighting_of_ref": "indicator--252be129-2261-4989-b3cb-d0343b2b7dff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2502b8dd-db18-4f46-be39-15adc5e4d9a5", "sighting_of_ref": "indicator--f24f519f-0e74-4ce4-be0a-f7107bfa43a2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cc8ad4-67aa-4d7a-8013-55aaca5f66a4", "sighting_of_ref": "indicator--cea3a446-01d7-4344-81ee-a037740d42cc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91797f0-6237-4690-a1c9-b58feccfa183", "sighting_of_ref": "indicator--cea3a446-01d7-4344-81ee-a037740d42cc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e54edb8-7c5a-4ff0-8545-8007caae0451", "sighting_of_ref": "indicator--19938167-b394-4203-91fa-6a7442107095", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e217ff0-16cc-4c65-a665-487ffe49db50", "sighting_of_ref": "indicator--19938167-b394-4203-91fa-6a7442107095", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5a56e6-8bd4-4151-aa0a-363a40d29f25", "sighting_of_ref": "indicator--2ce6680c-f81b-4a9f-9afb-15f930bafab7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f82ebe-5a84-4909-b672-a6fd2e7b7275", "sighting_of_ref": "indicator--2ce6680c-f81b-4a9f-9afb-15f930bafab7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca71f0b-fcfe-4d57-8b57-e19fd6b4eb66", "sighting_of_ref": "indicator--6e47c6cd-60ef-4e19-9cd1-eb711fc0087d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013f8d43-9d21-40e8-b851-64d7a04da080", "sighting_of_ref": "indicator--d99070e3-e36e-4ae9-9044-e973228b30c2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d9b0ea-e066-4346-b44b-a6539fe004d4", "sighting_of_ref": "indicator--93d7a06e-639e-4db8-95ed-6da9e8d509dd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34949a20-63c6-4466-87aa-8220d89abf4a", "sighting_of_ref": "indicator--3234ce88-01dc-4989-9702-dd324269c362", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6001e7ea-8b2e-4c71-b599-eb576d599043", "sighting_of_ref": "indicator--1a8ef70b-e75f-4ba5-b2a3-4543421a0322", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f6a328-2f0a-4c59-b11f-4a04148d254b", "sighting_of_ref": "indicator--1a8ef70b-e75f-4ba5-b2a3-4543421a0322", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef6396f-f86b-499d-acca-8451c3ed6ef5", "sighting_of_ref": "indicator--62feecda-88b9-4da4-9c21-dc795990ae86", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b79e21e-083d-4912-b469-058364d1349a", "sighting_of_ref": "indicator--bd02fdb7-7731-4b5c-aaf2-718e36260d5e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc033869-0833-4c75-99d9-4351b20bd80e", "sighting_of_ref": "indicator--8874b966-f1c2-426b-94c6-ffcb3744809f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bcd02e-080a-4a6a-a5c6-783bb2dd7a27", "sighting_of_ref": "indicator--2776d45c-bf19-4cda-897a-4a4543821266", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684afe64-1bfc-4e12-a6a2-45b066b16180", "sighting_of_ref": "indicator--b5af11d7-3838-4c78-b53e-26a1e3504b56", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4595da8c-8cf9-411d-ab8c-e9b5378bd0b4", "sighting_of_ref": "indicator--77fbc5c5-7dac-44db-850b-a2b4a32d045a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8585c1ab-d174-4df5-b3bd-dbeddf6e4777", "sighting_of_ref": "indicator--dbb0b185-bc89-40e1-a786-a8c9e86bc059", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db79b1a-d9fa-4ad4-929e-47da740f838c", "sighting_of_ref": "indicator--dbb0b185-bc89-40e1-a786-a8c9e86bc059", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026ac58a-ca98-4163-b93d-4491c5df72e0", "sighting_of_ref": "indicator--e1788e05-4f50-49aa-b732-072d549047c8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a806d6-352e-474b-8ce9-215844ade5df", "sighting_of_ref": "indicator--0ad85e04-7777-4bf0-b46a-e41af69df40f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58eac0b6-1073-4415-b74e-02c7d28b4687", "sighting_of_ref": "indicator--d7415bce-ef95-4e40-84b9-228dfd553f4e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649bb2c6-d902-4f7a-b31d-a80e1cc288f3", "sighting_of_ref": "indicator--d7415bce-ef95-4e40-84b9-228dfd553f4e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8871766-24d9-4f2c-bc32-0f01150ab780", "sighting_of_ref": "indicator--d7415bce-ef95-4e40-84b9-228dfd553f4e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57493936-47c0-437d-a788-9719e7f13744", "sighting_of_ref": "indicator--b956bc5e-990b-4e6a-9ccf-e0d19afcb466", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41949b51-5048-4528-bf52-992bfc1f845f", "sighting_of_ref": "indicator--b956bc5e-990b-4e6a-9ccf-e0d19afcb466", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903ca769-563c-4776-b439-325117705980", "sighting_of_ref": "indicator--a258d398-b9c5-4097-8261-7d1ef8f8c8d2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5efc39-be35-409b-a49e-022c35239015", "sighting_of_ref": "indicator--b8575c6c-89ae-4d57-967d-737eb9a5ec69", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ce2ec5-75cc-4a66-96ff-aa2538975133", "sighting_of_ref": "indicator--80e4c0d6-2097-4c41-bd85-e48c931b8bfc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a025533-97f0-4df6-ae6f-a68b3cdf6f90", "sighting_of_ref": "indicator--80e4c0d6-2097-4c41-bd85-e48c931b8bfc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871a54ae-ca5e-4999-838d-51524fa21a67", "sighting_of_ref": "indicator--ba79e23e-e8b7-409f-85ff-d34d112ba7ee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1577bc76-f03a-4531-9960-bd0fd2d6b434", "sighting_of_ref": "indicator--40149f2d-4504-4109-92d3-4b6f1f2f31e8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dadd2b3-71da-4a6c-8a91-bafbd5b57773", "sighting_of_ref": "indicator--40149f2d-4504-4109-92d3-4b6f1f2f31e8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a68b672-a20d-4ed0-8e47-f9a9b31ff47e", "sighting_of_ref": "indicator--b5943b76-7612-4dca-983a-b47e748704eb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32683257-b001-400f-b8ae-729f0518fd4c", "sighting_of_ref": "indicator--dfaa8aef-26e4-4167-b3de-d4253fabcefa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aed81e3-5c0a-4353-9a89-d86ac1ae1220", "sighting_of_ref": "indicator--c12f4556-4e96-4dd8-80cb-041c14fff48e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42933eb3-072d-40af-af6c-1370f84974c9", "sighting_of_ref": "indicator--b3db7a28-e2b2-48f5-b0c5-b9b6303c0ea4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e90011a-f11e-4e9d-b225-8e0d05b5b472", "sighting_of_ref": "indicator--b3db7a28-e2b2-48f5-b0c5-b9b6303c0ea4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b2ca69-7c5c-4f92-9301-5c9968148e00", "sighting_of_ref": "indicator--e8826229-688f-4cb8-aec0-0f060c81bd09", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d546c359-3696-4c45-b25d-39bb866745fc", "sighting_of_ref": "indicator--2e133d93-a86d-4026-8f8e-7623dde87764", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505780c5-6b78-4d66-80de-734f65870beb", "sighting_of_ref": "indicator--35ab0d42-dac8-46f3-bede-2a9dd6ffd489", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bc11ee-666a-4270-9194-11d23114b54c", "sighting_of_ref": "indicator--17a6dd6c-6516-4a56-a55f-70217e34642c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e682bcd6-b9e9-46a9-a952-7d3932931465", "sighting_of_ref": "indicator--17a6dd6c-6516-4a56-a55f-70217e34642c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a8e067-d33d-4786-b636-7b483a7786bc", "sighting_of_ref": "indicator--17a6dd6c-6516-4a56-a55f-70217e34642c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53acb70c-7ad9-416d-90c0-b002059eb9f1", "sighting_of_ref": "indicator--fd1c8f30-b601-4eb8-bba0-fe7e77193016", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2677a3-bcc2-4c3c-b086-5fdf795024de", "sighting_of_ref": "indicator--fd1c8f30-b601-4eb8-bba0-fe7e77193016", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa55a22f-657a-46ea-bbb7-f96c6cc4c29d", "sighting_of_ref": "indicator--fd1c8f30-b601-4eb8-bba0-fe7e77193016", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4fd612-af8a-4ae0-8fa9-7f962443d44f", "sighting_of_ref": "indicator--58069044-fabc-4a1b-accc-1f8674618a6c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7ad18a-04cf-4427-b0ac-dd38022a12b9", "sighting_of_ref": "indicator--58069044-fabc-4a1b-accc-1f8674618a6c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a929215-e680-43db-874a-58af2a05dd16", "sighting_of_ref": "indicator--30cba73d-bd63-460c-9ea7-731162b65828", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c4bda7-c560-447b-a5d2-09e7717c6aae", "sighting_of_ref": "indicator--30cba73d-bd63-460c-9ea7-731162b65828", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5593ae5e-f1b5-46de-b4ea-0fbba9394ce6", "sighting_of_ref": "indicator--30cba73d-bd63-460c-9ea7-731162b65828", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57516b8-5f39-4e8f-a0bc-d4f51e3260af", "sighting_of_ref": "indicator--5df78ea8-9e13-4ea1-a895-e196f4c005f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73eb132b-6aa9-4b68-b8b0-10e6cbe683d6", "sighting_of_ref": "indicator--5df78ea8-9e13-4ea1-a895-e196f4c005f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dab1dc-d355-4060-8b99-af994328ec3d", "sighting_of_ref": "indicator--07a17620-d3ee-4e0c-a4bc-65ed900b1ba8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0100e0eb-215a-402d-83f6-b6311e779211", "sighting_of_ref": "indicator--07a17620-d3ee-4e0c-a4bc-65ed900b1ba8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e7a102-72ff-4229-9192-5ee76d8e235c", "sighting_of_ref": "indicator--dcb1bf88-157f-4f5b-9db9-24ee50838c41", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331a65e3-4966-4b99-9f32-88326213fb3c", "sighting_of_ref": "indicator--307b66b5-94e0-42ce-bcb3-84ff78e349a5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d881e1a-c3ab-47f5-be30-89d6444ff685", "sighting_of_ref": "indicator--cca601ca-0986-465b-8162-3fa5cc2dcd72", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de7e971-3b4d-4950-8b95-9888cc3e96e3", "sighting_of_ref": "indicator--4805b902-e6a9-4b0a-929a-6abcd329d94a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52815ff4-70a3-406d-bcd9-426cee43066e", "sighting_of_ref": "indicator--1d90d2ff-8fd6-44bb-9092-02a5378de2ff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2ef378-0c25-480e-8903-77f8d464459c", "sighting_of_ref": "indicator--5743ffd0-f4c6-44d3-9a6e-c8ddfab875cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8e1842-0392-425e-90df-2d93c620578c", "sighting_of_ref": "indicator--e8f64ada-b06b-43a6-a0be-4791f5274d31", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97784109-c9ab-4504-8436-9483044bdeec", "sighting_of_ref": "indicator--6f956178-5476-4137-8e64-9a258fd68823", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a5032a-162d-4f2f-9130-2d15c1441de5", "sighting_of_ref": "indicator--cd47b590-8453-4c20-a140-a0e409ba0f83", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d08e45-50af-4aa4-beff-78ef070f60ae", "sighting_of_ref": "indicator--8177253e-d125-42a9-8190-21d8e6fce301", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78b7bb6-602b-468a-badc-9b0115fae4cb", "sighting_of_ref": "indicator--6b0ae06c-ec86-42d9-affa-8466b88cffcc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d178c67-da86-4da6-8768-5fd0af56a66f", "sighting_of_ref": "indicator--24c95996-347a-4496-a70c-18d9c2587032", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83553c34-c461-4473-a6c9-4609074bc6bc", "sighting_of_ref": "indicator--24c95996-347a-4496-a70c-18d9c2587032", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c48a4f-2524-4e0f-a545-e7a2912c9827", "sighting_of_ref": "indicator--2f36138a-575a-40b0-9109-68de631bc0af", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f6db0f-0b81-426b-a4d7-070a7816412a", "sighting_of_ref": "indicator--0a9dc0a5-24cc-4ba9-b659-049a7d56d1ee", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7dcea5-f5a1-4b0d-92ee-89abc5016f39", "sighting_of_ref": "indicator--17569247-bf33-4bbe-a017-e5eabe266e4e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef05d021-ec17-4f0a-992f-fb21f6bae8b0", "sighting_of_ref": "indicator--17569247-bf33-4bbe-a017-e5eabe266e4e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6523b5d6-df25-489c-9376-3c13d6af2f5e", "sighting_of_ref": "indicator--c08afadd-743d-4888-9f79-c9a389f06d10", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e804736d-7f33-4829-bebe-33a7f5ac35c5", "sighting_of_ref": "indicator--d26564eb-2ecb-4f6d-b3e1-8a20c0aa8f7e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cefe3ac-f5f8-4d45-8dc7-62768482b166", "sighting_of_ref": "indicator--d26564eb-2ecb-4f6d-b3e1-8a20c0aa8f7e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ded91d-a8b4-42a0-8ab4-4fea331cc1d0", "sighting_of_ref": "indicator--8d41406c-a7d2-4e04-818b-0e8c697a088b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d35a095-f656-4798-9d0b-fc5d4cdabe33", "sighting_of_ref": "indicator--6b12fd19-6656-4d71-a114-e86811c10c32", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037b1187-9cdc-4a2f-803c-60905c3a2967", "sighting_of_ref": "indicator--8269326a-7b87-45f8-80db-9b8cc3a0c721", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227ba754-9210-4e79-a49b-2d96153b3e48", "sighting_of_ref": "indicator--8269326a-7b87-45f8-80db-9b8cc3a0c721", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6480d4-4e17-42cd-aa93-4641a8a97645", "sighting_of_ref": "indicator--c7a07d72-b166-4012-8289-a5f572203893", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca359205-b948-43ab-bdc3-8cbd7caa931c", "sighting_of_ref": "indicator--c7a07d72-b166-4012-8289-a5f572203893", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50858b10-06ee-40a7-abad-711d43d9ad81", "sighting_of_ref": "indicator--027047b9-a7da-421e-8be6-f80b6422c3ea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddac3f72-d136-45fe-9efb-449aaf8910ca", "sighting_of_ref": "indicator--027047b9-a7da-421e-8be6-f80b6422c3ea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd19ecc-cfc7-4ab0-8d37-ca9c3fd24e1e", "sighting_of_ref": "indicator--60b01aed-f364-4933-b821-7caac593db4d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444cb09b-1997-43e7-9866-c37d8a2dfcea", "sighting_of_ref": "indicator--60b01aed-f364-4933-b821-7caac593db4d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83bb53e-145f-42cc-a539-be626685618d", "sighting_of_ref": "indicator--74f73c6a-6915-4d07-a84b-9420c3e36c0a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ebca1b-a315-424d-8c19-2e0f74428546", "sighting_of_ref": "indicator--74f73c6a-6915-4d07-a84b-9420c3e36c0a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5472d6b-fc50-4b20-b481-112272d615f0", "sighting_of_ref": "indicator--e5084fda-918b-4aed-ba97-6e8e1a0c52c0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09582e29-1c5f-42ae-9a62-be1c8e11b192", "sighting_of_ref": "indicator--80842cd4-d53c-4386-8222-0a3edd639909", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603ff334-33be-4bbc-bbb8-21a5397bdbae", "sighting_of_ref": "indicator--3de2aeb4-823e-41d8-8abb-58ec8ea25ec1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3dc86c-1d40-4c7c-8372-b8c1c8c35057", "sighting_of_ref": "indicator--5eaf6429-b4f9-45b1-ab8e-445779423ad3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10087934-8341-4e4e-9353-6cda27a3b1e1", "sighting_of_ref": "indicator--5a83260d-518e-4b80-8f84-5b968c29db0f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3379c626-a4b5-45ab-a5d3-b4a3043e52cb", "sighting_of_ref": "indicator--5a83260d-518e-4b80-8f84-5b968c29db0f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497b9a4d-f483-42c1-b511-10018fb4cce3", "sighting_of_ref": "indicator--1110a57c-0666-4a04-8d89-8160c159fc85", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a159749e-b518-4be1-a0e9-5aa2ca74e62e", "sighting_of_ref": "indicator--1110a57c-0666-4a04-8d89-8160c159fc85", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e71753-0ef3-4f18-b9e1-69a3c6cff0e0", "sighting_of_ref": "indicator--64c70d6a-3c41-4bd0-9eb3-d0f694a39d37", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d79f9d7-da23-4f52-a7be-20c16349bb9b", "sighting_of_ref": "indicator--065cd74e-3fc2-44fb-ab1f-c00445225812", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f302767c-c00f-4cbe-8eb7-c124656d2991", "sighting_of_ref": "indicator--065cd74e-3fc2-44fb-ab1f-c00445225812", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41675ffe-2d8c-4733-9f87-9aabbcc9998a", "sighting_of_ref": "indicator--6ddb681a-6986-4182-9ddd-40083d2f5758", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d958314-0167-4fcf-9bfe-7c4ae5baf7f4", "sighting_of_ref": "indicator--6ddb681a-6986-4182-9ddd-40083d2f5758", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddfb046-9896-460e-b3e2-e7a23d7f8d93", "sighting_of_ref": "indicator--0511ee76-491a-4a82-b527-98b9866f8880", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783f6fa4-f3b6-4ddb-9699-da13530c23f9", "sighting_of_ref": "indicator--a2d7636e-6515-440c-8c52-4bd43c63e4a1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3682c3b8-d1eb-4296-a90f-fc4191113510", "sighting_of_ref": "indicator--a2d7636e-6515-440c-8c52-4bd43c63e4a1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df33105-5abc-4b1b-a3a7-ff7cd6778255", "sighting_of_ref": "indicator--0750aafe-d128-4416-8414-474768735840", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362c1cef-0d13-40a1-ba01-0716ba026e90", "sighting_of_ref": "indicator--0750aafe-d128-4416-8414-474768735840", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08447075-4e74-43a8-bed0-b70b70485cdc", "sighting_of_ref": "indicator--fb2b04c6-8e46-4201-b6a5-5eb185d93635", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0de7329-51ca-4a10-9c61-a2c1252e6026", "sighting_of_ref": "indicator--fcfbe368-f65a-4c10-a6b7-7c4476fbde2c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d23cb1-f1d3-4478-b0f8-c201585ac69a", "sighting_of_ref": "indicator--fcfbe368-f65a-4c10-a6b7-7c4476fbde2c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18212b2-d0e5-410f-b225-df65230de7ba", "sighting_of_ref": "indicator--9a8f2ab0-1ba5-4bb9-ba2b-c2bcffb415eb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5728ef57-de86-445b-a0b0-928e16279158", "sighting_of_ref": "indicator--9a8f2ab0-1ba5-4bb9-ba2b-c2bcffb415eb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7419527e-42d8-4839-bf07-19bc3c171fb1", "sighting_of_ref": "indicator--ed1aea4a-6ff2-4cfc-87ad-31e2aa89e37a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e209bb5-e4ad-4fb1-bd3c-00354f93ee31", "sighting_of_ref": "indicator--ed1aea4a-6ff2-4cfc-87ad-31e2aa89e37a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cfc196-ce9c-44e1-8ce7-619dd3031162", "sighting_of_ref": "indicator--1ae90472-4b91-464c-ad0f-a187bb282afc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a18d4e4-682a-47b0-9b39-ca42d774f429", "sighting_of_ref": "indicator--1ae90472-4b91-464c-ad0f-a187bb282afc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db4f401-d09f-4cd3-b3c4-861a511476bd", "sighting_of_ref": "indicator--3375cd5c-ec66-4819-b7bb-fa8b8fd82cd5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7946e061-85bb-4db9-a0ce-b3b0f0d74c97", "sighting_of_ref": "indicator--3375cd5c-ec66-4819-b7bb-fa8b8fd82cd5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef574a8-038a-48ae-9509-100948612992", "sighting_of_ref": "indicator--455ba2c9-c699-4f57-b510-cb8625d77f34", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cac0068-4e36-45d3-9b17-c3eb15e0371e", "sighting_of_ref": "indicator--d7f41375-8265-4d99-91c1-4d24b5ac0a30", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c78075c-4683-48ce-86bc-0fceb24d6f96", "sighting_of_ref": "indicator--d7f41375-8265-4d99-91c1-4d24b5ac0a30", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec5ad78-aa5e-4291-9115-f080f9a7a174", "sighting_of_ref": "indicator--a898859c-32f1-45a5-8f1d-a3cce07f8508", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061a1077-142a-4e8a-8845-d532991567e8", "sighting_of_ref": "indicator--a898859c-32f1-45a5-8f1d-a3cce07f8508", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f08d8f-bec4-4238-93d6-a63967fcca1c", "sighting_of_ref": "indicator--cd60c657-8ce0-4246-8ebb-14f047694f1a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9245479-7141-4f65-bde8-5c2ed4fc64d9", "sighting_of_ref": "indicator--49f6b6b0-696f-447b-9615-7343d8bf3796", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf1439f-48e8-4b04-81c5-9c7d237f32b3", "sighting_of_ref": "indicator--dcbeca9c-7ada-4d26-98e6-29a6beeff514", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d552ec15-2c54-4083-9afe-7e4e533e0089", "sighting_of_ref": "indicator--dcbeca9c-7ada-4d26-98e6-29a6beeff514", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1c9326-2c94-4445-b584-86d0bae82191", "sighting_of_ref": "indicator--34a70436-d8ae-4a98-967a-699801bb8622", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7a9b2f-a19a-4de8-9891-b3885ea421d7", "sighting_of_ref": "indicator--0088a4f8-4746-4d57-8d7a-c2c413eaeca2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e8c9ad-fc2e-4f0d-be9b-6a7ab701a3d6", "sighting_of_ref": "indicator--855c26d6-9682-48b4-9f47-68b7cb70f776", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a55d9d-74bf-4cb6-a518-c0d9eeb28dae", "sighting_of_ref": "indicator--855c26d6-9682-48b4-9f47-68b7cb70f776", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76870664-131e-4c3b-b948-91ab8192cd1c", "sighting_of_ref": "indicator--1aff6839-3460-4335-8277-9f6b36580930", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda2df89-43c2-4090-b15a-3656968db4b6", "sighting_of_ref": "indicator--1aff6839-3460-4335-8277-9f6b36580930", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98bd65af-dc88-45d1-a315-28bb3837d999", "sighting_of_ref": "indicator--c2a3471f-ff0b-4bc5-9904-e81c22fce838", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7390a3b8-43af-4555-a83a-f3b695c69be2", "sighting_of_ref": "indicator--c2a3471f-ff0b-4bc5-9904-e81c22fce838", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677b1ed9-e178-4bad-b2e7-78f8ff2ea445", "sighting_of_ref": "indicator--0c3ea9bc-f0a3-4df2-b22f-1c591bc0d432", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73176e02-337d-4b08-84dc-dd60a20713d1", "sighting_of_ref": "indicator--f9f7dc1c-6eac-436c-ba6e-9d15fdf79734", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0f4150-38f1-411e-b993-b15a4667a889", "sighting_of_ref": "indicator--f9f7dc1c-6eac-436c-ba6e-9d15fdf79734", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8247a1-9307-455d-b400-e9f61efd0a5d", "sighting_of_ref": "indicator--4ca07b97-dbef-4426-b24c-2a3b8b39ac52", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798d0cf2-6341-408a-8e2a-8d8645107ca0", "sighting_of_ref": "indicator--4ca07b97-dbef-4426-b24c-2a3b8b39ac52", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4471aadc-d8fb-4a02-b91e-66805ddd858a", "sighting_of_ref": "indicator--4ca07b97-dbef-4426-b24c-2a3b8b39ac52", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea6445b-1394-4435-84f4-abbfb105e087", "sighting_of_ref": "indicator--c7d1e8ad-4388-4f36-845a-70d057d1da33", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47132792-f774-4ad5-8881-685dfda10d01", "sighting_of_ref": "indicator--f81d7012-3695-4373-b1e8-91ae3c473a3f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8433b7fa-742c-4e6a-90e8-8b77746e2a3b", "sighting_of_ref": "indicator--f81d7012-3695-4373-b1e8-91ae3c473a3f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9224fe7-59c8-4456-9e0a-59f7c4744a85", "sighting_of_ref": "indicator--5e293f30-7334-43bf-96ba-7510279f15b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede55bea-85e0-49bd-a618-95860f669541", "sighting_of_ref": "indicator--5e293f30-7334-43bf-96ba-7510279f15b0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f67fe6-3d85-4648-8635-e7975ce553fb", "sighting_of_ref": "indicator--a486598c-3ed1-4984-9ed4-b409742a0601", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ae7014-d8ca-4de9-b381-572d0032920f", "sighting_of_ref": "indicator--a486598c-3ed1-4984-9ed4-b409742a0601", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e21ba88-3618-4a35-bf16-33d8e8fc3119", "sighting_of_ref": "indicator--811fda90-db2d-4e2e-ac22-f414a9638ff9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b522864-6e6a-42fc-970e-8a45d6ff0867", "sighting_of_ref": "indicator--18042159-a612-41a7-981a-2b68fad70b23", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a152482-0658-426a-a5fb-c43cf462e84d", "sighting_of_ref": "indicator--18042159-a612-41a7-981a-2b68fad70b23", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1305af-2f41-48a5-bd6e-3162ad6c3d77", "sighting_of_ref": "indicator--18042159-a612-41a7-981a-2b68fad70b23", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ababca7c-1f9f-4111-87d8-a5f47d4837aa", "sighting_of_ref": "indicator--5ba824b8-de1e-4262-ad46-8694661397de", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3183f3a5-39c8-47ed-aa04-ea674ac0f10e", "sighting_of_ref": "indicator--5ba824b8-de1e-4262-ad46-8694661397de", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad09b17-d79f-4599-b1c4-f075c9bf4cc5", "sighting_of_ref": "indicator--4420bc6b-ed6b-4d5c-9c60-d2674a2cf1f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e237017e-190b-4f92-8f73-faecee9e0467", "sighting_of_ref": "indicator--4420bc6b-ed6b-4d5c-9c60-d2674a2cf1f8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52b5c9d-22e1-49c0-b276-fffdd4e38cf0", "sighting_of_ref": "indicator--afc02096-874b-4b0f-9679-e8bf00626674", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4464d06b-ee47-42b4-b5c3-5160bbde4d07", "sighting_of_ref": "indicator--a86913e1-a096-4de2-ba85-a5ca1338abb2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d6c3c9-9dcd-453f-978a-4a94efe8aba1", "sighting_of_ref": "indicator--176ef8c0-5eb7-4cd2-93cf-c66cddefcb27", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a7f74a-e72e-4d29-b0ea-1a21d7732b7d", "sighting_of_ref": "indicator--e2f0956e-6a48-4a3f-981b-8faceaf59382", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4540251e-4524-41d5-84ed-76df70a68214", "sighting_of_ref": "indicator--4fe8bbe8-ae9e-48af-bb05-19f625273b46", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed382205-00d5-4b34-8d44-35c0f23110dc", "sighting_of_ref": "indicator--343da24c-0066-44b8-a370-9d996c0fd6fe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01340c86-6128-4e23-a33f-eac03775adcc", "sighting_of_ref": "indicator--343da24c-0066-44b8-a370-9d996c0fd6fe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d3abcf-0bc5-4ad5-9194-ecf0362ed614", "sighting_of_ref": "indicator--48ed7154-14dd-4f27-b9d5-a2ec3721a964", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f955796-bd86-45d3-9e6b-63e4c42fcbfc", "sighting_of_ref": "indicator--25e26f9a-cd41-4ffb-bab8-8b893b619fa1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0276ebfa-0e31-42f2-b107-dd6cf37dff14", "sighting_of_ref": "indicator--b02c9d20-0009-4da4-b812-c50ea6394f2b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef7f791-0462-416f-a0e9-cfbca1b511cc", "sighting_of_ref": "indicator--cc01063c-400b-4d17-b221-ac7deefd9c7d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722c1d6f-60e0-4bc5-b3a4-421e680919e8", "sighting_of_ref": "indicator--4cf14872-95b2-4557-b3e0-0824ff31b8e5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b158d100-7b85-4c66-8230-9ef1d1a9516a", "sighting_of_ref": "indicator--49d21654-4bfc-4efc-98e6-96f7b96530a2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bf5eb2-70c6-4f77-8e9a-c0c47a1f467c", "sighting_of_ref": "indicator--49d21654-4bfc-4efc-98e6-96f7b96530a2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6883d68c-ca73-4dcc-b57c-98602e952e3e", "sighting_of_ref": "indicator--2fc246d5-cf3c-4c1b-97ac-412bce25eaa3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc419b9-a27a-4f3f-b899-2b0c72149219", "sighting_of_ref": "indicator--2fc246d5-cf3c-4c1b-97ac-412bce25eaa3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e1e9e6-d032-4728-9084-e1d9a364fe7b", "sighting_of_ref": "indicator--2fc246d5-cf3c-4c1b-97ac-412bce25eaa3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1515a0d-74c0-4fb0-bae9-44f6cb1b4345", "sighting_of_ref": "indicator--1f4510d9-6139-477d-9439-0ae6a3dc7df9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de21d566-ddc8-4706-9571-16af1825485c", "sighting_of_ref": "indicator--1f4510d9-6139-477d-9439-0ae6a3dc7df9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3b85c7-ba9c-4d81-8313-5addb7d3fd16", "sighting_of_ref": "indicator--fa1c2210-9cef-4044-ac63-980c4cea7114", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026dc650-397d-4db6-a50d-f78b4733f767", "sighting_of_ref": "indicator--14018bc8-3df2-4e4a-b3f7-94d31f8a4f63", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbe8739-03a3-4b2c-aad1-57ce1f236d03", "sighting_of_ref": "indicator--2bb83c15-5352-4f71-894f-53c2ea91d0e2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7099ac7d-a4f7-4ef6-9e71-e10cfd2f5e72", "sighting_of_ref": "indicator--2bb83c15-5352-4f71-894f-53c2ea91d0e2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1a3e0a-c32e-4454-a512-de0f1451b6ae", "sighting_of_ref": "indicator--1f54a6e9-08be-477c-a243-d9b417465c43", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e244a1-a0b2-4fd2-80d1-3a2fa8090c88", "sighting_of_ref": "indicator--c51c78b8-cb5e-489c-8c2e-de78946259dc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2c1eaa-dd32-4157-afda-b255dad23b5f", "sighting_of_ref": "indicator--c51c78b8-cb5e-489c-8c2e-de78946259dc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a89dc9-b01e-41d4-aa3c-205a453d189b", "sighting_of_ref": "indicator--d93d9749-1c39-4eb7-a36b-a8dc5572c92f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad21cbb-f03f-4c89-8148-d306eedc80ba", "sighting_of_ref": "indicator--94022a26-f13f-4cc2-9ea4-eef8a7f88f49", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc638e92-6b86-4f3b-a673-b7e6d10ab4eb", "sighting_of_ref": "indicator--ce5f7616-0b6c-4587-a5da-139d0dad50b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3818bd03-9854-4db3-807b-035b471a03b5", "sighting_of_ref": "indicator--ce5f7616-0b6c-4587-a5da-139d0dad50b0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c045b5a-744f-4321-b737-f16f6300c0a5", "sighting_of_ref": "indicator--7544f1da-0ea4-4e82-94dd-c9fd58c56cdb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bcaa2c0-f44e-4819-b85d-24ed3f1a4831", "sighting_of_ref": "indicator--821b8a72-fef4-4426-9618-afe27974ba75", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ecc5b1-a244-4802-8e6e-dd04ce47bebe", "sighting_of_ref": "indicator--821b8a72-fef4-4426-9618-afe27974ba75", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea598ac6-4574-486c-8749-df8d56267442", "sighting_of_ref": "indicator--2ad98035-87d8-4da4-bc0e-9814d210c4fe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba983fa2-5685-4b25-a8cc-065ed43fc9ae", "sighting_of_ref": "indicator--58fbe7f1-6080-4f51-b31a-c19186ee549a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625f9278-44c4-49b3-b2e4-608b25e2b6bc", "sighting_of_ref": "indicator--9a49fe7b-e66a-45cc-956d-db3bcce5cb1e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229792a9-535b-438c-8392-669d03161ebd", "sighting_of_ref": "indicator--9a49fe7b-e66a-45cc-956d-db3bcce5cb1e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b432c1-3cd1-4caa-b3a0-8c7512e5a22f", "sighting_of_ref": "indicator--a42566cc-1084-413f-bdbf-e48a1d8b1862", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00337153-e630-419a-907f-822642b2c888", "sighting_of_ref": "indicator--a42566cc-1084-413f-bdbf-e48a1d8b1862", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9ed4e6-d5c5-4260-8b0b-76c338e2b5e1", "sighting_of_ref": "indicator--dbb72eb3-a2df-4fa5-a3e0-56720def5187", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d380e856-1854-4c68-a36e-0283ca165e42", "sighting_of_ref": "indicator--dbb72eb3-a2df-4fa5-a3e0-56720def5187", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dae0a3c-e01c-466d-85c0-c260930e781d", "sighting_of_ref": "indicator--08cf089b-5eee-469f-a077-aa990755e50b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e55c49e-ce98-4a8d-ac4d-f969c375d065", "sighting_of_ref": "indicator--08cf089b-5eee-469f-a077-aa990755e50b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be52c0b-3c2b-4c0c-b573-12670d5e1f9d", "sighting_of_ref": "indicator--9b6f9a7e-fca8-4c0e-85b9-6b704723523d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd135fb-c0fe-45d9-9490-7b7469efa9be", "sighting_of_ref": "indicator--c72d1507-bb8e-4b2c-89ab-5889f5c33bc6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd3b21a-8d11-47d9-9d33-fde0cd812567", "sighting_of_ref": "indicator--0e3e7cb0-69ab-4a5e-aec6-1d7bf396126a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d98944d-b922-43b7-a3dd-e2ad1e0fc98a", "sighting_of_ref": "indicator--0e3e7cb0-69ab-4a5e-aec6-1d7bf396126a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e467e7a-62c3-4759-bb17-c8caa29c00fb", "sighting_of_ref": "indicator--425b0b1a-fafe-40dd-ae7f-1ef78eac236c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f36158-f641-4731-bb69-c5ddacda4375", "sighting_of_ref": "indicator--425b0b1a-fafe-40dd-ae7f-1ef78eac236c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab4ba4f-4ba5-4785-9524-9c53c4855a76", "sighting_of_ref": "indicator--841d64bf-4f55-4b2b-97be-3dfa1eb7294b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14c5be5-d908-4277-a6f5-e8d88efac752", "sighting_of_ref": "indicator--d128ed65-898f-42e9-b5ac-ed2de7ec345d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb78c150-5095-4980-b16f-a98003eae867", "sighting_of_ref": "indicator--d128ed65-898f-42e9-b5ac-ed2de7ec345d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9244e7b5-73c1-4e6e-b088-a3b4c26fe90c", "sighting_of_ref": "indicator--0e837f5d-70c1-41b3-9548-3474e95cc6f3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924f4675-b661-4b69-9dcb-dbe1e24eac36", "sighting_of_ref": "indicator--c541072b-09a6-4ec2-99cc-953232986788", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937ca266-6cf3-4bb4-bd8e-124bbe2254f9", "sighting_of_ref": "indicator--2080c0fa-f3cd-4259-83f8-eed9c15e3dac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49143aaf-e4c7-4504-afe2-a692bcd85890", "sighting_of_ref": "indicator--0ebb8845-4599-41fc-af8c-991415daa0d4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87fd63b-f706-4553-94ec-8c9e82e7b2b9", "sighting_of_ref": "indicator--7783534f-9d75-4973-94d7-87570f24221c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eed6fbf-1946-4f10-a002-3515b12a77fd", "sighting_of_ref": "indicator--71fe1829-e133-4bf9-a644-4d7e9b60cbfe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4048a1-ec08-44c4-a0fd-21b1c138da83", "sighting_of_ref": "indicator--9422948e-86f6-4e5c-bc01-666a2eece3ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b501063-755a-4d6a-a708-97bd4b168a2d", "sighting_of_ref": "indicator--2957a1d7-8d48-4b3b-9ce9-ade0afeb45ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248f59c2-6dca-4fb3-afff-05138ddccf11", "sighting_of_ref": "indicator--d159075f-e702-4623-a96b-48797ff9773c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfe80a0-bfc7-4979-a62d-ec2f6796eb4a", "sighting_of_ref": "indicator--55e50d81-3a10-42c5-a89f-96918e402ffd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8d05be-ba20-4ebb-acf8-3800d6788db8", "sighting_of_ref": "indicator--2cf4b344-3418-4013-9118-790b20aa4ec4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bdba57-af91-4397-940f-053c3986b251", "sighting_of_ref": "indicator--ac430321-09ea-437b-a535-91a076b88274", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347904b0-c1ce-4e39-8e2f-661bfe788201", "sighting_of_ref": "indicator--ac430321-09ea-437b-a535-91a076b88274", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dead5613-f40d-463d-891b-41b36d428b38", "sighting_of_ref": "indicator--71bfffdd-a9f2-42cb-875d-16d672cca7ac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cd3bb0-a5f0-46a9-a82e-a01f1cba5d5c", "sighting_of_ref": "indicator--3dfa4c7f-0ff8-4f1c-b6d9-f8afc23cfad4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b9f5e3-be98-4ac4-ad66-ee3ad4ca7c25", "sighting_of_ref": "indicator--3dfa4c7f-0ff8-4f1c-b6d9-f8afc23cfad4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4bd679-9ce9-4de1-9098-bf79ad257189", "sighting_of_ref": "indicator--d3f4011d-6c87-404b-8a52-62cc9bea6015", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d09810-6154-46a2-8c7c-45634f47f5ed", "sighting_of_ref": "indicator--f14b3687-d45a-418b-bacd-8c598654201a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a18a3a6-0ce5-4176-9b3a-ee8bab78cb1c", "sighting_of_ref": "indicator--4d4ba95e-dfb9-4380-ab8a-64fee9c1587a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02905869-bd30-4f22-8c9e-0a87c87e25f3", "sighting_of_ref": "indicator--591e05c2-0118-4a26-bdeb-01ff9f34df45", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e86f0d-bc1f-4aee-a52e-cc40f4257d74", "sighting_of_ref": "indicator--591e05c2-0118-4a26-bdeb-01ff9f34df45", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e803c22d-5679-46f2-b415-c33fdcdccba8", "sighting_of_ref": "indicator--f87d3823-2540-4671-90be-accb7203bd7b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8d509e-85eb-4902-96ab-1fb302508a64", "sighting_of_ref": "indicator--3c47bb9a-32fa-49ad-938b-cf0dbf79eb2f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697713cd-cc34-4805-92b1-f99e3b74a6d1", "sighting_of_ref": "indicator--f70d86f9-70ce-4b52-9fb4-b26967b2f1c1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bef614-545a-49f8-bb4d-430481aa8878", "sighting_of_ref": "indicator--f70d86f9-70ce-4b52-9fb4-b26967b2f1c1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6ad36e-f63a-4f5c-93f3-1945fdd97c0d", "sighting_of_ref": "indicator--e8eb748c-46e0-4b15-9d54-ad734d865f44", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f57d10-fb8c-4932-8be8-19df358be107", "sighting_of_ref": "indicator--e6d40805-44b0-4445-af62-389c07c35cb9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bb8b95-c2ff-4877-8e55-4a9e19b311c2", "sighting_of_ref": "indicator--e6d40805-44b0-4445-af62-389c07c35cb9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2741b9-b1bf-4712-bbe5-043b359a7a12", "sighting_of_ref": "indicator--e6d40805-44b0-4445-af62-389c07c35cb9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a018c71f-8171-40e7-9fdd-00771a34c9b5", "sighting_of_ref": "indicator--bcbc41e3-f6d8-414e-9e69-dc0ab4b4bf80", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6b1425-9730-4cba-a9ee-1f1fcba52828", "sighting_of_ref": "indicator--bcbc41e3-f6d8-414e-9e69-dc0ab4b4bf80", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed9dc92-078a-4fcd-9c14-a545225fea42", "sighting_of_ref": "indicator--bcbc41e3-f6d8-414e-9e69-dc0ab4b4bf80", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62dd562-38e9-4e8f-9084-fa447bc8ad71", "sighting_of_ref": "indicator--00c769f5-8a93-4199-aa60-f1282d10e0b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e73ddb-92d7-4cbd-bc88-01584e36b7d3", "sighting_of_ref": "indicator--bc55f4fb-3270-4bc6-9e7e-3814d4906d55", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f19428-4527-4c16-afe3-033bf8dfb2a8", "sighting_of_ref": "indicator--bc55f4fb-3270-4bc6-9e7e-3814d4906d55", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe844d1-9ec6-4009-ab29-f18fd6fab2e6", "sighting_of_ref": "indicator--c90fa3e8-9f3b-4283-a106-e9ff90b84d51", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34c3205-c5b5-41c0-8e22-f0840c6d4c5f", "sighting_of_ref": "indicator--514e6d5b-8bf0-4120-891a-3bd78d2fa6be", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c58681-fcdd-4889-b9a0-e1b08f2b4b9c", "sighting_of_ref": "indicator--8e0c690f-ec10-4fec-a87a-6ef5fbf88c2c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d0abdd-6dc9-4da6-b0cd-944ddb8afef4", "sighting_of_ref": "indicator--c0c9239f-74ce-4482-9c33-dce763947f7a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae585d43-dd29-418b-922c-2d674f2cd5d4", "sighting_of_ref": "indicator--546b646f-ee6e-4bbb-a169-04b56cb35999", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918c5ee9-b403-44d6-bfc7-8fe965a5447c", "sighting_of_ref": "indicator--546b646f-ee6e-4bbb-a169-04b56cb35999", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80a3006-44d1-4bdc-9312-fabe448b4aa1", "sighting_of_ref": "indicator--1c34fadb-e7ab-476c-991d-ce7a2d824b50", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba9833b-3408-41bf-a6c4-e2ca912fbb2d", "sighting_of_ref": "indicator--ef749e4d-e3dd-43a4-8566-bbfa616a77f4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be26874-a635-4ab6-b70b-3a8dfe70163d", "sighting_of_ref": "indicator--25886636-1072-4577-aeb4-e20137863144", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6b23df-329e-4d23-b486-5e0cf3e2155d", "sighting_of_ref": "indicator--acc263ed-23ab-405d-ae31-d0aac9db2019", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ec47de-4253-4f9d-8d6a-110d1bcc5e13", "sighting_of_ref": "indicator--acc263ed-23ab-405d-ae31-d0aac9db2019", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a97306-8b15-4a7b-b232-74cf9528f549", "sighting_of_ref": "indicator--acc263ed-23ab-405d-ae31-d0aac9db2019", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2191dffa-c610-4a2f-89ff-2f578ea11616", "sighting_of_ref": "indicator--cd2d6958-9d06-4b4b-b21f-f5b1be9d6dc5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fa17b3-5d88-4441-8f6d-d350e53282d4", "sighting_of_ref": "indicator--c3122812-d4ab-455a-b679-890858df3a40", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ad9108-1ab9-445f-9264-31ff2ea85390", "sighting_of_ref": "indicator--1ac78594-94f6-4d17-b62e-3ae2657d8633", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5384559-3e2f-4ff6-8851-2ad42bcb6046", "sighting_of_ref": "indicator--1ac78594-94f6-4d17-b62e-3ae2657d8633", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ad71ee-e012-41cf-896e-909ead26db15", "sighting_of_ref": "indicator--1ac78594-94f6-4d17-b62e-3ae2657d8633", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31bf3f0-9fde-4c78-84c3-cc189ec92cf6", "sighting_of_ref": "indicator--0348c7dd-7b81-42f5-90ec-b56a383fb761", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacca189-7d69-475d-b826-040a5d703dfa", "sighting_of_ref": "indicator--0348c7dd-7b81-42f5-90ec-b56a383fb761", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6045d2-3225-45dd-a8f3-425a24591378", "sighting_of_ref": "indicator--0348c7dd-7b81-42f5-90ec-b56a383fb761", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d631a6f1-5de8-4f66-b78f-cdef4a0ddd01", "sighting_of_ref": "indicator--c64a7ad9-b6e3-4497-9845-9a4fb4ab645b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5623a6c-32ab-4e29-a9d0-88a3d983b8e6", "sighting_of_ref": "indicator--76e444ba-3cbc-4c2d-9446-f22bea8410cc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bd27c1-5a13-4c0d-9379-732fbd7ef5b6", "sighting_of_ref": "indicator--76e444ba-3cbc-4c2d-9446-f22bea8410cc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d61b3ca-e45f-4b4f-b107-98aae2f4dc5c", "sighting_of_ref": "indicator--86dbc65d-1273-42f1-b39e-32ff3ab44707", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da502b3e-8b95-4f97-8a85-f7c2f9e1f02b", "sighting_of_ref": "indicator--86dbc65d-1273-42f1-b39e-32ff3ab44707", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051dcb1a-2136-4bcc-a00f-267c386a9d1a", "sighting_of_ref": "indicator--a94b3b12-06ab-4d7d-a2ba-a9043be2b29a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3544c89-b9d7-4460-8c36-dc9062181087", "sighting_of_ref": "indicator--ae83f5e9-7877-46a4-a81b-d13bde10a8a9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3477cd8f-88f2-4bb1-a643-90f34be9adff", "sighting_of_ref": "indicator--ae83f5e9-7877-46a4-a81b-d13bde10a8a9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f54b17-9f9b-4953-b080-55431bd847ef", "sighting_of_ref": "indicator--bc9ba38b-3916-4831-a8e7-5e0bac844ba9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51440f71-abcc-4275-a5e6-9a51b16bcf78", "sighting_of_ref": "indicator--bc9ba38b-3916-4831-a8e7-5e0bac844ba9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a752b0-1bd0-4814-a3cb-99308dec6a84", "sighting_of_ref": "indicator--34ffa2ee-ba66-446e-a18e-206541a56c40", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d6abce-e914-4a1e-942a-21d9a2ebfb0c", "sighting_of_ref": "indicator--34ffa2ee-ba66-446e-a18e-206541a56c40", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0292254b-2410-43b7-80fa-48f8076971d9", "sighting_of_ref": "indicator--013376af-6727-4d0a-a978-134278a3aa7e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263a1a26-9f5c-4ff4-bf62-28f28c4168da", "sighting_of_ref": "indicator--95228fa2-9d4c-4703-a546-1f8fada3f697", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48905a4b-f8fa-42a8-aee3-ce68e3ae9ff7", "sighting_of_ref": "indicator--95228fa2-9d4c-4703-a546-1f8fada3f697", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2fddfe-46f0-473d-81e4-a7a273ad2a4d", "sighting_of_ref": "indicator--8efdb938-769c-4302-9533-0ef9bec6eed5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d711f4f7-f7b9-4685-aea8-38f507829d8e", "sighting_of_ref": "indicator--ff174178-4ca0-43f2-b668-e55da47702e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe43dbe7-16c3-426e-9a1d-de26c5a7283e", "sighting_of_ref": "indicator--ff174178-4ca0-43f2-b668-e55da47702e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbb30ea-c633-424d-beeb-1be10ad86cf8", "sighting_of_ref": "indicator--ff174178-4ca0-43f2-b668-e55da47702e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638b208d-85ec-4557-a036-dd9f9801ae84", "sighting_of_ref": "indicator--99fc8746-c8c5-4935-afdd-0a7f15b80588", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2d48e1-b7b3-4783-8b3d-8e015207c134", "sighting_of_ref": "indicator--88b17ad3-2830-4278-a4bf-9649249e4284", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4005bf-d7bc-41f2-a5aa-21572d6078e5", "sighting_of_ref": "indicator--e0f48bf6-d1e4-44d8-a4e0-a11ed33679ec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab09da7-2186-428c-8fa5-2ae66ea71168", "sighting_of_ref": "indicator--914c4c39-200f-4bc2-b9d1-19dbafa2cac8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797bca17-a8a7-41c5-aad8-db25b13d3284", "sighting_of_ref": "indicator--914c4c39-200f-4bc2-b9d1-19dbafa2cac8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ebbcf7-b317-4fd3-ae24-65f024f04d74", "sighting_of_ref": "indicator--914c4c39-200f-4bc2-b9d1-19dbafa2cac8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b90327e-f33e-4700-8a11-a2358ca1f127", "sighting_of_ref": "indicator--269e3f37-45fc-4281-bd75-99eb4df9a2f3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a93076-e0b2-43f7-9f60-b858d9061cd0", "sighting_of_ref": "indicator--269e3f37-45fc-4281-bd75-99eb4df9a2f3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4d0fe5-d9e4-4af9-a6c5-d79a1ba61830", "sighting_of_ref": "indicator--bd60a11e-d7bb-4648-8715-818fd9d81ca1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbcdf4a-ed1d-45a8-af10-694b032bd0d1", "sighting_of_ref": "indicator--2471d5d8-7f5f-4407-95a8-116a5fa33e5a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398da822-e93a-4725-8d34-2e110fdc6293", "sighting_of_ref": "indicator--41b59e93-ea18-4026-bf80-06a6f6d662bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357ec1d0-ccd8-4927-b7f0-6714a3b0c1f3", "sighting_of_ref": "indicator--41b59e93-ea18-4026-bf80-06a6f6d662bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f539fd0-65c4-44de-a63a-118943a8c5c8", "sighting_of_ref": "indicator--eb3d44fd-83ca-4ba6-8614-93728bb4879f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e110d3b-27bf-4e3f-853d-fdcab21b1dd5", "sighting_of_ref": "indicator--9eadc629-e991-4121-8567-1883d2101e07", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061453f4-13ef-4ce5-a8f9-44beb25ecfd6", "sighting_of_ref": "indicator--dbc10c1e-6c0e-438e-b27a-fd7cf7bcd084", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8238240-9277-476a-a2f3-f713fdf0cdb5", "sighting_of_ref": "indicator--5ff1e902-47b9-47da-94a4-4f9ee83ba642", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fde2fa7-6e5f-465f-8467-85f809caed85", "sighting_of_ref": "indicator--5ff1e902-47b9-47da-94a4-4f9ee83ba642", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0199195-dc8a-4e8d-8821-3412ed72a339", "sighting_of_ref": "indicator--c7df5692-aa38-47e6-b6dd-ca3badd428ec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbc189b-660d-4b86-84bc-dc4ed5a3e9c5", "sighting_of_ref": "indicator--c7df5692-aa38-47e6-b6dd-ca3badd428ec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a2ec5e-abca-4831-b300-37a1acdaeb57", "sighting_of_ref": "indicator--6935babb-ea50-4da3-a1ca-c8942422f28f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225dc810-edef-4c1f-a44b-fe7072ac3d20", "sighting_of_ref": "indicator--6935babb-ea50-4da3-a1ca-c8942422f28f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9de12a-c6ae-4560-ab77-167db4925321", "sighting_of_ref": "indicator--18ac531d-a01f-4c8e-b262-fa01218a2a95", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222c091c-a75c-4510-9f8b-0322b38738bb", "sighting_of_ref": "indicator--18ac531d-a01f-4c8e-b262-fa01218a2a95", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96875e04-4976-463b-925a-1a5b3898cb82", "sighting_of_ref": "indicator--ebc354ef-079f-4fbe-9229-a2db8e8292e3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b119ba62-b3f9-4385-93d5-cb7d9741de34", "sighting_of_ref": "indicator--8d431560-8bc5-460b-a7ac-32e640387971", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a062fcc-1c80-45fb-b2d9-9f3f624361df", "sighting_of_ref": "indicator--01de35c1-d99b-4f15-86ac-14f0b52e7572", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5970914b-26d1-45b0-b8db-40bcc9a77798", "sighting_of_ref": "indicator--9ca4aaea-c16b-4cde-8d91-2930e2fd229b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2d764e-37bb-4299-921b-75d080f0df76", "sighting_of_ref": "indicator--e7a7991c-edc2-4b67-8ff7-fd8c2a250791", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ec5fe0-32b0-4562-b790-99cc7cbc1a75", "sighting_of_ref": "indicator--e7a7991c-edc2-4b67-8ff7-fd8c2a250791", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511f46ea-640d-4a7b-ae4f-a2bb3290fbbe", "sighting_of_ref": "indicator--8d93b563-2468-421c-8c28-133c6c56da43", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b034431-2a8b-4433-8b78-11ab49214f31", "sighting_of_ref": "indicator--00075a1b-8764-4f5d-a7e5-9538612185c1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb81b44c-533c-437b-b601-11391561370e", "sighting_of_ref": "indicator--00075a1b-8764-4f5d-a7e5-9538612185c1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291380de-00c1-4d70-a88b-6d4ee07a03ab", "sighting_of_ref": "indicator--b945b34a-9e00-41fc-bae5-c80814c20286", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875915ca-cca3-4ee1-b9e5-5184a45606e1", "sighting_of_ref": "indicator--bce2975d-711f-4a61-b4c9-0715975cee2a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8425573c-bff8-4d77-be52-59724fa176b2", "sighting_of_ref": "indicator--bce2975d-711f-4a61-b4c9-0715975cee2a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7165fad8-cd09-4288-8eee-4a7596888228", "sighting_of_ref": "indicator--34329f36-ddf0-4a3f-a6b1-2080d874b8ed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a200bf-5ef2-4e91-9942-83a80d45cd09", "sighting_of_ref": "indicator--34329f36-ddf0-4a3f-a6b1-2080d874b8ed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337cad57-8418-412f-8d19-4a06f291231e", "sighting_of_ref": "indicator--34329f36-ddf0-4a3f-a6b1-2080d874b8ed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896969a5-27ec-4fce-9e17-4e17ef2bec5a", "sighting_of_ref": "indicator--88729b02-2684-4bb0-8ec8-ed4bfb861971", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf846a25-f9b3-4772-ac67-10ba25916044", "sighting_of_ref": "indicator--93b38e4c-3647-4e8a-b1dd-d952a676dacb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6f8aad-1c63-4aa5-89e7-fe370410b951", "sighting_of_ref": "indicator--cb799f7f-bcc1-48d2-aa8b-796d0d9cf45b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfa971d-a578-4073-913f-0b5546172a06", "sighting_of_ref": "indicator--a3457845-01dc-4c22-b448-6619bff16288", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6475fe43-48c0-48cf-8f06-c396271a668c", "sighting_of_ref": "indicator--d0084ac7-1f4c-403f-87f7-a4577eb783b7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937af50e-44ab-40ca-9ba1-c4b5c7b01cb9", "sighting_of_ref": "indicator--2f356406-1d19-4f64-85d3-a26576289352", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7464522-7113-4372-93a8-b0e089de0d14", "sighting_of_ref": "indicator--be90095f-88c1-4707-a5ac-a9d2b3018c94", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19998ed-b020-40a9-b6e6-35dcb35e2dbe", "sighting_of_ref": "indicator--b6827fa2-e02d-4f42-91fa-f923e91a3568", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d08f4aa-616d-467d-8107-c62c6173f8b4", "sighting_of_ref": "indicator--b6827fa2-e02d-4f42-91fa-f923e91a3568", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb0952c-db0b-4c03-87b2-62f6b23471a2", "sighting_of_ref": "indicator--13101242-c8f1-4599-9ca3-e3a20bdea6ee", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f7d96e-9d9a-4bee-a9e0-e716d9763a2b", "sighting_of_ref": "indicator--81f78b87-9b04-4480-8b6a-6f2a401761d1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653d906c-d7f6-467f-a339-7772c126732c", "sighting_of_ref": "indicator--656dd607-97c9-46db-b1a3-1b85ab253048", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beeeea39-a315-444d-b084-e37c17a05194", "sighting_of_ref": "indicator--2aa331eb-12b8-4d2a-bbc2-33ad97e8fa86", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c90808-0347-4433-aa52-cc8b55d33683", "sighting_of_ref": "indicator--26013c60-85fd-41f2-9c8f-9c1243e5b7e3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0a88fe-85c0-416b-8c80-39e2b18b6740", "sighting_of_ref": "indicator--88292789-b90a-4cc8-a42d-be0459bb7377", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5e18f3-9a26-4393-8225-393e8ed32f17", "sighting_of_ref": "indicator--88292789-b90a-4cc8-a42d-be0459bb7377", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abae2aeb-d15d-43b3-90e1-cbfade40a121", "sighting_of_ref": "indicator--1f30bc38-c35d-4761-9cc1-9c9c70b83f2c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7062e210-870f-49b4-a658-6127319c7a85", "sighting_of_ref": "indicator--1f30bc38-c35d-4761-9cc1-9c9c70b83f2c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca34f9e-bffe-4530-a513-6516deaee7a1", "sighting_of_ref": "indicator--b699f566-e4bf-4895-8548-d2c73f68e2af", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac970c0-2237-415e-9010-12eb579a9a18", "sighting_of_ref": "indicator--9fa3451d-0b1f-4aa3-b0d7-8f435beb6863", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0dcbfa-edae-4ced-8811-a13eb9da277c", "sighting_of_ref": "indicator--cfc4145e-426b-4065-b86a-ddc3e9283161", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb75117-5bec-4b8c-b9ea-7c699cb6c72a", "sighting_of_ref": "indicator--5c0efb82-d54f-4472-a9db-e0f38021ee21", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605fb48f-950b-44ef-bdaa-1ec56da52dba", "sighting_of_ref": "indicator--74b9119f-f02f-4272-8fcf-574d87ea8336", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87aaac7-1571-46d7-b84f-3af4f0b4ff84", "sighting_of_ref": "indicator--fbfc62a0-0327-4990-a7f9-6d3b90fabce7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3ad5ed-4c1b-4fa8-83d0-210de6dc6516", "sighting_of_ref": "indicator--0c42e353-0b90-4b23-9686-ada044e908b4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e4c735-b38e-43ae-8781-f4170cd75321", "sighting_of_ref": "indicator--c320e51b-f56d-4cd5-bd89-35711bc9e92b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb35abbc-ee16-45fb-aefc-121f62e355ae", "sighting_of_ref": "indicator--c320e51b-f56d-4cd5-bd89-35711bc9e92b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35692316-05cc-4052-98d9-b56b8440e612", "sighting_of_ref": "indicator--c320e51b-f56d-4cd5-bd89-35711bc9e92b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfb6660-1e8a-4404-bcde-826bdb557e2c", "sighting_of_ref": "indicator--6fcb06ce-f2b9-46b8-823d-ad1d95d98c02", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88814acf-c204-47b7-be32-b3834e14b379", "sighting_of_ref": "indicator--d21e323e-be0c-48d3-93e5-b1e600d32370", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2daa7b-a622-4e57-ae27-d18c92d734cd", "sighting_of_ref": "indicator--9618df26-7542-4b43-a2b1-7badb820eeb5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc78259-0da7-4f85-94f4-2f0d25f096a5", "sighting_of_ref": "indicator--c8cc5dc5-10ee-4520-bb5d-b6d1908688e4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14be9287-3a42-40f1-a9c8-a672743e9b7c", "sighting_of_ref": "indicator--33fc1b34-5fd2-4a19-b4f6-1ae325e78b03", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b403b0-19e5-41db-b200-3f32333b920e", "sighting_of_ref": "indicator--52a3cbcb-4a52-4e9a-aef5-f62ea4d212fa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9e4b98-ee29-42d3-9761-1c297f767445", "sighting_of_ref": "indicator--76bdb798-83f7-4a94-a55c-91c6ab2327b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9ff95b-069a-4269-a587-92330ccb86ad", "sighting_of_ref": "indicator--81f54443-d926-4b12-ae0a-c49cec55db17", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4982c7d0-810a-4b87-8ecd-73acb619a882", "sighting_of_ref": "indicator--81f54443-d926-4b12-ae0a-c49cec55db17", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18636a43-3709-4832-a307-543ebb17e309", "sighting_of_ref": "indicator--1be4158a-9de5-4507-be61-623416c17ef1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a68fc7d-69a6-4646-9a66-136d22ba7c93", "sighting_of_ref": "indicator--1be4158a-9de5-4507-be61-623416c17ef1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5541da04-846a-43c6-94bc-8c055612f742", "sighting_of_ref": "indicator--1be4158a-9de5-4507-be61-623416c17ef1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a009b6-4505-4769-b3eb-784ae88d2b25", "sighting_of_ref": "indicator--4c2de12b-f277-4fc5-8985-b184dad93f70", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08055d55-0b9f-4385-a60a-92ffec49a918", "sighting_of_ref": "indicator--4c2de12b-f277-4fc5-8985-b184dad93f70", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3db13cb-f49e-4def-a05e-252d6e882f83", "sighting_of_ref": "indicator--e0c63bbe-7ab9-49b9-90cc-6cd04ed8959f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bebdfe0-909d-4197-bc06-0ed75d577006", "sighting_of_ref": "indicator--e0c63bbe-7ab9-49b9-90cc-6cd04ed8959f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23726e30-52f7-4738-bf66-ee37968d18c3", "sighting_of_ref": "indicator--8a925084-a30d-4b20-af66-8360e7ede239", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5058b91-5452-4e04-867b-a456af7f7132", "sighting_of_ref": "indicator--35d1f55e-0ef8-4c78-8808-a9a9ee503626", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b004d1-856a-4638-a472-093b4c6d354b", "sighting_of_ref": "indicator--35d1f55e-0ef8-4c78-8808-a9a9ee503626", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4277165-0368-4b82-af1c-ffe99c301fb3", "sighting_of_ref": "indicator--35d1f55e-0ef8-4c78-8808-a9a9ee503626", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4f460e-922d-4f09-a14a-f1b0edd13163", "sighting_of_ref": "indicator--6084f512-8a32-4739-bff7-08d466ca3d31", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2008ca24-79bb-45e7-8517-d3498f99538e", "sighting_of_ref": "indicator--b4facdd7-ca56-434c-8d27-77db050421d0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9b39f6-3148-4a7d-939e-e04a94fea6a6", "sighting_of_ref": "indicator--a1d24251-a7ff-458b-b501-a7937977c5e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf36599c-f76c-48e4-b149-bced694120ba", "sighting_of_ref": "indicator--a1d24251-a7ff-458b-b501-a7937977c5e2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4413d03b-29a0-4c6a-ad7e-23b592ba911c", "sighting_of_ref": "indicator--c8ccbd83-6377-4957-bd71-fe3dee1d0df2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac89faa-958d-4140-9773-b9ce9f53fa7a", "sighting_of_ref": "indicator--b67fcaaf-9607-4d47-bed0-7c41834ac5ce", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5524eb24-a007-46fd-85eb-0cd5eb502d94", "sighting_of_ref": "indicator--2ef2895d-f352-4292-99d2-fa7e5117e347", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bde7cb9-9a00-4a1d-9ede-64accb634cd4", "sighting_of_ref": "indicator--2ef2895d-f352-4292-99d2-fa7e5117e347", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4411b0c0-2e83-43f6-81a5-2cd9c6c1f17e", "sighting_of_ref": "indicator--a4f80820-bc1c-4423-ba5a-67aa3ef05cff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10ebad0-1cc0-4e06-b0f0-abc85958767c", "sighting_of_ref": "indicator--16f66812-46ea-4ae0-b762-b06eaf677634", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd70368-e5cd-424b-9324-6f6d15a34162", "sighting_of_ref": "indicator--c9db67d4-3123-4ff6-9e51-5582dbd6a4aa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1827d65d-d144-4662-85e3-2f57493088e2", "sighting_of_ref": "indicator--c9db67d4-3123-4ff6-9e51-5582dbd6a4aa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1a05c8-cb41-4174-9003-9bffafbb2cce", "sighting_of_ref": "indicator--105ee3a1-8172-426f-9125-360a114cfb7e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acfabc5-f984-421f-bd33-b14af5283627", "sighting_of_ref": "indicator--9c388b59-c89d-4028-a43f-fa6c4a87aa80", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492ddfce-a54c-4478-bfcc-d3eb28d54834", "sighting_of_ref": "indicator--08968989-9728-4294-9dba-da45ec95c6db", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fc8f21-c199-44b5-936f-e7964f75114c", "sighting_of_ref": "indicator--c7da3fa3-2e7d-470d-ae9c-2d6200f290f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d3633f-968b-4a8f-ad94-5e203ca99d38", "sighting_of_ref": "indicator--7c5459f2-4895-4100-acb7-9302f9d5fba3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e517cc-47e1-4379-ac1b-02c26d0a16f9", "sighting_of_ref": "indicator--7c5459f2-4895-4100-acb7-9302f9d5fba3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0353a165-0612-4dc8-86fc-0680da5f6c54", "sighting_of_ref": "indicator--34ff6be4-f9df-44e1-b049-09bcd12c6a67", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425f092b-313b-498a-9af6-6bcc4515dc65", "sighting_of_ref": "indicator--e7e1c4dc-c14b-4284-9e4b-effe1205f5ed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b508b6d-b921-428f-840b-312b2c5a888c", "sighting_of_ref": "indicator--55ab5d9d-67b5-495e-b36b-d03eb998642b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9acd00-a3cf-4d1f-acbc-acff160fd8b1", "sighting_of_ref": "indicator--d70d125a-c9a1-410a-9229-d1925feb6ac3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69aa1541-d5f1-4f51-a470-4d64ffc1782f", "sighting_of_ref": "indicator--9323b011-deaa-47b2-bdbd-17b61036c08c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13644c21-ffdb-43e2-8a73-d15a01f7f7a2", "sighting_of_ref": "indicator--9323b011-deaa-47b2-bdbd-17b61036c08c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e287055-d58a-4fc2-8718-18f218f12e51", "sighting_of_ref": "indicator--5db67d79-6453-4ae8-8607-f7608a309787", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de12e5f-7566-45fc-b797-3626ef7f66f0", "sighting_of_ref": "indicator--da1d4017-c5a3-4bef-b7b3-972370ab5e6c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff78c2c4-e4bf-490a-abbf-9002ca36b3fb", "sighting_of_ref": "indicator--da1d4017-c5a3-4bef-b7b3-972370ab5e6c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63214f03-d17f-4f87-91c6-085549e9dd84", "sighting_of_ref": "indicator--8fd1abd4-f322-42a2-9ad0-f55e4792cd72", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c2fcf0-7e80-4c05-b263-b40a374e53cd", "sighting_of_ref": "indicator--a156c2e0-56b2-473a-8dd1-c554554ab9ee", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0386e055-b4c5-4246-bcbc-373096918049", "sighting_of_ref": "indicator--66436dad-7e7e-4ab5-90d2-d4677bafe499", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e4d0c4-8a5b-484c-ac91-cb91d7c8df8b", "sighting_of_ref": "indicator--669db1fb-71b3-476f-85b8-870907e3c2e4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9697b77-ed31-4be2-b37d-0fb41277e155", "sighting_of_ref": "indicator--75dc9abf-d362-4543-bea9-b7da4f8091d9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265934c3-0137-4edf-8969-a3b1176f8a19", "sighting_of_ref": "indicator--bb0f8cc6-3b36-47f8-bfff-fbbc4f950ee7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796ebd22-8605-4c9a-88e3-c15e701df868", "sighting_of_ref": "indicator--c6a11809-f123-47e1-8cff-dd4b8c7600c8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118aa40f-91b8-493c-913e-ff6c8d253a9e", "sighting_of_ref": "indicator--8862d292-b5f2-439c-896a-9153e8690b4f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19942b77-79c5-4778-8e50-e20b6f6c94c4", "sighting_of_ref": "indicator--4bd1c587-9483-4d12-93b7-61c512e720c6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90e5ee7-9241-4e1f-8113-5b4914085ffc", "sighting_of_ref": "indicator--7ff614c5-2a17-4fa0-86ed-ca96a4b07ed5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb568882-b932-4bb0-8ddc-21ec32413a5f", "sighting_of_ref": "indicator--3865bd06-dc81-4fb0-bd2b-bf816441fa53", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec46cdd9-5101-4d2d-a704-6564d1c7afcd", "sighting_of_ref": "indicator--3865bd06-dc81-4fb0-bd2b-bf816441fa53", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbb1ed4-1983-4879-8a8f-0cd65b4a56df", "sighting_of_ref": "indicator--98c23d45-0afb-4199-bfa2-ab0b4da5eea4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd534213-6f08-4714-8cdc-ff551497ea61", "sighting_of_ref": "indicator--2df41093-04b7-49c8-b38e-953155b986d2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6898243a-af4a-4470-92f7-be4bc27d1485", "sighting_of_ref": "indicator--b0000c0f-b87e-4505-8777-2d6dc3d4ce80", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089f6f3f-d43b-4280-93c7-8684784a0ed9", "sighting_of_ref": "indicator--7e32552d-61bb-4fe6-a1f4-eb73bf866295", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721f8e26-3529-4a79-86eb-be28b5f60feb", "sighting_of_ref": "indicator--7e32552d-61bb-4fe6-a1f4-eb73bf866295", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cb476b-2fef-4385-b5a6-17cc664c8b05", "sighting_of_ref": "indicator--aa52ff6e-e68f-4f58-8227-d788311da990", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001a2128-8abe-4d69-a5c9-f94d34ca0590", "sighting_of_ref": "indicator--fe5117af-6ec9-4511-bc25-a67abddcb913", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609f1747-286d-4635-bc8d-891c9cb72a41", "sighting_of_ref": "indicator--fe5117af-6ec9-4511-bc25-a67abddcb913", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb4dfd5-1310-4d7a-9fd4-d2744cd9a3b2", "sighting_of_ref": "indicator--fe5117af-6ec9-4511-bc25-a67abddcb913", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7aceba-76f4-4584-8da0-b698c3c5c70a", "sighting_of_ref": "indicator--f9cb0774-7a54-49b6-91cb-373504c58105", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f888d83-e7c4-44d0-9384-8aa4b78ef4bd", "sighting_of_ref": "indicator--35f93f01-334f-45eb-b771-fb2ee6384bdf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81c2a01-e470-4e6b-a8b7-7117019cc17a", "sighting_of_ref": "indicator--7c97cd36-aee0-405b-b35b-bbaa5028b532", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8a768b-80c4-4b82-9b89-7f013cfa5d32", "sighting_of_ref": "indicator--f446da75-fb35-40ca-a0e0-7303c694c2d8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b998de-343e-46ad-8401-6487829ebf84", "sighting_of_ref": "indicator--b9dcad28-bba7-43c2-83ce-a16d0529fcf1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90554d07-9d06-4638-beaf-94d91b1eb481", "sighting_of_ref": "indicator--377acac3-88d5-4f3c-802a-a4f95beab7bd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a894f4de-f5b2-4d00-9d68-d0dd6af60176", "sighting_of_ref": "indicator--28573035-f254-49b6-a2a5-eef9c1dabbfa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2210bc-121b-4a31-b3c5-e4a984f69d4b", "sighting_of_ref": "indicator--3b27a8c8-447e-419d-a55c-fa9a6d946253", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eaef821-3e88-475c-a36e-9f7471482511", "sighting_of_ref": "indicator--7204f921-b660-4aac-95b0-a0bf522c70ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaec7a93-6f45-4dc4-89c2-d8f80a86b9c1", "sighting_of_ref": "indicator--7d5851b5-20b5-4cd1-b9d4-bf125e6d0e9f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65af208c-258f-44c6-aeed-7151cc624584", "sighting_of_ref": "indicator--d590b3f1-21f6-4730-915b-69f40c6cd898", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926251c1-1187-44e6-a16b-dbfcace489c7", "sighting_of_ref": "indicator--acd444f0-c70d-46d7-9372-e0f643300e2d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbe562f-7e8f-4221-9577-62e06fcc8f3b", "sighting_of_ref": "indicator--acd444f0-c70d-46d7-9372-e0f643300e2d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8ffad6-2503-4141-bed2-21c9fe88dabf", "sighting_of_ref": "indicator--8adfc8b9-5555-4100-a227-e8d3e6b568ec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c4a280-aeb5-429f-bf74-e2e7548477cb", "sighting_of_ref": "indicator--8adfc8b9-5555-4100-a227-e8d3e6b568ec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4877a2e5-1f8d-4440-bcfb-ab629a02017b", "sighting_of_ref": "indicator--8adfc8b9-5555-4100-a227-e8d3e6b568ec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e4576d-80b1-4156-83f3-06007b05e0c0", "sighting_of_ref": "indicator--abfebc01-77ca-4433-8e88-21232ebadbb3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c16ffea-59a5-4115-a43e-714298ed44ea", "sighting_of_ref": "indicator--456af535-7575-4747-b959-bc9f51a4a65e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6e50a1-c1a4-4ae5-95ce-a460ac5f5b08", "sighting_of_ref": "indicator--e0fb0427-23d5-4b3a-8870-445efba4f284", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2f1158-ba05-41fc-9050-4f65ea768834", "sighting_of_ref": "indicator--995b5df5-61fa-4903-928e-64260e201e08", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe28ef4d-dda5-4d41-8b32-097ffb26ad59", "sighting_of_ref": "indicator--eaa1c290-d1d9-47c4-a274-5e5f628df726", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e2cf18-6d9b-4607-8fc4-eb9e2c70a39d", "sighting_of_ref": "indicator--5c02db0d-ccfa-4829-be5f-ac676d8641cb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee0a082-1c0a-4a50-81ee-5fea3f84a778", "sighting_of_ref": "indicator--6e4ea500-be73-4579-aa22-c90891548d85", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b416e919-6c8f-467a-b963-34b94677b197", "sighting_of_ref": "indicator--7c099be2-c75f-4fb4-9174-36b6f68c73ba", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a3477d-8d22-415c-ad6b-1bc2e51a9b15", "sighting_of_ref": "indicator--6a7f8d73-b538-4667-960f-ab4796e91c3b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7269f07a-b491-45bf-aaed-a5e928ea19d5", "sighting_of_ref": "indicator--527b3c8d-73fd-4fd2-b163-ddd4d4779851", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07ed007-e1a6-40f2-bd41-d37827afa661", "sighting_of_ref": "indicator--587c4d97-90b3-4ed3-bf80-32890b0f6df4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958160aa-0789-40f3-ba50-ee928af5841b", "sighting_of_ref": "indicator--a5f7ab2c-d8df-4001-8580-14eca6220713", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c858b8-a667-4d11-a261-531c0615cf87", "sighting_of_ref": "indicator--0ae4c97f-e289-4f6a-a253-14df61f755f7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cc70d0-b5e3-4db4-a878-e2a7b6c6dbe2", "sighting_of_ref": "indicator--2be40c78-c102-46ca-9832-66233b987410", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35abfd54-e48d-416e-9ad0-3081716e6c14", "sighting_of_ref": "indicator--2be40c78-c102-46ca-9832-66233b987410", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc4a5a0-b90f-42be-a22b-32785da9fd8e", "sighting_of_ref": "indicator--034bc6c4-2b96-442c-bd58-71d8faa79240", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a33281-fb17-4f1c-bc9f-353e99952aef", "sighting_of_ref": "indicator--4d8a59d7-9517-4588-b38f-0c7d9f1510ae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed65fc29-6f0d-4ecf-8d2e-3bd0dd9820d1", "sighting_of_ref": "indicator--fc6e1cbc-4f04-420c-8df2-17ab7cc16aa9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db81802-1871-4599-bfd1-3135d0fab0e1", "sighting_of_ref": "indicator--bfb493b1-9f01-4027-a162-88250ac13d4d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6412d4a9-0b00-4fd7-9ed2-933fc7fd5ea4", "sighting_of_ref": "indicator--d266c3a8-36f8-4433-960e-6a82edf1a9de", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f967d89f-552d-4ec5-ad87-88f6ab7fb739", "sighting_of_ref": "indicator--4b80ce7e-a5a7-42ea-8302-ea8bd25bc4a2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8936f836-815b-453f-88b5-4ef1c72cd8e9", "sighting_of_ref": "indicator--b538873e-625e-4269-9bbf-0a59e6232952", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a66505e-82c9-4ce9-8613-73a598ebde9b", "sighting_of_ref": "indicator--b538873e-625e-4269-9bbf-0a59e6232952", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf18d73-bdce-4364-9cbf-5ecdff344fa9", "sighting_of_ref": "indicator--cc420143-2afc-444a-a4a7-11c5760f3672", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d3adfa-1fa2-48bc-b0a5-5ad436310d98", "sighting_of_ref": "indicator--cc420143-2afc-444a-a4a7-11c5760f3672", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10257d6b-a05e-4fa6-9c50-df083c9fa8b0", "sighting_of_ref": "indicator--67f8d62e-b0bc-409d-a7f3-d8c61888e366", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7b8745-f0d4-4c25-8f11-d69698730c08", "sighting_of_ref": "indicator--67f8d62e-b0bc-409d-a7f3-d8c61888e366", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99211539-8da5-4024-8570-6d0e444a33b0", "sighting_of_ref": "indicator--9053373c-ff2e-478a-aa25-0b7f17bc6655", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459b25c9-8fa4-4614-982a-66cc9738d8aa", "sighting_of_ref": "indicator--9053373c-ff2e-478a-aa25-0b7f17bc6655", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd4802d-d069-48a6-b6eb-818f4587dfa3", "sighting_of_ref": "indicator--9d7fda0d-1930-452e-8de8-bc3faa59c55f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422f4028-4cf7-42b8-b3ac-aef5fb4a1ba1", "sighting_of_ref": "indicator--9d7fda0d-1930-452e-8de8-bc3faa59c55f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185ab812-2e70-4fac-8103-eb8ea092636b", "sighting_of_ref": "indicator--bc6b6449-3d15-4da5-89a5-7db8525f84ae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d67e363-007c-49aa-b4d6-4e2a196fce19", "sighting_of_ref": "indicator--bc6b6449-3d15-4da5-89a5-7db8525f84ae", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f635e6-d99c-456f-ac36-3450b1fe3d7a", "sighting_of_ref": "indicator--bc6b6449-3d15-4da5-89a5-7db8525f84ae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf0b706-2383-4663-9d43-048e37db9595", "sighting_of_ref": "indicator--4bc938e5-f2ad-430f-bcf3-90f27588d76f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7fa29c-372d-4980-bf68-5371b99f93dc", "sighting_of_ref": "indicator--4bc938e5-f2ad-430f-bcf3-90f27588d76f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474fe395-2283-4eaa-b569-a23f31240e92", "sighting_of_ref": "indicator--4bc938e5-f2ad-430f-bcf3-90f27588d76f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d63971-a8c9-4a03-bcb5-796c3804b38d", "sighting_of_ref": "indicator--ddb5ad70-84dc-41c3-bd7d-adad7d8e3454", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dabede8-9fb9-4484-bcd6-d196f2d811ca", "sighting_of_ref": "indicator--ddb5ad70-84dc-41c3-bd7d-adad7d8e3454", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8874f708-e9e4-4639-8a8b-1f87bb94d1bb", "sighting_of_ref": "indicator--1f84a782-3838-4fd6-9eb4-5ff58415df79", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f03994-5131-442f-9e88-d5da388daf11", "sighting_of_ref": "indicator--1f84a782-3838-4fd6-9eb4-5ff58415df79", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4077303-cd32-436f-ac10-a3eef154c776", "sighting_of_ref": "indicator--b23c31b8-1193-4cfe-b1bc-a1955e9edbac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e06b4ef-d735-4e32-ba1b-f59697b4c8d7", "sighting_of_ref": "indicator--b23c31b8-1193-4cfe-b1bc-a1955e9edbac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c8c245-422e-4a68-b228-fb5e944cfe76", "sighting_of_ref": "indicator--e09f17a5-5753-4f4e-93ab-d6422b7df79f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91687ea5-cf1e-4e05-b14d-68e726f14425", "sighting_of_ref": "indicator--e09f17a5-5753-4f4e-93ab-d6422b7df79f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b744ac-fa0b-459e-a741-e8460c492172", "sighting_of_ref": "indicator--f47e07c5-4a9a-45c5-98c8-f6499f55880a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb09f99-3723-43dc-9dad-9f3924ae0e9f", "sighting_of_ref": "indicator--f47e07c5-4a9a-45c5-98c8-f6499f55880a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dedb64b-7cd4-4ba3-abc3-235b6284d472", "sighting_of_ref": "indicator--3246f537-905f-4341-9a2c-a54766b1a11f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f77f405-bcca-4d76-9451-15021bcea8df", "sighting_of_ref": "indicator--3246f537-905f-4341-9a2c-a54766b1a11f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3bac64-cfc7-4f86-8362-c7997f238898", "sighting_of_ref": "indicator--764ff44f-a336-4091-a066-159eafab60de", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820e43d7-1a24-4db1-86ea-f986fa4f2ea8", "sighting_of_ref": "indicator--764ff44f-a336-4091-a066-159eafab60de", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c52c62-5a62-4cd4-8b9a-519f66f4bf2c", "sighting_of_ref": "indicator--420733bf-e941-4356-a53c-cab30c8e428f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b01f29-73be-4e4c-8f5b-17393760d225", "sighting_of_ref": "indicator--420733bf-e941-4356-a53c-cab30c8e428f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db15f066-78ac-42fe-b5a0-5850a3c2fde0", "sighting_of_ref": "indicator--f7e13928-d90b-430c-9320-11ab37c4c9ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1014399f-8f3a-4912-b1e3-6176a48eb19e", "sighting_of_ref": "indicator--0e5c5536-9e25-44f5-a7fa-b86fd8f2df65", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64463446-c09f-4749-947e-00417f4d3baf", "sighting_of_ref": "indicator--fa13a5bb-fc5e-4944-a9a8-da8d39cbd960", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02206c26-b143-4255-9a36-0c9550fe3159", "sighting_of_ref": "indicator--687a5583-269f-41f1-ad2d-8ecfa039e948", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe9044a-2815-48c7-9d0d-d314be9eb3f0", "sighting_of_ref": "indicator--fc409742-c501-4cb8-8f66-35f7214f2375", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b013cc-ba9b-45b2-a215-49d4139006ec", "sighting_of_ref": "indicator--81553417-9f96-4b5e-b8da-5e346d29b145", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c73389-cd92-4bf3-8b31-8b517d5a7490", "sighting_of_ref": "indicator--81553417-9f96-4b5e-b8da-5e346d29b145", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f26bc3c-eb83-4046-87ff-1207d68597af", "sighting_of_ref": "indicator--bc87b4d8-87c2-413e-9e1e-d69a34702fa6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677ffe26-4168-4d42-aab5-26402663ed65", "sighting_of_ref": "indicator--3ff5c29a-b1b0-430d-aa77-d2a72bbf021e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e720e5ac-f989-4fe8-9c2c-1e83ca49e315", "sighting_of_ref": "indicator--5a754ce7-213d-4556-a4dc-37157cadd4a3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd6f20f-1503-4aff-8bb8-e32ae826457c", "sighting_of_ref": "indicator--5a754ce7-213d-4556-a4dc-37157cadd4a3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa8fb1f-0b39-44db-8be2-943fb2656513", "sighting_of_ref": "indicator--cdead1f7-cf68-4c76-a8ee-e3423759241f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c77b67c-f07d-477f-9905-91c5b52b5f98", "sighting_of_ref": "indicator--9b57f88e-31a1-49f0-9be6-fade7a7f8521", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e201ab1-3b94-46c7-9cee-dcc44a6fb60c", "sighting_of_ref": "indicator--69b14cca-f1e5-4f52-9fd9-e0c499eb25eb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e791f80e-7af0-4934-ab56-88ef5a502edc", "sighting_of_ref": "indicator--71609737-f4f6-416e-a75e-515a3d5684b8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79013bb-6b5b-413c-a696-7ee19d75f112", "sighting_of_ref": "indicator--7f49de6d-7375-4760-85bc-9d91312e27fe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797abc93-4875-490c-af19-fac16088bf29", "sighting_of_ref": "indicator--77621c57-7c8d-4e4f-a97d-57390e3b6c35", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2914b826-bb80-4ab6-8fa6-fb376fbf435d", "sighting_of_ref": "indicator--aecb69ec-5983-4a54-b32b-cee9bd4f87a0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b67d4b-7fde-4abf-ab7c-7c89f67d0f48", "sighting_of_ref": "indicator--b40d5f48-6b7f-48d9-b667-3ff7cf5d2d32", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d82842d-2305-438a-976f-86b1ba07fc58", "sighting_of_ref": "indicator--2d74309e-50de-4bfe-ad8c-11ca4c839fb7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872625ee-badc-4c66-a01d-2e42010b223d", "sighting_of_ref": "indicator--d19a9ac6-c5d9-4a38-b3a2-f4d229d56137", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcc31aa-0cdc-40de-b741-f63c801599f7", "sighting_of_ref": "indicator--08e5683f-5b6a-4493-9004-9f15368eefe8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789211fb-003a-4be5-b37b-531fef7e9ab8", "sighting_of_ref": "indicator--08e5683f-5b6a-4493-9004-9f15368eefe8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e88e0e6-06ab-4e34-8435-f1c3829b5871", "sighting_of_ref": "indicator--c27c51a6-013e-437e-b717-83927eb60493", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57a6ca3-7cc0-4c9b-bb9c-ae61dd77768a", "sighting_of_ref": "indicator--c27c51a6-013e-437e-b717-83927eb60493", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89989bec-04df-4798-a7d9-71245476d8e9", "sighting_of_ref": "indicator--f558590e-c12b-46ca-b0a4-b7ed3f8b5216", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dfab99-9d41-4024-bb0e-4d7874d68f33", "sighting_of_ref": "indicator--a2aad1bf-a3d9-4787-8a88-4fdb3a7d5d27", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13107458-ef55-465d-8d43-1cc6b94d854e", "sighting_of_ref": "indicator--4f543ae2-ee9a-4a41-b15f-0eea692e55e4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de12768a-e516-4b3d-8140-e63df0a490d3", "sighting_of_ref": "indicator--e47e82f9-2362-4e24-9176-c67159ac54a0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1b4068-5d32-4f06-974d-3fd5632cfcd4", "sighting_of_ref": "indicator--28c33d06-c037-4aa8-be0f-a0e604bb1c04", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b338708a-b692-4c08-90e4-18900e0f3299", "sighting_of_ref": "indicator--eccdbd78-3554-407d-8079-eb6efd3b0397", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb920a5-f4b1-460a-9cf4-1ec3ed40833e", "sighting_of_ref": "indicator--33ea7bb7-9045-47fd-99e1-4186de044425", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c3a350-ce49-4679-b378-964c655029a9", "sighting_of_ref": "indicator--d5860600-06f1-4bc1-a132-e962acd7364a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb08697-a0ee-41c2-bfbd-c6f3a45b0c4d", "sighting_of_ref": "indicator--50c8c624-0b92-4448-a3ab-2f437c5e8dae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718fa3bd-f1c5-44e7-bb91-533aa9c93c4d", "sighting_of_ref": "indicator--6ff13ec6-a26a-46c5-aabc-1af9ea2b66f8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738b3173-2e9b-4aef-b02f-2d46674f1a30", "sighting_of_ref": "indicator--b9b9fdf6-ca81-4a79-9542-0e0a45264c69", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd30115-388c-460a-af35-b868c6be54ba", "sighting_of_ref": "indicator--04c51cb6-a6d7-4f05-bc36-aa7cecd1f3f5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c964970d-c05b-49f6-b821-c223315baa21", "sighting_of_ref": "indicator--b7be174c-3543-45ea-97ba-9b249411f404", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8adf7ec-eb10-461c-ac89-a6cf17a35012", "sighting_of_ref": "indicator--b7be174c-3543-45ea-97ba-9b249411f404", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f71e981-8f5b-4091-9944-652725a46649", "sighting_of_ref": "indicator--500efda0-64cd-4c12-a562-5f954dc307bf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617c9df6-b1e7-43ca-8e19-8ba3bb8247f9", "sighting_of_ref": "indicator--ace5690d-efa0-412a-b967-81712df3061a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97cc155-b4df-4b00-8a11-3e9e090b7c56", "sighting_of_ref": "indicator--a073242b-219b-468c-8978-fdb1402aedb7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35466c4c-7888-4452-835c-580a57e58017", "sighting_of_ref": "indicator--aa25a217-2ad3-4efb-ae74-36a6dd893a05", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcf4d61-79b0-4de6-92e2-c538199640d9", "sighting_of_ref": "indicator--4048b138-4ad9-4edb-bc05-d8fd27c5cd9f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9160ca95-c6a9-4e85-bca4-562ed0de49da", "sighting_of_ref": "indicator--389e2cef-7965-49d1-b365-a3b47329b92e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ba555b-ed58-4b09-8b1d-118b98e44591", "sighting_of_ref": "indicator--04b2e05c-1c7e-4c6a-ae7a-229649d7bf29", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8828c3-1ea2-4277-9a84-70e82cac2686", "sighting_of_ref": "indicator--4977d5a6-47ae-4a69-93f6-f025c3d731b5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975c2994-3029-462e-96b1-56a30f295ad4", "sighting_of_ref": "indicator--2ba444a0-0afb-4bd5-8c68-5dfbe7dce751", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909118b0-d277-4b50-97ea-7a2373d9fa2d", "sighting_of_ref": "indicator--f53bbca0-6cde-4310-acba-94e1e3aa9438", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd9a569-69ba-4329-8632-8cb343c5744b", "sighting_of_ref": "indicator--40fce0fa-8ac3-463a-a390-bc9077951a5f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5119d9-92cd-4e32-8101-4fdbd96cbe17", "sighting_of_ref": "indicator--d57f5c77-293c-40df-ae8f-b2fc22a47ea5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096e788a-1b2e-4cb7-98eb-c8abf46248bc", "sighting_of_ref": "indicator--d58cf7ec-a683-4773-a0c5-f535f9997899", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac1a008-3bce-45b6-ae5b-9918ba97ea15", "sighting_of_ref": "indicator--9dae58e4-3ba2-40f1-a014-75bda9c3ab85", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8097055-0923-406c-bc6f-ab1ca1e19fbf", "sighting_of_ref": "indicator--b55507b7-b147-44bb-ac97-25fe8aba9b84", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00f4014-88ef-45cf-8795-7c682b7b6dca", "sighting_of_ref": "indicator--ca505e4f-462e-4c8f-9a93-8de934acc5da", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed28df1-d49e-4632-9fe4-adec990f2c80", "sighting_of_ref": "indicator--f9d862c5-d2e4-49a8-833f-a057c7090647", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd28718-2a2d-4123-9714-88d2feac70b0", "sighting_of_ref": "indicator--469cb907-c099-499e-808b-59f7d8ada5df", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1867b2-8c1d-4e3a-9e8d-80bdb74ded3a", "sighting_of_ref": "indicator--ba5ababd-d179-4f5b-b059-76ed7216842e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb30e6d-aec2-47df-9f05-7027cbf1bdc2", "sighting_of_ref": "indicator--ba5ababd-d179-4f5b-b059-76ed7216842e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7797de-c034-4593-b690-1dd5fdff6c07", "sighting_of_ref": "indicator--9696ffa9-ae53-4da2-9d57-23803306f1f5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc21e28-df99-4ab0-a4f3-6df4b781cb71", "sighting_of_ref": "indicator--209b7409-72bf-4167-95a2-b04f28189634", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b998b8eb-c209-472c-80e1-d5b7865ee9de", "sighting_of_ref": "indicator--209b7409-72bf-4167-95a2-b04f28189634", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6f59b9-1973-4755-bed7-fd8181c2f58f", "sighting_of_ref": "indicator--5384be7a-f9c2-445c-8bd3-e3229851dc78", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccb90ae-e03c-4b33-8dd3-4e6fb4eae781", "sighting_of_ref": "indicator--5384be7a-f9c2-445c-8bd3-e3229851dc78", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d78b62-bbb2-42c2-8c8c-13e7fc8fdb25", "sighting_of_ref": "indicator--3be9ab6a-ba8a-4b14-a885-b01390cf2285", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1178b99a-b36d-469a-99a7-24c01f9d0682", "sighting_of_ref": "indicator--3be9ab6a-ba8a-4b14-a885-b01390cf2285", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ceeee87-fcd3-431d-9e28-996f4f65583e", "sighting_of_ref": "indicator--993ccbb0-f50b-4219-b42b-d940656f5571", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbbb52e-4c52-4a08-85bb-b5d48b264d21", "sighting_of_ref": "indicator--76517790-d1a8-4634-9235-fc7a1f57f855", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982a26e4-1950-4710-957c-77b817d7e0c8", "sighting_of_ref": "indicator--448b3a84-063e-419c-bef5-f57bef05fab7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80677521-5abb-41be-a333-ecb3adc49b05", "sighting_of_ref": "indicator--5165c4a7-0f5b-4b2f-a90e-1d3222dcc7a1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd269b48-d486-47ea-b054-050ff17cdc5b", "sighting_of_ref": "indicator--abe66f9b-4476-4213-8b1a-9971360fbc36", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6fd46c-7d36-469c-8638-ae764196d5f6", "sighting_of_ref": "indicator--abe66f9b-4476-4213-8b1a-9971360fbc36", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2b4a71-8357-4854-821d-ecca68bec9f7", "sighting_of_ref": "indicator--82287960-12aa-4bf8-ac4b-a228b200e3d4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7eb20ba-c6f3-4781-a648-39646b36d9d1", "sighting_of_ref": "indicator--ef225f0a-8194-4fd0-b2b2-fc06e67e27b1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5a6dee-8e20-4f49-b109-9c9e619bc3f5", "sighting_of_ref": "indicator--217dfe9f-a28c-409f-9e13-c254193a1473", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19da312-c7b9-4722-9b96-060cd53ec7b9", "sighting_of_ref": "indicator--27892dc7-9d94-4d46-af4d-2eabe572a95d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158898f7-8a14-49b4-a1f6-41678a0a336f", "sighting_of_ref": "indicator--3ab00c3f-27ae-4f21-ab35-5a8ac20518a5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cb6b0e-714c-4865-8926-535a3c17a065", "sighting_of_ref": "indicator--1deb16cd-bb55-4ef2-9cea-cbb74df6841b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33315e4c-eab2-416e-9ff0-33154fa7f5e8", "sighting_of_ref": "indicator--60f43f78-b50f-45ba-835d-7a56412d9c0f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67aa20ed-e499-48f1-b243-1d38eec1c49f", "sighting_of_ref": "indicator--d29eb8dd-a529-4eec-a7b4-acf5315473aa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e06390-9bb7-4d5f-8aaf-5fae26f348e8", "sighting_of_ref": "indicator--331d09e3-c574-4c66-9a9b-8d35f72fd8d7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8e2e75-85f1-47ac-9ad2-ced720ff27db", "sighting_of_ref": "indicator--053ef829-339b-4b1b-b06f-057cc7b41775", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ce8f2e-78b6-456d-8ade-a35a8c01f203", "sighting_of_ref": "indicator--b26f9a97-83c1-41b7-84e7-8e69083c8e92", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa951a9-0f4e-49e3-9388-a4e1ed48fc30", "sighting_of_ref": "indicator--fc4a9c17-0f0f-4f08-a783-7b27c541ee9b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e691de-2486-4eb4-b4db-f9962a91fe39", "sighting_of_ref": "indicator--28ce9cf2-d803-4242-98f7-357c56c98d5f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1829e02d-e3e3-41c7-9347-dfc81c43afc5", "sighting_of_ref": "indicator--4e28dedb-a55d-4597-aa80-3e534b6499a3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1966b8-be44-48c0-883a-1d2f36477cb0", "sighting_of_ref": "indicator--7e48bc0c-45dc-49ce-a52c-8ec0f3fd06e5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b268161-766d-483f-97c3-6078c5e8cbf6", "sighting_of_ref": "indicator--0a3e02f0-ed43-42f7-bfe5-cf525a145ef4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28beedb-628d-4c3f-b117-d5785ec5ece3", "sighting_of_ref": "indicator--62248302-37d9-43a5-a07e-5399322d0a13", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a35e6e-f87d-488c-b355-691afe62ad46", "sighting_of_ref": "indicator--62248302-37d9-43a5-a07e-5399322d0a13", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4015b156-a795-4465-996f-e866551b4335", "sighting_of_ref": "indicator--916a78ce-3eca-4ae5-b583-4704d07438ef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb9ab6f-a65f-4d7b-85dd-82fb28da51c7", "sighting_of_ref": "indicator--24bb46f3-0713-4615-bfb3-eb5655879476", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f744a9-1320-407d-ad61-6c295c0a5dde", "sighting_of_ref": "indicator--29666d19-c51e-4450-88b3-08459632dde5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d870b0-cd3f-45e8-8ba0-623a5cae4e9e", "sighting_of_ref": "indicator--29666d19-c51e-4450-88b3-08459632dde5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cd86ec-aa27-413e-a04e-8d4be50838ff", "sighting_of_ref": "indicator--ddbd7ec8-6ee1-42ba-936f-d19072bf51db", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275c95a2-1c92-4aea-898c-e2c5c1be269c", "sighting_of_ref": "indicator--58fdafd7-8b3a-4492-a83f-ee4378254901", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267a0492-f9c0-4b76-b311-64d71a09a3ee", "sighting_of_ref": "indicator--b0c7be7d-b974-424c-9242-bbaac586bcd4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4691f056-6fe7-4d1e-822f-caaa99aa4ef6", "sighting_of_ref": "indicator--0bdec5cf-734f-42ad-bbfd-7c893301d834", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535b9577-d3f5-48f9-bd13-d8d49f22f3fe", "sighting_of_ref": "indicator--8b6614e2-368c-48e3-b9fd-9d92e7c11c8e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6ae21b-54f5-45ed-8fb0-b91c88476784", "sighting_of_ref": "indicator--8b6614e2-368c-48e3-b9fd-9d92e7c11c8e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a871495e-4cec-4048-b23c-aa648076d901", "sighting_of_ref": "indicator--5dffb43c-6b09-49c6-9ee1-fd5aa190455a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6696b70-f773-4351-a223-7e81e0da8b7b", "sighting_of_ref": "indicator--2e7e0463-5cb1-4220-b5c0-a251241a807c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78cc81d6-06a6-4bc0-8040-47246edbf400", "sighting_of_ref": "indicator--7114cd07-08c7-4f7a-a671-00afcf1ab19b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f136fd3a-010a-4bc0-ad08-c40bc6ab7939", "sighting_of_ref": "indicator--23706d31-912e-4568-8df0-b2dd5f0a21f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0eebad-785d-4176-a252-045903b333f7", "sighting_of_ref": "indicator--dd1b4edf-d27a-4d62-b204-f18541353c8b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703fd8f9-dd65-486a-84ce-e4b465ed7e1b", "sighting_of_ref": "indicator--dd1b4edf-d27a-4d62-b204-f18541353c8b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988716c6-c9b1-420b-af06-9369ce102ab9", "sighting_of_ref": "indicator--9bf8dacc-5c78-4315-8725-05fb2cfb3d59", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409024fb-b2d1-413f-b15c-8fd21893ebe3", "sighting_of_ref": "indicator--9bf8dacc-5c78-4315-8725-05fb2cfb3d59", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f39dc6-378b-4682-b367-54e081589ba8", "sighting_of_ref": "indicator--aa0f42cd-a8ed-40b5-ba9a-342d182d4efa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52d2d21-158e-4852-9841-47b8de37effa", "sighting_of_ref": "indicator--ebc16d78-3e98-4ebf-beac-581be6f98c5d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cf2e57-7b38-4d22-a1f5-5aab0ce2d965", "sighting_of_ref": "indicator--53149f31-9851-4530-af77-22d1635c67cf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b1fcc7-1cbc-4e0b-9805-82a39ab3dbe9", "sighting_of_ref": "indicator--1bde10e1-8ba8-40f3-9250-0404ffa19d38", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd62b62a-0870-43e5-85ef-3933ef6b37c3", "sighting_of_ref": "indicator--8657f53b-6f5c-433b-a5c6-14976c1ca256", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef691cf-a6ee-49f2-b369-0f3f82b56bf3", "sighting_of_ref": "indicator--0e0912b0-79a4-47c1-85aa-193a20898190", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb1b403-e874-4b1b-8ce8-7a03006a5ce8", "sighting_of_ref": "indicator--906f1b9f-6d8b-448e-90c1-f4fcec011e65", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf905423-e1f8-4197-ac8f-10ed4cba2900", "sighting_of_ref": "indicator--28d0616a-54b9-4b2a-885a-557a6804bf32", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa4d691-f3fb-43ed-8f9a-5a7c0e6f9090", "sighting_of_ref": "indicator--bc77f450-2c6c-41b0-a6ba-528c622683ba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af72710-91ce-4c6f-821f-61aa89fd126f", "sighting_of_ref": "indicator--77bb0043-15e5-46e9-931d-c346ac7977d5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2030559-068a-4b61-9311-153708985c30", "sighting_of_ref": "indicator--8f90d867-47f0-44df-a124-b49cfcd12927", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6625f4-d582-4788-aa68-3ec525fa9246", "sighting_of_ref": "indicator--bee1e664-a510-450a-816c-2c131e226371", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbf9557-c9af-47e2-9a92-8e96b6deb97b", "sighting_of_ref": "indicator--da76eea0-1bb8-44f9-991d-3d77e27af777", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e302a32e-ac10-45b6-b073-07dd3c572f5e", "sighting_of_ref": "indicator--16747e94-ee95-4e78-b28a-f3674f8d907a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8195f2ec-2fa1-45f1-8680-1c13eb200920", "sighting_of_ref": "indicator--e3f3e6c2-dd07-4a5c-aa5c-68d1a1e40658", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62536154-d0b2-4121-8474-1a5f8431c2ae", "sighting_of_ref": "indicator--05c8e5e1-529d-4da2-bf82-20ce31e41ae5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f429868e-7d47-4f8b-9108-f273dfea8325", "sighting_of_ref": "indicator--e2fd43f7-15fd-436f-a012-738b6b365a9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b0b396-a6da-4390-adb7-bda34be37029", "sighting_of_ref": "indicator--9a1d87cb-54a8-4b5e-aaba-43f326462426", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eed23f1-51ea-4734-9c34-59576c20c6f3", "sighting_of_ref": "indicator--b6c1aaae-ff40-472d-a539-e085a528a189", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11de3b29-534e-43a5-8901-224b46061235", "sighting_of_ref": "indicator--33de5752-c32f-4422-815a-50448c9ceca0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a25b6a-3b60-41db-b4a6-4fe61b29b59c", "sighting_of_ref": "indicator--a1e4f705-b7db-4f68-abb8-6db1598e24b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71318893-f8b3-4c16-9b89-71214ad8ff1e", "sighting_of_ref": "indicator--129af828-b6d4-4b92-a9e5-8b65aa5fabfe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d016d271-ab75-46b1-8186-809b3e2e6be6", "sighting_of_ref": "indicator--9bb85cb9-bd2d-460e-878d-d2ec7ef19b3c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10c07c2-9f44-4aa1-918f-20b0e88eb984", "sighting_of_ref": "indicator--a2e2e621-7593-4d3a-8886-8ed6eb789131", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49065d35-4544-46f7-b376-0dae9870b9e0", "sighting_of_ref": "indicator--8fbd35b8-f7c3-44a6-9796-1f7e7f4e5f15", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ab9ad3-cfdb-49c2-bd15-e360914604f7", "sighting_of_ref": "indicator--89a39d6a-3849-4d68-994e-88fcf1df2a7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c569e3c8-a2d4-4b07-b072-c4eeaebc4764", "sighting_of_ref": "indicator--67f0f0e7-2fe5-4af7-ae4c-c50113175c61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abac5621-8cd0-487e-8f0b-6c8f42686a18", "sighting_of_ref": "indicator--6fbc239e-6aa0-4cdb-ba42-69befd9f9cc2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f35274b-14c9-4b86-8f76-18e4608243cf", "sighting_of_ref": "indicator--7f87b5ee-c506-4c3f-b3c8-1ffd378a4b59", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0642dcb9-2140-4afd-a1b1-90166d583acb", "sighting_of_ref": "indicator--7d0d9be1-b314-4a18-a812-394efaf36eed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b24c4c-814c-44cb-aae1-664653689d8b", "sighting_of_ref": "indicator--e08e5d50-9f79-4c55-bd7b-a3f9d348b288", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f34cfd-d081-4c22-ab2c-cb410b6117d1", "sighting_of_ref": "indicator--07cc8897-5221-44eb-92ef-f90c27cbbc31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4adcda-457b-479a-bfbf-7934ad5f99fb", "sighting_of_ref": "indicator--2cbf00a8-d9a7-412e-9466-d140d0b18e5d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323f9c95-df98-4966-b448-4430b83cde62", "sighting_of_ref": "indicator--70c3c473-6290-428d-a0f0-67380ef1ff5b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3eb23f5-254e-4243-a2d7-db5f1fce552f", "sighting_of_ref": "indicator--c87e571a-a88f-4c38-b2cd-d4baad656250", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9db5e9-1a7c-4170-89a8-d6c957d44cb1", "sighting_of_ref": "indicator--33f26b8c-7d7d-4e45-901e-9897b23d8531", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2e33db-90fb-468e-9eeb-45ccb59602b0", "sighting_of_ref": "indicator--16b80017-2dc2-44ec-903c-9471e89131de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d02ac92-92aa-4376-8947-6a4714f46419", "sighting_of_ref": "indicator--4172a8ca-c84f-4a9c-8d9f-9b050e8148b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2438bee8-2fc9-45a7-bbb6-acc15fa351dd", "sighting_of_ref": "indicator--4ead82d7-b3c8-4a0b-9437-d8ba3adad9d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccefb48-c6ad-4d6a-b87b-3b2b0994e052", "sighting_of_ref": "indicator--9c189da5-0801-49d8-bd87-175a28b780d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536be962-bb0b-4e56-a297-44525b9ed2c0", "sighting_of_ref": "indicator--f63e4195-5ca8-47d9-87c3-cd9cbbe95ad2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4253c0-29b7-4e81-97d9-b2049ba11a33", "sighting_of_ref": "indicator--05d596b4-d70d-4775-bfaf-2e103c6272e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9196869b-e5f0-4143-b676-0b5f4f8c4c57", "sighting_of_ref": "indicator--a1d6f836-6841-4641-a872-dab8b4be2eb0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d57077-e7ad-4659-91ae-bea5d76342e8", "sighting_of_ref": "indicator--86556e93-89d9-4cfb-97da-5ec1c39db53f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c600385-43cf-4233-bbff-1b3895140b6c", "sighting_of_ref": "indicator--9704b846-49c8-4b45-b612-6ce2d990e8ed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35edccd3-5a10-40bd-a43f-5af31ab87229", "sighting_of_ref": "indicator--9704b846-49c8-4b45-b612-6ce2d990e8ed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e20b1cc-6e4d-4ce8-b2e3-f31fe2be34b4", "sighting_of_ref": "indicator--d828271b-c3d5-475b-97e3-bac25515642b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ffc800-1abf-4170-82c9-d4badd25114c", "sighting_of_ref": "indicator--025be138-4a39-404d-93e4-bf00be8095b9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0897c2-234f-4dbc-99a0-ab7eb01ddf65", "sighting_of_ref": "indicator--a1e2aafa-e262-4889-a02e-4ac89a0c8777", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd31a39-d6da-41a9-8122-76b132b5277b", "sighting_of_ref": "indicator--40100f49-10ed-4a69-bedb-8bc9a27f7cff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00019e7e-efda-412e-8f5f-3d5f01ae0a64", "sighting_of_ref": "indicator--c7199858-63e3-4145-9162-959c44e907d9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d6fd9c-c92b-40de-aeb1-a1dba52f9fb9", "sighting_of_ref": "indicator--41884057-6043-4e68-ae68-691c2c00f0a5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40dde490-be75-49ed-863b-6bc3681c2358", "sighting_of_ref": "indicator--07c7ec07-b2f5-4aa9-8582-90024be45efd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838d48a0-8e1d-4cdd-b3c6-e572ec5e3251", "sighting_of_ref": "indicator--2ea1063a-455c-4f87-85e1-9cedbad04eb2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3685b2d-a13a-4137-b962-ae708ff951be", "sighting_of_ref": "indicator--0ea7150a-2b31-40b0-af53-126b56c567f3", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1412147f-8c4e-47d8-b59a-ccf0c2c9ccf6", "sighting_of_ref": "indicator--39033878-efeb-4b96-bea7-5d1f3e4be7ce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843c70c0-c05b-4531-b2f0-2df46fb8515d", "sighting_of_ref": "indicator--445a0f7b-d7aa-4ae9-ba03-7c7dd1ab358c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fae4e2-5df2-4cb4-a86f-826561314379", "sighting_of_ref": "indicator--f2f28187-a338-459f-9c27-7e9e4d3ffe05", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294268db-d912-48ef-9cc5-de13521d2a45", "sighting_of_ref": "indicator--0c9b0469-74f3-4c72-af46-ebe0859ec3db", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177fedad-6c3c-479a-b0c1-8aee95d64155", "sighting_of_ref": "indicator--b46f16a9-f657-40ee-a7ce-03078c6b99ab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9059f618-93e5-4e64-acf7-4478b11d5429", "sighting_of_ref": "indicator--b2196814-51e1-42fc-a39b-6587ad881001", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31b047d-2929-4f09-ab75-5253c4f7f4f0", "sighting_of_ref": "indicator--fb2da020-8c50-4e80-821e-f22b8e889cd1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faaa7b31-76bb-4864-b336-baef3b9bcf46", "sighting_of_ref": "indicator--2831684b-a746-4770-a549-3c210675429c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b951dd-b5e3-496e-b0a0-1305a324563f", "sighting_of_ref": "indicator--93e98af2-c535-4c56-a0cd-41623b1b457e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbdfef2-3f46-4614-89d8-b398980d9c5c", "sighting_of_ref": "indicator--d7a59481-ed9e-4f07-80bd-da34daa493f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3292d1a3-0bb6-4505-84cf-07a793194c66", "sighting_of_ref": "indicator--be962c55-c344-4b1c-ab93-1d46ef47a80b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440cf7db-c971-45b5-b19e-80f9fa9988e7", "sighting_of_ref": "indicator--07c40891-bbc1-4ea3-9a6f-229215d20c2c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62223e3-8313-4a05-8460-8ff7b4a49a5d", "sighting_of_ref": "indicator--07c40891-bbc1-4ea3-9a6f-229215d20c2c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba16279-0845-41e2-97d1-bf120db463ca", "sighting_of_ref": "indicator--07c40891-bbc1-4ea3-9a6f-229215d20c2c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416e578e-56a7-484d-ab31-af6cc206fd5d", "sighting_of_ref": "indicator--60d6b7ce-1397-40aa-bc36-bf791cee0165", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e524c0-927d-49cd-8dad-b2151e4a0bfc", "sighting_of_ref": "indicator--f8f7402c-a7b7-458f-9988-bde1d0f0104d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2e0239-a0e1-40e2-ba6b-d4387383791b", "sighting_of_ref": "indicator--523cd219-8d42-4ebf-9afc-b67cb674f48c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bdaec60-276a-45fd-a615-105e0f9597c0", "sighting_of_ref": "indicator--8cc279f7-b8d8-4281-91a4-a70e23260690", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840059ff-3747-44d3-aa26-0e0c27230b6f", "sighting_of_ref": "indicator--a1f61f8d-56d6-4dd7-ad1e-6853435e599b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc2c5d1-3177-4bb5-8f59-05071f42c9c7", "sighting_of_ref": "indicator--b4ff5b47-6b3f-47a7-968b-04b7188893a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602b8cec-ebed-4771-a9b6-8f93da777679", "sighting_of_ref": "indicator--2f0e8e1a-39ea-4c9c-a584-de82efc577df", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0ee177-52b1-4f9b-9bd0-229d8daa84c9", "sighting_of_ref": "indicator--0252f128-3521-4170-a49b-bddb60334fd8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ba7558-9a4a-4a4e-9954-4155e6d544a5", "sighting_of_ref": "indicator--3f7936d4-17fe-4d43-934c-102e4fddb58c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c11730f-3bd8-4ddc-ba8a-d48c6448c881", "sighting_of_ref": "indicator--ff1c60b1-f983-4125-b84c-fff09f079d66", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fe2913-2856-46a3-bc33-6c398ad2d85d", "sighting_of_ref": "indicator--94b9cfae-90de-4d24-a3bf-a692b1b0112e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996fce6d-6dc4-4da2-b3bc-c602de1b630e", "sighting_of_ref": "indicator--43d6704c-c3ac-4980-9bbc-0c726c6cf33f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa05d0ec-ba99-4c25-97e3-d34ae2f620a7", "sighting_of_ref": "indicator--390cb91b-86dd-4c6f-a060-fea7f7943189", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6e06cf-8fb7-43ad-b553-8a2f12b0312c", "sighting_of_ref": "indicator--06f71099-f791-4ebb-9e75-ffd1f57f4d29", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06eac5d8-0ed9-471d-b208-e3bf40cb1a99", "sighting_of_ref": "indicator--8ea61e26-fde9-46b0-8dfe-a933cecf839b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1361f5-6820-4d4b-923e-c068801cdcc4", "sighting_of_ref": "indicator--880dac12-406a-4c7b-9e84-b3e6bab53016", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904b2404-cc0c-4e2d-a026-2015f220ce2d", "sighting_of_ref": "indicator--7366e9d9-f1b8-48f5-b079-9f37273a4d76", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d842c7-f12d-4587-b32c-b7b7d33abade", "sighting_of_ref": "indicator--6559ca0a-85c8-4dfd-a600-aa027ef2887f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d1bfc8-dbb7-4e87-8270-dce710449dcf", "sighting_of_ref": "indicator--707d4971-190f-4b64-98fa-42a0e10c542e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d168c4-ddfa-4a0e-a28a-49969ac28554", "sighting_of_ref": "indicator--8819ca39-8215-444a-8473-ba1922ed85da", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20628dd6-d379-4e66-b0f3-1c59a6bf7fd4", "sighting_of_ref": "indicator--71202aca-e62e-4d7f-8073-043f2b75a385", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ce64e3-2897-4880-8dd5-7b6216a846e9", "sighting_of_ref": "indicator--97e68bf2-5256-4705-aaae-0ad94709507d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dba3701-6cb4-407d-beb2-71afc2c2dbcb", "sighting_of_ref": "indicator--b80c704b-bae4-4373-8f0c-a614934663d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dec5ab1-7f39-4c36-852e-20848701018b", "sighting_of_ref": "indicator--806feafa-8683-49d5-9abe-78b4d6906bd6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6290a41d-66a2-443b-b589-fd94c636a95a", "sighting_of_ref": "indicator--806feafa-8683-49d5-9abe-78b4d6906bd6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724497ee-785b-4f1f-9666-31dba79e04f5", "sighting_of_ref": "indicator--1124fe0d-05bd-480f-a105-7bb8f51a9e5b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd899c70-1dbd-4256-9dba-3321228669d0", "sighting_of_ref": "indicator--8b1f2bff-d461-466b-ad2a-0645c8473711", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e94896a-4223-4010-8dbb-72734410640d", "sighting_of_ref": "indicator--1b568542-bb18-4ce3-8068-b91ac9a86599", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6731815d-4184-4b0e-a9ea-d85dded8636e", "sighting_of_ref": "indicator--9283d0ff-e686-43b7-bc94-d9623ca43061", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e87a56-350f-46af-a2ea-cd1a1602eaf5", "sighting_of_ref": "indicator--dd97dfcd-89eb-487f-8c8c-56d1c457f311", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f35d89-c143-4d73-80b9-d4ab4b352835", "sighting_of_ref": "indicator--6ee6f606-7635-4890-8f35-f97021db07c9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8b5811-4f98-4bd5-adaa-f71c1e639533", "sighting_of_ref": "indicator--f24e3d08-b397-4f61-a39d-c4276b86c967", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf9455f-4e02-4011-9efd-4696fefc2337", "sighting_of_ref": "indicator--cdd68781-b2ae-48d1-b10a-9fb5ff083990", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f575b83-4744-4e5d-b2bd-e482fcd05914", "sighting_of_ref": "indicator--84383003-69bf-4a4f-a8f2-106edd1a5a4a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12204da4-a60a-40e6-9b37-1f9181e0357f", "sighting_of_ref": "indicator--192cce99-e370-4e38-8bdb-422503c0c794", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15b50e8-a8ce-4a41-a719-961198814c54", "sighting_of_ref": "indicator--cb2f371e-94c8-4f98-8c98-5bf3d3bd6f5c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14c76fa-4b7e-4523-9dea-82a0658b0304", "sighting_of_ref": "indicator--34f99f11-4755-44f5-b9e6-cc0a5dfbd601", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec346fd7-56a8-4f90-908c-ddcde4730b94", "sighting_of_ref": "indicator--90fd51dc-4612-478c-9edd-2991fbc31e2d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e546985a-f735-4559-afcd-d6e91d997437", "sighting_of_ref": "indicator--cac84a80-a57b-4114-8a0e-641de4067594", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6faf6df9-9d88-44ce-9b83-cdf7ef3082fd", "sighting_of_ref": "indicator--bdee8804-1131-408c-8564-1abdf118cf0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281eea52-aa2e-46ac-9e52-46ea87c14a54", "sighting_of_ref": "indicator--be2b516d-daf1-431d-98c8-f80f4778b81f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c4a30b-883e-4384-b6fa-61c6ee790d92", "sighting_of_ref": "indicator--5995272d-6727-494d-8b69-061f1ed37486", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12c6697-4ae2-42f0-846a-7eee1b2b5f2d", "sighting_of_ref": "indicator--0e67649b-ae62-4714-9740-b3c0a8f5fed9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d6c623-f995-43f2-bce1-29a017b93c6d", "sighting_of_ref": "indicator--3d2be1f7-cf8c-4679-be99-cf9cd19dae99", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e16dcb0-e971-4c5c-8692-b79c4e9e70aa", "sighting_of_ref": "indicator--7c3d9362-e7fa-4e4d-adf1-9b2d1147cbf2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276f1ea0-e0c6-42fd-9287-2868d4bf18e9", "sighting_of_ref": "indicator--a1c73889-e77f-474c-8a06-2c69702fd9d5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623fcea8-03bb-4a17-bb51-a30b17955f6a", "sighting_of_ref": "indicator--bf9be38d-3a99-4d82-b2d4-026d26a9d28d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719d92eb-53cc-4b39-ab65-53c6d28e7d70", "sighting_of_ref": "indicator--2e5eb326-60f1-4a63-92cd-3714e34e61ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5839c607-7cf4-436c-bc0a-1f6333ccd8d8", "sighting_of_ref": "indicator--80f8afe2-cfb4-476d-bdf7-2a8ad95d3e93", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4040db-7ac7-4781-b8ac-14948db75721", "sighting_of_ref": "indicator--e07f8987-546d-4dbf-97ca-3d2bf0fd94c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30308d6-81b3-400e-a192-be19f6d33a64", "sighting_of_ref": "indicator--b9d925ff-a4a3-4d4c-ad32-e5832245c89b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5060362e-ffdc-4dac-a4a6-21e340a7e6c0", "sighting_of_ref": "indicator--4961da34-1afa-4f0c-a862-ce4a3dd302e3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3fc5c5-e4b2-4ba4-bc06-e33d489bfeae", "sighting_of_ref": "indicator--90233711-965d-456e-98f2-d3a2d72ce7ff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd55d6b-cb41-4c32-b037-7409387e1631", "sighting_of_ref": "indicator--a60e6808-d7c9-4cb7-b309-5c2de6bf37ce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599448b5-1f44-4fcd-9c53-f6781e01f5c6", "sighting_of_ref": "indicator--a11dd652-da88-4f27-9b18-b60bb30e0d85", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a8fbd8-4c91-4ea0-b64f-71df8811f9b6", "sighting_of_ref": "indicator--a11dd652-da88-4f27-9b18-b60bb30e0d85", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aed8913-53ca-4d48-a5ef-5c603d457111", "sighting_of_ref": "indicator--ca9edf8b-e1a7-4bc1-8d93-50109e4fa89c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c091cc-684e-4106-aba9-ef5c008fb00a", "sighting_of_ref": "indicator--01a5e2ad-4b76-460d-8fd1-c57327117e77", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379cf16a-12a0-451c-bb21-33d0604cbb3d", "sighting_of_ref": "indicator--a59bf4cb-4fe6-4a94-bc63-b2f4db403fe1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62646bf-47b0-46d9-8338-0654f9199f61", "sighting_of_ref": "indicator--89e5f8ca-136a-4792-a895-262b00be0afd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c755fa66-c577-448f-837b-0d803e692938", "sighting_of_ref": "indicator--55514283-b76b-44f4-9c4c-7d37fab87142", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222ce99d-9780-4a8a-8b3e-d65ce00ac07d", "sighting_of_ref": "indicator--39b17592-71dd-4a35-9c2e-dc9973e17a62", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b2aeb3-a443-40d5-85fc-b722b08e9845", "sighting_of_ref": "indicator--85bf6a6f-e4ee-4cf4-aab1-957c5896ccc4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fd354c-8c9c-4608-a3bc-138a1c4c8f7d", "sighting_of_ref": "indicator--85bf6a6f-e4ee-4cf4-aab1-957c5896ccc4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b9fc1b-6c4d-400d-ad21-ab6b278af329", "sighting_of_ref": "indicator--c4bf3a92-8d16-4552-be1d-08e699a40511", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467350d9-eed1-4ef7-ab8c-cbfee4b263d6", "sighting_of_ref": "indicator--c4bf3a92-8d16-4552-be1d-08e699a40511", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469640cf-28f8-4633-9ccd-e8936f4cca32", "sighting_of_ref": "indicator--ef4a4476-7f4b-4b2a-a983-2e15eb02288c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a42468-50c6-4eac-8a43-8906a4228024", "sighting_of_ref": "indicator--fce8ceb1-09f0-4eb3-9f55-4fbf436e658f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fa275c-a40a-4fc9-832d-a553feb3d175", "sighting_of_ref": "indicator--55cc2f7c-a286-4824-b1a0-9198106bebbb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862f19a5-4c0a-422a-9e92-2d8eae3dfabe", "sighting_of_ref": "indicator--09d49e4c-7d2c-4d56-b7bd-41319b70eacc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a70044f-29e9-412d-8c9e-5074a8fb6cff", "sighting_of_ref": "indicator--d2cb47ae-5052-4651-89a9-f9068c5fbe32", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf6bc7d-dba4-4808-a898-26d4e2e86982", "sighting_of_ref": "indicator--16458c2c-5a73-40ac-8c14-19b649116b75", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72cf9c1-324f-4599-a131-4fb6b4b2656c", "sighting_of_ref": "indicator--badd880b-c6a3-4872-8bab-77d0ae2a2c88", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d5c3fa-4dc2-4411-9eb0-cc966dcd4359", "sighting_of_ref": "indicator--60197518-c2c4-4d5c-9128-9ce87b0d0774", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048544b9-8a5d-4b60-862a-776899977d6e", "sighting_of_ref": "indicator--c6c70018-5593-4f45-ba60-f30ab03a38bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a68e55-a5e8-4312-b2a2-3a6c1251e2af", "sighting_of_ref": "indicator--5c99b3f2-50cb-4244-8ad4-b990cd6a9cb0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd7ce11-8efa-43c8-aa4e-86d44c37876f", "sighting_of_ref": "indicator--30084f5b-d987-41be-a074-4070dde81cef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd14c681-b312-4d18-b583-b96f008b5a2b", "sighting_of_ref": "indicator--68e65beb-770d-4582-aabf-8c0e2f4c40b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381dcddd-ce59-4d58-bfed-4d98b0d0c726", "sighting_of_ref": "indicator--dce3555d-52eb-4ddb-bd47-e17ebb877583", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad23a4a5-cf96-45f1-83cb-bfef359d9ded", "sighting_of_ref": "indicator--b118c68c-57a4-4601-9914-4e927ee41189", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373ec7a0-3f88-46bf-81fa-aa1d0498f005", "sighting_of_ref": "indicator--503d63ae-50d5-4c07-b62f-1232c380accf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24361962-c02e-4440-93fc-b8feba78bb81", "sighting_of_ref": "indicator--7804dc04-d8a6-4f2a-ab6a-7eadaad6ac23", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e606cdf0-dabd-4307-820e-7f40c0f153b1", "sighting_of_ref": "indicator--f3410d5a-630a-4e11-8c1a-b73fa0e5f748", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a60aeed-57cd-4a20-a147-0856c4d7392c", "sighting_of_ref": "indicator--a33026e7-fa63-4f45-979d-ce9b4711f7af", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557e0125-5b35-4e23-ba4c-f7c24cc23e62", "sighting_of_ref": "indicator--4d628add-a7f8-4e22-87ed-d54d4fd73cd2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9048f615-1bbd-4a70-8eb1-9523314dff7d", "sighting_of_ref": "indicator--128766fb-c26c-4521-8840-378b8edbe359", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18a363e-f50a-45e2-be2a-901f9627774d", "sighting_of_ref": "indicator--00db9a86-0fc6-4915-93b8-95cd79cc0244", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4139071a-8079-4872-8b52-f9c748565796", "sighting_of_ref": "indicator--b5abe323-d2f9-4af7-9939-a071a6e3aa19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88618026-284d-4018-adb2-a774c827a3d1", "sighting_of_ref": "indicator--dae5e32b-0b02-449c-8fd6-0f42372de19b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69c85fa-575f-45d6-a174-144cbe398f4f", "sighting_of_ref": "indicator--c974a13a-23ef-4e5a-a279-e57d1fa0f1ba", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012f9b74-b80e-4d31-a3c3-511f1170155d", "sighting_of_ref": "indicator--0d0377a8-990c-4a74-897d-faccab5b63a4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e7bd1b-663f-48a1-817d-2ffef0ba5257", "sighting_of_ref": "indicator--0d0377a8-990c-4a74-897d-faccab5b63a4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fa5086-d65e-4108-9995-01d31bb020c6", "sighting_of_ref": "indicator--b2356353-9087-43bd-a049-a630632564e2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b456607-aa1e-4929-b62a-df1dbfe59315", "sighting_of_ref": "indicator--e2613512-397a-4f3b-b318-259f54deb318", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5302ebc-73b0-4a55-865b-661c45b7caf4", "sighting_of_ref": "indicator--13105c8b-faa8-40dd-9083-a970802fbcbe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405a4b0c-177f-4758-96c0-e8eaaea09e1d", "sighting_of_ref": "indicator--93fc9bb8-393f-421a-898f-76453383f31c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f739fd-98aa-4762-8092-7f10f5f44f54", "sighting_of_ref": "indicator--93fc9bb8-393f-421a-898f-76453383f31c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad3d051-63b5-4a7e-ad25-ef5ba13cf47a", "sighting_of_ref": "indicator--93fc9bb8-393f-421a-898f-76453383f31c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ed28c1-3043-407f-b233-2906981191ea", "sighting_of_ref": "indicator--2ca8103a-b4e5-44f9-821e-bc3d0dc3af06", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b55d2d3-48c2-48bf-a085-fcc85a474d20", "sighting_of_ref": "indicator--2ca8103a-b4e5-44f9-821e-bc3d0dc3af06", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151a4e25-1dd7-4663-ad33-a6ef49f6892e", "sighting_of_ref": "indicator--2ca8103a-b4e5-44f9-821e-bc3d0dc3af06", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d4e0f6-4615-4fee-842e-aa96e54d6f52", "sighting_of_ref": "indicator--d0dc73fb-f659-4bba-8e23-47de99d7d02a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86be8303-7ef3-42b1-948d-13ebbc4c0197", "sighting_of_ref": "indicator--d0dc73fb-f659-4bba-8e23-47de99d7d02a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f7ffc0-62a5-410c-917d-054f48415e61", "sighting_of_ref": "indicator--acf80ffd-a326-4d9a-aab5-e9cf3605c348", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fa1a6b-851e-4345-bd2a-d705cb11676f", "sighting_of_ref": "indicator--acf80ffd-a326-4d9a-aab5-e9cf3605c348", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1338fa25-87c7-40a6-9f0e-b78b12bdb539", "sighting_of_ref": "indicator--acf80ffd-a326-4d9a-aab5-e9cf3605c348", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c822812e-119e-482b-ab64-ff9c3f2582f7", "sighting_of_ref": "indicator--7d780e0c-eade-4873-a4ee-1a80033f377f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527d4478-3671-4805-80d5-68c649148887", "sighting_of_ref": "indicator--7d780e0c-eade-4873-a4ee-1a80033f377f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2262d0ad-4295-4acc-a9b7-432c07f0070a", "sighting_of_ref": "indicator--7d780e0c-eade-4873-a4ee-1a80033f377f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb6d879-dfb3-48aa-883d-5d64d6c5e1ea", "sighting_of_ref": "indicator--9d39f1f0-77cb-4d4d-81b8-aeea05e46b10", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abdab34-5a42-4ac6-b992-2bedf8357bc5", "sighting_of_ref": "indicator--9d39f1f0-77cb-4d4d-81b8-aeea05e46b10", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7eeda2a-01f5-4941-89b7-e69497bbcea5", "sighting_of_ref": "indicator--9d39f1f0-77cb-4d4d-81b8-aeea05e46b10", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeaec218-465f-4d4a-a713-588ca916a636", "sighting_of_ref": "indicator--d3169974-2d34-4b06-9cbe-96b4159609a1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f106f24-bc24-4985-89bd-fcbc37879268", "sighting_of_ref": "indicator--d3169974-2d34-4b06-9cbe-96b4159609a1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a837d4-3e94-4b0c-b158-5ad3769c6ae5", "sighting_of_ref": "indicator--d3169974-2d34-4b06-9cbe-96b4159609a1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8a8597-d950-4442-9a32-a583c91e53c2", "sighting_of_ref": "indicator--77c77b3f-b2d5-464c-86b6-3072bbb05cad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f093ec6-02bf-4095-bc39-14ee0ecffd6e", "sighting_of_ref": "indicator--77c77b3f-b2d5-464c-86b6-3072bbb05cad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e73a211-a944-41d3-8420-ec740e2055dd", "sighting_of_ref": "indicator--77c77b3f-b2d5-464c-86b6-3072bbb05cad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d783e9a-106c-4568-9797-b50eef50c330", "sighting_of_ref": "indicator--f5b1d1d2-ebdc-4340-9028-30ae0aa9b64a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5945ecd-a77f-4cd6-8776-014778812759", "sighting_of_ref": "indicator--f5b1d1d2-ebdc-4340-9028-30ae0aa9b64a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98f2c42-c399-4474-b930-52c609cf5819", "sighting_of_ref": "indicator--f5b1d1d2-ebdc-4340-9028-30ae0aa9b64a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753e23e0-468b-4260-9a6c-c44ec563fb51", "sighting_of_ref": "indicator--f6ff0179-0f19-4c58-9d2a-ebaa0507c536", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce4524c-f295-49ec-b0f9-5cce0e804675", "sighting_of_ref": "indicator--f6ff0179-0f19-4c58-9d2a-ebaa0507c536", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fa0452-669c-4a61-95fc-b8595e4326c0", "sighting_of_ref": "indicator--f6ff0179-0f19-4c58-9d2a-ebaa0507c536", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6b290a-ff9b-4eec-87df-a31adc48a742", "sighting_of_ref": "indicator--2841108a-2581-4879-aae3-de8d0c222dc6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ae7367-eb70-45d1-a2bd-f7e5201cb0df", "sighting_of_ref": "indicator--2841108a-2581-4879-aae3-de8d0c222dc6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a828e67d-cfae-406e-b55f-6cb466b0d0b7", "sighting_of_ref": "indicator--2841108a-2581-4879-aae3-de8d0c222dc6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a50ecdf-4d40-4650-bce8-55023f04e953", "sighting_of_ref": "indicator--7ab57121-0774-472a-a764-390ebe538ae4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a69890-f7d6-439e-9527-99f9accd3475", "sighting_of_ref": "indicator--7ab57121-0774-472a-a764-390ebe538ae4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef59edfd-ce0a-42d8-b52b-ba2d49044b35", "sighting_of_ref": "indicator--7ab57121-0774-472a-a764-390ebe538ae4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ed991e-e0e0-4e71-87e3-62199e41e65e", "sighting_of_ref": "indicator--4bf39edb-650a-4cb5-924d-c2cc67b77672", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23eec823-50d4-402a-9c4f-d6ed320f8bc4", "sighting_of_ref": "indicator--4bf39edb-650a-4cb5-924d-c2cc67b77672", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b17e90a-a0f3-42fd-ac87-1e143da7b85e", "sighting_of_ref": "indicator--4bf39edb-650a-4cb5-924d-c2cc67b77672", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a19119-0263-4187-bda2-ccee2079b19c", "sighting_of_ref": "indicator--e77bd140-9337-4fb0-aea7-5a0facc9bf6e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1daa8126-4a07-4b6e-9764-4dc288d2e871", "sighting_of_ref": "indicator--e77bd140-9337-4fb0-aea7-5a0facc9bf6e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa901993-4997-40f1-86a5-f770cff7f941", "sighting_of_ref": "indicator--e77bd140-9337-4fb0-aea7-5a0facc9bf6e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2f7fe1-8979-4eb7-b2d9-c13e9fcdd099", "sighting_of_ref": "indicator--0c58ec43-8d0a-4347-ab41-e87ad772884f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c0e56e-42e6-49d9-84c0-d1febf8add90", "sighting_of_ref": "indicator--0c58ec43-8d0a-4347-ab41-e87ad772884f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aac0056-8759-47d3-b9d6-7b3014c3cdc5", "sighting_of_ref": "indicator--0c58ec43-8d0a-4347-ab41-e87ad772884f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68442d7-f231-45ac-8da1-c85019405bea", "sighting_of_ref": "indicator--e7ca17c4-4456-410f-8a8e-40ba0ab6365e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e805f6ec-9c74-4c7d-98c0-593160ae02e9", "sighting_of_ref": "indicator--e7ca17c4-4456-410f-8a8e-40ba0ab6365e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f37b22-6921-4ee7-896e-fb3ade801110", "sighting_of_ref": "indicator--e7ca17c4-4456-410f-8a8e-40ba0ab6365e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770e1c43-c0ed-412d-9f4e-10bc4155301c", "sighting_of_ref": "indicator--f82ea29d-e2a3-4ed1-8d59-d438dd5971c4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9122cc63-6e38-4cdc-a7a1-3de58f259c66", "sighting_of_ref": "indicator--f82ea29d-e2a3-4ed1-8d59-d438dd5971c4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f72155-e8bb-4c68-b2ca-8cacc3376aab", "sighting_of_ref": "indicator--f82ea29d-e2a3-4ed1-8d59-d438dd5971c4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0069f21-024d-4345-9b2b-3dbf49f696c9", "sighting_of_ref": "indicator--779efa83-09f4-4b6b-aeef-971b87a740d0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8524f5f0-8935-41f8-969f-6675851d7093", "sighting_of_ref": "indicator--779efa83-09f4-4b6b-aeef-971b87a740d0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f034743-cec1-4e82-954f-fd59d13f948c", "sighting_of_ref": "indicator--779efa83-09f4-4b6b-aeef-971b87a740d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf5fb5e-9128-455b-b3af-182f6b4e4ac7", "sighting_of_ref": "indicator--1550418e-859b-41fe-8619-36f010ef6468", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa3e6d3-1b4e-4d69-b341-1e563b4f0c86", "sighting_of_ref": "indicator--1550418e-859b-41fe-8619-36f010ef6468", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57a7ece-12ee-4786-9d8f-f035c8d853fa", "sighting_of_ref": "indicator--1550418e-859b-41fe-8619-36f010ef6468", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d686c4a5-3954-4109-ac72-f018fad6ef40", "sighting_of_ref": "indicator--5881f60c-4fae-4a9a-8662-0a2d620afe87", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7492fd1-24e2-409d-9325-4a7332e533d5", "sighting_of_ref": "indicator--5881f60c-4fae-4a9a-8662-0a2d620afe87", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046f9df4-9090-424d-9f66-34cc008ac685", "sighting_of_ref": "indicator--5881f60c-4fae-4a9a-8662-0a2d620afe87", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55f8f30-74e5-4fdd-b253-437d8fdd47fb", "sighting_of_ref": "indicator--f467e20e-fa1d-497a-999f-1bab122b8b8b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1f4dab-f35c-41ef-b679-04678b0a4363", "sighting_of_ref": "indicator--f467e20e-fa1d-497a-999f-1bab122b8b8b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71173a71-50c9-4ed5-8eec-7b695d870ab8", "sighting_of_ref": "indicator--f467e20e-fa1d-497a-999f-1bab122b8b8b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad71cf90-72c0-44bf-996e-1ce417524912", "sighting_of_ref": "indicator--abcd7b2b-c5b5-41fa-81cd-3efbed7aa7f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ffdbed-0927-4436-b446-2ec1ebff4df4", "sighting_of_ref": "indicator--85e528d2-8518-454e-86cf-f874ca0343f1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3883a12c-b45c-45d5-9007-be56a6f0877a", "sighting_of_ref": "indicator--fce4a9b1-3e31-4375-89b3-003c44d70794", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c59c42f-4801-4e56-8b0c-e7c3c4141e8b", "sighting_of_ref": "indicator--679c169f-a608-480b-b470-7d1faf97bb40", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1354738-1c37-43e5-ad28-cae009107653", "sighting_of_ref": "indicator--9797222b-4e40-4d88-a049-ebb0ee3256d6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003b8053-2940-49e7-95e4-f79df1b95123", "sighting_of_ref": "indicator--178f17a0-3f99-4784-a2f0-aa49d3bda543", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa671c6-9ff6-4f45-ba33-f8baf80c13c6", "sighting_of_ref": "indicator--129f616b-e039-4fc3-88f7-f5a326482948", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331aed20-0fcb-4390-8e6b-b46b43afc50a", "sighting_of_ref": "indicator--339bc5f0-abc6-4db8-9ad6-5726545d99ec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203ac84d-3786-4a89-bf6d-136503cc89c4", "sighting_of_ref": "indicator--bdb22f49-b99c-4667-ad9a-b690fa8a7d31", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bcd593-dee7-4625-bd30-af194bb3bf9c", "sighting_of_ref": "indicator--c82a4454-4d37-4d7f-9c33-b2f4963e35f3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1446281-4125-4a80-a561-b732bd1467e5", "sighting_of_ref": "indicator--93d8b32d-1a21-49ad-84cd-0694def0d541", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eca105a-dd7d-4905-a47c-547ecaf8f2e2", "sighting_of_ref": "indicator--93d8b32d-1a21-49ad-84cd-0694def0d541", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e049ada-31c2-4acf-b42e-a0a870d21908", "sighting_of_ref": "indicator--d4531292-829c-404c-9db7-46d969b3a213", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea330075-ec7a-4b79-92b6-5a1f54f01272", "sighting_of_ref": "indicator--8f224710-715a-4e46-9d51-9d0ef149d41f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0033bf78-8a5c-4bac-816f-aab71c4feb64", "sighting_of_ref": "indicator--8f224710-715a-4e46-9d51-9d0ef149d41f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d69dab8-946e-4fea-a061-163f737672f7", "sighting_of_ref": "indicator--2772a81f-1f79-49e6-b286-be867aed6271", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6f42ff-5809-4f7f-9a23-824c8e194a70", "sighting_of_ref": "indicator--2772a81f-1f79-49e6-b286-be867aed6271", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3695df9-05c0-44c8-b6d8-ac2b254328ec", "sighting_of_ref": "indicator--5c09bf36-76cd-486c-9d8f-a252cda20dc4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5743aba-4d66-4d37-b148-c1a43e51fb40", "sighting_of_ref": "indicator--5c09bf36-76cd-486c-9d8f-a252cda20dc4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd7537e-4cb2-485f-b921-3e7f62b9fa1e", "sighting_of_ref": "indicator--54c0230a-a80f-4b38-a2ab-37755ef899bc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e76e707-51ac-4742-a749-14e808d7e67f", "sighting_of_ref": "indicator--54c0230a-a80f-4b38-a2ab-37755ef899bc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23118608-cc35-435e-8875-5ac471ab8d1d", "sighting_of_ref": "indicator--54c0230a-a80f-4b38-a2ab-37755ef899bc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3416388b-e476-4426-aa62-bec7fb08ea6b", "sighting_of_ref": "indicator--547d67bf-6407-4ec1-889c-9f9f6e40db8b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9631645-8514-453e-833b-246c9ce36028", "sighting_of_ref": "indicator--0e6674ac-db93-4806-b053-950d247fa20e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e359feb0-e7f9-4163-bda4-657b134038fb", "sighting_of_ref": "indicator--a48464cd-7731-4e86-9d1f-8be2e993ef2c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc50f7ed-a633-4b18-9555-fbbe637ea3f1", "sighting_of_ref": "indicator--a48464cd-7731-4e86-9d1f-8be2e993ef2c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8360e78a-d997-4035-bc5e-9e9079131743", "sighting_of_ref": "indicator--e136f221-d0e9-45be-8236-84c12a91425b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0171ff3-c360-49da-8590-34e08bddee10", "sighting_of_ref": "indicator--d568804a-32ae-4e02-886d-0857f4d74388", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5272f10-8c39-4692-9371-65fdc3300072", "sighting_of_ref": "indicator--d0428882-9af5-46fb-8e6b-0ca7cae93c7c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5dacf4f-80f7-4584-9e35-250545d2e7e0", "sighting_of_ref": "indicator--873414d3-b745-4d5c-8872-7b3ec29f5baf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e40a13d-e70d-4c58-bf79-24c6acefb7e1", "sighting_of_ref": "indicator--2d8c8615-86d3-441a-a6aa-01cb24d7dd56", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7779e23-2ecf-426a-9744-18f940d02b2b", "sighting_of_ref": "indicator--659c3d55-8ef8-465b-8de5-6694f0bb22ce", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcc20db-130d-4d2e-b4e4-a4c408bd2a01", "sighting_of_ref": "indicator--04709832-c798-4d94-b8b2-c279adcf91ab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248aabe7-82fb-4724-ab51-b6969effdf1a", "sighting_of_ref": "indicator--c4ed4449-fca3-4f3d-8785-cf2a6aac991b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db652afd-12c3-401a-8fac-d816f65b2ca0", "sighting_of_ref": "indicator--d57bed24-9b98-4de4-b318-33ce03a1aa74", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd35282f-79c4-4f10-85b4-0d2cde22bbbd", "sighting_of_ref": "indicator--fc5b66ed-3f82-4ca1-885a-c191b28c6c0a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d2e8f5-bb0d-48ac-bc2c-056df950c8ad", "sighting_of_ref": "indicator--510e0358-a3c3-470f-b826-901848746efa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b9adff-5f76-45e7-8c6c-fae2b22134d0", "sighting_of_ref": "indicator--1b1af4db-9e2b-44a6-8afe-74a891b9624b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6367dacb-2987-43ef-9079-4a57a0bf481c", "sighting_of_ref": "indicator--1b1af4db-9e2b-44a6-8afe-74a891b9624b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8d3752-8637-45ea-88b5-19cae1e291ef", "sighting_of_ref": "indicator--3af3ea8d-10a2-4360-b0ff-4c05bf6c1b40", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e43925d-c182-4e5a-8fc3-86d247a476be", "sighting_of_ref": "indicator--3af3ea8d-10a2-4360-b0ff-4c05bf6c1b40", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7ac1a8-f07a-4e3f-bbe7-dcb9e5f05f36", "sighting_of_ref": "indicator--3af3ea8d-10a2-4360-b0ff-4c05bf6c1b40", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e181b72f-bd7b-4727-90e6-6427297a49de", "sighting_of_ref": "indicator--ac5a7017-f3af-4108-a48d-f4b589fb4dd8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5ddc07-4a31-4546-8bed-36dc1416f6d6", "sighting_of_ref": "indicator--ac5a7017-f3af-4108-a48d-f4b589fb4dd8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68334795-6ea8-4f2c-ba3f-1f73eccd9612", "sighting_of_ref": "indicator--ac5a7017-f3af-4108-a48d-f4b589fb4dd8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a0d77b-2903-4c4f-a600-bd3a5ee81957", "sighting_of_ref": "indicator--1c142d45-1d95-40c6-86f6-aca561d2c4a6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72682b5-f7bb-4b03-bb2f-bd60b22c713b", "sighting_of_ref": "indicator--1c142d45-1d95-40c6-86f6-aca561d2c4a6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e953661-d1ba-42c9-947c-3181cafd8225", "sighting_of_ref": "indicator--1c142d45-1d95-40c6-86f6-aca561d2c4a6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b948e9c6-d929-4ae7-a56e-45540632cf2d", "sighting_of_ref": "indicator--a07c8e65-0295-4e69-8dae-eb4e84c705c0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4458b96a-a935-45dc-97ed-bde4d5ae67a7", "sighting_of_ref": "indicator--a07c8e65-0295-4e69-8dae-eb4e84c705c0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e0e5cf-cb29-4f72-a867-b0ccfe1a87d1", "sighting_of_ref": "indicator--a07c8e65-0295-4e69-8dae-eb4e84c705c0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3992ce4-3f70-4bfe-9707-2addf4dd5f5c", "sighting_of_ref": "indicator--e25d6dab-25f4-4fc8-8ec3-b6df643eec36", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921cf659-fd52-4f77-a474-e0c56bf779c8", "sighting_of_ref": "indicator--e25d6dab-25f4-4fc8-8ec3-b6df643eec36", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b804ad64-0b69-4ce9-ae1e-f54799cc8101", "sighting_of_ref": "indicator--e25d6dab-25f4-4fc8-8ec3-b6df643eec36", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d049cc-9986-43a6-a166-10d09248eca1", "sighting_of_ref": "indicator--314c8ae3-18d3-4b13-91bf-c9d4f6111e48", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f91463f-66fe-41ff-a2dc-c125fe4cda0b", "sighting_of_ref": "indicator--314c8ae3-18d3-4b13-91bf-c9d4f6111e48", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304b18b1-b1e1-47f6-8521-f3a0551c479b", "sighting_of_ref": "indicator--314c8ae3-18d3-4b13-91bf-c9d4f6111e48", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8999ad-2273-46b4-9d50-5e82f03ecfb8", "sighting_of_ref": "indicator--98298d75-eca3-4d5b-b5de-2e30be9b456f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2e0f61-9aa1-4812-b4c4-eb6ce84f522c", "sighting_of_ref": "indicator--567115a3-79a4-4c88-ba30-0e00f47c074e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1598d14-820f-471f-83b4-5ecb42f92d81", "sighting_of_ref": "indicator--6c186312-cc6b-4d8e-bee1-d6a9aef82982", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacba915-9d23-4ec8-a240-cc8282a8a30e", "sighting_of_ref": "indicator--521355ba-b5db-4d62-b1ee-e3501d3d1288", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ff03ca-81aa-4762-9438-ac768d8d90fd", "sighting_of_ref": "indicator--521355ba-b5db-4d62-b1ee-e3501d3d1288", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb9ff76-a2b6-4007-bca5-2484ecebbdc1", "sighting_of_ref": "indicator--521355ba-b5db-4d62-b1ee-e3501d3d1288", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19600bb-06e8-420d-97b3-1e3fcede0d42", "sighting_of_ref": "indicator--2635ec2a-d1e5-43ba-88c4-8b16172b37a4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86aa601d-c876-4276-9121-38040f1f126f", "sighting_of_ref": "indicator--8dfd4bdc-e5eb-4fe6-aa56-969d6a0279e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bdd0c1-a2d8-4a28-9056-5e9eac98711b", "sighting_of_ref": "indicator--8dfd4bdc-e5eb-4fe6-aa56-969d6a0279e7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc81ba3a-b897-41af-a620-2da6182f7362", "sighting_of_ref": "indicator--8dfd4bdc-e5eb-4fe6-aa56-969d6a0279e7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3210e096-bf13-4751-9227-69062d5f5a9f", "sighting_of_ref": "indicator--0a25dda8-6271-46e9-86b6-a8a64175b2cd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372e801a-f099-496c-b47c-e420afb189b2", "sighting_of_ref": "indicator--0a25dda8-6271-46e9-86b6-a8a64175b2cd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c79538-76ac-44f5-ae85-ae55ee4ef4ae", "sighting_of_ref": "indicator--0a25dda8-6271-46e9-86b6-a8a64175b2cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079b983e-3134-4abf-b16a-f1d3203af0cf", "sighting_of_ref": "indicator--6be1a1ec-3400-414b-8453-32a9d87c7a82", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b03e2a4-2938-4b63-aa60-0e00b753eacb", "sighting_of_ref": "indicator--6be1a1ec-3400-414b-8453-32a9d87c7a82", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d55b85-e20d-4586-9ed0-73a03b8e10d4", "sighting_of_ref": "indicator--6be1a1ec-3400-414b-8453-32a9d87c7a82", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3707976a-7895-44f2-b158-b25c258efee7", "sighting_of_ref": "indicator--23598b6f-e4e8-44be-83da-5fba12d75448", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61290f71-48e0-4447-a988-48086bef57b0", "sighting_of_ref": "indicator--23598b6f-e4e8-44be-83da-5fba12d75448", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a156c63-1380-4da7-8193-3fd250700a2d", "sighting_of_ref": "indicator--23598b6f-e4e8-44be-83da-5fba12d75448", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d69681-08d1-4e68-8cb6-cc689e42889e", "sighting_of_ref": "indicator--2ac5408f-84cb-4f09-a236-0fe2a9de431b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e4b91b-4fbb-45c5-9184-7ff3269eafe0", "sighting_of_ref": "indicator--8acc23a3-2aa5-41e6-b611-f82a4c557998", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ef7186-494b-45eb-8f10-b1b190ec0727", "sighting_of_ref": "indicator--58c8b609-217a-4727-a2f6-33c6e8035527", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcaea92-ad17-43f5-8c48-98b9add9345d", "sighting_of_ref": "indicator--58c8b609-217a-4727-a2f6-33c6e8035527", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49eb7c3e-faad-4e87-912f-469b925c750f", "sighting_of_ref": "indicator--58c8b609-217a-4727-a2f6-33c6e8035527", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248a588c-d370-4d5c-a3e4-46ecec76faf0", "sighting_of_ref": "indicator--814365f8-2d0c-492a-b772-e02a8f38f7ac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755f1592-7942-4924-ab25-95b86efa4368", "sighting_of_ref": "indicator--814365f8-2d0c-492a-b772-e02a8f38f7ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69873fd3-c89e-4a9a-8b5d-f049685372d3", "sighting_of_ref": "indicator--814365f8-2d0c-492a-b772-e02a8f38f7ac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786fdd5a-085b-4878-a721-9ce8eb32f332", "sighting_of_ref": "indicator--757636ff-3a7a-4dca-b5f8-b607ef2b33f0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05196f71-7297-4191-96f8-5707dbf5bf3b", "sighting_of_ref": "indicator--757636ff-3a7a-4dca-b5f8-b607ef2b33f0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6962e1df-a36e-41da-aae2-4aa8edb91621", "sighting_of_ref": "indicator--757636ff-3a7a-4dca-b5f8-b607ef2b33f0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5149be-80a6-41e4-aefe-bd02f35b5964", "sighting_of_ref": "indicator--ab6b0c3a-56bc-4ced-81ec-23e723603fa7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baebed6-36ef-4e45-9c51-0bddaecf8a41", "sighting_of_ref": "indicator--ab6b0c3a-56bc-4ced-81ec-23e723603fa7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75cd98e-e00c-4aeb-b585-a65c40ee5543", "sighting_of_ref": "indicator--ab6b0c3a-56bc-4ced-81ec-23e723603fa7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263dac2a-128d-4e7d-b9a5-ba5a30ed84c7", "sighting_of_ref": "indicator--83f58d44-c2b9-4917-a209-cc527233aa55", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088e6010-a97b-4876-8059-2688f38695ff", "sighting_of_ref": "indicator--ee969b8d-5b3b-4af2-aed1-6a0f81369e38", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ad9fea-f8ec-4861-abd1-80a0f4ddd2f9", "sighting_of_ref": "indicator--ee969b8d-5b3b-4af2-aed1-6a0f81369e38", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58bb51d-8d73-4278-8b6b-23552ad7b691", "sighting_of_ref": "indicator--ee969b8d-5b3b-4af2-aed1-6a0f81369e38", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84945d2b-092d-4753-aff8-52b31a223910", "sighting_of_ref": "indicator--3a698cc0-22c3-40d1-997c-9a1e60013884", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555a0927-e507-4e0c-a738-705c297e034f", "sighting_of_ref": "indicator--3a698cc0-22c3-40d1-997c-9a1e60013884", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc991ec-bb0b-4255-87e5-d05983bdff2d", "sighting_of_ref": "indicator--3a698cc0-22c3-40d1-997c-9a1e60013884", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7952c0d-1553-425d-910d-6b64ad1e4754", "sighting_of_ref": "indicator--86928469-2dfb-4242-bdc2-c2000145ef68", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3f7569-f462-4f05-a119-3575bcd9f891", "sighting_of_ref": "indicator--86928469-2dfb-4242-bdc2-c2000145ef68", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a074c57d-fc61-4caa-846c-d8d837d9dee7", "sighting_of_ref": "indicator--86928469-2dfb-4242-bdc2-c2000145ef68", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759ab6bd-7108-4932-8670-8c24bf78e677", "sighting_of_ref": "indicator--fe9fe9bb-147d-4576-b89f-36a0d3788c92", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140a396e-585b-425d-9354-14b537519477", "sighting_of_ref": "indicator--fe9fe9bb-147d-4576-b89f-36a0d3788c92", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7249138-8c50-4dfe-8c15-fe3703aa7dc2", "sighting_of_ref": "indicator--fe9fe9bb-147d-4576-b89f-36a0d3788c92", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033b9702-e1b7-4e62-8584-1197da4f490a", "sighting_of_ref": "indicator--637df97a-126f-48b7-ae7a-07a14bcc7009", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356b5f50-2998-48db-acfa-66ff421f63b3", "sighting_of_ref": "indicator--637df97a-126f-48b7-ae7a-07a14bcc7009", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc919a82-fb6a-408e-898b-8af32ac2cd5d", "sighting_of_ref": "indicator--637df97a-126f-48b7-ae7a-07a14bcc7009", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e0fe69-d65a-4408-8016-4b36f7e8caea", "sighting_of_ref": "indicator--9c415414-9cda-45c3-80bf-1d4a958eb314", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346ceaa9-0dc9-4913-b550-2210f8351126", "sighting_of_ref": "indicator--1d7b38be-c4e7-4589-b441-0fe19cd85db2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20101de3-468b-4f77-8d5e-ffe80b4b32da", "sighting_of_ref": "indicator--32abae95-bf27-4030-81d6-72d365014b35", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38cc4da-31cb-4711-a03b-16cb46419f19", "sighting_of_ref": "indicator--c2c92b8a-077d-4f07-9c32-31749058c5b6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c4c9c0-1f4e-465c-8a7a-51d578170ec3", "sighting_of_ref": "indicator--a4f2696a-17f8-49db-9a5c-27e07b75de9a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed66acd-5b4f-45ea-8512-1050e0acd5cb", "sighting_of_ref": "indicator--b7b79837-67c6-4220-adac-dd1e75ea0bc2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a157ab0-7027-481f-8964-dd6188cd439c", "sighting_of_ref": "indicator--b7b79837-67c6-4220-adac-dd1e75ea0bc2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d06841-e840-46be-ae0e-47afcdebffcf", "sighting_of_ref": "indicator--b7b79837-67c6-4220-adac-dd1e75ea0bc2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ed0970-313a-448a-8899-34088db4735e", "sighting_of_ref": "indicator--a727fda5-8c6c-4301-8945-0e61f88fe9ac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f38d11-e17d-409c-aab5-eda3c2e7fced", "sighting_of_ref": "indicator--a727fda5-8c6c-4301-8945-0e61f88fe9ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803809bf-1010-4d8c-aa49-e418b745628b", "sighting_of_ref": "indicator--a727fda5-8c6c-4301-8945-0e61f88fe9ac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe40807-8b88-4549-ab73-04d56f15f833", "sighting_of_ref": "indicator--a727fda5-8c6c-4301-8945-0e61f88fe9ac", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746bcba5-ca01-465e-9840-9146182f64f5", "sighting_of_ref": "indicator--233ba8ba-1717-489e-8a15-a3ef1f9e4466", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290027dd-6fcc-435a-9f69-64b859f08cff", "sighting_of_ref": "indicator--233ba8ba-1717-489e-8a15-a3ef1f9e4466", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af60e18-d7bc-4a30-bfa8-eff59065dfdc", "sighting_of_ref": "indicator--233ba8ba-1717-489e-8a15-a3ef1f9e4466", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e727e870-f8b7-4cd4-8f48-f678e545caca", "sighting_of_ref": "indicator--5bb8568b-d7eb-4cb6-a1e8-acaa2503ac8b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba63f56c-1e0e-437e-908c-b023264ef890", "sighting_of_ref": "indicator--5bb8568b-d7eb-4cb6-a1e8-acaa2503ac8b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0a7f90-988f-4d2b-ae69-71ae1b43afba", "sighting_of_ref": "indicator--5bb8568b-d7eb-4cb6-a1e8-acaa2503ac8b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94dd761a-6c23-442c-a953-16e67a1fec19", "sighting_of_ref": "indicator--5bb8568b-d7eb-4cb6-a1e8-acaa2503ac8b", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617671c7-e987-488c-b27d-4132b6305659", "sighting_of_ref": "indicator--f2d18d86-1c7f-48a4-8a53-1914199520f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b378b8e-60e0-4d19-bbf2-9915cebf55f7", "sighting_of_ref": "indicator--f2d18d86-1c7f-48a4-8a53-1914199520f4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0ccc98-14b6-491c-9c4e-6f8b1f6c47b1", "sighting_of_ref": "indicator--f2d18d86-1c7f-48a4-8a53-1914199520f4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287c3199-8e9a-443d-9c52-a36a25c28e2c", "sighting_of_ref": "indicator--f2d18d86-1c7f-48a4-8a53-1914199520f4", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88e74be-bf5a-420e-b3f0-54af62d3aaea", "sighting_of_ref": "indicator--f1964b8b-97a8-4079-a8b2-cd68cb8db3ad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6de4af-ba7c-4378-9581-c49a689692f7", "sighting_of_ref": "indicator--f1964b8b-97a8-4079-a8b2-cd68cb8db3ad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3765e5-b87d-4d7d-bf21-a832fee456a9", "sighting_of_ref": "indicator--f1964b8b-97a8-4079-a8b2-cd68cb8db3ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2055f322-d5fc-4937-970d-8bb7723f7af7", "sighting_of_ref": "indicator--f1964b8b-97a8-4079-a8b2-cd68cb8db3ad", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a743a42-1bd0-49d1-aa8d-d10da4e3e918", "sighting_of_ref": "indicator--8b1f6375-ac66-43dc-bc97-b9278815e358", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b123f450-e54c-4ab9-bfb8-f9b5954dc3f5", "sighting_of_ref": "indicator--8b1f6375-ac66-43dc-bc97-b9278815e358", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a46189-2a8a-42d1-907b-22d9f5188834", "sighting_of_ref": "indicator--8b1f6375-ac66-43dc-bc97-b9278815e358", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa772e7-c342-44f0-92d2-8447761f77cf", "sighting_of_ref": "indicator--8b1f6375-ac66-43dc-bc97-b9278815e358", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990f7624-babd-4b48-8c4a-1a3740c20174", "sighting_of_ref": "indicator--8e5ddc13-8ee6-4b10-95fa-7e879590ce44", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473403a7-1904-4d5f-bb4f-1712359aa1d8", "sighting_of_ref": "indicator--8e5ddc13-8ee6-4b10-95fa-7e879590ce44", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94297ea9-ca88-45af-82b8-1cb5171ebcd2", "sighting_of_ref": "indicator--8e5ddc13-8ee6-4b10-95fa-7e879590ce44", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3637e92-6238-4c59-9a6d-3cf517be3f2c", "sighting_of_ref": "indicator--8e5ddc13-8ee6-4b10-95fa-7e879590ce44", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ca09a6-9472-4c52-a76f-3be7cb4c23ef", "sighting_of_ref": "indicator--ba321e2b-fcca-4d35-a32a-6e132b1e86ea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc61b9e-74fd-444a-a5d5-ec6c89f1dc1f", "sighting_of_ref": "indicator--ba321e2b-fcca-4d35-a32a-6e132b1e86ea", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4be3b36-5926-4a65-9af8-80057e22eb05", "sighting_of_ref": "indicator--902a1a04-8e94-40b4-a5e7-b46fab64cdac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b029db08-d145-4280-a748-4f8c1f8ee387", "sighting_of_ref": "indicator--902a1a04-8e94-40b4-a5e7-b46fab64cdac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468041bb-9b1b-489d-8f5b-a92dd63c4d35", "sighting_of_ref": "indicator--902a1a04-8e94-40b4-a5e7-b46fab64cdac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3454cc21-a43b-400f-b389-25b635e10de7", "sighting_of_ref": "indicator--fa1148b7-f3fd-460f-95d7-6ce20b1b2b75", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa47f3a-5697-45cd-8e02-8f083440fc9d", "sighting_of_ref": "indicator--fa1148b7-f3fd-460f-95d7-6ce20b1b2b75", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce16aae-15fc-4206-8ff1-7088107aaca2", "sighting_of_ref": "indicator--fa1148b7-f3fd-460f-95d7-6ce20b1b2b75", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befa2090-3f07-4073-ac8b-7ef41ed301c7", "sighting_of_ref": "indicator--f745c130-9939-416e-b1ef-aca29a2c5e4b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b9306c-9302-4c0e-b82f-5acaef234e9e", "sighting_of_ref": "indicator--f745c130-9939-416e-b1ef-aca29a2c5e4b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df41076-f848-423b-80f6-5b50752a443a", "sighting_of_ref": "indicator--f745c130-9939-416e-b1ef-aca29a2c5e4b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f42e5d-93a6-4b14-9126-0d08685aef11", "sighting_of_ref": "indicator--869ef8be-acba-4214-8ffe-ac76c9a6ea21", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15da5a43-f310-456b-92b2-5f513d7f529e", "sighting_of_ref": "indicator--869ef8be-acba-4214-8ffe-ac76c9a6ea21", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748b6889-1585-411e-b6e5-30c8e5e969a1", "sighting_of_ref": "indicator--869ef8be-acba-4214-8ffe-ac76c9a6ea21", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cab9a73-3bed-43cb-bf85-330a56141f8d", "sighting_of_ref": "indicator--acbd9549-fda6-4a41-b4c2-c20330ef317e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360aa800-950e-4c00-9e14-a2ffa0352053", "sighting_of_ref": "indicator--acbd9549-fda6-4a41-b4c2-c20330ef317e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6633086-7f13-4dc0-a08c-ad0911738c0c", "sighting_of_ref": "indicator--aa3545af-c113-4de4-9e05-5f3271ae63da", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251b573b-51a7-42d6-864d-14041758ee7c", "sighting_of_ref": "indicator--05bf6620-722f-4570-bda3-e72b9d4dba94", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7491e613-efa8-463a-8c01-a71254d7391b", "sighting_of_ref": "indicator--05bf6620-722f-4570-bda3-e72b9d4dba94", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f3fbfe-65ae-4463-873f-378bc0f52030", "sighting_of_ref": "indicator--5eeb1273-0813-4e57-a619-51183f2da830", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6176d6f4-350c-4ab1-806e-d134e0472d5d", "sighting_of_ref": "indicator--60c65e0e-c97f-4ccf-9e23-c34416e0de70", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46314b0c-afa9-46d6-9103-27e638f54ec3", "sighting_of_ref": "indicator--ee358eec-b77e-449e-8ef2-3f43eac657ee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dade56c-f8b4-4416-bdd2-ef0ac65f9038", "sighting_of_ref": "indicator--ee358eec-b77e-449e-8ef2-3f43eac657ee", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14db3ae2-18c1-422a-8344-b074a0133a16", "sighting_of_ref": "indicator--ee358eec-b77e-449e-8ef2-3f43eac657ee", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e397d1f1-e344-4915-8784-7db75ab39501", "sighting_of_ref": "indicator--3126bd70-ca97-4f29-acf2-375fced386e7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de490bad-877a-4305-9e33-67f4bfbc1ce5", "sighting_of_ref": "indicator--568e5a79-e378-4372-bf9a-dd4134fd50f9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079f5731-bfb9-4ee3-b962-7ac6875c4700", "sighting_of_ref": "indicator--3be6dfe9-9eb6-4ce2-8788-7e556f3feb1c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8370c1-90c2-4225-94e1-46d08337e168", "sighting_of_ref": "indicator--3be6dfe9-9eb6-4ce2-8788-7e556f3feb1c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf04a2b-f49c-4795-8d46-7c049d908b25", "sighting_of_ref": "indicator--284acf69-2a08-46c6-9d84-bbf5cb1f5a81", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a9a53f-58e4-4d3e-9d67-792be67cb876", "sighting_of_ref": "indicator--d927a337-029e-4b43-8fbe-4575637e0ce4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471303b2-cc4d-4938-ac2d-e9a4c3d9bfec", "sighting_of_ref": "indicator--2aaa66a3-f481-4c38-b028-daecf4b31d1b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da999b1f-ccd9-44fd-b689-7cb67aa47642", "sighting_of_ref": "indicator--9ba22e87-9ee8-4c0c-9304-902de62b2a95", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551b3f11-1fd4-459c-9221-d033bf5b2a98", "sighting_of_ref": "indicator--518098f6-7a41-4f59-a026-343aac3d5478", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b096cb7-af92-44ae-86b0-8d89663eb22c", "sighting_of_ref": "indicator--4586bd1a-1003-4e42-9969-7a70ee06695f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be967744-1c1b-4c10-a210-d691dedf3b2e", "sighting_of_ref": "indicator--4b7c06db-0598-45e5-84ef-47c2f8502e7a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843c6483-71cc-4d5a-b2a5-2e28e5a353ab", "sighting_of_ref": "indicator--f1e1195c-2f86-4ab3-987d-21448348c8bb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25899ac-1184-48b2-adec-92a2ce144054", "sighting_of_ref": "indicator--f1e1195c-2f86-4ab3-987d-21448348c8bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62df683-4fc9-42b8-a41f-f2453ddbb82a", "sighting_of_ref": "indicator--d58ffa01-50dc-423d-bddd-e9fccbcda9f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6c0f01-2b6e-4a2a-84f4-67c975352f9a", "sighting_of_ref": "indicator--b36ae332-472d-40eb-9c57-81f968ff8d33", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7f8c6c-f02b-4b78-8a3d-0b0156ba0300", "sighting_of_ref": "indicator--a2cc33be-a7c5-41e4-be1f-4e917400c1a9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84ec0c9-b01b-4f75-9c7a-db04da3b95d1", "sighting_of_ref": "indicator--f6a714ac-9adc-4eb3-8e9f-e81726619193", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366628e5-68ad-4bfe-9e7c-52654d0d9660", "sighting_of_ref": "indicator--a0d5218f-c1c6-4014-bf53-9832c2d50a13", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58074ad6-0fa4-407d-93bd-c85a02ea5c40", "sighting_of_ref": "indicator--bb2dc12a-3e49-447b-ac0e-f3535641c21d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533af172-d78f-4a5f-bb9f-747f296c17f8", "sighting_of_ref": "indicator--bb2dc12a-3e49-447b-ac0e-f3535641c21d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d0d105-a009-4534-9e27-7e8e1e59ea53", "sighting_of_ref": "indicator--73786266-a9b6-4204-81c4-a42b7d7b2a90", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff202f6-9e2a-42d4-8060-67b7a962ccf5", "sighting_of_ref": "indicator--73786266-a9b6-4204-81c4-a42b7d7b2a90", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ce5211-1efa-4e6c-b2ad-4cd03b4ee8a5", "sighting_of_ref": "indicator--900f7df6-53e8-4424-a430-0d825f241a1e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4814f54a-1080-45a7-96ff-3ca5a55fa81b", "sighting_of_ref": "indicator--7a11ff1c-8233-41b0-8d54-027001e3a437", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446b43a8-aa75-446f-8dda-98f5ba732e38", "sighting_of_ref": "indicator--052d8581-146e-4fa9-9ad9-27d31c1d79d3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee0500d-c0ec-4fab-acf7-e94e6cc83a89", "sighting_of_ref": "indicator--1c4b526b-110a-4dbf-bb04-6c18b1dd727d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddd98f2-4301-4edf-bf09-c7981a359f67", "sighting_of_ref": "indicator--5e37e94f-1c9c-4e30-bbdc-40d9ac0642b0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e05dff-bb57-4819-9760-cdbe3ce7e3f6", "sighting_of_ref": "indicator--62047692-34ce-4557-b19d-88e7add21ef8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835c5450-225a-4282-bcf4-0fdab3d5b6a3", "sighting_of_ref": "indicator--782de1eb-a65c-45ae-8699-6374c3a289c1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec51593-fd11-4ab7-ab83-0433126cbc46", "sighting_of_ref": "indicator--bcc21fa5-caac-41a5-bcf6-506d05725043", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c19d423-4bd4-475f-befa-bfedbda52492", "sighting_of_ref": "indicator--62461777-66bb-42b7-b085-35855b7bd1fd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c28e26-fbd9-4ee7-80b5-4d3673d7d833", "sighting_of_ref": "indicator--901af7b8-bc04-444d-9523-1baa3dab8005", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46555668-ff89-4162-af3d-8ba9f8c43124", "sighting_of_ref": "indicator--c8a3ee90-4c92-430c-8c98-41dddb01d166", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9aa092-6669-42ad-8fc8-8ec4f91e0427", "sighting_of_ref": "indicator--52bbfe99-b4a5-4294-b020-90ad44bad131", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbfa770-51e8-40f2-96c3-7d77ee666cee", "sighting_of_ref": "indicator--52bbfe99-b4a5-4294-b020-90ad44bad131", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfe4c15-3749-4543-b893-aedb5e06f964", "sighting_of_ref": "indicator--4b98888d-2419-4acc-94a7-7f445d96d741", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c3a069-d397-4d7e-87e9-0b05b5aaf789", "sighting_of_ref": "indicator--156f5476-9341-488b-9a0c-9d9bcfd545f8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f6f95b-3e24-4b3c-989a-6f4b99ab6037", "sighting_of_ref": "indicator--278943ba-b968-474b-865e-9254f41505e1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3c0c06-63d7-43ae-aaa6-5197a34d56ad", "sighting_of_ref": "indicator--b9611d17-e1fb-46b2-82de-bdf091266f0d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88e9023-19f4-483f-95a8-d7abcb3f699f", "sighting_of_ref": "indicator--a9035d20-8a04-47d0-a702-9ca1addd1c46", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372160f0-d9e0-43a7-bdb6-e56752611a06", "sighting_of_ref": "indicator--1afec554-0cf9-45cc-a478-2393a7dc31f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae93fa58-a13c-4d2f-bf9b-001ed03cca10", "sighting_of_ref": "indicator--018b35ec-3b3d-4505-b9eb-4cd650a0dda6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca75dcec-c35a-414a-93e7-0a0f49979852", "sighting_of_ref": "indicator--6fe39a74-dd09-4249-85e8-af214fe9e387", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dbe6d9-66ad-4e1a-a8ce-a91b8c8a3a39", "sighting_of_ref": "indicator--ac02464b-b726-4e87-8b8a-2a315de11e9d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a63c80-e9a3-48ad-ba74-4371c1a5dbff", "sighting_of_ref": "indicator--055d9f30-f501-4316-819b-98780df9be0b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca73e212-601a-403b-ba74-3c0123f3c1b6", "sighting_of_ref": "indicator--57029ad2-b367-49e4-8663-03cd1409a171", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d3db17-c0e2-4ddf-832c-4e9c4459ad40", "sighting_of_ref": "indicator--e7c26d1b-7f8b-45b5-ad9f-feb09d759f5c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f6912d-753e-495d-adaf-fe3a080d7224", "sighting_of_ref": "indicator--ed06e113-55ba-48a6-b5b7-14e595070798", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bb5c5c-1ea7-4b1a-ab1e-de93e33eb6b1", "sighting_of_ref": "indicator--cbb7c95c-1775-46e0-abce-c95fb57fe13c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c63fb0-a015-43a0-8de7-343bda51798e", "sighting_of_ref": "indicator--c07a367d-da5d-4ad2-997c-1d661bea63d4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9731ce44-b81b-4c2f-ba76-cf02d85f5670", "sighting_of_ref": "indicator--9d9f7f10-6d34-4dce-8391-30ef9973fce1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdd09a7-ceaa-4f59-974f-194d8dc1f001", "sighting_of_ref": "indicator--4a67e20f-4bca-4ecd-8c44-9dfcaec445d5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca4d124-1f20-4ae8-b26c-4fa9eb388f7f", "sighting_of_ref": "indicator--75da4302-417b-4f10-b298-3c78bb9e687c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557df3c5-508a-43f0-bf4e-ab3327ab853b", "sighting_of_ref": "indicator--e2352614-ace6-451c-aa53-e0b502c21047", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135b4f22-d4f9-42e9-8798-aec72dc3bb74", "sighting_of_ref": "indicator--893f2fbb-3825-4277-aff0-e945d46a08e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad350f82-88fe-416b-b6ff-d58560ee5b2f", "sighting_of_ref": "indicator--05c10eba-e397-4fa9-8635-897047c8cc25", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3bd71b1-13ba-4621-889e-8376c9d848f9", "sighting_of_ref": "indicator--20bbbec1-99f1-4107-9d91-82b41a317a28", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4afdd6-ad3c-490c-b0bd-bdb2d59c7b9e", "sighting_of_ref": "indicator--e6196b19-3cd3-4922-a7a6-7415473d7b1f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0ce03b-0453-4179-8f65-e62d0e6b1b05", "sighting_of_ref": "indicator--9caf931c-32de-4e99-b23e-aa430ae6ff34", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60482136-9a50-4d9d-9eb3-9e23df1c2389", "sighting_of_ref": "indicator--bb55f24e-d324-45d3-8cfa-39e026bbee12", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9bd5e9-c3de-4968-8cdc-60c56152987e", "sighting_of_ref": "indicator--8c07c6e5-948a-46c1-9d40-e3dfd28a0e7a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cf69aa-4cfd-44e5-a999-28f3e6340ba4", "sighting_of_ref": "indicator--cef9b130-45bb-404b-89ec-b0d5600ecb04", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f795e5-d803-4b10-827a-40690595c80f", "sighting_of_ref": "indicator--95e245cc-223a-4a51-8d8f-c49f7684d204", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0892cc-57a8-4e7d-927d-dcfd1e8243d2", "sighting_of_ref": "indicator--b898d648-d7b0-4496-bdf1-145df733115d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4d092f-f070-4345-909c-b7f5a5a93e32", "sighting_of_ref": "indicator--b898d648-d7b0-4496-bdf1-145df733115d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1f567c-c8ff-4ac7-96b5-1f95b1309f55", "sighting_of_ref": "indicator--dc133361-bb1c-4b6a-91d7-2b8889f04f97", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42051741-af3a-4838-8ba1-535188916da2", "sighting_of_ref": "indicator--3b1dabef-0c90-4914-ad56-eb0c2f109e7f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5528d15e-f29c-4021-97c2-bbca5ea337f7", "sighting_of_ref": "indicator--3b1dabef-0c90-4914-ad56-eb0c2f109e7f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81a9dc5-03b1-4294-b3df-62824f54c4c6", "sighting_of_ref": "indicator--4e2af528-9bba-44c7-aa1a-5b510e13782e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdcc3df-e49a-4e33-9a35-98e7dc322eb2", "sighting_of_ref": "indicator--9e38fad9-4744-4888-a537-dc8a696853c1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a5259f-2e13-4eaa-b4b9-222e12cedbdf", "sighting_of_ref": "indicator--63256f4e-7bf3-411c-9083-658b0c0e06ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec545fb4-95cb-4ce7-bbc9-1ae9608c97e8", "sighting_of_ref": "indicator--63256f4e-7bf3-411c-9083-658b0c0e06ff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3009ab-0e9e-4e5a-8ea7-fc0f22f206bc", "sighting_of_ref": "indicator--63256f4e-7bf3-411c-9083-658b0c0e06ff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f2f48d-2ef4-4dbb-949c-c1c6ab39e4ab", "sighting_of_ref": "indicator--84a34285-ff40-4d1f-8ef7-6b89f7015763", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a98562f-1f81-49dc-8e46-e4686bad82ab", "sighting_of_ref": "indicator--c651e8ac-01b6-455f-9342-666093c0f4ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a2a160-34c1-4f26-9961-00d6138d4fb2", "sighting_of_ref": "indicator--29f65465-abb5-4c61-a5b6-3ad4dfd5b277", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c902e3a0-deb8-4bb1-a339-46365f147589", "sighting_of_ref": "indicator--6a902f36-1d39-4b00-a64a-2f01e72514d8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cd7fc0-0571-4cbc-93cf-1d816b6fcbcf", "sighting_of_ref": "indicator--cefe3d11-c410-4435-b151-941fd7f2a825", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe31ea37-9e05-47dd-a540-4135df78f903", "sighting_of_ref": "indicator--8e31d3be-8701-4349-a713-8662c5612804", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cef16c-71f9-43b7-a2af-d40754dc8510", "sighting_of_ref": "indicator--8e31d3be-8701-4349-a713-8662c5612804", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac70cb6e-a385-42fa-93dd-4b05ff834ba2", "sighting_of_ref": "indicator--8e31d3be-8701-4349-a713-8662c5612804", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d53568-d41e-4cfc-8a9b-65187a9dff93", "sighting_of_ref": "indicator--60a7e1aa-ca6f-47b4-88d9-c7ffec30feae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974499f8-aa78-4baa-9856-538b775b3a00", "sighting_of_ref": "indicator--7eabb3a7-536a-4d53-9cfd-c0679ea76df8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3a99b8-57d8-4ff4-b19f-d78b2c7415e1", "sighting_of_ref": "indicator--ff987bab-a817-4724-81bd-4da23b84330e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f4f263-81f9-4d35-9b09-9358d9161471", "sighting_of_ref": "indicator--d36b546e-4696-4773-bb26-2653e7cb69da", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c82bbaa-4598-45d0-9926-4aba5f575601", "sighting_of_ref": "indicator--bbe21987-b04e-4b45-a510-d7159d410a73", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c36473-d327-4c01-9f9f-abc66323905b", "sighting_of_ref": "indicator--b97f0e96-72ad-43d1-a04d-5a4da92aba5c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6e90a9-080e-4502-a15d-44f12def157b", "sighting_of_ref": "indicator--be12d884-aeec-4c17-b670-b2893e9bbe33", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd29eac6-f626-4cf5-9857-967bafcf1f78", "sighting_of_ref": "indicator--a4f0a419-745b-44ef-a592-4cd1f0b6249c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388a314d-d55f-4820-936a-f80a60027172", "sighting_of_ref": "indicator--a6f36418-71bb-4216-8b90-e73fdb902f59", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f17a3d-2ddc-4dba-9a39-7c3e2aed7cab", "sighting_of_ref": "indicator--dbf3efed-c857-4d2c-9f02-93a6a2513ebe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b68140-78d3-4609-8282-37cddbee7ec8", "sighting_of_ref": "indicator--3c6a6b19-865e-4421-95cd-e9149437047e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a25e9f-9afb-4dca-9562-5dd6ea0d3650", "sighting_of_ref": "indicator--a36d7ee2-afb7-4380-b378-4c11a52c6047", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9f5a4e-3d8e-4a91-acba-c061061efc78", "sighting_of_ref": "indicator--5905a025-bc8c-4e28-b4fd-f85eb1eea96e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c464f495-b5d2-4468-a9f9-2e24fcd7a7ea", "sighting_of_ref": "indicator--c2044cc9-25ae-4768-a417-5e8798a06ce6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54abd8da-9e0e-4876-8779-c2b413be4cd4", "sighting_of_ref": "indicator--c2044cc9-25ae-4768-a417-5e8798a06ce6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2b78ab-796f-4be9-89e8-82a5a6989bcd", "sighting_of_ref": "indicator--c2044cc9-25ae-4768-a417-5e8798a06ce6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d655976-0d54-48b5-a03e-0435390557c4", "sighting_of_ref": "indicator--ae80d657-6c86-4c41-b96c-a9ba16429eb0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9564f8-1c86-47d5-b6ec-a522cc21e095", "sighting_of_ref": "indicator--ae80d657-6c86-4c41-b96c-a9ba16429eb0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fb6275-6ed7-4c77-aaed-a2862eb3da72", "sighting_of_ref": "indicator--ae80d657-6c86-4c41-b96c-a9ba16429eb0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47f4ee6-2ad7-486c-b46e-6adf5dd15dfe", "sighting_of_ref": "indicator--b51c7a9c-e2c6-4333-ba15-700e1ed18b93", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed90865-bff1-4585-a2d1-d6b9635e8359", "sighting_of_ref": "indicator--25e0dacf-e97b-44e6-ad60-2b4f43bf9e88", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc83187-08f3-427b-8d61-db4b68c68f71", "sighting_of_ref": "indicator--f1a51aac-5746-4a22-8780-10c7d1777db7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967088fb-3cc4-488d-a5f7-dbf69c1d89b8", "sighting_of_ref": "indicator--f1a51aac-5746-4a22-8780-10c7d1777db7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ed1cf2-ac41-41ec-a8f2-c22d68475e8e", "sighting_of_ref": "indicator--f1a51aac-5746-4a22-8780-10c7d1777db7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42e4103-d11e-499e-badf-8fcf18d468d2", "sighting_of_ref": "indicator--933c28eb-38df-4338-8b0f-a7f40b42a85d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8ccbba-7d91-41d1-802b-621fff12dff4", "sighting_of_ref": "indicator--9f112912-f868-4bc9-ba6e-5b01a8315443", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5eca3f-3725-4548-b37b-133770e4ba25", "sighting_of_ref": "indicator--aeaf38c4-56da-4674-9034-04890375434c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f9cfcb-bc1f-4eb5-83bc-6674cb3cbc8e", "sighting_of_ref": "indicator--aeaf38c4-56da-4674-9034-04890375434c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0cb466-b8a4-46b0-8cb2-60d41de5f540", "sighting_of_ref": "indicator--1fa9ee8b-5e0b-4ae1-9827-39aa50972015", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03227bc0-0ad2-42a9-976b-069ae7284964", "sighting_of_ref": "indicator--8cecaeda-1242-4092-8010-f68d17535c1d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13ac42e-37f1-453f-8a6e-6141748724fb", "sighting_of_ref": "indicator--0287cfe2-3226-421f-bf5e-bee4c42eea13", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73163e16-9f88-4f25-9b86-a9c146063729", "sighting_of_ref": "indicator--0287cfe2-3226-421f-bf5e-bee4c42eea13", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb3d178-bd84-4a35-8b06-0be96ad751ac", "sighting_of_ref": "indicator--fe42be9c-9709-4160-96cf-9d96198eb4a5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534f9910-4dbf-424d-b0f5-26f610c08b17", "sighting_of_ref": "indicator--fe42be9c-9709-4160-96cf-9d96198eb4a5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cc38e4-c0fb-4d51-b121-aa3714b920d1", "sighting_of_ref": "indicator--6167a9e1-7980-4cdf-9f36-241de7c14142", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c3f2f3-aaa0-4d9a-a6b4-c12f0dbca922", "sighting_of_ref": "indicator--6167a9e1-7980-4cdf-9f36-241de7c14142", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a0edfd-11ab-4c38-8e6f-4afaaf562655", "sighting_of_ref": "indicator--6167a9e1-7980-4cdf-9f36-241de7c14142", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039242a0-f26d-4a4e-bf66-50fc83dbae5b", "sighting_of_ref": "indicator--c88594ef-9d2c-4c81-b381-bc6b717600ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce3dd4a-1bfc-41ce-bd86-8d7f1594018f", "sighting_of_ref": "indicator--c88594ef-9d2c-4c81-b381-bc6b717600ce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76225491-14eb-4326-a80b-36e82bff069e", "sighting_of_ref": "indicator--c88594ef-9d2c-4c81-b381-bc6b717600ce", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5fcbadd-ba46-48da-b939-6a07e4de769f", "sighting_of_ref": "indicator--b39ca357-2512-4dbe-ac79-77410389e1fb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96384269-be22-401a-9e0e-ed60f35ada31", "sighting_of_ref": "indicator--914c7d4b-62ad-465a-aafb-06e3e2699506", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daaa07f0-2d0f-48b3-967a-7d28316f38ab", "sighting_of_ref": "indicator--914c7d4b-62ad-465a-aafb-06e3e2699506", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de2047e-ffcb-43c5-ae38-1bc43a6687df", "sighting_of_ref": "indicator--914c7d4b-62ad-465a-aafb-06e3e2699506", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc19225-eb67-45e7-ba42-5381d5451610", "sighting_of_ref": "indicator--a4881fbc-8cd4-42de-8bc7-a7dbb74d6830", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52da98a0-eca1-4a5c-8eaa-5eb06b55d85a", "sighting_of_ref": "indicator--3233d686-fa20-4955-8bbe-410ce522729e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4674d96c-f22b-43c9-883a-2ea94a0a8f53", "sighting_of_ref": "indicator--8e507690-cf42-4580-80b0-e1c97b70857a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cfd693-7008-45bb-a7b8-679ed0d2a327", "sighting_of_ref": "indicator--8e507690-cf42-4580-80b0-e1c97b70857a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54490c1f-8162-48d4-a7a2-722cb28e544b", "sighting_of_ref": "indicator--8e507690-cf42-4580-80b0-e1c97b70857a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb8f4d9-0f3e-4a31-956a-e64892d56b9d", "sighting_of_ref": "indicator--4be65a4d-55d2-4955-98b8-32bc75e8b563", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14aa370c-55eb-46f3-961d-04b6359b2f69", "sighting_of_ref": "indicator--4be65a4d-55d2-4955-98b8-32bc75e8b563", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af699759-a508-4f67-9d4c-a60e13a6bcdf", "sighting_of_ref": "indicator--4be65a4d-55d2-4955-98b8-32bc75e8b563", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d99d8e-96dc-4af1-a202-5360785ac7ed", "sighting_of_ref": "indicator--1f161fa5-7a35-423a-988b-147dbd90d57b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7ba766-7c74-4cae-9268-d9437cdee8aa", "sighting_of_ref": "indicator--1f161fa5-7a35-423a-988b-147dbd90d57b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b3bb72-0d59-49d0-81cf-239e1993fb52", "sighting_of_ref": "indicator--1f161fa5-7a35-423a-988b-147dbd90d57b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903c0717-d3cd-4694-9080-4a18c30e113e", "sighting_of_ref": "indicator--bc56afe7-4639-4fb5-99a1-87de66dc04bc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a7abf5-08ef-4675-9d82-7a29de08624f", "sighting_of_ref": "indicator--bc56afe7-4639-4fb5-99a1-87de66dc04bc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6553efb6-5d81-491e-a6ee-a4acebdd8af4", "sighting_of_ref": "indicator--bc56afe7-4639-4fb5-99a1-87de66dc04bc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb00596-ce58-4f23-81f0-566c44e18e98", "sighting_of_ref": "indicator--cf165f4d-6106-4c8e-bb68-a417096df6b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1656baf-6126-449a-8dfc-d51ffa500e1f", "sighting_of_ref": "indicator--cf165f4d-6106-4c8e-bb68-a417096df6b2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986d64bc-0b5c-4af3-80f8-eac9d743cc8d", "sighting_of_ref": "indicator--cf165f4d-6106-4c8e-bb68-a417096df6b2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1a0b86-2775-4029-888e-7a657be27569", "sighting_of_ref": "indicator--3d4af3df-7be3-47fa-bb4b-38feaa718ea6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05bada88-548a-4fc1-894e-04f1c2009618", "sighting_of_ref": "indicator--3d4af3df-7be3-47fa-bb4b-38feaa718ea6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4567476e-fe75-4ece-813c-cde216dd3765", "sighting_of_ref": "indicator--748e8a26-e83b-4212-b72f-d5598da7496f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc0fd32-2c23-4489-beff-1996b566f178", "sighting_of_ref": "indicator--748e8a26-e83b-4212-b72f-d5598da7496f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbd28c7-a91c-40a7-ade2-77249d9c91ec", "sighting_of_ref": "indicator--748e8a26-e83b-4212-b72f-d5598da7496f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d995dfa-5696-462c-bb57-7d7c34a868e1", "sighting_of_ref": "indicator--fbe12123-53a6-495a-84b2-c1933bf7cbe3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af3aa01-f30f-4e67-bcf4-392d862a8354", "sighting_of_ref": "indicator--b660d001-9515-47dc-81a8-4be93619ad30", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751b087b-a804-4a61-afd9-8a894cfd02b1", "sighting_of_ref": "indicator--78fd3af9-3376-424e-b26d-6d1424156175", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d383aeb9-c23b-484f-85b4-4d8040481a48", "sighting_of_ref": "indicator--8c333b2c-1647-47a6-b7cb-07260adc371f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f17a32-d9bb-4192-840f-d42dd7817694", "sighting_of_ref": "indicator--29123450-6612-4959-89ad-20619444a554", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8237a68-3bc0-42d9-a087-b3b46be93b53", "sighting_of_ref": "indicator--29123450-6612-4959-89ad-20619444a554", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c817eb83-d93f-44d7-9294-d40fb3437eac", "sighting_of_ref": "indicator--29123450-6612-4959-89ad-20619444a554", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568cdef2-c9a5-4a2f-90f1-4b55405c2653", "sighting_of_ref": "indicator--4cec31a5-7667-4fdc-ad9a-2b821cc74cd2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190fd536-1475-4708-baea-14f0ff45d823", "sighting_of_ref": "indicator--48996ff5-39e7-45bb-a495-133898b84530", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105d77a0-3c1f-492b-a192-4de7854e57c0", "sighting_of_ref": "indicator--d087928d-62ab-48c0-9da8-c89cb909c599", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8429226b-2424-401b-a798-57fabf7ff4d4", "sighting_of_ref": "indicator--ab5865d4-9ae9-436f-92cb-0ddd0873b1e3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb596b2-302f-4e15-8cf8-7af05f472e07", "sighting_of_ref": "indicator--9bec8548-5bc7-486c-b877-3eeed18e0254", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6625ca4-1576-4f64-ab33-e9ee237c1070", "sighting_of_ref": "indicator--3042f2a8-3191-40e8-bb64-0e087a9a9700", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5abb2b2f-7c0c-4e2c-a36a-debc0afb753c", "sighting_of_ref": "indicator--42718263-5ba4-4c92-bd7d-8a3cf9ce92d4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4026d0b-c5d2-4acd-a128-041cef65d111", "sighting_of_ref": "indicator--a32dbe9b-a537-4e1a-ae45-2c466ed7b70b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db90e7e-9ed0-47ce-ab8a-19a38cd069ba", "sighting_of_ref": "indicator--4a2fec01-90f3-4f89-95e8-40010f862a12", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516cdac1-3c55-49d8-8b38-3f3e4b826120", "sighting_of_ref": "indicator--8bfe05f7-1405-437b-b324-e990ccff0ef0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bbe0a2-12bb-48b0-9196-65da248eae2e", "sighting_of_ref": "indicator--8bfe05f7-1405-437b-b324-e990ccff0ef0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b18474-91fc-4b94-9564-106f00966a2c", "sighting_of_ref": "indicator--8bfe05f7-1405-437b-b324-e990ccff0ef0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1620a8c-d995-4978-b9af-c9ec4f7b2a99", "sighting_of_ref": "indicator--8bfe05f7-1405-437b-b324-e990ccff0ef0", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830cca9e-9160-488b-a39b-d097c70839f6", "sighting_of_ref": "indicator--a578a7c2-1772-4d2e-9bce-3351d81863a6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0f9421-5a10-4e42-98b7-c80099b0498e", "sighting_of_ref": "indicator--84c4f969-1b40-47a9-9959-678a61fedf93", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9344b5-a2b8-44d6-bb56-6c6995fce60e", "sighting_of_ref": "indicator--880c0b34-86c2-4598-ab7e-bc481297cd63", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a024384-ea9e-4803-9304-2e1031ed2594", "sighting_of_ref": "indicator--b1ce2e2a-066f-46e9-8c70-7cbd8b31d0c2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a64a64-90fd-4a65-a490-7565b813a45f", "sighting_of_ref": "indicator--27d9ecfc-ba32-463d-ac61-6e1ee4d204b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366b3aee-1646-411b-b910-6f3ddd68047e", "sighting_of_ref": "indicator--4d92ac97-c924-44b0-bc91-63c43cc9ed86", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4ab2c2-cdd3-4e31-b85e-4fc965551f09", "sighting_of_ref": "indicator--6d2e3d19-f8ff-4644-a458-7cbcb77bfda2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfbf5ab-06f2-4077-9b56-4f8db1e0cedd", "sighting_of_ref": "indicator--6d2e3d19-f8ff-4644-a458-7cbcb77bfda2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c36cff5-917f-4444-9699-841442f0e546", "sighting_of_ref": "indicator--6d2e3d19-f8ff-4644-a458-7cbcb77bfda2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae94f52-cfbd-4f7b-af1b-e82a97d87958", "sighting_of_ref": "indicator--341b9c01-eb93-477c-b7df-fec049c488df", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0bd9c49-9bc1-45bb-9c89-a6c944cc4097", "sighting_of_ref": "indicator--341b9c01-eb93-477c-b7df-fec049c488df", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb1a014-b310-49f9-b786-bdfa2338d1b2", "sighting_of_ref": "indicator--341b9c01-eb93-477c-b7df-fec049c488df", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169cc334-f01b-429b-8b8e-7acc2ac7ee2a", "sighting_of_ref": "indicator--fdcc5f72-23b2-42cf-a31d-c43cc935b321", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2080ae9-d920-4da8-90f0-84eebf7b074b", "sighting_of_ref": "indicator--fdcc5f72-23b2-42cf-a31d-c43cc935b321", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087a0bdf-dee3-4a91-8c01-37faf67ee5ae", "sighting_of_ref": "indicator--fdcc5f72-23b2-42cf-a31d-c43cc935b321", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038f0378-dba4-4b7d-8b5d-de40a5b57dcc", "sighting_of_ref": "indicator--03480bea-8a55-47bf-aadf-de815482dd92", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e172b5-3933-4c75-a686-0fafef51a72f", "sighting_of_ref": "indicator--8f0b9ba9-9301-403a-bbb1-f900e45d836f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3fbc47-4af7-4043-8d44-e61f8d904bb1", "sighting_of_ref": "indicator--8f0b9ba9-9301-403a-bbb1-f900e45d836f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd74636-97f3-4e28-8707-00cf498a47e5", "sighting_of_ref": "indicator--8f0b9ba9-9301-403a-bbb1-f900e45d836f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa4bba2-e48e-4a30-8a02-de1f0c74d639", "sighting_of_ref": "indicator--b00fdf19-b397-4125-9967-21602af483f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7cf7d1b-a822-44c7-b1f4-0ba4aecb4d56", "sighting_of_ref": "indicator--4a2027e5-ea15-418a-aa75-80a44865538a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19465576-cdc0-4970-8f9a-929909070f1c", "sighting_of_ref": "indicator--4a2027e5-ea15-418a-aa75-80a44865538a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85788f2d-1063-4dc5-9205-fe242886c541", "sighting_of_ref": "indicator--4a2027e5-ea15-418a-aa75-80a44865538a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198417c4-7b2f-4463-8e75-21405352726a", "sighting_of_ref": "indicator--1bb1253f-8a22-4b16-8dae-b085e89e1091", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6761556f-56b3-4e7f-b52d-ea100d73326b", "sighting_of_ref": "indicator--1bb1253f-8a22-4b16-8dae-b085e89e1091", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13027f28-6810-4c91-bcb3-2cf37534fb76", "sighting_of_ref": "indicator--1bb1253f-8a22-4b16-8dae-b085e89e1091", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86258065-93a3-4700-a613-1dc156459b2f", "sighting_of_ref": "indicator--fb71c0bc-ead6-44c3-bbe6-59423d81582f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22620788-e720-4704-a628-0d4cc6a94bb1", "sighting_of_ref": "indicator--fb71c0bc-ead6-44c3-bbe6-59423d81582f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d64d6ff-1d3f-45bd-a31b-d42e86cabdf2", "sighting_of_ref": "indicator--182ec172-e1d2-46a9-89ec-f5206c360f31", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b689de8-6e96-472c-b840-ff40a07d6599", "sighting_of_ref": "indicator--5a0d8587-8284-44c9-ad19-84d521ce9d04", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e13657-a882-4e58-8898-d1e45b3a5261", "sighting_of_ref": "indicator--79a80d3c-30ef-4a53-bfde-014263a4df94", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00ede20-4662-4a2b-bb2f-c78005c2e376", "sighting_of_ref": "indicator--9aa6f37a-cc37-4e90-b4b3-ed6f059661b1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0bf5be-4c9d-4f22-9f32-503026cd05fb", "sighting_of_ref": "indicator--9aa6f37a-cc37-4e90-b4b3-ed6f059661b1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010a6e40-0e9e-4815-8ace-02bb00ec174c", "sighting_of_ref": "indicator--9aa6f37a-cc37-4e90-b4b3-ed6f059661b1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a54e4e-e4d0-4898-b529-11a4cc2e6af2", "sighting_of_ref": "indicator--66324b85-fa51-433a-9e03-67cef7c57cfb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd242c7-0c31-4f05-9fdf-f6128e2be728", "sighting_of_ref": "indicator--673047d7-9047-40cb-b45c-999193f3d2e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbccfac-1bb9-4ff6-b3e4-c3638e8e4ca7", "sighting_of_ref": "indicator--673047d7-9047-40cb-b45c-999193f3d2e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd709e23-c3dd-48b3-abe7-9d08456e1d61", "sighting_of_ref": "indicator--e36ca548-c307-4db1-8333-acfa562e91a5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9916fdab-d36c-4059-a0c0-c8a265cc2125", "sighting_of_ref": "indicator--7bb62a52-6a9f-45b6-a4f8-0135c43bf640", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bace1d6c-51db-4c62-a5d6-d065a9210662", "sighting_of_ref": "indicator--7bb62a52-6a9f-45b6-a4f8-0135c43bf640", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--accf8e4e-476e-483c-a485-a34b41c09587", "sighting_of_ref": "indicator--002660ff-bd89-4eed-8a02-ad322ed908a3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4870cb2-f59d-4e82-b2f3-da39131e6014", "sighting_of_ref": "indicator--002660ff-bd89-4eed-8a02-ad322ed908a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d98af2a-067a-431b-8872-b47fabdf7234", "sighting_of_ref": "indicator--c522b23b-4322-4a31-a056-42082d86257b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d28c56d-f32e-47df-b6f2-f4f2952b8ed0", "sighting_of_ref": "indicator--c522b23b-4322-4a31-a056-42082d86257b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cda9526-6a16-4424-82e3-01ca1a1f1f5b", "sighting_of_ref": "indicator--c522b23b-4322-4a31-a056-42082d86257b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c608e97-deed-4998-b0a8-cdbc0e2477a5", "sighting_of_ref": "indicator--bf7824dc-4aa5-4124-85fd-1013c4cf268c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5b5097-80e2-4861-acea-922cb587a9f7", "sighting_of_ref": "indicator--bf7824dc-4aa5-4124-85fd-1013c4cf268c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ce5d72-033a-4a27-ad87-4c75838ca7b7", "sighting_of_ref": "indicator--bf7824dc-4aa5-4124-85fd-1013c4cf268c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82ac34b-25ec-4fe3-ab91-cf4b76319cbb", "sighting_of_ref": "indicator--c9bb7d61-c4d1-4a78-aaea-7f907cb94164", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d6bce7-6da7-4a5e-8ddb-6dad1a64d291", "sighting_of_ref": "indicator--c9bb7d61-c4d1-4a78-aaea-7f907cb94164", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8fb747-c96f-4947-91b4-797c4a8b7766", "sighting_of_ref": "indicator--c9bb7d61-c4d1-4a78-aaea-7f907cb94164", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5035f2-f434-4ca1-8958-66f1e3572253", "sighting_of_ref": "indicator--d49d5e22-8351-4609-b2e1-4ac1842086ff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e732510c-0df9-4707-91e7-ef3f880912a0", "sighting_of_ref": "indicator--c8889325-a5c6-4d91-9cdb-979d29b9369d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802e1fd1-ea93-4790-a388-175174070372", "sighting_of_ref": "indicator--c8889325-a5c6-4d91-9cdb-979d29b9369d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda2d04a-7d26-41fb-a16c-bb4584b12b4b", "sighting_of_ref": "indicator--c8889325-a5c6-4d91-9cdb-979d29b9369d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a983d95-ae13-435e-b181-386f112bf5b7", "sighting_of_ref": "indicator--154a0a47-bd4b-4811-a525-e5ae41c8a719", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac11188e-0a5f-447b-ac36-5f0aa0aa112e", "sighting_of_ref": "indicator--1d775cc5-fd1e-44c1-a641-33e789e21766", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde44604-b87a-4848-804e-233409cf0328", "sighting_of_ref": "indicator--20d70abf-db0b-4c4e-9366-68ed508b6634", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b5a549-b68e-4228-8118-02140d9eccb6", "sighting_of_ref": "indicator--ac530e7e-d74d-48e4-9c89-81fc37f0a80c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1200db6a-651c-4852-b8d3-4872eb2e9da0", "sighting_of_ref": "indicator--24437634-8ba8-4dc1-a31f-bec3ee10fbf1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c3a908-3205-4051-bb6a-b4a889c1e9d9", "sighting_of_ref": "indicator--23811ea1-8920-43be-8ddf-c6cf4eec086c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfda1dbb-e4ba-42a3-b8da-b3233a1f853f", "sighting_of_ref": "indicator--7e6e6c46-aaba-4b3a-8e6b-05c230f0de0b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a8279a-b493-4bd6-a4f6-99b6d8d15c17", "sighting_of_ref": "indicator--f22eea4f-4691-4c8c-af36-49ce1eb44963", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481590b3-2e0a-4e1f-9488-b784aa28c54c", "sighting_of_ref": "indicator--e7f69a6f-8f11-424a-b97e-0dbd2c14ecf4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc724f7-e7a2-4ce7-9b33-6e21efed4147", "sighting_of_ref": "indicator--e7f69a6f-8f11-424a-b97e-0dbd2c14ecf4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f06cb61-f8b4-40f7-85e9-a92f05eb4aa2", "sighting_of_ref": "indicator--2acdbcea-b672-444f-96ba-7471e0226b12", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37593825-ab37-44a1-910f-15e8faf51033", "sighting_of_ref": "indicator--2acdbcea-b672-444f-96ba-7471e0226b12", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bd6bfc-44e5-411e-81a8-bb68865eda1b", "sighting_of_ref": "indicator--2acdbcea-b672-444f-96ba-7471e0226b12", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68343176-f301-47c3-b39a-dd97b8875a8f", "sighting_of_ref": "indicator--d9079f33-7930-477c-a3b9-b2e1f951c205", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04018b3-1663-4ead-be0b-ea3bf10e99e6", "sighting_of_ref": "indicator--44ad092b-cf77-4dd3-af87-4e39f9c1a595", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bca990b-b3d8-41dd-bcea-97da5c2aecf0", "sighting_of_ref": "indicator--742a8062-2fcb-4431-ab09-961af9be84ae", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af37198c-431a-40fe-a4c3-f061c3a61dab", "sighting_of_ref": "indicator--1b867496-3552-446a-b1b3-258f144772d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66636518-d064-47d9-835f-66b7a16481b5", "sighting_of_ref": "indicator--d87bd9d7-7935-4e58-bed4-fac53f38d5c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c59c15-51fa-4898-9157-48aaf0e28876", "sighting_of_ref": "indicator--bc8fab8a-8f7c-4616-bfef-1d684d3d3516", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b51141d-aec9-4556-974f-cd54d0331578", "sighting_of_ref": "indicator--403dec0e-75d0-4991-9671-a5c850ec7ecc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe8c321-d068-4ec4-9f71-9773fa059b32", "sighting_of_ref": "indicator--403dec0e-75d0-4991-9671-a5c850ec7ecc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5215cf-9fd5-4a4b-815b-d6fb558d3a43", "sighting_of_ref": "indicator--9d6f7b97-5537-48a0-8db3-cd84b03702f7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37ec78b-55f5-4e78-afb4-00c5b2b5f8cc", "sighting_of_ref": "indicator--58ef149e-affa-4812-905f-faa453eab237", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cd88bf-731e-4aa9-9e17-cf81941b5a40", "sighting_of_ref": "indicator--58ef149e-affa-4812-905f-faa453eab237", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0adc8431-92ec-4fdc-bdcc-a48b1d428948", "sighting_of_ref": "indicator--58ef149e-affa-4812-905f-faa453eab237", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4104cbff-f5b4-4c6c-8f0e-6ec1d6a558ff", "sighting_of_ref": "indicator--5e18cd2a-177b-427e-b519-4fa8db712172", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db092ba-2186-4dda-9499-1b6174638e76", "sighting_of_ref": "indicator--5860cb96-05b6-4574-9c35-809f5bad646a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fe6b4e-b8a7-4c2b-b997-6f12c1feb7ee", "sighting_of_ref": "indicator--045562f7-f4fb-4980-80de-4c33df9930b1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ae077c-ab72-446e-88af-fa4c1a9caa80", "sighting_of_ref": "indicator--045562f7-f4fb-4980-80de-4c33df9930b1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f848e80f-901e-43dd-945a-804ab1f82802", "sighting_of_ref": "indicator--e8e00ec6-0421-4c70-b824-fd10a043cea8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70247552-422d-4e13-b725-21a4d5791004", "sighting_of_ref": "indicator--e8e00ec6-0421-4c70-b824-fd10a043cea8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224ac9be-ceb6-4134-b1b3-d35451a73efc", "sighting_of_ref": "indicator--e8e00ec6-0421-4c70-b824-fd10a043cea8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d83738c-e63e-4895-b625-450254c236ad", "sighting_of_ref": "indicator--65d44623-f5e4-4b2d-b09b-00e5b0c5d050", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128ad301-a846-476c-8342-23aecee3adb8", "sighting_of_ref": "indicator--544713cd-30de-4358-8216-904cab38b791", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68827cba-23ec-40a2-9dbf-f308dd81e96a", "sighting_of_ref": "indicator--f7f63730-92d7-4725-bbf3-3666f0ffdde7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab248207-9783-451d-a461-444110a9b867", "sighting_of_ref": "indicator--9e716e06-1da7-4796-a4f3-815091782dd9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209373ea-6fa8-42b1-b259-f7b4c1dacec0", "sighting_of_ref": "indicator--0062fa84-7b8b-4afb-8f99-cd8433580f1b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ed5f82-12a3-4847-9a2f-0f47b72953a8", "sighting_of_ref": "indicator--0062fa84-7b8b-4afb-8f99-cd8433580f1b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4b8ab5-722b-4d2a-9864-d3d68929026c", "sighting_of_ref": "indicator--0062fa84-7b8b-4afb-8f99-cd8433580f1b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3282960-ad2c-49c4-be07-36fc7c655ad3", "sighting_of_ref": "indicator--53b2e41e-3a28-4a4d-8d28-65c2cc552dba", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0206385c-f00a-4208-b21d-8173d2663e13", "sighting_of_ref": "indicator--53b2e41e-3a28-4a4d-8d28-65c2cc552dba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d069d68-91db-43e5-90fb-11dcf0b1420a", "sighting_of_ref": "indicator--53b2e41e-3a28-4a4d-8d28-65c2cc552dba", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43f8019-ab2c-416e-8c55-bc8edeb7f942", "sighting_of_ref": "indicator--02891943-0859-42f3-b029-eb1a3131c3b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cd0b4e-42ff-4b93-9bff-36ef27348553", "sighting_of_ref": "indicator--5e2a9d09-f975-42e3-900e-d524e735e048", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f74d62-18a3-487b-8568-4e23b3f241b1", "sighting_of_ref": "indicator--266bc75f-e162-44a7-a22f-da31158ef612", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3118e6e-a0aa-4244-8188-19de27f35036", "sighting_of_ref": "indicator--fe97ec7b-dedd-4fca-9d49-b2f11f20f9fe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d7d7ca-619b-4dca-ba9d-5db3b9451799", "sighting_of_ref": "indicator--53d0fa3d-9c0a-411b-b482-48e094929e2b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d6b79e-2f01-4001-a7e7-628f55a79c1c", "sighting_of_ref": "indicator--edcd1ee7-1905-43c9-b912-7a62a2cf0a46", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b856b1-aa4b-4de8-9baa-282a8eed8531", "sighting_of_ref": "indicator--edcd1ee7-1905-43c9-b912-7a62a2cf0a46", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9035400e-52d5-40a5-b0d7-55f932e40340", "sighting_of_ref": "indicator--edcd1ee7-1905-43c9-b912-7a62a2cf0a46", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbbf4f4-8e70-49e4-8349-440b90a0c9dc", "sighting_of_ref": "indicator--6d6280d8-2654-412f-85d7-46d9a6ed4ba9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41865de1-346f-4750-a9fb-24f24a2d5786", "sighting_of_ref": "indicator--6d6280d8-2654-412f-85d7-46d9a6ed4ba9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4d8198-5995-4966-b6d7-8455ff784491", "sighting_of_ref": "indicator--6d6280d8-2654-412f-85d7-46d9a6ed4ba9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c611f687-52bb-4431-bd95-f52f897b9fed", "sighting_of_ref": "indicator--4fcbce16-1806-44c0-93c4-15911f2183ca", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f23917-1093-48f7-91dd-68607faaa286", "sighting_of_ref": "indicator--4fcbce16-1806-44c0-93c4-15911f2183ca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d206ed-bba3-4a09-98d2-9f97616a10e3", "sighting_of_ref": "indicator--4fcbce16-1806-44c0-93c4-15911f2183ca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad98362a-c9cf-44a0-9559-74dd1cdb1c65", "sighting_of_ref": "indicator--aa849a96-86f1-445b-bc83-9df086ef4bc7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b041212a-429f-4a8a-a590-c5ff3a972715", "sighting_of_ref": "indicator--32195ae1-24e8-4e66-b037-e78111b86533", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c89ce0-3d6d-4b8a-a705-d778d1c69c12", "sighting_of_ref": "indicator--bc44f2bc-98b4-4b50-a9f8-01d7ac991de4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31034ec8-db75-4c5b-9537-aec02213c118", "sighting_of_ref": "indicator--0953ae53-2758-41cd-9004-91dc1599abf4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19d0140-6bc4-4e72-b226-f30f8d4b91b9", "sighting_of_ref": "indicator--8513e876-1d35-492b-b4af-61b37382a28d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ada349-fcef-4f56-b3e5-9f8b278cc6d8", "sighting_of_ref": "indicator--717684fb-9b7c-429f-a601-d000d76d09c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b0a195-67dd-473b-bc73-ae3839c60d9a", "sighting_of_ref": "indicator--1ffa4649-7efe-488c-b502-3e103bf83eb6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ed5e45-9a64-41ef-ada7-867db24a4ce3", "sighting_of_ref": "indicator--e5da53a1-98b5-41f8-bfc8-e77fc853f7ee", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6be4c61-bb53-4e08-82cc-8bed4a455b25", "sighting_of_ref": "indicator--9934cbb4-585d-4796-bdf9-0991b8feab37", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413ce5ea-b70a-43ae-8808-89a122150c7e", "sighting_of_ref": "indicator--29beed55-5523-4639-832b-caa770ce4eb8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf2f24e-e759-42f0-9c7d-65be3e6b16c7", "sighting_of_ref": "indicator--1f9fd43a-8217-4922-8ae3-86088a585913", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759b51bd-eb5c-4868-97bf-071355aa65da", "sighting_of_ref": "indicator--1f9fd43a-8217-4922-8ae3-86088a585913", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ee1b1a-a464-47d8-9fdd-5fa18f4ba07c", "sighting_of_ref": "indicator--1b016294-6eaa-4d87-b147-631b955140a9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf0ce8f-b3a3-49ff-a99b-f72b3cb4fce1", "sighting_of_ref": "indicator--dd702a5c-677f-44c1-b3d6-ef5237d3ca04", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd0a75f-dc28-470c-9e27-5049e94843b1", "sighting_of_ref": "indicator--922bda74-76f4-4e5e-97e5-e601d9a5889f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571e887e-c4f1-4123-9db2-d7cda6bcc704", "sighting_of_ref": "indicator--8d5d2df7-abbb-4d8e-9f5c-361f4fde3e48", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3954cd81-db4c-4900-9aa0-9e16d2e1cf38", "sighting_of_ref": "indicator--6f875d93-9a73-4f9a-8030-841154f7905a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78668c30-ac1b-4e04-b5a8-4cc3215eb265", "sighting_of_ref": "indicator--6f875d93-9a73-4f9a-8030-841154f7905a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64871f15-7f9f-4377-a36a-36ef5d250fbe", "sighting_of_ref": "indicator--6f875d93-9a73-4f9a-8030-841154f7905a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d644a509-db37-41a3-94d6-c3028f01a0db", "sighting_of_ref": "indicator--4111dcff-559d-453e-93ac-912a636ab3e7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6279ec37-518f-4e18-9445-06a1354e8ea0", "sighting_of_ref": "indicator--1fbfeca5-5f7a-45ac-94e4-e82da399690f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f270846b-1148-4a6d-a9f8-0d4f695c27ae", "sighting_of_ref": "indicator--1fbfeca5-5f7a-45ac-94e4-e82da399690f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f73da8e-cc87-49a5-9989-d6a95a40f045", "sighting_of_ref": "indicator--1fbfeca5-5f7a-45ac-94e4-e82da399690f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56024f8d-e3b4-4b5c-a4c8-1cb278068ffc", "sighting_of_ref": "indicator--7e0746b9-9973-4a2b-a0e2-6c9a088ff47e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99375f48-2a9c-48ef-8b3e-ab064cc064cd", "sighting_of_ref": "indicator--7e0746b9-9973-4a2b-a0e2-6c9a088ff47e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a25d55-2233-41ba-93f0-f87b204c5678", "sighting_of_ref": "indicator--7e0746b9-9973-4a2b-a0e2-6c9a088ff47e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59105eb3-29f2-4672-b930-d0a70c0f268f", "sighting_of_ref": "indicator--f42d1765-791a-424c-b341-ff7b673f82c8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc48b43-82f9-4ee7-a1f7-4830eaf665c4", "sighting_of_ref": "indicator--a9e0b2bf-3c80-449b-8b4a-716c87776e4b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e138607a-42f7-474d-ab4a-67a590eb4299", "sighting_of_ref": "indicator--309846dd-a44e-44bf-818d-a1c8ad72f353", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e2dc72-6336-4859-865d-4aed942f4634", "sighting_of_ref": "indicator--f87b2d5e-43e9-49c6-a7a9-2967ba820de9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5feee6d8-bcf2-4f6a-8648-54a396f9d63e", "sighting_of_ref": "indicator--b5dcfac4-07fe-4226-a6fa-cc2201bef630", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafa0923-a834-47d9-915c-9ef6bd66ee6d", "sighting_of_ref": "indicator--dde87d97-fa9e-4fe6-8611-242d7763616f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da19b29-f073-4afd-b549-7ac00a373cd7", "sighting_of_ref": "indicator--62023460-381b-404e-96f3-33f0dc7c4dda", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa60d80-b259-4091-a72d-3182688c885b", "sighting_of_ref": "indicator--ea5fb289-998f-4981-b2e2-89c03cb34269", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80d0998-2d8d-4790-9cba-dd653f4977c3", "sighting_of_ref": "indicator--ea5fb289-998f-4981-b2e2-89c03cb34269", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42dfd5ed-3990-4a82-92c9-cce514f6a23d", "sighting_of_ref": "indicator--20dd2297-a791-4a75-87a9-53476fc38e45", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a5eb98-5479-4559-a5d5-b05fe5f903d9", "sighting_of_ref": "indicator--20dd2297-a791-4a75-87a9-53476fc38e45", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e49896-0c2f-4d2e-af18-e211eab6fb66", "sighting_of_ref": "indicator--20dd2297-a791-4a75-87a9-53476fc38e45", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e433f8db-c078-447f-99a7-99d6878a922a", "sighting_of_ref": "indicator--0e52dc5c-2e9f-4e14-b173-a91a5401b4d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1811f52-2021-4080-8326-545e1d30f6ae", "sighting_of_ref": "indicator--dd648b13-6635-408f-b2a2-a130336c388a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9cc9d8-b421-4401-a4d2-e98e3625c679", "sighting_of_ref": "indicator--dd648b13-6635-408f-b2a2-a130336c388a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c209971d-afc2-45a1-959f-855cc1ef94a8", "sighting_of_ref": "indicator--dd648b13-6635-408f-b2a2-a130336c388a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae07fdb-65d6-4de9-ae8e-f108c92e5f21", "sighting_of_ref": "indicator--2d87d0ee-551b-4e72-a328-a3f14803bb66", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ccaa7f-eff9-4500-b2a6-3ebfc29649ae", "sighting_of_ref": "indicator--2d87d0ee-551b-4e72-a328-a3f14803bb66", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d282dd3-305e-47d4-9803-43cfcf1b8f80", "sighting_of_ref": "indicator--2d87d0ee-551b-4e72-a328-a3f14803bb66", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e54684-e30a-46df-ad74-15a3e44d9685", "sighting_of_ref": "indicator--885d2eff-7e62-4b45-9263-530091532839", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14a3891-5a60-4c1a-95ec-f8a8701efc19", "sighting_of_ref": "indicator--885d2eff-7e62-4b45-9263-530091532839", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c00ce3-7279-4420-b878-3e1e316defb8", "sighting_of_ref": "indicator--885d2eff-7e62-4b45-9263-530091532839", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62bae7f-d212-41de-967b-265f6c11d980", "sighting_of_ref": "indicator--02ca9baa-2d22-4a30-8d4b-c096ea9a8214", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38f9011-ab8c-4b64-bc41-d9ec1e05fdc5", "sighting_of_ref": "indicator--02ca9baa-2d22-4a30-8d4b-c096ea9a8214", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ab1596-7567-4cbb-ae4b-ee6e6f8634c6", "sighting_of_ref": "indicator--3ad31729-ba7c-47c9-8400-ded804bd2e96", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e6c471-8e09-49ac-bc69-9a587c7aee1b", "sighting_of_ref": "indicator--3ad31729-ba7c-47c9-8400-ded804bd2e96", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a33c681-32e7-4868-b045-3ebb6833eedd", "sighting_of_ref": "indicator--3ad31729-ba7c-47c9-8400-ded804bd2e96", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54cc545-08aa-4753-ba01-003b75b54f0b", "sighting_of_ref": "indicator--4389c5bc-fd38-4e0c-9092-9aea8aa0f1c1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82158963-7c3c-47a0-b514-d7d73c67e23c", "sighting_of_ref": "indicator--08ede73d-d806-4b9d-88b8-d42c2054e96d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85554f53-afef-47a8-a81c-c06c82c283b1", "sighting_of_ref": "indicator--08ede73d-d806-4b9d-88b8-d42c2054e96d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6ec73f-ce2f-43e1-af83-8b7274723dcb", "sighting_of_ref": "indicator--bf2792e5-02e1-4c2d-bb40-5c4d97503019", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5f5d76-d813-4ea2-8acd-ac376bdb4126", "sighting_of_ref": "indicator--bf2792e5-02e1-4c2d-bb40-5c4d97503019", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e95831-f68b-4bbb-831a-46b95339e0a3", "sighting_of_ref": "indicator--3cf94695-7a57-4367-ba81-b3ca74387f35", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b722d31c-7091-41c8-8dff-40a39de98d87", "sighting_of_ref": "indicator--3cf94695-7a57-4367-ba81-b3ca74387f35", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c468db-5df6-420f-bc88-a2da10bd424e", "sighting_of_ref": "indicator--3cf94695-7a57-4367-ba81-b3ca74387f35", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca71b4dd-dbaa-4a55-afe2-d6759d2f6b53", "sighting_of_ref": "indicator--c9e9ec03-0ed5-41e0-bfc9-ad4aa35ff4c7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61f7b94-b0e8-4654-8ce8-1f0f49bfc1d2", "sighting_of_ref": "indicator--6308fa19-7d61-467c-ba51-e35775d797e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a09a5aa-425d-40a4-aa4c-01f8bc77934c", "sighting_of_ref": "indicator--6308fa19-7d61-467c-ba51-e35775d797e2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d66e43-17f8-43d7-b766-78f5cca2acee", "sighting_of_ref": "indicator--55815590-7a91-432d-b767-e4ae774e9861", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af786b74-16e6-43a5-b3e6-4b7e9da0ee61", "sighting_of_ref": "indicator--3f9b828d-86da-4410-9f23-d98f79c873f1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef31753-dced-4078-a4c8-754110960ae7", "sighting_of_ref": "indicator--3f9b828d-86da-4410-9f23-d98f79c873f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1af53c9-14d0-4170-8ea1-69885754523b", "sighting_of_ref": "indicator--3f9b828d-86da-4410-9f23-d98f79c873f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62fbbbf-3b7e-47b7-b5aa-68d25ee05648", "sighting_of_ref": "indicator--6714a33b-5d5c-4b91-a545-54e06ee78310", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945a5ee6-7ee6-458c-829d-c71edec3fd40", "sighting_of_ref": "indicator--6714a33b-5d5c-4b91-a545-54e06ee78310", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b63bca-cedc-4c38-94f3-2480b0940a49", "sighting_of_ref": "indicator--6714a33b-5d5c-4b91-a545-54e06ee78310", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a25bce7-99f2-4ed1-9bdf-1a7258b5a291", "sighting_of_ref": "indicator--6d1fe4ba-7bf0-4ed6-b784-444e8c73e22a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ec94bd-e4ec-40bd-af9f-583674321883", "sighting_of_ref": "indicator--6d1fe4ba-7bf0-4ed6-b784-444e8c73e22a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d280501-3fcb-4d7c-b486-d65ae36ae0dc", "sighting_of_ref": "indicator--6d1fe4ba-7bf0-4ed6-b784-444e8c73e22a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd91812b-a186-4411-8c9d-8a9f0b986395", "sighting_of_ref": "indicator--a9109cb0-bcbd-4797-a722-928092b12d41", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a354d599-742f-4b2f-97db-ee967d8e1778", "sighting_of_ref": "indicator--a9109cb0-bcbd-4797-a722-928092b12d41", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42228ec-73fe-4f9e-8e9d-ad3ca058ef4d", "sighting_of_ref": "indicator--a9109cb0-bcbd-4797-a722-928092b12d41", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0581552a-fba6-41d1-9aa8-244577aa71ab", "sighting_of_ref": "indicator--5d3d467d-0d54-42b4-8fe9-287fe27d190e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb46c1be-4ba7-4ecd-9920-f9e67793e55a", "sighting_of_ref": "indicator--5d3d467d-0d54-42b4-8fe9-287fe27d190e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e70afe4-c7e4-4727-9400-7367750b83ae", "sighting_of_ref": "indicator--5d3d467d-0d54-42b4-8fe9-287fe27d190e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70054107-4940-4a12-8e96-a62189dbf540", "sighting_of_ref": "indicator--0fbfda93-70ac-4006-ab47-f5dafc69f409", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d2453c-4a48-4056-b535-97953fda94cc", "sighting_of_ref": "indicator--30cfecd5-d2ed-414d-9de7-9e7e6c20ed97", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d538e474-62e5-46a5-bc48-54f8524022fc", "sighting_of_ref": "indicator--30cfecd5-d2ed-414d-9de7-9e7e6c20ed97", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d6630c-2d32-476f-b72b-0344905c1f31", "sighting_of_ref": "indicator--30cfecd5-d2ed-414d-9de7-9e7e6c20ed97", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57f3636-82c2-4d0c-868c-422d0983257e", "sighting_of_ref": "indicator--2e48986c-ceb8-421e-9335-8b067c7622da", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5078d6f9-82dd-4b60-b59f-1259722bbf99", "sighting_of_ref": "indicator--2e48986c-ceb8-421e-9335-8b067c7622da", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b76588-8501-4ada-b297-bdc44d147842", "sighting_of_ref": "indicator--ebe9f2c7-e6e9-4e67-b77e-19f58302809f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038a53f2-abd5-49ed-84e5-fc0199c33704", "sighting_of_ref": "indicator--4b56fc0b-7eb6-4ca6-9eec-98c3e6ef770d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b278fc93-eda1-4295-94d3-04b36543ebc2", "sighting_of_ref": "indicator--4b56fc0b-7eb6-4ca6-9eec-98c3e6ef770d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5937ac-ec28-47bd-a075-dd0a5ff70b7f", "sighting_of_ref": "indicator--bf48eea0-246c-41d6-a363-b9da47133251", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d019a9c6-715a-42f6-aeae-2ccdba2b8737", "sighting_of_ref": "indicator--75675666-d2d6-4593-a451-737be6c36565", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60583c2a-a84f-47ce-bc31-66dd1a72a840", "sighting_of_ref": "indicator--21c48a66-f1a9-4546-bcf8-53dfe4011c48", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d60600-8b36-4f33-a400-48f332a5bab7", "sighting_of_ref": "indicator--cedfec62-6ebd-43a7-bf52-a41245849f9e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c0157e-7eb4-4d32-9efd-708bc156fcfc", "sighting_of_ref": "indicator--a417eb87-063c-4170-b953-3a04055a0840", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac8adf1-a39a-4625-a6b6-fb859ffc4f9e", "sighting_of_ref": "indicator--a417eb87-063c-4170-b953-3a04055a0840", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7f97ab-0157-4628-8b1d-d796e4c89def", "sighting_of_ref": "indicator--dbfce631-8e67-4b11-8177-f40cdcad25f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c362792-7d71-4d3e-9ec0-ef82be9c81f7", "sighting_of_ref": "indicator--13fbb436-5597-4561-aa84-dce5a4906f8d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a62cb9b-b467-41a8-914b-ed82a4a8f55e", "sighting_of_ref": "indicator--200a9572-d2c2-4aaa-aabc-4c83a6492688", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1078804-0ab9-4b40-b4a7-07f4cde9300a", "sighting_of_ref": "indicator--200a9572-d2c2-4aaa-aabc-4c83a6492688", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe1693b-b063-45e6-8e01-00be5c0cc5bd", "sighting_of_ref": "indicator--200a9572-d2c2-4aaa-aabc-4c83a6492688", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3313c8-e760-4037-ad82-01116b278f9f", "sighting_of_ref": "indicator--84982542-77d8-4d0f-bb3b-852ed86163bb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3a7536-01c3-4cf2-904a-1c0741a7be8e", "sighting_of_ref": "indicator--d93616c3-0fec-4d34-848b-2a6fdbcae1be", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792a286f-b6c3-4aad-bfc9-d7dcc25fcabe", "sighting_of_ref": "indicator--4d6e554f-99e8-4ef9-8824-0c151c268718", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f2c91e-4ce1-4d9b-b0d4-fe7879f25416", "sighting_of_ref": "indicator--b4a5adf2-7518-40a7-b697-23eb532ab79d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ade373-4262-4f10-9531-e4e3c59ee81c", "sighting_of_ref": "indicator--3652965f-306d-4edf-91d8-5adcf2987542", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25afc297-f7a1-41cf-a8d7-a7daea0f1e61", "sighting_of_ref": "indicator--3652965f-306d-4edf-91d8-5adcf2987542", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d976362c-281e-49a1-9461-1b086406e3a0", "sighting_of_ref": "indicator--3652965f-306d-4edf-91d8-5adcf2987542", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2679962e-4133-43b3-a8d3-1d7b690953ea", "sighting_of_ref": "indicator--5271b044-d09a-480a-9fbb-81d129e05823", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2f231a-e025-4235-a8a8-6630720750a6", "sighting_of_ref": "indicator--5271b044-d09a-480a-9fbb-81d129e05823", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7e131a-7af2-4000-aff0-9e01a869afa7", "sighting_of_ref": "indicator--5271b044-d09a-480a-9fbb-81d129e05823", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a3f68a-c0af-4df0-ac64-ba8c4c746fce", "sighting_of_ref": "indicator--c8743b76-e52d-4f99-8497-9c14f476cf7f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c723eb-6475-42a7-a39e-27adcbaa6c36", "sighting_of_ref": "indicator--909c3e22-a139-4072-92d8-c10213817051", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9804e6a2-8172-4b6a-933f-29f9f755c442", "sighting_of_ref": "indicator--e01fbffa-3f54-4458-887d-21de80fe8491", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3a6cbc-263c-41d7-a81f-5bb4a98aac68", "sighting_of_ref": "indicator--c95634c2-17b4-4ad4-af2a-6e5b3446ce70", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af136939-bddb-40d7-8e3a-acec4b01618f", "sighting_of_ref": "indicator--c95634c2-17b4-4ad4-af2a-6e5b3446ce70", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ae9f58-df0e-4d11-b974-d372bf495c93", "sighting_of_ref": "indicator--b5ab5ab9-288f-4bd1-897b-ad22a33801a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2f7497-9ce7-4519-ba1e-77d4092db3cc", "sighting_of_ref": "indicator--797f5de1-bf11-4512-b524-7222d05569ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a69bfc-b739-436c-9034-ce7c8064712d", "sighting_of_ref": "indicator--5a83dbae-f86e-43e6-883b-7a6620b9f679", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1eb20b-72fe-4381-96a5-7f9878e6d69f", "sighting_of_ref": "indicator--5a83dbae-f86e-43e6-883b-7a6620b9f679", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b26a7c3-877c-4e6b-aac8-7e852f3323c0", "sighting_of_ref": "indicator--722870fb-8175-4d57-8e56-643eec8029ec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b253d2d3-1533-4c3a-95be-9c6a12c6d1bb", "sighting_of_ref": "indicator--722870fb-8175-4d57-8e56-643eec8029ec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609e6f51-36a8-4fd9-875f-861676b568d6", "sighting_of_ref": "indicator--722870fb-8175-4d57-8e56-643eec8029ec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2254d450-0217-4171-aa94-697938ec71b8", "sighting_of_ref": "indicator--ae89f506-fef9-47a0-9554-6f65da97dca6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61acaed9-b26f-468d-9df7-c598851313a4", "sighting_of_ref": "indicator--cc0851bd-43e6-4743-848a-a599b00fc9d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330c97d3-999a-4a43-a164-313b1bdcc7ab", "sighting_of_ref": "indicator--cc0851bd-43e6-4743-848a-a599b00fc9d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c3769a-9ca9-48e6-b6a0-a17e8f29d785", "sighting_of_ref": "indicator--094d7ada-0e29-40f7-823c-b2a5ac4a606d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f38e170-f33c-4485-86e1-e034be1f7134", "sighting_of_ref": "indicator--9b3ad1c3-6fe0-457c-9fc5-1c451747574a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef2600b-f1fc-46d1-9ccf-80c043124fca", "sighting_of_ref": "indicator--9b3ad1c3-6fe0-457c-9fc5-1c451747574a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30ab71b-21d8-4b14-814b-951fe01d8793", "sighting_of_ref": "indicator--76fbb112-9762-41db-855d-a8e44353aa6c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7d16fa-df2f-4231-8322-3b6188bc62e7", "sighting_of_ref": "indicator--19964a80-6a72-4995-810d-3e43b4c96969", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbfd52c-cba5-451d-97d4-9c5d641fa6a4", "sighting_of_ref": "indicator--417be66b-368f-46f7-a31c-81d7c480be8e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62562d9e-e733-4239-aee7-f3a13d395308", "sighting_of_ref": "indicator--9d4c4f9a-b86c-4dc2-b179-0486fcb02aed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23807bb-8a25-43fc-96c0-4b2a1c5f2fc2", "sighting_of_ref": "indicator--53125a33-f810-4f86-a7b1-a46c3bcc9ac9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e7fac1-bd92-4b4a-a37c-16ea5d05bfef", "sighting_of_ref": "indicator--5ae4106f-4964-41e8-a481-85c2b6767264", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b32b48-99f0-4112-8c5a-894f5c6f8be3", "sighting_of_ref": "indicator--728d3eb8-874a-4744-9112-29f2a6d387e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2606cd6e-1034-4057-b0e9-8a9a02ef71fd", "sighting_of_ref": "indicator--61e23230-0ce2-4b49-b06f-b1fad51c852d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0407c5-b4ea-42d6-bc9f-36e3a8ec1873", "sighting_of_ref": "indicator--e4b14b88-7acf-4d2e-8451-56a62c151609", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912964ba-365f-4d7b-b391-cfb0a90e4770", "sighting_of_ref": "indicator--5d48884d-bcd1-48af-90d6-6d98bb163805", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e39316-c53e-4ee0-9a05-21e8a71c0ef5", "sighting_of_ref": "indicator--c9f49f51-fceb-4437-a8d4-4cf1c6db9c9e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a58163-23c8-4ab3-9a8a-6b0de05386f8", "sighting_of_ref": "indicator--d7869848-985f-4254-b5df-197301662c3b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09525d35-fb75-4aac-9d2e-0d274f8c9fdc", "sighting_of_ref": "indicator--d7869848-985f-4254-b5df-197301662c3b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de19dab8-1655-4093-a75b-cc478af73a0b", "sighting_of_ref": "indicator--6fc2d4ce-0619-4880-a237-a09f057430bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e019d20b-3133-4764-b9f7-e7b2649c47bc", "sighting_of_ref": "indicator--6fc2d4ce-0619-4880-a237-a09f057430bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4e41aa-91fc-44ef-8abe-5db56308e2b5", "sighting_of_ref": "indicator--6fc2d4ce-0619-4880-a237-a09f057430bd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef4bd8d-4c48-472b-9bbc-de8b24191c19", "sighting_of_ref": "indicator--78687c1b-6e56-47fe-b0dc-df56975c5715", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a00c8f7-7882-4fe9-b772-bbdd8ec7cb7f", "sighting_of_ref": "indicator--78687c1b-6e56-47fe-b0dc-df56975c5715", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571fa108-6e04-49f3-8978-f49612ae341a", "sighting_of_ref": "indicator--78687c1b-6e56-47fe-b0dc-df56975c5715", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84431319-24b2-4fe7-91ae-914794c6493e", "sighting_of_ref": "indicator--44e9a81a-51e6-41e4-8639-6926583b0725", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178ce837-4c0f-4fa9-8886-7763a35d8026", "sighting_of_ref": "indicator--44e9a81a-51e6-41e4-8639-6926583b0725", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be253a5-e99a-4c25-8865-f1419ba41407", "sighting_of_ref": "indicator--44e9a81a-51e6-41e4-8639-6926583b0725", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760f5234-803a-4be4-93d3-39cf3ca0f6f6", "sighting_of_ref": "indicator--110c47ba-bd6d-496d-a374-08270b90ce82", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4be21f-e207-4dd3-a3d1-95c8bc72d19d", "sighting_of_ref": "indicator--5d39d312-69e5-4d66-99e9-80f6e30d62ed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37bb5267-559b-47f8-b5d2-a9e605ee0df6", "sighting_of_ref": "indicator--2645a8fd-9670-4edb-8df4-bbac2c66ac60", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3879a5cd-e0a3-4efd-ad42-373f12f7cb9b", "sighting_of_ref": "indicator--2645a8fd-9670-4edb-8df4-bbac2c66ac60", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e465245-d859-4346-bf9d-367d3faca339", "sighting_of_ref": "indicator--cea6a69a-8518-4ece-998f-02bbafd60a1c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129df854-de43-470c-a64c-d6ec175fc475", "sighting_of_ref": "indicator--cea6a69a-8518-4ece-998f-02bbafd60a1c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f193a925-671b-464f-bc75-61783e8944f9", "sighting_of_ref": "indicator--cea6a69a-8518-4ece-998f-02bbafd60a1c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426b96ab-7132-461c-b2e3-c42cc7234d94", "sighting_of_ref": "indicator--2c601b9f-4c4e-48b9-b5d7-455b15363ac1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7002cc9-3fbc-4061-907c-0d033c1a1d33", "sighting_of_ref": "indicator--71b5bb00-f609-4963-bf32-fd73475863cb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a0f287-87a0-4392-8103-48b241dc1f36", "sighting_of_ref": "indicator--354d0f8b-f9b0-4529-b502-43374d194e1c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742e722b-fe5a-41d8-95e9-741bd570560f", "sighting_of_ref": "indicator--47500f82-9f18-4a24-96e1-b4d9c2168109", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfffda3-1fa3-4a6d-b7f4-f1a225b11f99", "sighting_of_ref": "indicator--c951a790-47c1-4279-a530-891d8b987c52", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1007d3-cccc-4d7b-9caf-55a06f56c0d0", "sighting_of_ref": "indicator--c951a790-47c1-4279-a530-891d8b987c52", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a20230-2958-49b2-b6bd-4f37c452da7a", "sighting_of_ref": "indicator--c951a790-47c1-4279-a530-891d8b987c52", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dc0906-d0f9-46af-b2e0-f1ee1c746028", "sighting_of_ref": "indicator--bc11ec1d-02c0-49ac-91ab-c5969d1833ab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9c3af3-5a3d-409e-89fe-41b0af9a253d", "sighting_of_ref": "indicator--bf1d3597-30c3-4aa3-a425-7d5511a8a4a6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1f8db8-2ac9-4ffd-809f-c39d89d02576", "sighting_of_ref": "indicator--8b439aa2-919d-4a11-8b76-50c18b4bfd60", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d290eec9-8dae-4263-8c1f-d75779a1a375", "sighting_of_ref": "indicator--6c64c35f-23d3-4fb4-a705-1288e62a8d91", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26284dd-c180-4e17-ab51-c5e1abf06b77", "sighting_of_ref": "indicator--6c64c35f-23d3-4fb4-a705-1288e62a8d91", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2d8a58-4ce3-470e-b79b-18beaa5a28c3", "sighting_of_ref": "indicator--6c64c35f-23d3-4fb4-a705-1288e62a8d91", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aee6627-5939-4fc6-b5f7-65570196bc3c", "sighting_of_ref": "indicator--cde6b99b-e5d2-42c7-ac31-ca3dc4348220", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce267a2-a8cd-43fc-84af-3b153240eccb", "sighting_of_ref": "indicator--6f3549ee-7844-47aa-9775-20e92fc51cfb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a46de6-319c-43af-b2d2-da3b9adfe7b0", "sighting_of_ref": "indicator--aab9adab-fdcb-4655-ad60-975b42379e9b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026f621e-5f1f-4eaa-85f5-6c8c6bb305f6", "sighting_of_ref": "indicator--daab30a5-509a-4055-b5dd-ae0d165aef15", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b795fd1b-aac9-4cd7-87bf-26ea2686a79e", "sighting_of_ref": "indicator--daab30a5-509a-4055-b5dd-ae0d165aef15", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6baffab3-36cb-478a-b19b-6e3e5fbb69c6", "sighting_of_ref": "indicator--d0a14d23-9f36-482c-a841-9aecb0ed2cfb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d21986c-4970-4af7-ae79-26fe30b6ef63", "sighting_of_ref": "indicator--f78a50a9-aff0-4705-aabb-b988019218e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cce2a44-a2b4-425f-9dea-4959718e60e1", "sighting_of_ref": "indicator--f78a50a9-aff0-4705-aabb-b988019218e2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feba7574-ceda-48c0-9cb4-8ca3ab519064", "sighting_of_ref": "indicator--f78a50a9-aff0-4705-aabb-b988019218e2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5599a0c0-9f0d-4491-9ca4-79a3b1aa31f7", "sighting_of_ref": "indicator--61dbcf26-b029-4639-b396-bc4e59f0bedb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44357656-3bdb-48f1-b6f9-479cd695b704", "sighting_of_ref": "indicator--61dbcf26-b029-4639-b396-bc4e59f0bedb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce01e6df-77e1-4afb-9355-1b95e2274256", "sighting_of_ref": "indicator--61dbcf26-b029-4639-b396-bc4e59f0bedb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ca70f0-4b0e-48e6-a737-15dc881138b5", "sighting_of_ref": "indicator--95eadbeb-ffc8-47f1-a8bf-be4e46b46ce5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b461e9a5-ee61-4dd5-a3de-81c627446f73", "sighting_of_ref": "indicator--95eadbeb-ffc8-47f1-a8bf-be4e46b46ce5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15b9d35-6e3b-4cd4-9d8a-2439777db74e", "sighting_of_ref": "indicator--95eadbeb-ffc8-47f1-a8bf-be4e46b46ce5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6a7a93-6e66-40c4-8859-326d924a47bb", "sighting_of_ref": "indicator--aa54eb27-cd48-4a2e-b07d-24ea00632545", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d58afe-4a86-4c43-945d-45ad3c80ab2a", "sighting_of_ref": "indicator--6a3a0846-3e5d-413f-9974-87a3c5ba435e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b27fea8-d2c1-41a0-89a3-46be412f9c62", "sighting_of_ref": "indicator--17e3812e-a817-4f4a-9358-89ed89ff2410", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d531427-dce3-401d-8f4f-5eb472f3b5dd", "sighting_of_ref": "indicator--ffc700f3-f6af-472d-bfbb-11222b9534c3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95408548-a71c-4f29-b111-dbbb93cc3ba7", "sighting_of_ref": "indicator--ffc700f3-f6af-472d-bfbb-11222b9534c3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318a85a1-a7e0-4122-b9ca-939c4d134294", "sighting_of_ref": "indicator--705a4d5a-fa68-48d3-ac11-e6799ae5dea6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbba63e9-9952-4a07-924f-ed549e7dd5b2", "sighting_of_ref": "indicator--705a4d5a-fa68-48d3-ac11-e6799ae5dea6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c2d36a-a924-4f0e-8600-2be0c051203e", "sighting_of_ref": "indicator--705a4d5a-fa68-48d3-ac11-e6799ae5dea6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd0c04f-83b1-49a8-9f76-bc5eccc21e3e", "sighting_of_ref": "indicator--400ff906-c8e5-4090-b0b9-9a9fb2d52c32", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06ed0ac-54b0-426e-9275-7d556ed62c2d", "sighting_of_ref": "indicator--400ff906-c8e5-4090-b0b9-9a9fb2d52c32", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32730f27-2415-4495-a2a8-00c78082c5e1", "sighting_of_ref": "indicator--196cbef7-8d7d-4243-892e-ac39d85ebdec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e67b904-f0df-46c9-a9c7-2f825917166b", "sighting_of_ref": "indicator--196cbef7-8d7d-4243-892e-ac39d85ebdec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bda6cc2-96f8-4f6f-a730-37b8a034637f", "sighting_of_ref": "indicator--f6dade41-f7ea-4078-8127-efa37a598be3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28efe18-c0f3-4eb4-9526-dd8cf0c98c7e", "sighting_of_ref": "indicator--f6dade41-f7ea-4078-8127-efa37a598be3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7e16e9-ae79-4f0d-ad4c-838b15f1e940", "sighting_of_ref": "indicator--7f9af639-c14d-4257-81aa-63118076c13e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3b2535-57e8-45a4-9cf6-698fab6fe230", "sighting_of_ref": "indicator--7f9af639-c14d-4257-81aa-63118076c13e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5beb0edf-989f-4fef-84ff-5a9d09776978", "sighting_of_ref": "indicator--7f9af639-c14d-4257-81aa-63118076c13e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa5c709-3652-4b1d-a6cb-11c71e13be90", "sighting_of_ref": "indicator--f1ea93c8-3aa6-44b9-8b75-c734e1e8beaa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee5a270-aa98-4bdf-b0e0-998605b680f4", "sighting_of_ref": "indicator--f1ea93c8-3aa6-44b9-8b75-c734e1e8beaa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac6e823-e267-4976-a210-c309fe1d3fb0", "sighting_of_ref": "indicator--f1ea93c8-3aa6-44b9-8b75-c734e1e8beaa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1380c6-3424-44fd-9d41-0c0d9fd02460", "sighting_of_ref": "indicator--1ffade33-adac-4317-9750-dc880c9de2a5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941b7e75-6226-4852-b06d-bb8d3aad5c6e", "sighting_of_ref": "indicator--1ffade33-adac-4317-9750-dc880c9de2a5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c338ee35-9ff9-499b-8ec0-38bcbcec920a", "sighting_of_ref": "indicator--1ffade33-adac-4317-9750-dc880c9de2a5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738eed54-c48f-4afc-ad33-941cd4fc2c88", "sighting_of_ref": "indicator--62bf4be1-42de-45ef-aefe-8807d9751594", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fe03f1-c41d-444d-bd59-5aa0577860d8", "sighting_of_ref": "indicator--62bf4be1-42de-45ef-aefe-8807d9751594", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806eb7cb-bbf9-476f-8062-8b4766d2a9d6", "sighting_of_ref": "indicator--c672a90e-cc9a-46ec-8f84-d3df4d7cd17f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf799f8-a5f4-4113-9ce9-b78a547648a8", "sighting_of_ref": "indicator--c672a90e-cc9a-46ec-8f84-d3df4d7cd17f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc84736e-0e3f-4a0e-a215-23c5a2d82120", "sighting_of_ref": "indicator--d7b96f57-3714-48be-affe-5f2a010105bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16ada40-6eb6-4a79-a2d1-5a52aab1c676", "sighting_of_ref": "indicator--d7b96f57-3714-48be-affe-5f2a010105bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc54c0d-640b-4c06-9efe-c1824e22a23f", "sighting_of_ref": "indicator--0eb86c61-d3d1-443d-9694-0189b2998cda", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f28dbdb-8a50-451f-8856-e193b3009282", "sighting_of_ref": "indicator--dcd4dbdb-e18a-4fa4-b916-4be1238ab25e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2581419d-3f17-4696-98c6-f566af90c5a2", "sighting_of_ref": "indicator--dcd4dbdb-e18a-4fa4-b916-4be1238ab25e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a31d60-b19c-4543-a8a0-6ee41a19c5c3", "sighting_of_ref": "indicator--400e9d71-6758-4e03-8591-c6cac4141fa1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc22e0f7-f82f-46ec-93a6-9546bebd9d87", "sighting_of_ref": "indicator--400e9d71-6758-4e03-8591-c6cac4141fa1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e6f105-6f6a-4aa1-af98-9f5d8cc3b019", "sighting_of_ref": "indicator--1b79415b-dd1d-4a6b-a326-bffbe1d44b91", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f834649b-bbae-447e-9d45-8846214a1314", "sighting_of_ref": "indicator--1b79415b-dd1d-4a6b-a326-bffbe1d44b91", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528dc12d-2f81-4ca2-8c5c-fe4a00b84e38", "sighting_of_ref": "indicator--1b79415b-dd1d-4a6b-a326-bffbe1d44b91", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0b9fcf-4597-44f5-9802-113dd3a1b2e2", "sighting_of_ref": "indicator--752ebecb-a92c-41a6-810a-353fe035d825", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e2ddfd-fbd1-4be3-b518-4500a58a4d58", "sighting_of_ref": "indicator--752ebecb-a92c-41a6-810a-353fe035d825", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304304b7-1ee8-4e51-b6fe-f5d4d956bc45", "sighting_of_ref": "indicator--125315da-84a6-4d6c-bf11-b62cf8aa4802", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d9b43e-e84b-4fc7-80c6-6ad0e909628e", "sighting_of_ref": "indicator--125315da-84a6-4d6c-bf11-b62cf8aa4802", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00856c5-472d-4ae7-b120-9bfca31af0b1", "sighting_of_ref": "indicator--b5bf07b7-7161-420b-8d53-350e6ddfe638", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386da85d-b1b8-4250-929d-848aaece273d", "sighting_of_ref": "indicator--b5bf07b7-7161-420b-8d53-350e6ddfe638", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266da935-af85-4214-bba4-cc9fdc7b98d9", "sighting_of_ref": "indicator--6e454bc4-42ec-446b-87d3-154817fd0027", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d7d7c2-ce01-4bd4-af88-b3019da96b54", "sighting_of_ref": "indicator--6e454bc4-42ec-446b-87d3-154817fd0027", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b995fe-318f-44b7-95ea-8b2eb27ba57e", "sighting_of_ref": "indicator--6e454bc4-42ec-446b-87d3-154817fd0027", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78011d3a-e936-4052-866d-e16236e97324", "sighting_of_ref": "indicator--06e41c6d-b607-4a9c-9e6e-f48040a8d61b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e68e789-e17e-428f-a925-e957e6c787ee", "sighting_of_ref": "indicator--9204316f-82ed-4fa6-a752-ac5051b268d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74469ee8-73f7-48ad-ad05-6e2efd597a02", "sighting_of_ref": "indicator--9204316f-82ed-4fa6-a752-ac5051b268d6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e22e951-4d0a-487d-b80d-f38716b5679a", "sighting_of_ref": "indicator--c9cd58fe-737c-4b0d-a2b1-09c6abe2362c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a71ba1-2b08-472d-83c9-2924f414a278", "sighting_of_ref": "indicator--c9cd58fe-737c-4b0d-a2b1-09c6abe2362c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c51a00-4295-417f-9268-2a46aead3996", "sighting_of_ref": "indicator--13597d14-00e6-42a7-93e4-902aac90489f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620e10af-7db5-430d-b711-56728ad30c14", "sighting_of_ref": "indicator--13597d14-00e6-42a7-93e4-902aac90489f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e32af55-dae9-4432-bf26-1f9cb84c20fb", "sighting_of_ref": "indicator--d9417f82-b674-48b5-80c1-737776d7056f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a3b8c9-0220-441f-9803-e07c473c27da", "sighting_of_ref": "indicator--d9417f82-b674-48b5-80c1-737776d7056f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de94550-b2d5-48c8-9f2d-11ec891c8a99", "sighting_of_ref": "indicator--5014f1e9-e6a2-4024-bf76-0f898fbd033d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343d6388-1339-4356-8ea5-ceba70c52418", "sighting_of_ref": "indicator--d76aec92-4355-4733-bf50-bc02422d5570", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331573ed-6826-432c-9d0e-3f8db02f8168", "sighting_of_ref": "indicator--d76aec92-4355-4733-bf50-bc02422d5570", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35dc3d9e-90b5-487a-baba-933b26cf8676", "sighting_of_ref": "indicator--d76aec92-4355-4733-bf50-bc02422d5570", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee46be8c-85a5-4c61-b341-3c05136e0a7d", "sighting_of_ref": "indicator--59f900cb-819c-4c81-9926-1b44f1896886", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79df8f92-f1c1-432a-b325-55108780c557", "sighting_of_ref": "indicator--59f900cb-819c-4c81-9926-1b44f1896886", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169b8556-8260-4922-b6bd-5ee8378da6cf", "sighting_of_ref": "indicator--93b89031-40aa-4ddb-bdd0-5d3eb9ad3e7d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c58f833-0056-4728-8da5-abff127919a9", "sighting_of_ref": "indicator--93b89031-40aa-4ddb-bdd0-5d3eb9ad3e7d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52533c97-7a13-47fc-9e9c-a7b2e5f318f3", "sighting_of_ref": "indicator--52905c71-d667-4be6-ba6e-cc3c9e3ccd0c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55cd8469-7629-4693-976a-86df725563fe", "sighting_of_ref": "indicator--52905c71-d667-4be6-ba6e-cc3c9e3ccd0c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c06788-7ba9-426e-949d-650a7b27f6d9", "sighting_of_ref": "indicator--756f7aed-be0e-4355-a57c-7a207858af0e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3c3822-f4c8-4827-b81c-f26edf50f875", "sighting_of_ref": "indicator--02cb0ab2-f7f6-4a19-8a79-d9cd530199cc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca206d0d-c3e3-4354-9d72-fde424cf22a4", "sighting_of_ref": "indicator--b118a297-33f3-4a28-9e4f-354a682b1062", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1115c6-4752-4249-ab46-fdd252f7f267", "sighting_of_ref": "indicator--b118a297-33f3-4a28-9e4f-354a682b1062", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54886b2a-156e-4336-9c43-1551abcc9bd4", "sighting_of_ref": "indicator--b118a297-33f3-4a28-9e4f-354a682b1062", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1be1891-bb49-48f6-98a0-e3b82978419d", "sighting_of_ref": "indicator--183497fc-90f0-4190-94ff-6a639827f0fe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d199ff-27e0-4225-b671-06c721021d09", "sighting_of_ref": "indicator--183497fc-90f0-4190-94ff-6a639827f0fe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506bb75d-65e9-4f24-ada7-76911d0b19a7", "sighting_of_ref": "indicator--1f58dec0-13db-4ae7-9bd2-7a5d1727d148", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42663515-3936-46c5-8eb2-08ff3f50d8a2", "sighting_of_ref": "indicator--1f58dec0-13db-4ae7-9bd2-7a5d1727d148", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda0d246-e292-4da0-89ae-7e34104d65f0", "sighting_of_ref": "indicator--1f58dec0-13db-4ae7-9bd2-7a5d1727d148", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829d0d4a-ee6c-4d87-a10d-c3264fe8b098", "sighting_of_ref": "indicator--cfd17de3-e9ab-49a0-adae-a18d1b069d06", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fed6131-db8f-4a60-bf75-c32e5b1604a5", "sighting_of_ref": "indicator--cfd17de3-e9ab-49a0-adae-a18d1b069d06", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f085b2-6304-4878-a367-9ce521eca290", "sighting_of_ref": "indicator--cfd17de3-e9ab-49a0-adae-a18d1b069d06", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e4fa8f-9ad5-4027-9766-e229e798bd4b", "sighting_of_ref": "indicator--0288146c-0e36-4a5b-a3e6-2759db1767ad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf51c22-0e65-4454-bda8-986d6f72a6c1", "sighting_of_ref": "indicator--8b5c6806-e6f7-4e32-81a5-556989943606", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b85b4e1-4592-4da9-8dd3-8b6fa3d0a379", "sighting_of_ref": "indicator--8b5c6806-e6f7-4e32-81a5-556989943606", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80be4b75-931f-430e-806e-74e89f95f9a9", "sighting_of_ref": "indicator--586fcd14-7d2a-4553-be5a-a4e109fb4ad6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56477e69-5afc-4a57-a26e-0cba3ff3abd6", "sighting_of_ref": "indicator--586fcd14-7d2a-4553-be5a-a4e109fb4ad6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92debd6-c143-49ba-afda-e550844d7812", "sighting_of_ref": "indicator--a20c68b1-d086-48aa-b1fb-e0548e6a67c2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9841b3a8-6381-4d86-bf8e-7ecaf6038a4e", "sighting_of_ref": "indicator--ff402e92-1515-4b17-8062-d26ad70b37d5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94bda63-0b6c-4fa5-b800-c23ca8ec3141", "sighting_of_ref": "indicator--ff402e92-1515-4b17-8062-d26ad70b37d5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddbf493-3252-45f4-8f6c-a5fad9b40dda", "sighting_of_ref": "indicator--ff402e92-1515-4b17-8062-d26ad70b37d5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6066de3f-ec0a-4346-90dc-7b805ff70e0d", "sighting_of_ref": "indicator--a479eed6-36d5-4006-857c-b6d5850193f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c66701-8f1e-4146-9db7-cf12a04f6703", "sighting_of_ref": "indicator--a479eed6-36d5-4006-857c-b6d5850193f8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c487e29b-39b9-406a-9c6e-316dfc71ede8", "sighting_of_ref": "indicator--a479eed6-36d5-4006-857c-b6d5850193f8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77321a7-9a1a-403b-aa4b-9efba22e5d9f", "sighting_of_ref": "indicator--7ae210df-4088-4fc1-aba8-6350ac3a1f30", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00dc1c48-bb1a-4cf0-8087-a537e2e5dc8d", "sighting_of_ref": "indicator--ac19e807-f3ea-47f1-9c49-29e6dad35350", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eedf179b-7e98-4542-a931-0b905e924ddb", "sighting_of_ref": "indicator--ac19e807-f3ea-47f1-9c49-29e6dad35350", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b988ff3-d471-45c2-b399-5fedbbe02a0f", "sighting_of_ref": "indicator--2dd41f4b-0e83-4255-8429-bb8643409633", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719b29bf-3206-4c8c-86e0-1a897583d807", "sighting_of_ref": "indicator--2dd41f4b-0e83-4255-8429-bb8643409633", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b46e0a-3d86-4dc3-bed9-f194336326b6", "sighting_of_ref": "indicator--f8316512-3b99-4a8a-afd3-b904fa73c72a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916d551d-0132-40b1-8611-0dbec0a72088", "sighting_of_ref": "indicator--67078610-ea41-4bd0-8bbb-515fa67a6a78", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623489cc-a486-48b7-8537-b7bedd78cf3c", "sighting_of_ref": "indicator--c371bcb8-b826-4c4e-8a9a-ec2547c691f3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ff01b1-91b5-44d1-a608-168e13f96290", "sighting_of_ref": "indicator--00259b9f-0b9d-496d-bf84-b20a5ed6ed14", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b600493b-22b4-46bb-a475-c5ae030f1192", "sighting_of_ref": "indicator--71666a9e-f4c1-4844-ab4c-54fb42cc2ca5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4105364-9c73-4338-9ac0-d72d92c7e5ff", "sighting_of_ref": "indicator--71666a9e-f4c1-4844-ab4c-54fb42cc2ca5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e130cd-a7ee-40b0-96b0-f915347f2351", "sighting_of_ref": "indicator--71666a9e-f4c1-4844-ab4c-54fb42cc2ca5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39d6bc5-7704-42a5-b2ac-17c2f5906cfc", "sighting_of_ref": "indicator--b1d370c6-5bf2-4312-b551-924e7334bafd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea4ddf4-507b-44b8-99f7-073df1e2449e", "sighting_of_ref": "indicator--bf4f37e9-471a-488d-805f-306ed723ae9b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bae5ea6-98bc-427e-a3a4-942036bd199e", "sighting_of_ref": "indicator--1ea19d91-0745-4a34-8d3b-9426802b82b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b975a7-7f21-4163-af00-051f65ae092e", "sighting_of_ref": "indicator--62c07655-a548-497e-a040-cc2c4d8bfa49", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c90356-60c0-4293-ac23-8210f30cc1a7", "sighting_of_ref": "indicator--a1176337-7b33-439e-ad69-60fe4e91f89d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14120bda-04c3-4721-945b-4ac601fb9345", "sighting_of_ref": "indicator--a3f2a0b0-ba03-45c4-a4d2-3c2106303e47", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7583c1-028b-4a02-89f9-989264dc276a", "sighting_of_ref": "indicator--e55dfa43-92d8-412a-8f37-5fb85ceed348", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223705f2-3930-4674-b71d-affedbbbaf49", "sighting_of_ref": "indicator--86b300d0-327d-4e9c-a333-a97ffbe689f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb21aea-c58e-4b2e-a272-2aac9450873a", "sighting_of_ref": "indicator--ace19b29-6789-417b-aebb-7f7dd3db8a75", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac5e5d1-8083-491b-8383-4589b9152624", "sighting_of_ref": "indicator--ace19b29-6789-417b-aebb-7f7dd3db8a75", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffbbae6-db82-4a5b-90f0-17eb0f28b098", "sighting_of_ref": "indicator--ace19b29-6789-417b-aebb-7f7dd3db8a75", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e1d045-6628-49df-8776-4ac2cd250fc2", "sighting_of_ref": "indicator--874a7005-4b71-4c1a-9aec-3913fbfd49be", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26a5e0a-67ee-43b4-af9d-506253a66c53", "sighting_of_ref": "indicator--874a7005-4b71-4c1a-9aec-3913fbfd49be", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c40c8d-2f0e-4ae9-be82-0b25b51722c5", "sighting_of_ref": "indicator--874a7005-4b71-4c1a-9aec-3913fbfd49be", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34c6739-44ca-4e52-9e65-6e04510e8bee", "sighting_of_ref": "indicator--ea22d6e6-67a1-46fc-9fea-548876b6e630", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fb819b-9d2d-48d3-ac43-63c5069ccda4", "sighting_of_ref": "indicator--ea22d6e6-67a1-46fc-9fea-548876b6e630", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1325adae-2bdd-48af-aa5e-118410ef06a3", "sighting_of_ref": "indicator--2ae134db-7391-4b62-87db-0ceb06439d6e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e80ca3-05fb-4282-9949-ae3f822b9fbf", "sighting_of_ref": "indicator--2ae134db-7391-4b62-87db-0ceb06439d6e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0f8482-40fd-4da2-bb81-a2f2c51cd36e", "sighting_of_ref": "indicator--20ef8b16-e78b-4105-984e-d40f7a54e625", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570c38f6-6315-484f-8e78-100f0fd1bf54", "sighting_of_ref": "indicator--f207455a-78e8-410b-af77-dea2f7c9fd9f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de055eda-9895-41a1-9acf-8252fa231d53", "sighting_of_ref": "indicator--8889dc3e-a0a9-4f25-a333-3c21252dc61e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e73dfa4-e53d-49a3-b50e-0aa768df0619", "sighting_of_ref": "indicator--6403ac0b-bf9d-4019-8448-706fee3e5406", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e62e5b7-4fa2-4398-85df-8f9b7152936c", "sighting_of_ref": "indicator--2db782fe-e752-47ab-ba24-c681af05d2bb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808144c6-5c57-44b1-ab9f-1999c6b681ed", "sighting_of_ref": "indicator--3f43ef24-889a-48f5-8dc5-c6465d2d6bf9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83af0241-e973-4e9f-9430-5591118b2393", "sighting_of_ref": "indicator--5e67d211-cb64-416d-a247-1d9642c50740", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e34f368-00fe-462e-8722-ec2dd32f4750", "sighting_of_ref": "indicator--980d29d5-1778-4436-b02c-5ac92826cf60", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95deb93-9c16-4f2d-8b7c-761e47a69fc5", "sighting_of_ref": "indicator--43d30778-a326-4cab-aaa0-0a5f69c20271", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bac9b26-9707-48f0-a765-9a6c37edf580", "sighting_of_ref": "indicator--43d30778-a326-4cab-aaa0-0a5f69c20271", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a029703c-1f22-4c1c-8c0d-117de95a886e", "sighting_of_ref": "indicator--d56c9b8e-ce64-4c43-b62b-86ce9545ee5e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1316c561-f698-44a8-a2cb-3b6d7d2f1c34", "sighting_of_ref": "indicator--a9dc9105-6ddf-4aa6-9bce-b8d9939a2010", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1414c9b0-5c1a-44b9-8d01-224e949bb0eb", "sighting_of_ref": "indicator--c993d901-a185-423d-a594-8e35ce425e55", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abf7cf4-a4fb-4b97-b2f8-064ef0d97400", "sighting_of_ref": "indicator--a8388409-69a8-4399-a42f-c8b6198fbdd6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b91f4d8-25bb-410b-b8fc-0b88ccf62d65", "sighting_of_ref": "indicator--9ca29850-0245-40bc-bfbc-6c13731fd931", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52597d3a-870f-4a18-811e-044f5ac01faa", "sighting_of_ref": "indicator--6b7b41f9-f656-4adc-b18d-d5dfc9b392c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5503eb1f-283d-4145-9382-a4e162332c01", "sighting_of_ref": "indicator--84da2605-fe7c-414a-9afc-9366164a1222", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313bb8e4-ac7e-41be-8b9b-b35fd2b88efa", "sighting_of_ref": "indicator--704b8feb-e28b-49aa-bcce-b07f995d735f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba145b8f-35b0-471f-b833-0e37975c7063", "sighting_of_ref": "indicator--704b8feb-e28b-49aa-bcce-b07f995d735f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9139e1-fcb5-4142-ac98-2c877c325aed", "sighting_of_ref": "indicator--139ccab3-1c6f-41b8-b3d1-e9d6dd5b0f6d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d11480b-e4c1-480e-b929-8006337cb59a", "sighting_of_ref": "indicator--f1fb4bbb-6edc-48f0-98ea-6a2949f7ab9c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503daea9-0bb4-4e7f-b457-b740ccbdf817", "sighting_of_ref": "indicator--f1fb4bbb-6edc-48f0-98ea-6a2949f7ab9c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3752e748-a1a7-49eb-9d0b-1002fe14920a", "sighting_of_ref": "indicator--7ac37308-5201-43b5-8cd6-d0bae6c6b030", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4019a9a5-1d15-4511-bb03-bb7c8f2849ff", "sighting_of_ref": "indicator--15e07c08-ba63-4fb5-9d7c-1fa92d2c7f66", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdab573-a8b2-4ae5-8b3e-942897224695", "sighting_of_ref": "indicator--62704d0d-3774-4c0d-b564-6b73df51c98d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24a21b5-014a-4ee2-91cd-d0536a184cf6", "sighting_of_ref": "indicator--d8905925-92ab-48f1-b0b7-095aa100a2dc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dab385-3b17-4d71-a9a6-e8294ce2af51", "sighting_of_ref": "indicator--43ee1f49-4f97-4581-9cc9-42d52d7bd6c2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fbe360-6108-4a1a-b1f7-a22744d5365b", "sighting_of_ref": "indicator--637ac878-a7d0-46f6-aca2-b63ca124b711", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fb821e-ded9-426a-9ee4-95fad4ee2c54", "sighting_of_ref": "indicator--d169a320-6832-4609-a7ff-d774ba7d0edb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a436944-3fd0-4c22-86cb-a59faf645c4e", "sighting_of_ref": "indicator--9cabb29d-41eb-4df3-87ac-1d212f7556c2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3302548-1c3c-4579-aee0-75c30354c41e", "sighting_of_ref": "indicator--29cecb17-16d2-4a0c-96b1-fa1cd283fca4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01357129-0713-431e-bd70-3a816b5a2d33", "sighting_of_ref": "indicator--685161a0-1c84-4622-a975-123b017d4f29", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84d94bc-7134-45ce-99e3-15d33393f5bb", "sighting_of_ref": "indicator--347a3fde-2b54-4554-a1d2-4a3e2c734cfd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb82af8d-3772-4a35-8b8e-99d388a871b4", "sighting_of_ref": "indicator--59d11cf5-5fcb-4d66-ae3f-d93a90e6adfb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9fa08e7-85fb-44cb-9f03-f569748b7d81", "sighting_of_ref": "indicator--44f1f385-626f-4f91-b945-2f7d336f5ec6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a96e4d-b881-42fd-af78-f84516af1953", "sighting_of_ref": "indicator--81c4bcc5-2363-4a18-a19d-78ae926921ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db7c209-3b25-4d94-9fad-2d0904c26b89", "sighting_of_ref": "indicator--455393a0-1d63-4db2-89a2-08c6325f4d94", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a454987-1ff6-40dc-a7e1-72d742e4f28a", "sighting_of_ref": "indicator--18e59ecf-645e-466f-adb7-a9263c51080c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38db3ddf-afc8-4d28-9305-b7aff178fa45", "sighting_of_ref": "indicator--352ea5c0-7a84-434e-8a73-bba6a8736d87", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e874c5-b462-452c-87a0-b555de624822", "sighting_of_ref": "indicator--c90e6c76-bb20-4257-81da-a74253fa86ea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a631cea8-450e-485b-b77a-a6d73bc0a332", "sighting_of_ref": "indicator--dadcb14e-88bf-4024-80c6-5245c34c3f2f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9f96e5-c30d-48f4-97ce-8481a18f5f38", "sighting_of_ref": "indicator--fab56d40-1c61-44ee-b262-a2544ca65c65", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d93f414-89ce-456b-9608-ad986ae7f7bc", "sighting_of_ref": "indicator--fab56d40-1c61-44ee-b262-a2544ca65c65", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed1c6e4-7a03-46ed-a392-d5e8d92f109d", "sighting_of_ref": "indicator--a39bfdae-730e-4fdb-ad6c-ddde0a9e06da", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2382de-27ab-47ae-95f9-7a20f646b90b", "sighting_of_ref": "indicator--085c98cb-047e-49be-9a1e-5cbfc2ead72e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26d0cd2-b0b3-4de9-906d-4cf133359a12", "sighting_of_ref": "indicator--74b1bffa-41be-4b22-a392-cf99f304925e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955e5bba-6842-4815-bcba-d118dfd338ad", "sighting_of_ref": "indicator--997f1f4e-c9b7-4437-b908-7d1ac6f54170", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f580ab70-a209-4d83-84dd-847db83eb613", "sighting_of_ref": "indicator--56858366-b41d-4275-9b3a-f521fc9b466d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e93c745-e08f-4218-a31c-eff2d614b448", "sighting_of_ref": "indicator--bbb64a94-775d-4a7d-a96e-8612b14a3900", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbef90cc-cca1-4f79-9c43-a78a46041faf", "sighting_of_ref": "indicator--5c933a61-f3fd-4682-af3f-737d2f15a262", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3716062c-6d34-4d9e-9a37-d45a992f9a38", "sighting_of_ref": "indicator--48815b58-1b80-41bd-ac4d-bb17c0e1e350", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f344e033-3d8a-4ae0-888b-a01e57fcb0d5", "sighting_of_ref": "indicator--48815b58-1b80-41bd-ac4d-bb17c0e1e350", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f72eb0-612b-4eed-9c20-13692464eb18", "sighting_of_ref": "indicator--ed34a531-995d-4d05-842c-ae239b93072e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452a2386-05ea-47b6-9c46-adc2c938c46e", "sighting_of_ref": "indicator--b0082125-e3e0-4d71-aaee-4fc11c620013", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a71b889-889b-409b-91db-961d6cb7b36e", "sighting_of_ref": "indicator--b03c614e-a312-4649-a1c4-ba4fa362318a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7509c23-2e0c-4a42-b002-56bc036704fb", "sighting_of_ref": "indicator--86c0b2fd-dd16-4da2-b9b8-0e010e652283", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c576158c-1ce3-45b9-a193-d26b9b4240e5", "sighting_of_ref": "indicator--7800d7e0-87f3-4fc6-9a93-0c21f077565d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff438e5-d1fd-4241-ba4b-7c4253f6f3fa", "sighting_of_ref": "indicator--ab8d8e33-40d7-4575-8a6c-f434b010f3fc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a28a30b-ec15-404f-a97a-c214340c65f9", "sighting_of_ref": "indicator--5ff8371d-ab6a-4ac5-9f61-0080b664f4a1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6dc39d9-b970-4d23-87b0-2d074092c477", "sighting_of_ref": "indicator--5ca0942d-75ab-44f8-8c19-21ced6a126eb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7eecf5-bd62-46be-9355-a27aa8771b2c", "sighting_of_ref": "indicator--5541482a-e857-433c-b850-512cfd26a6a4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb97fd58-cbd1-427c-ba38-bc5e8b2b06be", "sighting_of_ref": "indicator--923c0d99-5972-4a2e-9e3e-7bcd5af8399e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a98abf4-4689-4212-bc2f-9530bd7d6bbf", "sighting_of_ref": "indicator--923c0d99-5972-4a2e-9e3e-7bcd5af8399e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1bc714-c317-4456-92a5-5b49f2aaf40d", "sighting_of_ref": "indicator--06cca7c5-5bfb-4093-8178-bcf4f4138761", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230d5ac8-7f3b-49a8-9f6e-c0efac3771b8", "sighting_of_ref": "indicator--bddae882-a477-4208-8ef1-87d827ade9ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e7da33-ddea-4704-806f-fa3f9818e7cc", "sighting_of_ref": "indicator--bddae882-a477-4208-8ef1-87d827ade9ef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae550a2-6010-4184-83ad-2763748ecec2", "sighting_of_ref": "indicator--41cdf602-c46d-4132-b420-6042dd245910", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e22be9-5b1d-49db-97c7-7e954a8fa8c4", "sighting_of_ref": "indicator--72c30529-7f4e-4d52-99a4-a4df292eeaec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500c7f71-8019-42a0-9ce7-124bfdea3b46", "sighting_of_ref": "indicator--2dc81e6a-ee12-41a9-9c0c-bffcaf2f1d79", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c454e026-9935-4c99-aa86-46a4d5b80c31", "sighting_of_ref": "indicator--76d6180d-1a83-498c-aea4-4ea03b74755c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeda0f0a-5ce8-4f03-a803-0d2d6dfe485b", "sighting_of_ref": "indicator--5a2e6966-6720-4d42-8f59-0b0bc27a4a15", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd62862-2296-40bc-991c-2b21c25f0b9f", "sighting_of_ref": "indicator--6cdc9493-5e94-4326-a14f-53cdb4afbdcd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14ef3bd-9dd5-41bd-88a4-e7897c25705c", "sighting_of_ref": "indicator--d5d1fa86-a686-43cc-a5d9-d1fec197af4b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c4b6e8-b9d4-449a-bb12-c6d5b6eb07c7", "sighting_of_ref": "indicator--1e470ca4-9bff-4730-a77f-7906a75646e1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ba0283-5ef5-4e78-a17b-76acb9b1eaba", "sighting_of_ref": "indicator--612c3fb2-d8a2-4484-90eb-dab799f62095", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1b3525-9efa-4de8-9a0c-a1f5d9a85ec4", "sighting_of_ref": "indicator--977481b7-0a5d-4196-92f1-d4c9aada4515", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52229499-5d69-41c9-9115-7d56b024dc94", "sighting_of_ref": "indicator--ca49c4b6-7e75-4415-827c-2d9acfb7855c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcf882b-af37-4cbd-bc7b-112054834348", "sighting_of_ref": "indicator--7b674fdd-afd6-4a51-bc70-a2ce92380139", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2335607-bb11-41ed-89a0-80dad54b2d30", "sighting_of_ref": "indicator--7b674fdd-afd6-4a51-bc70-a2ce92380139", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09545d7a-3934-420e-b3cf-564a9dc40982", "sighting_of_ref": "indicator--7dfaf756-d923-4ae6-ad1e-ec3f20af957d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e2380d-37d3-4ef1-88c4-99389bcc6767", "sighting_of_ref": "indicator--d75bb494-3279-4750-a7d6-902f0bfd30e8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e938eed5-c76a-4a7c-a6b9-289c49fed486", "sighting_of_ref": "indicator--6e14aef0-1adc-4d6b-b9a8-1e8cd227a45c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426e79f5-45f2-478c-b97b-949c1a8681c7", "sighting_of_ref": "indicator--c6dca9d0-a5d3-4341-a275-5c2714c328d8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86302f4d-e3fe-47a2-b145-c1d90659841c", "sighting_of_ref": "indicator--61d314c9-7809-4753-b9b1-7c759ad2a210", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afb9b7a-328c-43b5-afe2-17547a1db9e0", "sighting_of_ref": "indicator--dec6db7e-539a-47cb-8863-fe0bb5523374", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4b6bdf-cc6d-448c-a7cc-ef1b606a428c", "sighting_of_ref": "indicator--0bf06584-83b6-478a-8416-9ec8dd5a56a1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d600d5-a7a3-422f-9c6e-349a84dbfdf3", "sighting_of_ref": "indicator--f34d7624-88c9-42db-8466-b411bfcf0130", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c984dea-3e79-4f49-83e6-200db0cf7fa1", "sighting_of_ref": "indicator--3954175f-2cce-46e6-8e96-22db949ade13", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f683611f-c526-415c-9980-4946ee4ec2b6", "sighting_of_ref": "indicator--709bddea-9f22-426d-9afc-709baa75d426", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936e1914-415c-467e-925a-389b8ef344f7", "sighting_of_ref": "indicator--05f0741e-e10a-4124-b84f-2225ff24f64f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6a6105-f4e7-48ec-9b0d-26512911bfdd", "sighting_of_ref": "indicator--6efa4182-e72d-4340-9a14-fba7ee5d8c23", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e9bf03-50d4-43f0-8830-8d8d6d82468b", "sighting_of_ref": "indicator--6efa4182-e72d-4340-9a14-fba7ee5d8c23", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5265e314-fe2f-4ea0-a59d-becce52b7351", "sighting_of_ref": "indicator--6efa4182-e72d-4340-9a14-fba7ee5d8c23", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12587ae3-9b04-48f5-b3a3-840037f05e57", "sighting_of_ref": "indicator--1f0d9f02-191f-443c-b1fd-e0907ec3edda", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40abe3c-a45d-4412-b68a-1d242ca0525e", "sighting_of_ref": "indicator--2ba3b597-9bf8-4172-8f86-ba5f8b80d996", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22103271-b2b0-46e1-aa9b-ace6dd100c58", "sighting_of_ref": "indicator--00739e0d-8105-4002-a555-7d5969966b66", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7105892-5188-457d-8d72-bf6190834f06", "sighting_of_ref": "indicator--1a610c81-8bd6-4d77-859c-22151092303a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7534fada-1afd-4eee-9efc-90b9e77595db", "sighting_of_ref": "indicator--f5c7a271-d5b0-496e-a9b4-472e55fb9bbd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee489b72-d6e2-434a-8d8a-fca1800a4601", "sighting_of_ref": "indicator--e08262f5-f112-4873-822e-ec2233ebd701", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a8c8e9-79fe-4868-9e11-1d26a740a7c5", "sighting_of_ref": "indicator--19939286-b78d-4ffa-a751-26e1871d0730", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e28060d-770f-473e-a18d-48b2305c2bcf", "sighting_of_ref": "indicator--a66c09dd-cb85-4cd1-bd1d-456c7db376df", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b74ad1a-5970-4d96-a58c-365df199fcf4", "sighting_of_ref": "indicator--c89a9f75-25fd-4f7b-accd-495cf3f48615", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f336ae-7a15-4950-b72d-e3cee326b855", "sighting_of_ref": "indicator--8f202a55-3a89-48e4-8fe9-20faa14e58a1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c565267e-ba31-4330-8af3-703661d5ff2b", "sighting_of_ref": "indicator--35ea90b1-e63c-4c91-a871-529eb71b82fe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09730d7-a756-475c-8bab-2b47181a4779", "sighting_of_ref": "indicator--da423672-a267-4670-bf38-0c17fa831b4d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa4e291-4ef7-4c23-967c-af376cb9ba3a", "sighting_of_ref": "indicator--79edabf2-9e69-4bb6-93c8-34a394574227", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1333c881-0391-4208-a42a-e729de8e915b", "sighting_of_ref": "indicator--331ab90e-a56e-4608-90e0-0e7452be170d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faaf698a-b28a-4a87-902a-932f49bff491", "sighting_of_ref": "indicator--0876cb3a-e97d-41e7-a254-8464a118aa46", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a724eb-d34b-4e04-b522-43d413670403", "sighting_of_ref": "indicator--143c7d44-ca14-4d01-b42d-95ff5b7e6650", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc444c4-f881-46f1-bc03-869a27716dc6", "sighting_of_ref": "indicator--399107b0-732b-4581-8b72-153f19f2eca3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9894ede7-83c7-4135-bf81-92e19315fae5", "sighting_of_ref": "indicator--11251990-03bb-4bb4-bc3c-65cd6f24735b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8faf2087-ec67-4e62-a046-8a23860c0a4e", "sighting_of_ref": "indicator--7e73d03e-9949-4236-bc27-bcdcccb4bb82", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85656ee7-4220-487e-801b-d3f8bd5bf967", "sighting_of_ref": "indicator--63d226c8-b2a1-4670-b52f-23ce5faddfad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85ccf8c-da7c-4bc2-bb67-a45b4e637e42", "sighting_of_ref": "indicator--068a29ad-b591-415f-a174-2513e3fe952c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301647f2-dc30-4d35-ad1d-8ccafdae4ac7", "sighting_of_ref": "indicator--aaabdac8-342a-4a49-a28f-b1dcf4b91048", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce39891-dd04-467a-b872-197e15294aaa", "sighting_of_ref": "indicator--0abacb0b-b990-40e2-b617-b865ea2713a8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554cc8bc-fb2f-43e2-a570-d10d7cba0c86", "sighting_of_ref": "indicator--616c013e-e5ba-4890-883b-cc71f439a964", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821f251b-49d1-418a-a3f1-bc979943b6ed", "sighting_of_ref": "indicator--5caaa5a9-8139-4e2f-9e03-f58bf165d2c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3584eaa4-80c8-41a5-8dd9-bcec1e511280", "sighting_of_ref": "indicator--da6de07a-ea79-4cb1-856b-dd3ef2fa567a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c513300-a886-47f7-9381-1e34339ed2e0", "sighting_of_ref": "indicator--bba6108d-e8e5-481b-9341-801b9c880d5c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a70f364-4a5a-4dc8-b16c-11125b310b55", "sighting_of_ref": "indicator--44061600-591f-4689-a34e-59cf7dc6b24f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14846b1f-3d80-4048-949a-baba8023f0dc", "sighting_of_ref": "indicator--44061600-591f-4689-a34e-59cf7dc6b24f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63afcc40-5569-45bd-9f53-801acd9cc839", "sighting_of_ref": "indicator--d681fb75-41cf-4321-9e78-e92932cf1530", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f004799-1e4d-4c00-b77b-532c7a4f2c81", "sighting_of_ref": "indicator--ec58cc9b-741a-4edb-bc4d-f5e7973b2ff8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baff4e71-bf9c-418a-a5c0-8322208e91dd", "sighting_of_ref": "indicator--db0d77e6-8c13-4ad7-94c5-231e77fcb648", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c69da6-6f0d-403c-af14-96619d81021c", "sighting_of_ref": "indicator--7824bb10-6ebf-4561-91bb-b4bca18626c2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb2bdda-4b8f-4d10-b2ca-7a3ba2903a1e", "sighting_of_ref": "indicator--7824bb10-6ebf-4561-91bb-b4bca18626c2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2101a2b5-68a9-43b8-a1a2-75688fb01d6e", "sighting_of_ref": "indicator--5cabbaee-de68-437e-9660-eb2b393f5c96", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473e5411-bda5-4e5e-b5ba-4c85a9c16bc5", "sighting_of_ref": "indicator--f7b2311f-3e6e-4b11-9b31-267a64a9ad22", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb16d5b2-e744-40d6-8a13-c203ffd68164", "sighting_of_ref": "indicator--f7b2311f-3e6e-4b11-9b31-267a64a9ad22", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4190c9df-3ab6-4eff-944f-20735579cb30", "sighting_of_ref": "indicator--6e56fee7-f013-4eef-849a-56b34216edc7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f867c3-478c-4961-8ec6-ca7a9368e9bc", "sighting_of_ref": "indicator--30fe5ba0-6dbb-462f-8fb4-9becfb024389", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a592d23-a52f-43fc-a05d-04d14130587f", "sighting_of_ref": "indicator--91e3fdcd-9306-4f72-a7d5-be31a4897183", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fda08c9-8cdb-4618-9633-fb5bbb9f970b", "sighting_of_ref": "indicator--d9fdd20e-2b54-461d-8cc1-c24fc96805a0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb2798d-dd01-46b6-b88b-e111bfff18eb", "sighting_of_ref": "indicator--5106a8e7-72a5-4ebf-b66a-4ec9f7f5d193", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c8a573-6135-4f74-ad3f-69a40799b918", "sighting_of_ref": "indicator--364ecd37-6037-4f3f-8740-ee7e4d522ba7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba6a61d-9a3d-4560-86d1-b242600572ad", "sighting_of_ref": "indicator--f5e19ab0-1b8a-4215-9cc1-36ec46932fa5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4960aa11-15d1-4d10-85b9-8f7073f0a951", "sighting_of_ref": "indicator--b2659e67-d959-4f4f-9515-97ebd28b279f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06457d93-7662-42eb-afc6-1a734ae4baf3", "sighting_of_ref": "indicator--e4f6c3d4-227a-4c2f-8f5f-544f36879202", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fd1af3-d261-4399-bb8e-6345263d06b5", "sighting_of_ref": "indicator--e4f6c3d4-227a-4c2f-8f5f-544f36879202", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180efa56-f9f3-40b5-a175-fad3cb5bf711", "sighting_of_ref": "indicator--5b0678ed-7394-46c8-8add-4120ef483bda", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca89791-6a7f-4ad4-aac7-de431bde5bd5", "sighting_of_ref": "indicator--0fd9c59e-2cd6-4835-90f7-2a44069df6dc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048216fe-4320-4e5f-bc38-9fda4765e2ed", "sighting_of_ref": "indicator--83fd443a-5ccd-472e-8cd5-9d3b055cfa7b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ee1c83-78fd-4ff7-91df-bddd21bb1c24", "sighting_of_ref": "indicator--99527a6e-f213-48c5-a699-05fcf8ab627e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ac7065-3cc1-4231-a179-0300d8ce1232", "sighting_of_ref": "indicator--8f4567bd-6bd0-40c8-bb2b-075575e058f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c338b4-f5f8-4aa0-a56a-8733ab264e33", "sighting_of_ref": "indicator--df7232c5-2cd8-4924-9192-381f6f742f58", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff130f0-d9f4-4099-be77-bc5353e8ac40", "sighting_of_ref": "indicator--fa4c9a53-c989-4324-be72-e24733e2f8f4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fcbd7a-cda4-49a5-bdad-bbf67263fefb", "sighting_of_ref": "indicator--8bc49263-fe00-428c-8933-455bbba1dee3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7f53b9-cc95-42a6-ad0f-73ae155961b4", "sighting_of_ref": "indicator--31cb3487-5fc8-45a7-a0c7-db107da6e38d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd767a4-2542-4b06-90bc-67093ac0722c", "sighting_of_ref": "indicator--31cb3487-5fc8-45a7-a0c7-db107da6e38d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20185975-a13f-4b01-83b0-8a9cc911de28", "sighting_of_ref": "indicator--94baab7c-9166-4749-9682-45c55d45606e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33015738-c777-490a-a5c7-0aae9722d207", "sighting_of_ref": "indicator--56f2c440-9778-4f45-ad3e-33c2c0cb9fa6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2f46b7-93e5-45ab-8211-dd109eba59eb", "sighting_of_ref": "indicator--1c368318-406d-423f-acba-d27e200f6aa5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--badf6c3a-3682-4b5f-ab9e-b5be0a62c1a2", "sighting_of_ref": "indicator--52ef0e77-19f7-4309-84b2-ff6f9967a69d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7607c617-af8c-4bc2-a51a-72b90badf3a3", "sighting_of_ref": "indicator--a4e34ea4-8c1f-4502-8c61-d47ca33ed984", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc3b816-30d4-4ad6-a201-cfd025173dcf", "sighting_of_ref": "indicator--188df2d2-1680-4d38-bccd-b206d48d9a4c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669957a4-0990-4c88-8581-841fc2888bd1", "sighting_of_ref": "indicator--8dec7d05-0729-4d9d-b6dd-fe1cb7524555", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9060274-370c-4e79-84bd-de4eb139fee7", "sighting_of_ref": "indicator--0ee7ac90-6ceb-458e-adf0-cc894cc047f3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eee46f9-a693-41e8-98a9-6ef165d1bb33", "sighting_of_ref": "indicator--0b6c539e-5f08-4851-8326-14e2d253023e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07cacfd-a08e-4da4-b38d-335aa5c14f84", "sighting_of_ref": "indicator--744195ae-7f66-4dba-b85c-8971e85d7771", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd071f8c-2c08-472a-9ca7-95be0eca7410", "sighting_of_ref": "indicator--d9450616-6f31-473d-96e0-f28c696ad6b9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b822e70-b41d-4736-a2d8-280fd7b49b41", "sighting_of_ref": "indicator--d0e798e8-a50e-4f79-a026-693d4bbd793c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7436e502-959d-42de-9061-b71c69b78e34", "sighting_of_ref": "indicator--7149f30e-b1bd-4926-8fe1-476c35f70157", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e0d5dc-c9cd-476d-a05e-2c72555a0907", "sighting_of_ref": "indicator--2b9cacb4-5dbd-4860-9e7b-809d84559003", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e0312a-00ea-4cb2-b568-0781e5997b85", "sighting_of_ref": "indicator--2dd7cc4e-5367-4e41-abd7-7ed95c508e57", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f779a423-e1e8-460c-96f8-5230f00b04ff", "sighting_of_ref": "indicator--2dd7cc4e-5367-4e41-abd7-7ed95c508e57", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdb133b-77e5-4339-ba04-638e6448bba9", "sighting_of_ref": "indicator--f15db485-553b-4339-93cc-8dab30c9b401", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e62bf8-11dd-4097-a5a9-a34349bb216e", "sighting_of_ref": "indicator--19c243ec-8bfe-4000-9068-d95e4c0e5f48", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f66abde-0272-4881-9f4f-8082e3409433", "sighting_of_ref": "indicator--4e103d94-c832-4977-b748-504037c69c16", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8412128d-5457-458d-8240-890026996037", "sighting_of_ref": "indicator--92470d61-b9c4-463b-8392-41abe378438a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1130b87-b86b-4f86-889b-42a99ea0e093", "sighting_of_ref": "indicator--711f270e-2861-46b2-87eb-cdbc1d6a4df9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095c95fc-c1b3-4de5-b3e7-f2f1bb65aa62", "sighting_of_ref": "indicator--45711e5d-f714-4acb-8257-23e6cca1a8e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953d2280-a8bd-4965-8fe9-82df7b45d0ce", "sighting_of_ref": "indicator--9fbc850c-ada6-4299-b2a5-bee4de4e7a8d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eff0af9-06fb-40b6-b436-ddc18f1926c7", "sighting_of_ref": "indicator--bf4e8db0-e84f-44bf-b042-5fed810f07ab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a83a4d8-8af7-4ab2-bcfe-d7d464796353", "sighting_of_ref": "indicator--a72887d7-d23f-43a0-952e-32bad749d742", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d9101d-a583-40f1-9353-6406282f5b47", "sighting_of_ref": "indicator--a72887d7-d23f-43a0-952e-32bad749d742", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5056ecb-1953-45a8-b707-2ccf3914dcfc", "sighting_of_ref": "indicator--120ac067-b2a2-47de-8faa-4e6cb833e0f8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ea734c-0889-4f7d-ab7c-33b77187e5d9", "sighting_of_ref": "indicator--d0ea1dc8-a876-40d8-a76b-5f365d13c9b6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1227c5-a4db-446b-a65a-4f95fd1adb47", "sighting_of_ref": "indicator--7e750790-b435-4a32-8428-75ee6f307d02", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd52641-5ac8-401a-93eb-b421592bf641", "sighting_of_ref": "indicator--7ed66e10-f5c5-4d30-9f05-103e09fa48c5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41e9b88-cf43-467c-b3a9-2ba75bfda40b", "sighting_of_ref": "indicator--631267fd-80e2-4001-b772-67946b446d73", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065ba243-6d54-4443-a210-4686c07f9815", "sighting_of_ref": "indicator--dcd2ab61-ad2f-4444-896a-eeb3c07f9f59", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29e6f2a-e67c-4104-aa1b-d5fd84e8537c", "sighting_of_ref": "indicator--d456c31f-4d74-4778-b5c8-1bc871cd9297", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfc9328-000a-48db-ad48-dcd515c7851d", "sighting_of_ref": "indicator--b2c9a264-90d8-43f9-9181-ca69804d5a64", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa48b51d-1cb2-4973-8aef-886d15cb7820", "sighting_of_ref": "indicator--1aaf6c6e-8207-47ed-bd80-2a750bb09ecd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f93b6f4-d4cf-472e-8587-335f7b95b873", "sighting_of_ref": "indicator--cf8774ce-bf7e-4513-98a5-423caf09d08e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b381e5-33ff-40a6-8d30-c122ea4690cd", "sighting_of_ref": "indicator--2cb84955-b42d-4822-8b35-e0a1892fd4f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b82df0e-23bb-4c2d-b1ac-9509aefb30ab", "sighting_of_ref": "indicator--6f0790ad-8d6f-4d14-b1ab-680625dce035", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8f8b8b-869e-4ccf-ad47-37f04d89d373", "sighting_of_ref": "indicator--2d8a431b-0891-48a5-a2d3-4ad8ec58029f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6021da-a099-48e0-87fb-12b1961ac6b2", "sighting_of_ref": "indicator--c6d3abee-818b-4370-95d8-d6d95aa291dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe88f93c-21ad-45d8-9d06-aa8872cac8b9", "sighting_of_ref": "indicator--3b1be681-a03e-4651-bf45-636f8f352ffd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8d4706-b6ea-4d1d-ac7d-518b6a9fc828", "sighting_of_ref": "indicator--caab1aea-27ed-499f-9d5d-971f83a59c2f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1e808b-ccf4-4c9a-8f9d-e00f86a43191", "sighting_of_ref": "indicator--422d8b99-3ec9-47ed-b8ea-994ccec3b4b1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aeabb5b-1d89-4db9-a989-d9facc10871e", "sighting_of_ref": "indicator--27213dcc-cd96-477e-bffb-73016baf8bcb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09d2edf-dbe6-4b92-bda0-ebb5b6e1b9ef", "sighting_of_ref": "indicator--2fbc0bec-c6b9-416f-8d24-4f2aa1e2113e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9224c440-378c-4d5b-9edb-5c759ff3b8e5", "sighting_of_ref": "indicator--2fbc0bec-c6b9-416f-8d24-4f2aa1e2113e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e52f69-d4c0-4df9-aab6-c624a3ba817f", "sighting_of_ref": "indicator--8c3f0d99-2bf8-4c58-91db-407802d8caf5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813f4668-7b16-4389-9d3e-4fbb47edacc6", "sighting_of_ref": "indicator--b4eef8b5-2b31-4035-bef9-e3f04af082f8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c34eac-2c8c-4892-8076-b91703562553", "sighting_of_ref": "indicator--8a21d4c5-db97-4d0d-b427-5b49de3f3a75", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39c1912-102c-486a-8263-b5edb98015d7", "sighting_of_ref": "indicator--80defc47-f5d5-4a8f-9507-fd09bb568c0d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49b11ee-6061-4b0a-9f51-7dc837f3203a", "sighting_of_ref": "indicator--39791c5f-6461-4008-a768-8d547b711af4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092f3002-424e-444b-8abd-92d82408e697", "sighting_of_ref": "indicator--ec572c6c-26e6-4af2-99f9-ba4f0bf93f0c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03cc0a0b-7eee-487d-b578-bcd24a0b139e", "sighting_of_ref": "indicator--7e96f67a-8469-45e0-8114-92bfe93d4558", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2261008-a2ac-4451-b035-4f4eac9e5b5c", "sighting_of_ref": "indicator--849be1f1-53a5-4813-985c-1b47133cf151", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d580eec-ba47-45d7-84fd-ecb96149fe9c", "sighting_of_ref": "indicator--21e746df-d050-44fd-91ac-117280674b2f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9941f34b-359d-40af-ad84-d728287a9bc9", "sighting_of_ref": "indicator--4191c739-123f-4a91-b319-16f7f8c2ae7c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c031ecc2-bd44-43f4-bd7a-a91c5b046667", "sighting_of_ref": "indicator--28564ec3-7b17-4044-984d-399e550c7110", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2c6a12-5213-45af-b4aa-afef84a2cd92", "sighting_of_ref": "indicator--e58fcd9b-b0ee-442a-8a73-3a708d78bf2b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a64c7b-cf99-4993-8c91-602a2ed322a8", "sighting_of_ref": "indicator--953526d4-040c-470b-b696-5924d03cba22", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8c2113-8960-49e1-8525-b107f7e4dadb", "sighting_of_ref": "indicator--5b5a35b3-9fad-4b4c-ba1b-b64519967ad4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c33bad-f8d6-473a-8139-8682a296f882", "sighting_of_ref": "indicator--e7e1bc1b-3381-411b-aadb-78ccf6837f0f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3bc9079-fba1-48c2-b876-b450789ee320", "sighting_of_ref": "indicator--60ce3f48-5bf2-4e08-8afb-2e1542df2aa0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb18c9d-5695-4c7b-9abf-db2dd96d6fc0", "sighting_of_ref": "indicator--46742b5d-3504-4288-9fe5-596c999432a8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ef15c8-a282-492e-8c92-30453dacf34f", "sighting_of_ref": "indicator--fde7cf25-71c1-4f3a-837f-0f36b109e413", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5763b10-bee8-421d-98d9-f53c66c6c86b", "sighting_of_ref": "indicator--a3272c3e-3f16-4a5e-b73b-dd5fe561df92", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a853d9d9-8e39-4568-9aad-6a44071c2d40", "sighting_of_ref": "indicator--538c7822-1113-42f0-91d8-5b18bb59049f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3f4115-5fce-442f-a634-5280ae3df7e4", "sighting_of_ref": "indicator--fa1de787-7683-4df1-ab55-8718a6531601", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73e4763-d021-4822-a5cf-371f6b05e1f3", "sighting_of_ref": "indicator--c45afd71-076c-4bee-b59b-a3ff9e34334c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588a836d-8733-4c36-99dc-e357cb974746", "sighting_of_ref": "indicator--70967632-553b-4566-9cc2-1e4b526edec2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddecd39-711c-4e48-99d5-752c12f3e132", "sighting_of_ref": "indicator--70967632-553b-4566-9cc2-1e4b526edec2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a8ca62-c327-4ffd-8340-956041c54d2e", "sighting_of_ref": "indicator--61293b9f-b89a-496d-ac2f-3fcd5c1e613b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823bff01-b3ef-4226-953a-8c3c090264a5", "sighting_of_ref": "indicator--60624236-2003-4073-8b93-d0191bf1e9e1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d2a1b7-ff8a-4ea2-907a-e27ec0cac5a7", "sighting_of_ref": "indicator--c751e872-d10d-423f-9a8c-21dbb72ba2fe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa75b4cc-d313-4c2c-bff4-bcd5f04620dc", "sighting_of_ref": "indicator--ff932755-9f70-4a74-b241-3ac3284ac6dc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab530fd-9d48-4bf8-90e7-61f09c95d03e", "sighting_of_ref": "indicator--cc6cc617-853c-4fce-b71d-4302c709823e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db46f811-3dd8-4727-9bfd-955b6550040d", "sighting_of_ref": "indicator--cc6cc617-853c-4fce-b71d-4302c709823e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a49b4e7-9a6a-4769-a2cb-afa76fb37aa0", "sighting_of_ref": "indicator--81ce7e5f-2c99-406a-8fce-db3105c1e4f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421b18e0-0a44-47d2-b7d8-9d3f5e0dd324", "sighting_of_ref": "indicator--40e472c4-c25a-47cb-a099-582f1321355f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8817ac6c-350e-4156-9ab0-48a0841aef59", "sighting_of_ref": "indicator--fc7533b2-8a09-40ee-8dc5-9a41d6586e18", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7dd834-8add-4990-8065-12080a4d2f2d", "sighting_of_ref": "indicator--2cee1d44-3449-494a-929d-2caca5ee5a94", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a4697d-5b53-43e9-b40f-fa69a01ff9a4", "sighting_of_ref": "indicator--f366f14c-1cad-4cad-933e-b6df4893898d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24732a19-ebf3-4979-8869-9c4d2826781e", "sighting_of_ref": "indicator--dfa4911c-5189-4052-88e2-d1b641d99ce7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796443b3-e392-4904-b18e-6acfe8a942e3", "sighting_of_ref": "indicator--150ea138-49ae-4a1a-a4f6-c51774a852b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e44e9b-cdbf-4f98-a847-3c1e7fdc7859", "sighting_of_ref": "indicator--1124d931-6070-4507-82a6-de82ba272f2a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7330a85a-2994-4764-8e7e-3802e8de2fa7", "sighting_of_ref": "indicator--1abdc78c-7069-4f6b-889f-0881fb78aa6d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0248457d-57d3-4d1b-a34e-75e7769dc604", "sighting_of_ref": "indicator--951de68e-28fe-4617-8cbe-8b869d6a8683", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656fe452-383f-47c9-ae4a-9303e7305c1b", "sighting_of_ref": "indicator--951de68e-28fe-4617-8cbe-8b869d6a8683", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3467ea17-a80e-44d8-ab7b-9f40e045c9a1", "sighting_of_ref": "indicator--3200f981-50d6-459f-8bf3-88ec652751b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d6cae9-7157-43fe-9c58-245fb7f90e31", "sighting_of_ref": "indicator--3200f981-50d6-459f-8bf3-88ec652751b0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90d4662-2be5-4247-89ae-d9dd76ad91f5", "sighting_of_ref": "indicator--36e0ced6-5834-49ff-9dfa-309a1d1ef7dc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36277ef5-300c-44d8-8b12-fa7404078ab5", "sighting_of_ref": "indicator--36e0ced6-5834-49ff-9dfa-309a1d1ef7dc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66646e19-84b9-4989-b096-c17bb4eb90c3", "sighting_of_ref": "indicator--05e07748-53bc-44af-ac8e-708ded92631e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ae3a1d-e0bf-4025-9d20-e38363ed4dc3", "sighting_of_ref": "indicator--27afd8e6-441d-4a95-9a69-b00db6c2602c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37355bd3-8881-4479-8203-99659869ce30", "sighting_of_ref": "indicator--480b9d75-68cc-4097-ab73-ecca2a5e40ca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6031bd5f-814b-4961-972c-2c3cdaba8491", "sighting_of_ref": "indicator--89945762-9462-447f-898a-44e740fd2876", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcc11bb-64ea-49f4-a6b6-ed024e4abdbe", "sighting_of_ref": "indicator--89945762-9462-447f-898a-44e740fd2876", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002feb6b-388a-41b0-b3a0-d316bff7f23d", "sighting_of_ref": "indicator--5880866a-e34d-46d7-a509-737052ca6bcb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24ad0af-24a9-4d77-b240-ac6e662aa01c", "sighting_of_ref": "indicator--1cb0d644-e625-4f5a-92e2-ca8960340722", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9052c63a-af42-48ca-b3f8-71e23c352653", "sighting_of_ref": "indicator--df3e25f4-900a-49c5-af07-ac3530c9915a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f769d507-840c-4c40-9e26-1a40e043c886", "sighting_of_ref": "indicator--df3e25f4-900a-49c5-af07-ac3530c9915a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff88be13-2d5e-4162-b448-f37a82a4967f", "sighting_of_ref": "indicator--3c74b5b1-2f61-4f63-b789-6a7ed201fa27", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eaa6b40-44c6-452e-84ce-404ac8a111d4", "sighting_of_ref": "indicator--55e64fbf-f76b-40d8-92b5-8d6e06c4cd03", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e61564-1134-4c99-b4f5-959333ef30a0", "sighting_of_ref": "indicator--93a41ec1-ada7-400b-8768-8bf78c4e02a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985001c2-ea8a-4722-bafd-fbc1c2d782bf", "sighting_of_ref": "indicator--ee4df8be-5466-445f-a4de-121e44aea996", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba1aca0-fc8f-4fcf-a57c-d6f34c5140be", "sighting_of_ref": "indicator--4db3bb2b-a19b-4776-a12f-7f85e2907510", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92558d31-931a-48bc-b92a-1ab1084b2dd8", "sighting_of_ref": "indicator--4db3bb2b-a19b-4776-a12f-7f85e2907510", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea2aced-459e-4c52-a7d0-bfe154d0c9b7", "sighting_of_ref": "indicator--c8be48b9-661f-4089-b02c-34e0647cdbb7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfc07d3-7e4f-47c2-96cc-9402f822f31a", "sighting_of_ref": "indicator--f3056238-514a-4b26-b096-c3a710ba61e5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f7f564-34fd-4fbc-b7b7-a38051f8bb3f", "sighting_of_ref": "indicator--868b05a4-6b82-4515-8df8-9192343129d7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7de60bf-3cbd-4e13-87c0-83b1b24c5e13", "sighting_of_ref": "indicator--f741b5aa-c543-4add-b064-b3413eec3484", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d7aaaf-19fb-4b6f-b50f-fea8607255be", "sighting_of_ref": "indicator--89854fd9-b4f0-439a-bdea-b8b20b0a1fc5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaea6ff1-5938-44c3-8439-cd3a7ef2d540", "sighting_of_ref": "indicator--759caeb0-2149-4469-b8f7-c41e41596c30", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdcffdd-2075-4716-af2e-0745c3a46679", "sighting_of_ref": "indicator--9493509b-9c33-4e95-8f72-b44e88ce3f8f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff6733e-efc8-4a74-b7b5-c5c4345a2dd7", "sighting_of_ref": "indicator--2328d7e9-ae98-4e6e-aca9-6960a7d3e73c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca61ae2-1610-4b96-a8be-04c4bb27cbfd", "sighting_of_ref": "indicator--13a59f37-5346-4083-b965-1a0985930d06", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd987890-891e-4855-a4aa-ff1ad20bf37d", "sighting_of_ref": "indicator--7876d28f-dfd5-4a6a-974e-8b4647ba8233", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99070f6-8b2b-4930-b003-264a7c9b7aa2", "sighting_of_ref": "indicator--f37df105-a2a6-4489-8434-2998ba4cee46", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfde70c5-b422-4f93-b8f2-4313f1259c15", "sighting_of_ref": "indicator--f37df105-a2a6-4489-8434-2998ba4cee46", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2152b0-604d-40ee-bdf5-b56eae58293c", "sighting_of_ref": "indicator--2c120d8e-a36b-41a1-801b-6a9cabd14f48", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49cb341-b65e-4d17-a8f2-c4bf03604ab8", "sighting_of_ref": "indicator--21425a1a-8e5a-4438-b527-5607aa3a73f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014bbae0-d2e7-45ab-a4b3-ce8c569082aa", "sighting_of_ref": "indicator--32741ad3-4933-42c3-a583-d68b50933370", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cd4734-c43a-4ff5-919d-a5edf572bdd1", "sighting_of_ref": "indicator--cb803748-1bca-4f94-aa3d-9c70562f5a9c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d89bfba-16c6-49f8-a425-1c3dda067a8f", "sighting_of_ref": "indicator--70a4572e-ba4c-49b8-ae4e-3193fc44c7a3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7dac5a4-c51a-42ea-b0a2-90a5509b3fb7", "sighting_of_ref": "indicator--c7568b2e-0548-4006-bce1-a3c1bdc4badf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33057559-4d49-4aea-b9b2-1a6cdbc4180f", "sighting_of_ref": "indicator--89bb053a-dc7a-47bc-acf1-cec7b80b2189", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209899aa-58bf-44e2-a49f-94d5a0bc4428", "sighting_of_ref": "indicator--74083945-6ba0-4091-88d2-2d7bcf1b9a66", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e593cf3-4798-40a8-a006-7e69a9b12020", "sighting_of_ref": "indicator--fda2ed03-435e-4664-ae0c-5ff34ec82103", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd1da73-2e8e-4b6c-8a33-5ad8bc08864b", "sighting_of_ref": "indicator--5ec0a55c-ff96-4954-8ff4-f624ffb23ef2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db75d67-fc41-4127-bb65-84dbe3747e3b", "sighting_of_ref": "indicator--ff0fec44-d8be-4a96-b66b-86d01cebc08a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786b8425-4c06-44bf-8603-8f19713c274f", "sighting_of_ref": "indicator--4b02d859-23b7-42a0-9923-18280cf1087c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae06dc2-3d8f-4583-aff9-6c462eb7cd5f", "sighting_of_ref": "indicator--d21218c0-d102-4c06-8bbf-4d8685dce85f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295b5b96-3e81-4d91-b473-996527696430", "sighting_of_ref": "indicator--c7b5e777-1771-4179-b80b-c01a3ea5a1f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a95806-7002-47dc-8063-ba719da57e00", "sighting_of_ref": "indicator--b63f24e8-0fb7-4c1a-9d02-a14e0c5e1066", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcb17d3-17ee-4f7f-9a01-1a0e8da2eb07", "sighting_of_ref": "indicator--b63f24e8-0fb7-4c1a-9d02-a14e0c5e1066", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c879655f-d4bc-455e-ab91-47727942462c", "sighting_of_ref": "indicator--38d77d9e-0ea1-4a0d-acc2-2591a0b435d7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9a607a-1c36-4010-979e-e2005162ce93", "sighting_of_ref": "indicator--fe10dc8f-0276-49df-b72e-df1ab6d80545", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed894a71-e0a6-4b9e-abe6-014e0b8029fc", "sighting_of_ref": "indicator--c574c74f-e8c9-45cb-b4f3-27aa91b53985", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371ca859-792a-4195-bf0a-68016243c065", "sighting_of_ref": "indicator--11c4470d-1ee9-477e-ac4d-437d5e74c586", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37966047-ee1f-4cf3-9744-1f65048d9229", "sighting_of_ref": "indicator--66ffd450-89eb-4e0d-bed5-f8d6cd1d579d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1122e86b-1375-4355-917b-493c5a6ac5d8", "sighting_of_ref": "indicator--4704c2e7-a803-4cda-a09d-bb739fc14c7a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315e3f30-d9e6-45c2-b132-8a383eabc935", "sighting_of_ref": "indicator--f11f5b18-c26f-447e-89e5-ce268b4e28b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56071ca1-4a2f-4dcd-ad4e-6142a0ebdf15", "sighting_of_ref": "indicator--9d4e046d-ffbf-4d76-910b-f75855f80695", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042a032e-ff95-4664-8f2d-21fc0ae2cb2a", "sighting_of_ref": "indicator--8de103c1-3e9a-464d-82cb-1f8daa7ba35d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e4af96-2725-4fb0-a276-4e41eddfa38a", "sighting_of_ref": "indicator--8aeaeaa4-7c6b-4af0-b968-8742034f058c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f81e744-2c07-4bbb-8880-59d8e10d5b27", "sighting_of_ref": "indicator--8635fbad-142f-429a-b77a-d77b12eeb051", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b98f433-8bf0-4f9e-96cb-7febf38711b2", "sighting_of_ref": "indicator--320ff3e9-a1ec-4fcd-8f2f-e89288da8765", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac43f3b-0799-4252-8b00-ad46edcaeff9", "sighting_of_ref": "indicator--e09f31b1-ca04-415d-be01-2ec0815e5db4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d484d6-0652-400f-b036-13ea83540981", "sighting_of_ref": "indicator--7a36d0c4-6bcc-4185-98a5-e3144a8cbdad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925a92f1-0c86-481a-a54b-8ea15eeac92e", "sighting_of_ref": "indicator--49ef04ba-c791-41c0-9179-161582ce739d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b5394e-f313-4bd2-9d0b-4f4f4f5b8432", "sighting_of_ref": "indicator--33b60044-16f6-46b1-8674-1ac4ee1e776a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c032f985-c3a4-4222-a83a-d9a607e1fdba", "sighting_of_ref": "indicator--f5889ed3-35c2-48c0-90e4-65cf727590c8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ae0564-d29a-4de7-9612-58c816e42b9f", "sighting_of_ref": "indicator--b87b401b-6a14-48aa-92e1-c658c4d515ec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89627a1a-a8a6-498e-8853-49611005b696", "sighting_of_ref": "indicator--519e5664-a23d-47fb-883d-da67eab7524d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a9da64-ab91-4ebf-b7c7-47645955f957", "sighting_of_ref": "indicator--e17dcbbc-ea50-4da0-9d64-b24f4f342e23", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea44bc7a-3747-441f-a2df-dd7ebeb4085c", "sighting_of_ref": "indicator--52c92529-489a-467a-9606-1ec1f63e7cc9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a706d51f-aaa9-4c9e-8743-fabf7a3d596a", "sighting_of_ref": "indicator--881e2da6-74f9-484d-8d72-268b71d9cc8d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3583b766-1115-404e-979f-2f7dfcd27fe6", "sighting_of_ref": "indicator--a1a50b4d-dc44-4b0b-8489-9f17bc583736", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe439436-6ef6-4987-b9b4-16e6600c6144", "sighting_of_ref": "indicator--7c598cae-71cc-4f40-bb41-e0f770e46ca5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2063fdcc-a190-46a8-801b-233056481c80", "sighting_of_ref": "indicator--04d97518-0cdc-4f79-8c7a-3a6be1bddfbc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1dcfc63-82f9-4536-9b5f-90132d756cec", "sighting_of_ref": "indicator--166a3ff4-7f47-487e-80ee-e13252ee16a2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7dc849-02ec-4844-9e1b-f69be2f70843", "sighting_of_ref": "indicator--4b33fdc5-fb4a-4a69-a49c-5d3a96a58d72", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab39cfd-3a9d-4044-be3d-da89608b197f", "sighting_of_ref": "indicator--4b33fdc5-fb4a-4a69-a49c-5d3a96a58d72", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21f0a14-2fdf-4ee4-a6f4-6df89980a7b1", "sighting_of_ref": "indicator--fcc7fe08-4ec7-4664-b784-465d9f4a5cf7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70818f4-3b48-4de7-b583-ae1cb5d3c42a", "sighting_of_ref": "indicator--3157429d-2dce-4772-ae16-e7c5133ce815", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ad7f21-03d4-4f3c-ba59-11d56ae38f95", "sighting_of_ref": "indicator--b780c575-e372-4019-ab6a-18f3ff1a5724", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922c4b32-91c8-48c2-af13-99c9d09a8698", "sighting_of_ref": "indicator--7481e931-6b3d-4b75-9a66-d3a4e70769d4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb117c35-a66c-4fea-9530-674eaa4488fc", "sighting_of_ref": "indicator--8b9b2a64-2ac4-4cd6-ad5d-58afe3c24e1f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4024fb-0883-4de2-941a-638e8d3f6c76", "sighting_of_ref": "indicator--2ea3c315-dbfd-4541-9859-61157577c84e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1c2e44-47de-45a6-9497-5ed809e5f851", "sighting_of_ref": "indicator--46c4b8d3-8b5c-457b-8076-e15aeea73085", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4f562d-acad-46b4-88cd-09e5badc9fd4", "sighting_of_ref": "indicator--235b530a-c7e6-4290-95ed-3cc5a09e47f3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332b9e6f-f5cd-43b4-95e0-35ecffbfc392", "sighting_of_ref": "indicator--0a363bed-66b4-4293-bbb5-326c838ea7f6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b6c0d0-e945-4de1-9c86-8eba5b940120", "sighting_of_ref": "indicator--a7884b4e-fb18-4d53-9926-a55667d2e12f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ae0273-5921-47c6-b5df-64d3e0506325", "sighting_of_ref": "indicator--1faa4d46-7a30-43e9-b5f3-bd06090482f6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1329122-91cd-4f7b-839a-53619ade7d13", "sighting_of_ref": "indicator--903551d1-cf1a-49b9-9a0d-b25d4418c424", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5f5899-b495-4b23-8473-b8ff350fec35", "sighting_of_ref": "indicator--903551d1-cf1a-49b9-9a0d-b25d4418c424", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51ccbcb-7b9e-43e8-9cf4-5909b26a3452", "sighting_of_ref": "indicator--5e1c3403-60f9-4221-92b3-cd570d08c897", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70a8394-615b-44e3-82df-e4d5a730ba4b", "sighting_of_ref": "indicator--5d6f4689-004b-4a66-93e1-5feb93a72e20", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163ce02c-4d93-443c-95d8-5506edb7efc7", "sighting_of_ref": "indicator--90f00e44-fefb-4c44-8374-ea5b0639d71e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c45ea2-5665-4bec-b480-e516f3d8c091", "sighting_of_ref": "indicator--47fc0115-37fb-403f-b2c5-4e1038990531", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ceb2225-5fd5-4a86-b383-8df00c7f56a7", "sighting_of_ref": "indicator--a16216c2-1ceb-45f7-a630-140f21c68d15", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a4a6b5-0106-4969-8be6-936b08f1d324", "sighting_of_ref": "indicator--cc6f599b-8959-4209-b879-c79f2e79bfec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0f2af6-f0e2-487e-a3cb-f838d088035f", "sighting_of_ref": "indicator--b6dedcc1-52c8-4050-929d-2a95fbe8d15a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390d62e7-d7a5-4aa5-910b-bf8734cc070a", "sighting_of_ref": "indicator--2424d436-8e19-40b1-9d1e-c91ed0d15bc3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e948636-bf3b-4107-8c4a-c649fe47ad01", "sighting_of_ref": "indicator--a769a773-f1db-4f36-a3ee-e3209597495d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d675ee13-0069-4626-aaa7-e3a7136ba1af", "sighting_of_ref": "indicator--9e1d2502-25e5-4e74-abe2-dfcf08dce932", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8396d1d0-e68e-4208-953c-448e658a4735", "sighting_of_ref": "indicator--f830b9ca-393e-4dd8-acdc-b8446a53cf77", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b922d631-8365-4102-9238-4fd17bfea3ef", "sighting_of_ref": "indicator--81c9e2be-d2de-4894-8725-2fc569d76150", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e8f1f9-e155-4730-82d9-ca89f5d7298d", "sighting_of_ref": "indicator--f2402db7-7eb1-4c8e-ae6c-b60a0961d08b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10a8745-5b4c-4741-bef1-38efebdc6997", "sighting_of_ref": "indicator--dc6a95fe-b2da-48c3-bfe8-a0726c6a2112", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7208c24-8efb-45bb-9ffb-d79b0fc1410f", "sighting_of_ref": "indicator--32a5c83c-1135-4e1c-be73-5d498f9db2ee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a70ad62-aeef-4ef6-ab35-187a29fffe24", "sighting_of_ref": "indicator--ce98f253-de2f-4afb-9fa0-b029909c0975", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a2dcfa-d840-45d8-9bf7-be423532fbce", "sighting_of_ref": "indicator--a24604a9-d31f-4838-8222-bd90068dec68", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1dd71b-0cf3-4c90-9b1f-bb9756f10be7", "sighting_of_ref": "indicator--79dfd0e0-2588-4ed1-8d31-a6f0f6ab05ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb2413d-2105-43c9-8d68-64ed24dfcdac", "sighting_of_ref": "indicator--4140dc68-f6c5-47fd-b36c-8887b9c45cb2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e61eb3f-0c0a-426e-9a1a-8456f3abd74a", "sighting_of_ref": "indicator--c2895a16-ffd7-4cf5-871d-449eed4ed994", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94179427-fb2b-4574-aeda-c7e5a5c8b41c", "sighting_of_ref": "indicator--5f114547-53d8-474e-b211-77449c73138c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd43133-09c0-4fcb-bda7-f982c433e4dd", "sighting_of_ref": "indicator--5f114547-53d8-474e-b211-77449c73138c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c1d9d6-bde8-468d-b065-58a3c4885b03", "sighting_of_ref": "indicator--ca3a328e-20dd-449a-bed8-8da7bff616f6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a328108a-3b73-47c1-9fc4-826285ecacea", "sighting_of_ref": "indicator--ffe71038-f92e-4bbe-866c-a19c0cd1b122", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8103190d-6bfd-43cc-88cd-33845deab86d", "sighting_of_ref": "indicator--4a90b095-2988-45e1-b89d-e77779f7c859", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90068490-7da2-46c3-aaad-b615c70fb8b8", "sighting_of_ref": "indicator--ecd72fc8-4708-446e-b9a0-2382c693a9f8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361f07c3-7e54-4d02-abb0-454288dee3cd", "sighting_of_ref": "indicator--dde0d8b8-6f90-4504-a2e5-b8eae8c84145", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de711a2a-4e1f-4e71-a8f3-fa2266fc7982", "sighting_of_ref": "indicator--6dd90bbc-f82e-4809-b549-cdc983940274", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ab84a4-538f-49ba-81b9-5ffde5d4dedc", "sighting_of_ref": "indicator--7203710c-0d0c-4e01-8b8f-b678ec3d89d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376844d5-5ce8-46f4-b787-9a0e5651f8b5", "sighting_of_ref": "indicator--3c3a4113-984c-4ff9-a9d0-5d6676d51ae3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b80ebe8-a1ae-457c-a789-edcadb7d2260", "sighting_of_ref": "indicator--c13d9bed-12b0-4adc-a83e-39da8443ca8a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4b395c-0637-47a1-b52a-270ca9f5a1c6", "sighting_of_ref": "indicator--0363721f-b891-4015-89ac-c0f2bac9be57", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37986f33-3a9a-4545-b345-91208c6d083c", "sighting_of_ref": "indicator--71299134-be99-427e-9e11-475bf9eb02f0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1add75-a5e3-4443-8ad1-562bbd64ca86", "sighting_of_ref": "indicator--af44736a-f8b2-45d2-91e1-84a119be8eef", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4abcf2-6f97-4279-a91b-0a3c8afba2a8", "sighting_of_ref": "indicator--0dfee3a0-0019-4a2d-8b15-386f638baa9b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9602bc2f-b12d-47e1-8754-74eaace5febe", "sighting_of_ref": "indicator--8c0665da-6b37-49ae-88e6-b821e9edb3be", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ac7aeb-9195-4f78-bc7e-7001fb30e987", "sighting_of_ref": "indicator--63a36cdd-d219-4f39-a522-dc2812c50864", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbde2fa-adaf-4e47-be19-01408770dd0a", "sighting_of_ref": "indicator--4c8fdc3c-ba67-40dd-92a4-997fbbaef609", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9370d3d0-c47f-4ecc-a1ca-34d9aa7c30b3", "sighting_of_ref": "indicator--b2be0c07-4f77-4426-9f94-7cbac44d1173", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7190c3-10d7-4842-85fb-86aab7ad9f73", "sighting_of_ref": "indicator--a2e70b25-6901-4168-a60f-783dbcb9ffe0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd2f42a-4acf-406c-8cde-91c7b8aeb548", "sighting_of_ref": "indicator--0a250323-761a-4a29-ab97-a7370777995f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f51969-e72f-4cb7-9eae-c753ab3c234d", "sighting_of_ref": "indicator--a02725a8-a0ca-454d-a76a-9f795c578e4d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7484c7e-6d7c-4307-94f4-175f0598771e", "sighting_of_ref": "indicator--82e8e9c6-78ec-4814-b22c-92a453538f01", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500e8185-3248-4921-9f50-cb9b2aa97c6d", "sighting_of_ref": "indicator--bdc2dec1-3b64-413c-a946-dd194e580278", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36db61a6-e00b-45ed-879b-9143c5e642b8", "sighting_of_ref": "indicator--bfa9c147-f9d2-4f8f-bfaf-a0e78808fb0a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8998b2b1-f578-4eed-bee8-66300f4ed272", "sighting_of_ref": "indicator--80e95b61-5d03-4654-a561-221e5b285879", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1441ec6-7b8b-443b-afb4-04e474f5ad23", "sighting_of_ref": "indicator--e8f449b3-ce3f-4cee-90be-aabf60ea36fd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a865711b-7445-4859-a0df-8b28c85725c4", "sighting_of_ref": "indicator--51d49ae1-bb98-45c7-a71b-d780d05866c1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a7eb76-7aee-421f-a592-ca67cd05b9ab", "sighting_of_ref": "indicator--9ac98382-5b1a-4fc8-9359-fca94ee544a6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d834bcd-5cd9-4403-9148-13adfcc1d8e8", "sighting_of_ref": "indicator--2245bec1-ca70-4e1d-9536-50eece3114a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b45633-9e7a-4410-8754-c517d0c92506", "sighting_of_ref": "indicator--4ee7141a-16cc-4133-88ac-fcd132755e7c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4d274a-4bfc-40f7-baa3-30dc7543047c", "sighting_of_ref": "indicator--d57a4c6f-f7ea-423b-8d65-444104f6c2e2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b51e156-3869-4e73-96ad-0a55fade6c93", "sighting_of_ref": "indicator--d57a4c6f-f7ea-423b-8d65-444104f6c2e2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d94505-423e-4a2d-8d59-3fc810ebbee6", "sighting_of_ref": "indicator--88532e73-fd40-4608-8425-023238b9efb2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8183887d-7b5b-4bb6-ae81-b2c4a46db40d", "sighting_of_ref": "indicator--98a9c3b7-f579-4d7b-85eb-0f1b20ddf988", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d820b327-5e67-45f8-9866-364b03cc2742", "sighting_of_ref": "indicator--97b87e28-9598-474e-94ab-b1abfb4e4aeb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f9cfdd-6938-418b-9020-49bba0b9c68b", "sighting_of_ref": "indicator--a4ec3ee4-a63f-4793-b89b-bff4e1d97178", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43e3d63-5f44-41d5-97ee-844ba13ed163", "sighting_of_ref": "indicator--714b93fd-32f2-4911-af33-898e5b1dfbb9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec20386-d3b7-4479-95e7-41f750d3c747", "sighting_of_ref": "indicator--5d9d7dff-ab11-4dd8-b054-e586327a3ae1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab529f6-3a93-46ae-a4b8-7cec2c3aab71", "sighting_of_ref": "indicator--c39b7252-5006-470b-a2fc-d50d84fab00e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4aae09-b42b-4a7e-bd17-c39aaba22aee", "sighting_of_ref": "indicator--1971828b-74fb-4b00-8e21-96a164be4a77", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea2c01c-60e1-4e20-b7f6-87524d061fa0", "sighting_of_ref": "indicator--f9b7488d-e45a-42aa-a022-f65897daa021", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4963ccf-2016-49d4-821f-4dc273770da0", "sighting_of_ref": "indicator--e78fba46-8ecb-42b0-9682-8c645d2fac7f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87181230-3b0f-4279-9ee0-76a655e0eb8d", "sighting_of_ref": "indicator--b44c8424-6476-4d0f-a2bd-a745a78bff1c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7d08b1-fa59-4060-8a35-1d5df8c696cf", "sighting_of_ref": "indicator--64b7e82f-e632-4b1a-bf7e-5675e04f48f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aceba97-da96-4cb6-b5e5-8e67fa37afe5", "sighting_of_ref": "indicator--abf839e2-e7a3-431d-8d02-98ffa45aa721", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6790ccf-1f27-4ede-8187-05c2c3e9a8b9", "sighting_of_ref": "indicator--1256f4ed-c6a4-4dbd-ac93-fc2524dfd6e4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e6a835-7f12-4f05-b60c-004f78137de3", "sighting_of_ref": "indicator--b3b86ec6-21a6-4dd5-8135-8c406c0eaada", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3873f0-5ac1-4f7f-ac26-54d154d23c11", "sighting_of_ref": "indicator--7a1ac5f3-e7e4-46e7-99c2-f6d69d5e90ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693018fb-5b4d-49cd-adee-e32eb17f593f", "sighting_of_ref": "indicator--157d1991-a62b-4db8-b21a-d72fe43a58c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e136a185-1d6d-4b25-8238-f2ecad462532", "sighting_of_ref": "indicator--c85ad375-5871-491a-8580-fb691cbc0280", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aaa3a00-45c4-4e57-8472-6b8f462795e7", "sighting_of_ref": "indicator--a981bcc1-3979-42fa-8c2d-7ebd4782900d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf4aeb9-f74b-47f8-8d4b-381bf2496aaf", "sighting_of_ref": "indicator--b505e1a2-3660-4caa-b160-2693f81acc0a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f15dde7-3ea4-409e-98a5-ab80cdd0bb9e", "sighting_of_ref": "indicator--30897747-19d3-4d1c-9436-24b86bbcde9e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477c439b-2ac2-4c72-b376-335f0255f2d4", "sighting_of_ref": "indicator--809dd58a-8ab0-45cc-8898-e426be3b4f3f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360967b8-e500-4ed5-abf6-4d908f003cec", "sighting_of_ref": "indicator--71cb4d4b-7405-4dbd-ba13-a1cbc8ce4e7a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae7544b-3112-4571-a2ba-7bf5b291669e", "sighting_of_ref": "indicator--78641046-450f-4ec4-8cc6-1c415dfa29f6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc9c90b-c62c-4403-93ad-4530db29db6e", "sighting_of_ref": "indicator--dfc9f9ba-56c2-4da3-9504-2df1863d3f10", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ad10b6-9cf7-422f-b6f2-7ff17481ce08", "sighting_of_ref": "indicator--928c8b7d-58eb-454e-bf05-890b8a15e1be", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af681a4-627f-4f91-88b0-8ed45e121d55", "sighting_of_ref": "indicator--00caa5c3-cf48-4da8-ba38-a5cbf5244f91", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4fccd2-fda5-415b-8483-c7c14a125bdb", "sighting_of_ref": "indicator--df89542f-5602-4260-9415-643577008694", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c73bc91-8241-4b06-add5-1a6078c8a7b7", "sighting_of_ref": "indicator--6d28b5a0-fb07-4416-af9a-0dc3042c8357", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ef4f98-29ce-4929-a6fa-a596a2a1a88b", "sighting_of_ref": "indicator--6d28b5a0-fb07-4416-af9a-0dc3042c8357", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c478e5c3-66c3-407f-8775-53b3820421a2", "sighting_of_ref": "indicator--b49e14c5-66c7-4a78-abbb-8c5d584d56ed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e4aa3a-d13e-413b-89e8-437e9a5dc18b", "sighting_of_ref": "indicator--6e513eb0-7126-4328-9d51-103d7240b67e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53120d00-7fcc-4c76-a3c0-95d3bb6697c2", "sighting_of_ref": "indicator--e09dc0fc-f46e-47ba-8808-e1bd5e6730d5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebecccb3-b7d0-4d4a-8852-558ef10d9602", "sighting_of_ref": "indicator--fcd673dc-575c-4822-8f17-cc74391c2bfb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74af5ff0-2ed5-4e8d-a93f-18124de548a9", "sighting_of_ref": "indicator--b3234bbc-fa88-43d8-b936-6690693a5aad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f83875-6a0d-4d10-8e7c-0e608b1e53d1", "sighting_of_ref": "indicator--ce829e14-147c-4c24-93b0-c2669e0b46a4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd2eeec-67bf-43c3-8476-435b7568ff60", "sighting_of_ref": "indicator--ce829e14-147c-4c24-93b0-c2669e0b46a4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075147b1-de9f-4449-9f1e-914be54d8a08", "sighting_of_ref": "indicator--fc094e0f-4e7b-404c-9d71-b28731893df6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e81b4b-6360-4d7d-8fca-bd4ea57f3e7b", "sighting_of_ref": "indicator--d9c263b7-fdc7-4d4a-a4f0-d526201455d8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9ff0a0-3f19-4a68-b8ef-60057a92f6a4", "sighting_of_ref": "indicator--a37f33f6-be57-439c-bb47-148239ee341c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030f2258-4bb5-426a-beba-c115caf9b2ca", "sighting_of_ref": "indicator--a37f33f6-be57-439c-bb47-148239ee341c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d16893-3f9a-4400-9ec7-65b6ee11128d", "sighting_of_ref": "indicator--7e06b61c-d8c8-4424-9c9d-0a5a009bb6da", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d865f9f9-866a-4c0b-bb45-d6863c27ce63", "sighting_of_ref": "indicator--7032147c-a570-4bb5-971a-f8ad3ff7783a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf27ce2-5fd1-4597-b6a9-d4fad73da470", "sighting_of_ref": "indicator--0ae7e4fd-2aaf-4351-b2cc-f369d7b1b9f8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83460114-53bd-4db8-a4a3-60bb4ce285de", "sighting_of_ref": "indicator--1bf7beee-db26-4bf9-bea3-fcf1913143b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c1a78b-d940-4123-8b42-88d90279543e", "sighting_of_ref": "indicator--dfff1c54-1e51-47f9-8894-ed1ba78abaef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a8075d-d8b0-40b0-83dc-0700bf4f08e6", "sighting_of_ref": "indicator--e0e6fc29-05e9-40d2-b565-d4d3729f7c31", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5afe63-628b-4c65-a812-03ea3a27b90f", "sighting_of_ref": "indicator--72240df2-bcb7-4d4e-86e7-556ab942f68a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc35948-a76d-4648-a4b4-266a5e877604", "sighting_of_ref": "indicator--4a0f5aea-21b5-43e9-b55e-591c6e945b75", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6aeafcd-2fe4-4be8-8195-9ed7a26e616b", "sighting_of_ref": "indicator--4901e4a5-140f-4fef-a22b-f581ec6a0c4a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d658e24a-cc4a-40d1-aca9-3273dd9d8bf3", "sighting_of_ref": "indicator--669c7b03-47a0-4e7f-a194-72474f8a3599", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e6c95c-2b00-40f1-bb6c-565353cccaf3", "sighting_of_ref": "indicator--7db91262-09eb-4a05-b8bf-2e58a1c7ada9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d31b51-7ee7-4b39-8957-0c36056e54b8", "sighting_of_ref": "indicator--4aa4a63c-3394-4c93-865b-3a94dc5a644e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88790f93-6b5d-428a-9fd2-dd74c6b7ce29", "sighting_of_ref": "indicator--e1190765-22a7-45ce-9969-4caaad7d79db", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb96ba0-6640-4851-a121-084c5acd66f0", "sighting_of_ref": "indicator--e9676af6-34ab-4069-9188-25abcfe0dc24", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631b3d6c-cf32-439b-96c7-c6d89abbadb1", "sighting_of_ref": "indicator--9112e636-e968-459d-a920-42a87ab65ff2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9037ea-4155-44f2-b1c0-81f55e56bed7", "sighting_of_ref": "indicator--a8c676a7-bc44-4822-aad2-6b7413356c37", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd3479c-7a1a-4ddf-8f33-1fb32eabe1f6", "sighting_of_ref": "indicator--19187989-1a22-49a4-86b0-0d206ee1d171", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316dd9cb-1618-43d4-845c-ed817b256754", "sighting_of_ref": "indicator--0df545b2-8bbc-4189-8326-4ed9c607a73a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ce3eef-4d45-49cb-abb0-86d3e939229c", "sighting_of_ref": "indicator--c52a5ff5-74cb-46f7-813f-206aab9d6ae2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352c0d7a-b055-4a95-a3e8-7fef0e926096", "sighting_of_ref": "indicator--c5756a59-76e2-4ec7-b8aa-7fe205aa6542", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4799bd7c-6c09-46a9-b730-dd90df5d500d", "sighting_of_ref": "indicator--0b39bbfa-f7f1-4392-b8f0-37a8b2350e4b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b63eeda-7c54-4621-98df-5dc83be754e5", "sighting_of_ref": "indicator--963e7ff9-e6b8-42ea-9e54-883a19a49745", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e84d649-54e2-4d34-b00d-2a72b981098f", "sighting_of_ref": "indicator--6d48b9ee-f4fe-40bd-ab24-af6d40f258f5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f200c1-cab3-499e-9324-80aa9c05435f", "sighting_of_ref": "indicator--bc8d3e8b-bebb-4441-a4a5-711503b21501", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682eddb1-d08b-4296-8c04-d60c73a48008", "sighting_of_ref": "indicator--af0f1b35-4eff-4966-930f-03a86c3de6df", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9928cb-b46a-414d-bd33-910a28d08067", "sighting_of_ref": "indicator--3b5b7a8b-20dc-4965-a38a-513702e7ede5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399f08ec-34a2-47ff-bf49-1af9e2ade3fd", "sighting_of_ref": "indicator--8bdf43bf-7cb6-4ff6-81a1-33b2573dded5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3f8158-2978-4300-bedd-074c9d178cb0", "sighting_of_ref": "indicator--8bdf43bf-7cb6-4ff6-81a1-33b2573dded5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8571012c-901c-4a1c-bc5a-0408ce455b3d", "sighting_of_ref": "indicator--e96ecd4f-a23f-4bdc-8340-2ca37ce6cdb2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48cfc27-a241-4ece-8be8-5809563917ef", "sighting_of_ref": "indicator--ed6105ae-d107-4e75-9255-254c62083029", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efc90f5-eaac-4d23-be4b-cd9653d2e3de", "sighting_of_ref": "indicator--003cc25d-7844-477d-a2d8-353e59da5b76", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cfabd6-2553-4d57-ac41-760450c536d2", "sighting_of_ref": "indicator--003cc25d-7844-477d-a2d8-353e59da5b76", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd394742-363d-440c-9865-f0f9acb105e8", "sighting_of_ref": "indicator--003cc25d-7844-477d-a2d8-353e59da5b76", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37384199-f72e-40ef-89ab-206b69f9ed03", "sighting_of_ref": "indicator--39b21e5e-22a9-4d38-a7e2-a8881d29ba50", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6531c616-3f67-4b02-a7ba-46db1844349c", "sighting_of_ref": "indicator--8b50f861-cab3-47cb-b2dc-6e93e945ea91", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28d2928-4968-4b03-8836-2a9277ca4be6", "sighting_of_ref": "indicator--8b50f861-cab3-47cb-b2dc-6e93e945ea91", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a8a5a1-cf18-4c7f-a277-d742cba5ef84", "sighting_of_ref": "indicator--d18715ba-d663-4341-9193-c8da923c4eb6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5511d7ca-7f8f-43b4-9595-dd26a39574b3", "sighting_of_ref": "indicator--261ab93e-9eca-4ca8-aafb-7e6b135d9f7d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09c2a2d-1714-4ef9-9f5c-9a4a978bf2a2", "sighting_of_ref": "indicator--c947f743-874d-4d0b-a257-2a139e14fd18", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57dc3562-3d83-482f-8018-ec1c3349a24c", "sighting_of_ref": "indicator--53ecb8cf-a85d-4649-b9fc-f55c5d065753", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979b1075-70f3-4837-b0b4-24a997098627", "sighting_of_ref": "indicator--bab39062-b5e2-421d-86d1-e2372e96c77c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137baac5-8c1d-40d5-bb6d-91cc734a992c", "sighting_of_ref": "indicator--8c276872-7d21-45c9-87d4-97965217a15f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0027982-f791-4e6e-9353-febefb77de2e", "sighting_of_ref": "indicator--816c5922-fa69-407c-8dd7-e0476ee23d13", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db2349d-1e83-422b-82ef-50d7844966ce", "sighting_of_ref": "indicator--bf65be16-74b8-4396-8e85-50006b3f6061", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8856c77e-7cb7-4508-8788-d9bee88796a6", "sighting_of_ref": "indicator--1c653ce1-0618-468b-84f1-9d2b37a83730", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98efe1b0-8563-4271-97dc-517b624ef9fd", "sighting_of_ref": "indicator--0ec8a2d8-9730-4b5e-9ecb-9114001f4606", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36c2960-3b2e-45f5-80aa-f14a343d5e6d", "sighting_of_ref": "indicator--3b6dd480-3358-40ad-91f9-be9c8644ac3b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c73c6ac-b1ea-46a5-8a57-ca9174c67dfe", "sighting_of_ref": "indicator--12f84cab-08ea-4b3e-9eb9-2f601f60697c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920e8bad-2b66-4956-88d2-2492f3be7242", "sighting_of_ref": "indicator--419df18c-d58e-4964-a093-908bb27b74ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a852f01e-0520-42b1-90e2-0073b7028ac3", "sighting_of_ref": "indicator--b585188d-ef22-485b-a208-daab885f906d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796c21f2-c164-415b-9ae3-a565ee09bcd0", "sighting_of_ref": "indicator--463a7b2d-0a3e-46c9-bf4b-42302edeb04b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0084ce7a-d2cf-4d49-a99d-1f3e28958a31", "sighting_of_ref": "indicator--7f969e50-7138-4ea3-82f8-43ff659e7f44", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15155fca-3607-4e27-9aac-ac826d426fa4", "sighting_of_ref": "indicator--2bd99a67-48a0-42bf-af08-f41de03fc4e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748622f9-08f2-4b8a-9885-7816a1daec42", "sighting_of_ref": "indicator--2bd99a67-48a0-42bf-af08-f41de03fc4e7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a219fb-605d-4337-8591-d10df15feb55", "sighting_of_ref": "indicator--2bd99a67-48a0-42bf-af08-f41de03fc4e7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa19e41c-7a32-4f21-ab21-adeb1c27416d", "sighting_of_ref": "indicator--7b81cc3e-22b7-46a5-a5fb-539ba0530fb0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba6ed04-ceca-4627-a03b-d847c58d0370", "sighting_of_ref": "indicator--517a5b22-8bb4-4c2e-bb77-2d819c6453b6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fe23fd-5423-49e2-bf6a-579113eb75c3", "sighting_of_ref": "indicator--9a992274-5fee-4c76-9302-b3144747bee4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540016e6-b55c-405c-ba2d-e715e0a51e26", "sighting_of_ref": "indicator--459bd539-aed9-4c99-b213-9bc584c98e35", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c5725e-90b4-4d12-ad8d-d1eccbcb2558", "sighting_of_ref": "indicator--723987b9-602a-4cf7-8368-21d6cf60977c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac852ec-8ce9-44dd-8d78-3cdf3a0300aa", "sighting_of_ref": "indicator--24317af5-612b-4ca1-89af-677d9605a3c5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3961fa-36df-48cb-b16b-c32c0623e302", "sighting_of_ref": "indicator--6932b952-ab22-4714-ad77-ad7ae60051ed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4790a9-2225-4590-8e3f-4810be1d1207", "sighting_of_ref": "indicator--9a893e6d-ef8d-4d38-a3fd-4c4ef2b9115b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf791367-34ef-4588-93ff-53399b7196e2", "sighting_of_ref": "indicator--7fac6087-7fa5-4993-8325-1e6c690baa93", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fde003-78e8-4723-8cd0-072d860938c7", "sighting_of_ref": "indicator--7fac6087-7fa5-4993-8325-1e6c690baa93", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddebc26-4308-430a-9f31-b38046f52a4c", "sighting_of_ref": "indicator--7fac6087-7fa5-4993-8325-1e6c690baa93", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d964a1f9-8994-428a-b890-8c21009598d1", "sighting_of_ref": "indicator--a9600be2-1f6a-4bc1-a0e1-e15ccb5d5cc1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5907ba21-3e90-42e5-b681-cda3ef37816a", "sighting_of_ref": "indicator--a9600be2-1f6a-4bc1-a0e1-e15ccb5d5cc1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4985bfbb-1986-4d55-a93b-f6bba96e9934", "sighting_of_ref": "indicator--a9600be2-1f6a-4bc1-a0e1-e15ccb5d5cc1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831ba632-9223-4875-9ee2-e07e63845a31", "sighting_of_ref": "indicator--81760ebc-2444-447e-bf70-a84ac63a0671", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba29e2a6-9d17-47d7-a0ca-a095b3c171e3", "sighting_of_ref": "indicator--81760ebc-2444-447e-bf70-a84ac63a0671", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad347e9c-a541-4ad3-ac34-9e1aa377a635", "sighting_of_ref": "indicator--81760ebc-2444-447e-bf70-a84ac63a0671", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbf18f1-a6b9-421e-abb3-12fb7c479708", "sighting_of_ref": "indicator--182c251d-3395-4c33-94b4-b5565d3b7417", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8771d4-65ff-4377-b2c4-3a9a84677b63", "sighting_of_ref": "indicator--182c251d-3395-4c33-94b4-b5565d3b7417", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f01882-7e67-4350-a649-f8af7ed70422", "sighting_of_ref": "indicator--712cf886-0ebd-4956-9ac2-d12384652d6e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac806001-856c-4f5d-86e2-38373ed177bb", "sighting_of_ref": "indicator--665b0655-15fc-4846-b832-377fa9698084", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78680fee-557e-47b7-9c73-a706c9e36689", "sighting_of_ref": "indicator--cd287240-9a53-44df-a28d-be1d4180113c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c99695-361b-4004-8fc2-4409761478eb", "sighting_of_ref": "indicator--4611690a-63be-4335-b6b5-cf658b488d2e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4047a7a2-e3a8-474c-b14c-1b4a6c9856ec", "sighting_of_ref": "indicator--75fad405-9f67-47a6-95a8-2c1419310246", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f21893-b639-4ab1-882f-1fab93b9b8d0", "sighting_of_ref": "indicator--6335bef9-857a-4607-8a80-b9f4efa6c0d8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e36475-b25e-452c-834f-2b2bb640ca9f", "sighting_of_ref": "indicator--247a9489-e6d4-4ead-9677-ec12085cf239", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578ed7a0-5463-4f96-b87e-124e8e91b71f", "sighting_of_ref": "indicator--1ac9d4d2-57e9-4998-8fce-a9049bcbc80f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e33228-e5ce-4525-8fc7-dfb9a09ac79f", "sighting_of_ref": "indicator--68d2666a-8409-4a1f-b736-25e123427fea", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0261e1f-c880-42ab-aead-669bb862eed6", "sighting_of_ref": "indicator--65051f30-2b4d-4c25-8451-4f8dfe8907f3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b992fe1c-1d6c-4f7d-8421-efdac7b56398", "sighting_of_ref": "indicator--5bde2d1e-3c04-4e58-97c1-a32db7773f7c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d47d9ce-0ca0-4ec4-a562-2d32970822c3", "sighting_of_ref": "indicator--38785fa8-56aa-4c9e-91db-431a5b55d066", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd77e928-fca4-462f-9674-b0365f676834", "sighting_of_ref": "indicator--ce0c9c44-d65b-4af9-829c-29cc58b2a38d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d227e63-7c5b-496c-b79c-d9e5ee685b4e", "sighting_of_ref": "indicator--21426728-7c0b-4b35-ad6b-bfbb87d8ad44", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebcf988-6a84-476c-9fea-0a8b8240e5a4", "sighting_of_ref": "indicator--47579d14-4fd9-48c3-b51e-e3919c4b23da", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520e0acb-ee87-4ac3-8f3a-5462aba6cde1", "sighting_of_ref": "indicator--4b8f74df-0b1d-4643-8527-e3faff9d4940", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d8ab72-26df-4738-b553-5ec89f944afe", "sighting_of_ref": "indicator--1e58d930-ecf4-458e-b986-1f6e7df006be", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e123eb6-8fa8-4edb-8297-a3f39c26c5e2", "sighting_of_ref": "indicator--dc20d87c-3384-47bb-b97a-1cb245309b08", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4537ad59-4b05-489c-98fb-21acbf88066f", "sighting_of_ref": "indicator--32b30175-d9c6-403e-aec0-c7c5cc5b7f26", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1e9ff2-597c-4849-89b1-ad532dec82ae", "sighting_of_ref": "indicator--b44d1956-3783-4e3d-9c91-c21a52ca54cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c8dfb1-39ee-4fa1-a322-868a9da1c2b9", "sighting_of_ref": "indicator--424f1257-918f-4ff3-8610-844e84515160", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97dafcec-fd97-4ef2-975f-0ab3a13dd6b1", "sighting_of_ref": "indicator--424f1257-918f-4ff3-8610-844e84515160", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2126e32e-914e-4cd9-bf7b-45627715b24a", "sighting_of_ref": "indicator--424f1257-918f-4ff3-8610-844e84515160", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2904682-6a52-42b0-92d3-05427d55b40a", "sighting_of_ref": "indicator--01f237ef-f4ab-4c8f-9a59-de24178b2d5c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e54c10-4be0-4c17-8a6c-d58614fad3ee", "sighting_of_ref": "indicator--760d64a5-abd0-4a19-ae1a-85e4909d9f9a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9059a79-dab7-40c3-97e4-ff6f39a25cfd", "sighting_of_ref": "indicator--8bde6398-ee8b-4f2f-b31c-a2c84b1e752a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8782a1ce-480e-4445-9b05-0635c10d62d7", "sighting_of_ref": "indicator--8bde6398-ee8b-4f2f-b31c-a2c84b1e752a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d712c393-c90a-414b-a699-1d64f8254457", "sighting_of_ref": "indicator--8bde6398-ee8b-4f2f-b31c-a2c84b1e752a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824e1b88-383c-4b07-9e50-17fece014e7c", "sighting_of_ref": "indicator--5c6b6f13-e65b-4ade-b01d-952fafc3a1eb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe55e640-5920-46c3-a26e-0ff8b3bc7e85", "sighting_of_ref": "indicator--5c6b6f13-e65b-4ade-b01d-952fafc3a1eb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcf0247-a57e-4f8c-a454-ab8cb4ce029e", "sighting_of_ref": "indicator--5c6b6f13-e65b-4ade-b01d-952fafc3a1eb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747a74f9-feb4-456c-81ed-b40071c79976", "sighting_of_ref": "indicator--730b236f-0ebd-4ffd-b63a-968ffd017d6b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae41f1c9-00d8-40f1-b278-6405a742b78b", "sighting_of_ref": "indicator--77a58e34-24a9-429c-bd9e-12a417d35850", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17477e5-11d3-427a-a89a-32a6062a97e2", "sighting_of_ref": "indicator--77a58e34-24a9-429c-bd9e-12a417d35850", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05fbd1d-e73f-4ab7-996d-7f050b6b4f5c", "sighting_of_ref": "indicator--77a58e34-24a9-429c-bd9e-12a417d35850", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2deffed-1b47-429b-b09e-c3893daeb570", "sighting_of_ref": "indicator--f783e63b-0a00-4c6b-bcc2-556d3c34f9fc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae65c324-0256-40cb-b90d-6a9dd290797f", "sighting_of_ref": "indicator--f783e63b-0a00-4c6b-bcc2-556d3c34f9fc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf77017-d56f-42fe-89da-b918b1720994", "sighting_of_ref": "indicator--f783e63b-0a00-4c6b-bcc2-556d3c34f9fc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de59f38a-c30e-4568-b2b3-8f53638c1a5a", "sighting_of_ref": "indicator--3afdadf3-4aa1-4595-ab32-9dde26f77752", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c575a31a-616a-40b5-8c66-9234f64e002e", "sighting_of_ref": "indicator--e2eaf330-b4e2-4b9e-bc71-4519c17c7734", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c38e979-abbe-4b11-b2ab-7d9e680f6a30", "sighting_of_ref": "indicator--d7f765e7-7793-4f3b-a7c4-20dc5908a985", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e3b392-1802-4adf-b44a-694a5dbb8afe", "sighting_of_ref": "indicator--d7f765e7-7793-4f3b-a7c4-20dc5908a985", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3351388c-b896-4fdc-b25f-663076a94abe", "sighting_of_ref": "indicator--a48545e2-d4b9-49e9-8083-5754829bd4af", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70421f0-faa9-4c3d-a909-58e45bb28ad3", "sighting_of_ref": "indicator--64a69e46-c3a1-4b6a-b14a-01ba2fcde43e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c0ed4d-5f81-4e06-9297-05fc8765fd9f", "sighting_of_ref": "indicator--64a69e46-c3a1-4b6a-b14a-01ba2fcde43e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efaba85-a0c1-4440-903b-c71c895d7a01", "sighting_of_ref": "indicator--bea23e91-985a-413e-a4ba-f752db02b441", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d21e45-5d47-4faa-8b9a-6174e59877dd", "sighting_of_ref": "indicator--2f1013d5-3dc4-4c4c-9c68-5d5161034e07", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1f5bda-22be-463f-a645-dd38f85b873c", "sighting_of_ref": "indicator--2f1013d5-3dc4-4c4c-9c68-5d5161034e07", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e811df-970f-4a09-8065-c771831bd2b0", "sighting_of_ref": "indicator--33841743-f6fc-4bfe-98b8-f1e68f802d02", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489fef72-7a2e-42ca-a0a6-e161cab9e591", "sighting_of_ref": "indicator--430645f5-660b-4be7-9173-c5b7d853f57a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea7a1fe-ea5f-4cc2-8d08-195d52177959", "sighting_of_ref": "indicator--a8925f27-b094-4ba9-8cab-06db017daa89", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8afbc8-bfbb-49d4-8b93-1624c4d10dff", "sighting_of_ref": "indicator--3f58e18d-155d-483f-9963-b64c0098adcf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bf522a-4a83-4f64-8f7a-94226ea90a70", "sighting_of_ref": "indicator--56399d06-6421-4c9c-aac5-b6bf9d22e1b1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4fa2bd-5dca-4ba5-a7df-dc28b9e85d7f", "sighting_of_ref": "indicator--56399d06-6421-4c9c-aac5-b6bf9d22e1b1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006b80c5-96cf-4783-859c-172207910a4f", "sighting_of_ref": "indicator--a4655cd3-da1f-4a89-9a1c-73fbccc653dc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21a4711-e57d-498b-9be4-8d3e5ee3af31", "sighting_of_ref": "indicator--b2d145a3-c9ba-4853-af5b-408a38e0141a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847644d3-3840-4f3a-b53d-af0ff6f8b484", "sighting_of_ref": "indicator--79c8af1c-8542-4759-b9bf-9f5b6f028f62", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fced9597-ac47-429a-86d3-46852cee46b8", "sighting_of_ref": "indicator--f567eeb8-ec5e-4f24-b78d-d6fa7f63e113", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a370aa-bfa3-4f03-9d33-86b2a698b7be", "sighting_of_ref": "indicator--05939be7-3efb-461d-a5d5-fdc9d975dff5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f021cc-1d2a-4bfc-be94-501a8a1d08c3", "sighting_of_ref": "indicator--a6fec10b-8a4a-42b8-81e4-9295f1d764e5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e6508b-81a7-49bc-a991-9c5a7496df56", "sighting_of_ref": "indicator--00d6211e-916e-4917-9915-b6acbdced596", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327dc2de-4e02-4dc9-9f5b-923db22fad85", "sighting_of_ref": "indicator--00d6211e-916e-4917-9915-b6acbdced596", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766571c8-b9f2-4e1a-ba83-5de842f8c7ee", "sighting_of_ref": "indicator--2f6af416-2c94-4627-affd-b2c08d04c7ca", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abac0368-925b-4c75-8107-b36cffaa1352", "sighting_of_ref": "indicator--2f6af416-2c94-4627-affd-b2c08d04c7ca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e78e795-6cd7-44ae-b590-b2e78d53ed13", "sighting_of_ref": "indicator--2f6af416-2c94-4627-affd-b2c08d04c7ca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bf1e87-4758-48e1-b0bf-77e62fcd318b", "sighting_of_ref": "indicator--449b03b6-edd6-47cc-83eb-1780e7a78ab0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378db5ad-a716-4e82-a2c2-867f7cebb00a", "sighting_of_ref": "indicator--4a566521-8d93-4897-8a7c-3f73c6df0196", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff743a92-4e13-4696-bac3-36e8e57e7ff6", "sighting_of_ref": "indicator--4a566521-8d93-4897-8a7c-3f73c6df0196", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51d24a0-5adb-4713-98db-1f5d7d189f73", "sighting_of_ref": "indicator--7ff8d435-8e1d-4742-88da-27f412068e16", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2a6694-688e-4826-b1b1-eb6fe93833fa", "sighting_of_ref": "indicator--56020710-9235-4111-a379-25fb5dd663cc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089d1a9c-8182-400b-8483-41eed44db01f", "sighting_of_ref": "indicator--7c4ca7bf-881c-42d7-918f-e369b087b202", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94767a3e-2a5b-4405-9050-564203966e51", "sighting_of_ref": "indicator--8b2027b4-23b4-437a-8691-6515bf4bb2d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9e24c5-5dde-4ade-b3d1-13c5959b3333", "sighting_of_ref": "indicator--8b2027b4-23b4-437a-8691-6515bf4bb2d3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb1b6c3-f9df-4581-bdc3-ba2a398c913c", "sighting_of_ref": "indicator--8b2027b4-23b4-437a-8691-6515bf4bb2d3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2457680-d50b-4d01-a155-762c9acb8770", "sighting_of_ref": "indicator--670c910f-917b-4868-ba55-bb59459978bf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5602f593-bc05-44d7-b2bd-76110139cec7", "sighting_of_ref": "indicator--670c910f-917b-4868-ba55-bb59459978bf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1146b1f-9499-4ae3-abba-0c048a26057b", "sighting_of_ref": "indicator--670c910f-917b-4868-ba55-bb59459978bf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4beaeed-7733-4670-8d4e-e658544878b2", "sighting_of_ref": "indicator--934d6dbd-8ccb-48b3-b15a-ae096a30c642", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49fd17a-4346-4265-8491-0cc7b4ad39f9", "sighting_of_ref": "indicator--1deba3c5-32f9-4111-8e37-7ae0f21f7ecf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30460d53-4659-42d8-88f9-5358d81adf66", "sighting_of_ref": "indicator--894a02c2-5493-4ce3-9838-4bba65048dce", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fa57f9-426e-4310-b66c-276c885f29a6", "sighting_of_ref": "indicator--86821754-6721-4071-aefa-64d5c080eb31", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786822c9-9f54-4e6d-af14-9cec87db22f4", "sighting_of_ref": "indicator--92ab82dd-b1cb-4b8b-b63a-831bae04215c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01a99d8-92d5-4f54-b985-b1a921de66b4", "sighting_of_ref": "indicator--1d9e6825-d95f-45d6-9803-1af2bdbe44ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5620c975-cfb4-4d6f-937d-a2f5b936c73c", "sighting_of_ref": "indicator--1d9e6825-d95f-45d6-9803-1af2bdbe44ce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38529ae6-da84-40f0-8cc1-36c8332a4dec", "sighting_of_ref": "indicator--f1b43548-4d00-436f-ab42-6e3f97557816", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456ad9bf-bc58-4bdd-a2f6-69e07150c7f2", "sighting_of_ref": "indicator--78ac430a-6de3-4474-80a8-8578e4607fd6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f8e5bd-b457-4e69-a645-5ef8a2b197e3", "sighting_of_ref": "indicator--78ac430a-6de3-4474-80a8-8578e4607fd6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d956856f-b8ba-4032-ba89-55012600661a", "sighting_of_ref": "indicator--78ac430a-6de3-4474-80a8-8578e4607fd6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565e29d5-1730-4d9f-baae-51d2b0cdcff7", "sighting_of_ref": "indicator--20c2654a-460e-4636-a0d5-daa4fc587c05", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b98b524-facf-42d8-b41f-ccde381641a9", "sighting_of_ref": "indicator--20c2654a-460e-4636-a0d5-daa4fc587c05", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9aa289-6746-4269-a0cf-23bb844fdc7f", "sighting_of_ref": "indicator--20c2654a-460e-4636-a0d5-daa4fc587c05", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2bb1c8-e58f-4435-92fc-159467db2d04", "sighting_of_ref": "indicator--ea16d456-b25d-4dff-b7c8-179bd0886814", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44de557-1306-4e74-8e7f-f24fb2aed795", "sighting_of_ref": "indicator--7b5e6cbd-7f00-46f3-a527-7ab44bc3e159", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fbeaa6-346f-4a89-b5ea-e4380104df08", "sighting_of_ref": "indicator--fc8eb9fd-060f-4200-859f-52a87e284127", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a44725d-7a40-481d-a6cc-89723612ba03", "sighting_of_ref": "indicator--fc8eb9fd-060f-4200-859f-52a87e284127", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db0eb43-89ae-4ec1-8ad5-f9ec0d8f45b5", "sighting_of_ref": "indicator--fc8eb9fd-060f-4200-859f-52a87e284127", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37bc938b-2958-4a2d-bc9d-5c1d14eb1ea6", "sighting_of_ref": "indicator--3b0a374f-7715-437d-9c0b-a86ebb86e6ff", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f059238-34a2-4fed-ae9b-c08eaf57eb98", "sighting_of_ref": "indicator--f13f07e9-b382-4b88-9865-fec41e8c3be6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0447b7d1-804f-4e41-83ec-d28d577706a5", "sighting_of_ref": "indicator--f13f07e9-b382-4b88-9865-fec41e8c3be6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3a8e76-ac32-4c4b-aeb3-ba25fc5b214a", "sighting_of_ref": "indicator--f13f07e9-b382-4b88-9865-fec41e8c3be6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bab1f9-b7c2-4c35-bd05-b6cf2708eecb", "sighting_of_ref": "indicator--561dbee3-6e97-4bff-97ea-5a35905b3b93", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01b9f3b-dea5-459f-8f7b-c37d92570666", "sighting_of_ref": "indicator--7e92a927-397a-41d6-9d2f-039ef6660014", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8502ac-89a1-42e3-957c-d6fa0bc5c1c5", "sighting_of_ref": "indicator--01de78e0-aa84-4f96-892e-4ee923017bf0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c639d3-6576-4236-a8f2-7a7c6bdb6847", "sighting_of_ref": "indicator--01de78e0-aa84-4f96-892e-4ee923017bf0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5e2098-645c-4fd1-bf04-34b29689fb23", "sighting_of_ref": "indicator--60a3e50e-4aa9-4d78-a46c-19039ab88557", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c46319d-7467-4c63-9616-5a80edbb0118", "sighting_of_ref": "indicator--a40dff9e-0fdc-4da4-b90f-8c5e8d8bf160", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d04cff7-3a3b-41de-9c84-cc26d7838c1f", "sighting_of_ref": "indicator--03e37d35-e7ba-4a2e-968b-9bf8497b28e5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c945c6d4-0106-41d2-91a0-46da016350fd", "sighting_of_ref": "indicator--a889f46d-4459-4290-b1e6-d4de85192f0d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b33daf-b189-4722-a784-835283260cbf", "sighting_of_ref": "indicator--3f0ce616-97f5-4012-92a9-b7efd16fa593", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276e788e-0d12-48e5-ad00-8ffd98aac5b1", "sighting_of_ref": "indicator--f1f7820a-0b93-4414-b447-2e4fe5e5fb23", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f3fd01-172c-4263-863b-33c7a779a618", "sighting_of_ref": "indicator--e9717c48-b859-4284-b35e-6a5bca21ae97", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f8fe62-48d0-4461-81d3-0a2a84c17959", "sighting_of_ref": "indicator--1bb66f5c-3ec9-478c-b8c1-2ccd76118f29", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5647fc45-31bc-42c3-8201-15f7deee0645", "sighting_of_ref": "indicator--ad3b95ab-f6a9-4d9a-af06-afa6fefed1fa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f6730b-ef3d-417d-87c8-1fd257beffc4", "sighting_of_ref": "indicator--60bab0f2-d561-45b6-b4aa-37e1049b1210", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609a4d9e-b699-47cf-a8ec-a69321e104ec", "sighting_of_ref": "indicator--9e9892da-dbc8-4db5-992b-fe666dfcee6c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e59130-e23f-4f6c-918c-52336dbf34d5", "sighting_of_ref": "indicator--53154471-c0fa-4b33-9c1b-bda7c7a3cfb6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fcbffa-f010-444a-9415-69406de1c71f", "sighting_of_ref": "indicator--a662b979-f69c-46ed-b3a2-7f07cb345376", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33e944b-9f39-4b75-8e81-200d0f026721", "sighting_of_ref": "indicator--4e632feb-73d7-44d9-8491-31251a6bcc17", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e06ef0-e0d7-4ac6-9399-de4f8185887c", "sighting_of_ref": "indicator--6521ec94-e9ea-446d-886b-10c1f40f17f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92deb87d-8945-4848-bc9f-ca67a3e22bee", "sighting_of_ref": "indicator--d9fd01ab-e45e-4512-934b-00e1cdfbb7e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9572a9-075e-43b6-85dd-d28f9213db06", "sighting_of_ref": "indicator--38da739b-e34e-4f13-83bd-4a4ba9b66bc6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ddf252-a322-43e4-920e-89990c66e84a", "sighting_of_ref": "indicator--8db4ef29-8d0f-4a77-85c4-5d399bfd55d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3758c919-0483-4dab-abcf-ff4405e5b9a0", "sighting_of_ref": "indicator--820c25bd-f534-47ad-9c41-309037200198", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7419da19-ac56-453c-8447-3fb1d8289ea5", "sighting_of_ref": "indicator--0cf88e6b-8a1a-4a20-8a3f-752f5b9e86d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dcfce4d-ad8d-46a6-97b1-38f534f9b24d", "sighting_of_ref": "indicator--d4611970-8356-4bcd-beda-0bcd9e328779", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fc01bd-183c-4b8f-8fed-8f9d31014ee7", "sighting_of_ref": "indicator--67616bd8-9b87-4b86-bc39-75c94453389f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae5e994-cfd2-45d2-8c70-926313e9f764", "sighting_of_ref": "indicator--136719b2-51cf-4279-92d4-1cc9779debb1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3bec20-99bd-44e4-a921-5cbf58e1a382", "sighting_of_ref": "indicator--b354c2a2-08d4-4615-8962-99f7ac464ed3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37800629-51ed-4247-be57-2bf5a0acfc68", "sighting_of_ref": "indicator--5fe88bd5-8d2a-443a-903a-c1d88c2fdf0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3f2203-f407-4af3-a0c8-2989363a5b85", "sighting_of_ref": "indicator--91ebee19-1752-47f1-bdbe-4eefc41080ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37adb9b2-8ca2-43cb-8772-19c8ee8f8e0a", "sighting_of_ref": "indicator--121609cf-c2c5-4aa4-9a94-d551add304e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4fe9e75-c8a2-47f6-b5df-9de41c84d139", "sighting_of_ref": "indicator--ad423be7-167a-435d-b7e2-3c27df0b129a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4d87cc-a074-4a31-b137-4ab2e4275567", "sighting_of_ref": "indicator--e1187ec2-c767-4cd7-a1ab-b613e61202a0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995cf094-dc59-4883-92cc-a7a6db158d33", "sighting_of_ref": "indicator--b69cb49e-c03a-4658-86bb-c8474ba67eb3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d532f66-920e-4c83-8ff6-2482bb28be9f", "sighting_of_ref": "indicator--030e24ce-2e1b-47f0-a201-59a3d55ffde1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b40a36-0043-4da4-abec-eba78e31335f", "sighting_of_ref": "indicator--1bae8e01-de4f-48c0-b433-6e72fd232a97", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd583049-7dea-4b34-bce7-87445a953488", "sighting_of_ref": "indicator--47362136-0e9b-4e29-b1fd-799ae24a2613", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54148cb2-e4b2-42ff-81d8-dc2d1906bef5", "sighting_of_ref": "indicator--c7ff4ff0-21d6-4927-be1e-ccad182efd5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02edc45f-1b95-403d-bfc5-7658791380e1", "sighting_of_ref": "indicator--dba6f5eb-0c0d-4aed-9e43-1899f560e450", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd172c69-8e2b-420b-9e1e-f31fe7ae82be", "sighting_of_ref": "indicator--ae1c845c-e628-4326-b2d2-cc696bfc1d3a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986eb9f0-da1d-4996-8ea9-ee22ab2f60a1", "sighting_of_ref": "indicator--420dd294-2580-4922-b2ce-f57ad76fe3f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c44828-25bd-4682-b2da-1d8e47e5a8d9", "sighting_of_ref": "indicator--e56086ab-4d51-4dd5-b453-1899a2d85441", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42dbab9-ac51-44a6-8326-e8a103af5f91", "sighting_of_ref": "indicator--90979a12-07ad-4755-9d96-d2066d6f9ff8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b98bfe7-fa2d-4c24-bb89-4a36e516bef8", "sighting_of_ref": "indicator--6e3b3911-b664-4741-b731-8811af57d457", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db933d63-d07f-412c-bfe9-529431922c34", "sighting_of_ref": "indicator--cbf7ade7-6c37-4bcb-b561-d43271076b36", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75828ab-c7b8-4497-b2a9-a8aa9a49357a", "sighting_of_ref": "indicator--62388ece-27ba-4d5f-be70-93611f5a7692", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6cce5dc-2c26-4520-8260-b8cf9a7fc0cc", "sighting_of_ref": "indicator--80b1929c-d51a-4e23-9d0c-524ff96d299d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92bfbf90-df59-4f0b-a4f9-6b45cd768af5", "sighting_of_ref": "indicator--0b28bd41-68e9-437a-ba27-41e71dd77ead", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2370519f-96c8-4ad9-b413-7f9c59d42381", "sighting_of_ref": "indicator--6308626b-9093-42e0-93c6-a0b700483393", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762c813b-2efa-4b5b-b4ff-4f5fbee9a621", "sighting_of_ref": "indicator--437230ac-bf77-426c-8e4d-e4400323490f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923d3a05-d243-4f24-b9ff-b758994b8f68", "sighting_of_ref": "indicator--54c2ab33-9168-4a3a-b064-9b9141214cf7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3637438-ce0d-4079-a237-b4d89c703062", "sighting_of_ref": "indicator--61d33611-ce9d-41ba-aefb-2c6ab20c16f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a8e6db-89ae-4699-b373-3b032d1e48df", "sighting_of_ref": "indicator--80e9a759-9602-4f6f-b9a0-619b7991d6fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6fe4a0-de17-4f74-9d28-c77fae8dab7d", "sighting_of_ref": "indicator--81ca5cb0-71a9-4296-abb5-e0361927fa73", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e25aaa-d7bd-48b3-9d72-154ba1f9a51a", "sighting_of_ref": "indicator--acd274bc-c497-47f4-a188-39de2741571b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e489229b-f076-4ebb-b9c6-b65c5057a6f1", "sighting_of_ref": "indicator--3b998f07-1562-4a52-89be-afc53716c930", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f136520-4bf8-414a-849e-5693824f2932", "sighting_of_ref": "indicator--10996eeb-eb10-4b59-a08e-92740709013d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f95cc6-a551-4b34-9c54-566d8e288f4d", "sighting_of_ref": "indicator--409eacda-75b0-4650-aace-e60ab927ed7f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce24295-fb67-4a9c-b138-dfb7c599055e", "sighting_of_ref": "indicator--7a551808-7e9d-4bf2-8816-8bb2095b6a5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df7a30d-0aa9-42ea-93ca-6456fef0c2e9", "sighting_of_ref": "indicator--43d1b820-731f-443a-8441-569999a21f37", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa118b06-357b-4ef7-83d1-76fa90fbd3d4", "sighting_of_ref": "indicator--43d1b820-731f-443a-8441-569999a21f37", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a49ebc-3610-4cb8-a9f2-ed87bc9a9d5c", "sighting_of_ref": "indicator--16f01c9d-2704-49ab-a51e-23edf96f79d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fe58b8-f807-4f48-9892-0f038108fc28", "sighting_of_ref": "indicator--8e946ac7-f700-40e6-a43d-5f8f9b308cc2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecff3df-c927-4c5e-9817-e5f8ccda8e9e", "sighting_of_ref": "indicator--1d3c5016-7a7d-4b44-88d1-e053c4e0e05f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104b6c53-46c2-4ca3-b6ef-c308ddc5605e", "sighting_of_ref": "indicator--572c2a2d-74a5-4a1f-96b1-d97ddb6ae17f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64339d34-8d4a-4830-866e-2adcddcbbdf5", "sighting_of_ref": "indicator--2d870b9a-885b-4aa8-be2f-e599798a026d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d49e25-92f9-4c11-a846-95adf1da0f79", "sighting_of_ref": "indicator--74a89612-06b5-41a0-a835-1c8e693acbbf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3f709c-5e2e-4223-bddc-56901fb6c94e", "sighting_of_ref": "indicator--4f894e73-703d-4b88-8da4-011ae2a15115", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5897156-be26-4171-bee3-ca9f97ca5c88", "sighting_of_ref": "indicator--f0d90fa4-1baf-45f0-8893-bc65ddb4814b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa07854f-5770-4501-bb4a-8ead3514afc2", "sighting_of_ref": "indicator--fb5a0aa7-5492-4128-9ee5-7703fef58a4e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df729077-cf1c-4a5c-858f-d44906690545", "sighting_of_ref": "indicator--7ac44b92-bb55-4e09-a94d-5a6f69cd3336", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7b4186-b65e-4f7d-804d-1e2fd95ed52c", "sighting_of_ref": "indicator--3808b84d-14bd-493d-bec1-f94588deaf10", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa713ae-7a7b-428b-8614-bbc981cb3da2", "sighting_of_ref": "indicator--25b8a21f-09bd-48cb-9f46-9af2b2ccc5bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52221d0b-2f6d-44eb-89c3-04ab60ecb497", "sighting_of_ref": "indicator--bf6d0984-fb69-49bf-91d0-bf76aa4e2373", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef6d35b-7b50-42ca-8885-1387a9e8eb6e", "sighting_of_ref": "indicator--0083b47e-4333-46a2-bb00-d5c55f8e2649", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d672cdc-4ecb-4465-8653-fcfa23dda8bc", "sighting_of_ref": "indicator--ad808fd5-694e-4dba-9c04-16b860cf8c72", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccdc9b0-904a-4594-8b01-aa0ec02a1178", "sighting_of_ref": "indicator--8c66a062-654d-4fa8-bc3e-cc1f0b79e410", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c654e368-7401-49cb-a4f6-35f28e4017de", "sighting_of_ref": "indicator--8e2064e6-6811-4094-84db-2798e3aa1041", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069d3941-ea29-483c-813d-5ed51fb13846", "sighting_of_ref": "indicator--8e2064e6-6811-4094-84db-2798e3aa1041", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9781d6b-824f-4403-a4f5-00764dfb23eb", "sighting_of_ref": "indicator--6b7331a6-59f0-4ef4-9b80-1cbcf3c6ad5a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1416e517-4ead-457c-a4d7-58cf42b1b819", "sighting_of_ref": "indicator--6b7331a6-59f0-4ef4-9b80-1cbcf3c6ad5a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298da106-5f5a-4a3b-b24b-833f3f6a08b8", "sighting_of_ref": "indicator--6b7331a6-59f0-4ef4-9b80-1cbcf3c6ad5a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f30d3f5-e3e8-4a67-a3ec-e9395ca9cb15", "sighting_of_ref": "indicator--f0029908-9ff4-4352-b40a-b70d77fac709", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5662473-5a5a-4275-b838-c3b67a694b6a", "sighting_of_ref": "indicator--f0029908-9ff4-4352-b40a-b70d77fac709", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbac5aa-f23b-4c67-9db4-7cf552d369bb", "sighting_of_ref": "indicator--f0029908-9ff4-4352-b40a-b70d77fac709", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8250a8b5-6958-445e-9906-16014b5a73ff", "sighting_of_ref": "indicator--8acfee0d-66ed-4b3a-8d5e-fbbf6ef91397", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc709b3-cc04-4975-aad4-c45f17ab086a", "sighting_of_ref": "indicator--40f09f99-a418-4263-bd5c-0a4033f4461d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476fd9c8-445e-4d2b-8590-da98ce2f4224", "sighting_of_ref": "indicator--029de962-77ba-484b-a6dd-242e2efe9261", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9b5efa-4b92-47d8-bbb2-bd9c7e9209fa", "sighting_of_ref": "indicator--ec6da4c7-3fe8-431a-8dfe-ddd50f7fd4da", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9fd263-177f-49e2-9673-f8af52b5ec8f", "sighting_of_ref": "indicator--142ba771-ffbc-4480-b803-5840f65e8067", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52db2e71-9abe-423b-90f5-206613982c5a", "sighting_of_ref": "indicator--c82c6520-033f-4aac-9625-dedbc5b024af", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1c2ecb-1c07-4643-8e85-6a8c0ae56fc6", "sighting_of_ref": "indicator--aeb4dac7-7f61-4426-ad54-cdd9f32f5a89", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ee2602-26ee-4d95-87c2-085ab8447a25", "sighting_of_ref": "indicator--9af71a24-acd5-4829-b38e-05462c9b07be", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0779651a-8a9d-44f5-b3ee-031f0d980784", "sighting_of_ref": "indicator--dbb8ecd5-121b-4005-a02a-89da8fa266c4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce9abf3-ad39-4215-940e-6939e0c15ab2", "sighting_of_ref": "indicator--2aebbec8-26c3-464c-a918-b65108677d7e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8393656d-6a4e-4741-a390-c192a40c746a", "sighting_of_ref": "indicator--52e10712-803f-4c9c-9f3e-b4de7c1b7ad6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62aa4af-8d05-43df-9348-af3b9a3c9bf2", "sighting_of_ref": "indicator--52e10712-803f-4c9c-9f3e-b4de7c1b7ad6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f4de2b-7693-4606-b3c9-c49fc2004c60", "sighting_of_ref": "indicator--999eb537-5410-4978-b258-62d78bd7f3b4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69f940a-8490-4500-a088-ad9ab93b692b", "sighting_of_ref": "indicator--8f3c5822-d776-4380-8558-975be94da69f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2211aa03-6ec9-4c24-be38-9ec93e171228", "sighting_of_ref": "indicator--465f891c-2b2a-4043-b0b8-688f9e7ee857", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea7b8f8-91fe-477a-affa-73f7c5ae6cd1", "sighting_of_ref": "indicator--3b98eb85-f257-469d-9663-32421a766a66", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b2ddc2-2151-43b8-899e-f89b89c79eab", "sighting_of_ref": "indicator--e2610861-a4b8-4c01-8b5e-726387d89cf0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ed9273-bbe4-4f43-a19d-3188607c2854", "sighting_of_ref": "indicator--8659241f-f0aa-42ba-9829-5fd55a699513", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc27c7f4-6b57-418d-9264-090b255d36a1", "sighting_of_ref": "indicator--93b76297-c134-49ad-b6d2-7f4a4c935bbd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035c9884-1b8a-49ed-98fd-452caa57eb7c", "sighting_of_ref": "indicator--4ef11243-e2d4-46b1-b8c0-7a46bd3a273b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66368fd6-66ad-429b-be95-348e73d2b58d", "sighting_of_ref": "indicator--2841be9c-dad5-4cfe-84a5-6bcf5492f7e7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79a8de0-1395-4861-8e1b-ec287fbeeb46", "sighting_of_ref": "indicator--49519489-b51e-4248-afdd-c3f0091a706c", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a03249-5307-4348-868f-4ede5475b1ae", "sighting_of_ref": "indicator--9389977a-5025-4ca1-a750-ec8bfc29015b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8e91df-8bdf-4b22-9164-684e6a48dfdc", "sighting_of_ref": "indicator--a30b22d4-61c4-4130-8eb6-d3e69c27d80d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdeda1fb-0758-47b9-af5d-0e9bd2ac9eff", "sighting_of_ref": "indicator--2f4af5bd-c310-49ab-a3cd-e6a0c8e9068a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569f03f3-9a1d-4324-bc7f-a1b8371d650b", "sighting_of_ref": "indicator--150e27fb-7813-4eed-94ed-ae7d0b079a5c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488afbe0-4283-493b-a9f0-d263148530b6", "sighting_of_ref": "indicator--34179d04-42da-4113-a6b5-019606bef673", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e914be-a073-41ca-a2e0-658825773ba4", "sighting_of_ref": "indicator--6e2b8c31-1b75-4ee0-9c33-2337381ae57e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc36606-1902-49e3-ba41-3056c4ca38ac", "sighting_of_ref": "indicator--a07ecd73-a597-4d8b-ae24-e6172c3543d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3951a1de-4486-4c1b-9c46-be42bd6c46a0", "sighting_of_ref": "indicator--3fa91edb-8898-4df6-b98f-a22cd16db041", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a935d3e6-1645-44dd-a38f-5fcfd96e6eb5", "sighting_of_ref": "indicator--e1dcc44f-2143-49fb-9cf2-1336575b6c93", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb6e912-bb5a-4e0f-a7f7-18489965345a", "sighting_of_ref": "indicator--64d91613-d025-4074-887f-4d3d67670107", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3908a6f6-5aa0-408e-ac18-6859e816535e", "sighting_of_ref": "indicator--7f50f994-3eaf-4be2-9764-f3dd94f1ef81", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614f364e-54a1-4c41-a775-ca1fdb2747bc", "sighting_of_ref": "indicator--4ecbd687-de17-41dc-9f23-95b079f331bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884b2358-8286-440e-af70-a0a8951848dd", "sighting_of_ref": "indicator--3335a4f9-0e26-4ff9-8b35-cd78eb2cb68a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a42cfd-30b5-472b-b995-3884d5d5ec5d", "sighting_of_ref": "indicator--b2f06343-8868-4025-ad82-ab3932d357b3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710645ea-f675-42ce-9939-fa1e5150418e", "sighting_of_ref": "indicator--25858c24-e59a-48cb-bfe2-b93d85490d65", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483b923f-3483-4983-a1df-8726c95c0d21", "sighting_of_ref": "indicator--5c5ae756-0f8a-4700-b0f4-0cebbbab8b11", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa1abd2-dfd1-43f2-a204-f386886314e9", "sighting_of_ref": "indicator--2a990999-dced-4377-9316-88a4aeb20762", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9665fb9d-2ec5-4a78-a5ea-00b99eb20340", "sighting_of_ref": "indicator--3630d4de-7a03-4d15-a147-245fa722f8d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17d31b3-3e23-46c4-84b0-c99296dcd304", "sighting_of_ref": "indicator--8d203e93-3857-4f8a-bcb7-9c3a4155e7e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d376fb9-222e-484c-846f-0eaf9055606f", "sighting_of_ref": "indicator--d885d7cf-60c2-413c-be1c-3a46df6b95c1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0c2f8b-1809-4f3a-a7fc-fc625cfbb7bb", "sighting_of_ref": "indicator--7cc8d34e-e36c-4af7-a256-9a9409e37d16", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eda51ca-e3ab-44e1-b6fc-3c8a208acd49", "sighting_of_ref": "indicator--12425c75-ca4e-4939-9401-b68a0b39d9c5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd911b34-2e50-4b3b-8417-670ac56be988", "sighting_of_ref": "indicator--c368b78b-975e-4b93-b3cd-006b41953733", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76a07f9-5feb-44fe-bb56-85b90f7b3d57", "sighting_of_ref": "indicator--b9a29ade-cd9f-49c3-8d0c-e403860560bc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b31618f-cd29-4a95-bccc-9e59ed686cfc", "sighting_of_ref": "indicator--c4dc26d5-0b10-4757-b997-71162cbc03cd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332d6c77-3157-4bed-9ab9-b08c93b830cf", "sighting_of_ref": "indicator--f6c780cf-09b7-4b65-84f7-13e1df841865", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b429c73e-dfe6-487f-aa5f-465d14dd5904", "sighting_of_ref": "indicator--5744bfca-bfd9-456c-9012-47dfc201479e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a25164-2368-4594-a492-4f03813912f6", "sighting_of_ref": "indicator--d3e529fe-8f48-4a63-9e2d-074fa7337485", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ab59e1-6807-4c29-affb-1bb863ec49ae", "sighting_of_ref": "indicator--59abd04b-a3f4-4626-ac17-74fd257c101a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdcdefdf-151c-42c5-b093-410a41079c6e", "sighting_of_ref": "indicator--e84656db-f90a-4e80-9486-20b54f48a751", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa986551-c501-45e4-b471-9c4e0c94a1a9", "sighting_of_ref": "indicator--975e9c63-4d47-46ab-82f0-0d057eb26d34", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e23e3e1-23c8-4913-9b80-73243defd54b", "sighting_of_ref": "indicator--560cb89e-1066-4cd0-9218-33f3869b8017", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a08e47-6c52-4683-b966-ba3b0bdd78dc", "sighting_of_ref": "indicator--bae14fb1-5aa7-4fb8-b201-2f4eecafabd7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e48301-b1bc-4de8-bd7b-b77ec84d9cc0", "sighting_of_ref": "indicator--fdf24a4f-2d62-4b68-a907-6d4d09cb2af1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba16b5a9-6371-456e-beb2-a2e69d6c3ed9", "sighting_of_ref": "indicator--f334160c-97db-4bdf-b338-1733610bde55", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b411af-5163-4754-984a-03c8cb0eceea", "sighting_of_ref": "indicator--99d6bf81-ae41-4c65-b595-a057346161b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410db8de-bcc8-4957-b79f-fbffb65508fb", "sighting_of_ref": "indicator--f53388a3-2dd0-4c00-9018-9a18bdd67edb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c319f9-2c15-4556-8725-60745dd07c3f", "sighting_of_ref": "indicator--ffc0517d-5696-4442-9a32-9af115d8190a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d1b580-d5f6-4b49-bc62-81d1ecda19c7", "sighting_of_ref": "indicator--ffc0517d-5696-4442-9a32-9af115d8190a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b40443-95ec-445e-b860-2a52fd4b6d67", "sighting_of_ref": "indicator--74420016-67f5-455f-8dc9-e7c6861fc728", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a1350e-c96a-4062-b20a-960cfeb6749a", "sighting_of_ref": "indicator--89130451-b189-466e-a121-911749475b5a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97aed0a5-2c89-48fc-9abf-6d2258ab9ba1", "sighting_of_ref": "indicator--f17f32ec-66ad-41ef-b3c7-f987fde76904", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3ee2e1-d4cd-42d2-9da5-4df05955ea65", "sighting_of_ref": "indicator--7d77bf7c-8ca2-4ff9-b822-53717e37a029", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d21662c-2232-4a20-b0e6-2312750d6abc", "sighting_of_ref": "indicator--55777f67-0672-4c98-ada3-4326e991f520", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f371ac-37fd-4244-be85-39ed4affa03e", "sighting_of_ref": "indicator--55777f67-0672-4c98-ada3-4326e991f520", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a08fdb2-b6da-47f8-97b9-7f9ec821d054", "sighting_of_ref": "indicator--55777f67-0672-4c98-ada3-4326e991f520", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58287eb9-1630-4bfb-96cb-0bbe83f12752", "sighting_of_ref": "indicator--582d583b-c125-419b-a0c5-e742c8c669b2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c87e305-a7e4-4188-bfc3-77eb5c119268", "sighting_of_ref": "indicator--2a5cdfc3-8a11-4ba0-a244-627444a0f8a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b934fc0-a884-411c-ac66-685a481f2241", "sighting_of_ref": "indicator--2a5cdfc3-8a11-4ba0-a244-627444a0f8a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5189f3d5-2ab6-450c-a5f0-29f46c2b5371", "sighting_of_ref": "indicator--2ac6e4e6-a07e-417d-b882-821391045c44", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb55476d-1f21-4db1-933e-c77dd48e2a60", "sighting_of_ref": "indicator--64723c4d-2e90-486d-bf78-569e7b08d51c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70f7ea8-9dbe-4efb-83f1-4d98f4d23f7e", "sighting_of_ref": "indicator--75923657-9dbd-4665-8de1-5072e8615390", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ac4374-0550-47db-b6c3-a557e5288394", "sighting_of_ref": "indicator--fe858cd0-3087-4859-b3f1-0b2ead82579e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ba88b7-9aac-4b32-acca-217ece081bef", "sighting_of_ref": "indicator--b835dc08-060e-477c-806a-1ac1b0f364fe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f104e3b-4cc0-4329-8d54-42bd0eac98af", "sighting_of_ref": "indicator--24b3a0de-35a2-47ff-aaa4-13d8c09f5f31", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294bfacb-9438-4da5-9961-acc972418e69", "sighting_of_ref": "indicator--416fbfbb-811e-4241-bd4a-fe2c04b4a288", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871bcffb-a1b3-45f4-8a95-107941ae0ac0", "sighting_of_ref": "indicator--993089f1-a638-4021-a1a9-9346bc80a1f9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3f5e5e-cf0a-4cb9-8d88-48cfe6eeba0d", "sighting_of_ref": "indicator--39e42ff9-f5e1-4c50-8146-33afb890de76", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccaaf3dc-ac2c-4292-8248-94da6cc7710a", "sighting_of_ref": "indicator--39e42ff9-f5e1-4c50-8146-33afb890de76", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08d8dca-eb0c-4e80-8618-dbb430ff46c8", "sighting_of_ref": "indicator--a26182dc-bd36-4bfe-b599-d3cd4a2708f6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a479da-b67d-4295-8660-aa38c0fd039c", "sighting_of_ref": "indicator--a26182dc-bd36-4bfe-b599-d3cd4a2708f6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb7318b-ae00-49ee-913f-dfc12849445e", "sighting_of_ref": "indicator--a26182dc-bd36-4bfe-b599-d3cd4a2708f6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d22995-4335-4797-a443-89bb203a3e0e", "sighting_of_ref": "indicator--d6b17d7d-ff77-48b7-88b0-69a0203fbddd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2faa1e91-f2dc-4553-8b94-261c957a3029", "sighting_of_ref": "indicator--d6b17d7d-ff77-48b7-88b0-69a0203fbddd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909db968-6aa4-4452-a759-97e312b66d43", "sighting_of_ref": "indicator--506e01fd-ddcb-4aa3-ab09-123ea693c186", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554a710c-898e-4a30-b42c-9aef36ad9ae3", "sighting_of_ref": "indicator--506e01fd-ddcb-4aa3-ab09-123ea693c186", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9f5b50-3ae8-425d-a316-07f06dc529cb", "sighting_of_ref": "indicator--2bea877a-6423-464c-98be-8b3d96c89a06", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5e20f2-1463-4bb8-b07c-f12c901f8487", "sighting_of_ref": "indicator--c91b7d03-82dd-42c7-ad2f-5f0a1eeb36b8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5c878c-3ca0-4001-926c-1bce75b1035e", "sighting_of_ref": "indicator--7099da43-2e6c-4a00-9d41-cfad3d991959", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c559449-80fa-484d-96f2-b732ec4f5a67", "sighting_of_ref": "indicator--7099da43-2e6c-4a00-9d41-cfad3d991959", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405b6471-7a77-459a-9667-b73fc472a943", "sighting_of_ref": "indicator--7099da43-2e6c-4a00-9d41-cfad3d991959", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1170a125-e0ea-4fb4-839a-ae0476daad7b", "sighting_of_ref": "indicator--37cd08e0-9277-4bd7-97f0-efc17ef47082", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd67654-7799-4198-a1ff-6e495c73b3f6", "sighting_of_ref": "indicator--37187018-af2c-4835-8e5e-f5482374e067", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29aba73-5481-401f-8f48-26236cb0e94d", "sighting_of_ref": "indicator--37187018-af2c-4835-8e5e-f5482374e067", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20430fd3-dbc6-4ccb-9bde-5167f19f0b5c", "sighting_of_ref": "indicator--c0d362d7-3611-4413-b3d1-3e6c5a7e3ff0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6205827a-e925-4213-8a30-af110edf3547", "sighting_of_ref": "indicator--c0d362d7-3611-4413-b3d1-3e6c5a7e3ff0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9474efab-3cd3-48f6-8df2-e9490feef6aa", "sighting_of_ref": "indicator--c0d362d7-3611-4413-b3d1-3e6c5a7e3ff0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a022b0c8-f8bc-4407-925e-ae19d90c3490", "sighting_of_ref": "indicator--c21c1a44-6af7-4c67-bfe4-0b8c9dc81319", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f776e8-79a9-4925-934b-e48ea5b49330", "sighting_of_ref": "indicator--412481ed-5762-4d8c-b0cf-e047ba094a52", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7a5e8d-1fd6-41b7-8269-697c33f5a352", "sighting_of_ref": "indicator--3d1531f0-95bf-4dd7-8682-ffd96953c84e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3825e9ec-c25c-471b-a699-8f7d33027d10", "sighting_of_ref": "indicator--f60bd9a2-0af7-4098-a622-dcbf2febe26b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4577bccf-f137-4691-b826-59ff9c7fb2ba", "sighting_of_ref": "indicator--cfa59ef0-5111-4e75-a647-785737c17cac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6740c7-9cb9-4f98-b662-6dbfd537e4c3", "sighting_of_ref": "indicator--0a5ae67f-6e40-4a62-a1e4-5caf181ab1a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24d8a87-b797-4ab5-8c55-08d60461f8a0", "sighting_of_ref": "indicator--defd535a-9218-4470-9cf9-b84d77f8ecf0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4554b619-877f-4d19-bd7f-299e91af6672", "sighting_of_ref": "indicator--0cdd0810-6444-4fe2-8174-04cad9ee4f71", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0083d5a-94c9-412f-989b-ec4920b783b9", "sighting_of_ref": "indicator--6889281f-ed35-4845-9b5f-26979c4289ab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e7a062-f5f7-4c4d-9c49-fb830fef227f", "sighting_of_ref": "indicator--b8c49a1d-d602-44eb-9360-71dac5090d28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20aeda36-635c-472e-9354-b83363ff6d94", "sighting_of_ref": "indicator--23f8cc61-4c49-4907-bcfb-f62dbe8c6e53", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a613b89-b23e-4048-8b6e-5d5500033aeb", "sighting_of_ref": "indicator--53334cf2-bce4-4eb7-8963-8dbf68e35bfc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0424d679-033b-488b-b9eb-91e9a5a6813d", "sighting_of_ref": "indicator--cf6ce498-0937-47fe-aab3-556883252dba", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b206f9-73a1-48d8-8122-4f0181200f00", "sighting_of_ref": "indicator--29771100-f0e0-4708-9fb5-ba7d88fb7c3d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80eff3b7-471f-4642-b82f-a4155b6082ad", "sighting_of_ref": "indicator--6ee6c42b-7381-4428-8d42-6311de187a3c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66eb5ec-ff59-44e4-af66-574407439278", "sighting_of_ref": "indicator--778ef9bc-72a0-4eb4-bbf5-0357557767e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc6af4b-c617-4ea3-ab0b-2f4e917c9169", "sighting_of_ref": "indicator--4aa52481-5fbf-49b9-b983-b05fc35530f8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997a0120-7c92-4e6c-adfe-f5472f8c7931", "sighting_of_ref": "indicator--8abc74c3-9f61-4431-a8d6-62206acfb206", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6662d7bd-9343-47a9-8048-3123c8b4d6ec", "sighting_of_ref": "indicator--17ec82bc-c8df-4eaa-853c-ba9ddc90485d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3a4ede-80b3-4b32-8149-20be5df5ced2", "sighting_of_ref": "indicator--11efdbf6-afb9-4657-aa12-04374716d78a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0047a2-4721-4f76-9f6a-385653aecfc4", "sighting_of_ref": "indicator--065dfe60-f1fe-4a8d-a297-1be7aedc15a6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0bf5a0-6ce4-498a-bccf-f5dece8abfdd", "sighting_of_ref": "indicator--065dfe60-f1fe-4a8d-a297-1be7aedc15a6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b858804c-98bc-4cdf-b70b-3405b0c0061e", "sighting_of_ref": "indicator--4280dec5-8197-4638-9629-25f5d0aabab2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c27c5b-7a51-4e77-9603-39fd8cb32791", "sighting_of_ref": "indicator--7e9ef0a4-0a08-4503-ae95-bae0a9ab806f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652cad29-3702-4626-8edb-80b79a93fe89", "sighting_of_ref": "indicator--475f5944-21b4-4319-bcd2-62172e09b1f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5008b54-cb5c-42be-9292-9b306f933cb8", "sighting_of_ref": "indicator--fb75dfe2-eb39-4123-ba70-589cbc194d4d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978c559c-0d14-4b09-95a8-e9c8c5d6cddf", "sighting_of_ref": "indicator--e594724b-b8dd-4c84-8ccf-5764c2585f65", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e4c00a-2556-40ed-9f4c-d6fd6547ec56", "sighting_of_ref": "indicator--b7eb5536-69ac-46f7-94bc-e88aee815ac6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce75b13-9884-45fa-9ba1-72e067ed9704", "sighting_of_ref": "indicator--63f95639-3a44-494d-929e-acbb7b5680f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952551da-57a7-47e1-abdd-d2bf5a6adde8", "sighting_of_ref": "indicator--c63a112c-c509-46bb-9769-33e103d2fbc6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef5549a-4ac2-4c20-b784-3a9a9705c1fe", "sighting_of_ref": "indicator--3e91b3af-1392-4e4b-bd62-9157064d6bd5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2954538b-3dc8-4ab4-9271-a48343d6f0c2", "sighting_of_ref": "indicator--8b99ab32-b2a0-4323-9c3b-7efef5794f51", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7cdb161-9292-458a-a5c6-302fcf48bc2a", "sighting_of_ref": "indicator--6ea1f8d1-df68-41d6-b095-7a7480b1b440", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94f1093-51dd-4839-ae40-3151906dd11c", "sighting_of_ref": "indicator--9679fff7-5131-41d9-a6d3-01fed363ec17", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669e56df-561f-45e0-ad4f-8f501a6adae6", "sighting_of_ref": "indicator--037c81f3-a5b5-4ea6-93df-1b42a1241252", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79946fc1-12c9-4f17-8dd5-3b561da74833", "sighting_of_ref": "indicator--993e6f61-59d7-4a60-b9c3-1bd5d04db18e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96222c07-3a2c-4029-b6a5-c249ddcb2277", "sighting_of_ref": "indicator--a0bdfc18-11bc-4e4a-a9ab-fcb1735c9f09", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed906ba4-582b-4042-9740-ea625dc4db75", "sighting_of_ref": "indicator--a0bdfc18-11bc-4e4a-a9ab-fcb1735c9f09", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad8b57b-a405-4611-9388-ea0f267609c1", "sighting_of_ref": "indicator--827bd085-ee1e-4682-a2f4-e63de33d952f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03fb174-7e9f-4302-a209-c1b0a9b0bb35", "sighting_of_ref": "indicator--827bd085-ee1e-4682-a2f4-e63de33d952f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74134d3-800b-4de7-96e9-2d02717e4b29", "sighting_of_ref": "indicator--8a9c83f5-5e1f-4dad-93c4-60a00c2a1e49", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168e1f5e-73bd-4e1f-9391-c3a9646fb368", "sighting_of_ref": "indicator--b7f8ed12-5305-46d1-bfa0-3fa5931809c1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327c5ecf-f9a5-411f-b563-67e9f66f96a1", "sighting_of_ref": "indicator--b7f8ed12-5305-46d1-bfa0-3fa5931809c1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195d9b76-991d-47a7-98c9-5aa0d151a69c", "sighting_of_ref": "indicator--bf3bfb60-3669-40bd-948b-a9c4d7726f51", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74916d10-a5e4-47dc-baf0-799287a336e0", "sighting_of_ref": "indicator--e688455f-6e03-47de-834a-cf85a038feaa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68f3e70-bbb1-4a48-8652-e73fc0d4b7f5", "sighting_of_ref": "indicator--a7526c96-4f51-478f-b9fe-6098a8770415", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae258e4-53c2-4102-8eb7-4ca56649dee2", "sighting_of_ref": "indicator--7c31291b-efb7-4e85-afbe-30d4f9c4c80c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec9a7a8-e579-4718-b1ed-123b542509b2", "sighting_of_ref": "indicator--7c31291b-efb7-4e85-afbe-30d4f9c4c80c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d1ef20-7602-4911-b1f9-b5cb5db009af", "sighting_of_ref": "indicator--a61c555f-12ad-4ccd-aa4e-9298aa1c66eb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e92e5a-0362-4020-b0a9-a23069ecf60a", "sighting_of_ref": "indicator--46540003-ead9-4bc9-8d21-df9df9912ce5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63274478-77d0-48ae-9d0e-36f8d7b31d9d", "sighting_of_ref": "indicator--5f22c0c7-c711-4e52-9434-158a3d373726", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c5ff94-84b9-4e05-bebd-17fff9ad8802", "sighting_of_ref": "indicator--0976843c-9352-4f5f-91f4-6ca8711cf5aa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30d6aec-7131-490b-acab-4bbdababfeb7", "sighting_of_ref": "indicator--62ec0c96-80b9-46d6-a4c0-3c6641d2433b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96bbd68-7e4c-4e37-950e-bf900b931261", "sighting_of_ref": "indicator--b0ff11a9-40a8-4aaa-a011-28c0bce325a8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee5109e-f88a-4519-9c76-1b95357306b4", "sighting_of_ref": "indicator--51d39011-f4dd-43ed-a14d-647702a7cf63", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34ba142-6d7e-4c98-ab9f-4c9eadb7fcb1", "sighting_of_ref": "indicator--390d283f-4437-4a68-a0f9-44f8a1eb62c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af816e5-602f-4519-9a1f-6a49ce7295a8", "sighting_of_ref": "indicator--390d283f-4437-4a68-a0f9-44f8a1eb62c6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cdb64b-f176-40b3-91c4-8495a6d651a2", "sighting_of_ref": "indicator--52d980e1-e4f8-417e-85ad-0eb5a7494fa9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e100827-9611-4e69-bd6f-9ec75b77cbc0", "sighting_of_ref": "indicator--52d980e1-e4f8-417e-85ad-0eb5a7494fa9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b594ff0d-1864-4df9-8b7e-e2d28678490d", "sighting_of_ref": "indicator--6656bb65-12e3-42c4-a2b3-7d37dbea4109", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d518e9-cbc9-44b2-9925-b9c747c064b1", "sighting_of_ref": "indicator--6656bb65-12e3-42c4-a2b3-7d37dbea4109", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c4102b-f59a-478a-aeec-36450284df85", "sighting_of_ref": "indicator--db4ab13c-75ea-49a1-99c0-98b3f6af95a9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee4e31a-2dea-46ad-9e64-bacdc36cf85e", "sighting_of_ref": "indicator--db4ab13c-75ea-49a1-99c0-98b3f6af95a9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23a9735-7e48-4437-8e04-105ce0d04337", "sighting_of_ref": "indicator--34023d05-05e8-4725-b28e-05eef1e4cb06", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ee9ca6-953f-4aeb-b2ff-11a15ba5d051", "sighting_of_ref": "indicator--34023d05-05e8-4725-b28e-05eef1e4cb06", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996237bf-f25c-483b-9f39-144fae32a653", "sighting_of_ref": "indicator--a4dd6849-5043-4306-af6f-02ec3b182e6c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884600d8-98c1-4cd5-bcf8-e1453cf887cf", "sighting_of_ref": "indicator--2d8d0e2a-ad40-446b-be40-ef52874815be", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039dd2b0-a1c0-454d-884e-db08f1e289fb", "sighting_of_ref": "indicator--2d8d0e2a-ad40-446b-be40-ef52874815be", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2d22ae-a87a-4c74-876b-f0d6d7d28456", "sighting_of_ref": "indicator--ad5d587e-4f87-4141-a7f4-d6cdaf3c04c4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63aa27f1-bd02-44b2-b3df-bda734890048", "sighting_of_ref": "indicator--ad5d587e-4f87-4141-a7f4-d6cdaf3c04c4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de49a5a-1823-48bd-9ba1-92f6086e4616", "sighting_of_ref": "indicator--de5f318d-787a-428f-a8d5-0fc9d7b8f6c6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a786653-48b4-49f5-9a14-4bca7b027d22", "sighting_of_ref": "indicator--a9893c47-d63c-4c38-bdf4-19401e4a4424", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46f48d6-4f9a-47e3-81bf-2d2aa85887fa", "sighting_of_ref": "indicator--b9dbb509-ec64-4756-8e5c-35a15556a41e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf28bc9d-5445-4184-8fc9-1b56c2759c02", "sighting_of_ref": "indicator--2638063d-7801-4aa7-8186-1b570b68cdb9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6a5ef1-ebab-4dcf-bc7f-b501bae6c900", "sighting_of_ref": "indicator--c24054b2-d597-4b96-b7b3-fd11dc2446dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550fa982-ae0f-48ed-875c-8fb51d44d138", "sighting_of_ref": "indicator--c24054b2-d597-4b96-b7b3-fd11dc2446dd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e466c10-76a7-415a-b32c-9e71393a56d3", "sighting_of_ref": "indicator--8c3f28af-4ee7-4be5-b0f4-aae280339385", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6c2e2b-30e4-4da7-b883-72a878f1a31d", "sighting_of_ref": "indicator--901ef543-1cd6-4c61-a897-35f9022b1b2c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4158e39-8f4d-4caa-8906-7fc8e6d17ae3", "sighting_of_ref": "indicator--901ef543-1cd6-4c61-a897-35f9022b1b2c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8c4337-8361-4a9d-a616-73a4ef99af6b", "sighting_of_ref": "indicator--5f21b0b9-eb41-45fd-ab78-489810e64963", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d095deab-a2ba-45b1-986a-9723ea6ae638", "sighting_of_ref": "indicator--e68d1f75-a7ac-47e2-b22d-d37ed17c250f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4061ff8-c68f-46dc-960b-836b46b38d75", "sighting_of_ref": "indicator--6425f7d5-44a4-4a51-8225-f9cecc4d6f86", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3114499c-39ec-49ef-9539-24717855cd7c", "sighting_of_ref": "indicator--d2e47aad-d072-402b-b1d6-b9310b5ab002", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b20a68-9560-489e-8d07-530618e5a2c8", "sighting_of_ref": "indicator--e7614722-9273-4016-816f-7f77dc72a429", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e17a130-6b11-4c80-b62d-b49ab389a42c", "sighting_of_ref": "indicator--e7614722-9273-4016-816f-7f77dc72a429", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41e6ddd-84fe-4420-aed9-c253e62c7ed3", "sighting_of_ref": "indicator--dccfd99d-110d-446d-98aa-0d7f2476c5b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada69cd9-58ca-41c6-ae83-1e1921c436f3", "sighting_of_ref": "indicator--fef49024-4fa2-4451-9f2a-f608f263f1c1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06e64b0-70c6-48f6-abdb-0c49d079a028", "sighting_of_ref": "indicator--2d1bbccf-2223-4fa4-bc1c-ec9b2df6c941", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b95b4e0-f3f7-4c31-8ffe-7b08a2ae0876", "sighting_of_ref": "indicator--0d083717-8ad5-40af-9412-038b952919f5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc326c7-6a29-48e4-90f8-7ed1f5bcdf81", "sighting_of_ref": "indicator--071838b8-a092-486c-98ab-d629cb5d8b89", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70116d1e-4ecf-475a-a7c6-89a64b0fe367", "sighting_of_ref": "indicator--23fbc6e3-0050-4442-b772-ac4754f83625", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4149f5-ced0-483a-a350-2c99ca876caf", "sighting_of_ref": "indicator--23fbc6e3-0050-4442-b772-ac4754f83625", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3218024-501f-44f4-bcec-d07087242249", "sighting_of_ref": "indicator--c5d4805f-98b7-4ed2-808d-c90daab56246", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2666d9c-c40c-418e-8e03-89f665dc8902", "sighting_of_ref": "indicator--c5d4805f-98b7-4ed2-808d-c90daab56246", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498b6b7d-481b-4281-86e5-6ffe6931a822", "sighting_of_ref": "indicator--dfda785b-6794-4d29-a9df-37048b7bd23f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94086138-46c2-45ce-8096-9891f9af5331", "sighting_of_ref": "indicator--4b8023c8-2550-438c-8451-96c0bc325d4b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ec4c0b-9ea3-4f64-bbde-355467575ad6", "sighting_of_ref": "indicator--4b8023c8-2550-438c-8451-96c0bc325d4b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bae896-4f22-4dc5-96f3-59676f7a4d11", "sighting_of_ref": "indicator--fcc5d938-7a57-485b-83c1-fbaccb14dd4a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d299ff70-c11b-437e-83e1-d246eb79876c", "sighting_of_ref": "indicator--fcc5d938-7a57-485b-83c1-fbaccb14dd4a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d37b315-4c4c-437c-bb57-8b9b7b372be3", "sighting_of_ref": "indicator--993cba80-171d-433c-852d-700fd52d744b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed627da3-08e7-4bcf-b1f3-04c4a6381e10", "sighting_of_ref": "indicator--993cba80-171d-433c-852d-700fd52d744b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ea056f-99a3-4a9b-babd-1268f1a43dfe", "sighting_of_ref": "indicator--d7cf2fc7-d7ee-42aa-9082-154b10c71263", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3676ec1f-e909-4d1f-92fe-497aacb424da", "sighting_of_ref": "indicator--7213d106-b287-4be4-88f0-8d2681c8d7fa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0078ab11-18f9-442a-8f49-3bb4a82039a9", "sighting_of_ref": "indicator--6f553916-be3f-4a7e-8b4e-ebffe0f9da69", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adc6384-c5ef-4568-80ea-d034247ce0b9", "sighting_of_ref": "indicator--6f553916-be3f-4a7e-8b4e-ebffe0f9da69", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e829d6-5e82-43b4-a9b6-750936d51468", "sighting_of_ref": "indicator--89b535c4-5504-4aa3-8907-516668207f0e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa9a011-df72-4998-9065-308d43114b7f", "sighting_of_ref": "indicator--89b535c4-5504-4aa3-8907-516668207f0e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddcefd8a-b4bb-4bb5-8ed0-23122c0f4c83", "sighting_of_ref": "indicator--141537f1-e051-432d-a4eb-22691056f36e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9f19b8-e28b-493a-b3be-a54f8f91a8d1", "sighting_of_ref": "indicator--141537f1-e051-432d-a4eb-22691056f36e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bf69fd-2607-4bad-86b8-0a577c5512fe", "sighting_of_ref": "indicator--5d9a0e81-f38d-4b84-8f10-e43fe810fe22", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28559f32-9988-46bc-ad1e-4a5bd04b64f4", "sighting_of_ref": "indicator--5d9a0e81-f38d-4b84-8f10-e43fe810fe22", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959ef94e-576b-4224-a057-539f5d90a20b", "sighting_of_ref": "indicator--5d9a0e81-f38d-4b84-8f10-e43fe810fe22", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2736f39f-b4e5-4bef-9bc9-876f574bfaab", "sighting_of_ref": "indicator--8cc4463f-9491-4159-ab9b-eb115fffa043", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1593ec-18ae-4457-882e-381ec35cd165", "sighting_of_ref": "indicator--8cc4463f-9491-4159-ab9b-eb115fffa043", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6b0c81-8306-4939-8cf0-124905153285", "sighting_of_ref": "indicator--5dbf9306-dceb-4d0c-865f-b3ce5cbbce5e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac98155f-ba13-49a3-871e-dd631de70bd1", "sighting_of_ref": "indicator--de5bc878-09f1-42da-bcda-4bb33a7aad76", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fb912b-2380-49bd-aa64-367fb62de4a6", "sighting_of_ref": "indicator--90de9fc3-6e1d-4cb0-a16f-0305dea7fcf4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90817435-e66a-4a43-8106-6cf72271b447", "sighting_of_ref": "indicator--90de9fc3-6e1d-4cb0-a16f-0305dea7fcf4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f9e6e5-4f45-4ef7-b4a8-f5e1cfe08388", "sighting_of_ref": "indicator--8d904719-0418-4295-b5dd-c33a9c44f6e0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4453009b-b88d-46a5-9e00-467b23343586", "sighting_of_ref": "indicator--8d904719-0418-4295-b5dd-c33a9c44f6e0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ca673d-cb3e-447e-aebd-6978b391108f", "sighting_of_ref": "indicator--2c6f3d6e-6a50-45f7-adce-603bbf385567", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd9a51d-37e1-4d6f-98e1-09dd07fbac99", "sighting_of_ref": "indicator--2c6f3d6e-6a50-45f7-adce-603bbf385567", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66213c87-2be1-4894-b1db-07a4ad6aabcd", "sighting_of_ref": "indicator--987f88be-8946-47c5-af05-62a44357941c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce55832b-45db-4e84-8b97-52ccfed062ed", "sighting_of_ref": "indicator--94fd799e-99ab-472e-adf7-41ee36bd3bde", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5742944-47c7-4ba2-9343-8be41c8ee98a", "sighting_of_ref": "indicator--b9780e3f-3c26-4967-85f0-6bb12a89f4d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024864fd-7bd3-4feb-97a1-941503241fb5", "sighting_of_ref": "indicator--99321419-48c8-4dc3-8b1c-042968d0ceab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc359c8c-13c5-4dbb-8247-fc28c874285b", "sighting_of_ref": "indicator--99321419-48c8-4dc3-8b1c-042968d0ceab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3af8287-47cb-41e5-81ca-ab0be8730c06", "sighting_of_ref": "indicator--b2b4520f-4fda-4354-b1bd-13688aff22be", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c060a4-fc41-4bec-b0d5-14c77d258471", "sighting_of_ref": "indicator--004d79c3-69e2-4b26-8d27-98ee8148dbf4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ee8d74-ffd2-4e1b-aad8-357263af8d58", "sighting_of_ref": "indicator--f9b768b2-0e08-45f3-bb9c-4ca28fa8c872", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583dab60-bef4-4df9-990d-0a83290ced78", "sighting_of_ref": "indicator--60de55b2-5a1c-4873-89ea-937146977f4b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf2b0ac-03d2-4170-baea-f4e6bf7953a6", "sighting_of_ref": "indicator--60de55b2-5a1c-4873-89ea-937146977f4b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60855c0-1bc7-4e3e-94fa-ece2d28b0bcc", "sighting_of_ref": "indicator--60de55b2-5a1c-4873-89ea-937146977f4b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513c2282-807d-4176-86e0-527f19a1cfb2", "sighting_of_ref": "indicator--f563fed1-ac00-4d7b-b79b-eb88365c7c5a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5bf238-ae40-4da1-90bc-f3fb5a71ff5d", "sighting_of_ref": "indicator--b5fd74f1-2901-4a6e-a2d4-d8b8c890ea9b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b686c196-e1e7-4a15-9d4c-000f0a38bbed", "sighting_of_ref": "indicator--b5fd74f1-2901-4a6e-a2d4-d8b8c890ea9b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00388e7e-5184-40ac-8e70-224047a071d6", "sighting_of_ref": "indicator--b640cc0c-dee4-4df2-8569-87f02d21cff9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3ff2a1-a04d-4c3e-8c1f-bb1b283d93fd", "sighting_of_ref": "indicator--5ba491c0-38ed-4c4e-a275-f4a9861d5e80", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07af6cc-baac-4500-9932-1e29e9cd0be7", "sighting_of_ref": "indicator--5ba491c0-38ed-4c4e-a275-f4a9861d5e80", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e121e77-62c3-473e-8cce-112d7e71d77d", "sighting_of_ref": "indicator--bac021b4-bc0c-4211-aafa-fb8f505881c0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58993153-5ba8-4200-9a83-63f97ae7b325", "sighting_of_ref": "indicator--bac021b4-bc0c-4211-aafa-fb8f505881c0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9d94f7-dc14-404b-9230-dbc3bb13540b", "sighting_of_ref": "indicator--c8dcd6ac-5e32-46cb-8f23-b80a75a1e5d2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dea8675-934c-4660-ac50-c86ee22ce397", "sighting_of_ref": "indicator--c8dcd6ac-5e32-46cb-8f23-b80a75a1e5d2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf96f73-31c3-4a99-b416-6d7e7732a6c4", "sighting_of_ref": "indicator--d10d8f99-90a9-4fa0-ab78-6b43af2f61ac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a1884b-610f-4fad-aaf0-efd7db64a383", "sighting_of_ref": "indicator--cfd2164f-c9e4-426e-986f-e64ba29aa33a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42a4078-df45-49c4-b1b1-159f9597f1c0", "sighting_of_ref": "indicator--e9e53660-c510-4f2a-88f5-b56a4eea4869", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22313cfb-f9ca-4ddb-92fb-e5f3434d8d16", "sighting_of_ref": "indicator--274b51a1-a0d5-43f9-b7f3-89d7a1fee2b8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84cf5863-02a4-4aa6-bfe3-04ce9676f37c", "sighting_of_ref": "indicator--fbbb8b1e-1598-40aa-b127-c44d94b86737", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c59f9c3-2b02-411d-b964-a15abc137dab", "sighting_of_ref": "indicator--ed798022-0dee-4705-8c97-607a05a1e442", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54f039f-186c-4b4d-a983-1098e2a9a57c", "sighting_of_ref": "indicator--745c4863-95b3-4a6e-9440-c8c7d5663d9a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da81bd9b-849e-4dc2-8578-20c91647c90d", "sighting_of_ref": "indicator--fca357a3-357b-4ceb-a87a-0cfbef04cf9f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb4165f-b60d-46cc-8d3a-785d7ee15d77", "sighting_of_ref": "indicator--fca357a3-357b-4ceb-a87a-0cfbef04cf9f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75575726-f2f7-4598-a1f8-ca2f0a41dd79", "sighting_of_ref": "indicator--1ce56c85-0f4a-4e44-859b-c620fdd71e82", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09e17c4-ad63-46ce-a77a-dab3d69dd7fc", "sighting_of_ref": "indicator--1b66584a-95f8-439a-b7f1-b8a776f08bbb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d47b5f5-24b2-49c1-9775-c6919b75bd2b", "sighting_of_ref": "indicator--1b66584a-95f8-439a-b7f1-b8a776f08bbb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e771ac16-5740-4d8f-8dae-891f944a0897", "sighting_of_ref": "indicator--1d630e9b-7f5a-422f-9a8a-f8a7d3caed0c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fecf80e-9209-4850-9166-cd46597a0e49", "sighting_of_ref": "indicator--ebf535a7-4312-465c-996c-687b3977a7f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989777c5-9155-4f6a-b99d-b2dbb46e094d", "sighting_of_ref": "indicator--154a3396-7ed0-435c-a901-80772be3ca9c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a82d395-4abf-4224-8c55-494331024202", "sighting_of_ref": "indicator--154a3396-7ed0-435c-a901-80772be3ca9c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c18ccd-c2f1-4fa7-8738-127956c7e66c", "sighting_of_ref": "indicator--154a3396-7ed0-435c-a901-80772be3ca9c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e597ae6-4749-412f-92cf-af986187a9f8", "sighting_of_ref": "indicator--6e977ed6-669a-4b26-b936-305ceeb19156", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e91954-3bdd-4f35-a62a-9c1579104945", "sighting_of_ref": "indicator--6e977ed6-669a-4b26-b936-305ceeb19156", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd18d9f-c7ce-4fc3-a641-cf36af1075d7", "sighting_of_ref": "indicator--d81f64fe-a197-4d92-a34c-b3aba78b3f08", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e94ca08-853f-4760-99f7-b983a09bafaa", "sighting_of_ref": "indicator--d81f64fe-a197-4d92-a34c-b3aba78b3f08", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a1c2d5-9806-4d95-a205-90fc4fbfec3c", "sighting_of_ref": "indicator--d023ff45-728a-43ac-8246-72c526b25ff7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329aa982-614b-4068-b9bc-f0cba8f358e5", "sighting_of_ref": "indicator--dd46d203-b741-4714-8c4a-6c6afdc64ce0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8ecca7-9ed3-4ac4-addb-c28e9bc07762", "sighting_of_ref": "indicator--dd46d203-b741-4714-8c4a-6c6afdc64ce0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edeb169-9709-47bb-be23-1efd127dad2a", "sighting_of_ref": "indicator--396da883-c4c6-4299-b0a7-8f6ea7bc24aa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50388c3f-ba4b-434b-847a-a7c778516300", "sighting_of_ref": "indicator--7723f0f7-0e02-4176-9df3-2a7e7e41cdd3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9523835a-b479-40fb-8b06-2cfa0f11b83b", "sighting_of_ref": "indicator--1e4a704d-c780-4747-95d5-cfe84a079ab8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf81424-6a04-4493-a4f7-589c696465c7", "sighting_of_ref": "indicator--08ecf25a-d916-42e9-9a98-ef4f9c6576e1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445ae9e2-d10c-4bd5-9862-0e721f296ae2", "sighting_of_ref": "indicator--e44c7f8b-28cf-4b91-ac74-9da14bbc28c2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58213241-4204-4e23-a058-1eb695cae8a3", "sighting_of_ref": "indicator--4d36394d-7cd0-493c-bc0e-6d4fa1fb0eec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba02cb85-1e89-4e34-a13d-f65e2694530c", "sighting_of_ref": "indicator--4d36394d-7cd0-493c-bc0e-6d4fa1fb0eec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ccf836-9e76-49b4-9cd8-adf3badd6e9d", "sighting_of_ref": "indicator--6336f07d-e91f-460f-bce1-5ffc1d3d0cc0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9398b16b-5fe8-48cd-a673-d32f556fe1d6", "sighting_of_ref": "indicator--8eb50aa2-9d54-4b63-86ac-4dc213049ba8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58702a30-48d2-4857-881a-db726ba9371a", "sighting_of_ref": "indicator--0f404071-afcd-462d-a294-94e65e62b8a3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc96e54-3406-44be-9f41-93097f3da434", "sighting_of_ref": "indicator--0f404071-afcd-462d-a294-94e65e62b8a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecefee3f-5428-4196-941d-6ede96ab85df", "sighting_of_ref": "indicator--6b8b4038-0e8b-45f1-b4e9-15b3269830a8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5020d23-db3c-4390-995e-50ae7b468c5e", "sighting_of_ref": "indicator--6f07433d-f35a-47bf-9680-1466393fc493", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c37e02-bfd3-4781-9671-0b251a4fd51c", "sighting_of_ref": "indicator--6f07433d-f35a-47bf-9680-1466393fc493", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82053447-3c79-4ef3-85be-dc8626c8e523", "sighting_of_ref": "indicator--0ff4e13d-0272-4508-b767-561697c82812", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86270f34-3ac2-4918-b368-b8223385fc70", "sighting_of_ref": "indicator--5d402098-b648-48f6-a115-eaab5a1e9215", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3e4486-9f7c-4f09-940e-923ea190d549", "sighting_of_ref": "indicator--f0cd00b3-d748-4c16-8ddf-9929c50d3db9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729b867d-ea74-4211-b1a8-42f2e59e1eb3", "sighting_of_ref": "indicator--2efaa09b-8a7d-4337-b020-6af727c0602c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc61e975-e5d9-4950-aca7-28bce9740ac8", "sighting_of_ref": "indicator--f2975353-b8ca-46f2-a251-03a3951cef2b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5c4a2a-af64-4277-b77f-f72d82b7416d", "sighting_of_ref": "indicator--f2975353-b8ca-46f2-a251-03a3951cef2b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1100e65-bfb2-46b3-a14a-a13a55ca5b38", "sighting_of_ref": "indicator--1f421c82-1e3d-4381-b2b4-e4aa0708024f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea6cef3-44e4-4d86-a039-9ba916f80df1", "sighting_of_ref": "indicator--5b2a7cd2-cec6-43b4-886f-a059c972daa1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce85c083-15ae-483c-a4d7-78bf299a8ed9", "sighting_of_ref": "indicator--fbcc0772-fc8a-49f6-b490-507b217cf8b6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23189b33-8d7e-4f3f-a888-4abf0f28af2b", "sighting_of_ref": "indicator--f3751e49-913a-4c5c-b5bb-5a5ac42c2f54", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e136891c-3b00-43ea-85f8-972a59906089", "sighting_of_ref": "indicator--f3751e49-913a-4c5c-b5bb-5a5ac42c2f54", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f9d564-90d2-4dbf-90c1-e2daf8c928cf", "sighting_of_ref": "indicator--60582ee1-e13e-4777-8e2b-fe3e9a087329", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ed274c-fd26-4239-a98f-69947a09644d", "sighting_of_ref": "indicator--10eaa980-bb18-4fcf-81f9-422496ee2109", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6464d0-66bd-46bb-a722-7249ee464bac", "sighting_of_ref": "indicator--10eaa980-bb18-4fcf-81f9-422496ee2109", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1957f63f-a3ae-4be6-802f-dbccdf43afcd", "sighting_of_ref": "indicator--66a1ad7e-027a-4263-9e2b-296858efc598", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b836db49-dda2-43d1-8871-359387c93392", "sighting_of_ref": "indicator--9d8e8088-2b48-47f1-b609-4131bbcb84ab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089a431b-21da-4fe6-a166-647499a5498b", "sighting_of_ref": "indicator--01731242-ea7d-4f2d-80c6-175512082ecb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b0e687-f3fc-4b62-a6d3-301e14db7e35", "sighting_of_ref": "indicator--01731242-ea7d-4f2d-80c6-175512082ecb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0d1c0f-4dd4-4c6c-87dd-295ad2dfced6", "sighting_of_ref": "indicator--01d98d1d-3dc2-442f-8fc2-98a10f671b63", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c26b5ba-9d89-4a40-973d-ad25273f2019", "sighting_of_ref": "indicator--78d66ab9-2fb6-42e3-b812-4ef88bf2e201", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6cad4b4-5841-4132-9d83-ba9df0eaf71c", "sighting_of_ref": "indicator--2eac6a5b-8941-4ddd-bbff-bdec220b9b55", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b94ff9-8647-46d0-b747-5c177289b78e", "sighting_of_ref": "indicator--bc56ffb0-5401-42ec-aa21-6a2b4b3a339c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8e8c30-774c-4815-a5ae-533bea5fbaae", "sighting_of_ref": "indicator--7e150715-f2ad-44a0-b9d5-190bfa230419", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b9ecd0-57e1-471e-bc00-26815f167331", "sighting_of_ref": "indicator--2ca50431-5e71-48f5-95a0-080602406855", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30948c52-36d3-4081-8aba-0c939c4d66d1", "sighting_of_ref": "indicator--0995912d-3e94-4cdb-9b07-3741b367a0b5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469f0954-18c2-4745-8421-3dd753aff334", "sighting_of_ref": "indicator--e374b9a5-bb48-4a59-86f6-a56785064c67", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c225feed-9907-48f2-b255-d064608a1a3c", "sighting_of_ref": "indicator--110c305a-3504-4d3b-a0cf-510cd516300a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cfcff9-8e14-4e14-b905-64cbb7ef6e80", "sighting_of_ref": "indicator--110c305a-3504-4d3b-a0cf-510cd516300a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9cff19-74d2-468e-b7df-ca4e0c688a11", "sighting_of_ref": "indicator--2be2dc19-bb60-4c52-add2-9965eeb74672", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ff96cb-6833-47f1-a7ba-7dac1c560d01", "sighting_of_ref": "indicator--74a0b090-fcba-430d-bf40-1cb194f28a08", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf8e232-c9d6-4cf5-ba72-892f2333b0b6", "sighting_of_ref": "indicator--74a0b090-fcba-430d-bf40-1cb194f28a08", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eac5ee9-7b6a-4ef6-847e-c8708945eaab", "sighting_of_ref": "indicator--6c7a4f73-fbce-4e7b-aa03-3cfbf7b8abad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc46ac5-bccd-41d0-bfaf-e85fd7db7727", "sighting_of_ref": "indicator--60d410fa-884e-473c-9fa1-7e2eca815548", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137b49bc-a0ad-42fa-b9da-7af1e0596650", "sighting_of_ref": "indicator--4a9cdf33-b85e-4bde-8b06-417ffa047c8b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71de27a-3009-4f2e-bda1-35c37fbebfab", "sighting_of_ref": "indicator--4a9cdf33-b85e-4bde-8b06-417ffa047c8b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3ee347-cc72-4998-b5c1-6b098b7092a2", "sighting_of_ref": "indicator--1a67b72a-83bc-4e1f-84c1-e1637690157b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99aee1d8-3d99-480c-927c-234af4c088af", "sighting_of_ref": "indicator--1a67b72a-83bc-4e1f-84c1-e1637690157b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446bbbb5-e042-40f4-b22f-bfdb222d3239", "sighting_of_ref": "indicator--ae893404-9d92-4ea9-9823-a745cb858c1f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbf83da-075a-42a6-860f-fc0bcb9c2ef1", "sighting_of_ref": "indicator--ae893404-9d92-4ea9-9823-a745cb858c1f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c64761-703e-4830-96f5-f58d2a6ddf2f", "sighting_of_ref": "indicator--c83e7771-d59a-4d54-9966-78ec3fbd50fe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64dd0128-fb27-40d5-af54-c4a607c3302c", "sighting_of_ref": "indicator--4f908ee8-9463-4f71-b8c9-085d3d1a29bf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf5adc3-9920-44cd-80bc-31052ee04451", "sighting_of_ref": "indicator--1853bddc-5dcf-41f9-b1c8-218ffd8adc62", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f85a7b-90cd-4405-b835-451ffed3e85e", "sighting_of_ref": "indicator--482ffd9c-d7d9-4add-bc24-f9054bb7abe0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46231c2c-9f35-482e-b03b-bce0a79709f8", "sighting_of_ref": "indicator--53f96264-d689-4714-9012-c6c8825e51f6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe6ffa0-0ceb-47c5-ac3f-4b010a784531", "sighting_of_ref": "indicator--52a889ce-a619-402c-9e8c-44903d4f5e56", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe8904b-e263-48cc-80e8-02ba42314478", "sighting_of_ref": "indicator--aec32070-4dec-4c17-bfee-47627305cbc3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e229cc46-15a3-4ef4-a858-2747358ebb6a", "sighting_of_ref": "indicator--aec32070-4dec-4c17-bfee-47627305cbc3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9a341f-d215-40ad-99bb-4ee5c48a9653", "sighting_of_ref": "indicator--82b6e376-ecb4-4d36-a95d-753478d54a53", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c562d86b-8792-4ab5-90d2-c51a4f2b7f1c", "sighting_of_ref": "indicator--41c2a886-4253-46b7-b538-a77e554df4b6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7221ce-9c6d-4e0e-b772-7130c3ad9584", "sighting_of_ref": "indicator--41c2a886-4253-46b7-b538-a77e554df4b6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89d9867-1dd3-4e57-98ab-ffce8592062d", "sighting_of_ref": "indicator--0d676e5b-cd03-4db1-81c3-e083eb4818ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7d905a-e777-49b1-9932-3294ada14e25", "sighting_of_ref": "indicator--b0050d0c-c22e-45b4-81c5-151837862e99", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634fdbc4-9748-4c56-b173-9c2c17cd67b6", "sighting_of_ref": "indicator--d2dd8113-34e8-442b-bb8f-2712abd0780f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2953ab60-9380-424f-bae1-bc3ee5546793", "sighting_of_ref": "indicator--d2dd8113-34e8-442b-bb8f-2712abd0780f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5318c5-f287-4370-83eb-0667c57b57d2", "sighting_of_ref": "indicator--f9329463-20ff-448e-9aed-ae439694eeae", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d3cec7-d349-403c-abfa-dc7220152dfe", "sighting_of_ref": "indicator--9816579b-b045-4296-ae65-608d13ec8043", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bbdbdd-aad1-4576-9f2b-f58237317ccd", "sighting_of_ref": "indicator--9816579b-b045-4296-ae65-608d13ec8043", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e94feb1-9e21-41ad-bfbe-6d4169e6aa7a", "sighting_of_ref": "indicator--a27806b0-6b53-4f3d-9055-8cc3c8b138a1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7862ab2-84d6-48a8-8004-c32c1c9d8563", "sighting_of_ref": "indicator--a27806b0-6b53-4f3d-9055-8cc3c8b138a1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4d2774-37e7-4602-8746-2fbadcf55658", "sighting_of_ref": "indicator--813e7f5a-c385-4321-9eba-d773e55f9052", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc21d64-7c89-486c-9404-f9f8730d1a53", "sighting_of_ref": "indicator--a0ec3dae-a966-4d1c-a286-bdb528e59d9a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e10435c-c7f4-4076-8eda-8484ae4d3bf6", "sighting_of_ref": "indicator--b2af4e82-2e43-4b70-8da2-10cfc216ce99", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8889fb3-8151-4d96-8177-52f5ee19cbbc", "sighting_of_ref": "indicator--76efc140-470c-4a88-9ba7-ebbaacba98c9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26995424-e894-4775-90a1-5f7bdf7ab6be", "sighting_of_ref": "indicator--243377d0-bbcf-4617-82d8-9091435b4b42", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0396ea81-144f-4189-8b63-42b45b72d371", "sighting_of_ref": "indicator--2c485a71-0b16-4f89-a65c-33a8764f24c5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17717081-56be-497a-b351-a891d8b1e43e", "sighting_of_ref": "indicator--84a33bd6-d8eb-4e56-8b0f-371f3fb085e5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310c0188-c3db-4609-8120-97dba14aa2a6", "sighting_of_ref": "indicator--c8777e6d-e121-4edc-b631-b62f64563934", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc7397e-f437-4035-89a9-f9869378d487", "sighting_of_ref": "indicator--3c90649a-8c73-47ca-9299-964813d07d5b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf7d16c-f9ce-4b40-af9e-d7b1712985d5", "sighting_of_ref": "indicator--6b3596a5-7472-409b-8969-d75a7eadcf99", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f40f5e6-4dff-4820-82f3-182dad52aafe", "sighting_of_ref": "indicator--1f4c040d-dd00-4b26-8a5d-8b80b72d1afc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16f45b0-87ef-4101-94f9-53785047973e", "sighting_of_ref": "indicator--59c87a27-6118-45ea-8121-928c6c8c3d98", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9044f54a-a4c6-4a9c-9d61-94a04795c18b", "sighting_of_ref": "indicator--526f1ecb-cf01-4a67-abd5-195d8434880c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e9dbb0-93dd-4792-9f8e-8cba817f9b69", "sighting_of_ref": "indicator--526f1ecb-cf01-4a67-abd5-195d8434880c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34dc8b73-d852-4170-a9e3-53a60b66a11b", "sighting_of_ref": "indicator--99589f42-862b-48f6-86d0-5c6cd4ad902b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db82540a-49de-428d-a5e2-586681cc2372", "sighting_of_ref": "indicator--7c0ef036-e53c-4eac-b404-b8c919686a4a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72d9137-bac2-4666-9de8-3d5e27539ebb", "sighting_of_ref": "indicator--907baa4c-0879-47ca-9f1f-ea13d488187f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574735a1-e6ae-4f4f-a385-2d5c175bf014", "sighting_of_ref": "indicator--907baa4c-0879-47ca-9f1f-ea13d488187f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411d0d0d-58f3-4f95-9410-2c33471f6f2e", "sighting_of_ref": "indicator--0893363c-4f73-41ee-a0f6-a8f0a4477e2e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeaf28b9-fddc-42a6-afdc-78b436cc62c6", "sighting_of_ref": "indicator--0893363c-4f73-41ee-a0f6-a8f0a4477e2e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a80fa7-cd49-419d-9ab7-7fb07458b001", "sighting_of_ref": "indicator--72ff9529-034c-4da2-8b8f-5f2cd282752d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e05090f-019b-426e-a990-27993990af57", "sighting_of_ref": "indicator--c795c3cc-edb4-4f58-9580-055633f4f84e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe74e0ab-66c7-4002-b365-5dd54af883b1", "sighting_of_ref": "indicator--c795c3cc-edb4-4f58-9580-055633f4f84e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f198a37-74ea-4835-ba6b-e717de08962c", "sighting_of_ref": "indicator--c795c3cc-edb4-4f58-9580-055633f4f84e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7c2eee-056f-40c3-a57f-df802a65624a", "sighting_of_ref": "indicator--a42fd648-1870-40d8-ad4d-6bafb1ac3eac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e0bc5b-7c03-44bd-89ae-7f2e41a5ff44", "sighting_of_ref": "indicator--11f2b53a-fe51-4315-a89e-3540efb7f03c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9fb659a-f4f8-44f4-9912-6ef340e4f904", "sighting_of_ref": "indicator--621c7da9-a2f8-4bb2-8bbc-d64a2fb60763", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd81ea5-f10b-40e6-b4b9-60aa3dcdae84", "sighting_of_ref": "indicator--78be3e6d-49f3-48b2-a467-e4bdcff7afcf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f0947f-1ccd-4525-b88c-119d1afd41e4", "sighting_of_ref": "indicator--d8b5f27a-04cb-42bb-bcba-83d52292666c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df878b7-5dc0-4ca4-9eb9-aefe3a3fea80", "sighting_of_ref": "indicator--bdaac1a2-dac8-4f25-9ea5-17370abe0db3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5db6b2-9fdd-4fb2-bc96-70fb93893f63", "sighting_of_ref": "indicator--383bcf01-8bea-4185-8a86-410766410dda", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9512394d-46db-4807-82bd-3d20a78a504f", "sighting_of_ref": "indicator--c21b2ea0-0ffb-4e8e-bf04-28c7ff23cefd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23ff727-b746-4bb5-8055-25027ef44fbc", "sighting_of_ref": "indicator--701dd3c7-c68a-42b3-9467-bcb383312cc8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c18b13-4a88-4d2e-a497-c0a78029c13b", "sighting_of_ref": "indicator--24478d95-2356-42f7-8cbc-244b04bd2886", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074ccaaa-31cf-430b-9ab3-3e916f84e459", "sighting_of_ref": "indicator--24478d95-2356-42f7-8cbc-244b04bd2886", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb17afff-0768-4b38-861a-9b3d01a62f98", "sighting_of_ref": "indicator--b257bb28-97c3-4da1-9cc4-58b7ea8da951", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd69cf6-32be-4ce5-a944-754c14b4fc52", "sighting_of_ref": "indicator--9f7314db-a963-478c-bab6-a651a95af34e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f1f45b-1b09-47b6-ade6-b9349c2b0bec", "sighting_of_ref": "indicator--925235d0-8b0a-4f4b-aa7f-3bf8785f3301", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34d37c3-a0eb-4771-b607-7db201e5b916", "sighting_of_ref": "indicator--f8d24304-d5d3-4230-8951-88f7cc4f88b9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e204a0d-4878-475c-88d9-8b1cc1b0f77a", "sighting_of_ref": "indicator--e458a500-a513-4200-bdb0-0792975484be", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70477eea-58d4-4802-8443-13bb412f4d4b", "sighting_of_ref": "indicator--01d49810-f299-41d2-a68f-59f87ffc7fce", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ebdfa7-00d3-4e73-be5f-e1a98a0f2121", "sighting_of_ref": "indicator--bfe49d9a-350e-4177-becc-4058aaa8ba1b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0544ff-811e-449a-8d01-9ca271204288", "sighting_of_ref": "indicator--3dc95683-3e28-49d1-883c-ff922bc0f17d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe38f3b1-218f-4d38-8e36-213bd02f5adf", "sighting_of_ref": "indicator--df3d25ff-909e-4297-b2a4-7f6a802ec068", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bf095d-f9e4-44d9-82d7-4b7c25e973b2", "sighting_of_ref": "indicator--d0468765-cc24-4551-95a1-92aedbc73a9e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb46d462-c5cf-444a-846c-4798cbd2f7f3", "sighting_of_ref": "indicator--f264d15b-dbdb-4cbb-a6f4-9c987d49f7ea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ea6a2e-3f4d-4fd0-b2a1-a4aa153113d3", "sighting_of_ref": "indicator--30af9805-6276-4c5b-b144-d7dfe81158c3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df4af2e-70fb-4263-ae83-96c26b55c96d", "sighting_of_ref": "indicator--30af9805-6276-4c5b-b144-d7dfe81158c3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1caaa30-bfe0-4aff-8e00-6e4fc6fa0d4c", "sighting_of_ref": "indicator--2beed446-b3b4-4710-81ae-ab114611ec08", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48a1f33-b803-4096-bd87-a19906275dc6", "sighting_of_ref": "indicator--bad10a35-0044-4c5f-9b3b-7b5fedab9901", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6c1da5-1e9d-4002-93e0-b88c9ec3fa77", "sighting_of_ref": "indicator--8708a073-36b1-4325-89f2-9cd11c98517e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e08eaa-13d9-487a-a1d8-46b3e68e4e36", "sighting_of_ref": "indicator--8708a073-36b1-4325-89f2-9cd11c98517e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2744502c-189c-41f6-8f01-804faef184c0", "sighting_of_ref": "indicator--e5bf2db9-3695-45e9-90b4-3a91d4360395", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e618cff-cbc1-45a0-808c-ab58b8df76e3", "sighting_of_ref": "indicator--e5bf2db9-3695-45e9-90b4-3a91d4360395", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f477254-c4f1-4ecd-9015-3cfa5bff7043", "sighting_of_ref": "indicator--ca3de838-bbec-4127-b9a8-d3198f86b5a2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34accc9-105b-4ebc-9749-0b48adc0477c", "sighting_of_ref": "indicator--f8331fc2-850d-4cd3-ac50-b14108881e7e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe4e8e0-53eb-42eb-b70e-5b01db696d85", "sighting_of_ref": "indicator--c453d121-ba60-4be1-bd6f-db92d52e6d84", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5c6224-6296-43ae-bfc6-efd639349fa7", "sighting_of_ref": "indicator--2dc71d74-3a69-4fc8-a25f-2bb404db273d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55911f1-28b4-4d0b-850e-9278fb529bd9", "sighting_of_ref": "indicator--41af6d61-a9f0-415e-8d3d-0cde1db4a5bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3430976-c816-4cf2-96bd-7830a2d1c87b", "sighting_of_ref": "indicator--d10dc437-fb6b-4c81-a51f-af0d0197efd0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3bc793-3de8-4fba-8871-712a86a36797", "sighting_of_ref": "indicator--def74684-e6c9-4c0c-b031-b8780bcb5dc0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5d29e5-0b2d-4936-a924-9d5cf27f93b3", "sighting_of_ref": "indicator--871d116f-49ce-4d7e-bd10-e3c2d220fe0e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e6c225-2a39-4494-95a2-c4ca8c031ba4", "sighting_of_ref": "indicator--03d73741-a739-47d8-af8a-a7e9d7c9d3de", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdeff767-546e-4e09-8da9-5ddcacaf3973", "sighting_of_ref": "indicator--4ae3eadc-f033-4125-94be-461a6f356f81", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a101cb7-86fb-4b44-b2e1-b498966d84f4", "sighting_of_ref": "indicator--ef1b4fd0-40df-4c20-8e75-679b37748138", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cc6fd6-7a3b-49ab-b0d5-0ab245a25073", "sighting_of_ref": "indicator--ef1b4fd0-40df-4c20-8e75-679b37748138", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992318f7-1451-4bf5-a0b1-b12bd3eed097", "sighting_of_ref": "indicator--ef1b4fd0-40df-4c20-8e75-679b37748138", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea982a8-61c5-4120-8cd1-62ba05e7bf71", "sighting_of_ref": "indicator--106ce2d2-793c-4a1d-a9a6-aadd2a5d9f80", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f185ed21-660a-46ac-b278-dd083994ceef", "sighting_of_ref": "indicator--46cbef57-7ff0-4a8c-8710-7fd20e4c0918", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba2a7e4-9c8f-4f81-b81c-e24cde1f83e7", "sighting_of_ref": "indicator--e117467a-139e-4372-8450-a145d2792573", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d515dda1-7c68-4857-a22d-99cbc2ae4e77", "sighting_of_ref": "indicator--c0749a13-110d-4389-a17a-788d282c10db", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cc7686-4ad6-4383-a4bb-b7db7b2cd587", "sighting_of_ref": "indicator--96affa0c-b7ff-45bb-b906-08c9bf524e1c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10aa14b7-bdc0-4e07-b3f1-b86535b7281c", "sighting_of_ref": "indicator--b82851a6-8047-4a44-aff4-88a63aed376a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cb3d2c-eb06-4000-a61d-1024dac8a6c3", "sighting_of_ref": "indicator--d55902a8-13c8-497c-a43f-b0cc35a06009", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c97262-ad23-4507-91a2-01365061954b", "sighting_of_ref": "indicator--3654eb2c-eb89-49ce-a770-e3ee22a4256b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2453dcd-0aff-4052-a802-83e55be7824f", "sighting_of_ref": "indicator--577b29d8-897b-42d2-afd7-1ee53a45bee9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279ae442-44cf-4839-a5e3-702a801a8ad0", "sighting_of_ref": "indicator--dfa5e412-89b0-41c6-8994-91f8600186fb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1953da93-cccd-43c6-b06c-95c612a31dd4", "sighting_of_ref": "indicator--b08aad5e-1f42-4f4c-98df-a55fa6b742da", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9fc060-163d-48d3-ac43-0002758c278e", "sighting_of_ref": "indicator--f97f9bd4-ba8f-4e57-a664-16ade537344c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a88443-8a85-48b7-99ef-f53070d533ff", "sighting_of_ref": "indicator--4e275a86-427d-448c-9897-6a60883447f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bd008a-7931-44f9-8b40-4c7357a87c48", "sighting_of_ref": "indicator--c4c82f78-d811-4684-bc58-636bd3967730", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4050a692-6dd7-41d4-83a6-d9cdaf3f7b97", "sighting_of_ref": "indicator--9832af61-1613-42c3-8054-108ebf1743ec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f61f149-4081-4ed4-8cd1-6e539c44c249", "sighting_of_ref": "indicator--910c5902-44a7-4253-b582-b596fa01f669", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868fa532-28bd-409c-b7e5-0079be68bae4", "sighting_of_ref": "indicator--910c5902-44a7-4253-b582-b596fa01f669", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592013dd-9a58-4825-abef-7560c04b0b2e", "sighting_of_ref": "indicator--a3fe0ca3-dfe4-45b1-bdf4-5a6b6de17e9c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946dd92a-1ab3-459f-9a62-d7bc99324ca6", "sighting_of_ref": "indicator--02a15451-af21-4b82-aa35-f5ccbaf0f8dd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa85bb0-2651-4661-8d99-be41a9dfe0ee", "sighting_of_ref": "indicator--79cfdd83-a8a3-44db-90cf-fa8151db0de8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503e4afd-b7be-407e-bfe1-d25ddda095f7", "sighting_of_ref": "indicator--ea991bad-3919-43a1-8980-3ffd74420e2a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d4d5be-3b84-4d64-a517-c1fbce00c0bd", "sighting_of_ref": "indicator--7b8d063a-1a5b-4ca9-a003-24e5282f0085", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050fdf62-ff30-45fe-bd0d-72b48da6dcda", "sighting_of_ref": "indicator--c81ec93b-3065-4412-891c-3c84f895f3dc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847c35a0-7bdd-48fb-9872-d2f9876ff817", "sighting_of_ref": "indicator--66f4d1a9-e633-4b23-95b7-97c6fb7df45e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fd6c26-2107-4add-826f-175c6d08e124", "sighting_of_ref": "indicator--873a7605-faa2-4b95-bf24-ff1e06442d9b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6c38d4-c57f-4a27-9719-8cd84847cfc4", "sighting_of_ref": "indicator--a2ca6274-11dd-4781-93c6-468e30e85396", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793ea983-afcb-4f6f-9ea1-8f0c50142ad4", "sighting_of_ref": "indicator--a2ca6274-11dd-4781-93c6-468e30e85396", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb6a248-3432-4671-9ffb-142978ddef31", "sighting_of_ref": "indicator--800f56d8-b60c-4f98-a1b3-9b6a489587fd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047494e1-9438-4062-b24a-e97ed9a910d8", "sighting_of_ref": "indicator--800f56d8-b60c-4f98-a1b3-9b6a489587fd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b329ee-963b-41f3-84b9-c1f6144b4cc4", "sighting_of_ref": "indicator--063148fa-0621-4719-a979-f644ee62c960", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139be453-7fe2-4936-a88c-49e2404388e9", "sighting_of_ref": "indicator--20e016a3-d116-4d0d-baff-f8e618cfdc9c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b909505-74d6-477d-9964-0e191748c28e", "sighting_of_ref": "indicator--8e9bc578-2618-43da-8264-47e60c3eebe5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f692d7b8-3680-49a1-a78d-2063e1d1e7a6", "sighting_of_ref": "indicator--07786aed-cc71-4ad5-a837-7a9307a9ae51", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c9d69d-92ab-432e-a4e3-9c5e41c949bf", "sighting_of_ref": "indicator--1d174467-ddf4-4b85-a6d4-b2a5f50dd7ae", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c03f973-c108-41dc-a7e3-d8b40cdddaab", "sighting_of_ref": "indicator--1d174467-ddf4-4b85-a6d4-b2a5f50dd7ae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086fae69-5921-4e57-ad5f-c85908721425", "sighting_of_ref": "indicator--15a023d2-4f06-4359-8986-36fd3cf4a912", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d457e8da-2653-4da1-bf29-760bdf9b85c2", "sighting_of_ref": "indicator--15a023d2-4f06-4359-8986-36fd3cf4a912", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e1ab0d-c2d7-463b-9eea-da91f86c557b", "sighting_of_ref": "indicator--f0a5f67a-107e-4851-95f8-4bb7c815019f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199f7390-5f71-4faa-b38a-1945fc7c182a", "sighting_of_ref": "indicator--43c23750-d094-4d6b-aa31-f54b88473fdc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9685e8-d72f-4840-919d-ecf14c6bb1c2", "sighting_of_ref": "indicator--f1fbf793-8646-402b-851f-c1383475a33f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c0c1d8-5df4-4b12-8766-9fa33d496b8f", "sighting_of_ref": "indicator--aab89c18-4105-4cdd-881b-e7cad892c452", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd05b58e-857f-4de9-9f6a-4901aec14a69", "sighting_of_ref": "indicator--b3697f9d-71ad-4bd9-8711-ab0e5f7d8be3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bedcf0-67b3-46f4-8199-d8f9b96375da", "sighting_of_ref": "indicator--db9a9046-68b5-4eee-b786-cf2f2da1d64e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2fb56cb-050c-45e7-a8a9-09e4a690059f", "sighting_of_ref": "indicator--db9a9046-68b5-4eee-b786-cf2f2da1d64e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7054e2e1-d9b5-4018-b479-53449658bda8", "sighting_of_ref": "indicator--129fd37d-8491-43a6-8c24-fcf1db61f651", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ceab07-7256-4978-a6aa-d9e0ee00ba40", "sighting_of_ref": "indicator--1d42dd45-c9b3-46d9-abbe-b2bebe2f18b5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da63877-d239-4651-8c47-5dc5824484ee", "sighting_of_ref": "indicator--25a72c64-863b-4637-8e9a-0d39520c975d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1179f04-e0dd-45a6-8006-9f674de06a39", "sighting_of_ref": "indicator--b83ecf55-5e9a-43c5-a8e9-65126178e1b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f97b44-a502-46bc-ab4a-5e14e4842ff7", "sighting_of_ref": "indicator--cc899704-b559-4886-81bd-d722ad8ffbf1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da289a18-cd67-4445-a849-a9f70c536d3e", "sighting_of_ref": "indicator--cc899704-b559-4886-81bd-d722ad8ffbf1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e013606-455c-4e4a-8e6f-4e3b07f59778", "sighting_of_ref": "indicator--4d1b9f21-8968-4e42-ad94-2830e82f9030", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f4efd2-463c-4cc6-af03-81c9dc0cce1c", "sighting_of_ref": "indicator--1924c3c4-c3fc-45ab-b3d8-9f88c140953c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da58c27e-13be-4b49-9cf0-4463d0b99f49", "sighting_of_ref": "indicator--1924c3c4-c3fc-45ab-b3d8-9f88c140953c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e01749a-42b1-478c-a491-ffa43df5ca83", "sighting_of_ref": "indicator--bb685999-8613-4bd0-8a3c-ba66bf23906f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ceea31-18cd-4a2f-a3d5-d118e1fcecbd", "sighting_of_ref": "indicator--f190a8a3-e62f-43b1-be71-0bb42467d39c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cef1277-0bee-4b47-a70b-e63a89a4bfae", "sighting_of_ref": "indicator--40c53015-0e5e-46b6-82fb-c7b2f9858b54", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad82af8e-d5c9-4628-9ab0-08262db13e8d", "sighting_of_ref": "indicator--16e54ec9-25bc-4e77-b3d7-2528d076857d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4eb158f-77eb-4037-8160-b33642cbc7af", "sighting_of_ref": "indicator--8671fe9f-0e42-4ba2-924c-6c875f1f8afd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc5d021-7af1-41c1-bc36-98f7be4d05b6", "sighting_of_ref": "indicator--4d637c7b-05b0-4c4f-abfb-e4dca82e0f75", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3a1599-6252-4d50-8872-81b72737be32", "sighting_of_ref": "indicator--e5630781-c678-4a9e-80ef-db885333893b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779ea23e-0de6-437d-bcfa-ee41e4888764", "sighting_of_ref": "indicator--2d07de41-4dae-4adc-aa67-57fa428299b4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e99d784-8903-461f-8d71-105b4bed5910", "sighting_of_ref": "indicator--83822863-92ff-4567-bdb0-32478dae3159", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac9b050-7217-4d6d-ae81-7f1bc17b83c6", "sighting_of_ref": "indicator--83822863-92ff-4567-bdb0-32478dae3159", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080b4716-bc8d-4952-951a-50162c3b4065", "sighting_of_ref": "indicator--626cd491-15b4-4731-835d-4e26bd003e0e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c29cbfe-5454-4cba-8497-88d8080edc76", "sighting_of_ref": "indicator--7ebdf7e9-5d83-49a0-93b5-ea09462f56d7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc4b2c1-dad9-4415-b92a-28dc4a4f59e3", "sighting_of_ref": "indicator--a694d36c-09b5-4b8b-a1f4-0c8802999ba0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fa4d5f-c744-4c38-bf78-afeabc49596b", "sighting_of_ref": "indicator--a694d36c-09b5-4b8b-a1f4-0c8802999ba0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ccb6b4-45fc-4896-aea4-44ed453b514f", "sighting_of_ref": "indicator--3aa4c811-d45c-4160-8450-68d8913383a6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e4deb8-b6e7-457b-aa53-c8d1ce9e1cae", "sighting_of_ref": "indicator--13b1091a-d04f-43a9-a3d1-fe05412f9527", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785edf7a-3f9c-45dc-9e1c-6ee604a793cb", "sighting_of_ref": "indicator--a6829b38-f336-4037-965a-15537144a12f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4dd353-939d-473d-b14f-c9d80d36b63e", "sighting_of_ref": "indicator--5decdc5e-0a36-4f3e-8203-e80414d8b3ed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688abac0-20fc-46ba-9b67-59c462a2abef", "sighting_of_ref": "indicator--2d855e4f-8b37-456a-ac77-f0d184223e51", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a19fb94-27de-4962-9ce4-6718af645d8f", "sighting_of_ref": "indicator--97f46f18-c7ed-436b-8915-e6bfa0204e0b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c5d527-25dc-498c-8685-35754333899d", "sighting_of_ref": "indicator--4c865d41-8050-4eac-9c9c-f8651949cdc1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c4788a-ea27-4a99-a324-eea200039a31", "sighting_of_ref": "indicator--7dc87a0e-ecb6-4a00-bab3-e212eb3df4b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516523fc-2ac1-4f76-9c80-4292d4a99d40", "sighting_of_ref": "indicator--7dc87a0e-ecb6-4a00-bab3-e212eb3df4b0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ae92ca-8a86-4987-a08d-2936672956fa", "sighting_of_ref": "indicator--c6be0afe-f201-4838-a5a8-001a03755c75", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0c4d05-e7ce-4566-8666-3c60fcecc7eb", "sighting_of_ref": "indicator--583d49bb-cdbd-45b5-a0e2-d2ae3b2af60d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b3f0e3-a856-450f-a60f-947e82a0ee2f", "sighting_of_ref": "indicator--b0c134d9-703f-4c87-ab9f-78eb8ad429c2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba75dc15-b48d-4bcc-98f9-75c250c42901", "sighting_of_ref": "indicator--927a99d6-563a-41ef-869a-5149a41295d9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8f057c-bf99-4888-94af-caa4d0302d67", "sighting_of_ref": "indicator--3d7e918c-93de-42b8-9a79-45e390dcf593", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7dc66b-a4fb-4191-a9de-decb7b128beb", "sighting_of_ref": "indicator--3d7e918c-93de-42b8-9a79-45e390dcf593", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee18ee43-066a-4f43-96e8-f51bd7517cf9", "sighting_of_ref": "indicator--20ce970c-9790-45f8-8a85-31dbc6d994d7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b787c287-e63e-405f-bd06-39674db0f4ca", "sighting_of_ref": "indicator--20ce970c-9790-45f8-8a85-31dbc6d994d7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f490f47-0adf-458f-82d7-be1a4a65c3f6", "sighting_of_ref": "indicator--20ce970c-9790-45f8-8a85-31dbc6d994d7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7349b3d9-db62-4f70-b942-ca2c4a6c8498", "sighting_of_ref": "indicator--3cad3301-b9ea-4472-8388-b6b241bc8f13", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2b7a90-1910-4347-aea6-775bfee78f54", "sighting_of_ref": "indicator--3cad3301-b9ea-4472-8388-b6b241bc8f13", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60913cf5-0520-41a2-ab0a-cef6e0e76a99", "sighting_of_ref": "indicator--e88b2279-e455-49c1-9a74-5108e86caabd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68384ab-dcf4-4100-a288-241d50366fda", "sighting_of_ref": "indicator--2137f0c5-84cd-4223-9c95-28fca8333ab5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0570a5-cf0c-40a2-b3d6-82ce70a64803", "sighting_of_ref": "indicator--2137f0c5-84cd-4223-9c95-28fca8333ab5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e31b729-0e5a-48c6-95c3-f9a92a7867b7", "sighting_of_ref": "indicator--2137f0c5-84cd-4223-9c95-28fca8333ab5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598c97a9-0657-4f91-9d6e-cd048bd92582", "sighting_of_ref": "indicator--8b792a83-0aee-451f-b73b-153bccfd6143", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a38136e-b6d3-4359-ba66-2309e3b5dc9d", "sighting_of_ref": "indicator--d0f53da0-0b3d-416e-a9ec-5252676ac71a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d91716a-dedf-4717-9392-27b12feae2c7", "sighting_of_ref": "indicator--bfbc53a9-450a-4d94-8acc-fdf38df08a66", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4704780c-c6ef-4bee-b863-c0fca96091ec", "sighting_of_ref": "indicator--bfbc53a9-450a-4d94-8acc-fdf38df08a66", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be29b86-ee00-4ee7-afbc-6a025152f87f", "sighting_of_ref": "indicator--a46f1add-f73c-487b-bc9c-fe258b02c36d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faed69d9-9afc-41f1-81e1-8bb8fee7cc09", "sighting_of_ref": "indicator--bed09250-73f3-41e6-bf63-e0c6eb32d83f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c81e73-90e4-4907-a8f6-9774c592538c", "sighting_of_ref": "indicator--bed09250-73f3-41e6-bf63-e0c6eb32d83f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5801c6-2dec-4a0e-974a-f3f18e285c27", "sighting_of_ref": "indicator--8f49b886-d4da-414b-ba51-167415ca3cdb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc34d74-08b4-448f-b39f-6574e1af62de", "sighting_of_ref": "indicator--a8ba0ad5-ca07-4df3-b561-c12b95b7fc8b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c39ec2a-af58-4e6a-b7e0-749291512e0b", "sighting_of_ref": "indicator--aa829a71-7a44-45f2-a26a-c9dc27c13305", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34ef92f-6d14-453d-9122-6be5d2ae7cc6", "sighting_of_ref": "indicator--b07831ee-659f-4192-9df9-685185f30718", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477c7bef-ab7b-49b8-af05-b2be986d6065", "sighting_of_ref": "indicator--58a6753c-3813-4671-a89c-36b6979fab98", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e55f0ce-01ff-4696-8722-e9fcc5ccb6b2", "sighting_of_ref": "indicator--7f6da400-1e1a-4c48-8486-a2737851e360", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44a89a8-743c-4755-9b91-2ab3345fad93", "sighting_of_ref": "indicator--0f6b4899-cdda-48cb-a50c-8ea78bdb169d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d56f119-a7b0-4287-b42d-bd2ba7bdd273", "sighting_of_ref": "indicator--96440f8e-2017-4c47-a52d-e2c38acf58d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f85fa6-fc53-45ab-9f3c-3f7dde923bfd", "sighting_of_ref": "indicator--8ac4f865-4ba3-4b7f-8567-fe371332aaee", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68847719-7b35-4888-ac44-fc8476895039", "sighting_of_ref": "indicator--7a91c306-d361-4726-a3d0-8d8a1bb3b17b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec085a9-816d-4d6b-954c-8ec6f87e014e", "sighting_of_ref": "indicator--6c7010fe-4eb7-4881-97da-253a797fcf32", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a444da-ec70-447f-8398-5c39db203e8b", "sighting_of_ref": "indicator--c155893e-93ff-429a-a875-b00962a5f4a6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9ac435-528a-4341-a663-6789aad4464e", "sighting_of_ref": "indicator--60f5e884-dfce-4081-b7b1-d316e29a4c58", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8ff330-baa0-4f52-927e-2e69af610920", "sighting_of_ref": "indicator--13349f76-568d-4815-9fa3-892a424e4528", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7729c2-7d54-4ebe-9bca-d05f2f6307b4", "sighting_of_ref": "indicator--a2a186c0-4b6d-4389-8f7b-d0e9bd79ecd3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ca675f-6c86-4d74-a835-fc4578cec213", "sighting_of_ref": "indicator--3031a8c2-7858-45a7-b29a-2a734fa97622", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21741c5f-7f8e-4cc3-9c50-a0106edde19d", "sighting_of_ref": "indicator--94468e1a-4899-40a3-beba-13bdddef63a8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b109f1-2fef-4665-8490-b28c3b434013", "sighting_of_ref": "indicator--403ffe9b-793c-4b29-8879-ded9e8b50934", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56c343e-2878-4f16-b54f-09bab51adb5b", "sighting_of_ref": "indicator--403ffe9b-793c-4b29-8879-ded9e8b50934", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d0eb64-ed11-41f7-bc5a-c84e7b9e77ae", "sighting_of_ref": "indicator--bc007c30-8746-41c6-8f44-07ff96453795", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a36b8da-5545-46e6-896a-1c71e97d66aa", "sighting_of_ref": "indicator--3cd1b1dc-7f17-44f2-ba8e-1796dbae80b8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53a5258-7066-4a89-a8e2-73988be1f372", "sighting_of_ref": "indicator--3cd1b1dc-7f17-44f2-ba8e-1796dbae80b8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47cf46a-59df-4ec0-93f6-ea50634b4a26", "sighting_of_ref": "indicator--3cd1b1dc-7f17-44f2-ba8e-1796dbae80b8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656ae6c9-818b-4c17-9bd9-23acce1f4c9f", "sighting_of_ref": "indicator--9ea395c7-a6bc-457e-9023-b9d27ed6bef5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cfc08b-ec0c-4c7f-9a39-19392cc42eb6", "sighting_of_ref": "indicator--32e07bb9-4fc6-4fa7-8d5f-ab4f9c44541e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bac1d47-0da8-4953-b2bb-b407d8694d78", "sighting_of_ref": "indicator--c12b71f8-dc0c-4439-8def-8fb8aa0cf455", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacc939f-1d25-45fc-ad04-cda98694ddd9", "sighting_of_ref": "indicator--b0bf1954-7841-4e70-8b09-5fb55813e89c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35622431-c90b-4b40-ba41-80891a189552", "sighting_of_ref": "indicator--6c519e3d-247a-4f1b-869b-6de6789726a8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2fdefe-f09a-469e-a4d0-5f55991868b8", "sighting_of_ref": "indicator--92c38978-6294-4f77-9eec-4b693cbba408", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c3c9c6-499f-46cd-8ade-a71d51580bee", "sighting_of_ref": "indicator--92c38978-6294-4f77-9eec-4b693cbba408", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85329be-0893-4b99-a7dc-b7059c11d753", "sighting_of_ref": "indicator--92c38978-6294-4f77-9eec-4b693cbba408", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32293af7-0c5b-4f9b-8fc8-f5817e6b0667", "sighting_of_ref": "indicator--ba393428-c93d-4e2f-b24c-f8968f979baf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e4f5fb-ebb1-47dd-87ff-131e15c053ed", "sighting_of_ref": "indicator--5c7ef12f-7f84-4638-8c90-3a96a5af2c1f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad737bdd-6933-44bd-a89c-364564dfaf28", "sighting_of_ref": "indicator--5617d937-23b7-4ef6-98c7-ba86f512b636", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5dd60a-7b95-4898-ac23-151bf1e5713b", "sighting_of_ref": "indicator--e955314c-4e6c-453e-9a22-fa189e6daa88", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7508a1-5d3f-47ba-a8ed-59db48ebb9a5", "sighting_of_ref": "indicator--c261252d-e444-4a8f-b8e6-e08e0c588f32", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a87af9-6fb4-402b-83ef-cab06d449175", "sighting_of_ref": "indicator--c261252d-e444-4a8f-b8e6-e08e0c588f32", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cd5ab6-e296-45d0-9165-d15677174742", "sighting_of_ref": "indicator--c3139d61-aebe-4988-a2b1-5d8d524b2fdf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b40cea-5530-400e-88e7-5911e53a49cb", "sighting_of_ref": "indicator--17d71701-6616-470b-995e-a1240657b30e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305f9a36-a753-4d8b-968e-b9aa7f9f06f4", "sighting_of_ref": "indicator--f95765a4-bf42-4fad-aa33-c1a4b1c7ad4f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b96bd9-185f-4ad1-ab9e-8653240bef5a", "sighting_of_ref": "indicator--f95765a4-bf42-4fad-aa33-c1a4b1c7ad4f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3fe228-7a33-4522-8e3f-bfce77181640", "sighting_of_ref": "indicator--11112f53-6187-4d59-9574-7a399a3cdde7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa82251-a941-4c68-8b2d-c03e57cf94ce", "sighting_of_ref": "indicator--11112f53-6187-4d59-9574-7a399a3cdde7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adf2cbf-002d-414f-a2c5-c29ce2ba056b", "sighting_of_ref": "indicator--dca99265-8e48-4b1f-8fb3-2caf6fd94cae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1492e2a-126a-427e-8c7e-bcb7d22ca5b5", "sighting_of_ref": "indicator--c4073b9d-a916-4f5d-bb89-3d4ed1e7c75b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38e8b4c-30a2-4e2d-adfc-f20c75170852", "sighting_of_ref": "indicator--c4073b9d-a916-4f5d-bb89-3d4ed1e7c75b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6312042-1bae-475d-9c48-cfdc07e459ef", "sighting_of_ref": "indicator--8f6b8d10-85e0-4970-b1cd-23f9d55517f8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8adc17-c31b-4630-b3e9-36b788c8e062", "sighting_of_ref": "indicator--547ce716-97bf-45ed-b8a0-4556a43bfd92", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34ce4c6-9bae-4e75-b9aa-2a44c3f3d9b5", "sighting_of_ref": "indicator--3b044904-53a9-40be-981e-ae4f9a5a7c0b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066d63e3-cfe2-4fb9-9e80-348b2eccb9fc", "sighting_of_ref": "indicator--9440e868-d6fc-4c69-9282-925559850abc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0093f93-0c00-4ffe-9707-3391300dd5f7", "sighting_of_ref": "indicator--9440e868-d6fc-4c69-9282-925559850abc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dae8be-4fd5-40c8-9586-4afe78ebc164", "sighting_of_ref": "indicator--bf1db65a-66e9-4d43-b8d1-703900fe7f79", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81ad1be-5383-4ed0-8b46-28ffd819f014", "sighting_of_ref": "indicator--8daaa3a0-4e34-45f3-a19e-0515a08a8729", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d323848-4033-43e8-a84e-d1f4bb5807e5", "sighting_of_ref": "indicator--7481b8d8-213a-4127-a01a-8edced3d6757", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f420e3f4-ea84-456a-bd3b-00d6216ca398", "sighting_of_ref": "indicator--c9b4d5e6-6f8a-42ed-82a6-1be1653b9388", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdece32e-c20d-4070-915c-d04df7cb3e70", "sighting_of_ref": "indicator--88169c00-078c-41e7-8735-4316f50d2dc5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7533a35-e446-4df9-9fe3-b982b664f7f7", "sighting_of_ref": "indicator--88169c00-078c-41e7-8735-4316f50d2dc5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a585b7f3-02c5-4d95-b3d4-6999c59ce4f0", "sighting_of_ref": "indicator--53fbc980-f9d4-4e11-8d8c-bad4d6b04887", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7071ca-c61f-4eae-8fda-50b73f549ce0", "sighting_of_ref": "indicator--53fbc980-f9d4-4e11-8d8c-bad4d6b04887", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e508b9b3-47a4-49f3-afad-4ae3b9841602", "sighting_of_ref": "indicator--bd364fd1-6049-46e7-af63-b5eb4b6ad478", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6d3a3f-205f-42df-bee9-cedfa23c8b76", "sighting_of_ref": "indicator--0e0e8ec0-fa24-42c2-a157-fb8ddab80566", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e263bb-0411-45b1-9530-6db1e95f8207", "sighting_of_ref": "indicator--0e0e8ec0-fa24-42c2-a157-fb8ddab80566", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d93bcbd-ade4-4b50-931e-7675e13a3b96", "sighting_of_ref": "indicator--68be3ec9-5363-48d9-b407-92d06ce76c4e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30be436f-7730-4e57-a08b-fb99965b1a99", "sighting_of_ref": "indicator--68be3ec9-5363-48d9-b407-92d06ce76c4e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50dc8f44-cf58-4995-be05-1c1be2dab6cb", "sighting_of_ref": "indicator--662cd7bd-a440-460c-ba63-557fb75aa5f1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e1cfb1-0fee-4917-9f9c-ec071510b5e9", "sighting_of_ref": "indicator--662cd7bd-a440-460c-ba63-557fb75aa5f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbc7e92-fe69-4240-9551-3a00b24aa321", "sighting_of_ref": "indicator--88c22300-6089-42b4-85fb-ca74274017bc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1fcf72-0359-4edf-8097-21c8e68bd52d", "sighting_of_ref": "indicator--88c22300-6089-42b4-85fb-ca74274017bc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd87a7b-2078-404f-9c77-5d32921998d0", "sighting_of_ref": "indicator--6c6ee4b3-4151-4f28-b1c2-9ca62618ac42", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871cd2aa-a5ba-44bd-a1a4-3bb9c1de4d3e", "sighting_of_ref": "indicator--1a1241b6-26ca-4cdd-ae30-47f400be494f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4f953d-f6d7-4535-92dc-0ce5f7671519", "sighting_of_ref": "indicator--82eaaa89-49b4-494a-893c-ecd566ebfb41", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2999c0f5-2083-46da-b0ec-435f32280589", "sighting_of_ref": "indicator--82eaaa89-49b4-494a-893c-ecd566ebfb41", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c49d48c-215d-4ffd-95f0-966f06b5b6a6", "sighting_of_ref": "indicator--fa832333-e326-4c00-bb51-d0a1f0b08756", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b5785e-8417-4b56-b81c-0e7c3d0abe5d", "sighting_of_ref": "indicator--fa832333-e326-4c00-bb51-d0a1f0b08756", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f73dad-0275-4833-82da-0b528ee1b66c", "sighting_of_ref": "indicator--aef6e5cd-ffb6-4de5-a369-baf7689cd24f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f605e9f-f0b4-4aa0-baaf-30a0cba8677d", "sighting_of_ref": "indicator--1fdecbd3-ee26-4c2f-adcd-84baa1e38a3a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85a5a8e-90bb-4943-a0d1-7e72ba28e438", "sighting_of_ref": "indicator--1fdecbd3-ee26-4c2f-adcd-84baa1e38a3a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c13d3a-a76b-45c2-af37-07dc83442183", "sighting_of_ref": "indicator--ec78a1be-579a-468a-a672-7692e415c37b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d34998-4fc4-4d74-be28-84fd8aa01d9a", "sighting_of_ref": "indicator--53ee6b9f-e07d-48e3-bc8e-81ad8f6c0285", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d8db57-91ad-42b9-a6a3-7770da28292b", "sighting_of_ref": "indicator--53ee6b9f-e07d-48e3-bc8e-81ad8f6c0285", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002d87fd-bd7d-4295-9852-e8f0c9f5d657", "sighting_of_ref": "indicator--5aa826e7-8804-47e0-bcd3-5b63fbf7243f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7ffe92-e458-49bd-980f-93f18d891a75", "sighting_of_ref": "indicator--5aa826e7-8804-47e0-bcd3-5b63fbf7243f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f79ae8c-f673-4f9f-8d65-81a15e4babb7", "sighting_of_ref": "indicator--47041caf-41e4-40a7-b825-973b111564a1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351ae067-c5e6-4eb6-8bb3-2c9665bcc561", "sighting_of_ref": "indicator--47041caf-41e4-40a7-b825-973b111564a1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1eb3fc-88ab-45d1-ac48-a9deb13693f1", "sighting_of_ref": "indicator--481ddbd0-5605-4272-a820-82ffccbc4ba7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f23b5e1-5c87-4be3-81c8-826530cd9cfe", "sighting_of_ref": "indicator--d1772616-b67c-44ba-b3e0-c346a658327b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2792c745-626b-4b9c-92ac-778285c41ed9", "sighting_of_ref": "indicator--d1772616-b67c-44ba-b3e0-c346a658327b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e74628f-a8fe-4ab3-9862-dcf9745bd743", "sighting_of_ref": "indicator--d1772616-b67c-44ba-b3e0-c346a658327b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7282d119-0806-4df7-af47-d03e033e8b50", "sighting_of_ref": "indicator--3457d827-2579-49e2-aae6-d50e50fd3ded", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f6735f-353d-40f6-afd2-908c20951635", "sighting_of_ref": "indicator--3457d827-2579-49e2-aae6-d50e50fd3ded", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b20c377-6b08-424b-bd78-fcc8736424a1", "sighting_of_ref": "indicator--e1788779-3e51-4c13-9bdb-bc2ba6e2295b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04813ca-cd4f-4613-b264-6f5b7db61b23", "sighting_of_ref": "indicator--b774ef60-b8de-4cee-b9a8-729448a987de", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ec4c8c-32df-4868-a3d0-e1ae39170650", "sighting_of_ref": "indicator--b774ef60-b8de-4cee-b9a8-729448a987de", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48dbf305-376c-4179-ac87-7da0879ed72a", "sighting_of_ref": "indicator--46511059-0406-45e3-8719-3e794e7acbbf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458ef672-7e9f-45bc-8858-6f9269827fe4", "sighting_of_ref": "indicator--97117bd7-1f75-426f-9b3f-606024f46aa0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19785d1e-7ac6-4939-83dd-0370dcd38d22", "sighting_of_ref": "indicator--2e4d7f67-58a4-48a7-9db4-8e9dda71411c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619a9513-9b78-4939-89cc-aca9469cf623", "sighting_of_ref": "indicator--809ca075-7935-41e8-ad5a-4dadad20048c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1a3397-7f43-47b0-9368-62c51ae86bef", "sighting_of_ref": "indicator--b2033679-73a8-4e7c-9baf-2bfd5dc2bff0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6823a39f-2067-4ef3-b350-187580947931", "sighting_of_ref": "indicator--68517656-684c-419a-b667-bb6bbaf1e6bf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64503f6f-099d-4ae3-8445-cfeba07fb011", "sighting_of_ref": "indicator--772c645d-d6eb-4783-8950-2b45d2045144", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1865fb2d-51ce-40f6-9b38-97d924ab6b72", "sighting_of_ref": "indicator--772c645d-d6eb-4783-8950-2b45d2045144", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f28641-28c9-4a5b-a568-c421c7053f9f", "sighting_of_ref": "indicator--630a9b14-30f3-4cdf-9c34-34089639fdda", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03712ed3-21c2-4943-9003-d1da2ec9dfb9", "sighting_of_ref": "indicator--55df2a8b-24e3-4545-9d6f-7c93afde47aa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f26efe5-1128-4190-87ab-cf598b7c6435", "sighting_of_ref": "indicator--55df2a8b-24e3-4545-9d6f-7c93afde47aa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d8663e-919c-4872-aa0f-1db49a4e2898", "sighting_of_ref": "indicator--d9c093d4-acd8-4477-87ef-e27bb0877876", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449886b2-1bcb-48d5-85b6-25385209770e", "sighting_of_ref": "indicator--691166b2-347d-49df-920b-65db868bfb72", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f2a6cd-fc5b-4180-b660-7eb6038342b7", "sighting_of_ref": "indicator--4e6583a0-37f7-4c14-b2ed-d365ae5362e0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edfec4c-8f3a-4671-a027-e1153be5c946", "sighting_of_ref": "indicator--4e6583a0-37f7-4c14-b2ed-d365ae5362e0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053a5791-1cbc-4255-ba9c-cce27667043b", "sighting_of_ref": "indicator--4e6583a0-37f7-4c14-b2ed-d365ae5362e0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba7ce33-c237-475e-9588-a79a3b56c1c3", "sighting_of_ref": "indicator--96038477-b9d0-4751-a8b5-8f1132f50e75", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd6cda8-dcaf-446c-ac50-e0234933e1e9", "sighting_of_ref": "indicator--a08683d2-2407-4fed-816d-1068b7c24d29", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59df20c9-4f84-4c6a-9ff6-a8bb067bf44b", "sighting_of_ref": "indicator--9f9fd4c6-ef2a-4cb4-a457-994b06e8f148", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cb2d73-f3de-4891-870a-5a0f207d1c7d", "sighting_of_ref": "indicator--9f9fd4c6-ef2a-4cb4-a457-994b06e8f148", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b4efe2-4817-4451-8924-368bb0ec2524", "sighting_of_ref": "indicator--0da4d10d-719b-4712-b4fa-9c19dd3151ad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a7fcc7-ab8e-4053-b21b-d9a81e1186e7", "sighting_of_ref": "indicator--0da4d10d-719b-4712-b4fa-9c19dd3151ad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd2a8b3-4544-4ee1-bc2f-eb5c2d296750", "sighting_of_ref": "indicator--0da4d10d-719b-4712-b4fa-9c19dd3151ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9de3017-34c3-4ff7-a8cd-0cfa5bfeb41d", "sighting_of_ref": "indicator--7d9460f2-22fd-4fa5-836f-203b1fdf9ac1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914a6798-2826-43f9-b896-0267ba13ddf1", "sighting_of_ref": "indicator--7d9460f2-22fd-4fa5-836f-203b1fdf9ac1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8009dcad-a7a6-4350-9b9d-7fc3ee1818ae", "sighting_of_ref": "indicator--763a9102-44e9-4b08-bf3c-6aa7f4ff0233", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffa4bb9-2142-4280-a277-9eafe90510b9", "sighting_of_ref": "indicator--763a9102-44e9-4b08-bf3c-6aa7f4ff0233", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9b7531-841d-4221-b471-d76b39d023b2", "sighting_of_ref": "indicator--294353a8-1b76-49f5-9785-33a34d150e4e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be3821e-51dd-445a-a3eb-1bd284f29a85", "sighting_of_ref": "indicator--d6538817-f312-4f7c-a04f-53f37be8df42", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e467af7e-f81f-405f-afdd-da1a7f1ae60f", "sighting_of_ref": "indicator--c04552fd-b622-405d-9dfc-26851d83c8a4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb8ff36-c62a-4628-bfa8-8c448d9a31e5", "sighting_of_ref": "indicator--c04552fd-b622-405d-9dfc-26851d83c8a4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39922d7-b4a1-44ea-a2aa-93e96c33afb4", "sighting_of_ref": "indicator--c2795d12-a8e0-435e-bbb1-3ef6bfcfaee0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fd19b0-3710-4d02-803a-4de32746098c", "sighting_of_ref": "indicator--2813a9fe-e3e3-49f5-9ad4-eba778495282", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfa07c9-d1ac-4010-9607-c4650905c41e", "sighting_of_ref": "indicator--b878d7b5-a125-47c4-9d79-3f94d19ced87", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c72c380-1bd9-44cc-80e4-406f0283cc09", "sighting_of_ref": "indicator--aaca6825-6e1b-4232-ba4a-e0196b71f284", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fe8287-ed47-4101-89ea-53c89368dd11", "sighting_of_ref": "indicator--aaca6825-6e1b-4232-ba4a-e0196b71f284", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f1fda1-353f-4ac9-91d1-4d2af8b4e4b1", "sighting_of_ref": "indicator--c2175320-8161-4792-b206-a3b0ed4cd174", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9990d2-1176-45c9-895b-c8a7740fce65", "sighting_of_ref": "indicator--1ad69849-af56-4a97-af76-cf6aa1a77049", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ee3abf-1fb2-4673-844e-51bee071d384", "sighting_of_ref": "indicator--68ece851-01e8-4229-9cd8-822789600201", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919885f6-bfeb-4e92-a0a7-b7d3b938e586", "sighting_of_ref": "indicator--68ece851-01e8-4229-9cd8-822789600201", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0d95de-28b9-4c10-95d0-7450d8f8c558", "sighting_of_ref": "indicator--b9d641e9-465c-4968-843e-542c9d67e381", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57529c57-1e47-49ff-a37b-e1291cb79be6", "sighting_of_ref": "indicator--0ebcbd89-e560-4edf-938e-1789739aeda0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b63c9d-e8ce-4383-bcb8-ba65b3815f8a", "sighting_of_ref": "indicator--0ebcbd89-e560-4edf-938e-1789739aeda0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b02f21-1887-42cc-90fd-146c0e64f69c", "sighting_of_ref": "indicator--32b30272-5f9d-4d63-af53-2874cce0c98f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72516adc-40c9-4410-b30c-85a9674c0f94", "sighting_of_ref": "indicator--4c8bbd64-a12a-4675-a312-d05d16ef8712", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6109a9e5-c65d-4c74-a548-da3216a8bac3", "sighting_of_ref": "indicator--af7ac6dc-ec35-4823-964c-8295e3e66521", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c920eec4-9ab4-4f7c-a720-19061e780bb1", "sighting_of_ref": "indicator--7f792f25-c1be-41d2-8bd9-6cf95244025a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a0cc07-dcf5-4d94-acdd-173e50b3260a", "sighting_of_ref": "indicator--7f792f25-c1be-41d2-8bd9-6cf95244025a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9033ba-b3fc-4c3b-97c7-36e54d816002", "sighting_of_ref": "indicator--5ccdd23a-74eb-4953-8339-0dbe85bebb82", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713f2671-5887-4a59-b825-9f75d309e7e3", "sighting_of_ref": "indicator--2278af39-73a7-4ef5-8ac9-b1754c5367f0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6440866e-16fe-4047-9675-dd0e61fb0e16", "sighting_of_ref": "indicator--2278af39-73a7-4ef5-8ac9-b1754c5367f0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492555e7-6f59-42eb-9fda-5e8d7a1b8881", "sighting_of_ref": "indicator--d1733d4f-0c3a-4df3-8890-db625f1e486a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc22335d-9c48-4077-a002-ece9088f7b6f", "sighting_of_ref": "indicator--33979633-a956-4b32-9f07-75ced996990b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd4a60d-dda9-44d7-b734-247c8bb4bc73", "sighting_of_ref": "indicator--99e359d6-927d-4fdc-9406-d0166a4a4435", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55060db-c360-4db0-92e6-6870412f0c5a", "sighting_of_ref": "indicator--99e359d6-927d-4fdc-9406-d0166a4a4435", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7ddf5e-6dd3-4353-94bd-af1b5c043dda", "sighting_of_ref": "indicator--3d5ea905-54e6-4dbb-a2d3-e5e3a7d9595e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfc6fdf-6bd4-4ae5-893b-e91fcba8289f", "sighting_of_ref": "indicator--37df1bd8-66e1-4147-982b-074972913783", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc637dc-ea2d-4e53-8a51-b067f9cdfbdb", "sighting_of_ref": "indicator--0564b044-6c62-45da-b085-e7e05abf5377", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aecdf00-dd7d-41fa-9ed3-fed86c34f784", "sighting_of_ref": "indicator--19862f31-8d1c-4638-b471-272344cfa58f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb81ac0-719e-4c71-875e-176ecb29ad10", "sighting_of_ref": "indicator--dfb42dde-e52d-498f-aa7f-470b8a7b5d47", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9dc407-ff9d-456d-a8de-744698d8447b", "sighting_of_ref": "indicator--ebffedb1-ba4a-44a2-912a-8900bc2b4306", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac922a05-a805-4f37-88ae-754af8356c0a", "sighting_of_ref": "indicator--ec9a78d2-8dad-497d-bc72-8f0ab70baae3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d8a74d-3a62-40fd-a958-7952f2aea5e3", "sighting_of_ref": "indicator--ec9a78d2-8dad-497d-bc72-8f0ab70baae3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63f7fc1-7e89-4a5c-b3b4-337aff1d264b", "sighting_of_ref": "indicator--41281172-7455-4cd0-8fbd-27921cc5c7f9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e967f12-4df6-4adc-a5c5-efd2b1777ba0", "sighting_of_ref": "indicator--41281172-7455-4cd0-8fbd-27921cc5c7f9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4da35f-c913-4e8b-9f92-77dd01f8ed3e", "sighting_of_ref": "indicator--41281172-7455-4cd0-8fbd-27921cc5c7f9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0557145d-3ba4-4627-bb5f-1765cbb32fbf", "sighting_of_ref": "indicator--c2245669-6a88-4f5f-88e7-9f4499aa0233", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29772f9-922a-4be6-9028-4687aeb420b2", "sighting_of_ref": "indicator--df53b393-52f9-4fea-90df-ac6b3e341db4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbbbaac-b002-4da6-b4b9-d72d085549f0", "sighting_of_ref": "indicator--d1535ed6-4b3c-4808-a645-192c214c1cc1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd355a6b-d0be-4145-a212-f474272928f1", "sighting_of_ref": "indicator--d8c2b740-1164-45ee-8618-db68c6a2da99", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e500c65-3e6c-46e6-b9cc-f5a2a816adbf", "sighting_of_ref": "indicator--b04d4937-1de4-4cd3-b0fa-0bd1d52f63c2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83bdd419-b455-4111-9ef8-d254f639b8f6", "sighting_of_ref": "indicator--60adba8f-90ac-47c9-8d3f-d43706c48d6b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffca44d9-9c5a-4da8-9272-3e7d417f5ad2", "sighting_of_ref": "indicator--523c5b92-1493-4b42-ab71-81c28f1611c5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571e93b5-332b-405d-bb6f-88703b25853f", "sighting_of_ref": "indicator--26087c0e-ed3d-4fed-8ba0-1773532d1b77", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572a3ec0-ace5-4486-aa55-840ccc5204d0", "sighting_of_ref": "indicator--26087c0e-ed3d-4fed-8ba0-1773532d1b77", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd28b185-31ec-4861-87f6-a72ce2156d41", "sighting_of_ref": "indicator--c4f66419-58c4-446d-b08d-9b63a184425f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d5e5df-3ddb-4166-9e7f-5b403efc7d65", "sighting_of_ref": "indicator--86eadfaa-096b-4aa3-8022-9903bb215b9f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe320cf-aa19-47cd-a831-d2affa656a45", "sighting_of_ref": "indicator--039706a2-7b6b-473b-af2e-d31ff90f1a24", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e408abb-88fc-4fd9-b479-611f507c4383", "sighting_of_ref": "indicator--d7f33bd7-f375-4f69-8825-f3c900fb67f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb8318d-9d79-4a16-9f74-e4f22546c431", "sighting_of_ref": "indicator--d7f33bd7-f375-4f69-8825-f3c900fb67f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c72072-42b8-4856-b66a-10f1ca1a39d8", "sighting_of_ref": "indicator--5ef9d099-a56a-44c7-83b9-4cc04ca4fea1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6363427e-7238-458f-a994-9106e11aae66", "sighting_of_ref": "indicator--5ef9d099-a56a-44c7-83b9-4cc04ca4fea1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97102de-3645-4cb7-b3aa-537b90f67ee0", "sighting_of_ref": "indicator--ae11aebc-1d40-4776-9670-5e5d345959e0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfd1d05-e41c-41c5-9e02-71cddaccbadc", "sighting_of_ref": "indicator--ae11aebc-1d40-4776-9670-5e5d345959e0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab3de1b-ce46-445c-8e76-b8b2148a70a7", "sighting_of_ref": "indicator--cd646b7a-371c-4ac3-8211-59e431aa59cf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fd4d51-c7b0-4db9-af21-f13f741cc5d9", "sighting_of_ref": "indicator--1ff0fec8-0024-45ba-bd35-be7cc74ee7a9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea76dca-49be-4f41-a3c2-150a36e98c77", "sighting_of_ref": "indicator--e2773c55-d7fc-4d30-bb9a-46f2e0b5033c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5375375-1df0-47ae-8abe-2c5bcbc64267", "sighting_of_ref": "indicator--d066c055-6894-4981-b0c3-8f909bfda2a2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f264fafb-6857-472b-89ac-a3a6c4db6097", "sighting_of_ref": "indicator--d066c055-6894-4981-b0c3-8f909bfda2a2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0faa99-049d-485d-a950-5508bd8df9db", "sighting_of_ref": "indicator--a5834678-0519-4fdc-a6f4-618a21481711", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7912111-fb47-4fea-bfc9-dcd148511066", "sighting_of_ref": "indicator--10dfccfe-fcf8-425a-9b2b-a2f91d6ed47a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b95e556-e573-4e49-ae6a-8cf3b884cd14", "sighting_of_ref": "indicator--10dfccfe-fcf8-425a-9b2b-a2f91d6ed47a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d38cafd-81c7-44bd-a95c-a476295b40a6", "sighting_of_ref": "indicator--61368bd4-5620-4477-a487-4683a863b8cb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1f6f7c-c548-4260-9110-c1e398d83e22", "sighting_of_ref": "indicator--79f19f19-88c6-4ca2-83c5-63f2df1c536d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67d76ce-4a1d-4583-9fe6-5657e93cb89e", "sighting_of_ref": "indicator--9d984b4e-16c8-46f9-969c-09381b3e1383", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b69a0e5-045c-4dfe-b110-005cab219d59", "sighting_of_ref": "indicator--74d7e8f5-0e5c-4df1-bb15-0f739368f270", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f9bcbe-2fc2-4657-8675-be03e238b088", "sighting_of_ref": "indicator--87c93544-87d6-4925-9f7a-ac2550bae925", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a464e7-b737-45bf-8859-661cb6c47507", "sighting_of_ref": "indicator--83595614-77a7-4646-bef4-56cd3af08d4f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa5f326-ac84-4ddc-8b04-885f48f53bc2", "sighting_of_ref": "indicator--1e6a52e7-0dc0-4ba0-950f-66fb7011c279", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f5cf8b-aee2-4f8b-9789-f2a34f26ae49", "sighting_of_ref": "indicator--397d9e55-040a-4163-8dea-004df0970218", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a43b40-f035-4e7c-8037-4a33711aa0c0", "sighting_of_ref": "indicator--0d3e25bf-9b52-4668-8cd7-63a6f1308f3b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9c2f08-5317-443a-a495-ad2d76403e95", "sighting_of_ref": "indicator--12caa140-76ef-4766-aed3-456ecd89840d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3015bdac-b578-4b4d-9fc7-7f26945d4890", "sighting_of_ref": "indicator--12caa140-76ef-4766-aed3-456ecd89840d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246f4c5b-3267-440c-81c1-993d3fcd68f3", "sighting_of_ref": "indicator--d9ffad8e-249f-440c-86f6-9744c5db7e0c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a0886a-552c-4c18-ad80-25b751260ad2", "sighting_of_ref": "indicator--265a5602-8690-4253-b19e-c8f8243340e6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ab3a33-83c9-4172-9081-06c295d9b347", "sighting_of_ref": "indicator--f232fe0d-3564-4fd1-8881-da5b01b4a439", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a283dc-8f3b-451a-82ad-185540913400", "sighting_of_ref": "indicator--f232fe0d-3564-4fd1-8881-da5b01b4a439", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7877596d-9d64-4055-8fe0-70c12d7c154e", "sighting_of_ref": "indicator--a6d8b70e-6c17-414a-9aa1-e05109cbe2d4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33e6df4-2779-41ec-887c-487cd926fecc", "sighting_of_ref": "indicator--a6d8b70e-6c17-414a-9aa1-e05109cbe2d4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26251e99-6765-4555-807c-acd34fb0025c", "sighting_of_ref": "indicator--9a44da57-8134-4faa-be49-c1f79e6890d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a886683c-2066-4d91-95e6-d2db51323f10", "sighting_of_ref": "indicator--9a44da57-8134-4faa-be49-c1f79e6890d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a89f2c-0696-4399-984c-e4f3497fa5cb", "sighting_of_ref": "indicator--f9c2ac27-bce0-4c54-bdef-9199714d38b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d508b2ac-1054-4232-8eb6-bfdb17553c15", "sighting_of_ref": "indicator--604ffb4b-2e85-4435-910b-8d1874413973", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848e368f-3de5-4639-ac5b-a59ee115a59c", "sighting_of_ref": "indicator--1dc67316-5ddc-430e-9e7b-6b6c4dbd95ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21896a5c-d5a9-4389-bbdc-9172a680a79c", "sighting_of_ref": "indicator--deea11b9-cb40-492f-8b19-180fb5c97cd3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e4edc9-d7c9-4f06-983b-fddfa9595a84", "sighting_of_ref": "indicator--deea11b9-cb40-492f-8b19-180fb5c97cd3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b958a7-55be-405e-b87d-269d61e428d6", "sighting_of_ref": "indicator--e9626010-048c-4e74-aab9-2a52dde43f1a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6102b87b-6238-4384-b10b-fa016e5aaf45", "sighting_of_ref": "indicator--38ef555f-397d-4513-a365-433a50b727cf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd410610-3836-4cfb-b3f2-2792c2f65c76", "sighting_of_ref": "indicator--851a083b-8e81-424b-b816-355d2a326a88", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407500ac-8af5-4528-86c7-af2f0d330370", "sighting_of_ref": "indicator--851a083b-8e81-424b-b816-355d2a326a88", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5919ee18-1896-48a5-929b-e35775c2b850", "sighting_of_ref": "indicator--db7a06b9-2c47-47ae-82a4-a7f385a6a44c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6afa266-f048-4b5f-8f39-1e29a97119ca", "sighting_of_ref": "indicator--db7a06b9-2c47-47ae-82a4-a7f385a6a44c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3115b49b-f729-40af-9c2b-112114d79f90", "sighting_of_ref": "indicator--42f98cd0-a99a-49a3-be7a-7c11c71d37b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01afddb4-16b6-4681-8103-08680da6c630", "sighting_of_ref": "indicator--5bc19712-ebfc-420e-ba39-c36442eeb321", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df18d708-d5f7-4076-a436-2976f4489f1d", "sighting_of_ref": "indicator--a9239bd3-5797-427d-b4b4-0d43e5c9b68c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f93de0e-9d8a-4de9-8e76-c909576c472d", "sighting_of_ref": "indicator--d653ed64-f0dc-431c-b921-4402c35b316d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da64dea2-66ba-4972-a939-65eaa4cfcc68", "sighting_of_ref": "indicator--8f1c5b79-b120-4998-b524-5b46acf99bad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b927fedb-56d6-448d-b23c-60ad51ee6f5f", "sighting_of_ref": "indicator--8f1c5b79-b120-4998-b524-5b46acf99bad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb685ed-1591-455e-9fb9-882faaad8512", "sighting_of_ref": "indicator--ad2f7748-bfe0-4d17-9ed8-1e85d88b981c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2a0e45-2df8-485a-a4ae-5c20896e3dc3", "sighting_of_ref": "indicator--ad2f7748-bfe0-4d17-9ed8-1e85d88b981c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39af4db6-a59a-4659-8395-bfd254c86b7a", "sighting_of_ref": "indicator--9d57f17e-1c90-4125-a0b6-b797e9368d83", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe09c167-1d6d-4f05-89ab-91e50e0ddcbe", "sighting_of_ref": "indicator--39579f46-de23-410b-9795-78a8b4585926", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33fcecc-d757-48a2-b813-1b5c9ec06c14", "sighting_of_ref": "indicator--39579f46-de23-410b-9795-78a8b4585926", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de176cf0-7610-4387-a1ab-395cb1c901b4", "sighting_of_ref": "indicator--edef05e5-905b-4037-b7b4-736b682e301c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3abd79-905f-4dc4-ac5d-a1ead71399ca", "sighting_of_ref": "indicator--edef05e5-905b-4037-b7b4-736b682e301c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384274ba-4e38-43aa-bc0c-576b953adbd4", "sighting_of_ref": "indicator--2d1e4a39-8cc4-441d-a657-ce10d5023d06", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522193e5-6f42-4637-8212-1227458aca7e", "sighting_of_ref": "indicator--08259148-15dd-469f-aa23-590f3da10b0a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6734a879-9c98-469c-bfd6-a9e6ae84e7a6", "sighting_of_ref": "indicator--b7d86d08-315c-4f98-ae04-c42cb892f825", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eae9d71-ee83-4c6a-b869-d743cd00bd07", "sighting_of_ref": "indicator--9d56d9ef-7992-4e1c-a909-8420d5fc70ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b5ad5c-387c-4b3a-b853-ba5ba774d5b3", "sighting_of_ref": "indicator--859fcb73-dba8-4cc0-8d89-9e3cb371093b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d89ae3-e201-4384-9224-814a054bfe86", "sighting_of_ref": "indicator--859fcb73-dba8-4cc0-8d89-9e3cb371093b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064f6e8f-bce6-405e-93bc-b17be6132a19", "sighting_of_ref": "indicator--01a71e04-8e93-44a1-a57e-dc4096ae11c3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6022bfc1-7abb-4e9a-a5cf-e014972ddf82", "sighting_of_ref": "indicator--01a71e04-8e93-44a1-a57e-dc4096ae11c3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e70309e-f062-4a7b-9773-b8044050057b", "sighting_of_ref": "indicator--905cd4d2-2729-46ac-9184-2d79db9d9fa0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9702856-1335-46e9-9f45-28b95d8e3be1", "sighting_of_ref": "indicator--7ae17577-1381-4dfc-9303-516f66e92e38", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6516d9f4-153d-436f-a4af-693115c716d5", "sighting_of_ref": "indicator--7ae17577-1381-4dfc-9303-516f66e92e38", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce99a0a-d410-4421-ba13-f042ec71d1b3", "sighting_of_ref": "indicator--b7cf80d8-b245-4c09-95d6-199c2920a617", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f7342c-7836-40c9-a34c-a5aa07f0b423", "sighting_of_ref": "indicator--da8c503e-dd8a-4520-b071-edf9e1fe90f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34dbdca-5d09-422c-b111-b68b46fd30d2", "sighting_of_ref": "indicator--0c247f34-5783-47ee-9bad-363253566b35", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a577f609-be39-40ba-a1c0-be23e72fbe30", "sighting_of_ref": "indicator--dfac7895-12de-403a-996c-f55de25ec188", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575db5cf-3aa7-4f4d-bb70-c34fe7ba4fd6", "sighting_of_ref": "indicator--dfac7895-12de-403a-996c-f55de25ec188", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f384b9-a185-4e6b-8ac3-208d4f165b38", "sighting_of_ref": "indicator--073dadaf-8842-4d8d-a7f9-7a8cdf559308", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1755442-b2aa-4e51-b0d1-1f4ee4edb289", "sighting_of_ref": "indicator--df6cf794-9d31-4028-b3b0-a84b70cf9df8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f781bd3-4be6-4999-b0b7-be2527ccf5fb", "sighting_of_ref": "indicator--bc663565-61f8-40cc-beb7-7f1709c50376", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bf1670-06c0-4b56-a659-e50d713cdf01", "sighting_of_ref": "indicator--37ad3296-d21b-42fa-ba78-900811061ea5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9d5509-17e0-4b33-a93a-cdf96a31d58d", "sighting_of_ref": "indicator--37ad3296-d21b-42fa-ba78-900811061ea5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb20f5d-d06d-4e81-be94-0f8ad9a75d2c", "sighting_of_ref": "indicator--be88645f-bf65-4b55-b912-ba245dd7cbdb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660f88c1-92d9-4e47-be05-c5184927c190", "sighting_of_ref": "indicator--ac4e8b6a-a478-41f2-869a-2c1f1f05947c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06e554c-e1e9-4ac5-8419-2da65065be6c", "sighting_of_ref": "indicator--ac4e8b6a-a478-41f2-869a-2c1f1f05947c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29c851e-f381-475d-bc85-afd5776b5f0c", "sighting_of_ref": "indicator--ac4e8b6a-a478-41f2-869a-2c1f1f05947c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c61c96-66f6-4591-ab17-9b1b0f9d17ff", "sighting_of_ref": "indicator--dae797ba-9446-44f8-b196-3dd973e6ff70", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6135f084-90de-46d4-a41c-8c4f8e61926b", "sighting_of_ref": "indicator--f7eee86e-22b6-43ae-994f-470509970865", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deaaf3a6-9d68-4cdf-94ab-923f4db3dfcb", "sighting_of_ref": "indicator--f7eee86e-22b6-43ae-994f-470509970865", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccfa82a-30ae-432d-9274-972bc99eaef6", "sighting_of_ref": "indicator--bfcefa11-c854-4aa6-9113-20e4fe9484aa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43db781-d6ea-4b44-bb91-64a27f6e7fe0", "sighting_of_ref": "indicator--8250c368-5d78-439a-910d-18025f05e720", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08859bad-7745-4670-8a91-b161da319643", "sighting_of_ref": "indicator--0765b803-32e1-4406-aa46-9517940af1c9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084a002b-b9bb-42b8-bbc3-a9634c43bee6", "sighting_of_ref": "indicator--62c1fd42-cabf-4320-97a1-70a2657d91ac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291578e2-6356-446e-8ccb-f421e0850fa4", "sighting_of_ref": "indicator--36500042-bff8-41a7-bf0b-13dcd194b827", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f47ed75-58f6-4dc9-afc9-49c54e826ce2", "sighting_of_ref": "indicator--7a399401-096f-4ca1-b9f1-f9a3e1c89682", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb2407d-d781-4164-930b-aadc968288dc", "sighting_of_ref": "indicator--69e5b327-cef1-4fb7-935b-6f374cc9ab57", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ccb049-9834-4962-a705-ebb213e3e5bd", "sighting_of_ref": "indicator--69e5b327-cef1-4fb7-935b-6f374cc9ab57", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1371543-6c2f-40e8-9727-4d5eb84bac7c", "sighting_of_ref": "indicator--69e5b327-cef1-4fb7-935b-6f374cc9ab57", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a609b1-71c7-4e68-9c41-e17da9790e13", "sighting_of_ref": "indicator--58ea2953-fc5b-4cf9-9c66-87126f40ba6b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daef2012-6025-4d29-9dc0-1e26f16b1cdd", "sighting_of_ref": "indicator--58ea2953-fc5b-4cf9-9c66-87126f40ba6b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00e77be-06d5-469b-a0bb-9ea601cba875", "sighting_of_ref": "indicator--af391333-1ba5-4293-8dbb-2010b844e6a1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053b4401-b03d-469c-ae62-d1a182e82836", "sighting_of_ref": "indicator--86bef453-aab4-4879-9373-7f30d344ecf8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4454488a-93ba-4210-baa5-94c9a4a01539", "sighting_of_ref": "indicator--86bef453-aab4-4879-9373-7f30d344ecf8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152a6175-d6fd-47b2-b606-dfa5be363a86", "sighting_of_ref": "indicator--74cac336-e141-48a7-a636-8c81a74b95f6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b32298-2d24-4294-9ba4-6a73700eb809", "sighting_of_ref": "indicator--f9c4aea3-dd1f-437e-a15b-be3b95b226d9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7922425-c9c6-405b-a4c2-b6f6af58d795", "sighting_of_ref": "indicator--fc1fa640-8797-4e2e-9571-641016a4daa7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb738d6-8fe9-48cf-a8a6-7a26994081b2", "sighting_of_ref": "indicator--657019bb-6f1e-45e7-8d45-7c07624d6073", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9e4c96-7d4b-420b-9f23-d16b8dadebfa", "sighting_of_ref": "indicator--657019bb-6f1e-45e7-8d45-7c07624d6073", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654b69dc-e46f-482c-b5dd-6ed0b4b2035a", "sighting_of_ref": "indicator--52e97144-f81e-48ea-955e-992d260c276d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890ac1cb-1653-41f2-b284-537bd5a3e53e", "sighting_of_ref": "indicator--19705ccd-c7d1-4c04-8b46-f8b19fc6d86a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9f142e-c5d4-430c-912f-d8978f4ded8f", "sighting_of_ref": "indicator--4ab871b0-9cf7-4810-90a4-8bcdb5705577", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee26162d-44dd-4b40-8c0f-adc6c15b58ff", "sighting_of_ref": "indicator--058c76ae-2a0e-43b5-a2e4-fbbe14a9ba67", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1690fb0-fdd6-4846-8d91-d13eff21f0cf", "sighting_of_ref": "indicator--f5133c2f-47c8-4f18-838e-44527941334b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc48d23-2026-4f42-a503-fb34ce69baf3", "sighting_of_ref": "indicator--670c3d35-5fa8-48d3-87f0-b8f27a52fa1f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0218292-385b-4872-9bf6-b296bbc4cc62", "sighting_of_ref": "indicator--670c3d35-5fa8-48d3-87f0-b8f27a52fa1f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6fbeef4-a9c1-4ed4-8002-898721520496", "sighting_of_ref": "indicator--9e3bd5a3-4a8a-41b0-96f1-2413cfb4bb32", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2981e3f3-40e7-4693-9087-6fdff9cbd9f1", "sighting_of_ref": "indicator--9e3bd5a3-4a8a-41b0-96f1-2413cfb4bb32", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3665ed1-82e3-4234-8932-11f2247dd676", "sighting_of_ref": "indicator--912b37ec-4ce4-440b-8be5-73c2a2f4f890", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117a2de1-7bae-4864-bd88-d15b8d3a5a32", "sighting_of_ref": "indicator--912b37ec-4ce4-440b-8be5-73c2a2f4f890", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9323f0-7948-4baa-9433-5ed21492e19f", "sighting_of_ref": "indicator--42b3567b-7615-403c-b578-b4c75282ca02", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ef9873-9656-474b-89c4-dfee3048eb12", "sighting_of_ref": "indicator--42b3567b-7615-403c-b578-b4c75282ca02", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2681f7ac-0af2-4a67-81d0-c101f5441885", "sighting_of_ref": "indicator--33842069-b80e-4be0-81c3-5268d56fdb80", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc65016-1a43-416b-aced-8e3aec3e3011", "sighting_of_ref": "indicator--38215100-9ec3-4ff5-9e06-d92755d42122", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52dec6a4-2ff8-46b2-936f-6f91faf3e94b", "sighting_of_ref": "indicator--bc288a38-b75a-443a-af89-86e38d361787", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56af75e0-7b62-4167-8277-bf6c5e060e61", "sighting_of_ref": "indicator--bc288a38-b75a-443a-af89-86e38d361787", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c83c67-31d8-4384-a1ed-22b5a092ece7", "sighting_of_ref": "indicator--bc288a38-b75a-443a-af89-86e38d361787", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d845e6f3-459d-4609-9990-2fffd98fc8a7", "sighting_of_ref": "indicator--1979fb41-1136-4e35-aef6-b3afe9cfc38c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b51aad2-5820-4ae1-9308-8884f796f4cf", "sighting_of_ref": "indicator--61171d61-c52b-4f50-8016-d5959f9a7f2a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1134df0b-ac7e-4627-af13-8eaa7372ae47", "sighting_of_ref": "indicator--ad5886bb-4695-4472-9125-e4b415d1e5e1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd00cdfb-4ee1-4bf7-aee3-9290d38f96ac", "sighting_of_ref": "indicator--d7fbfe62-adb1-46f4-a8f7-24ab48738b6f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e7c9bb-d59d-4338-9b5c-a9c586356674", "sighting_of_ref": "indicator--c4e87945-2e8c-4f52-b3c3-7d0f4af18979", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51aa738-2b64-41b0-ac5d-816fb9f32a0e", "sighting_of_ref": "indicator--27f043d8-4680-4f12-9919-7c04bd932b89", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f0c06c-829d-4860-b32d-0c0a80f9a875", "sighting_of_ref": "indicator--27f043d8-4680-4f12-9919-7c04bd932b89", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bab0d5-4596-4c88-b4fe-ea12e27c1369", "sighting_of_ref": "indicator--c7818e3c-d861-4639-af79-b0c237f2b542", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2128138d-f33d-4be6-95e3-451ea86e6492", "sighting_of_ref": "indicator--c7818e3c-d861-4639-af79-b0c237f2b542", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ad9fdd-8b78-4d88-a436-56cdf1f0f494", "sighting_of_ref": "indicator--fbeb1130-3bd4-42df-b733-4e0339b52248", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b1d81d-3e2b-4e96-82c9-888d3edb3201", "sighting_of_ref": "indicator--fbeb1130-3bd4-42df-b733-4e0339b52248", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa259cf-53c4-4386-88d2-5e4b5bc70a30", "sighting_of_ref": "indicator--7efa9a8e-ba0d-4f0c-9db0-dc575684cb92", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bc4196-a568-49ba-870a-375e29e60187", "sighting_of_ref": "indicator--9bf93357-9299-447a-9258-c29a5ef65400", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b64e65e-9c05-47a4-a0e4-97cd22cd603f", "sighting_of_ref": "indicator--cc905939-84bc-437c-8cab-49e3ac12d604", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3362315-41a7-4e7b-a6f1-47d5d829c57e", "sighting_of_ref": "indicator--cc905939-84bc-437c-8cab-49e3ac12d604", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8917db-29f0-47b0-a409-639618312660", "sighting_of_ref": "indicator--198d5ac5-a8d7-4da8-b37f-31484f54b026", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8dd396-9ce9-4659-92f7-2ae2e4139c3f", "sighting_of_ref": "indicator--e8d55a6f-2c82-479e-88e4-588b41efa985", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9197611c-6895-421f-9ee7-9eb5bd416fb6", "sighting_of_ref": "indicator--babfeb5b-0e89-447c-8cee-9b52112354ee", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7045a1-66cd-4ec8-ad20-577ad67542e8", "sighting_of_ref": "indicator--1b7f1160-6066-483e-a58b-2a05b1b48fdd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819f391d-a0ea-45f3-ae49-2932e68d75e6", "sighting_of_ref": "indicator--1b7f1160-6066-483e-a58b-2a05b1b48fdd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff1042a-a01d-4e34-8654-8485e4bd8afe", "sighting_of_ref": "indicator--55e8ef03-ce90-4f8a-ab39-ab583e62b23b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a2350e-a8d6-4da4-8fe8-25d9c3ad7d52", "sighting_of_ref": "indicator--55e8ef03-ce90-4f8a-ab39-ab583e62b23b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8c7184-250f-438c-97e8-2417ab9abb87", "sighting_of_ref": "indicator--54a0e3d4-6aa0-4667-b4de-569208839ac5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073a2ab1-f06e-4c48-af53-b20df233b321", "sighting_of_ref": "indicator--54a0e3d4-6aa0-4667-b4de-569208839ac5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6081b7-02e8-41be-86fd-bcbad393abc7", "sighting_of_ref": "indicator--bebabcbd-092b-43f4-87ef-63a0ab5edc2c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b01e392-8944-4341-96f1-53a865fcd930", "sighting_of_ref": "indicator--b422d2d0-cb82-42b7-af5b-3139289788f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d01d844-bd28-4a43-815c-34bca892fe7b", "sighting_of_ref": "indicator--b422d2d0-cb82-42b7-af5b-3139289788f4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537da878-dcab-49fd-89a5-71830e03f320", "sighting_of_ref": "indicator--cf5ff320-ee43-4376-8b08-0f922d8877c5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec77f05-1aab-4828-bb79-e272c2a67785", "sighting_of_ref": "indicator--cf5ff320-ee43-4376-8b08-0f922d8877c5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cd9168-4305-4c50-9f03-030386fbec97", "sighting_of_ref": "indicator--1b0a4794-fcb9-4bb9-add3-d232f562daba", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd35616-fd5e-4a96-a2e9-54d0da337596", "sighting_of_ref": "indicator--1b0a4794-fcb9-4bb9-add3-d232f562daba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0aaeb6-842c-4705-816b-6934607496d4", "sighting_of_ref": "indicator--1b0a4794-fcb9-4bb9-add3-d232f562daba", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1606efa2-9bc2-43b2-8f18-5babce318549", "sighting_of_ref": "indicator--2f01a804-fabb-4388-bbf3-26b8a70e93b1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1be8f5-06f9-41a3-b753-a7d393f9c081", "sighting_of_ref": "indicator--2f01a804-fabb-4388-bbf3-26b8a70e93b1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecaf00b1-079e-48b6-892d-a458af891692", "sighting_of_ref": "indicator--201df878-32d5-4114-b3ea-347dec872e18", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21dc9b03-9cb8-4f3c-b1ab-dcb401cf4337", "sighting_of_ref": "indicator--720caf65-bfc3-4d67-8a10-0e2c7d410857", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60b5114-f976-4e33-96ff-a3debd2398f9", "sighting_of_ref": "indicator--328f49be-693e-4fcb-bf13-734e7f87475c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a40c0f-2c54-40ca-be62-f70c8177bd6c", "sighting_of_ref": "indicator--01d11bd3-d154-4390-8e07-bfa55361bd16", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7a5610-10b5-43f2-86b1-7799dd36135f", "sighting_of_ref": "indicator--a915c896-dcb8-4187-a779-c8ea5a795b62", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8422373e-a048-4909-8314-0b7f146e1438", "sighting_of_ref": "indicator--befe0e6f-7cf3-41d6-927a-f0a7b87e2362", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f071950d-d96d-4377-a095-2d0e52f7e119", "sighting_of_ref": "indicator--63b41c9a-c45a-47a6-9310-05a9e92fcfa9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69bd057d-fc8c-4381-a577-02640ed9f6b5", "sighting_of_ref": "indicator--63b41c9a-c45a-47a6-9310-05a9e92fcfa9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32819933-d7f7-4064-be45-bd13a6619008", "sighting_of_ref": "indicator--63b41c9a-c45a-47a6-9310-05a9e92fcfa9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17c2e3c-5218-4981-b5dc-e59b07fac06b", "sighting_of_ref": "indicator--b00a70c6-bef6-4120-b87d-7f7df66fc782", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3973e1e5-1f98-44e0-87ee-8e59936a3384", "sighting_of_ref": "indicator--b00a70c6-bef6-4120-b87d-7f7df66fc782", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad66043e-1d0a-4d5f-9a9c-4b04b9b18edb", "sighting_of_ref": "indicator--1e904a8b-092b-4aa7-840a-d2dd8f37a5cb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2113db-a00d-42b0-b554-f62a4dd44986", "sighting_of_ref": "indicator--1e904a8b-092b-4aa7-840a-d2dd8f37a5cb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48de2f7f-2a66-427d-841b-6d89f9ec4958", "sighting_of_ref": "indicator--1e904a8b-092b-4aa7-840a-d2dd8f37a5cb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1bb8f4-974d-46e5-a697-05b4f363262c", "sighting_of_ref": "indicator--10e98507-0453-45a3-90f3-7ceb2d95dd5a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e782625a-a4d6-44f1-a57d-173e3d9efdc7", "sighting_of_ref": "indicator--10e98507-0453-45a3-90f3-7ceb2d95dd5a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0f0f83-05bb-4094-91e2-eaacfdd15ee3", "sighting_of_ref": "indicator--10e98507-0453-45a3-90f3-7ceb2d95dd5a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fcc2b8b-442f-4774-881c-c6c8d796e0aa", "sighting_of_ref": "indicator--9f0d5bdd-d857-482a-8201-2ce542c5f4e1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a773df6-c549-41c2-a355-9b6f8c92a02f", "sighting_of_ref": "indicator--9f0d5bdd-d857-482a-8201-2ce542c5f4e1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373132bd-1cc4-4e77-9d5e-f83158e02e6f", "sighting_of_ref": "indicator--526c7a54-9bc6-4f93-be90-d30b0e076d93", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7eef92-acaf-486f-882d-ff92e8c6ca42", "sighting_of_ref": "indicator--526c7a54-9bc6-4f93-be90-d30b0e076d93", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198f8a90-93ce-478f-879c-fa025f3e0104", "sighting_of_ref": "indicator--526c7a54-9bc6-4f93-be90-d30b0e076d93", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1d0954-5d71-41ff-b225-66b830859e12", "sighting_of_ref": "indicator--1c56b418-0b53-499d-9ae1-bd227f3d0951", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd04cd5-70a9-4b5d-97e2-875665c4006f", "sighting_of_ref": "indicator--1c56b418-0b53-499d-9ae1-bd227f3d0951", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c447a0-d04e-409e-a215-cac38ab3b955", "sighting_of_ref": "indicator--1c56b418-0b53-499d-9ae1-bd227f3d0951", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5cdfb6f-3d6b-4209-b9b2-7a3a9032533e", "sighting_of_ref": "indicator--89a93c67-44d0-4e05-8f3f-fe8064befef3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952008e0-bf36-4898-9014-95feb7303f93", "sighting_of_ref": "indicator--89a93c67-44d0-4e05-8f3f-fe8064befef3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512f29c2-e553-4bdb-80c6-f2414916d40e", "sighting_of_ref": "indicator--aea245e8-a2a7-43fd-9366-d6c9b09f9167", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461b42dd-200b-4eb6-beaf-9958443700ac", "sighting_of_ref": "indicator--bd2969e3-3d43-4f57-888c-616f5c19e30c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa958e7c-2558-4e37-82a4-aa50be9d4891", "sighting_of_ref": "indicator--bd2969e3-3d43-4f57-888c-616f5c19e30c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d248ed16-de97-4965-812b-ba86b355d027", "sighting_of_ref": "indicator--bd2969e3-3d43-4f57-888c-616f5c19e30c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6d869d-6f6d-4ac4-958f-d96a5673e5cb", "sighting_of_ref": "indicator--5fbebec0-7314-4f42-9005-cb53a97dbadf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb6cd3e-3eb2-4398-a3c8-4e751ad2368e", "sighting_of_ref": "indicator--5fbebec0-7314-4f42-9005-cb53a97dbadf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9120f46-beeb-465e-baae-a7cc5dea8c46", "sighting_of_ref": "indicator--517ecf91-7e4d-40c5-86b6-944ea6f91934", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ee2026-cd83-42f1-82e9-8c49f8c1fcdd", "sighting_of_ref": "indicator--517ecf91-7e4d-40c5-86b6-944ea6f91934", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aaec903-33d9-47f5-9855-4bdc3c4eec41", "sighting_of_ref": "indicator--24b33086-b156-4cf9-96e9-dc8d33795f13", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b31875-6700-4c4b-a8b1-99fb5b891e5a", "sighting_of_ref": "indicator--24b33086-b156-4cf9-96e9-dc8d33795f13", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d2317f-97ad-4eea-a460-debcfadb3ded", "sighting_of_ref": "indicator--24b33086-b156-4cf9-96e9-dc8d33795f13", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3f82c2-67bc-4d1f-ae1a-802149d00748", "sighting_of_ref": "indicator--2bc6e96c-3596-43c5-83eb-6dc561f0ab36", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79b7c93-8553-4d98-831d-b3fae3b5bad7", "sighting_of_ref": "indicator--2bc6e96c-3596-43c5-83eb-6dc561f0ab36", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1796e395-ef3b-4bb4-97cc-03099e249244", "sighting_of_ref": "indicator--2bc6e96c-3596-43c5-83eb-6dc561f0ab36", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bde1f0-e286-475c-b82f-7aaf592a7f47", "sighting_of_ref": "indicator--6a9a8ee1-435d-421a-8542-64e60f066a3d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee48cb91-7d94-4bbf-b8b0-eeec936c4384", "sighting_of_ref": "indicator--6a9a8ee1-435d-421a-8542-64e60f066a3d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c57974-5d48-4a21-b50c-c66af9637873", "sighting_of_ref": "indicator--6a9a8ee1-435d-421a-8542-64e60f066a3d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a0dd6c-c242-4f96-8db4-9de0291e9d74", "sighting_of_ref": "indicator--2b1c3af6-7c98-4e79-9ce5-d76ce4675b74", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6c544d-f62e-4cc7-8149-c0aded51ff91", "sighting_of_ref": "indicator--2b1c3af6-7c98-4e79-9ce5-d76ce4675b74", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2296d6-1a91-4d31-a9ee-564b49d4c2ae", "sighting_of_ref": "indicator--2b1c3af6-7c98-4e79-9ce5-d76ce4675b74", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff9a135-d886-4af9-9bc5-ce90d0330be1", "sighting_of_ref": "indicator--fb65d9cb-498f-4b4e-b396-883efdb1518b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b76547a-cb17-46a1-8546-a2ab75953569", "sighting_of_ref": "indicator--b7dc4c37-be0f-4df3-b0c2-7772ae6196c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73913b75-93df-4c81-95c8-4a68411cf8c9", "sighting_of_ref": "indicator--64c4228a-a164-4413-a750-c2ee4ea443d6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7401ad30-de16-40c8-8a96-8536eb6db81b", "sighting_of_ref": "indicator--ca4c4b71-1bf2-43a9-abb9-0bfb2628dc80", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d548dbf2-4183-478c-b334-a42845821b4b", "sighting_of_ref": "indicator--5d331a14-17be-417d-ab6c-2742c93d5e2f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e856c2-a2d9-452a-b51f-f89038cf5baf", "sighting_of_ref": "indicator--ee87cbf5-90b5-4533-8619-655dd8b5a501", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723d1890-e027-4c1e-baf8-3247b3fd551c", "sighting_of_ref": "indicator--daebe64d-25e4-47c6-b793-2c8bee7c6734", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce42bdd-2f4e-4634-a630-e0456b6427ff", "sighting_of_ref": "indicator--daebe64d-25e4-47c6-b793-2c8bee7c6734", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f026107-7cd4-48e3-9eab-b4fa37643430", "sighting_of_ref": "indicator--daebe64d-25e4-47c6-b793-2c8bee7c6734", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d7a056-6144-43a0-a341-1169b7e81388", "sighting_of_ref": "indicator--bfff8070-f2a4-4d78-a3c5-c278f96c9711", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ecef7a-d847-4ce4-9774-19dc0982c61e", "sighting_of_ref": "indicator--afbabe7d-31e9-4bba-b774-7ee76666e5c4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6cf80b-c6d2-48a1-bde9-952a0bfdb1f9", "sighting_of_ref": "indicator--afbabe7d-31e9-4bba-b774-7ee76666e5c4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d79d19-fd44-431e-8e0f-0e8ffb559c42", "sighting_of_ref": "indicator--ca26252c-22ae-415e-a1e6-96429a7795ec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6cf468f-ba12-4a31-927b-da25113dc123", "sighting_of_ref": "indicator--d974228f-5f15-41f0-93b0-50313aabb8e0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca526ca5-8f32-4772-b79b-8cf8d5ae75f2", "sighting_of_ref": "indicator--a330e6ca-57eb-4789-8697-a7020c8bdd24", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce82fab6-e8fe-4445-84b1-0ca35895144d", "sighting_of_ref": "indicator--7d30a3dd-1b43-48d2-ad4d-00d713c03b66", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea7e19e-6de0-434f-8d2e-f9b403e4c501", "sighting_of_ref": "indicator--47b69162-029a-4c86-9baa-bbb9a812b82e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c9e30d-845c-4f41-8015-883537e76b4b", "sighting_of_ref": "indicator--e33691a2-bbeb-4c80-bf9e-8d80152a0a0a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5815555f-fa7f-40f8-9848-44e0582877f5", "sighting_of_ref": "indicator--e33691a2-bbeb-4c80-bf9e-8d80152a0a0a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96702555-8f9b-470e-ab3a-ea83688e90c1", "sighting_of_ref": "indicator--e33691a2-bbeb-4c80-bf9e-8d80152a0a0a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6611da6a-d5c1-484e-bde2-579e8659e7c2", "sighting_of_ref": "indicator--ef2bf024-bfbf-437c-993b-deb489fd0797", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5daf332-8830-4df2-bf6c-58cc449b9034", "sighting_of_ref": "indicator--ef2bf024-bfbf-437c-993b-deb489fd0797", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f07293-f1ac-4798-8ad9-3d4c1b0b9076", "sighting_of_ref": "indicator--ef2bf024-bfbf-437c-993b-deb489fd0797", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15850fdb-3fa5-4ffb-b8b9-ba746082ea03", "sighting_of_ref": "indicator--7ea9710c-6d2a-4c58-ac16-a6ff1ff2fa26", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6ac915-2c72-4e2d-a723-b4b1b242d993", "sighting_of_ref": "indicator--7ea9710c-6d2a-4c58-ac16-a6ff1ff2fa26", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a34174-15e7-435b-8275-7a44428ffd68", "sighting_of_ref": "indicator--7ea9710c-6d2a-4c58-ac16-a6ff1ff2fa26", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1256c634-f624-48e8-a0aa-4bdf5707518e", "sighting_of_ref": "indicator--e719481e-d084-43d2-9196-f6f624fbfb65", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cbe6c4-59c6-4256-ac8a-edd7660dc527", "sighting_of_ref": "indicator--e719481e-d084-43d2-9196-f6f624fbfb65", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6260983b-4d4c-4247-bc12-6f386d8ac5ed", "sighting_of_ref": "indicator--e719481e-d084-43d2-9196-f6f624fbfb65", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31f0efd-cb0a-4b4a-8085-e8a1181b0c5b", "sighting_of_ref": "indicator--035b7ed1-a993-4239-a726-4112502ae77f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6df8c1-c097-4604-95ff-aa050c58badd", "sighting_of_ref": "indicator--035b7ed1-a993-4239-a726-4112502ae77f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab8e66b-71c9-48f6-9837-a8f4ff41c189", "sighting_of_ref": "indicator--035b7ed1-a993-4239-a726-4112502ae77f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed9935d-6d82-4451-92b5-c6f5ff85b832", "sighting_of_ref": "indicator--ebff3bb2-759a-4c27-a727-1bf805c893fe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3ec5ff-6369-4aba-886f-f77d0c18153a", "sighting_of_ref": "indicator--ebff3bb2-759a-4c27-a727-1bf805c893fe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47452a69-d592-4e54-9164-91000183550c", "sighting_of_ref": "indicator--36a4e39c-d6ec-4047-b4c8-d80665df08e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0159595-c231-40bc-93a2-96b3052cc7d5", "sighting_of_ref": "indicator--36a4e39c-d6ec-4047-b4c8-d80665df08e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7078a617-7e6a-4513-883f-6d2d8ea4b81d", "sighting_of_ref": "indicator--6dfa9baa-a0ab-4b1a-ab6c-81d831460f61", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbef1378-64dc-4fa3-a011-c901dfcf449d", "sighting_of_ref": "indicator--6dfa9baa-a0ab-4b1a-ab6c-81d831460f61", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eaddd03-c231-44fe-91c9-9e75dc34e6d0", "sighting_of_ref": "indicator--99abeb91-4cda-4f7d-a86e-f35c1a39b678", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c159ec0-5882-449a-bc40-cd1bec034226", "sighting_of_ref": "indicator--99abeb91-4cda-4f7d-a86e-f35c1a39b678", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecc2779-f321-4615-9f57-52d3a65671b0", "sighting_of_ref": "indicator--99abeb91-4cda-4f7d-a86e-f35c1a39b678", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22599fd5-f337-4f70-89df-5076c6404a97", "sighting_of_ref": "indicator--7c3907b7-63dd-4fc1-8ad4-b438661b6c0a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fc0fd9-4d08-45b3-a2bf-de5899f9cad5", "sighting_of_ref": "indicator--7c3907b7-63dd-4fc1-8ad4-b438661b6c0a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ecdf99-c65a-4ded-99d2-05a7a7baec17", "sighting_of_ref": "indicator--7c3907b7-63dd-4fc1-8ad4-b438661b6c0a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfdce77-c849-4889-b34f-870ee6323ee5", "sighting_of_ref": "indicator--96458e73-28a3-451c-8213-dc09473b4fad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379be8f9-a6e8-4b8b-9248-062c3c073b57", "sighting_of_ref": "indicator--96458e73-28a3-451c-8213-dc09473b4fad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a42bc4-d6ec-4439-a28e-628c58122a9b", "sighting_of_ref": "indicator--96458e73-28a3-451c-8213-dc09473b4fad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab02b08-2863-4606-aa52-0f6a58340865", "sighting_of_ref": "indicator--50419b97-333d-4b20-ad87-00af90e46147", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf094de9-8c8f-4ba6-960f-20ae93ae6d62", "sighting_of_ref": "indicator--50419b97-333d-4b20-ad87-00af90e46147", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad02dee2-63f1-482e-8e70-9b2bf45da19c", "sighting_of_ref": "indicator--50419b97-333d-4b20-ad87-00af90e46147", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639de5fe-6846-4a19-885a-c7904581ad4b", "sighting_of_ref": "indicator--edacf8b9-9cb1-4cb8-a382-8f7c00e0581c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7e2783-cde1-4a9d-8c9a-22687dfd93bb", "sighting_of_ref": "indicator--edacf8b9-9cb1-4cb8-a382-8f7c00e0581c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb3bb80-de38-4ae5-8ced-c90072c8072c", "sighting_of_ref": "indicator--8f5a1f6c-6ade-48c0-9600-714faedd1d39", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c40b36e-4646-44a8-b33e-1ae9872857ed", "sighting_of_ref": "indicator--8f5a1f6c-6ade-48c0-9600-714faedd1d39", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e92fcd-eff5-4cb2-a11f-fc0f57f24515", "sighting_of_ref": "indicator--8f5a1f6c-6ade-48c0-9600-714faedd1d39", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12b1681-f04f-484c-b6a0-cfcc45153f02", "sighting_of_ref": "indicator--4392ca9b-91be-443b-8d1c-649a7852dbd4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7541968-6111-45a6-8823-81ea85021033", "sighting_of_ref": "indicator--4392ca9b-91be-443b-8d1c-649a7852dbd4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6293e471-5484-4f94-a3a6-d39f44b50aeb", "sighting_of_ref": "indicator--245a6043-2310-43d4-835d-f314d356b54b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e41918c-1e0a-4d51-bda8-e13b9c85fa80", "sighting_of_ref": "indicator--245a6043-2310-43d4-835d-f314d356b54b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bf031d-b916-4dca-957b-9890b4777a8a", "sighting_of_ref": "indicator--c0cb6c84-b0f6-4013-94d0-71bf715dd345", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f710d4-a753-4d2b-afe1-8577eb11862d", "sighting_of_ref": "indicator--c0cb6c84-b0f6-4013-94d0-71bf715dd345", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b0345a-05e5-45e3-8288-e3d03c372840", "sighting_of_ref": "indicator--c0cb6c84-b0f6-4013-94d0-71bf715dd345", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5875d81-595d-4369-b629-40adb24547ac", "sighting_of_ref": "indicator--2fdd789d-9cf3-404a-9ea3-8dff80605e60", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9b8831-23de-441b-a522-1e9ee657ba22", "sighting_of_ref": "indicator--a137be0f-8df6-4987-bf00-8510110cdd91", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5076ff-7708-410d-8586-612f13094092", "sighting_of_ref": "indicator--a137be0f-8df6-4987-bf00-8510110cdd91", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d3b08e-be7b-4baf-9112-97106c881fac", "sighting_of_ref": "indicator--4e5dbf1a-cf03-4c81-b40a-42ad967eb1e0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e699bb-0cb7-456f-b81b-9906b9e565ea", "sighting_of_ref": "indicator--7ae1a40e-55f0-40d0-af7e-7a1004278d44", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9e4693-9057-413a-9686-57351c323d87", "sighting_of_ref": "indicator--2add9301-2ab6-44cd-b6d9-22ab9a778b29", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7319264-994e-4815-8712-0a90042a097b", "sighting_of_ref": "indicator--7d0df660-c991-487d-956e-4f4400f31005", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4330ad1b-3202-4401-b6cb-49619ff8b7e6", "sighting_of_ref": "indicator--7d0df660-c991-487d-956e-4f4400f31005", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b072b4e-a6b9-469d-83ea-f2c2ab5a0855", "sighting_of_ref": "indicator--a005c5f5-78b6-4448-8b6d-725f0cfd0d57", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb6116b-2f7b-43ac-89bd-c67d7e3a5442", "sighting_of_ref": "indicator--f44decc8-a808-4e59-a088-c90672b62ffb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ee9706-c2f7-4602-b01f-c7e3d3323419", "sighting_of_ref": "indicator--0b0f386f-5727-4add-b88f-182f31c0e397", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92fa0250-f3d6-4fd8-b12b-0f68a5a131d3", "sighting_of_ref": "indicator--631c98a7-c749-4d93-8b7a-eb229f5003bc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbfc077-e458-4e86-bf44-5a265d5eafc9", "sighting_of_ref": "indicator--85607c06-477e-4e97-b472-9b32bd1f4785", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fedabf0-59cb-4135-bf79-3442b3fdacdc", "sighting_of_ref": "indicator--85607c06-477e-4e97-b472-9b32bd1f4785", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432d5124-124f-4e49-aa81-7bca8b78bada", "sighting_of_ref": "indicator--61d84521-baf4-4a60-81e4-2461ad50267d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e905cad-de63-402e-8d51-f07930def01d", "sighting_of_ref": "indicator--7f25a258-c1ea-4fad-b61f-c6e1576ef6c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f91e4d-261d-4e8b-a222-391cfaf0f344", "sighting_of_ref": "indicator--ccc0e756-3f5f-4d3e-a9fe-bde50a920e33", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562b7d80-5750-4c62-9f21-77f5eda0e35a", "sighting_of_ref": "indicator--ccc0e756-3f5f-4d3e-a9fe-bde50a920e33", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3ab280-0ce4-422d-91d9-467c6dcab130", "sighting_of_ref": "indicator--6c6bbd86-61d8-4c14-9774-a05ee8b9469e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b7fb5b-de7a-419f-8906-21e7abcf64c2", "sighting_of_ref": "indicator--09ecf7b6-d190-4dfa-8451-0d74e09eb0ea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ef10a5-2afa-4a27-998c-598135223dde", "sighting_of_ref": "indicator--09ecf7b6-d190-4dfa-8451-0d74e09eb0ea", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2aa3de-7330-4059-abb3-8e6f7aa4cfff", "sighting_of_ref": "indicator--91d73591-9108-4926-a715-46722525d64b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e68dba0-11a7-4ad1-ae1c-a04742846a5f", "sighting_of_ref": "indicator--b9aefd10-e432-4eb2-915f-4d4d2e4f9bfd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f22fdf0-4adf-4f22-bee0-a4221c3a7ca0", "sighting_of_ref": "indicator--b9aefd10-e432-4eb2-915f-4d4d2e4f9bfd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6590b95a-f27e-40f5-8d72-4b13af027eb8", "sighting_of_ref": "indicator--9bbef9dc-0aaa-455b-9304-b75260bc1b50", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27684850-6fc0-43d0-80fa-98df5cf4f60d", "sighting_of_ref": "indicator--5acca86f-37f8-45d0-a921-e07d03b77d01", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfe0edb-7901-4daa-8885-589740e1e854", "sighting_of_ref": "indicator--f548029a-42ba-4b00-a925-f306eecc6590", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf8fd69-4163-4548-95d7-cf78a779f707", "sighting_of_ref": "indicator--d611d9f8-d818-41b0-8dea-2a57ab739727", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092062ce-9e4a-476a-a0af-ed7695ebd6f4", "sighting_of_ref": "indicator--d611d9f8-d818-41b0-8dea-2a57ab739727", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2473a4d1-6469-4a5b-9f80-f5d3b181b5bd", "sighting_of_ref": "indicator--08a3fadc-126e-4593-9e1b-dee0cb84d5a0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292c7840-77c8-4b7e-b71a-f9078eb76c4b", "sighting_of_ref": "indicator--07cf338c-e25b-4581-a111-e2659c36cac6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b204cdc3-5737-4967-b620-0a8dcca1d8f3", "sighting_of_ref": "indicator--7464df08-e21c-4dce-a6b3-bb2fe45b6309", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d118e9f-a76e-44ea-80e7-9c2474573ab0", "sighting_of_ref": "indicator--7464df08-e21c-4dce-a6b3-bb2fe45b6309", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a307ff-256b-42d7-8d07-4c0d90d2dc13", "sighting_of_ref": "indicator--2394b982-fb23-4130-804b-642fb3d35109", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba746eda-cdfa-4653-826f-166524c9793d", "sighting_of_ref": "indicator--26078ff1-bb63-4a4c-b648-a7fcbc76d84f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db403aca-dfe0-4d7f-879d-37b1507797e2", "sighting_of_ref": "indicator--62786ccf-a273-4a9f-ac87-699b572f49d3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aeaf3d0-df98-4d49-beb7-8d31c2dc850e", "sighting_of_ref": "indicator--27b2ce6c-5653-4c8b-b167-977da15b86af", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78cf8f19-e9f8-46e2-9826-6b39049a4132", "sighting_of_ref": "indicator--3d722f6f-f82b-48c7-8c94-2438dd640b50", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49dff2a-05a2-4d5d-aa30-d041d5d041d2", "sighting_of_ref": "indicator--3d722f6f-f82b-48c7-8c94-2438dd640b50", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca32763-de8b-414e-aee4-801c80ab9711", "sighting_of_ref": "indicator--3d722f6f-f82b-48c7-8c94-2438dd640b50", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19eae40-e48e-4348-8696-82be5c86fd4c", "sighting_of_ref": "indicator--54dc4271-75a8-428c-994f-8463d2edcc51", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ec7ea0-dc0d-4cac-b157-9166f6d9ee63", "sighting_of_ref": "indicator--54dc4271-75a8-428c-994f-8463d2edcc51", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2788b76b-48b8-477d-9941-3a794d1a572f", "sighting_of_ref": "indicator--365db47e-3fbe-414d-b881-08f3659cf85a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62174d6c-ec4e-4907-b5da-f50387d88d4a", "sighting_of_ref": "indicator--365db47e-3fbe-414d-b881-08f3659cf85a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac60e7dc-acb8-41b7-9cec-119f2aef27e4", "sighting_of_ref": "indicator--365db47e-3fbe-414d-b881-08f3659cf85a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ffca07-052e-4502-afc7-c3b51fd19fd4", "sighting_of_ref": "indicator--9d46f025-2b74-457d-9c5f-d73a3e8d617d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510fde02-755c-49cf-a334-6163a3dad517", "sighting_of_ref": "indicator--9d46f025-2b74-457d-9c5f-d73a3e8d617d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc90d46-327a-4eb4-ac19-67e25c388d1d", "sighting_of_ref": "indicator--b55144f9-b778-45fc-8333-128701a156dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada61fc5-960b-45b9-8555-e1b91f217949", "sighting_of_ref": "indicator--b55144f9-b778-45fc-8333-128701a156dd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4df3c9-02fb-48d6-8dd1-863e43f64c75", "sighting_of_ref": "indicator--e86a7a68-8259-46fa-8102-01a9392be620", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c98966-1d25-4c6a-80fb-0924c05a3e83", "sighting_of_ref": "indicator--e86a7a68-8259-46fa-8102-01a9392be620", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b06073-1db2-4306-bcf2-f49f94416069", "sighting_of_ref": "indicator--e86a7a68-8259-46fa-8102-01a9392be620", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3113f3-6f59-4646-8f8a-35be0860c313", "sighting_of_ref": "indicator--7ee45cbe-faa4-4a67-b157-56e6bcfef98d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fbbd1a-3246-4c29-8737-31821213c1b4", "sighting_of_ref": "indicator--7ee45cbe-faa4-4a67-b157-56e6bcfef98d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9815c472-7a7b-4bf6-98c8-44ce83d13fd0", "sighting_of_ref": "indicator--9e83afd8-8b3c-4281-86c5-2d58ed2d0d6b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ae02fb-6537-4ce9-94ab-6caa04912db8", "sighting_of_ref": "indicator--9e83afd8-8b3c-4281-86c5-2d58ed2d0d6b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45f3ff0-3c15-4638-92bb-78f982ec04e6", "sighting_of_ref": "indicator--9e83afd8-8b3c-4281-86c5-2d58ed2d0d6b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad3c90a-8578-46d2-a8d7-40cacc698064", "sighting_of_ref": "indicator--07a241fb-b57e-4f06-89a0-610066d41cdf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c33060-e70d-41eb-a403-e897f3940f4d", "sighting_of_ref": "indicator--07a241fb-b57e-4f06-89a0-610066d41cdf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7f13d6-0197-4715-b82a-13ea6f3bb7f9", "sighting_of_ref": "indicator--e04c8cbf-62ea-4e58-9a1c-f0576e70624e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0e5a67-db8c-4f9e-a59e-795a24ee9b5f", "sighting_of_ref": "indicator--e04c8cbf-62ea-4e58-9a1c-f0576e70624e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d076218f-0b87-49d1-8f57-77f0c1a7db68", "sighting_of_ref": "indicator--1a1c0ac7-6592-482e-b2fe-c92298bb1a05", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbf364b-4a5a-4ee7-b030-f6861b55e69a", "sighting_of_ref": "indicator--1a1c0ac7-6592-482e-b2fe-c92298bb1a05", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406b577f-8318-4267-a3d1-b8ff2a806791", "sighting_of_ref": "indicator--59152484-ce5d-4fe9-b64f-8d0e3384e7ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff00630-5182-4f30-8bbd-3a3348fc75b3", "sighting_of_ref": "indicator--59152484-ce5d-4fe9-b64f-8d0e3384e7ff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7ef115-dfd7-43dc-85cb-fa119222197c", "sighting_of_ref": "indicator--59152484-ce5d-4fe9-b64f-8d0e3384e7ff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f3e953-0773-46cd-96cd-0466e0deb6b7", "sighting_of_ref": "indicator--92cabe46-e6a8-431c-9703-deae49833484", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d27fcd-e572-460e-a20b-0afbd60913d0", "sighting_of_ref": "indicator--92cabe46-e6a8-431c-9703-deae49833484", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a634550d-1897-4557-842e-1fdbea6f356d", "sighting_of_ref": "indicator--92cabe46-e6a8-431c-9703-deae49833484", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e771853-01a0-4ed1-9a95-4b4a8e0e97e0", "sighting_of_ref": "indicator--f2bc843b-2b33-4240-b739-e05d6206bfe0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222bbe7f-7f0c-438c-8a77-40d39eefda91", "sighting_of_ref": "indicator--04f1af46-8e6e-4be0-ab4c-1a3662393b37", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fc09ab-5d20-4914-8517-a2169a9764ca", "sighting_of_ref": "indicator--04f1af46-8e6e-4be0-ab4c-1a3662393b37", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d100d2-5da9-4b1b-a738-d0df35fbad5e", "sighting_of_ref": "indicator--04f1af46-8e6e-4be0-ab4c-1a3662393b37", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe38870-d064-48f8-8741-10fc7d2ba47d", "sighting_of_ref": "indicator--fe998354-a6c5-485a-a561-ea9528b8a765", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449266a3-fbfb-4544-92e6-a0ed62989a4d", "sighting_of_ref": "indicator--fe998354-a6c5-485a-a561-ea9528b8a765", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc9c7bd-a8ea-48b4-ad68-5f78cb0d57bf", "sighting_of_ref": "indicator--5e744555-0f69-4a18-a44e-837ccc9e3590", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c3d7ae-c111-4640-92db-cd60e00ee55d", "sighting_of_ref": "indicator--c5902e2c-0269-4f5c-9a9b-5bfd29085b10", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e06f1b-691c-4dd6-a055-d3da397c0cc8", "sighting_of_ref": "indicator--f0a80bb5-468d-4f03-a93d-a96def9000fb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7d7eb4-053f-4ab6-ba53-9ded960dfe5a", "sighting_of_ref": "indicator--c7639fa5-b305-4f75-961f-4394d0b38382", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772e62c1-d182-4666-8277-292d93252fb0", "sighting_of_ref": "indicator--1e313d6b-4f58-4a4e-af4a-5628ec1698e3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc4ebae-e5bf-479b-9b39-e08665029d7c", "sighting_of_ref": "indicator--58be27ed-14bd-4e6a-963c-69ab88b00f2d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49800d7c-c6c9-4678-afde-093e5fcb1824", "sighting_of_ref": "indicator--a2ecc0d6-2204-4b59-9bc9-03fab187dc04", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a3d8e9-5a7a-4d68-8bb2-3e4e69d627ff", "sighting_of_ref": "indicator--96fb253c-afd0-419c-90c5-c2b5cdd04e3f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a3c44f-2859-4c7e-b21a-b17edacd0d91", "sighting_of_ref": "indicator--2908cf57-fffe-4952-a9cc-d14003e5ca2f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5917572c-202c-4570-8f86-8aaa841dc3eb", "sighting_of_ref": "indicator--709dd53d-a825-461e-9ced-47f87d63b712", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56450b8e-59a3-4d57-91b3-9ed14617cc38", "sighting_of_ref": "indicator--6bd73b46-03c0-4f55-9d18-adf635531f45", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b355ee-160c-4ea4-bee8-e727c646ba2d", "sighting_of_ref": "indicator--342a57d3-b6fd-466e-8878-cd1c31349162", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f59293-c222-4941-9c01-132a12e2492a", "sighting_of_ref": "indicator--342a57d3-b6fd-466e-8878-cd1c31349162", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c64d15-5d6f-4936-985a-850a727318a2", "sighting_of_ref": "indicator--26074f7b-48fc-43de-bfd0-e22f6db10e0c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8b7aeb-2cb3-449d-bdfd-4699348b28be", "sighting_of_ref": "indicator--26074f7b-48fc-43de-bfd0-e22f6db10e0c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0c8db5-75ba-404c-9253-95cf74aa4c37", "sighting_of_ref": "indicator--104a24b7-9c2b-4805-b7c4-04ae420587de", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956fbe3b-fe57-40d4-bc69-2ed7456fc54d", "sighting_of_ref": "indicator--3bd41315-8914-4969-b353-8a2e54dffa8b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4270cb-4731-47cc-ab3b-f19b9b8e9681", "sighting_of_ref": "indicator--3d7157c9-200c-489d-9622-887b485f9b3c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d0124c-11f2-4cee-929f-c4fdf6d60993", "sighting_of_ref": "indicator--3d7157c9-200c-489d-9622-887b485f9b3c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481b25fe-797b-47cc-9ea8-a1f815bda489", "sighting_of_ref": "indicator--722b156f-dbd5-4661-94c6-9906181904e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd331fb-abd8-4d32-a8f8-4a0cdc34126e", "sighting_of_ref": "indicator--722b156f-dbd5-4661-94c6-9906181904e2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e8494f-c818-44c2-85f5-914463f495b6", "sighting_of_ref": "indicator--722b156f-dbd5-4661-94c6-9906181904e2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd986bd5-86b6-42e4-a894-8e589c56926c", "sighting_of_ref": "indicator--a9f7a32c-1f3e-4def-8708-58ece88e6336", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a837128-a195-4cad-b356-f10890cb7d9b", "sighting_of_ref": "indicator--6e0a4c89-2dbb-4981-a545-bad7b02c242b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3856c8-19fd-48b3-997f-c0299546b13d", "sighting_of_ref": "indicator--6e0a4c89-2dbb-4981-a545-bad7b02c242b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1801fb5-c3d8-410e-8d1c-3155eeffd941", "sighting_of_ref": "indicator--6e0a4c89-2dbb-4981-a545-bad7b02c242b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538e3a29-a81d-4dd7-986e-9aa0578cc7ee", "sighting_of_ref": "indicator--47f356dd-6600-43ee-b824-6e4217a8da40", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a30d45-201b-49f5-b304-7db880cd4daa", "sighting_of_ref": "indicator--47f356dd-6600-43ee-b824-6e4217a8da40", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2aa173f-c607-4151-9add-1102aaff2385", "sighting_of_ref": "indicator--47f356dd-6600-43ee-b824-6e4217a8da40", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6aefe1f-6c75-48fc-bca6-aac15c1aab6e", "sighting_of_ref": "indicator--e1d54b16-09b2-4ce5-8b65-5318276b98df", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e043d8-ba5d-403c-910a-d44828d97746", "sighting_of_ref": "indicator--e1d54b16-09b2-4ce5-8b65-5318276b98df", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc0f2b3-41d4-45e7-ac70-b698e4c1764b", "sighting_of_ref": "indicator--e1d54b16-09b2-4ce5-8b65-5318276b98df", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6ea8ef-c3fc-4e13-b943-981736f41e2a", "sighting_of_ref": "indicator--04b2805e-114c-4634-ba99-a22a0a2b9fa7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628279d1-182e-4032-aa36-15307c34f21e", "sighting_of_ref": "indicator--04b2805e-114c-4634-ba99-a22a0a2b9fa7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43ee531-74ac-4284-8967-6134b27e4965", "sighting_of_ref": "indicator--04b2805e-114c-4634-ba99-a22a0a2b9fa7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b27014a-a108-44d3-8588-58676474b765", "sighting_of_ref": "indicator--f4c6c160-5bfd-40c4-9778-a18d625b3459", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394f5213-884b-4e71-b2eb-f903b2426f0d", "sighting_of_ref": "indicator--f4c6c160-5bfd-40c4-9778-a18d625b3459", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1a91f9-5c6f-4cba-839d-d778edea189d", "sighting_of_ref": "indicator--df115206-f1de-4525-bb3b-e9f2562c9e41", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf784b7-2a43-4578-ac16-d4d1544c69dc", "sighting_of_ref": "indicator--df115206-f1de-4525-bb3b-e9f2562c9e41", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d164eb-6d6b-4376-94ae-f5692846921e", "sighting_of_ref": "indicator--df115206-f1de-4525-bb3b-e9f2562c9e41", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123e5619-f3ba-4222-90cb-27572c52d0cf", "sighting_of_ref": "indicator--e8b27838-7338-481e-a21d-f2d6972b857a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050b43b0-6c1e-404c-8d29-112baedef90b", "sighting_of_ref": "indicator--e8b27838-7338-481e-a21d-f2d6972b857a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686a91a6-883b-4d2a-8a9b-6fb4d56bb0ca", "sighting_of_ref": "indicator--e8b27838-7338-481e-a21d-f2d6972b857a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c15b7c-f920-4e1d-8c6e-bf83621ba5a7", "sighting_of_ref": "indicator--46025911-c389-491a-8c57-61ddc74847cc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e761a47a-aac0-4234-874b-e21dec26af70", "sighting_of_ref": "indicator--46025911-c389-491a-8c57-61ddc74847cc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839c3557-93be-4984-855a-e39efda5019d", "sighting_of_ref": "indicator--46025911-c389-491a-8c57-61ddc74847cc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8838c15a-376c-49f7-953a-a018287ded84", "sighting_of_ref": "indicator--5b020b04-dcf1-41d9-9a67-4b9f570fffc8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7c0555-1130-4068-a73a-b7b31c50c552", "sighting_of_ref": "indicator--5b020b04-dcf1-41d9-9a67-4b9f570fffc8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f2ccd2-9edb-46b3-bf05-b19c80ea7f3e", "sighting_of_ref": "indicator--5b020b04-dcf1-41d9-9a67-4b9f570fffc8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a46ee28-8317-413a-a9d8-00961d1819bf", "sighting_of_ref": "indicator--b2af5bd1-c962-4f55-b535-43f38301a9c7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6f2c6f-d54e-4092-acca-97b9f48e2d48", "sighting_of_ref": "indicator--b2af5bd1-c962-4f55-b535-43f38301a9c7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d67fba-58f2-461b-8560-29dd80b08e75", "sighting_of_ref": "indicator--6147a9b2-6e45-4065-8d05-fb42ec515326", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d837ae-27e3-4109-957b-7eee9425c8c2", "sighting_of_ref": "indicator--6147a9b2-6e45-4065-8d05-fb42ec515326", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4c4024-6bce-4f0a-ad14-a4a01b6ee3d0", "sighting_of_ref": "indicator--9339aee9-a9ad-47d3-bb93-6cb2fe97d80c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8236063-617b-4294-8d6b-2a8e5a99262b", "sighting_of_ref": "indicator--9339aee9-a9ad-47d3-bb93-6cb2fe97d80c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faec5011-1c3c-4d08-af07-767c3b435fd1", "sighting_of_ref": "indicator--9339aee9-a9ad-47d3-bb93-6cb2fe97d80c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3658365a-2718-4f90-84b1-4ed5934c2b65", "sighting_of_ref": "indicator--59f0c49e-6631-454e-bc70-c3ff9f234435", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df504fe2-b46e-4bf6-99d8-a0174d3329a4", "sighting_of_ref": "indicator--5bda5fa6-7dd4-4832-853d-bfae79ac2839", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790ef9a0-5be3-4ada-89a8-cf1389942e89", "sighting_of_ref": "indicator--782ee98e-1b2f-4ffb-a6c5-66d848faf890", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37e770a-4a21-4baf-85ce-400a86c5104a", "sighting_of_ref": "indicator--782ee98e-1b2f-4ffb-a6c5-66d848faf890", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c231afd-4625-449e-a602-b9abfd77f931", "sighting_of_ref": "indicator--a82f08bc-7e97-497c-a44f-024fe8b87a17", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f89fba-87ce-480d-9a37-b8e2f9a5223c", "sighting_of_ref": "indicator--d6c90170-dcd0-4d3e-b161-387087f0f078", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb77a40-16e6-43d8-9136-88cf354322a5", "sighting_of_ref": "indicator--d6a5c6b1-6c04-4a17-8de4-b1bea4897865", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f3373c-b43e-429b-8788-8e249bb4ee29", "sighting_of_ref": "indicator--d6a5c6b1-6c04-4a17-8de4-b1bea4897865", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c01d0c9-485b-42c4-862f-d3bb2ee569e1", "sighting_of_ref": "indicator--a97f3208-f3d2-42e6-a1e9-1341a3ab40aa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4e7b37-153f-4d51-90e5-2caf303a9e17", "sighting_of_ref": "indicator--b57e3802-51c5-4460-9e60-6afff9a3f93d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6962a0-5574-469c-98e9-f80389b1a7fa", "sighting_of_ref": "indicator--7abf98e9-d433-4af8-b8b9-ac79878d186c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d190926-b0a5-4b4c-9d0a-7bd42996b9f8", "sighting_of_ref": "indicator--d2046cfd-fafb-441f-aae4-e9ed58d6f510", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bbfab5a-e337-43ad-896f-23273786e891", "sighting_of_ref": "indicator--d7a7a103-a4e8-4f78-8f75-71b5c2b1a62c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e418feb0-67e0-40b0-aa1f-ae611cbc76d3", "sighting_of_ref": "indicator--2de6f3ec-d000-47a9-9196-b69f68f84bc3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c068aeb-e7c2-49db-9e3e-a8286342a780", "sighting_of_ref": "indicator--968714fd-8d89-4b82-8e5e-0fe12ffb4e45", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3dba76-2199-4d9e-ae9e-af710622af67", "sighting_of_ref": "indicator--f79c32c0-26c2-4c39-b19d-b3ce43b2e852", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00780b7a-e43c-4dca-9a82-9f3dcd4ff2b6", "sighting_of_ref": "indicator--44db7dd2-ea95-4331-aa43-d1847504ddae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9e9462-5d4f-4b04-8a1b-10dcb413d03a", "sighting_of_ref": "indicator--7d711199-62c6-42f9-a8e6-5df0cc685e5d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c271a78e-2266-4353-9029-7ae8134c397a", "sighting_of_ref": "indicator--7d711199-62c6-42f9-a8e6-5df0cc685e5d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9187778a-56cb-417d-bbb6-51312880afd2", "sighting_of_ref": "indicator--60176784-1968-4a6e-a1d7-8522c6d3927a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c8554b-9435-42b4-8627-1e55c225306e", "sighting_of_ref": "indicator--c77c0d73-a1ef-4029-bf9b-3b151d680c9a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a599d818-bc1e-40d9-94b7-1994d5e76ba6", "sighting_of_ref": "indicator--20ad1076-dcfb-48a4-8dcd-eb537ba41f5e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7866ebbf-afd3-4346-b7e4-bad1000c8c35", "sighting_of_ref": "indicator--9aa24bf8-0e86-4898-9af4-e72ebaaacb6f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a020dedf-fdbe-418e-8fd8-8b1bb4912bc4", "sighting_of_ref": "indicator--888624e4-3019-4b6f-a058-a72a9e9fb79e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61072726-dd45-41fc-9be6-e8aab08eb3bd", "sighting_of_ref": "indicator--dc21940e-ebb2-47e9-a69d-26cea368c267", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7575c2-1b4f-4131-a7ce-1405b562268f", "sighting_of_ref": "indicator--93b5715c-94e8-49e6-8b83-85dc8ec5e651", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7603c7ce-bb3b-46c0-ae3a-d25990f42e25", "sighting_of_ref": "indicator--02d97c29-e9eb-4d45-9d0b-ce4095720e29", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651a0577-53aa-4a53-8554-0129d67cd906", "sighting_of_ref": "indicator--cb7da289-deda-4171-a0b0-bf3f152e9226", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df040bd5-303d-40df-9a91-c6c193bb1669", "sighting_of_ref": "indicator--cb7da289-deda-4171-a0b0-bf3f152e9226", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcc5f04-f240-4bb1-a527-172ed6eea6de", "sighting_of_ref": "indicator--ca230141-3280-4272-8f16-d23f121bc126", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1377516-7703-4156-ab36-01645b3d9d90", "sighting_of_ref": "indicator--ca230141-3280-4272-8f16-d23f121bc126", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d78a1c3-bf82-408d-bd28-c48930d6bb35", "sighting_of_ref": "indicator--a8d5e9e9-c5a3-4a7c-b348-7af602262c70", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80508a54-41f1-4cb7-83d8-5fe12f8608e2", "sighting_of_ref": "indicator--757c09f7-9fcd-4e91-a5bb-379e8163a274", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20840752-a167-45c6-bf96-21cc1fc269d0", "sighting_of_ref": "indicator--eee58de1-893a-4499-85f2-5c15a6837e31", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e91e64-ec55-4f93-9dea-cf9239c193fb", "sighting_of_ref": "indicator--51531fdb-a806-4847-80a5-98b788c49b4e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06ab744-dded-49cb-89aa-0cda713aabb0", "sighting_of_ref": "indicator--83256467-6795-4c7a-88d4-8576ee9bd7ec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c53988-efa7-4d15-944d-e4531bc004a2", "sighting_of_ref": "indicator--e5a7a656-bb76-48a1-9caa-1738734d7711", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a44067-dc71-4fa3-9472-c09e4687ab7f", "sighting_of_ref": "indicator--e5a7a656-bb76-48a1-9caa-1738734d7711", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5392b0a-693b-4b2c-8da2-d3fa8bae6f0a", "sighting_of_ref": "indicator--e5a7a656-bb76-48a1-9caa-1738734d7711", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b734754-6c23-404f-b77a-8d43e67af03a", "sighting_of_ref": "indicator--ee42cdfb-388a-4797-b2d5-26cdb1a69265", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7665a3d4-dc9e-4ff2-921e-d9b35d55236b", "sighting_of_ref": "indicator--ee42cdfb-388a-4797-b2d5-26cdb1a69265", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdfa7d7-fce9-4466-9ac8-83d7d2887a6f", "sighting_of_ref": "indicator--ee42cdfb-388a-4797-b2d5-26cdb1a69265", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37cdb0f-b59e-46ec-a67b-e046bcae947b", "sighting_of_ref": "indicator--e75c33d7-ab68-40f0-9078-4ab47b214c67", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c567ed5-412c-4df1-867f-dc3d0e26cb66", "sighting_of_ref": "indicator--9d495a93-a68b-42fd-afc8-b9b691881864", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ec53e5-6d3e-4004-81a3-9900068a7316", "sighting_of_ref": "indicator--653f3145-2065-46d0-894c-aed4dd1c58e1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687e89f5-2b6f-46db-8344-f2d98d05967e", "sighting_of_ref": "indicator--653f3145-2065-46d0-894c-aed4dd1c58e1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dec9762-3e23-4420-9742-9533a0f67a13", "sighting_of_ref": "indicator--7833e718-b81e-460b-9954-98bfa29dd499", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3badb32-fc5b-44e5-9756-ab5da0e660fe", "sighting_of_ref": "indicator--7833e718-b81e-460b-9954-98bfa29dd499", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19aec6b-a24d-4344-9474-40afd79d7c76", "sighting_of_ref": "indicator--7833e718-b81e-460b-9954-98bfa29dd499", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c832479e-365a-4c65-a2cf-6a025205b64d", "sighting_of_ref": "indicator--ed032b14-0b15-4b49-a755-bf6b59ef3ab8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce1069a-eb66-4d81-b9ac-b57354684216", "sighting_of_ref": "indicator--45c5a777-c3a4-4095-b500-42a1c713ef92", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5452501-6a91-4211-811f-e68eb97c4860", "sighting_of_ref": "indicator--cca028bc-e882-4050-849e-45c204cde5fd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10061e52-109c-4618-bd6b-647d24c3d55e", "sighting_of_ref": "indicator--2e80d0d4-8d15-4993-bba3-25af4e801a47", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96637eb4-2c20-4ff8-836f-c475feb62afd", "sighting_of_ref": "indicator--2e80d0d4-8d15-4993-bba3-25af4e801a47", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415424ff-7241-4ad8-8d2f-5e5d8e42519f", "sighting_of_ref": "indicator--2e80d0d4-8d15-4993-bba3-25af4e801a47", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cdfa59-71e1-4336-ad40-44d4ce289957", "sighting_of_ref": "indicator--a6814a84-7b8d-4d77-ba8b-e4bb315890cf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f814f25f-5bbc-4b05-aed2-812bd1d1a777", "sighting_of_ref": "indicator--a6814a84-7b8d-4d77-ba8b-e4bb315890cf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53348d0f-0daa-4dd5-9e2f-c8b7071a0d86", "sighting_of_ref": "indicator--a6814a84-7b8d-4d77-ba8b-e4bb315890cf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4849c2-bc39-4953-b075-baed7948e769", "sighting_of_ref": "indicator--b598094a-18de-4e88-88ae-b5c764b1c692", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eabf4f9-c890-47cb-9e9d-06dd4c2f2360", "sighting_of_ref": "indicator--b598094a-18de-4e88-88ae-b5c764b1c692", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c335cec7-cabf-4007-a1e4-e5111e8dc08b", "sighting_of_ref": "indicator--4d910992-76cf-492a-be01-0b99028e0eb5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dfc9d8-9c62-4006-be7c-6567ce31950e", "sighting_of_ref": "indicator--4d910992-76cf-492a-be01-0b99028e0eb5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412a25c6-3559-4473-b25b-8f7574d1702d", "sighting_of_ref": "indicator--f6701221-3484-4a4f-8f5d-9b690d0f95bb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7d5aae-2c73-4af2-960a-4905029399de", "sighting_of_ref": "indicator--f6701221-3484-4a4f-8f5d-9b690d0f95bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5e186e-f9d3-4f36-b4fd-2d66d9141818", "sighting_of_ref": "indicator--f6701221-3484-4a4f-8f5d-9b690d0f95bb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f3a220-3ccf-4a27-8c22-8c8a032e4910", "sighting_of_ref": "indicator--9e24116d-0651-47be-bac0-60f69537216d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12703744-2ec2-4216-9094-a902eebc6fc8", "sighting_of_ref": "indicator--bb21b193-b15b-4af6-8c8e-22118561141c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376eb7e1-e734-41c3-b7aa-824b2783e267", "sighting_of_ref": "indicator--bb21b193-b15b-4af6-8c8e-22118561141c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f3133d-9b43-4a99-990e-19381793a8d5", "sighting_of_ref": "indicator--dc3a56a6-d682-4ba3-ae1c-0b59746be4c1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db0d883-0ae8-4010-a491-73fbbb4a64a2", "sighting_of_ref": "indicator--dc3a56a6-d682-4ba3-ae1c-0b59746be4c1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9001ac62-1599-482c-8777-b55b9415faa9", "sighting_of_ref": "indicator--dc3a56a6-d682-4ba3-ae1c-0b59746be4c1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca03fc60-a5ee-4a35-adc1-91dbca8a71e2", "sighting_of_ref": "indicator--8a7c2d2f-ac26-4924-a4fa-91102e2b64ac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ad2c69-4337-4ded-9abe-50cbeb75f713", "sighting_of_ref": "indicator--8a7c2d2f-ac26-4924-a4fa-91102e2b64ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c476d6b-db90-4476-b828-10df0d62194a", "sighting_of_ref": "indicator--9e451305-ba6d-4302-8a26-111e3b4d13aa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa87259-d315-48e9-bd3a-cb95b4e97935", "sighting_of_ref": "indicator--4c5acff2-be0d-4c1e-8505-b0ad2b74187a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80be6ae-0439-437c-aca9-a9ed6aa9ac8a", "sighting_of_ref": "indicator--87dabd19-df6f-4805-8a97-a9573c38cdd9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efacec07-8250-462c-87ef-290865e589a8", "sighting_of_ref": "indicator--87dabd19-df6f-4805-8a97-a9573c38cdd9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b258f85e-a905-4d4b-b168-5547c581e68c", "sighting_of_ref": "indicator--78f2d1e9-7303-4079-9709-f75d65f79eca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557f3cf6-9983-4410-bd34-50cdc0b20155", "sighting_of_ref": "indicator--78f2d1e9-7303-4079-9709-f75d65f79eca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acce9572-7c73-4a0e-92ff-70394ea9b0ba", "sighting_of_ref": "indicator--ad535c63-d240-4fd8-8204-1f5af9bfda52", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af466c7-3451-4204-8b56-aac6f63ae440", "sighting_of_ref": "indicator--ad535c63-d240-4fd8-8204-1f5af9bfda52", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500e1250-a5ee-4a94-b4a5-3a01a97f9f0a", "sighting_of_ref": "indicator--8e97afd2-d4c9-4b06-8635-ac6d5f7b07c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1a7b86-abbb-4549-873c-d6901ddc8dc5", "sighting_of_ref": "indicator--8e97afd2-d4c9-4b06-8635-ac6d5f7b07c7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d746e1-3a43-465d-934a-b6309b68e3b7", "sighting_of_ref": "indicator--8e97afd2-d4c9-4b06-8635-ac6d5f7b07c7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f48f176-8112-4499-b7d5-fd29a81ddb94", "sighting_of_ref": "indicator--460ebff5-1277-4549-8da4-aff7ac02f4d2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393b9cc6-a76a-4d5f-a2f7-4ac05c7db035", "sighting_of_ref": "indicator--460ebff5-1277-4549-8da4-aff7ac02f4d2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03d155c-916a-4ef3-83ae-3813296a8cd6", "sighting_of_ref": "indicator--a54cc870-1209-48a1-b09c-b2abca296c03", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46956968-8b69-4474-a2fb-75e0f271e283", "sighting_of_ref": "indicator--43e48e75-e736-439e-a70b-6c2ed510680a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e6e53c-3f84-4ca9-be6f-3e6c47f00548", "sighting_of_ref": "indicator--43e48e75-e736-439e-a70b-6c2ed510680a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53239dfd-b586-4615-8e29-ed67e1abb080", "sighting_of_ref": "indicator--a74cd323-8e98-4279-a46a-5f349ad678d9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec75f34-346b-4543-b2d5-a8d88be67fb5", "sighting_of_ref": "indicator--a74cd323-8e98-4279-a46a-5f349ad678d9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98e70a2-629c-4e43-ad94-576eac96efc6", "sighting_of_ref": "indicator--1539c537-a135-4058-a348-ed686289349f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46c81f8-f4ea-4f83-b4ba-311d574fe903", "sighting_of_ref": "indicator--1539c537-a135-4058-a348-ed686289349f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93a5dea-5893-4a8f-9e2c-040b03e34be3", "sighting_of_ref": "indicator--ef2aa761-ddf1-47b7-bea2-bf16a20e7b42", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67071ebf-8e5a-4582-9f2a-1b191882cf31", "sighting_of_ref": "indicator--ef2aa761-ddf1-47b7-bea2-bf16a20e7b42", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022e1eb0-fba6-4bdd-a106-3f6f64fccb2f", "sighting_of_ref": "indicator--ef2aa761-ddf1-47b7-bea2-bf16a20e7b42", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0962f6b6-ac9e-4935-b54a-69bcae9bd23d", "sighting_of_ref": "indicator--45964749-6acf-421a-8b56-a151c54dd48e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948c825a-8e78-4798-8ddd-a8e979d707c5", "sighting_of_ref": "indicator--45964749-6acf-421a-8b56-a151c54dd48e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8de093-63fa-4363-9406-b15573e5c984", "sighting_of_ref": "indicator--d814469d-8447-41ff-9a14-280b267120c3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbeec1cc-ff1b-489f-a141-8cbac3fbfa14", "sighting_of_ref": "indicator--d814469d-8447-41ff-9a14-280b267120c3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c497eb18-64b3-4313-845c-0c5f61a82892", "sighting_of_ref": "indicator--d814469d-8447-41ff-9a14-280b267120c3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d7674a-a079-40c6-bc32-28ab1d0f24e8", "sighting_of_ref": "indicator--9af47a06-6aac-42ab-8016-5b4daae5bb95", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81a1fbc-f644-461e-9e16-71b5fa4eca06", "sighting_of_ref": "indicator--9af47a06-6aac-42ab-8016-5b4daae5bb95", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca52045-0e93-4256-b51a-a04db2a3e682", "sighting_of_ref": "indicator--9af47a06-6aac-42ab-8016-5b4daae5bb95", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659255cc-24a4-4b32-9e9d-da17e2a36fde", "sighting_of_ref": "indicator--9f748f3b-8cfa-427f-b294-5b73dc601a12", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebea25d-1e0f-4038-ba83-a5c319e87455", "sighting_of_ref": "indicator--9f748f3b-8cfa-427f-b294-5b73dc601a12", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0812ead0-a294-4f21-97b5-0691feb8a82f", "sighting_of_ref": "indicator--9f748f3b-8cfa-427f-b294-5b73dc601a12", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25839d74-6569-4920-b249-a5c1d73b11fa", "sighting_of_ref": "indicator--6241390b-ce6c-4267-b712-dfb67c7de388", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e75808-7600-4be6-b128-59b32131e416", "sighting_of_ref": "indicator--6241390b-ce6c-4267-b712-dfb67c7de388", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34964848-65ab-4e7b-be4e-4725fd16d495", "sighting_of_ref": "indicator--a3b3d557-9b43-4d6a-81b2-ceab9a5d833e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78a62db-34cd-423d-a9b5-fab532dad52c", "sighting_of_ref": "indicator--a3b3d557-9b43-4d6a-81b2-ceab9a5d833e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a365a4-c983-4d81-b2df-8e28b2b7fce8", "sighting_of_ref": "indicator--a25b77a5-f15c-44bd-a028-dd21811cfb1f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d98603e-7adc-4962-b534-f3f85737969a", "sighting_of_ref": "indicator--a25b77a5-f15c-44bd-a028-dd21811cfb1f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08d5607-be54-4945-8e51-d25ab065be62", "sighting_of_ref": "indicator--a25b77a5-f15c-44bd-a028-dd21811cfb1f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23597c61-bdd1-45b4-9c26-4570c038dea4", "sighting_of_ref": "indicator--2037f8af-4d02-4f02-bfab-a4c44f3ec582", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2d032f-2093-40ac-beab-c7889b4c6dc7", "sighting_of_ref": "indicator--2037f8af-4d02-4f02-bfab-a4c44f3ec582", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3b5c23-84d8-410e-91c2-da6e25163ebc", "sighting_of_ref": "indicator--2037f8af-4d02-4f02-bfab-a4c44f3ec582", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1117b4bc-92a6-49b1-8e48-d2fc995cff8a", "sighting_of_ref": "indicator--93962aca-5362-4c38-957b-e4a22fdb18bf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677ee672-776b-4728-84cf-0558046b2098", "sighting_of_ref": "indicator--93962aca-5362-4c38-957b-e4a22fdb18bf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfb2a9e-d9d6-45e5-9cbf-e13024cc693b", "sighting_of_ref": "indicator--93962aca-5362-4c38-957b-e4a22fdb18bf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8c03ea-13ab-4cda-adb5-093942014357", "sighting_of_ref": "indicator--6ea102c4-f5ff-4d3f-99ca-35b49dd71491", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5d7b6e-daa0-4718-b333-b748e0e47383", "sighting_of_ref": "indicator--6ea102c4-f5ff-4d3f-99ca-35b49dd71491", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5cf9e5-7c73-4928-bccd-6d3669da1e9b", "sighting_of_ref": "indicator--6ea102c4-f5ff-4d3f-99ca-35b49dd71491", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308c1faa-c08b-444a-a69b-6a18944eb834", "sighting_of_ref": "indicator--b96f517e-d887-4008-8fd2-85fa6b75bbf9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a39310-bb8b-41d5-bcb7-d1cd5cc25f1f", "sighting_of_ref": "indicator--b96f517e-d887-4008-8fd2-85fa6b75bbf9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49482dd3-748d-4f9b-8d89-cebf55dce5a3", "sighting_of_ref": "indicator--b96f517e-d887-4008-8fd2-85fa6b75bbf9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a9e999-9710-450f-a9ed-55ed7d5cc562", "sighting_of_ref": "indicator--f4d30c91-6a3b-4d91-8555-344a920802a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbd8310-cf61-4544-9207-bc6dbd36d024", "sighting_of_ref": "indicator--f4d30c91-6a3b-4d91-8555-344a920802a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c989ef-9d03-4140-b7b6-63a82423a48b", "sighting_of_ref": "indicator--f4d30c91-6a3b-4d91-8555-344a920802a7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d72045-f564-4ad8-8b74-d9f6a81e30e2", "sighting_of_ref": "indicator--26c58c48-a729-4585-a218-a0da17fe0b5e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee90bef-2ae1-4483-aa7d-6e88ae2c2c48", "sighting_of_ref": "indicator--26c58c48-a729-4585-a218-a0da17fe0b5e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450496b1-ba58-442f-9f07-efbae697bdec", "sighting_of_ref": "indicator--26c58c48-a729-4585-a218-a0da17fe0b5e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01506200-d85f-437b-8dfc-219ab3013330", "sighting_of_ref": "indicator--7d715f7f-f934-4621-9c05-3f35990dadd0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad37d9c0-e519-4936-9b7a-6195bf88a4f8", "sighting_of_ref": "indicator--7d715f7f-f934-4621-9c05-3f35990dadd0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0d5db0-0e61-4589-b2da-f8ba8e733c18", "sighting_of_ref": "indicator--7d715f7f-f934-4621-9c05-3f35990dadd0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8ecc68-30aa-40c2-b8e6-8c50395d23dc", "sighting_of_ref": "indicator--61a1d27a-d692-481f-bc29-1993d060f377", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f558d5-a43d-446e-932c-1514173117a1", "sighting_of_ref": "indicator--61a1d27a-d692-481f-bc29-1993d060f377", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048fa30a-66cf-41a3-8cef-bf412a9261e4", "sighting_of_ref": "indicator--d137ac4a-ebf3-45ef-92ea-880b97dbc561", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44dda40c-7961-4660-8a66-32b17393cd53", "sighting_of_ref": "indicator--d137ac4a-ebf3-45ef-92ea-880b97dbc561", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb58fde9-0492-4775-9d62-8af97ce1d14b", "sighting_of_ref": "indicator--2154dfbb-5aa8-4537-8cc4-6c36cd2d4cac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310573d7-0479-4b59-b80b-68c07aa4eba7", "sighting_of_ref": "indicator--2154dfbb-5aa8-4537-8cc4-6c36cd2d4cac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b142a4-b10a-4dda-80de-13e0f1c8733b", "sighting_of_ref": "indicator--7b22783e-375c-4ae5-b291-5ae60377df1f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde958d7-4b0c-4e82-881b-080c48c71c9f", "sighting_of_ref": "indicator--7b22783e-375c-4ae5-b291-5ae60377df1f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bae6dde-765d-4c42-988a-86310ccc6ceb", "sighting_of_ref": "indicator--20115c71-a68a-4719-a0fa-7fd9142ef127", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dddd9ba-4f7b-4a88-9c02-fc74bc3dade9", "sighting_of_ref": "indicator--0583d557-4ab0-4307-aaeb-d933995d71e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cef3be5-7b7c-45e6-9a34-e01aa4ecb00f", "sighting_of_ref": "indicator--032d1506-1c7d-4b5d-8e1d-ad298089742f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6f10dc-79c9-442b-9e9c-ad8771aecc5b", "sighting_of_ref": "indicator--032d1506-1c7d-4b5d-8e1d-ad298089742f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f1acf2-36f9-4144-a8eb-51e04966da11", "sighting_of_ref": "indicator--85450254-1946-413a-9d76-b11e8417a7f3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe21767c-9923-485c-9291-8d849df98553", "sighting_of_ref": "indicator--cd0717f1-0962-49ee-b0ba-c7be94655ae4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52aab6a8-a3fc-4716-9bba-b2a1934b96b0", "sighting_of_ref": "indicator--5f2a4030-0a76-4459-954d-05d038eaff55", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21460b90-4bc5-4779-af11-99a6994882e4", "sighting_of_ref": "indicator--06ccf7d8-88bf-43d7-acc0-94929cf4084a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ffbf4e-7d1b-44f7-ac62-5f77230e0960", "sighting_of_ref": "indicator--99694ab7-b7ed-41f5-9cf0-76a26a179db9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407a93ff-282e-4213-af46-1805506d809b", "sighting_of_ref": "indicator--1597e54f-f04e-409b-ab3e-93bf1d71f443", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4334697a-6314-42fb-a913-c15d8b9209a2", "sighting_of_ref": "indicator--a6d82baf-cb50-422b-b14b-81273e391a9c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881af0dc-9410-42a2-8f4e-62073dd4102f", "sighting_of_ref": "indicator--33e80590-dc4e-4a50-9e71-2417a3860e48", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869caefb-9523-426d-9568-9729973f1d00", "sighting_of_ref": "indicator--77c8b66e-8587-46e9-bbc4-0f9ebdde8534", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217954e3-0f13-4ee3-a794-28a927ef4d1e", "sighting_of_ref": "indicator--9bb8aab6-736f-44c9-a79b-7177126ed579", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57228a8a-faf7-494d-adca-485ae9223039", "sighting_of_ref": "indicator--be340c8e-d6a3-4bd2-825e-c384d848dcfc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c57da68-dc27-48fa-ae78-fe362d162eeb", "sighting_of_ref": "indicator--513c1bdf-691b-4ea3-8f67-cf8e557d144d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c72669-d83d-4322-8632-e479e4330f53", "sighting_of_ref": "indicator--513c1bdf-691b-4ea3-8f67-cf8e557d144d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f066fd87-48c1-461f-a03d-e6c5e1abf2fb", "sighting_of_ref": "indicator--eb3cad6f-88df-414b-af29-c04f3b206b7e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbda517e-fda1-4beb-bb2f-4ed6ccb90a2d", "sighting_of_ref": "indicator--33a55779-e86f-432f-994c-dac7681a3868", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e543e79f-6cd8-4de6-a4bb-bc1b39c22992", "sighting_of_ref": "indicator--6509c2ce-3e1e-4df6-882f-253e0cbd21a9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e9fbfc-1e4b-401d-968d-b07049385ddb", "sighting_of_ref": "indicator--6509c2ce-3e1e-4df6-882f-253e0cbd21a9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291e6e87-7c52-4d67-947e-ff1c6e52ccb5", "sighting_of_ref": "indicator--54d164e5-7bd9-44ee-8f7f-79ab63e506c5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4aa354a-c65b-4933-a863-7e284b3c3922", "sighting_of_ref": "indicator--54d164e5-7bd9-44ee-8f7f-79ab63e506c5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1560c743-aa40-4343-ac59-f2bba37facbe", "sighting_of_ref": "indicator--54d164e5-7bd9-44ee-8f7f-79ab63e506c5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f521a4-6b1e-48ff-b804-2e170d649672", "sighting_of_ref": "indicator--83615040-d27f-4dff-8a9b-e6216dfae290", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25d89a7-b4e4-4596-8de3-8c3b850f08b9", "sighting_of_ref": "indicator--68408f2f-ab02-4e9a-a39a-59ae2a6ea3ad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441ceaa7-8f94-4d76-bfb6-f60b5a64f181", "sighting_of_ref": "indicator--68408f2f-ab02-4e9a-a39a-59ae2a6ea3ad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963665fa-5d0e-4ada-8fc9-5faa444d5511", "sighting_of_ref": "indicator--68408f2f-ab02-4e9a-a39a-59ae2a6ea3ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b11c74-530a-4d33-bd0d-0fc7992b52e4", "sighting_of_ref": "indicator--100752b2-590b-49c1-9a14-ebdfe39568d1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d593f30e-2286-462d-acb0-17eb98d1a264", "sighting_of_ref": "indicator--100752b2-590b-49c1-9a14-ebdfe39568d1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0791b45d-9020-44e7-8af1-ceaa222547d9", "sighting_of_ref": "indicator--100752b2-590b-49c1-9a14-ebdfe39568d1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c3d33f-b5b3-486d-8c0d-4686c35abf51", "sighting_of_ref": "indicator--b6c30947-65a8-4e48-9681-0d62490f3008", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4769aab-61ef-4c61-95a6-df3c648b8d5d", "sighting_of_ref": "indicator--b6c30947-65a8-4e48-9681-0d62490f3008", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051aca1f-d8f8-43e5-b661-c3719d0ce089", "sighting_of_ref": "indicator--1d4a043e-f5ce-4d13-a851-15526ed1dc2c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e2b822-f5cc-4018-ae6a-6f0220c49baa", "sighting_of_ref": "indicator--1d4a043e-f5ce-4d13-a851-15526ed1dc2c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d80a302-7f3a-48c5-8344-f5f42d97df85", "sighting_of_ref": "indicator--9d209a4f-b03c-4d5f-a27c-16ad242b05b8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98dff511-70da-4ecd-bc34-1b4f3dc69d13", "sighting_of_ref": "indicator--9d209a4f-b03c-4d5f-a27c-16ad242b05b8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45f397b-77fc-4a19-b6d6-0431ce107e34", "sighting_of_ref": "indicator--9d209a4f-b03c-4d5f-a27c-16ad242b05b8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e97c5c1-4bd9-4581-8685-e9bc8e99d565", "sighting_of_ref": "indicator--ca879f52-535b-4cfb-928b-cc7edc25e9b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6aa82b-6036-4d8b-8864-3b1e592574a8", "sighting_of_ref": "indicator--ca879f52-535b-4cfb-928b-cc7edc25e9b2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a3ac1a-a91c-4654-8ce9-c40be7ffcea3", "sighting_of_ref": "indicator--ca879f52-535b-4cfb-928b-cc7edc25e9b2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3b085d-047e-4c5e-9215-791685dc68e3", "sighting_of_ref": "indicator--85ceff01-da58-413f-9e4b-728f6ba70abf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57bb040-b5f7-482c-a6c9-6fe76e888835", "sighting_of_ref": "indicator--85ceff01-da58-413f-9e4b-728f6ba70abf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10930d87-54c8-4604-832b-73ad7ea3c1fd", "sighting_of_ref": "indicator--85ceff01-da58-413f-9e4b-728f6ba70abf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7227b246-c74f-40b9-90c6-e625351cd73f", "sighting_of_ref": "indicator--f2f06874-961f-4c63-8a4a-93d12c24f766", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ad7f67-3b2f-4330-a757-c9e22083dcc0", "sighting_of_ref": "indicator--f2f06874-961f-4c63-8a4a-93d12c24f766", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea15afa-e48d-4c0d-83c8-6b5b256e23de", "sighting_of_ref": "indicator--f2f06874-961f-4c63-8a4a-93d12c24f766", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3eda223-0ea0-44b4-9c14-92141b76791d", "sighting_of_ref": "indicator--38725a31-62a1-4000-94a5-df50c6e74a14", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0c9502-966c-47cb-b18a-411b31a3d1a1", "sighting_of_ref": "indicator--38725a31-62a1-4000-94a5-df50c6e74a14", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52edde0c-cba9-4f06-867c-e5fb1aac4cde", "sighting_of_ref": "indicator--320833a7-323b-4fb7-afc0-622527b53f5b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612fa21d-5199-4f2c-92cc-c34e3d48ef19", "sighting_of_ref": "indicator--320833a7-323b-4fb7-afc0-622527b53f5b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba528d1-73dc-4bf2-806e-0057131bbf9a", "sighting_of_ref": "indicator--0b3811e5-7afd-4b14-8d7d-6b17ece91266", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6fa931-f415-422f-b0f8-8856f162d73e", "sighting_of_ref": "indicator--0b3811e5-7afd-4b14-8d7d-6b17ece91266", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1606ad-f3db-4467-b934-317592fee71b", "sighting_of_ref": "indicator--0b3811e5-7afd-4b14-8d7d-6b17ece91266", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6a6bf9-2415-4d6c-9181-fe29e29eab60", "sighting_of_ref": "indicator--60b25c37-abd7-4dda-ac83-ba05229ac722", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d226dc-7f54-4fee-89b4-a91b7c0991d9", "sighting_of_ref": "indicator--60b25c37-abd7-4dda-ac83-ba05229ac722", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ea2982-878c-440f-ad5c-4e8ed5837cbe", "sighting_of_ref": "indicator--60b25c37-abd7-4dda-ac83-ba05229ac722", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a91eb7-9ddb-415b-b49c-be9f95684f1e", "sighting_of_ref": "indicator--f814308a-e5d9-43e7-a277-b6b5c39e792c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707a8653-8538-4e47-bc21-8450cc9aa377", "sighting_of_ref": "indicator--f814308a-e5d9-43e7-a277-b6b5c39e792c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d6bf9c-3674-4088-a8b2-208dd2de4143", "sighting_of_ref": "indicator--c03a15ad-f832-49ec-80df-84236601d22b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f70a91b-96de-4542-accd-983f188f73f8", "sighting_of_ref": "indicator--c03a15ad-f832-49ec-80df-84236601d22b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108fbe3a-b7d3-4a82-9aa8-49bc75eb9571", "sighting_of_ref": "indicator--c03a15ad-f832-49ec-80df-84236601d22b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b44235-a6b3-4a5b-b205-366990e117dd", "sighting_of_ref": "indicator--ea5572d7-bfd0-4faf-ba97-850ec955106c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b233177-c238-40e7-805f-c533e27ac8b8", "sighting_of_ref": "indicator--ea5572d7-bfd0-4faf-ba97-850ec955106c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e653831-31b7-41c5-ba98-6411ced7bdf0", "sighting_of_ref": "indicator--ea5572d7-bfd0-4faf-ba97-850ec955106c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b76bf60-a372-4f60-a4b8-8cb71fcb3f79", "sighting_of_ref": "indicator--01204026-e1d6-4ce6-ae38-b2b2937c3cda", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f64759f-82ac-415e-8c44-164b61072564", "sighting_of_ref": "indicator--01204026-e1d6-4ce6-ae38-b2b2937c3cda", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4656b987-fc63-492e-8e1a-fb7c156007c4", "sighting_of_ref": "indicator--58250eba-00f3-4a58-b9ad-520a14b4a55f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e208d4-5edb-4017-892e-b00100c48934", "sighting_of_ref": "indicator--e581da65-be77-457e-91fa-c4146b22ea9f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3043e12-7b56-4a79-a6d7-a6d055d7b047", "sighting_of_ref": "indicator--e581da65-be77-457e-91fa-c4146b22ea9f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeafcdd5-fbe4-4a07-911e-2e01da1b4b3e", "sighting_of_ref": "indicator--9f0f2aca-8cc8-4240-95dd-f801f50e6c76", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4114f454-b165-49f0-9807-4cebd8f75f5b", "sighting_of_ref": "indicator--9f0f2aca-8cc8-4240-95dd-f801f50e6c76", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71000e17-0cd2-4b44-b150-170acbf5b9d6", "sighting_of_ref": "indicator--16c0a494-322f-4889-a98d-f7fad2c01b84", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fb4f9a-d496-4efa-8c5b-ab72d61cd0e6", "sighting_of_ref": "indicator--55a34476-491a-45c5-85a0-47a311b55443", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c6d8b4-381f-4646-bddb-f94031b31ad7", "sighting_of_ref": "indicator--da7ad4cd-dc86-42e7-9ba6-499ca5c3999f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01684ec7-df33-4c1e-8e47-acfb11299982", "sighting_of_ref": "indicator--66a147df-7bb5-4535-9e35-cba4aca86f68", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e1902d-b8f6-4951-bf30-c790d245223a", "sighting_of_ref": "indicator--9673386b-e0b9-4be5-8599-a16090e041a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851bb86d-dac3-47e0-88d2-368eae381834", "sighting_of_ref": "indicator--291cc04d-076b-4e2e-8fb6-78a8b1688833", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4d175d-2192-439c-9fac-341b187e824d", "sighting_of_ref": "indicator--bbf9a3ea-9b54-43e6-a912-f8943e9ca4f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526dd099-7fcb-4098-a1ba-f68b4350f0f7", "sighting_of_ref": "indicator--bbf9a3ea-9b54-43e6-a912-f8943e9ca4f8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82219f41-fa44-4a30-82a2-e7df6b5fc23a", "sighting_of_ref": "indicator--e12ba2b0-2f61-4ab9-a52c-50e93e6e01b9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3523fee-b651-4388-a4bb-aebc0311f0eb", "sighting_of_ref": "indicator--e4cd13be-b35e-4f39-8775-582859997228", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2089a3cf-21e5-458c-a412-67118baba083", "sighting_of_ref": "indicator--e4cd13be-b35e-4f39-8775-582859997228", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86d9edf-0d1a-474a-a429-2e2fe3b3006e", "sighting_of_ref": "indicator--b11481df-3879-4abb-895d-869d66ae0ab8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07f27ee-3519-4568-b7bd-761bde09d7e1", "sighting_of_ref": "indicator--b11481df-3879-4abb-895d-869d66ae0ab8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb153e2-fcd3-4824-8f31-c6549a1e93e7", "sighting_of_ref": "indicator--eb9aa33d-996a-4f20-9af7-a94e19524bea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c304a42-85c3-4b3d-8a8a-915d0a7dd9d0", "sighting_of_ref": "indicator--6b4c5ca9-8d10-4760-afd0-d71cfbfae5fe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1a07fd-eb57-4173-b40c-7a79fbb00c1a", "sighting_of_ref": "indicator--cfdc3c17-5377-47e0-9c0c-cdd4c737f0ae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e42eda-13cf-4854-bc1f-6089460ca85a", "sighting_of_ref": "indicator--6a0d7c7d-61e5-42df-8a2f-fd87382b2a60", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d019cd-9291-461d-9d9e-c88e239a4120", "sighting_of_ref": "indicator--10cd6c5d-9060-4a89-84c3-404164be5ecf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567d7e9f-a257-4380-998b-8ea4938f7a2c", "sighting_of_ref": "indicator--f8bda88a-164d-4281-a030-767c6e2e23d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9ab20e-44d3-412e-a6c0-2c043b30d05c", "sighting_of_ref": "indicator--1a5679ce-6256-4e35-bcbe-d06501d4c8b1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5802982-9bc4-4668-ab8a-2b039dc87ab9", "sighting_of_ref": "indicator--2aa68d7a-c3e5-43bd-874f-ebad866052b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51027324-b572-422b-9ac4-c4467411a937", "sighting_of_ref": "indicator--a8ce6298-5d3a-4386-b833-d9b56bc7d0b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1a0d16-e108-4b86-8600-41becdc6eaea", "sighting_of_ref": "indicator--598a27f8-e2bf-4d05-b7ef-e70b8c99e5e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15bea6a4-ad36-4cfc-9dcd-74b5058cb167", "sighting_of_ref": "indicator--c9666c56-f80b-4b22-8052-7fbcedd8d7bc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c425cdc6-0d97-4469-8b65-09c6c2c1d409", "sighting_of_ref": "indicator--9ae1bfad-591a-40ef-9a09-c43ea5009d4a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9047ed6d-92e0-425a-8193-7da042afef84", "sighting_of_ref": "indicator--b9c72a48-87ac-48ac-816c-dd805c42b056", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21de3ea-17d1-4030-ac2b-bd8bd498debd", "sighting_of_ref": "indicator--40fe059f-beb8-4d57-b539-30c84ab00475", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc16151-47a2-446d-8e92-1b09f99154c6", "sighting_of_ref": "indicator--498f98a1-e46a-4a8b-9812-2636cb074b6a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883f7e57-0e1b-4368-8251-019cffa6de1d", "sighting_of_ref": "indicator--91276539-7752-4c1b-b867-89399a76f56a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef839bc-7629-4556-9148-510ff24b1cbd", "sighting_of_ref": "indicator--c511b7e4-e6f0-4f6b-a8d3-1202721a23e5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddb1e35-d9b0-484c-8485-7b1c75857e47", "sighting_of_ref": "indicator--884711dd-4e72-4d35-b1d5-cd88f856ff10", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243d9d5e-fe60-4f3a-9bbe-6efe49d53cdb", "sighting_of_ref": "indicator--4352c014-dcd8-4e20-abc4-c9e63837a0f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7f5d3a-7a84-4454-9280-6d77d456b3f4", "sighting_of_ref": "indicator--4352c014-dcd8-4e20-abc4-c9e63837a0f8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169b4ea0-bdd3-4c3d-8a9b-975de4bd875b", "sighting_of_ref": "indicator--01d6a65e-cac3-4ed9-ab3f-a984e5a04880", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93de59f5-8490-415c-9d39-36b81d754988", "sighting_of_ref": "indicator--01d6a65e-cac3-4ed9-ab3f-a984e5a04880", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929f411e-f825-4aee-900d-ec46db7de137", "sighting_of_ref": "indicator--b647e5fd-e62c-4e2b-8aee-e181e5d1092c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faacb0fa-deb2-4523-b458-8df9c7449a8e", "sighting_of_ref": "indicator--b647e5fd-e62c-4e2b-8aee-e181e5d1092c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c69d49b-cf62-4035-86a0-90e67da91072", "sighting_of_ref": "indicator--b647e5fd-e62c-4e2b-8aee-e181e5d1092c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15289b2-0fb7-4b15-b679-a7b1abdbc526", "sighting_of_ref": "indicator--9365a3af-07fa-4ad0-98e6-b45d79f6d51c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75732503-52d6-4afb-a586-b5b8a97bcb84", "sighting_of_ref": "indicator--9365a3af-07fa-4ad0-98e6-b45d79f6d51c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72be516a-07d1-40ed-87b0-b24797376c7e", "sighting_of_ref": "indicator--9365a3af-07fa-4ad0-98e6-b45d79f6d51c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0143c0c1-7b5a-48b3-a5a3-d8e5da309425", "sighting_of_ref": "indicator--18086114-b169-4798-9233-dc329a63633f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba05d7c-87b6-4751-83c6-2b9f024b55de", "sighting_of_ref": "indicator--18086114-b169-4798-9233-dc329a63633f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06fa2a0-95a6-4d61-8dd2-0045cab51bd9", "sighting_of_ref": "indicator--18086114-b169-4798-9233-dc329a63633f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940e2f38-fc08-44ea-b8a6-c41e4d9c839e", "sighting_of_ref": "indicator--ac9defec-2f1c-4531-af27-3d228a6b0352", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b7f558-4294-48b9-ac09-ba7f920373a2", "sighting_of_ref": "indicator--ac9defec-2f1c-4531-af27-3d228a6b0352", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37bd493-7f85-4186-a7d6-fe1b37ff5139", "sighting_of_ref": "indicator--ac9defec-2f1c-4531-af27-3d228a6b0352", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d910871-0af6-4019-8e9a-66fd2d478e55", "sighting_of_ref": "indicator--70c15a54-1f42-43dc-aa64-cc26910f2fea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c9df04-e92d-4d3f-8c5b-22f131973d75", "sighting_of_ref": "indicator--70c15a54-1f42-43dc-aa64-cc26910f2fea", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40c47be-d015-4cef-ab93-91643428e8d1", "sighting_of_ref": "indicator--70c15a54-1f42-43dc-aa64-cc26910f2fea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c75200a-7fa8-4475-9434-74c0902cc692", "sighting_of_ref": "indicator--899d372e-88cf-4a4b-aed7-b65cf4deec18", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804a66a6-598a-4a0a-9863-04259883d3fc", "sighting_of_ref": "indicator--899d372e-88cf-4a4b-aed7-b65cf4deec18", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4787ff92-107f-448e-a7fd-473c6497d050", "sighting_of_ref": "indicator--899d372e-88cf-4a4b-aed7-b65cf4deec18", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a66635-20e8-4ff8-b50e-1fd737a5fbcb", "sighting_of_ref": "indicator--4b043fb1-0efb-43b5-9756-f8430a5dbcb1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b380a04-8173-4c3d-8dfb-2db26ef89d9d", "sighting_of_ref": "indicator--4b043fb1-0efb-43b5-9756-f8430a5dbcb1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5747f9b-4599-46da-84b3-077d8c23362a", "sighting_of_ref": "indicator--c2178c07-85c7-4273-85bb-b3022ce240b3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac2aef6-9773-4ab2-9606-bba4537b9032", "sighting_of_ref": "indicator--4d517195-7ad1-40e1-99b9-d276ea57a30a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa0a1e3-3d5d-4348-beec-784959b248d1", "sighting_of_ref": "indicator--4d517195-7ad1-40e1-99b9-d276ea57a30a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc763a0-3693-441e-9271-5492398ed47d", "sighting_of_ref": "indicator--4d517195-7ad1-40e1-99b9-d276ea57a30a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8283131b-c065-4504-81f8-383dc81e48bd", "sighting_of_ref": "indicator--51eb6a74-2e38-4161-9e7d-2e9aab18b23b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a41205-ecb1-4f78-8b8e-18337a8d1146", "sighting_of_ref": "indicator--1d106c6e-a276-4430-a8ce-ff197898b9b6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e924bc9-e85a-440c-a877-42c6e7431007", "sighting_of_ref": "indicator--d9bad804-3f4b-44bb-b495-e8ca8f6b8382", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3690eb39-7202-4e87-9156-67b63a864aaa", "sighting_of_ref": "indicator--e3058515-1238-4d91-806a-2d3706412ecc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c57ee8-3acc-4b91-a1da-f0549b08718b", "sighting_of_ref": "indicator--e3058515-1238-4d91-806a-2d3706412ecc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031a5c5f-d419-46ba-a6ba-d699b410b302", "sighting_of_ref": "indicator--e3058515-1238-4d91-806a-2d3706412ecc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79733e6-61e2-4de5-85fd-e96244496f10", "sighting_of_ref": "indicator--e85eb824-f711-4367-9286-8026d216fc9f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f414cf7-810d-4b9d-81d5-a19428d853d7", "sighting_of_ref": "indicator--f0ef5260-23f3-478f-a83b-3b67ec53709c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f62fe1-0242-413b-8c43-18b94b730468", "sighting_of_ref": "indicator--f0ef5260-23f3-478f-a83b-3b67ec53709c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9acb3ca5-4b25-428b-a80c-d5a05e72ab1e", "sighting_of_ref": "indicator--ec94e2a5-6a4b-4e4e-9a55-7cdc1d0a8d48", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619d30b9-2c72-4fa0-8f2a-af2cb48089f9", "sighting_of_ref": "indicator--ec94e2a5-6a4b-4e4e-9a55-7cdc1d0a8d48", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f491ff3b-82fd-4fe2-8459-c9c6dd0f1d97", "sighting_of_ref": "indicator--12ddddc4-9450-4f7d-9b49-f895d04d48d4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a27f512-4033-4e40-bf57-4f5adf4ef4d0", "sighting_of_ref": "indicator--12ddddc4-9450-4f7d-9b49-f895d04d48d4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8257b812-cec4-4eee-b054-fd02fc8694ea", "sighting_of_ref": "indicator--12ddddc4-9450-4f7d-9b49-f895d04d48d4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ccc33ad-4ba7-477a-82f1-c137a61c1912", "sighting_of_ref": "indicator--72796e89-bfa8-44cf-add7-9e6595515ac1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bec8a1-85d6-4646-b1ca-86f26ea162e2", "sighting_of_ref": "indicator--72796e89-bfa8-44cf-add7-9e6595515ac1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed47bbe8-7104-46ed-a312-f864725bf6c6", "sighting_of_ref": "indicator--72796e89-bfa8-44cf-add7-9e6595515ac1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae9b2a9-ede8-4a35-99ae-be9913a0110f", "sighting_of_ref": "indicator--78db589f-e79e-487e-b7b2-3a528641be8d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00c5c97-eefb-4cf8-9910-dc0ef55d22fe", "sighting_of_ref": "indicator--78db589f-e79e-487e-b7b2-3a528641be8d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9816ac-1914-45a1-ad41-4bd46e388da3", "sighting_of_ref": "indicator--78db589f-e79e-487e-b7b2-3a528641be8d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66da4ece-0afc-48a8-9e63-f4d9b55da862", "sighting_of_ref": "indicator--8b11aed7-9820-4bb6-ab45-236bbbbe5697", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2848a6-4698-4f5c-98ca-b56613d082b2", "sighting_of_ref": "indicator--8b11aed7-9820-4bb6-ab45-236bbbbe5697", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe64d8c-0df8-4ea0-b46f-a55dfbf39b1b", "sighting_of_ref": "indicator--57d137a3-5990-4f66-8d1d-98ab3aad2bde", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e02ede7-bb5c-4c91-8820-1286a6022d1c", "sighting_of_ref": "indicator--57d137a3-5990-4f66-8d1d-98ab3aad2bde", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a3156d-b993-4df1-9bff-bf26dc9c13f7", "sighting_of_ref": "indicator--4fca31c8-e802-4963-a419-21b215510bfc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d0e96a-508a-4d3b-be2a-5d1e326a64e6", "sighting_of_ref": "indicator--faa0f12e-0ce3-49e3-93f9-0b45f42d5e54", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5ef619-8c54-4bf0-9a14-f0eddb2ee5c4", "sighting_of_ref": "indicator--233f73f7-2823-4035-92af-beb081f9c058", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a51664-c429-4f80-95ce-bf2855f5b6d2", "sighting_of_ref": "indicator--10529f5c-c678-49f4-80df-402d23a5c43c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d322a1-39fc-4448-ab6c-1e5457c4e6da", "sighting_of_ref": "indicator--73dc0625-1816-4283-aeba-38728a586928", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfbbada-0af2-4bf8-bdd0-aef5f9e7c41e", "sighting_of_ref": "indicator--dd8504b1-f2af-4ab3-b1bb-46a2bf0fe9fd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f066171-7545-4df3-a239-a266aeebd6b0", "sighting_of_ref": "indicator--7f25c4e3-3252-4732-8520-952c6473b542", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4a94e8-9724-449f-adb5-68ab02008042", "sighting_of_ref": "indicator--62f7377e-dbe3-4465-9cf3-176a180efad5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf97ae7-e44c-494d-ba7e-9661e8b959a4", "sighting_of_ref": "indicator--62f7377e-dbe3-4465-9cf3-176a180efad5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c371d8-247b-4163-8a94-45b4ddb8ea89", "sighting_of_ref": "indicator--62605c8f-b88c-440c-94ad-defd0f4a9334", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbe8981-76bc-49b6-a4d4-b8a220e32f40", "sighting_of_ref": "indicator--57519a6e-044d-4ef3-b15b-9b445b0f843d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c08cae-66f3-46fe-a5c9-d6b2636ac5ba", "sighting_of_ref": "indicator--48199cad-07f3-410e-b754-ba643c81e0c8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690eb789-da3e-4415-86f7-4b0976ba48aa", "sighting_of_ref": "indicator--48199cad-07f3-410e-b754-ba643c81e0c8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7f4874-2629-4bc2-a7fa-d67eb90a888c", "sighting_of_ref": "indicator--5848d4cf-5dab-4fe6-9c1f-eddd61b93786", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9874b193-678c-4799-98fc-1ff40ea5102c", "sighting_of_ref": "indicator--5848d4cf-5dab-4fe6-9c1f-eddd61b93786", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c509f8-4fa6-4179-ba0f-a4bfa71ad646", "sighting_of_ref": "indicator--3764fcd1-0f1e-4323-b532-92024ec77d89", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55892745-4b46-461d-b782-974f47e2926a", "sighting_of_ref": "indicator--3764fcd1-0f1e-4323-b532-92024ec77d89", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958cefff-50a5-4c3c-984d-29f9c2aeea19", "sighting_of_ref": "indicator--3764fcd1-0f1e-4323-b532-92024ec77d89", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdac983-fb1b-4685-9ff7-ede3cfcbca74", "sighting_of_ref": "indicator--5af328c0-bcd5-4a06-ab69-08a19bdb177f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2824b5b1-3702-476e-a5d2-400d59ee2a6e", "sighting_of_ref": "indicator--c4cabf24-1c56-42e7-8642-4cba5a17d7d2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec6c73f-717b-4e39-b063-a47f8103db5a", "sighting_of_ref": "indicator--c4cabf24-1c56-42e7-8642-4cba5a17d7d2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7dfc23-ed22-4c1b-967c-f7840fc37727", "sighting_of_ref": "indicator--c4cabf24-1c56-42e7-8642-4cba5a17d7d2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd17d0d2-38fe-4a06-8625-60fe1cd57ff2", "sighting_of_ref": "indicator--3d50fe71-6c9f-4c41-9eb0-8deb7d4dec8c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a823547-8911-4715-b8db-450ecc942a12", "sighting_of_ref": "indicator--3d50fe71-6c9f-4c41-9eb0-8deb7d4dec8c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c87300-d5ef-4e8b-9a0c-04afc0661fcb", "sighting_of_ref": "indicator--f2eb4937-bcc3-4bf6-8ef4-c1584837a748", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d02c40-329c-41f1-9338-c5b494b66fff", "sighting_of_ref": "indicator--4d697e52-1806-4a24-993f-d8d839045bbf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0728f91-3468-448d-b68c-182c2ad86ca9", "sighting_of_ref": "indicator--ade72719-0d2d-49ea-9545-a4aec523b1c1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9f491e-682b-4914-b18f-775a5356733a", "sighting_of_ref": "indicator--ade72719-0d2d-49ea-9545-a4aec523b1c1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600f96fe-b0c0-49a2-b653-3b4526314861", "sighting_of_ref": "indicator--69d2e52b-69b2-4900-b6df-d441c408630b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be53829a-1db9-4c4b-9d8e-736fef734bc1", "sighting_of_ref": "indicator--9d2e5368-ede3-41ae-b463-7b572902b80c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbfebca-d468-4cda-8452-39e7c187b0d0", "sighting_of_ref": "indicator--298b0f1b-bc85-493b-8d3e-e2b05f05074b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e191d40-b331-4792-98b3-d195873a3650", "sighting_of_ref": "indicator--b53108a6-0c42-4f03-862f-3526eaee717e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568d3ea1-af47-48dd-baf7-ac02081e475b", "sighting_of_ref": "indicator--2d2e49f5-d261-4d6a-ad95-2b2d06b7514d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbb07cb-334b-4a2e-a4d6-c59b59401527", "sighting_of_ref": "indicator--454820fc-5980-4493-819a-28f6a7d8f7f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eace768-77c8-4e91-83b3-d69e4abc45f2", "sighting_of_ref": "indicator--8835d28c-ba9b-413c-a1c8-e050860a2ca9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c176f9e2-8eff-4a44-8098-17cb637cfc90", "sighting_of_ref": "indicator--8835d28c-ba9b-413c-a1c8-e050860a2ca9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4548fa7-053e-40c0-9937-6e4d7cbe2bed", "sighting_of_ref": "indicator--e8ab84a6-624b-4938-af95-9866d1921db8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd51d164-dda0-4178-bdb3-98907a0707b8", "sighting_of_ref": "indicator--a32197a5-2d1e-471c-818a-20b93857e408", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4414a6-4b12-4de0-b409-0909f28457af", "sighting_of_ref": "indicator--8bfbe1f4-2adf-4138-a287-5906ed7aa6f7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c298c0a9-5685-4b05-acd5-45d8e2861ff3", "sighting_of_ref": "indicator--8bfbe1f4-2adf-4138-a287-5906ed7aa6f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869d6850-ed7d-4f5c-809b-50bbe4f170dc", "sighting_of_ref": "indicator--8bfbe1f4-2adf-4138-a287-5906ed7aa6f7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647a9eb3-2cda-421f-9301-c011a6783cfe", "sighting_of_ref": "indicator--4292cfc7-30d6-4530-afed-d317f569ab48", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccd6159-7978-4904-a1dd-f7519606a59d", "sighting_of_ref": "indicator--4292cfc7-30d6-4530-afed-d317f569ab48", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985fc962-f16b-421d-b634-552cc5b1e29f", "sighting_of_ref": "indicator--4292cfc7-30d6-4530-afed-d317f569ab48", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b6f424-bb03-445d-9e42-527e6f232a5b", "sighting_of_ref": "indicator--f7903639-7888-434a-a7f6-cc7550d5b99c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea665650-7257-4a50-86e6-b88fd08ad3ca", "sighting_of_ref": "indicator--ebb893ec-5b03-413c-a869-bc3499bc4299", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e613a18-fffe-4097-b63a-bd8b1e5ff7e3", "sighting_of_ref": "indicator--64ff3fb5-28e8-4f36-8492-a3201b23d439", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f81330-f686-4619-8c83-a79c8f70167a", "sighting_of_ref": "indicator--d5ac69d6-124d-4585-ae47-89191cf87e5b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6490ddb5-8df2-43f0-ae28-91382c9df656", "sighting_of_ref": "indicator--8f392a53-b6ef-4ab4-9f97-5c4ff69feed3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4a40e8-6f3d-4409-b678-9e6a4f1a2eae", "sighting_of_ref": "indicator--5dfbcb3a-4251-4dae-ac46-8daf03ad4c7f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2fa63a5-aa1d-4240-bf36-7e03e38f9f19", "sighting_of_ref": "indicator--062cfaa3-644b-4323-84c5-e1fc114de69a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca03118a-5c35-4dc5-806f-5c7e832726b9", "sighting_of_ref": "indicator--062cfaa3-644b-4323-84c5-e1fc114de69a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36f5925-282f-4107-93ec-65380e1cb2c1", "sighting_of_ref": "indicator--e9df9dd5-89e5-45dc-8ea5-8d8af23b9750", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237b86dd-dd79-42bc-a0f2-5c6c5aa1da32", "sighting_of_ref": "indicator--fee7a9f6-f9e4-4837-aa11-e0814cfe0ae6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbd73f6-4206-4c21-ad0c-46b30b8bc4c1", "sighting_of_ref": "indicator--6d6a6a38-5e56-44b3-aa35-c6b03b799f94", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9129da1e-0506-4b92-acd8-e8a7acc40bbc", "sighting_of_ref": "indicator--0e3f2d7e-b7fc-4034-addb-2dc233a772ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6669b15a-4b2c-478c-86a1-251a1d3d085a", "sighting_of_ref": "indicator--e7b3aca3-4f43-433e-bba9-393ec7d9846a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736795cc-f773-4473-b83f-4b1fbc22c7fb", "sighting_of_ref": "indicator--625761cf-4e83-4a14-ba04-5f2e84b6b8db", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f41a10-36db-45b2-8537-8c99bbb2a6df", "sighting_of_ref": "indicator--625761cf-4e83-4a14-ba04-5f2e84b6b8db", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff9c553-f191-42c5-81ad-84ef7e846ebc", "sighting_of_ref": "indicator--625761cf-4e83-4a14-ba04-5f2e84b6b8db", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d09b33-8930-4f0c-a72b-5f1f24c064c2", "sighting_of_ref": "indicator--0c7123ec-d66e-47a6-a03f-e8ff6d8b89d9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c329c32-5d7e-460a-b4a8-88307a5a4bc1", "sighting_of_ref": "indicator--0c7123ec-d66e-47a6-a03f-e8ff6d8b89d9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e3c1a5-f1e9-4865-bb76-536500761746", "sighting_of_ref": "indicator--0c7123ec-d66e-47a6-a03f-e8ff6d8b89d9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bbf4eda-443f-4486-b034-eeed37ff6539", "sighting_of_ref": "indicator--a17263a6-149c-477e-b7cf-77cd725dd758", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84e0f3f-978a-4ba3-8172-cc4a33375115", "sighting_of_ref": "indicator--a17263a6-149c-477e-b7cf-77cd725dd758", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2929e37-5a19-40e7-84e1-e0956670ba08", "sighting_of_ref": "indicator--3d50bf9c-ee59-4c30-8ec0-e913033471a4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f9fd21-010c-47ea-8f5c-6583750ee17a", "sighting_of_ref": "indicator--3d50bf9c-ee59-4c30-8ec0-e913033471a4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b968e6fb-b1dc-420a-a454-574b969abc61", "sighting_of_ref": "indicator--9138c028-1aac-439f-98b1-4f3aad1452b9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b9090d-8b1a-404e-9a2e-0de842d3f337", "sighting_of_ref": "indicator--9138c028-1aac-439f-98b1-4f3aad1452b9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f427bcea-7f43-4dd8-bb02-0d437d377f5a", "sighting_of_ref": "indicator--f0354aca-15f4-4f46-a2d0-8c7d2fc4201e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2381ce16-685b-47cc-8056-495f426c7893", "sighting_of_ref": "indicator--f0354aca-15f4-4f46-a2d0-8c7d2fc4201e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2433084a-7c37-4c26-88c9-b113e07f19d4", "sighting_of_ref": "indicator--74e32454-d3da-4ec6-8d4e-55b86f9fb197", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cce9f1-a3b3-4275-ae4c-6a3098e95ce2", "sighting_of_ref": "indicator--eebb6ec3-afdf-466b-92e9-9304069ec842", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5494767b-e4dc-4af2-ab68-2e5cde2ff3b6", "sighting_of_ref": "indicator--d3643516-3b3b-411b-a626-560f964c32a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1b94d3-3ea1-4515-92dd-7579a197dece", "sighting_of_ref": "indicator--9beb04b1-a99a-45b4-b011-7b8f3f522a28", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6051aaf4-7182-4c6e-bd75-36f47886c3e6", "sighting_of_ref": "indicator--9beb04b1-a99a-45b4-b011-7b8f3f522a28", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a1a9fe-6d13-46fb-b47b-1dc19b868133", "sighting_of_ref": "indicator--9beb04b1-a99a-45b4-b011-7b8f3f522a28", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6423919e-c7a1-414e-8a70-8582cf1faeb1", "sighting_of_ref": "indicator--65ba1142-5261-4887-971d-66be5cc54702", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb791aa6-6f85-4061-9e24-73fa3ba040d0", "sighting_of_ref": "indicator--a732dfb9-d7b8-4ff4-b6cb-cf967948826e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad44c91-cbac-48a3-ab12-fba70be4d694", "sighting_of_ref": "indicator--1ed45e0e-d941-42ee-84fa-aec176c65654", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d38b7c-cba4-4b4e-aa12-8e0dcf688a49", "sighting_of_ref": "indicator--efc49d56-e922-47f9-afb6-edf4028f946e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257c045c-48d7-426a-ab9f-f1f3768b4093", "sighting_of_ref": "indicator--f7b2c3ac-e1ae-470e-b4e4-cc9ed174beb8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafc5189-cd37-485f-8c34-07c4b2c64c5b", "sighting_of_ref": "indicator--736078e1-a751-49da-ae03-672c24ceb616", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8c6b34-9801-4a7c-950f-513ac9aba7a9", "sighting_of_ref": "indicator--0e81d1a3-d4ca-43db-85fb-ccd375102faf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2356c96d-efec-41d3-a471-6e2c042a96b5", "sighting_of_ref": "indicator--0e81d1a3-d4ca-43db-85fb-ccd375102faf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1654b4-5045-4eac-9ba1-db1992be3d1c", "sighting_of_ref": "indicator--5a717549-a6b8-46f3-b284-b7c411ca57dc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9856ecb-5832-42d3-a033-7f126da60e4c", "sighting_of_ref": "indicator--fb48ef40-0e49-4fe8-881a-0cf2e5c7a102", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07452148-ee74-4e06-8238-c0a418766d91", "sighting_of_ref": "indicator--83abee1b-d004-4154-bcfa-0d4bc47fc155", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9210535-ecd5-4586-8901-595bac1e341b", "sighting_of_ref": "indicator--a7708700-39ac-442d-ad15-280ae8b72e15", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b7ce08-2ad4-4b5b-8462-bc608858b604", "sighting_of_ref": "indicator--33a85488-84d7-48be-bd14-f0bf433025b2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd19c0d9-de43-4653-9a4e-13775fe7bf09", "sighting_of_ref": "indicator--2896f294-79bb-4db4-b1e4-9f09c77e6153", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f29515-7872-4070-b059-1d46f47d87a7", "sighting_of_ref": "indicator--9963a9ea-b6d2-44ec-8fa6-c0adbca5b3c5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70f3370-53d3-4970-87cd-5796f3043df2", "sighting_of_ref": "indicator--2fd03a87-451a-49d0-9510-5ae6b9c5b253", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0e4d0b-0014-40be-b9fe-d920bfac512f", "sighting_of_ref": "indicator--2fd03a87-451a-49d0-9510-5ae6b9c5b253", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1231c4-776d-4adc-932a-0cecedef0f3c", "sighting_of_ref": "indicator--2fd03a87-451a-49d0-9510-5ae6b9c5b253", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93b59b2-3246-4408-926d-303359e9dabb", "sighting_of_ref": "indicator--11988266-5b5f-445c-b572-c1266d41fd6c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405b838e-9963-4e05-822d-35e7599c706d", "sighting_of_ref": "indicator--dfab0b9e-5b17-4b92-a97f-a0feab42d2c1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0e0c18-4039-4f51-a180-872a688889b4", "sighting_of_ref": "indicator--b825f04d-e473-4231-8912-c313bd9826f5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2989bae6-d187-4aed-93aa-0e22f22b76ab", "sighting_of_ref": "indicator--66a706b1-c7b5-4311-96d6-eb7dde35b026", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc1ecf4-5a73-489b-a3dd-0272f2f3bf3b", "sighting_of_ref": "indicator--8867d0a5-e771-4b99-a273-b8bfce94d1c4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eaa4157-13d4-4548-919a-626dc966479c", "sighting_of_ref": "indicator--aa1f1826-cf91-4236-ab51-ba2f921f0d94", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218c9c0c-7cd1-409f-b092-fe02a3e4c827", "sighting_of_ref": "indicator--9b616ae5-f5b5-4282-9ae7-ac297aa11a3b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32749ee6-0b1c-431a-aa13-bcab01e07e65", "sighting_of_ref": "indicator--bf678c9b-870e-4ee5-8d88-f1c3a616c900", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4a8d92-467b-491c-a500-6a74c504c1c7", "sighting_of_ref": "indicator--335db849-c15b-4fe7-9855-2cfa2a71996f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ac9efd-ad8e-4d88-bc4d-f283323f52e7", "sighting_of_ref": "indicator--5193b9c4-17f7-4ee4-89d5-a5e85951345c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a237d57e-ba0d-4ff2-9c31-fef89913f6de", "sighting_of_ref": "indicator--76a04295-0562-45bc-b0bf-b867f88a26d2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2dc8241-517c-41d1-995b-a2c663480dde", "sighting_of_ref": "indicator--824aea95-5d54-45ea-97ca-0ae75fd9cb51", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ad31ab-3700-4f67-9346-d90451e8f64f", "sighting_of_ref": "indicator--76ea7909-03db-4053-8fec-380ce7799782", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c141816d-7e08-458f-ad2a-a22622d31e92", "sighting_of_ref": "indicator--0f801a4e-a6a4-40a7-8d88-5eb14c9a9a9e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8513ea9a-c7f7-41d4-aaba-18f33d82071e", "sighting_of_ref": "indicator--0f801a4e-a6a4-40a7-8d88-5eb14c9a9a9e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82665b14-b20b-4c63-bb3c-f76c8b432766", "sighting_of_ref": "indicator--5df47a80-376c-4e68-8606-4631cdf7f49b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbce320-69ec-4f1d-8375-77cc3e106142", "sighting_of_ref": "indicator--5df47a80-376c-4e68-8606-4631cdf7f49b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b591d2a4-09b2-4922-8d05-2a4deeb6ceeb", "sighting_of_ref": "indicator--4f611db9-92b8-44b3-bd6a-75de44f8dffc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b12209-3dfd-42a3-ae3a-a9522cb3cc73", "sighting_of_ref": "indicator--11483ea1-4e80-4457-b6ad-e0b0a6daf35d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f18ea9a-be0b-4f07-b665-d89f2fc07f8c", "sighting_of_ref": "indicator--793c8d5c-6113-4cb1-b2c6-314b2fb19be4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bb52b4-d142-4a0a-b1c0-fae489a9ecf7", "sighting_of_ref": "indicator--793c8d5c-6113-4cb1-b2c6-314b2fb19be4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6828b9-4548-4023-96f3-ff86c2412d0a", "sighting_of_ref": "indicator--0e70ed1c-6794-4f3c-9a91-894b93962298", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b4f71d-0f58-4819-a806-4cd88af20b58", "sighting_of_ref": "indicator--0e70ed1c-6794-4f3c-9a91-894b93962298", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0133803-6a8e-4817-afeb-ddb0528e0058", "sighting_of_ref": "indicator--813a2cf5-55c5-4497-aea1-ae85b8c51f55", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e66d85-2289-4bdd-8d30-c0bc6fcc849c", "sighting_of_ref": "indicator--813a2cf5-55c5-4497-aea1-ae85b8c51f55", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1755646a-db65-4681-b9fc-c5ec55a939f4", "sighting_of_ref": "indicator--813a2cf5-55c5-4497-aea1-ae85b8c51f55", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd15ffc7-7e4e-4b73-a52f-aa3529903309", "sighting_of_ref": "indicator--1bab8f8c-cf76-4281-8e99-a86c99fe5ede", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec042f27-9da7-4d5d-abf9-204e4045a416", "sighting_of_ref": "indicator--1bab8f8c-cf76-4281-8e99-a86c99fe5ede", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc6ce73-8d78-441b-b681-46d04c75e1d1", "sighting_of_ref": "indicator--5ee844ae-f396-492f-82b8-44e397bf375d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5928c076-efe0-44e9-9e26-ead962dac881", "sighting_of_ref": "indicator--8f0a691b-8404-420f-be51-4b29fed3b784", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d2c71d-ccd5-46b5-b7d6-6f04eb9d8d77", "sighting_of_ref": "indicator--06bdfb7c-330c-448c-8ed5-779fddf8fa46", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f1e6d5-aeb5-46c9-b9d4-4fadbbdb90f5", "sighting_of_ref": "indicator--a07ce4da-55ac-4073-9010-421161a4bb89", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c55df8-9839-41eb-901e-372f233bf95d", "sighting_of_ref": "indicator--4cb97bc5-b164-45c6-813b-81030e93b236", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a853d107-f3b9-47f1-9fe9-0b7be87f5c41", "sighting_of_ref": "indicator--4cb97bc5-b164-45c6-813b-81030e93b236", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107018a0-a30e-4849-a349-aaad96cdcc90", "sighting_of_ref": "indicator--b1f1245a-3408-416f-868f-3a3f3a257431", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f28a837-afdc-4414-828c-171fbfadbe21", "sighting_of_ref": "indicator--54ff331b-8157-450c-ba3e-eaff0ddd8fe8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd979cd0-7552-48c9-90bd-24af0c43530e", "sighting_of_ref": "indicator--54ff331b-8157-450c-ba3e-eaff0ddd8fe8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4624b459-05c0-465d-97f0-aeed88dfa68a", "sighting_of_ref": "indicator--54ff331b-8157-450c-ba3e-eaff0ddd8fe8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29928fd8-a222-48cd-aef5-d5956d6a99ca", "sighting_of_ref": "indicator--8b3bbbab-9aea-42bd-85e8-6e8eb8124f6d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eaac8db-11e6-4123-8da9-c7cbaad41d89", "sighting_of_ref": "indicator--8b3bbbab-9aea-42bd-85e8-6e8eb8124f6d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6ff1fc-4905-47eb-81c3-3ea2ca22f20c", "sighting_of_ref": "indicator--8b3bbbab-9aea-42bd-85e8-6e8eb8124f6d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc7509b-8f1c-4182-919f-cee944d72863", "sighting_of_ref": "indicator--bcd4fa74-69a7-4b76-ab2f-4d3dba1284a5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95daa460-b446-495b-a70d-830a0c5d7eeb", "sighting_of_ref": "indicator--bcd4fa74-69a7-4b76-ab2f-4d3dba1284a5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed946c71-2a99-444e-93af-9477e1b5268e", "sighting_of_ref": "indicator--da6ce57c-265c-4b1d-8d04-fc5fadf97fed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8dc35c-e2a6-4aef-a4bc-d762eaaa87a5", "sighting_of_ref": "indicator--da6ce57c-265c-4b1d-8d04-fc5fadf97fed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e5a93d-7731-4581-aaf0-eef0a68e920c", "sighting_of_ref": "indicator--da6ce57c-265c-4b1d-8d04-fc5fadf97fed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2051af-0d78-4525-a33b-0dab7cdedf9c", "sighting_of_ref": "indicator--ed83b4ff-3153-4b33-b817-40f21bcb746b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21be2c1f-d433-4832-8c66-2f7f3df06eef", "sighting_of_ref": "indicator--ed83b4ff-3153-4b33-b817-40f21bcb746b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331bc926-656d-4f24-bfab-4b0aaaa1e9ba", "sighting_of_ref": "indicator--87e18e12-cab5-4a2b-8176-5e2419a0260a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ee6e1a-473d-412a-a6c0-99cd3cf01b9d", "sighting_of_ref": "indicator--87e18e12-cab5-4a2b-8176-5e2419a0260a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b9d3fa-f4b4-47a5-89a9-71ec55f5aaf1", "sighting_of_ref": "indicator--87e18e12-cab5-4a2b-8176-5e2419a0260a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13c8a15-4403-4fde-91a0-2b4874a27f9b", "sighting_of_ref": "indicator--1d865968-2f25-4b13-97e8-9ab112eeaae5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8bed26-6505-41d0-a85a-65bd269e667a", "sighting_of_ref": "indicator--45afd6b3-e975-45f3-9148-ab4de9126e6a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117b6e6a-6cab-47e2-8c0c-15d5c3c94251", "sighting_of_ref": "indicator--45afd6b3-e975-45f3-9148-ab4de9126e6a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b95da5f-a367-4ed3-a432-998f4e819ed3", "sighting_of_ref": "indicator--c933e7b9-ba56-4938-95ba-8e72989dc4e8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d43b1a-0e6b-425f-9405-e109e14db85f", "sighting_of_ref": "indicator--c933e7b9-ba56-4938-95ba-8e72989dc4e8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941704bd-0407-4f06-81c0-1ab0016c317b", "sighting_of_ref": "indicator--42541097-5c14-4ab6-aea1-50c0099632ca", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cefa620-0817-4e5c-a160-89a3ac8b8c1e", "sighting_of_ref": "indicator--42541097-5c14-4ab6-aea1-50c0099632ca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c961300-6068-4ebe-b976-d073f1639e9f", "sighting_of_ref": "indicator--42541097-5c14-4ab6-aea1-50c0099632ca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16527356-875d-4e73-93c6-ba812943e401", "sighting_of_ref": "indicator--0dcb9460-b8c0-40b0-a3ee-24cfef66a470", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4a4855-c6ab-4de6-8ff7-9270ee0d7c18", "sighting_of_ref": "indicator--0dcb9460-b8c0-40b0-a3ee-24cfef66a470", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b21f4e-d2a9-4254-9aad-235db6c99686", "sighting_of_ref": "indicator--0dcb9460-b8c0-40b0-a3ee-24cfef66a470", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8606403e-cb42-4b8a-9bf2-9e367c2817ee", "sighting_of_ref": "indicator--09e92df5-2dd1-49a0-83f3-65d5342a77b4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e770df-545e-41c2-b57f-42fe994e65c7", "sighting_of_ref": "indicator--09e92df5-2dd1-49a0-83f3-65d5342a77b4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f6ae68-6696-44c9-beca-8f8e0c041237", "sighting_of_ref": "indicator--1c1f0d59-d9f3-461e-8b3d-b0d7bb1b75b4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcbbb2b-792e-42e8-b495-0105af8e833d", "sighting_of_ref": "indicator--1c1f0d59-d9f3-461e-8b3d-b0d7bb1b75b4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89b6978-514c-4aea-8199-e541a24b0b9a", "sighting_of_ref": "indicator--1c1f0d59-d9f3-461e-8b3d-b0d7bb1b75b4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1bd80e-86c1-4d95-8bcd-5620bc7c7081", "sighting_of_ref": "indicator--25db1c01-14c0-4ffb-b47d-bb4f618773ae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b51d77-eddf-4d67-8e3e-2cbcc0e5dd17", "sighting_of_ref": "indicator--25db1c01-14c0-4ffb-b47d-bb4f618773ae", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9737f4b9-f58b-4159-96de-bdaca36a7661", "sighting_of_ref": "indicator--25db1c01-14c0-4ffb-b47d-bb4f618773ae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907ffc3f-436b-4527-bfc6-5294432dac21", "sighting_of_ref": "indicator--8e91eb90-0cd5-436e-8d05-6777d0b79aa3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90261bb7-1024-4758-be6d-c136fe384cc1", "sighting_of_ref": "indicator--8e91eb90-0cd5-436e-8d05-6777d0b79aa3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51802673-f352-472e-87f1-4b66933c6ac6", "sighting_of_ref": "indicator--8e91eb90-0cd5-436e-8d05-6777d0b79aa3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2793f35-b522-4d16-88f3-76a17ae6eba2", "sighting_of_ref": "indicator--623faa45-3c95-4135-b415-4206ca7bb29b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1757a0fe-e399-42ca-857a-502e8191adee", "sighting_of_ref": "indicator--623faa45-3c95-4135-b415-4206ca7bb29b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a967ebe4-c7cc-4c97-9741-15ce50e21962", "sighting_of_ref": "indicator--9b46d407-bbba-4626-a6cf-07d7cec55c82", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff710dc-7970-4339-bafa-6ad95e7416cd", "sighting_of_ref": "indicator--9b46d407-bbba-4626-a6cf-07d7cec55c82", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdac1b4-60dc-416e-9aaf-fd71f3cdbb45", "sighting_of_ref": "indicator--9b46d407-bbba-4626-a6cf-07d7cec55c82", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3c44ca-ecae-4567-8ffe-721e26c0e45a", "sighting_of_ref": "indicator--56e15720-e0a9-48bd-ba44-09263c198a20", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691a46c5-e69d-445f-890e-c70a0262dae4", "sighting_of_ref": "indicator--56e15720-e0a9-48bd-ba44-09263c198a20", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b083ebea-0b44-4465-bdeb-eaa630d2d9ce", "sighting_of_ref": "indicator--56e15720-e0a9-48bd-ba44-09263c198a20", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6882a87-690a-47b9-a2a7-7f9c903eee65", "sighting_of_ref": "indicator--52f94dee-64e3-40fc-b8f1-56d3e1886a1b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1dc2059-86db-4eee-a3a2-9ba8ad65f83a", "sighting_of_ref": "indicator--52f94dee-64e3-40fc-b8f1-56d3e1886a1b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d998a6-e243-4ef5-8187-9579431e242c", "sighting_of_ref": "indicator--52f94dee-64e3-40fc-b8f1-56d3e1886a1b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778ba026-cbea-4cc8-aeb4-5edd859928c7", "sighting_of_ref": "indicator--cda08397-3ece-4d96-87ee-5c2714b8c8f1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb971e95-1c83-4e36-b651-705c1eb415a2", "sighting_of_ref": "indicator--41ac3f84-0cf2-4e78-aa65-06b306fd48a1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934de5c3-9815-4fcf-a199-6eca80210e15", "sighting_of_ref": "indicator--41ac3f84-0cf2-4e78-aa65-06b306fd48a1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4f45bc-5fa8-45e5-8eb3-5ea5da299523", "sighting_of_ref": "indicator--9f3cfe23-a95e-49a9-8f1f-3db54ac36d22", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1ea44a-56a8-4db0-a674-de46077da8b9", "sighting_of_ref": "indicator--9f3cfe23-a95e-49a9-8f1f-3db54ac36d22", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff8172b-0a94-463a-b8a6-5a278993e352", "sighting_of_ref": "indicator--9f3cfe23-a95e-49a9-8f1f-3db54ac36d22", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8bff8c-3992-413f-bf1a-171bcb54b988", "sighting_of_ref": "indicator--48ee0018-b092-4a19-b6a1-4ef2fcca8d54", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d6b2d3-6e74-4a71-ae06-2409c22671d1", "sighting_of_ref": "indicator--48ee0018-b092-4a19-b6a1-4ef2fcca8d54", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc46fd69-06bd-408c-b592-e2433ba370dd", "sighting_of_ref": "indicator--48ee0018-b092-4a19-b6a1-4ef2fcca8d54", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e14c393-ec1e-4de8-b436-9e36df3309bd", "sighting_of_ref": "indicator--855b3621-c656-42ae-82f5-7310ce021e61", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e57a5c0-b244-47ce-a1e4-f25d7ba26a7b", "sighting_of_ref": "indicator--855b3621-c656-42ae-82f5-7310ce021e61", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca29a87-c6e7-4b16-9e52-fb6443f8d79d", "sighting_of_ref": "indicator--855b3621-c656-42ae-82f5-7310ce021e61", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb8a025-306c-4cd1-a8d2-fbfd0e511d48", "sighting_of_ref": "indicator--a9765098-4523-4260-bd18-d472fac2b624", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f04d35-2e97-4ab0-9ef0-4c2bf22cc4e4", "sighting_of_ref": "indicator--a9765098-4523-4260-bd18-d472fac2b624", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccf0fab-6d8d-4816-978b-d99ef326d9cc", "sighting_of_ref": "indicator--a9765098-4523-4260-bd18-d472fac2b624", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98089407-70c9-47e2-9628-60ec081d7d28", "sighting_of_ref": "indicator--eb89af85-4269-40be-b7e5-d6c86125d59d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5f8927-11e2-4eff-9c7c-56994f2cb50e", "sighting_of_ref": "indicator--eb89af85-4269-40be-b7e5-d6c86125d59d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2060e91a-92b3-4f17-bc30-2cdce2252a53", "sighting_of_ref": "indicator--78d8e300-5dea-4b13-8a2c-4f1bc5a4e505", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d540ae78-4968-4cbe-9826-3b8a35cedc81", "sighting_of_ref": "indicator--78d8e300-5dea-4b13-8a2c-4f1bc5a4e505", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4732eda6-8153-4255-8e83-628e3f2755df", "sighting_of_ref": "indicator--6bbf8552-31f1-44c6-bb91-2b2249a8f75b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5038abed-947b-45d9-8c29-b76cf1d52b0b", "sighting_of_ref": "indicator--6bbf8552-31f1-44c6-bb91-2b2249a8f75b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78833302-2de8-4e79-a8ac-bf2e0d92c5ce", "sighting_of_ref": "indicator--6bbf8552-31f1-44c6-bb91-2b2249a8f75b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e907ca5c-41f4-4e90-b500-1ed8aa152d70", "sighting_of_ref": "indicator--b04c1c30-0230-4cfd-a74e-a87f73e42b2f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df7af69-b018-4d43-94b3-3d1fb4f2b1ec", "sighting_of_ref": "indicator--5c878a10-3ed3-45e4-8ceb-8e3eeeb198ef", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acd2831-3fa6-45a2-a317-cc65b3f6e8ed", "sighting_of_ref": "indicator--f83d76b8-89f1-4d62-b15b-4046ef2a94fa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38820f4f-4bf2-4780-8666-6e897f1c5eeb", "sighting_of_ref": "indicator--f83d76b8-89f1-4d62-b15b-4046ef2a94fa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365887a3-1755-44cd-9426-9e9b4b84c8cc", "sighting_of_ref": "indicator--f83d76b8-89f1-4d62-b15b-4046ef2a94fa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05fd8c2-e0c9-4d05-b95e-4f4cffd6c05a", "sighting_of_ref": "indicator--6181c4f6-2166-4777-9a9d-e120509f8d8b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc0a768-9a72-448b-8802-db90e6d25550", "sighting_of_ref": "indicator--6181c4f6-2166-4777-9a9d-e120509f8d8b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e43df1-944b-4d17-a936-473a0c0919d4", "sighting_of_ref": "indicator--6181c4f6-2166-4777-9a9d-e120509f8d8b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6b88ad-a2ae-4255-8e48-2fd24371d28a", "sighting_of_ref": "indicator--f5db36b0-513e-464c-96af-30d858925519", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b30178-bd01-4fae-bd69-0361d190a80b", "sighting_of_ref": "indicator--f5db36b0-513e-464c-96af-30d858925519", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747a7c0a-2ae9-4396-a16e-91fca268d00f", "sighting_of_ref": "indicator--813650f2-14c3-46f5-9422-c188f4c6afcd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be257dc-542d-4350-a125-2a5c96cb80ac", "sighting_of_ref": "indicator--813650f2-14c3-46f5-9422-c188f4c6afcd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac90b190-8b74-48de-aba6-3884f6c81386", "sighting_of_ref": "indicator--e5de02bb-868d-40b3-b712-59fd89572f6a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e3b36d-be11-455e-a282-1dc30f53fd36", "sighting_of_ref": "indicator--e5de02bb-868d-40b3-b712-59fd89572f6a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83af66c0-c317-452c-a634-b6e9c6c0695f", "sighting_of_ref": "indicator--347f58f6-1cca-4622-93c4-4479b9a7be40", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0feaed-a5df-451e-b848-2addccbc8c65", "sighting_of_ref": "indicator--347f58f6-1cca-4622-93c4-4479b9a7be40", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e4b38a-c988-405b-b4af-c82c8cfc8739", "sighting_of_ref": "indicator--1b93e812-9b49-48bd-b32b-c859a30a6805", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7f2486-a2b3-4c96-b2eb-805a7b603ead", "sighting_of_ref": "indicator--62815eb1-b9f8-4318-97fd-33da77c76d75", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72523f1f-bbfb-46ef-a30c-21fa7735a100", "sighting_of_ref": "indicator--62815eb1-b9f8-4318-97fd-33da77c76d75", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b2e8ea-fca9-4e38-af50-898629bcd7c9", "sighting_of_ref": "indicator--42a80d27-3b9b-4fa6-a30d-a83d05ee8b14", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f930da4-eab9-4072-96d6-4966c2a920db", "sighting_of_ref": "indicator--42a80d27-3b9b-4fa6-a30d-a83d05ee8b14", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949464a5-e6b8-4c73-a94f-42fd76feea90", "sighting_of_ref": "indicator--42a80d27-3b9b-4fa6-a30d-a83d05ee8b14", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce57ebd1-5bf8-4a5c-a98b-5a9574c4b873", "sighting_of_ref": "indicator--88e53547-276d-4da8-b37d-fc571160e87d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82439260-787a-44e7-8ce6-7093473471df", "sighting_of_ref": "indicator--88e53547-276d-4da8-b37d-fc571160e87d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742fc2b5-5bca-43b6-b925-f0fdcc8d5267", "sighting_of_ref": "indicator--88e53547-276d-4da8-b37d-fc571160e87d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86056a70-a234-4a5f-a15f-949cb6d00746", "sighting_of_ref": "indicator--602cfe4b-ca98-477f-85bd-c3f68f1af710", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f59d59b-c712-48cd-869c-6a6d917633bc", "sighting_of_ref": "indicator--602cfe4b-ca98-477f-85bd-c3f68f1af710", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721fa61d-d85e-44f3-918a-ece2fe27c07a", "sighting_of_ref": "indicator--602cfe4b-ca98-477f-85bd-c3f68f1af710", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671e37ba-eb64-4ebf-8d94-0084b74055c7", "sighting_of_ref": "indicator--d7892fc5-a03a-48cb-8bc1-f9cf0b5620d8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122304b5-d12f-4af1-b985-e571e3d3b959", "sighting_of_ref": "indicator--a53cb2a7-0ce1-4f2d-933e-9be1d4dc9b3b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ed2915-633f-4f8f-bff6-906eca9fc789", "sighting_of_ref": "indicator--094a1aed-8492-4f39-9dd5-bdc279217385", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396fa4d5-c856-4b29-8430-1ced2996cb0e", "sighting_of_ref": "indicator--094a1aed-8492-4f39-9dd5-bdc279217385", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c969df-9194-4a88-929c-84305a7f8f5c", "sighting_of_ref": "indicator--b72a5180-2e9f-4dee-a904-20fd661aea8e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2890dd0d-0887-45b2-886e-2e126e1dabe6", "sighting_of_ref": "indicator--0da79b3b-d36e-4438-a439-8b7487ab8bac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d187eb-e2aa-41ec-a66c-b60be6406f8f", "sighting_of_ref": "indicator--7012ecda-d843-4ed9-9135-ab03c3aaa9d7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f76f4d-42af-4b47-8659-7386f7b62596", "sighting_of_ref": "indicator--7012ecda-d843-4ed9-9135-ab03c3aaa9d7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ab55d6-2a7f-4922-a5ff-8f421360d48c", "sighting_of_ref": "indicator--a733efcd-791e-49ce-9e70-d9d497d34ce3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0b6bb4-9d4f-4797-a7d2-9ef256762223", "sighting_of_ref": "indicator--a733efcd-791e-49ce-9e70-d9d497d34ce3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adef8e0-ece3-44ea-97c5-fefd7972b535", "sighting_of_ref": "indicator--ef4322f1-b611-46a3-9b5a-4a337261b8b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34546dfe-e71e-4a3b-b9e5-1291dced3cd6", "sighting_of_ref": "indicator--ef4322f1-b611-46a3-9b5a-4a337261b8b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9727171a-638d-4c2c-acdb-3114c6a25297", "sighting_of_ref": "indicator--2d0136a5-9c26-4914-8744-7837834822dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3b90ed-eb9c-4683-817e-028f07c960ee", "sighting_of_ref": "indicator--2d0136a5-9c26-4914-8744-7837834822dd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc13f70-6e9f-443d-94f1-7e53781be478", "sighting_of_ref": "indicator--2ae55c72-5f2c-485d-ad32-292c96b0dd36", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312f42e8-522a-4094-ae27-0a63a9840008", "sighting_of_ref": "indicator--ea3e96d3-b56f-4edf-8812-c51251d3a4f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ca798a-f006-4780-8a87-1583e58bca4f", "sighting_of_ref": "indicator--ea3e96d3-b56f-4edf-8812-c51251d3a4f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a15ad7f-0cf7-4ab5-81c6-e09d1e8af8e7", "sighting_of_ref": "indicator--ea3e96d3-b56f-4edf-8812-c51251d3a4f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0f823c-d362-4131-a011-04fa2fc35a75", "sighting_of_ref": "indicator--048875c2-e02c-4821-af7c-3443b6cb550e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ee8b2d-9053-401c-b4d1-07f4848367c4", "sighting_of_ref": "indicator--048875c2-e02c-4821-af7c-3443b6cb550e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7134ce43-6be9-444c-b0ca-f9265e6b4d80", "sighting_of_ref": "indicator--d3b742a7-92e9-40bd-9ed7-6bc80ba33364", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964b9ef6-4a93-4368-a7bd-0c83bcfe016a", "sighting_of_ref": "indicator--d3b742a7-92e9-40bd-9ed7-6bc80ba33364", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4a47b6-9d54-4833-9edb-bc548cfea5ac", "sighting_of_ref": "indicator--86c141dd-87ce-40c8-9798-9f7ce18574f1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2073e249-358f-41f7-95db-b5d7d4f3fbcf", "sighting_of_ref": "indicator--86c141dd-87ce-40c8-9798-9f7ce18574f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994f9c74-0625-4863-9088-4ca85b2b5224", "sighting_of_ref": "indicator--7ccfdc71-ea9a-4229-a271-3e91f58b8995", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f97cf5-07c7-4f56-ad92-59403749d801", "sighting_of_ref": "indicator--7ccfdc71-ea9a-4229-a271-3e91f58b8995", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b67c8f-b2ac-4db1-b7e7-a4d1b9f0e8aa", "sighting_of_ref": "indicator--7ccfdc71-ea9a-4229-a271-3e91f58b8995", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df2cf0a-a7d2-456d-b9ce-2fd99d117eb2", "sighting_of_ref": "indicator--5a096e8d-6817-4465-83c8-0bf71a31ac8c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62eab1a-3e2a-459e-8138-f53085ac0f14", "sighting_of_ref": "indicator--5a096e8d-6817-4465-83c8-0bf71a31ac8c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d4bef1-bd64-44f6-8723-6ded5d19c0c5", "sighting_of_ref": "indicator--35b38c68-7306-4f6d-9088-48dcbbd3107a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f85c34-d1f3-4565-85ba-15b3b976742e", "sighting_of_ref": "indicator--35b38c68-7306-4f6d-9088-48dcbbd3107a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83c48d0-89d9-4af0-9f7e-16cc4bd4f87f", "sighting_of_ref": "indicator--9981eb1c-8950-4c22-8150-1673b67121bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a84802-0322-44fd-ace8-cae6f19c160b", "sighting_of_ref": "indicator--9981eb1c-8950-4c22-8150-1673b67121bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872c6bb9-3437-4421-ae6c-fec42b21880e", "sighting_of_ref": "indicator--9981eb1c-8950-4c22-8150-1673b67121bd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8d9c27-3a26-4466-b0b7-e7c4d2bf46f5", "sighting_of_ref": "indicator--8b78bd89-369b-4bce-b420-e155e96d9d0c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b040551-6216-4ae0-80aa-fa20dd28d359", "sighting_of_ref": "indicator--8b78bd89-369b-4bce-b420-e155e96d9d0c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95783ad-5454-4e3b-9713-443232df80ae", "sighting_of_ref": "indicator--0bd5b873-21c8-4477-b332-17637bd95043", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0898fd5d-b2a0-4d1b-a640-283dd46aa048", "sighting_of_ref": "indicator--0bd5b873-21c8-4477-b332-17637bd95043", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a208a4-dd4f-4b82-aa28-0ecf68bb0eae", "sighting_of_ref": "indicator--f61621ec-f998-4ac8-975b-4c5c8a9c1505", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39271a0d-21bb-407a-8458-5c5b3105e5be", "sighting_of_ref": "indicator--f61621ec-f998-4ac8-975b-4c5c8a9c1505", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9b9406-9aa4-4b8a-b49c-47713cda17fa", "sighting_of_ref": "indicator--e7ee996a-a200-4185-bc7f-10b5cb9ef182", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfb1f58-1fe9-4d46-b3e0-7d6673c713e6", "sighting_of_ref": "indicator--e7ee996a-a200-4185-bc7f-10b5cb9ef182", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ee6ce4-f156-4f04-8186-b69aa28b37cd", "sighting_of_ref": "indicator--e7ee996a-a200-4185-bc7f-10b5cb9ef182", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64aebd42-5793-488e-a56b-9a799205e060", "sighting_of_ref": "indicator--2fe377d8-e0b7-48cc-93b9-425634b0320e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ee71d9-eb94-4423-88dc-b836ed76c580", "sighting_of_ref": "indicator--c2cbbf2c-64b4-4924-89f0-23ae52b4f0da", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40113337-a387-4f85-b501-721300da6b60", "sighting_of_ref": "indicator--c2cbbf2c-64b4-4924-89f0-23ae52b4f0da", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a47e9a-7abf-4c6d-85b4-a0c461077887", "sighting_of_ref": "indicator--8cdc895c-af5b-42f8-b6cc-effb67f1a364", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d037513-d4e0-4d89-8a19-856f5a235b74", "sighting_of_ref": "indicator--9d5072f2-3438-4443-b699-ea6aa8d96792", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d850ff1-4f57-4e04-815e-5b0197868dbe", "sighting_of_ref": "indicator--9d5072f2-3438-4443-b699-ea6aa8d96792", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f92361-36e1-403b-b733-44cfaeece460", "sighting_of_ref": "indicator--69c40288-634f-455f-bcbd-591e2027207f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f5bf3b-4595-4f45-b44a-03565ec835ad", "sighting_of_ref": "indicator--69c40288-634f-455f-bcbd-591e2027207f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92c7b48-d480-4dc4-b232-31faf0a6dfd0", "sighting_of_ref": "indicator--5ba3f532-7e68-46c2-9697-eac76e0db6ed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e04b5c-96db-4d1e-922d-f9070f1212ef", "sighting_of_ref": "indicator--5ba3f532-7e68-46c2-9697-eac76e0db6ed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4316b4c-bb09-4514-bf6c-5fd190cf09a4", "sighting_of_ref": "indicator--33ed17b7-ec68-42fb-b30d-02bded0bea76", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e16fc52-f417-4a37-bc54-7dc651c59d03", "sighting_of_ref": "indicator--33ed17b7-ec68-42fb-b30d-02bded0bea76", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a17ee8-1a54-4412-a570-13ab285c3c11", "sighting_of_ref": "indicator--8261ebf3-65bf-4d36-8d01-db54a8d3c6a4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df51ee67-f712-47e7-b6ab-3c7104a8fe2f", "sighting_of_ref": "indicator--807ae1bd-0244-4a42-8ea5-dba67cc87c42", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49652a85-9735-4d37-82a9-5ecf39131c69", "sighting_of_ref": "indicator--807ae1bd-0244-4a42-8ea5-dba67cc87c42", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94335449-b3a3-44d7-9495-02261536310e", "sighting_of_ref": "indicator--03254029-b75e-4558-b410-17ba8edf768b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86784212-5414-4f10-91f8-e39319de9f75", "sighting_of_ref": "indicator--03254029-b75e-4558-b410-17ba8edf768b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eed7567-35b8-4f5b-99d0-eaf07fc04904", "sighting_of_ref": "indicator--03254029-b75e-4558-b410-17ba8edf768b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b324e1a0-219a-4ff6-b62f-c596ad903a42", "sighting_of_ref": "indicator--9b4034cc-280a-41d9-a368-7c16bcaf1edd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355ac2e6-00c0-48e0-972c-6bff4a718d68", "sighting_of_ref": "indicator--676287cd-6f05-4aac-af4b-974184993b75", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b777310-c0cd-4029-9a3c-e1593fa9dba6", "sighting_of_ref": "indicator--676287cd-6f05-4aac-af4b-974184993b75", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4042c350-fac1-4b7b-8d91-9cad43b98e6e", "sighting_of_ref": "indicator--05292016-428d-4a39-9d55-9410d043aa1e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720af140-6426-4304-aed6-e67d8a36dc2b", "sighting_of_ref": "indicator--05292016-428d-4a39-9d55-9410d043aa1e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31b7358-b8af-4d42-8189-e2ceeb3f33b6", "sighting_of_ref": "indicator--05292016-428d-4a39-9d55-9410d043aa1e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84340875-bd3b-4dac-8e5b-827630658d43", "sighting_of_ref": "indicator--58e46ce5-bbf1-477e-8c73-85e4ba3df4f6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7185203a-81ac-4dc8-8b99-9088b9acae13", "sighting_of_ref": "indicator--58e46ce5-bbf1-477e-8c73-85e4ba3df4f6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69219fb3-f616-4f12-9005-c229f915902f", "sighting_of_ref": "indicator--097e851e-bd8c-4b0e-a670-7885782acfee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978ec5a3-046b-4118-b1fa-2273f2f45055", "sighting_of_ref": "indicator--097e851e-bd8c-4b0e-a670-7885782acfee", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3d116e-8a21-4a64-9e37-a1c9362e61b7", "sighting_of_ref": "indicator--6216d40a-9cd1-43b4-bc3c-c6510d186d44", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661fa291-fcdd-4dba-95f3-1838985c26ff", "sighting_of_ref": "indicator--1b934a41-b9b3-485a-b8f4-e17200861bd7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f895e37b-3ead-4a75-b9c7-a321aa8f8605", "sighting_of_ref": "indicator--6f367ed7-18da-41d9-9be4-39e2d0a11d3f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149c3180-07db-47dd-8645-72b6312962b7", "sighting_of_ref": "indicator--6f367ed7-18da-41d9-9be4-39e2d0a11d3f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fb4355-f9b5-4c54-808a-f1157f758fb1", "sighting_of_ref": "indicator--89c17ea6-60d0-4200-92bb-3400d5586629", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2510e39c-d182-431f-a8ea-def49fc79c46", "sighting_of_ref": "indicator--89c17ea6-60d0-4200-92bb-3400d5586629", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c7f923-1523-4998-b5aa-bdc440081c20", "sighting_of_ref": "indicator--89c17ea6-60d0-4200-92bb-3400d5586629", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66dd8b3a-4ba9-40fc-afb1-da42d479eafa", "sighting_of_ref": "indicator--34ead052-4027-4540-a542-4b367b2e76a0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c903377d-6d26-4fc4-bbf1-f80e53f4ed85", "sighting_of_ref": "indicator--34ead052-4027-4540-a542-4b367b2e76a0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcd6be5-d9d3-471a-9e2e-239c2f8b9875", "sighting_of_ref": "indicator--d039e1c2-e686-4120-8b2d-95f38fb9f016", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cad5e93-722c-4255-99c9-1114c98cf3e4", "sighting_of_ref": "indicator--d039e1c2-e686-4120-8b2d-95f38fb9f016", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b666d9e3-dce3-4eb9-8433-cb329440b077", "sighting_of_ref": "indicator--d039e1c2-e686-4120-8b2d-95f38fb9f016", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8ff785-ddbd-4e5b-b163-cbe8da4eecdd", "sighting_of_ref": "indicator--51abcccf-8e2a-40e4-846c-353884f5494e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d8998b-f52b-4ecf-80c5-36e06ec13770", "sighting_of_ref": "indicator--51abcccf-8e2a-40e4-846c-353884f5494e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0de66c-54a2-49fb-aed2-4388cdd2ea55", "sighting_of_ref": "indicator--51abcccf-8e2a-40e4-846c-353884f5494e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73538ecf-09b1-493b-8559-7c0b54030ff8", "sighting_of_ref": "indicator--0eb037dd-1500-4e58-80b7-a3cc752e64ab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff408d4-cdc2-47de-9ba0-13842dbc9ba2", "sighting_of_ref": "indicator--0eb037dd-1500-4e58-80b7-a3cc752e64ab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd8e354-791f-4a18-b831-b828e302eb16", "sighting_of_ref": "indicator--98bb3c5f-b672-4a20-b6c5-9bf1af48788b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8d814f-dfa4-4ebb-9ca9-c215a383da8e", "sighting_of_ref": "indicator--98bb3c5f-b672-4a20-b6c5-9bf1af48788b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2236e18-53f6-416f-bfce-5f54b9fe814c", "sighting_of_ref": "indicator--4ba5ffd4-5ab5-4f9a-8acc-c4d7036030ba", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71350416-4a37-424e-9371-dfce166c7080", "sighting_of_ref": "indicator--4ba5ffd4-5ab5-4f9a-8acc-c4d7036030ba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ca17fb-955b-4d8c-88a3-01773819a010", "sighting_of_ref": "indicator--4ba5ffd4-5ab5-4f9a-8acc-c4d7036030ba", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d618233d-a012-4996-b4ca-1ef4cf95fa66", "sighting_of_ref": "indicator--8404ba4a-deba-41f3-bd5f-e26d0363d3ba", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249005d7-49fa-453f-aedb-925f1e3b0fe3", "sighting_of_ref": "indicator--8404ba4a-deba-41f3-bd5f-e26d0363d3ba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24e6dcf-c113-423e-a377-856bf8325002", "sighting_of_ref": "indicator--8404ba4a-deba-41f3-bd5f-e26d0363d3ba", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787c2c17-e7e9-4de1-88b0-94d73f95bd56", "sighting_of_ref": "indicator--61853932-d3ba-401a-bfec-924e1b0b8be0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f579e45-917d-4f60-987f-df952e8a035a", "sighting_of_ref": "indicator--61853932-d3ba-401a-bfec-924e1b0b8be0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376a6f4f-9188-48c9-912e-2d1b7aa7cf9e", "sighting_of_ref": "indicator--874b4e8e-f331-4b96-9052-5a8cf745ae30", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a39cdd-be28-40f5-8d0e-309f4d4a1a86", "sighting_of_ref": "indicator--2d3da073-e80a-4af9-b8b4-71fbbde6efec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f678240-f999-4fcd-825b-201b5fd6936f", "sighting_of_ref": "indicator--a2266e27-c972-4328-9a41-718a05e5dce1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76772f6-4670-4fa3-9340-1d6a368fd65c", "sighting_of_ref": "indicator--a2266e27-c972-4328-9a41-718a05e5dce1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e05469-c0fd-43c4-b4bb-675f01739d0d", "sighting_of_ref": "indicator--d1aa20ba-2a90-4c40-b60e-4a142128c437", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcf3310-aa11-4542-9b90-6f9991557cd5", "sighting_of_ref": "indicator--a1598112-69c6-489f-91d9-d7ea0c8c28f9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852dbc00-c801-428b-9df3-c989af53b98a", "sighting_of_ref": "indicator--a1598112-69c6-489f-91d9-d7ea0c8c28f9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17fe78d-bf27-49a3-8661-9d248074682e", "sighting_of_ref": "indicator--a1598112-69c6-489f-91d9-d7ea0c8c28f9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617e7ad9-68a9-4f92-b06f-d4536e4a7735", "sighting_of_ref": "indicator--0dba57b6-cb81-4f37-a8c1-5dca1ad5029d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2cc077-b0a5-453e-a0f9-81f694191742", "sighting_of_ref": "indicator--87de1f75-e477-4fdb-b5b9-dae133ed6d31", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0034c310-a4e9-4000-8e42-57180c425b36", "sighting_of_ref": "indicator--87de1f75-e477-4fdb-b5b9-dae133ed6d31", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02686621-d0bc-4588-8162-065967c359b3", "sighting_of_ref": "indicator--87de1f75-e477-4fdb-b5b9-dae133ed6d31", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61a27ef-df4e-47e7-8227-664753ffeb0d", "sighting_of_ref": "indicator--b9ff5e96-d2ea-43b8-b98d-82263c1d105c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff501ee-f06e-425f-811a-bc5ef4dbba91", "sighting_of_ref": "indicator--b9ff5e96-d2ea-43b8-b98d-82263c1d105c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299a5d9f-2c19-48f4-b67f-043d7c0dbf45", "sighting_of_ref": "indicator--ed8b1b8f-6d31-4554-aac7-6bc8244476f1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee59471-3d6c-4780-80a9-5ace69171e3e", "sighting_of_ref": "indicator--ed8b1b8f-6d31-4554-aac7-6bc8244476f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872c55a1-cd5c-4246-85cf-d90297966bde", "sighting_of_ref": "indicator--b1c93029-245f-4636-a1d0-b581b07e61df", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdda194-0890-4296-91a8-0937f3cf61c4", "sighting_of_ref": "indicator--b1c93029-245f-4636-a1d0-b581b07e61df", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7228812a-aa7f-4055-baf7-0245277768c7", "sighting_of_ref": "indicator--b1c93029-245f-4636-a1d0-b581b07e61df", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c240751d-96aa-4c3c-ab30-ba06922a1531", "sighting_of_ref": "indicator--36494962-4d9e-4587-9ee0-39519671adfd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86bd190-9eab-4536-a741-5482761f7bc3", "sighting_of_ref": "indicator--e688c1e7-768e-4e8d-a1ef-f01247a9bc19", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d85585-5b12-4648-a9a4-3f64f5b5d9cd", "sighting_of_ref": "indicator--e688c1e7-768e-4e8d-a1ef-f01247a9bc19", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10aa67d4-ef09-4c16-aef4-a5f7b3877f82", "sighting_of_ref": "indicator--c2b0cd9f-643c-4654-aef9-4979fa3b97f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f851e8cc-ed7b-45b0-b8df-c383f67e5657", "sighting_of_ref": "indicator--c2b0cd9f-643c-4654-aef9-4979fa3b97f8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47c01cf-7566-478f-93a7-28916cd1ab42", "sighting_of_ref": "indicator--cc653504-583b-43ea-ada1-c31a5886be93", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5639b1-a689-48af-9bf6-59ced90c026f", "sighting_of_ref": "indicator--cc653504-583b-43ea-ada1-c31a5886be93", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8073e20a-da5b-41c5-818c-c8057ab925ff", "sighting_of_ref": "indicator--98978337-6c4a-4677-badf-2f435ee0459b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf16810f-3443-4906-b10a-c9a7a5fee9ed", "sighting_of_ref": "indicator--98978337-6c4a-4677-badf-2f435ee0459b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa64ce9-905c-4ff2-bc0a-80141d297c8d", "sighting_of_ref": "indicator--98978337-6c4a-4677-badf-2f435ee0459b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c3a5f9-6eb1-4149-8117-344d1b17898f", "sighting_of_ref": "indicator--cba75fb2-cf77-45d2-942b-0554b7b9359e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad097e3-54aa-4001-9d12-365cb10dc61b", "sighting_of_ref": "indicator--cba75fb2-cf77-45d2-942b-0554b7b9359e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99bb6ee-056c-4e0a-8be0-731657032036", "sighting_of_ref": "indicator--5e8a8494-deed-4a7e-adb3-08eab858313f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4943b8-df72-447c-99f5-08c72a617654", "sighting_of_ref": "indicator--5e8a8494-deed-4a7e-adb3-08eab858313f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1d5746-c3e6-413a-97f9-d600bc7a6609", "sighting_of_ref": "indicator--a83e7568-824a-4d80-ae00-85ecb23c2103", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2517b20-de8f-43a3-982b-695e636b017d", "sighting_of_ref": "indicator--a83e7568-824a-4d80-ae00-85ecb23c2103", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c375ff7-5860-4d2a-8f42-68f0f8a1ba80", "sighting_of_ref": "indicator--f76a52e7-5746-4084-bf56-a7d7aec55f75", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5017a461-bcd4-4c78-b727-3d2b528cdfcf", "sighting_of_ref": "indicator--f76a52e7-5746-4084-bf56-a7d7aec55f75", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a2f8cf-992e-4719-bfc3-7bccce682655", "sighting_of_ref": "indicator--1d7cc9d5-b0fc-4234-a774-4691c6fe92ba", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7d664f-31c7-4b69-be0c-b95a568b0510", "sighting_of_ref": "indicator--1d7cc9d5-b0fc-4234-a774-4691c6fe92ba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91552b7-7369-43eb-84ea-e08b488096bc", "sighting_of_ref": "indicator--aa138cbf-4f2d-467f-813b-594d4775ce04", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7101ea7a-eedc-4b1b-9280-8ed538d67631", "sighting_of_ref": "indicator--aa138cbf-4f2d-467f-813b-594d4775ce04", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85e96d6-e779-4fc6-a9aa-bbad334cf817", "sighting_of_ref": "indicator--ce3a7216-e2e7-41fb-a321-ae27893c7bc2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bee2081-8d03-4d3d-999f-82a68392abf3", "sighting_of_ref": "indicator--ce3a7216-e2e7-41fb-a321-ae27893c7bc2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e513d3b6-09c2-42ce-ac80-f7a5ac2fb243", "sighting_of_ref": "indicator--ce3a7216-e2e7-41fb-a321-ae27893c7bc2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59b0798-ec18-4f25-80a0-57e8e660c8f6", "sighting_of_ref": "indicator--49fcb54b-26e9-49c6-88b3-4a9b799373f3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb9a239-1482-4fb9-b785-80012f079ef2", "sighting_of_ref": "indicator--e33c41d1-4269-4351-8e93-60d8f5dc1041", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23480ac3-91a6-416e-8509-8ab303e780bf", "sighting_of_ref": "indicator--e33c41d1-4269-4351-8e93-60d8f5dc1041", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46289f0f-1eda-4ebf-978e-b7ecb1785884", "sighting_of_ref": "indicator--c259d6fa-abb7-421e-a80e-d7b505b0c177", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d072a1f1-c0b3-4214-95e0-3f5f3ef25e66", "sighting_of_ref": "indicator--c259d6fa-abb7-421e-a80e-d7b505b0c177", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c590773-8907-4d13-a9e2-ee6c8d37006d", "sighting_of_ref": "indicator--c259d6fa-abb7-421e-a80e-d7b505b0c177", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3d80db-21af-4766-8c4b-f06bcf76ea07", "sighting_of_ref": "indicator--aceba1c5-2859-481a-b878-d4fcc216ed12", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742fd6de-ed42-4c90-b978-fad1ba4f3240", "sighting_of_ref": "indicator--aceba1c5-2859-481a-b878-d4fcc216ed12", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d63ce83-3b40-4f43-b442-4b94738c8b7a", "sighting_of_ref": "indicator--98d1f67d-e9ef-49d9-83b3-7a62bdef07f0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78c18e8-2ba3-43aa-8367-a27a32dddb14", "sighting_of_ref": "indicator--98d1f67d-e9ef-49d9-83b3-7a62bdef07f0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f41c7c-4351-464f-abbd-233460a7b54c", "sighting_of_ref": "indicator--98d1f67d-e9ef-49d9-83b3-7a62bdef07f0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36856e9b-f4e4-4c66-8302-654cbd2cd8bf", "sighting_of_ref": "indicator--de3150e6-0857-4181-8832-c198d08002d1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f507cab-5e58-4249-a56d-b768f6c31741", "sighting_of_ref": "indicator--de3150e6-0857-4181-8832-c198d08002d1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e87ebe-65c1-4d38-890a-2e624af51fe5", "sighting_of_ref": "indicator--25a594ac-3c49-4ace-a168-d4183033da26", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae35aae-bccb-430e-94c4-a2c6a82b5a33", "sighting_of_ref": "indicator--1f0f2965-3de6-478f-81f3-a4bf5a5edf31", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce75031-3a60-4e86-87f1-b9149e0a8164", "sighting_of_ref": "indicator--1f0f2965-3de6-478f-81f3-a4bf5a5edf31", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd4ce0a-f133-4d0a-a04c-1f047fd33bcb", "sighting_of_ref": "indicator--1f0f2965-3de6-478f-81f3-a4bf5a5edf31", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1a530a-9c33-4956-9e6f-8ff4b7da372c", "sighting_of_ref": "indicator--c62ca6e3-88a5-43c2-903a-2781ab03685d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4404d56-66b9-47b2-bd6e-d5941223fe3e", "sighting_of_ref": "indicator--c62ca6e3-88a5-43c2-903a-2781ab03685d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b5f864-59b4-4e07-96e4-b4a6f394b9f1", "sighting_of_ref": "indicator--4a2f0fad-8598-4ee9-835f-3963b2c6477a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb42d0eb-3385-46ba-8bfc-5f184bd6b751", "sighting_of_ref": "indicator--4fd3405f-c8f0-4e08-a76e-81a5db09cfc7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e9091c-cfa6-4608-8324-e5f386c9e38d", "sighting_of_ref": "indicator--7dd5ccbc-be00-4134-995f-821c7529179d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a842cffd-128d-41b7-90d4-b6788df99475", "sighting_of_ref": "indicator--7dd5ccbc-be00-4134-995f-821c7529179d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd07047a-23dd-4210-b9b5-a6423a970f31", "sighting_of_ref": "indicator--11cd4be4-fb10-48fd-a514-4c38395f4111", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a43b07-7595-4237-9337-220a8bcbcfaa", "sighting_of_ref": "indicator--08ad8e95-baf9-4195-9998-446183cedb85", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4249dded-9f6f-408a-8ec2-01791a5baee1", "sighting_of_ref": "indicator--08ad8e95-baf9-4195-9998-446183cedb85", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b10461-0411-4b5b-b92c-d0adbb6eb273", "sighting_of_ref": "indicator--41f219c4-b0d5-4da4-8971-91f2aec7eef3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790e8b09-d8e4-42c6-9224-bbbf8dad828f", "sighting_of_ref": "indicator--41f219c4-b0d5-4da4-8971-91f2aec7eef3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af52e03-d17e-40e8-8ba4-4b170f7867ab", "sighting_of_ref": "indicator--41f219c4-b0d5-4da4-8971-91f2aec7eef3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d35bbc-bce5-4e8e-9f92-4efa2aa6016e", "sighting_of_ref": "indicator--bfae05d7-6cfc-45e9-95ac-46a394c95c5b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c9d258-45bb-4e7e-9117-56d0f3d0e7d0", "sighting_of_ref": "indicator--9b26b856-4187-48ca-9c1d-5460fc4c6601", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62be2b82-e2c6-4a50-a470-a26feb3db988", "sighting_of_ref": "indicator--9b26b856-4187-48ca-9c1d-5460fc4c6601", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855fc0ce-6738-4c8e-a054-1af4c56f7469", "sighting_of_ref": "indicator--9b26b856-4187-48ca-9c1d-5460fc4c6601", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4832b8-39cf-492b-9577-968a6afc5d8d", "sighting_of_ref": "indicator--34bb9f58-b4dc-4224-9475-8bcad9617a73", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e900f2da-9286-46ea-bda5-a868e8846578", "sighting_of_ref": "indicator--9d7caac8-13a7-490e-b8f4-2ad2e809f5b5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b846563-3b89-45fe-bb15-c44dbb485499", "sighting_of_ref": "indicator--9d7caac8-13a7-490e-b8f4-2ad2e809f5b5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e030e44d-2aec-43a3-aae4-29ecba4b9ab9", "sighting_of_ref": "indicator--9d7caac8-13a7-490e-b8f4-2ad2e809f5b5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d7002e-115c-467d-a6b3-a463d23ddd58", "sighting_of_ref": "indicator--9e0c0d73-5965-4741-9199-88a9bb7ae9cd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8417213-1764-481d-8a6a-240d806c59df", "sighting_of_ref": "indicator--9e0c0d73-5965-4741-9199-88a9bb7ae9cd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dedfd26-cc0a-43c6-9362-b0f9ab748263", "sighting_of_ref": "indicator--206b5d75-3e24-4965-b470-3b809a984792", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20093012-da22-4641-a452-0f751528f78d", "sighting_of_ref": "indicator--206b5d75-3e24-4965-b470-3b809a984792", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba26e0a2-6702-4be2-9855-a8bb26d9a458", "sighting_of_ref": "indicator--206b5d75-3e24-4965-b470-3b809a984792", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b7914d-e75d-4fed-8da3-b35f26d7a8c5", "sighting_of_ref": "indicator--d2b60aa0-03cd-4768-9a0f-80acf749b52f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32165206-8dea-4b0e-88d4-c1359848ee95", "sighting_of_ref": "indicator--d2b60aa0-03cd-4768-9a0f-80acf749b52f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270bbb2a-da6d-4683-a875-8c2dc74cc7d1", "sighting_of_ref": "indicator--6660fc6f-d65d-412b-88f0-42f1fcbb08da", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e83b68-64b7-4de1-8b59-2e3d327327a6", "sighting_of_ref": "indicator--6660fc6f-d65d-412b-88f0-42f1fcbb08da", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3681ebe3-6fbd-472f-98d4-4ba1fbf363ed", "sighting_of_ref": "indicator--6660fc6f-d65d-412b-88f0-42f1fcbb08da", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfc795f-c9d1-4307-bddc-0981bebd1e63", "sighting_of_ref": "indicator--747c144e-f279-477f-b1cf-880fd6e05a78", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00c31c4-015d-43f6-bcd3-e088825ae960", "sighting_of_ref": "indicator--747c144e-f279-477f-b1cf-880fd6e05a78", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cc0ce1-0f78-43f7-8bdb-907d8e39b6a0", "sighting_of_ref": "indicator--31cd00be-7802-403c-9496-0a02efeaffe5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6d1743-b22d-4df4-8b09-595861f0fe0e", "sighting_of_ref": "indicator--31cd00be-7802-403c-9496-0a02efeaffe5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d3adab-0e67-44be-bfed-5aa1e0289a51", "sighting_of_ref": "indicator--42206c7a-307c-486e-9acd-35bba0981655", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57062a90-74fb-481d-be9e-02b5fe41241a", "sighting_of_ref": "indicator--42206c7a-307c-486e-9acd-35bba0981655", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7df588-5b62-4ee8-9801-e0c11f8bce8e", "sighting_of_ref": "indicator--42206c7a-307c-486e-9acd-35bba0981655", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f20331-3446-46eb-abe4-952b2893c420", "sighting_of_ref": "indicator--ff2a851a-23a8-4bf2-88ba-0c04eed56877", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e60f78c-e635-4c89-93a6-38967a1e9fff", "sighting_of_ref": "indicator--6df396cb-dc55-48eb-8695-713f4606f1e1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90caabb-8c73-4170-b1e3-18454232e6e3", "sighting_of_ref": "indicator--6df396cb-dc55-48eb-8695-713f4606f1e1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ca9e63-036d-455d-b39e-4d55bcfc4d03", "sighting_of_ref": "indicator--6df396cb-dc55-48eb-8695-713f4606f1e1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21c03f3-1eec-41d3-a43b-d3de7fd9f02e", "sighting_of_ref": "indicator--15697771-e09b-44c4-89b2-f14fadc81928", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2a89b7-3860-49d7-814f-76cc07766db1", "sighting_of_ref": "indicator--15697771-e09b-44c4-89b2-f14fadc81928", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8082a59-bed9-43fc-b618-3419a33e1e6c", "sighting_of_ref": "indicator--f82d1aa6-834a-4c53-851b-11f8fc762384", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9238d7f3-85c7-4a06-8989-9f9a58d0c2cd", "sighting_of_ref": "indicator--f82d1aa6-834a-4c53-851b-11f8fc762384", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ab6af1-dac6-4208-b2fe-bb170eb46a58", "sighting_of_ref": "indicator--f82d1aa6-834a-4c53-851b-11f8fc762384", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d37277-630c-4c96-b66b-ed5c39d93a1d", "sighting_of_ref": "indicator--9fa31e5d-a416-451b-b8a8-f47d407d6a2b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3f4212-8ace-4c6c-aaa4-6c682e687e6a", "sighting_of_ref": "indicator--9fa31e5d-a416-451b-b8a8-f47d407d6a2b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55ee25b-0fe5-4dd7-9153-ceb572fbd1d1", "sighting_of_ref": "indicator--0b28db55-f9b8-410c-8a15-0026c105e9bf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e280c2b9-2e05-4e45-9079-9fc21a6b28fa", "sighting_of_ref": "indicator--0b28db55-f9b8-410c-8a15-0026c105e9bf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6631c8-1f71-4118-a182-e4bf9bd72728", "sighting_of_ref": "indicator--ba2a320a-779c-402b-a490-9976e73853c3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e3c357-ff79-4a48-bfbe-3e7bc59293a7", "sighting_of_ref": "indicator--ba2a320a-779c-402b-a490-9976e73853c3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd32604-a2a9-4b5a-81f0-7b6074de3ac3", "sighting_of_ref": "indicator--2cbe8508-eacb-47ae-bdae-ca4e435ce4e8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd3e764-9763-4cd8-81d4-5725f51de3e5", "sighting_of_ref": "indicator--2cbe8508-eacb-47ae-bdae-ca4e435ce4e8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3e96fc-9c6b-4c0b-b83d-9410907cab14", "sighting_of_ref": "indicator--2cbe8508-eacb-47ae-bdae-ca4e435ce4e8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d95cb33-1054-491d-a506-aaf952951806", "sighting_of_ref": "indicator--dc31dda5-a1e1-4f6b-8379-566185f40004", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9c87b1-6c14-4c92-8b46-2f025a7a242c", "sighting_of_ref": "indicator--dc31dda5-a1e1-4f6b-8379-566185f40004", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02554850-95bb-4e16-83e3-3311c61802bf", "sighting_of_ref": "indicator--dc31dda5-a1e1-4f6b-8379-566185f40004", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b8d4b8-20f0-4b85-a3f1-c0fc9b679ba4", "sighting_of_ref": "indicator--f2bef595-f369-4489-9823-2dcfb0e0e566", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212f4b55-ef1c-4dc5-8aa3-66104c37e870", "sighting_of_ref": "indicator--f2bef595-f369-4489-9823-2dcfb0e0e566", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2569b6c7-e8a6-476e-8bb8-bb636231223b", "sighting_of_ref": "indicator--f2bef595-f369-4489-9823-2dcfb0e0e566", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50befdee-87b2-4498-a3a9-a7d724704666", "sighting_of_ref": "indicator--683f3b08-9d4c-455b-9b74-d5fb49532253", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec16ebf4-67b6-4a4e-a703-1c6bc9128fa3", "sighting_of_ref": "indicator--683f3b08-9d4c-455b-9b74-d5fb49532253", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff3e39a-6dc5-4680-8229-0ea4e1599761", "sighting_of_ref": "indicator--b2efde0a-12b8-4b88-b5ca-1b5c04d5b92c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5667c090-6887-43b9-a16c-fbfe3ac203fb", "sighting_of_ref": "indicator--b2efde0a-12b8-4b88-b5ca-1b5c04d5b92c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f0b587-01c0-4b6f-9a30-6dcfbf5acfdd", "sighting_of_ref": "indicator--b2efde0a-12b8-4b88-b5ca-1b5c04d5b92c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c7627d-cd61-4c6c-99f2-152f8f10656d", "sighting_of_ref": "indicator--91dd2de0-0b72-42a5-bdfa-1c49fb59eb17", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c3a5e6-d773-403f-8d9e-999326996f29", "sighting_of_ref": "indicator--91dd2de0-0b72-42a5-bdfa-1c49fb59eb17", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9d5494-fb5c-42df-978f-d655e50c59c1", "sighting_of_ref": "indicator--112a7c56-f7c6-49af-ae92-41ffd1a9d096", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e87a03-6caf-4faa-9d0a-90386b02736c", "sighting_of_ref": "indicator--112a7c56-f7c6-49af-ae92-41ffd1a9d096", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa35e6d9-1c47-45a2-8ae9-b63edb474508", "sighting_of_ref": "indicator--112a7c56-f7c6-49af-ae92-41ffd1a9d096", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d994f99f-c6bb-40d0-9918-253c8c84fbc7", "sighting_of_ref": "indicator--3116a9ec-cda3-4227-b766-58000aab05fa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732061ae-9275-4c0d-8d41-318aafb9cb4c", "sighting_of_ref": "indicator--3116a9ec-cda3-4227-b766-58000aab05fa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6248a445-5491-4108-8e20-ba1680ad8957", "sighting_of_ref": "indicator--3116a9ec-cda3-4227-b766-58000aab05fa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8afc88-d063-453f-ab9e-d2f51d12c052", "sighting_of_ref": "indicator--617ae18c-b552-4238-ad42-4787bd130fc7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7e1bc5-6ac5-490e-a2ac-b71cc838f1a9", "sighting_of_ref": "indicator--617ae18c-b552-4238-ad42-4787bd130fc7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6115ac00-fcd0-4276-8c8b-156d24d0f90c", "sighting_of_ref": "indicator--59fbf175-e20a-4bbc-a0eb-fd6d6de37700", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af23937e-9cfc-404a-923c-23e3b6c35ed6", "sighting_of_ref": "indicator--59fbf175-e20a-4bbc-a0eb-fd6d6de37700", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52a030b-ada6-426f-b8c1-26f669e1c0dd", "sighting_of_ref": "indicator--6351205d-a39c-4f26-ba28-2ada020ef6ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdea3a9-d767-4e30-8e29-d92b07186fa5", "sighting_of_ref": "indicator--6351205d-a39c-4f26-ba28-2ada020ef6ce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ff2ef1-5798-43cf-93d0-5b0be7986f7f", "sighting_of_ref": "indicator--6351205d-a39c-4f26-ba28-2ada020ef6ce", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50dabfe5-ed88-4f8b-91ac-e8f47ed4eb29", "sighting_of_ref": "indicator--6f12a94f-11a5-4c21-a032-f942b71bde65", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1270f087-0601-4ff9-b77d-c870405c82a7", "sighting_of_ref": "indicator--6f12a94f-11a5-4c21-a032-f942b71bde65", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4373aff4-5cce-4612-807f-f583fef57ab0", "sighting_of_ref": "indicator--6f12a94f-11a5-4c21-a032-f942b71bde65", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f76682-acfa-411a-9566-7c8e4cdb22b3", "sighting_of_ref": "indicator--e40aa72b-b6fd-40da-a48b-3c9f96c220bc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d554e3d2-6a49-4f0f-912c-9302d1e189ce", "sighting_of_ref": "indicator--e40aa72b-b6fd-40da-a48b-3c9f96c220bc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5dc182-02cf-4d2f-890c-2b6e00c5c72c", "sighting_of_ref": "indicator--311fb938-8413-485a-a996-65bb8f75d66d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bf7ce0-54ec-4070-a7ad-12ecb6e4f753", "sighting_of_ref": "indicator--311fb938-8413-485a-a996-65bb8f75d66d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cac2d6c-44ff-4443-9b08-6636d5997139", "sighting_of_ref": "indicator--e83f90d6-4884-4bca-9630-ae1de3483a48", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac887bb4-edf3-4e34-866b-919d50989370", "sighting_of_ref": "indicator--5fc92aad-22c3-43e7-a8da-957933c76f6e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ba1a77-22d4-4d6c-802e-b8f32114dbbf", "sighting_of_ref": "indicator--10960464-9608-42b1-9a49-06e8915ae55e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbcfe32-4d52-4c92-8cfa-a21aff859475", "sighting_of_ref": "indicator--b87b2da8-c802-4e7d-a887-389f589c190d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6408e678-529f-4635-ad8e-4b071f845aa0", "sighting_of_ref": "indicator--b87b2da8-c802-4e7d-a887-389f589c190d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3124c296-8f23-4d69-a0d8-e6fb90bbfb05", "sighting_of_ref": "indicator--b87b2da8-c802-4e7d-a887-389f589c190d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431cd5a3-5bf3-4553-8db1-ecf25c7a6f7d", "sighting_of_ref": "indicator--2dfa2648-1f98-4224-acbf-c653c01491ec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ecf114d-509e-419d-92eb-6fee4025c489", "sighting_of_ref": "indicator--2dfa2648-1f98-4224-acbf-c653c01491ec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b068ccd-9d96-4169-b9bc-016a85d41df4", "sighting_of_ref": "indicator--2dfa2648-1f98-4224-acbf-c653c01491ec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9477057c-c907-44c4-8778-158e2e8c6bf0", "sighting_of_ref": "indicator--8186ec00-6b23-4855-9200-ba541867a054", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcbf6cc-af9d-47e9-9846-e8561156afce", "sighting_of_ref": "indicator--8186ec00-6b23-4855-9200-ba541867a054", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe56147-521d-4835-a753-00bdb8cb0a7b", "sighting_of_ref": "indicator--8186ec00-6b23-4855-9200-ba541867a054", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5795af-801a-4cd4-93ae-6f5b89b934a8", "sighting_of_ref": "indicator--5ec7b93c-8c4f-4e25-90b9-89a58da951e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1961aee-9b02-47d7-bb4b-654c2be11b09", "sighting_of_ref": "indicator--5ec7b93c-8c4f-4e25-90b9-89a58da951e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6be136a-4a19-4947-9566-e9216e6f8cec", "sighting_of_ref": "indicator--8e17226b-02eb-40de-a693-1eb848414c81", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4f0768-5713-4766-99c6-f32a088c8092", "sighting_of_ref": "indicator--8e17226b-02eb-40de-a693-1eb848414c81", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3bec58-c697-4924-abde-bd6f0007ac59", "sighting_of_ref": "indicator--d612b94c-9b34-4d68-b06d-9d850eb0cb63", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83386e55-3905-4187-b0c7-789d1c395b02", "sighting_of_ref": "indicator--d612b94c-9b34-4d68-b06d-9d850eb0cb63", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1363a5f3-661e-42e4-a932-967e14136a0e", "sighting_of_ref": "indicator--d612b94c-9b34-4d68-b06d-9d850eb0cb63", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4590855a-264a-406a-81bc-cb9628c957de", "sighting_of_ref": "indicator--1061228a-44d3-4bd1-b68a-fa7a92f92fbb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1cb948d-ba9a-41ed-a6a7-a2f1cddb5825", "sighting_of_ref": "indicator--1061228a-44d3-4bd1-b68a-fa7a92f92fbb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e22c1b-f3a6-4bce-b1a6-6c106f85f96a", "sighting_of_ref": "indicator--1061228a-44d3-4bd1-b68a-fa7a92f92fbb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e5b120-df2a-4f76-9170-86969e7c98b4", "sighting_of_ref": "indicator--8df9fb00-1e60-4215-ba93-8c48588587e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac7889b-29b2-4096-9ada-c710b740bf11", "sighting_of_ref": "indicator--8df9fb00-1e60-4215-ba93-8c48588587e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67e9685-7606-4a0e-b5ec-18748aecbe3a", "sighting_of_ref": "indicator--8df9fb00-1e60-4215-ba93-8c48588587e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3adafdf-eadb-4887-999a-6c696ee7cd64", "sighting_of_ref": "indicator--e9554e80-3f21-4763-a875-2e2341d7e6fa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b376566-166d-411e-a7d7-3e2cc8c36081", "sighting_of_ref": "indicator--e9554e80-3f21-4763-a875-2e2341d7e6fa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8609f9ea-d5f0-465b-b1b5-b9204aca60a1", "sighting_of_ref": "indicator--e9554e80-3f21-4763-a875-2e2341d7e6fa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd1e711-aea7-459a-94d8-4b48e36677af", "sighting_of_ref": "indicator--7676993c-32fd-4a12-8f63-53015d60a730", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876e0cb9-324f-4635-84c6-2e9c7b1f3457", "sighting_of_ref": "indicator--09b239bd-ba4a-40e8-a1e5-954af9e30d6f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984ecaef-98f9-4008-a4c8-ba2b865c88cb", "sighting_of_ref": "indicator--09b239bd-ba4a-40e8-a1e5-954af9e30d6f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c8376a-621d-429a-bac1-e3bd88bd25ed", "sighting_of_ref": "indicator--09b239bd-ba4a-40e8-a1e5-954af9e30d6f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcd6a00-528b-4ea5-9e1a-322c92e4a09c", "sighting_of_ref": "indicator--bf974f64-59d4-4e6f-98c2-e64e3aed54c5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435eb355-ebca-4dd6-88f2-aacbc4e54206", "sighting_of_ref": "indicator--807d4c1a-206b-498d-8315-ffc3e2e198ef", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79384ce6-1954-4147-a4b7-f2ee8e029a66", "sighting_of_ref": "indicator--807d4c1a-206b-498d-8315-ffc3e2e198ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f023a07-9511-42ad-9e83-ae0fe7487fe4", "sighting_of_ref": "indicator--807d4c1a-206b-498d-8315-ffc3e2e198ef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7a1bbf-c18c-472d-b875-235a8afdee57", "sighting_of_ref": "indicator--4eb3ad1d-799a-4aea-af1b-10587ad1ffe8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75624d32-0c98-48de-91a6-9b6532de6a8e", "sighting_of_ref": "indicator--4eb3ad1d-799a-4aea-af1b-10587ad1ffe8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fadb42-313b-4a7b-b331-67d43357d77a", "sighting_of_ref": "indicator--48dacb16-96c3-4e0a-974f-3e142f65f2c3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b095693f-cd08-4957-92a9-d538d3cd8f18", "sighting_of_ref": "indicator--48dacb16-96c3-4e0a-974f-3e142f65f2c3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99c41f6-121d-452a-8f8a-0b008d1df284", "sighting_of_ref": "indicator--35e05c47-f0f9-482c-8aeb-01569f143584", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db050640-ca69-402e-a513-a2ddc95f2b84", "sighting_of_ref": "indicator--35e05c47-f0f9-482c-8aeb-01569f143584", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e13389-0743-4bf0-a9f7-384365d03ba0", "sighting_of_ref": "indicator--35e05c47-f0f9-482c-8aeb-01569f143584", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca1c1dd-4709-4190-9a7d-d37afd4482b9", "sighting_of_ref": "indicator--6214abe6-50da-44e0-bb73-0c39241b9ee7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7abf228-d8f7-4d42-95ba-3f3b4cc03dce", "sighting_of_ref": "indicator--6214abe6-50da-44e0-bb73-0c39241b9ee7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08657a17-ae2d-41b2-8938-e0e67e041f6a", "sighting_of_ref": "indicator--6214abe6-50da-44e0-bb73-0c39241b9ee7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23b5465-3596-4649-87fc-e8547ac330d0", "sighting_of_ref": "indicator--3111f093-f575-493a-b4f4-75935e13a8f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c59fea-7eea-4c7e-ba1c-573fe34f4f0c", "sighting_of_ref": "indicator--3111f093-f575-493a-b4f4-75935e13a8f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daeaed37-4df2-46f8-9ae5-8458e511be93", "sighting_of_ref": "indicator--3111f093-f575-493a-b4f4-75935e13a8f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba807283-5ebd-4e8e-9b33-b2d50d6fc0be", "sighting_of_ref": "indicator--859e163a-660c-48a3-970c-79d37782bddc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf42aac-a83f-476a-842c-c6fd556361a8", "sighting_of_ref": "indicator--859e163a-660c-48a3-970c-79d37782bddc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605d4b10-7cfd-4490-84b5-56901ddc7874", "sighting_of_ref": "indicator--859e163a-660c-48a3-970c-79d37782bddc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64af2769-694c-4613-968f-769de6fb94e6", "sighting_of_ref": "indicator--2f8f996f-d70a-4407-91c0-2fd42770afa1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e33420-87fe-4773-a497-712836a4fe88", "sighting_of_ref": "indicator--2f8f996f-d70a-4407-91c0-2fd42770afa1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16558bf9-9bb5-4fc9-8d74-4f7ef0c6c24d", "sighting_of_ref": "indicator--2f8f996f-d70a-4407-91c0-2fd42770afa1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d464e780-8d24-4d39-a971-9b8d404f831e", "sighting_of_ref": "indicator--d76e842f-950c-44b5-b57c-6d78250ad180", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72dbcd93-996e-4133-a854-f6dc438993e1", "sighting_of_ref": "indicator--d76e842f-950c-44b5-b57c-6d78250ad180", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0adb12-c901-43b8-ae1f-2a8779d7b222", "sighting_of_ref": "indicator--d8d781e1-132f-4b0e-b9f5-66571821364c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58d89fa-71e0-48ba-abac-8cc069a01c20", "sighting_of_ref": "indicator--d8d781e1-132f-4b0e-b9f5-66571821364c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d59f25b-d9f0-4292-8d1e-d8e58e301557", "sighting_of_ref": "indicator--80131e32-a1e9-4fce-a572-836e4b2ae8f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bc9ada-3278-4210-a443-3a8b95480994", "sighting_of_ref": "indicator--80131e32-a1e9-4fce-a572-836e4b2ae8f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3206fd6-270f-4cbc-b7a8-9c9027ddd1e2", "sighting_of_ref": "indicator--80131e32-a1e9-4fce-a572-836e4b2ae8f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922c9dbc-a67a-4f47-aa15-3d375b9321aa", "sighting_of_ref": "indicator--12fa6147-302a-435d-a214-83ca6c5c9022", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1014ca51-7b2c-43bf-9f95-6e2f2d286b78", "sighting_of_ref": "indicator--12fa6147-302a-435d-a214-83ca6c5c9022", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e997790d-1731-41f3-b5b5-2471c2fa5d99", "sighting_of_ref": "indicator--12fa6147-302a-435d-a214-83ca6c5c9022", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e14160-6c6c-4a38-abf6-e094f9601b4a", "sighting_of_ref": "indicator--4ba7a2fe-0808-4cae-acd9-3a91bfdd6929", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600b1b02-c60f-4107-a867-16b06d3b4372", "sighting_of_ref": "indicator--4ba7a2fe-0808-4cae-acd9-3a91bfdd6929", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6c2cdd-207f-4798-b9f5-4ac271a19655", "sighting_of_ref": "indicator--2b57d709-5343-44b8-8380-c61a90404adb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802e6d61-bfb8-430d-b822-b931c6afdfa3", "sighting_of_ref": "indicator--2b57d709-5343-44b8-8380-c61a90404adb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a82fb9c-3f25-460a-b784-e3bfd22502aa", "sighting_of_ref": "indicator--2b57d709-5343-44b8-8380-c61a90404adb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f67d3fd-5de1-4dc5-8b49-18b644d5330b", "sighting_of_ref": "indicator--273f0fbc-7501-4e2c-b1dd-77e3f0bbeab6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c641dee1-0dca-4887-888c-a1d2312c1e71", "sighting_of_ref": "indicator--273f0fbc-7501-4e2c-b1dd-77e3f0bbeab6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8117ba3-0185-456b-81f5-27163546c4b7", "sighting_of_ref": "indicator--273f0fbc-7501-4e2c-b1dd-77e3f0bbeab6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26ade67-5605-4538-8184-424de0894ad0", "sighting_of_ref": "indicator--7bb72957-9ccb-479e-9350-88f106f8af84", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd3c934-c50f-41f3-81b6-a33100f81917", "sighting_of_ref": "indicator--e2faf753-45b4-4bf7-9ff1-359ce4718794", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68a8ba1-63e4-4177-9092-f8ea34b342ca", "sighting_of_ref": "indicator--e20df63c-0d08-4e45-9458-6c8ac22d706f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8c54d7-4503-47cb-99ce-2a8a4f53e738", "sighting_of_ref": "indicator--eccb9f94-3cc3-4ca4-8334-9082280f39b5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e6b255-f9bc-4f76-a236-78f8b11344f7", "sighting_of_ref": "indicator--9dd1a4fe-5da7-49fd-8f9d-a86f6a9809c2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81b4b17-df2a-4529-b60f-0e0af7fc6f92", "sighting_of_ref": "indicator--3e212173-5eb9-4959-b805-b3f3af32b225", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4764b119-1029-479f-b01b-552056b9db3e", "sighting_of_ref": "indicator--30b8998a-8b70-4ec5-a2c2-89e50312dd68", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb964a4-7e41-483c-8cc5-ef27c0ad873a", "sighting_of_ref": "indicator--30b8998a-8b70-4ec5-a2c2-89e50312dd68", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c185f07-0869-4920-bbdf-c0055fc2245c", "sighting_of_ref": "indicator--23151f67-3d6c-4d9f-ac0b-2a9ceb9cdf79", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f030e76b-8fb1-4060-a3b7-1d543a74ca1f", "sighting_of_ref": "indicator--d990bec4-dd3e-4f25-8a87-b54061aa54fc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb452a7-8768-40b2-ad6c-540d199bab36", "sighting_of_ref": "indicator--93524934-0b1f-452e-be17-3252bf81f739", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab618bd7-6588-432f-80ae-a30a2b27b729", "sighting_of_ref": "indicator--91659595-1937-4a93-800e-ce8e8c66d38a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9821f10-5926-4d68-80ed-04e4d7471059", "sighting_of_ref": "indicator--3b5a0467-a501-419a-bfcf-b745960bac3e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993f0879-8b72-4954-a1db-88a5bb25172a", "sighting_of_ref": "indicator--3b5a0467-a501-419a-bfcf-b745960bac3e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20623168-f271-4b45-aff8-446b779783cb", "sighting_of_ref": "indicator--3b5a0467-a501-419a-bfcf-b745960bac3e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9150bd5-511b-4fe4-9d05-06b87b18a92c", "sighting_of_ref": "indicator--409fc7ac-9e70-46c2-9c07-3e0af3303cc4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe4d20a-fb27-4c98-9dc5-bfced51a5d00", "sighting_of_ref": "indicator--df1150eb-1414-4d21-ac86-a2f11ed5d849", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1309eefb-a834-4e12-a348-c031d2117e97", "sighting_of_ref": "indicator--08f69e22-b3c4-4c8a-84b0-252067de06ae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce78b675-2407-4271-afc1-d388e5976e28", "sighting_of_ref": "indicator--08f69e22-b3c4-4c8a-84b0-252067de06ae", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79b166b-317a-4a87-8f79-b78ed932a18a", "sighting_of_ref": "indicator--08f69e22-b3c4-4c8a-84b0-252067de06ae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e132159-3e89-4b26-99ac-ee1344ac95aa", "sighting_of_ref": "indicator--29c01fa8-eda4-4667-8444-496498312297", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11df9c46-9ae4-4161-a799-ceb15171d983", "sighting_of_ref": "indicator--29c01fa8-eda4-4667-8444-496498312297", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73013cca-76f6-4cd9-91c0-390ed2619846", "sighting_of_ref": "indicator--c7ba6093-53ef-460e-9695-14fec0bf8283", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f2fbcc-242b-4df3-8c6b-9db9a56154ef", "sighting_of_ref": "indicator--4f6b34f9-2047-4661-9b24-175c4b4e6f81", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7004ec73-a69e-4b5c-a8f0-f33b1aea27f9", "sighting_of_ref": "indicator--4f6b34f9-2047-4661-9b24-175c4b4e6f81", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440cc5c0-2d19-4ba1-a898-7df798548c06", "sighting_of_ref": "indicator--91a86705-3205-475a-8539-0b4da768b223", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab681be8-f43a-49d0-a1d0-91add3d1c722", "sighting_of_ref": "indicator--91a86705-3205-475a-8539-0b4da768b223", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47a6f78-3d87-40c5-8a34-80c7d20bd451", "sighting_of_ref": "indicator--a0cb7e01-b077-4814-9711-0ba37f2ae809", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001b0a76-cc3b-4c5a-ad97-915312f50b9d", "sighting_of_ref": "indicator--c56c8144-0e1d-419d-826b-ed84f6f3b46c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae489c1-f492-4a22-a097-9d025422a7d3", "sighting_of_ref": "indicator--c56c8144-0e1d-419d-826b-ed84f6f3b46c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fbd452-ba0a-49b3-9d62-909606058aee", "sighting_of_ref": "indicator--c56c8144-0e1d-419d-826b-ed84f6f3b46c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79072d4a-5247-44c4-9655-c1637e53ab0b", "sighting_of_ref": "indicator--14c22103-c9e7-41c8-b50e-6682db520211", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bba472-160a-49fa-9c06-2cf410e742f7", "sighting_of_ref": "indicator--439db0b5-63ec-4382-99da-e726f2a5f085", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0acb0df7-27c4-4197-b8e9-d692c712ee1a", "sighting_of_ref": "indicator--00aff5e8-3f09-4581-b41c-bc69f5609abf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ab4d70-479d-4d58-b042-afd8bb9a9de6", "sighting_of_ref": "indicator--00aff5e8-3f09-4581-b41c-bc69f5609abf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deff47cd-d291-46f0-885f-0a1101f9bf9f", "sighting_of_ref": "indicator--00aff5e8-3f09-4581-b41c-bc69f5609abf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff7228c-68cd-4215-97ee-391eefebf44e", "sighting_of_ref": "indicator--7d2bdd4c-d6e0-4cec-8c7e-085cff0bf162", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2459d2-b732-4abe-9bc6-e52080d5afab", "sighting_of_ref": "indicator--7d2bdd4c-d6e0-4cec-8c7e-085cff0bf162", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37e655e-570b-4826-b6c3-1a3233324643", "sighting_of_ref": "indicator--7d2bdd4c-d6e0-4cec-8c7e-085cff0bf162", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c24009b-c373-4695-a34c-c7085695a0b8", "sighting_of_ref": "indicator--a31f051f-97a7-476e-838b-9821999f2d6f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb2a24d-f2e8-48f2-8405-a8647d957777", "sighting_of_ref": "indicator--dbbf1f36-822b-4429-ac34-682c1182f31f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d41ec7d-fe61-4e03-a4da-7515c882a65a", "sighting_of_ref": "indicator--dbbf1f36-822b-4429-ac34-682c1182f31f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbc3940-c648-4957-91ca-87957add39c2", "sighting_of_ref": "indicator--3939dce0-7bcd-48c5-b1e9-67a452c2d288", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c279e2a2-00c1-44d3-8ff5-40ff504ebfac", "sighting_of_ref": "indicator--e73510a9-ca41-400d-be69-44f03c9b92ec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcbdbb1-e730-4299-909b-f8afdbaae725", "sighting_of_ref": "indicator--e73510a9-ca41-400d-be69-44f03c9b92ec", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18afa735-ee7f-4df7-b7f8-314a16b742e0", "sighting_of_ref": "indicator--e73510a9-ca41-400d-be69-44f03c9b92ec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678ce31d-57dc-4723-bc73-b4753f21c7bf", "sighting_of_ref": "indicator--d7503f4d-40f7-4b8b-a2a4-675a2110a4ab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ca76d1-59d4-4344-8a24-0e7b3a6caa3c", "sighting_of_ref": "indicator--d7503f4d-40f7-4b8b-a2a4-675a2110a4ab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdfa81a-bbaa-4b49-80e7-0ace34ba42ad", "sighting_of_ref": "indicator--30eec24b-ced8-4023-b373-e30423a0abf9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f530276e-0879-4953-97d8-0477387ded05", "sighting_of_ref": "indicator--d1bc2489-7df4-46f3-aa32-d7186bc17bf9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080d00e5-b4af-4920-b85b-39c447af544e", "sighting_of_ref": "indicator--4675927c-999b-41ec-9a9c-6a40acb768a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959895f1-8eec-43da-a994-d1fe5784e0cb", "sighting_of_ref": "indicator--4675927c-999b-41ec-9a9c-6a40acb768a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc91c1b-cb44-4848-93ef-3d2cefe22a5e", "sighting_of_ref": "indicator--4675927c-999b-41ec-9a9c-6a40acb768a7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bad680-fa44-46ac-a89a-9fcfa4b38f3a", "sighting_of_ref": "indicator--b994d62d-3c7f-4a4d-94c7-3f2fed4cf03f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2dc5d8-73e8-4efd-a4aa-188469eb0841", "sighting_of_ref": "indicator--b994d62d-3c7f-4a4d-94c7-3f2fed4cf03f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5117ec04-eeb1-4926-aa3f-677d1b7052ab", "sighting_of_ref": "indicator--df99afed-922a-454c-b34c-c0e3ee61988a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c877fd-0e6e-4baa-8327-0d4f77feaf87", "sighting_of_ref": "indicator--df99afed-922a-454c-b34c-c0e3ee61988a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22260987-12a1-48c8-8bec-a90073701974", "sighting_of_ref": "indicator--75e1119f-0cc7-47bf-bac2-8f1d9a73a793", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378b3427-e61f-48e6-9997-9a6d471f3941", "sighting_of_ref": "indicator--b0428f70-c205-4e8f-8bac-a666057563cf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef02144e-8b98-40fb-8414-69076e05623d", "sighting_of_ref": "indicator--b0428f70-c205-4e8f-8bac-a666057563cf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ce3bca-2081-407a-b420-24788acd7333", "sighting_of_ref": "indicator--b0428f70-c205-4e8f-8bac-a666057563cf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80859ace-d5d9-4671-9efb-83e6a4a40a2b", "sighting_of_ref": "indicator--a015bbc4-ee72-435c-a39b-00ff18ae1b96", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c3165f-8fa5-4bb0-87f6-ef407361cc83", "sighting_of_ref": "indicator--a015bbc4-ee72-435c-a39b-00ff18ae1b96", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c77c72-c9d1-4cce-8b22-73380cf347c6", "sighting_of_ref": "indicator--a015bbc4-ee72-435c-a39b-00ff18ae1b96", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a464d61-73f8-46be-910d-600e57ad2dd9", "sighting_of_ref": "indicator--2095a23f-e70d-4f22-9b83-9b8de35f8386", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5182600-d98f-4c58-b83a-e76a90a11217", "sighting_of_ref": "indicator--2095a23f-e70d-4f22-9b83-9b8de35f8386", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fe08ef-7066-4df2-9d16-f67c886258d7", "sighting_of_ref": "indicator--2095a23f-e70d-4f22-9b83-9b8de35f8386", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193b7b98-6e3b-4d7c-a98d-3cf640344dbc", "sighting_of_ref": "indicator--db6b75bf-1396-4c75-af28-0d2be0120bf4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a6e083-238d-490d-831d-4af5dbc29514", "sighting_of_ref": "indicator--db44693d-1320-4f48-93c7-06fb2c1f960f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f045862e-a5f9-4c09-806b-ad8eb6c3d2d3", "sighting_of_ref": "indicator--c60c2d03-8da9-4552-b1e4-d5aafd4b824f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da889907-76dc-4301-9a99-0513204886ce", "sighting_of_ref": "indicator--54af4ac8-5275-448b-b6fb-ae6bdd09a4b5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02965571-5c40-49e0-9903-8748ce124401", "sighting_of_ref": "indicator--54af4ac8-5275-448b-b6fb-ae6bdd09a4b5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d46586-da64-4ca7-b08f-eb1cab96ec83", "sighting_of_ref": "indicator--8f21eafd-0e7d-4566-a4ea-fcbcdd90b6e1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b5d5da-fb9a-4961-b56d-619c955b0aad", "sighting_of_ref": "indicator--f862cb64-8a6c-4507-8dae-4e051dfc9113", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c43398-5782-4147-bc64-9cb45e9a8ee0", "sighting_of_ref": "indicator--4640e5e6-9d2a-4c58-b343-651e87d296e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a68d8a-1d8c-45d2-b949-1dd37a3970c6", "sighting_of_ref": "indicator--c33f0034-e746-4e19-b451-014e793feb87", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d271eae-fd6f-48a4-9a4c-e836dfe35317", "sighting_of_ref": "indicator--c33f0034-e746-4e19-b451-014e793feb87", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6bb0e0-1dba-44dd-85e1-19eb5a342293", "sighting_of_ref": "indicator--c33f0034-e746-4e19-b451-014e793feb87", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b22723-947a-420f-aa28-c47789e377ee", "sighting_of_ref": "indicator--86ed6542-af8a-48f7-8c69-72ad18cbe5f5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3eb71d3-ed4f-4104-88c9-a345b3266fc6", "sighting_of_ref": "indicator--9c85a0c0-b876-4cf8-abde-2de71db2f6a3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29dd8664-cdd4-4655-a9c8-ecc222815053", "sighting_of_ref": "indicator--f2ade97b-cac4-4cf8-9365-884dfef9e3dd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e21a70-c2c5-4aaa-ad5e-1648d7f0c3e4", "sighting_of_ref": "indicator--9a636055-a811-41a7-aaa8-458d100cb1aa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5f463b-de9a-42b8-8095-ebc89a57934d", "sighting_of_ref": "indicator--bb942ec7-03cf-4f99-8b17-8f4f5da581fd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6c8764-4bc0-4a38-a784-ec70130bfb35", "sighting_of_ref": "indicator--9213a104-9ede-4717-9be8-3cf6fd1b1870", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b38e3ab-7936-4b73-a234-fc4453010a84", "sighting_of_ref": "indicator--a67e2808-2f29-4578-a6f7-e29043404c3f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f1a869-66cc-4c5b-94e5-d7d3a288fe33", "sighting_of_ref": "indicator--005b8a54-1d41-4bda-b628-eee40d830024", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bdddd5-18dc-42b5-9748-ef979618a36f", "sighting_of_ref": "indicator--fbb895dd-0be1-4e9f-affb-6813a2af5ac2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4003d5aa-e635-4065-9bb8-d4c23ad698b3", "sighting_of_ref": "indicator--70c47431-3467-4b4c-9a25-11ca5baf9d6d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627b3ecd-294e-41db-8383-9fdb064ab9ec", "sighting_of_ref": "indicator--9ae0ff0a-e741-499c-b96e-e5979a75fc19", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356ab7e0-32f4-4279-99ca-b09a1aa3b6d9", "sighting_of_ref": "indicator--2e34d7ed-405f-4ad4-aa1a-4ffa4159d51a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a25cba8-aff5-48f6-8a7d-3e0bede655b8", "sighting_of_ref": "indicator--a5ba2396-6c4c-414c-99da-ecf3ba73e3e5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9df5d44-7b52-43b4-9939-b101bc35fe96", "sighting_of_ref": "indicator--adb87867-347b-43a5-b7a8-c8738c479ef4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e3fe54-f93b-4328-a936-495b0a14a2fb", "sighting_of_ref": "indicator--7ef74668-5fd0-4dad-a03e-05961500b5da", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0e2f71-2609-4508-9a18-78e6a30fd9da", "sighting_of_ref": "indicator--ea84b80b-050d-4f9e-9f15-08c0ad5a3a23", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c179a0-9ad3-4289-a11a-29f357e00d46", "sighting_of_ref": "indicator--86c9dd77-a6a6-4c9a-8648-1729b38575ad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195afe90-7723-4138-936c-baa75feb4d33", "sighting_of_ref": "indicator--86c9dd77-a6a6-4c9a-8648-1729b38575ad", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4941865-9ea4-4da5-867e-c2c2612c4a82", "sighting_of_ref": "indicator--86c9dd77-a6a6-4c9a-8648-1729b38575ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c00dffc-d0cc-4336-80cf-abf4e05a8c5e", "sighting_of_ref": "indicator--d1a52d0e-b8f7-4001-a7f8-bf34ba44cbce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83408da-aaae-47ed-8009-59814b2782e5", "sighting_of_ref": "indicator--d1a52d0e-b8f7-4001-a7f8-bf34ba44cbce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7280f3f-3430-442b-bec0-29f79eea2579", "sighting_of_ref": "indicator--d1a52d0e-b8f7-4001-a7f8-bf34ba44cbce", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2763bdb7-fb47-41d2-9f70-dfd6590585f8", "sighting_of_ref": "indicator--c3f8358b-376b-45dc-a519-13479de80f6c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f281ed-3fac-4367-b4ea-d931750f852d", "sighting_of_ref": "indicator--806f7efb-0584-4c14-82a4-9eb115748f32", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c27330-8c3d-416c-859c-c0bc33dfffa4", "sighting_of_ref": "indicator--67696e98-f434-4806-bed7-336c2939c07b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd707f8a-859a-4b04-9c91-5669b7ffb6ec", "sighting_of_ref": "indicator--7bd1ee31-1e2a-47e2-a05f-ec306cb61ce0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411d3e39-621f-45c5-bb46-bc52790cdd45", "sighting_of_ref": "indicator--1f4fb7fc-5174-4b9c-bbf3-e307835b0edd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5327e6d4-35d0-4498-ac1b-ee760f8e665c", "sighting_of_ref": "indicator--5f358526-3416-4370-ab2a-b66ba7842df2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290842bc-25a0-4b1c-87c6-a721df50dee4", "sighting_of_ref": "indicator--3e5d8b48-2384-4b3f-acd1-c7fc6419807c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba901055-2fb5-43b5-ba72-739b490c5cad", "sighting_of_ref": "indicator--7f97afce-76ab-473b-9f88-48e6e8cc636c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa85d062-f8b6-45f6-8fe2-ebc25e408475", "sighting_of_ref": "indicator--9adf29ab-0fb1-42ef-8fd8-2d0a411c87db", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8f6035-7dc8-4f8a-9859-c8ed7e28aa91", "sighting_of_ref": "indicator--521756ce-c6a3-4990-98e1-1d02b31198e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2167b00d-011d-4e67-a7ea-a0e9f1d7235b", "sighting_of_ref": "indicator--cf6326e1-f1c6-4a96-8524-d137cfd3f77b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1952f91b-51ca-4197-8446-1670ac7c51cb", "sighting_of_ref": "indicator--dad2761e-6d5a-4dbc-9b57-34932d2b9069", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67661d7-daf3-4c49-95f7-9c20268b0ea2", "sighting_of_ref": "indicator--2d442053-e268-488f-8c6a-3277d1b71a55", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d00c1ef-ffe7-4816-9094-bdbb78ea4d3a", "sighting_of_ref": "indicator--8a425105-448d-4e90-aece-682126686478", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e40e0f1-3a08-44c7-8c0f-b7354be8f94c", "sighting_of_ref": "indicator--6dfeb977-eb64-4569-a482-a2ee6d03e79d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d69136-bc7c-4f70-b985-752e7cca9f2c", "sighting_of_ref": "indicator--0039cc53-4b51-4ede-8b10-f8b85b594f7f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0344d0-ab95-4f37-b627-9a4603e540d2", "sighting_of_ref": "indicator--6efe8734-b930-4f67-9ee1-79b1dd832beb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3edf5b0-7307-4ef9-a9eb-bff92c1a1151", "sighting_of_ref": "indicator--d4345451-d97e-4378-abe9-b602174d6c9f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01fde616-5fcc-4532-82c7-28ca1051c37b", "sighting_of_ref": "indicator--2f774574-c51d-412d-9c22-74d1d3b55cc4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6969e04-783b-4505-8df4-073b0328093e", "sighting_of_ref": "indicator--2f774574-c51d-412d-9c22-74d1d3b55cc4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d3ae17-1ea2-4e96-925b-48608c29536e", "sighting_of_ref": "indicator--c4c54d06-6472-4b7f-b5ec-7f2f80a2b5de", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b84cba5-68a5-4dcb-a02f-79a1b3f32f31", "sighting_of_ref": "indicator--270937df-e35c-4929-b78d-959058797d89", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb73b66-6680-4e35-8b2b-afd0528402df", "sighting_of_ref": "indicator--1cf4d354-5f63-45da-bcc0-ccbd0ee528ec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c33107-7a99-45ef-91c0-972e788dd785", "sighting_of_ref": "indicator--9d60b95b-4679-4dc5-980c-545d312ceff3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4deeb33-4999-44e8-b870-9b9574d9d443", "sighting_of_ref": "indicator--080d9c6a-4512-461d-91a4-d480d5850180", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15572921-c90c-4d15-b410-a302ebc9ae0b", "sighting_of_ref": "indicator--56e2e9fe-6961-4bcb-861c-a9861571ea88", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc70c614-f0fd-4cfa-a6ec-fe3c762287dd", "sighting_of_ref": "indicator--cd285ba7-7645-4192-9010-bda9310b3801", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9a1415-5949-4aaf-8527-06e0f652b62b", "sighting_of_ref": "indicator--5f3cea5e-8d6e-4457-8e9f-b823ee819ce3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92af71f4-668e-4974-9b6e-fdc17ae826f3", "sighting_of_ref": "indicator--027ce95b-5cf7-4f39-a89f-329cd9507ad5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34af2072-35e9-4f35-b8a3-dce514835d4b", "sighting_of_ref": "indicator--347006ae-a494-4c86-ad91-6f64321b83f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74e9021-d9bb-480a-82e6-6de70314f6c7", "sighting_of_ref": "indicator--3fbfa266-7f1f-43fa-a3ba-31a275500ee0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6f715a-a13e-4abb-a583-bb4194ae1af7", "sighting_of_ref": "indicator--851cebe9-b896-434d-a454-d46c70730d08", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111d3a28-7698-406c-b224-0fb307ec7243", "sighting_of_ref": "indicator--f0797f55-8ec9-46c5-a676-b3dbdf1c9a38", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be00106b-ad64-481d-b886-9600ea0646d1", "sighting_of_ref": "indicator--1ca235b0-4519-432b-89f5-728d533dcfd2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d0304f-dcc8-4a6a-bcd5-d8153be5199d", "sighting_of_ref": "indicator--1ca235b0-4519-432b-89f5-728d533dcfd2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b8e75c-f570-4f8e-9198-af1928bd6206", "sighting_of_ref": "indicator--7237c457-80a7-48b8-b4bb-7c3119913cd9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c701be6b-a9cc-4310-9470-d466ae1c814a", "sighting_of_ref": "indicator--42623d34-78eb-403b-b801-bc8c59ac2563", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3545fc4-de39-4550-a531-9ca6b718bfb8", "sighting_of_ref": "indicator--f103e2c1-6517-4450-94cc-0a3498650eb4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c7b923-df18-47c8-a89c-4fec3a9b9cd8", "sighting_of_ref": "indicator--f103e2c1-6517-4450-94cc-0a3498650eb4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c96c67-71b2-457a-b390-0d58139ececc", "sighting_of_ref": "indicator--18773e29-d378-4003-b5e0-11c812e2788b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c17deba-4a1d-491d-a7e3-33d2510d7ce7", "sighting_of_ref": "indicator--ac4d1f86-342c-423b-bba1-74789dad8af0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ddaf986-3121-48a9-ac04-5e5559fcdaee", "sighting_of_ref": "indicator--a0480e5a-be4a-45ed-941a-ce7432c3e86a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5bd8cef-78fc-4a3b-855e-a1b0498775fd", "sighting_of_ref": "indicator--a0480e5a-be4a-45ed-941a-ce7432c3e86a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30b5edf-daad-4074-a762-6987250c4a65", "sighting_of_ref": "indicator--a3c6503b-b986-4df5-a2e7-bec4338f7fa3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af1b1fc-4294-4a79-ae35-d6b69b96e6d0", "sighting_of_ref": "indicator--043c3582-cb41-49ee-a278-e5a57203fa81", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67747c85-dbc0-4d08-92c9-391f892f0971", "sighting_of_ref": "indicator--34a74b24-dd3d-4a21-bef5-8edc1b4e33ad", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a6cb99-97db-4e1e-8e9e-5cabdf0b832c", "sighting_of_ref": "indicator--bb6f9614-1ace-4192-9555-db17378a58dc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7eaadb1-c392-41d0-af2f-154a4e02dde7", "sighting_of_ref": "indicator--26cd5cdb-9ccc-46d0-bd4e-b9e3a2b2dd64", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c7d33b-77a2-4dfd-9509-b6538b47ef7c", "sighting_of_ref": "indicator--26cd5cdb-9ccc-46d0-bd4e-b9e3a2b2dd64", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec57258-53db-41d7-8cfc-dd4ee4cdc326", "sighting_of_ref": "indicator--a4148638-efb2-4d3f-9631-1e5abbfff65b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a17371-a005-4473-9a97-9e07081dffc0", "sighting_of_ref": "indicator--a0c967b2-219c-4624-bccb-6288f6786896", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d52c67-db3d-4fb7-9219-ecc39c5a088e", "sighting_of_ref": "indicator--a391ad38-f218-4c9f-be87-bc75cb0a212f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fde5ae-c057-465f-94a0-9e265b48d292", "sighting_of_ref": "indicator--8fcd54d6-99b7-4fc7-96a0-881b441648a0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0afd8bf-aa9d-4384-872c-c8e20cc26d07", "sighting_of_ref": "indicator--d49f0e56-df34-4125-8e94-ff6ea5d2edee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e913310-0a25-4d03-8e07-65b7a012026d", "sighting_of_ref": "indicator--d49f0e56-df34-4125-8e94-ff6ea5d2edee", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620d84ea-0ed6-4815-8e1d-64a20c6ce26b", "sighting_of_ref": "indicator--2c333c27-38ae-435f-9a8b-881c4febe175", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e101d4-6fe8-4371-a053-fd790a10cffa", "sighting_of_ref": "indicator--a6bb3fa4-992c-4e95-93c8-4144463c578e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7ae1d5-77bd-409e-a9a5-0f0528ae32ee", "sighting_of_ref": "indicator--a6bb3fa4-992c-4e95-93c8-4144463c578e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b52ccb-f15c-4027-a151-bfbc013f03e0", "sighting_of_ref": "indicator--e7ff2e06-0024-4f12-91f0-47cc669e80fc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739b333a-1528-4b31-a3fa-108e9db7294c", "sighting_of_ref": "indicator--ab5bd015-d82c-4eb4-a79c-a4356ea565bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79557c57-0582-4316-b1d1-388980ed63cf", "sighting_of_ref": "indicator--ab5bd015-d82c-4eb4-a79c-a4356ea565bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828ff692-e6b2-4c0c-8551-a50f3f3f7c3e", "sighting_of_ref": "indicator--b9f2e1e9-01c8-4d54-817f-95f145962c72", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ca1655-b885-4c47-ba33-bb8ebfdef1d8", "sighting_of_ref": "indicator--4c45998e-a908-49c9-b20a-5633274cfa12", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb56c6e-19ec-4b09-b41d-be2191cf8ef1", "sighting_of_ref": "indicator--4c45998e-a908-49c9-b20a-5633274cfa12", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2c8c72-8515-40b0-9776-b2d29977e801", "sighting_of_ref": "indicator--4c45998e-a908-49c9-b20a-5633274cfa12", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b995d5-acc2-4cf2-af39-c0350aeb1aad", "sighting_of_ref": "indicator--8b5adbf2-22d8-4afe-a484-f7249951ba1a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa56fbca-c1d6-4c8e-a327-6e8fd10f6ae3", "sighting_of_ref": "indicator--aa38c214-9c40-464a-a369-1eb7efedd537", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39afb58-0171-4cfe-b020-5903f2ce760d", "sighting_of_ref": "indicator--cc7067f8-2193-4c63-962f-25b9b954c66b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1c8df5-7822-46f4-9e1a-80aafc2c6721", "sighting_of_ref": "indicator--95788535-8391-42d4-a450-539acb321634", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8cb713-3115-469e-93bb-c51cf961647e", "sighting_of_ref": "indicator--d0f525fc-dce2-45ec-8d65-f03541679e44", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5f5da5-07af-4972-9581-6b9e7dd5f9da", "sighting_of_ref": "indicator--727506f6-203f-4615-9422-4b342ab8414a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c334f7-1e85-48c3-ac01-fde52c65c77b", "sighting_of_ref": "indicator--fe09f48a-4f22-4616-b698-56308a0a242e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb76bdb2-4f1b-49ab-a5d8-6dc91d6e61d8", "sighting_of_ref": "indicator--fe09f48a-4f22-4616-b698-56308a0a242e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3a5ab0-4196-4543-928c-86d9985e1261", "sighting_of_ref": "indicator--fe09f48a-4f22-4616-b698-56308a0a242e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a3fed5-4567-43b4-ba5a-39ab3aa9378a", "sighting_of_ref": "indicator--de2c8cbe-d9b7-426d-9152-3975c96c5a78", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f4c87b-78cc-4c56-a173-21f2901172bb", "sighting_of_ref": "indicator--de2c8cbe-d9b7-426d-9152-3975c96c5a78", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d5ea87-bbad-45f1-8c10-828b92c1776d", "sighting_of_ref": "indicator--da26bce3-2566-4aa5-85ba-98a48a245a01", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1d00a9-91d0-4824-9184-506b45c70db2", "sighting_of_ref": "indicator--24746ee0-c917-4351-b257-d38d1e76fecc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df7540a-3400-48a3-a583-8a08f3e538da", "sighting_of_ref": "indicator--bce26baf-d595-4aa7-b7e0-cb205287724d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd186dc-fed5-437f-88dd-acd350262c23", "sighting_of_ref": "indicator--7a6ae2c2-83b1-4712-8fe8-df25ca9075f0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9250546b-1a88-4b47-852d-30c1d8913359", "sighting_of_ref": "indicator--1df88f5e-a97e-42bd-b367-5977508f3b46", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17909600-9d8b-4e5f-bb10-0d3702f305eb", "sighting_of_ref": "indicator--e0f1dc35-05fc-41ed-93d8-b88d3cb43d38", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00249683-9a8a-4710-9e32-b0cfdbb9f20f", "sighting_of_ref": "indicator--148c02a9-d196-406c-87b2-0f3cf95e56fb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7445fbd1-60d1-45f1-aa56-2d6644cdbee5", "sighting_of_ref": "indicator--fbed6439-fb56-4fa1-9363-c8e0881c62e3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a752117-d0fd-4e59-a00b-75aa62dcc68a", "sighting_of_ref": "indicator--41ef75fa-a5e3-4e40-aaa1-5c4500c4fcae", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8722289e-27ba-41c6-946e-cd2624bed4ec", "sighting_of_ref": "indicator--4007a268-c11f-4747-885f-cb99cffeede4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b4d906-594a-4646-8111-727a4222032b", "sighting_of_ref": "indicator--bc79969e-26ee-4163-9f8a-d34434c65b90", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6566c93-d69c-4cd9-8b78-69df1e2d5c5c", "sighting_of_ref": "indicator--6bba87cc-38a6-4de3-8e3d-c0c03e693996", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38015c7d-cd10-41d9-8c0e-8a13b62f1301", "sighting_of_ref": "indicator--ddaae9a6-467e-472a-9170-eb3f50f6e746", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7230aa13-7510-4e19-b56d-3df33e07fe04", "sighting_of_ref": "indicator--f03b63a9-f024-4c24-a3b8-452c316daf7c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f499548-fc12-4c97-b63f-f9e617378af9", "sighting_of_ref": "indicator--e3710855-1cd7-4e4d-884a-b0e372fd7d74", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f935f93-2886-4dbc-8987-6bca00add6a5", "sighting_of_ref": "indicator--e3710855-1cd7-4e4d-884a-b0e372fd7d74", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ab35c5-da5b-436a-9a76-a2092e0b1450", "sighting_of_ref": "indicator--e3710855-1cd7-4e4d-884a-b0e372fd7d74", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecaefaa-7cad-42ec-9e84-80c4dc26f808", "sighting_of_ref": "indicator--2fff97f1-0ac0-4a30-b067-a0305cfa1b3a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc92844-9825-4abd-9aff-1ae12da8c9e0", "sighting_of_ref": "indicator--7e0e7fbf-e834-4ddf-bcf3-63574e8e36d5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d23f8fd-30d3-49dd-a478-35cb2583ce17", "sighting_of_ref": "indicator--7e0e7fbf-e834-4ddf-bcf3-63574e8e36d5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195250c4-35a3-4331-a762-9adcec3b7307", "sighting_of_ref": "indicator--7e0e7fbf-e834-4ddf-bcf3-63574e8e36d5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04481405-4ba6-490f-9f07-90e08c2990f6", "sighting_of_ref": "indicator--7f97b029-d0b2-4699-9054-16930c2bb602", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8737d71b-5cea-4763-8485-caccd43ef7a0", "sighting_of_ref": "indicator--7f97b029-d0b2-4699-9054-16930c2bb602", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660f5c86-1514-47b7-8315-cbf4c082c36d", "sighting_of_ref": "indicator--7f97b029-d0b2-4699-9054-16930c2bb602", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a446fff-42f1-4323-8960-8f13ff29d261", "sighting_of_ref": "indicator--a1e9ddec-eb62-4fc8-8f70-b6f52c632486", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9912667-9a5b-4d2e-8056-fbe072814f20", "sighting_of_ref": "indicator--a1e9ddec-eb62-4fc8-8f70-b6f52c632486", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d460ab9-5079-46b7-8642-6f86afa9c58f", "sighting_of_ref": "indicator--dd3d105d-829e-493d-b72b-c7112185f519", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ffdc57-9927-4202-b945-408703dde043", "sighting_of_ref": "indicator--dd3d105d-829e-493d-b72b-c7112185f519", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9136bd25-f5b5-4076-b3ea-88a0b1011619", "sighting_of_ref": "indicator--dd3d105d-829e-493d-b72b-c7112185f519", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6224274-a44f-4c91-bfb5-289962fcd9a4", "sighting_of_ref": "indicator--fd24e981-33a9-4da8-9f75-a6cd0547245c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12ca67a-1c77-4c26-ade1-c24ca1cbd1e1", "sighting_of_ref": "indicator--fd24e981-33a9-4da8-9f75-a6cd0547245c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e05c768-2a98-461f-a758-0a7589076df0", "sighting_of_ref": "indicator--fd24e981-33a9-4da8-9f75-a6cd0547245c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ee4bbe-a3de-4966-a2fd-e92053b1fd35", "sighting_of_ref": "indicator--b41e8050-f076-41e0-9129-f644c1904c92", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a639d25-4afa-42ab-92b3-2a839fa36d5e", "sighting_of_ref": "indicator--b41e8050-f076-41e0-9129-f644c1904c92", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3655c4ff-aba3-4636-952f-5b3dc595b0f2", "sighting_of_ref": "indicator--b41e8050-f076-41e0-9129-f644c1904c92", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d16101-dfb5-4a3f-aab8-3d009824918d", "sighting_of_ref": "indicator--9fd878a5-3573-4dfe-980c-19c4d895f599", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f227460-d22e-4393-b13d-deff7dfb83e1", "sighting_of_ref": "indicator--9fd878a5-3573-4dfe-980c-19c4d895f599", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269b89e0-572d-4679-ad2c-4250846ba1fe", "sighting_of_ref": "indicator--9fd878a5-3573-4dfe-980c-19c4d895f599", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2714ed79-aea1-444a-9328-ad53cd01fe62", "sighting_of_ref": "indicator--779c2cc8-5916-4de6-9044-65fc67c5ac99", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b542110-5e14-457e-9a34-8518bd927108", "sighting_of_ref": "indicator--779c2cc8-5916-4de6-9044-65fc67c5ac99", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e531428d-ab78-459f-85fa-2952948cf1e8", "sighting_of_ref": "indicator--7bac7e08-2d36-4119-993b-8152eb954b5c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc06a6cb-bd10-4bd6-9254-5c4b03596f5b", "sighting_of_ref": "indicator--7bac7e08-2d36-4119-993b-8152eb954b5c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1be2a88-2083-44e6-9d31-88c0c1a389e1", "sighting_of_ref": "indicator--768dbfe0-9aa1-45b1-b95c-d80c9075bb62", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4af9e7-855e-4687-8f30-5eb7d33cba2a", "sighting_of_ref": "indicator--5f0e2914-e399-4930-b82b-5f85da6a8abd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c10e08e-4274-4ab7-a42e-0e60854d6569", "sighting_of_ref": "indicator--bbf13d68-953e-4af7-8c41-f9c0587aed81", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2e19cf-533b-4845-b59d-1df28bf2886e", "sighting_of_ref": "indicator--bbf13d68-953e-4af7-8c41-f9c0587aed81", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125ca6e5-8b31-483e-bc5f-7e7998f8c49e", "sighting_of_ref": "indicator--bbf13d68-953e-4af7-8c41-f9c0587aed81", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608a3668-190c-47ff-86db-4b0a859cf3e2", "sighting_of_ref": "indicator--4b0e40b6-00cd-416e-aa6f-c8ec948ef060", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fad1027-ee5b-437f-9c2b-e2f0c56e94d1", "sighting_of_ref": "indicator--4b0e40b6-00cd-416e-aa6f-c8ec948ef060", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61dd55eb-eb94-40b7-9e25-aa29b126348d", "sighting_of_ref": "indicator--4b0e40b6-00cd-416e-aa6f-c8ec948ef060", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949ef5ad-df22-4ba6-bfca-f4ca7de547c8", "sighting_of_ref": "indicator--b910dc3d-1182-4373-b606-fff4d15378b8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48342475-48fb-4b55-8120-21d2b04ca668", "sighting_of_ref": "indicator--b910dc3d-1182-4373-b606-fff4d15378b8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c4eee0-c3fd-4fae-99d0-5e6833262b40", "sighting_of_ref": "indicator--b910dc3d-1182-4373-b606-fff4d15378b8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d852a1-46f2-4275-91fa-26c518252a41", "sighting_of_ref": "indicator--eec0f8e0-caa2-4424-80ce-94f51b3ae39d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f31214-bbff-4032-bc27-063910290b6d", "sighting_of_ref": "indicator--480ff1b8-3926-4a48-a8a7-74931e6ebf8a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8636c144-4444-47cd-8e7b-0bd0b3b9ece0", "sighting_of_ref": "indicator--480ff1b8-3926-4a48-a8a7-74931e6ebf8a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4a7975-159f-4f0d-a8e5-c14b9791a2f3", "sighting_of_ref": "indicator--211ce29c-aa58-4540-83d3-45252b438e67", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032a5ff8-53d7-4093-9b5f-a8f2c8c6114d", "sighting_of_ref": "indicator--211ce29c-aa58-4540-83d3-45252b438e67", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce201a4-b0b7-4b0c-9ab7-bb7d4539166c", "sighting_of_ref": "indicator--211ce29c-aa58-4540-83d3-45252b438e67", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861bfc90-5266-478c-b59c-6b99c66829fc", "sighting_of_ref": "indicator--a6f7dba7-21b0-4f24-b852-8c65a1c2d7e2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352b84f1-9484-48c6-9db1-51bd4e1b89b2", "sighting_of_ref": "indicator--f27c0022-1541-4225-9e80-6e4b11b88605", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc760b9f-ff05-4227-b6e1-83cf49a38c1f", "sighting_of_ref": "indicator--f7bdb97c-a29a-4c3c-9235-2b21c4ca2004", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1bb94b-6a4c-4040-91b6-1c8b7e8907c1", "sighting_of_ref": "indicator--f7bdb97c-a29a-4c3c-9235-2b21c4ca2004", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d1dc74-73aa-4bb0-93db-d1c7651412d8", "sighting_of_ref": "indicator--bcabec61-f698-4624-a908-5d6ad34895eb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46745213-fd7e-43a4-b6ee-849e0a103fda", "sighting_of_ref": "indicator--bcabec61-f698-4624-a908-5d6ad34895eb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d06edef-5a16-4eda-9426-190b72cf7349", "sighting_of_ref": "indicator--8adc1f85-f5d7-4e18-8409-01f04bff8608", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66c86f8-f3f8-40a9-89ff-2eaf4a72cb57", "sighting_of_ref": "indicator--4a26e724-db33-4c55-ba9f-da095d824192", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7dba9c3-3e20-47ca-b8e5-4818e31f2b43", "sighting_of_ref": "indicator--66b28355-765e-4d03-8411-f4e03ee27e0e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675f9373-3640-4f5f-ad11-3703fbfabaee", "sighting_of_ref": "indicator--66b28355-765e-4d03-8411-f4e03ee27e0e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082284a3-b7f8-448e-a73b-903e424b8e32", "sighting_of_ref": "indicator--66b28355-765e-4d03-8411-f4e03ee27e0e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47df2080-029c-4976-a1ca-ba3997e0a97f", "sighting_of_ref": "indicator--8ef8084e-fcef-44ac-8ed8-dcd2240376f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67e3c6d-5e38-48b9-b2cc-9450bad70c04", "sighting_of_ref": "indicator--8ef8084e-fcef-44ac-8ed8-dcd2240376f4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b40f820-1305-437e-b7c5-1eeb5cedf1cf", "sighting_of_ref": "indicator--8ef8084e-fcef-44ac-8ed8-dcd2240376f4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1892c82c-2806-40f0-9b85-2da2a577adf0", "sighting_of_ref": "indicator--f0e5e094-0845-4f4b-bcbf-a586d0b6b91b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ef2de0-01fd-442b-bad2-5147105d5d95", "sighting_of_ref": "indicator--f0e5e094-0845-4f4b-bcbf-a586d0b6b91b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c96a07c-7299-423e-9b59-77a5daaefa1b", "sighting_of_ref": "indicator--f0e5e094-0845-4f4b-bcbf-a586d0b6b91b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a6bae8-0d04-43a9-a8a9-72d7ec67ec87", "sighting_of_ref": "indicator--995281de-1c09-4fe1-baea-87aaa1841a6b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62c9b11-6821-4dff-a08f-ef3d5920419b", "sighting_of_ref": "indicator--995281de-1c09-4fe1-baea-87aaa1841a6b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d281bf-a408-43df-9cd2-fd2cd3b715df", "sighting_of_ref": "indicator--995281de-1c09-4fe1-baea-87aaa1841a6b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904a1521-4cbe-40ec-b29e-87d96f484777", "sighting_of_ref": "indicator--c07c0e1a-29b1-4d8f-8f01-3660645609c0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e7b8f2-6ee0-4eae-b078-7a2fe51af4a4", "sighting_of_ref": "indicator--c07c0e1a-29b1-4d8f-8f01-3660645609c0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e14809-58bb-4904-8645-5adf3cbe2c76", "sighting_of_ref": "indicator--c07c0e1a-29b1-4d8f-8f01-3660645609c0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ffb923-535e-415a-8500-07cb7a09d932", "sighting_of_ref": "indicator--430e5bd1-eb2f-4296-bca7-375ef3900a61", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f681dc5-8a1c-4a89-96ee-5708000bc275", "sighting_of_ref": "indicator--430e5bd1-eb2f-4296-bca7-375ef3900a61", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0763888b-a099-4803-858d-134f6ab76e84", "sighting_of_ref": "indicator--430e5bd1-eb2f-4296-bca7-375ef3900a61", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ebaaf0-1638-434c-9c50-3a4e26e28ae1", "sighting_of_ref": "indicator--bc121f96-9f1c-4959-ae87-2556d482b33b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3264b87-9c86-4537-ac11-1be886c88ebd", "sighting_of_ref": "indicator--bc121f96-9f1c-4959-ae87-2556d482b33b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc9a3c8-4b35-4fd5-8f5c-60862ea4a32f", "sighting_of_ref": "indicator--bc121f96-9f1c-4959-ae87-2556d482b33b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef87c36-d03a-4c0c-aad3-739e8a3553da", "sighting_of_ref": "indicator--ebc7e49f-ae11-4182-841d-d117307c6269", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed08e592-c130-4786-87fd-7b12acb2d8f7", "sighting_of_ref": "indicator--ebc7e49f-ae11-4182-841d-d117307c6269", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9576f75-000a-42e6-b562-b5cdcf645d5f", "sighting_of_ref": "indicator--ebc7e49f-ae11-4182-841d-d117307c6269", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d294aa-4817-4eac-bc32-5741e706d832", "sighting_of_ref": "indicator--6541191f-92c7-47db-95d1-60e65887746d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719a6567-fd23-47ee-b627-832bfd7d3b49", "sighting_of_ref": "indicator--6541191f-92c7-47db-95d1-60e65887746d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a74365-285e-41d0-830d-2dee1c34037c", "sighting_of_ref": "indicator--6541191f-92c7-47db-95d1-60e65887746d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e76f57-a71e-4571-889e-85af060a0110", "sighting_of_ref": "indicator--c59e7b64-7e10-411b-b300-d6f81f0ed2a2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9506ce0e-9b82-4ed6-b47c-3773fcf552ec", "sighting_of_ref": "indicator--c59e7b64-7e10-411b-b300-d6f81f0ed2a2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f84eec-34eb-46c8-9f63-314beb566f16", "sighting_of_ref": "indicator--c59e7b64-7e10-411b-b300-d6f81f0ed2a2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec390d24-30f7-401b-a25b-1699b088bc07", "sighting_of_ref": "indicator--6768333d-aa0b-4179-b72a-a852d5b380dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab39fa10-134d-48fe-bc24-69bf4fc36981", "sighting_of_ref": "indicator--6768333d-aa0b-4179-b72a-a852d5b380dd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46140979-8297-4fa3-8cd9-9b229f438a28", "sighting_of_ref": "indicator--6768333d-aa0b-4179-b72a-a852d5b380dd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd6f97d-34f4-48dc-98e6-943c6fbf2429", "sighting_of_ref": "indicator--3e75167e-1c2b-4a7c-90fc-af39716e45a9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808002db-93a1-4bbe-9971-9f024dc273d7", "sighting_of_ref": "indicator--3e75167e-1c2b-4a7c-90fc-af39716e45a9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973ff880-e14e-492b-94a3-0ba2d28d1d52", "sighting_of_ref": "indicator--3e75167e-1c2b-4a7c-90fc-af39716e45a9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad32ee92-bcb0-43fa-951b-60a65840f7c8", "sighting_of_ref": "indicator--0af010f8-7244-497f-89fa-26e9d84375b9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda5e8af-9e82-4ea0-98ba-105def87466d", "sighting_of_ref": "indicator--7d7da2fa-3b1d-4abd-9bdf-29b93de47667", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41955984-c968-4510-b4ef-4538d3e09063", "sighting_of_ref": "indicator--71bb8767-9b85-4a84-8894-9aaf506a9723", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee0b9b6-5c94-4156-8769-6f4d708cc6ff", "sighting_of_ref": "indicator--71bb8767-9b85-4a84-8894-9aaf506a9723", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffa989b-b693-46f8-9d1f-bd82a293fdbf", "sighting_of_ref": "indicator--ef6311e3-462e-490f-9f90-865f59e29198", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531f888e-ce67-4dbf-800b-4cba98674d79", "sighting_of_ref": "indicator--ef6311e3-462e-490f-9f90-865f59e29198", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb3772b-4a82-420c-84c8-9e2b5b678d7e", "sighting_of_ref": "indicator--7c401c94-aa10-45f1-aa2e-40510ca2b1e8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c2d1de-6c01-4bfb-86ba-33ac1b1e9dc5", "sighting_of_ref": "indicator--f415fdd3-72b9-451d-8062-033240873a2e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d8c157-5fa8-4e91-a8d7-29bc542c69ab", "sighting_of_ref": "indicator--58267822-1563-453b-9e2e-b755016a3dee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c1e85f-1bad-40c4-9138-e50caab1b86d", "sighting_of_ref": "indicator--86f0af0c-e6b4-463f-bb2a-2ddeabe390a2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0767e5-76e0-4e1c-82ac-8ad44ba22cf8", "sighting_of_ref": "indicator--ab8ae8e9-9249-48c3-895a-0e181e074a75", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae54e8e-6b3f-4d2a-bcbb-8caaa24f2b3f", "sighting_of_ref": "indicator--21a95439-7764-4e9a-8b73-0f722223c22a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15af3af7-e059-4ec7-b8d3-a8b1eb069e64", "sighting_of_ref": "indicator--de85f3c3-109b-4de2-89c7-88f1f3aa4d2d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638c52a6-a104-47c1-926b-a7d1451ca033", "sighting_of_ref": "indicator--9e126abb-c540-4974-a37d-77eb36922952", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fca852d-9fb7-4fbc-a02d-aa9c61b9bec1", "sighting_of_ref": "indicator--15847283-0e24-47fa-a6ef-224211d0e110", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738f971f-116e-4c49-a472-0f59f96b3eb9", "sighting_of_ref": "indicator--15847283-0e24-47fa-a6ef-224211d0e110", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979bf1d7-703b-4c9a-b850-c424c4144f67", "sighting_of_ref": "indicator--15847283-0e24-47fa-a6ef-224211d0e110", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e817f3a-59e8-40c8-9821-5552fc7b9206", "sighting_of_ref": "indicator--98b1230a-ac62-4b06-b868-f000fbe34124", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f6296c-4a0a-4185-be0d-0fea5682f60f", "sighting_of_ref": "indicator--98b1230a-ac62-4b06-b868-f000fbe34124", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a98c5a-f714-4a5f-bf71-823436c96c1c", "sighting_of_ref": "indicator--98b1230a-ac62-4b06-b868-f000fbe34124", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcb1012-572a-4c6b-98be-80bc95bb9001", "sighting_of_ref": "indicator--11931fad-fdb1-4d44-95f9-1222880ab513", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b240121e-dad7-4b6b-b980-6315724eae08", "sighting_of_ref": "indicator--11931fad-fdb1-4d44-95f9-1222880ab513", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4feddd13-05e0-4a59-9023-65c09871d733", "sighting_of_ref": "indicator--11931fad-fdb1-4d44-95f9-1222880ab513", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6426bd-8087-4b76-9c0a-850d0e7cb922", "sighting_of_ref": "indicator--1aacc7f0-65f1-4b9b-8d3e-95823a04859f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cc129b-90ee-4d5e-9714-fa22bdf14d70", "sighting_of_ref": "indicator--1aacc7f0-65f1-4b9b-8d3e-95823a04859f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235fa23f-8faf-4345-a042-995b065bd410", "sighting_of_ref": "indicator--1aacc7f0-65f1-4b9b-8d3e-95823a04859f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7557d7-f879-46cc-9161-4698b9672ac6", "sighting_of_ref": "indicator--2cf5bd46-72a7-4cbd-a016-61fdd2c955bf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88dc3eb-b838-4da3-b968-9dca06e2d02e", "sighting_of_ref": "indicator--ee58654d-61c4-495d-9bb5-4d7bbfa91bdf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c85dfc8-ebb6-4aeb-987b-c0037bad2102", "sighting_of_ref": "indicator--ee58654d-61c4-495d-9bb5-4d7bbfa91bdf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c10aa98-e411-4dbd-98f6-909908bdbe1e", "sighting_of_ref": "indicator--ee58654d-61c4-495d-9bb5-4d7bbfa91bdf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed4fccc-c08d-4258-a833-bea12dcfe1e3", "sighting_of_ref": "indicator--bf85e030-c2d8-4357-b9ec-96d75492c111", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea121d43-916a-4ad5-9e00-d572890e0a9e", "sighting_of_ref": "indicator--bf85e030-c2d8-4357-b9ec-96d75492c111", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e63474-d1e2-4026-b6b7-233f36d2746e", "sighting_of_ref": "indicator--bf85e030-c2d8-4357-b9ec-96d75492c111", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a308d1f-d323-4d71-b783-db6de1d212fa", "sighting_of_ref": "indicator--b0cd24e2-882d-43cd-9628-615e2aacb19f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81af743c-eb11-4117-8268-db0a3bfb1163", "sighting_of_ref": "indicator--b0cd24e2-882d-43cd-9628-615e2aacb19f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab9e679-5c3a-439c-be6b-130574af7fc6", "sighting_of_ref": "indicator--b0cd24e2-882d-43cd-9628-615e2aacb19f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de4ef1f-18c6-4221-8949-77c79c36bf47", "sighting_of_ref": "indicator--e2cd2f02-ced4-400a-9720-4bfac32b4749", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79a4c6b-719d-400f-a526-38b476e2eac1", "sighting_of_ref": "indicator--e2cd2f02-ced4-400a-9720-4bfac32b4749", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86efd044-b725-43e6-bd37-7e6f6f1ee00f", "sighting_of_ref": "indicator--e2cd2f02-ced4-400a-9720-4bfac32b4749", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272a38ec-9381-443b-b281-a0559516404b", "sighting_of_ref": "indicator--ed449133-3406-448c-8329-f69f87c2cbe1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a0d066-9eb4-4e4b-9ecc-58cc637f9699", "sighting_of_ref": "indicator--ed449133-3406-448c-8329-f69f87c2cbe1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11be396e-05b5-41c1-8973-84c07f7aa64a", "sighting_of_ref": "indicator--ed449133-3406-448c-8329-f69f87c2cbe1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9102e3c-e7e7-4ee2-82ae-87efaf6a879a", "sighting_of_ref": "indicator--fb8f22e7-9601-412d-b100-aaf14cc64cf6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfdcd3b-3fa7-441e-8ae4-3eaa99ecc434", "sighting_of_ref": "indicator--fb8f22e7-9601-412d-b100-aaf14cc64cf6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9f8c37-ce94-49c7-9893-bb64c8f3487b", "sighting_of_ref": "indicator--fb8f22e7-9601-412d-b100-aaf14cc64cf6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836de279-74a7-4a5d-84ef-420026c1a228", "sighting_of_ref": "indicator--e41dd076-dc57-4c8e-bf49-bf69ad983f93", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e2e3e0-fe81-4ee5-9ae0-9bb48a1b9589", "sighting_of_ref": "indicator--e41dd076-dc57-4c8e-bf49-bf69ad983f93", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beaac253-9682-4198-82d6-86801f6deb01", "sighting_of_ref": "indicator--e41dd076-dc57-4c8e-bf49-bf69ad983f93", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9c8046-f396-4622-9b00-1d7500d6af8b", "sighting_of_ref": "indicator--7230fdf8-8e63-465e-bac8-0e75598a1863", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139bf264-cb06-4a2d-bdf4-34cb099be7ec", "sighting_of_ref": "indicator--7230fdf8-8e63-465e-bac8-0e75598a1863", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7774d022-fe3d-4301-870f-b4ccd06a5523", "sighting_of_ref": "indicator--7230fdf8-8e63-465e-bac8-0e75598a1863", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5634ebd3-f430-4dd0-8127-ac04bb7c4f94", "sighting_of_ref": "indicator--847342a8-5e2d-4fb6-b8ef-5a93cbdb8aa3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6506d1-4450-40a1-b177-26549b849b1c", "sighting_of_ref": "indicator--847342a8-5e2d-4fb6-b8ef-5a93cbdb8aa3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06522bd7-7480-4de8-8a49-13fdd3577b86", "sighting_of_ref": "indicator--847342a8-5e2d-4fb6-b8ef-5a93cbdb8aa3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad191fbd-9408-4728-859e-2febcc37c483", "sighting_of_ref": "indicator--624d7308-a3cc-467b-8947-6c4767af1edc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5391d3f2-fc9e-4e30-b6ce-13775cb355b3", "sighting_of_ref": "indicator--624d7308-a3cc-467b-8947-6c4767af1edc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6575705e-6761-4a35-8dc9-b0ddee662435", "sighting_of_ref": "indicator--624d7308-a3cc-467b-8947-6c4767af1edc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9e32d7-dddf-4e53-933f-0428d1e6c3ac", "sighting_of_ref": "indicator--a797eaaa-ff02-4399-85e5-ba3178577f17", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d17ab40-71cb-4ff4-a3df-645fb6edd118", "sighting_of_ref": "indicator--20125ccd-457d-41c5-abee-0e8dc0cae80a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9e81da-440d-432e-8b08-9036fd32cd9a", "sighting_of_ref": "indicator--20125ccd-457d-41c5-abee-0e8dc0cae80a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e09f48b-8a67-4175-8943-6fc68a4219c0", "sighting_of_ref": "indicator--42a70520-92d5-4c60-b0d5-104f15b2bebb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4e9e39-49bf-496e-af55-4ec6a8d84b39", "sighting_of_ref": "indicator--42a70520-92d5-4c60-b0d5-104f15b2bebb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de8dbb7-ce7d-4147-869a-40239f3df719", "sighting_of_ref": "indicator--e3f66791-cafe-4d44-95f3-578bb244cfd0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df9bf99-2e3e-45a5-94ff-7f20360654b6", "sighting_of_ref": "indicator--e3f66791-cafe-4d44-95f3-578bb244cfd0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a9a3f6-06a3-4493-b825-e011aca08f5c", "sighting_of_ref": "indicator--e3f66791-cafe-4d44-95f3-578bb244cfd0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4006acfb-e841-45d5-b7db-d6b095dc6c47", "sighting_of_ref": "indicator--f79df7ea-04c5-42f0-9d02-f60d87098cf1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8666e8ab-a69f-4672-9930-7645929f16ad", "sighting_of_ref": "indicator--f79df7ea-04c5-42f0-9d02-f60d87098cf1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80971688-802a-41a4-a8dd-dd31128cd79a", "sighting_of_ref": "indicator--819838cb-e9c6-43c9-b4e5-22ee529f6dd6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b247e439-4d44-4be8-ac5c-70271a5c9dec", "sighting_of_ref": "indicator--174f81b9-5af9-49d4-b808-307873560f93", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1abeb8d-ada2-42f0-8f6c-4b9c4274bd59", "sighting_of_ref": "indicator--174f81b9-5af9-49d4-b808-307873560f93", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cec57e-9298-469f-a81f-abe8b66bfe61", "sighting_of_ref": "indicator--6020109f-24b2-4a4c-ab4d-ddb0f16a0408", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40dbef51-d81e-40af-90d5-c92fa9c0bed9", "sighting_of_ref": "indicator--2179286a-bd34-4dcb-8a61-9fb0e90f11e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e27102-19f8-4c8c-9452-cfeb1f535714", "sighting_of_ref": "indicator--b0d77dc7-75c3-4111-917b-725d27ab1f71", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9614fa3c-266e-46d8-8d0d-c8e0c7417079", "sighting_of_ref": "indicator--8cb6fcfa-8a45-4c67-abc0-94b474504ccc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bcd3e4-f5d1-4ddd-a51b-89e2d218dcee", "sighting_of_ref": "indicator--8cb6fcfa-8a45-4c67-abc0-94b474504ccc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f773ae06-687b-4ec4-8e57-7ce3ba3e5964", "sighting_of_ref": "indicator--14ed5bbe-00ee-450d-add9-7cdaec37d5c4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67181e42-8310-435f-954f-abfedf130fb8", "sighting_of_ref": "indicator--f1ea81a3-1ce3-47d0-922d-7ef2effccbcd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49f835e-e457-429c-b6d5-b440f58fb93d", "sighting_of_ref": "indicator--31253dfb-1a6a-4fa2-999d-365633646c06", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1395ced4-efc2-4c5d-8a66-5d5bebe5f920", "sighting_of_ref": "indicator--28015a19-594b-4bce-8c4e-1798a0a2b0a4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed41faa-9fb7-4d03-8efc-29b31e0ba05e", "sighting_of_ref": "indicator--7c70321d-b0c2-447a-b32c-9a90c948a6b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910c75e7-9385-4c18-aa8c-e6856575903c", "sighting_of_ref": "indicator--7efb101b-93d7-4104-80f5-c1597c95dbde", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1231e0-6dc8-4671-8697-8c7ca08bc59e", "sighting_of_ref": "indicator--83882471-73e5-4df6-a9f9-245f69277f7b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdebac6-50fc-4da0-8786-bcbce11819b7", "sighting_of_ref": "indicator--cc5732bb-1bc3-495e-991c-dccf7cbce03f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cc5123-35a4-4389-9335-641b9f3d41e1", "sighting_of_ref": "indicator--5454a5cb-03e5-4c79-a5af-6c808f01a81c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36618450-dc0d-4c21-93ab-0d5f4d574db6", "sighting_of_ref": "indicator--ef5a0ec0-647e-4466-826e-0a63db97449c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7474fd86-5adf-425f-89a4-90568b5eec4c", "sighting_of_ref": "indicator--51cf2b13-b701-4590-a918-a1fe7cdb6076", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15df75dd-4a6b-46ee-8c37-f3b2792c86a8", "sighting_of_ref": "indicator--210def63-502d-4cf9-be08-ad62f396355c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921285de-ca04-4688-81ee-100e5c62221e", "sighting_of_ref": "indicator--0600ea32-a25c-46ea-b5b7-7074990fd437", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a138881-40c2-4513-8477-129a9b871e9e", "sighting_of_ref": "indicator--cc7b2b18-7594-4d6b-a3d3-d772e223d7f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4484e752-388b-44d4-99e0-5cf596de323e", "sighting_of_ref": "indicator--af1c6956-1a99-4976-9baa-c758ab50801c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacaa8ac-6270-4f2a-b7ce-da69e510e0ff", "sighting_of_ref": "indicator--f0ff6707-37b6-4f4d-a78c-d4af36cae473", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d741b772-86ee-4025-939e-d9c36e7ccb0b", "sighting_of_ref": "indicator--2f44b8ff-9726-4866-b451-35afc4352d2c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bdd384-cfab-4b35-930d-cf79905c1c6d", "sighting_of_ref": "indicator--b7b03b05-9025-4015-b7db-b0d4c851e54c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad99142f-295b-4a1c-ac87-26a271ddfeeb", "sighting_of_ref": "indicator--2dd22b0b-bbda-47b9-bc8f-806b31833b7a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f32ed4-4d81-4c3b-98f5-ac8cf18009f2", "sighting_of_ref": "indicator--ed99172a-2363-4623-85f5-b2363287da60", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc19d99-993b-4dab-a289-843c99663641", "sighting_of_ref": "indicator--21f21f57-1221-406e-9eae-6b871e98a84d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b91e9c-757a-4db8-a09d-71ca3fd6800b", "sighting_of_ref": "indicator--f2fd0833-607b-4dca-b2b3-eba500ea534f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca86d33-0813-4820-bcea-5f63053c5824", "sighting_of_ref": "indicator--ecbc4422-890a-4384-aab6-1a852a6ce006", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850cd175-bc4a-407e-93d1-c9ee23f0bb32", "sighting_of_ref": "indicator--fcedcca6-4ade-4bed-bfb5-bd4cf74198f9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfa8aab-e9af-47ae-9cc1-4e99eac8fed5", "sighting_of_ref": "indicator--fae2dcf1-ed13-4430-aef7-36f0d93b80cb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0252b5bd-4b61-42b4-8b07-46ae447db108", "sighting_of_ref": "indicator--0cc68b01-e289-4e24-ad78-558b0e777aa1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a4fafa-f638-4d37-af76-e2da18dc4a1b", "sighting_of_ref": "indicator--7bb038a0-2d8c-4035-a238-5005e635b2b5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766b1be3-6c8d-4195-957b-3a3512e4aa31", "sighting_of_ref": "indicator--e27ea5de-60ac-4398-a8a2-524b9b397fa2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4699ca-6eab-4b95-a632-9b8cdb72e4bf", "sighting_of_ref": "indicator--421e10ac-0f80-4ace-82e6-c2d816af9dab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef3cba8-3bb8-4c70-84c3-fa136a520319", "sighting_of_ref": "indicator--1d5bf1b8-f151-46d2-9ca2-766ef4cfd007", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf30a418-c5a1-4e13-a3b4-56f77d09af53", "sighting_of_ref": "indicator--154178ee-e877-4b7d-86d6-cd3083f03c8f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910f1263-66fd-41d5-bf79-cb1a0d4da1b3", "sighting_of_ref": "indicator--a8bcdb80-6052-49a0-bda2-a442eab3bc63", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23430d9-1c57-47c2-a72f-d07cb0f71b78", "sighting_of_ref": "indicator--a8bcdb80-6052-49a0-bda2-a442eab3bc63", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be59082-40b3-407c-97e7-35f8b1ecdde1", "sighting_of_ref": "indicator--38cd4519-f8c4-48aa-97a0-f45c9eb27c5c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595a8a4b-fd10-47ce-a463-2d3ece1b2ff9", "sighting_of_ref": "indicator--6ddfd376-8f21-4a16-b7e1-704ae9de5281", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b53a9b4-80ed-46cb-acde-f533697d7768", "sighting_of_ref": "indicator--b16e4e30-bb0a-4195-b63f-28cae521170a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d20f0d-0e31-408e-b068-a6ebc8b2a95f", "sighting_of_ref": "indicator--6b8a8c52-ecdd-4c3a-9252-ce6ae9134232", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75cf98a7-aca3-4db6-a94f-c5c97a5101d8", "sighting_of_ref": "indicator--db7416d7-826b-420e-b503-cf7e5b98a267", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207d8a8e-c253-40a5-809c-9cb8336377c9", "sighting_of_ref": "indicator--aba7dc45-3298-4178-9542-a46be6f3ab6e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3396063d-dfd1-41c5-a203-9e740d785131", "sighting_of_ref": "indicator--aba7dc45-3298-4178-9542-a46be6f3ab6e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6957c14-f478-4712-aa3a-6a75d2ce30b6", "sighting_of_ref": "indicator--b7fba97b-a5a5-4451-b3a3-bf92590599b6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc9190a-f264-464c-af5b-222e88164f77", "sighting_of_ref": "indicator--b2762691-9174-4822-95cb-b105d3542562", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11fd42d-7b1e-4a29-a37a-d1d868c98191", "sighting_of_ref": "indicator--f54faa44-b120-4599-9f9a-ae1e9a1f9281", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4788d1e8-95ed-4a8e-90ae-b8f52acfc3d3", "sighting_of_ref": "indicator--7e031002-1971-4347-87f8-e22f5b779bf1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfcddc0-bcf0-4fdd-876b-0c8b7654f61b", "sighting_of_ref": "indicator--7e031002-1971-4347-87f8-e22f5b779bf1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902b0623-2460-4b3e-8dd6-12b803e4a16f", "sighting_of_ref": "indicator--f0ef9688-38ad-4581-b93c-8385118daed9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26a73b3-386e-461c-8668-476ad89dd51f", "sighting_of_ref": "indicator--c55fe9db-80ac-44d5-8b4c-8a96f669b505", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fb9a3c-56e7-4931-916d-c32727131fb4", "sighting_of_ref": "indicator--ccfa03cc-f89e-45e3-af53-1267ec250a00", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbf4e20-8929-4066-b232-fc8a9f45ad33", "sighting_of_ref": "indicator--58cbc39c-bf85-4e01-a2e9-00559fea3151", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84fecae4-1ac2-4194-ab13-f1cf9cb3ef7b", "sighting_of_ref": "indicator--b61244e9-72a1-41bf-891c-8ba8f70bbd02", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972b79d5-9dfe-4046-ae1a-40fea3d24aaf", "sighting_of_ref": "indicator--10b82f13-6e2c-44a3-a0ef-7a820cfdf2c6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3d4810-be6e-4ca6-99dc-22e5f7431220", "sighting_of_ref": "indicator--d5c9eefb-271f-4f69-8c01-535377cabf21", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf037f5-a2a4-4974-ad71-3629dc5f6db8", "sighting_of_ref": "indicator--7a967498-8a41-49e8-b4cf-1162ecbf9c1e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9d6e50-f710-4b1c-a7d3-31f5351045ae", "sighting_of_ref": "indicator--d3c7adf4-0483-4d61-a437-c6f3bc31c323", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a6fde9-376a-4ad9-b3ca-ab98d8682b39", "sighting_of_ref": "indicator--6b25156f-10a3-4107-b1f4-8c4947182e83", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a014af18-7a42-493e-84ff-3078b1b598a4", "sighting_of_ref": "indicator--eac2f4a9-601a-4eda-8ab4-873ccb242599", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c1f653-772a-412a-a8d4-99abf3dd73d5", "sighting_of_ref": "indicator--eac2f4a9-601a-4eda-8ab4-873ccb242599", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02735d2e-39ff-403e-ad00-9d2903b42519", "sighting_of_ref": "indicator--d3424c0b-739a-413f-8778-3c883a3344ca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980a5a6d-6e1a-4ed6-8ec8-a05b20f1b3b8", "sighting_of_ref": "indicator--fcbdd551-2369-4e19-aae9-5eca5a317891", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e928c7e-15ec-41f2-abb4-5a34fd8a9042", "sighting_of_ref": "indicator--f65c3c46-3af0-461e-aafc-3f494d154bbe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bbd80e-186e-48a6-857f-4b908a1888f2", "sighting_of_ref": "indicator--17d9c2da-d789-46fa-968b-34c4b5122bcd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe4b25e-5437-4b3b-b188-3ddc982f1d5a", "sighting_of_ref": "indicator--14d31889-69d3-4a10-94ed-f5f286855e80", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61bd25a-006b-452b-be5a-c75a5172329b", "sighting_of_ref": "indicator--09d6cbf2-63c4-43b3-af83-93234bda6105", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef698386-8912-45c0-a241-d2986bbf1b3c", "sighting_of_ref": "indicator--09d6cbf2-63c4-43b3-af83-93234bda6105", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f1d0bd-093f-4472-83dc-8d9fb8679295", "sighting_of_ref": "indicator--11c939aa-fefc-4121-9856-4daefedaeea8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01318c49-3700-41a7-9d0e-dcc98abbfd33", "sighting_of_ref": "indicator--e3153988-0fa1-4a57-8a44-cf97f4884273", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d3fbad-9f5b-4ebc-955b-7d3dc8ec847b", "sighting_of_ref": "indicator--db95e7a0-f860-4709-a384-d624f7c37cac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b3745a-178f-4e60-9de4-f73388bf06d1", "sighting_of_ref": "indicator--c856e3f8-032c-4c8f-bb40-1eab07a6b0a0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2c821b-ced1-489e-84e2-df776506ddf3", "sighting_of_ref": "indicator--f330ddfa-f550-4eaa-849c-7d450d0c9974", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d51160-712a-4f3f-9158-c9d1927a46d1", "sighting_of_ref": "indicator--b5a12c1e-1990-4474-8d12-075509d98712", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1847b0-699c-447e-879e-d27266e71e1e", "sighting_of_ref": "indicator--6e4a5552-572b-491e-9171-f2631bbc5353", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9494a27c-f28b-4565-b232-767d0c45015b", "sighting_of_ref": "indicator--6e4a5552-572b-491e-9171-f2631bbc5353", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cc5743-9397-456b-8387-3b672f2de35e", "sighting_of_ref": "indicator--41ae6252-1933-4e10-95eb-5372ca86e96f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af62a53-fc6a-4e0d-9f74-f02d8bd442b2", "sighting_of_ref": "indicator--5c733048-3902-4fcd-8e8e-dcf8665bb248", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af679254-6b8c-4111-a5eb-a801c5b65f71", "sighting_of_ref": "indicator--f2f8e377-e0ec-4988-bf91-9f86fa7e8b30", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c995715-d677-47c5-8feb-4fdc2d94aff4", "sighting_of_ref": "indicator--b269a296-a20d-4671-9807-29847c16e574", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe64946-10a2-4f22-a24f-9d2e7f8709cc", "sighting_of_ref": "indicator--0d29e886-cd77-45a1-8027-8a1352eedcba", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f37ac4-8e59-4703-aabd-51eae5e96423", "sighting_of_ref": "indicator--1796532d-5723-436c-bd6b-0a3a2ae54815", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49432a5b-1794-4846-8069-8c19b05fcb70", "sighting_of_ref": "indicator--513525aa-f0d4-499a-8241-bbb56e234bf9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4989929-7fe8-4184-8589-359ba27cdbd1", "sighting_of_ref": "indicator--e22835f2-8227-43ae-afc2-8450e06f4788", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f1e21d-a611-4da8-b89d-b36aa2fc11e6", "sighting_of_ref": "indicator--e22835f2-8227-43ae-afc2-8450e06f4788", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a839a6e-6bca-4d3f-94b2-348b09469f11", "sighting_of_ref": "indicator--1bb448e1-cc2f-4a02-9b1f-51854cfb1efc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec4dc3f-70e9-454b-bb23-16aff0dc0e22", "sighting_of_ref": "indicator--ce014bae-434e-4a8f-a484-b91d5cebd3d7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef43d950-fe25-4847-8e9d-d71dde91f1d6", "sighting_of_ref": "indicator--f2bfad12-790c-46fd-b2c0-087298f71f4a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dffd89b-54f4-4040-bdae-bbc57d5c54ea", "sighting_of_ref": "indicator--08d53e71-1af6-456f-8c50-c83980c9cbeb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca011309-519a-4d58-82bd-db01d4ebe124", "sighting_of_ref": "indicator--4b65622b-5120-4117-ab41-20a3337d17ff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d793b053-662a-42eb-a56a-faf6aa264725", "sighting_of_ref": "indicator--9ebceeb5-4f70-4370-8de0-8fcdc0b5b7a6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257efc24-5861-4f5a-87f9-7da6677b561e", "sighting_of_ref": "indicator--21a3b4fb-8783-43ab-af8f-fb19c3792d19", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4719d75b-27aa-4682-93f5-51c735bf3a92", "sighting_of_ref": "indicator--1bbbb78b-9ca6-41b5-bbff-2fc952050d11", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d258b9a6-c3df-4706-b0a9-1637db3aadfe", "sighting_of_ref": "indicator--8bcdb429-57d9-4f78-ba76-a97a32e48ef8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399dd6ab-6210-4ead-b8d1-6c3a4703e950", "sighting_of_ref": "indicator--bae58c83-9705-49d7-ae07-45498cc4a695", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53dd9b65-fbf2-44b9-abd2-d21e4136f562", "sighting_of_ref": "indicator--ae7ffcd4-fbaa-4432-918a-cd0d11b9265f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d14de9e-6151-4a7c-a90a-e346e262dfe8", "sighting_of_ref": "indicator--c19ada2f-f0a8-4a9d-a3b4-e99831c29cc9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5bd415-5b12-46b8-aec6-f1a1c8a1d4a2", "sighting_of_ref": "indicator--3050e1aa-d50f-4523-b798-acb60df91155", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00274b47-9906-4ac4-a47c-84f66e8bd929", "sighting_of_ref": "indicator--1c9fbb50-0cc3-4a13-80cb-d713a018b159", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df401a6a-4b65-4576-aab5-ff93c1a6b747", "sighting_of_ref": "indicator--f7323ab1-9f89-466d-95e7-d5c187466c74", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb554a19-c057-4c11-9c25-33ed48a6bdbb", "sighting_of_ref": "indicator--2ee33cf2-957c-4ec7-a7e3-78fd25e4a729", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302e1060-01bc-476c-83f4-900c1e953ce4", "sighting_of_ref": "indicator--0a141f08-5022-4d4a-9505-92793f0f53a8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f012a9f-8c3d-4938-85ff-6a02d0a9d5dc", "sighting_of_ref": "indicator--ecd17cf8-63ee-4e68-84fc-2992c895993d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e60bed-7834-4aba-85ab-04eeea142463", "sighting_of_ref": "indicator--5681253c-2dcf-4fa0-937b-12df3995ad27", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddaaf3a-30d8-45c9-8646-ce37e5fc7b63", "sighting_of_ref": "indicator--04763194-d971-472d-adc8-ff79cbbebf0a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7e05a9-2c3e-4d0d-8bee-2fe15a3494fb", "sighting_of_ref": "indicator--ace38ebe-3f86-4361-a72e-808376d955ce", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883c086d-f3c2-45c8-afd9-56308ed412ab", "sighting_of_ref": "indicator--e0e260a5-a5f2-47f0-932d-374dfdbf5639", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff01fa3-114f-41f7-b7c9-fb49b36b37ef", "sighting_of_ref": "indicator--c61e9cd8-a651-442f-930a-a53f22fd9812", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba00a41-7449-4a37-9257-0062c459976e", "sighting_of_ref": "indicator--af4cea61-8141-4ec9-94c3-72aaee27a000", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df496c98-05e4-45f9-8664-2723ef6ac1ea", "sighting_of_ref": "indicator--252968bb-fcb1-4501-9201-fa35aeb233e0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d3a039-4866-43a3-ad9f-98bc15a1d0da", "sighting_of_ref": "indicator--3411561a-9ee0-4337-a276-a20a204fa643", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c24a543-24c6-47ea-b793-43bf3ba45cb4", "sighting_of_ref": "indicator--a07da248-3063-4a5d-bc1a-4c2f25935a0c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0cfafd9-8d08-4f06-ab16-bf7a8d26d505", "sighting_of_ref": "indicator--f305dfbd-a9fd-41c2-aa1b-251fa3b8e899", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18642fd-5452-4fec-8618-d85300467978", "sighting_of_ref": "indicator--ac350820-4ad8-4ad6-bf24-9f954dcc863a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba43b3d-c831-44f1-be64-5347513ef0ee", "sighting_of_ref": "indicator--092de35c-59b5-4a4f-bb0a-595d3debfe1e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c56289-309e-4fdc-aa13-030130fd9f95", "sighting_of_ref": "indicator--ec438df1-5505-41dc-b08c-740be22dc6fe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a092e5e4-2330-4c7c-ab88-3cd101fd346d", "sighting_of_ref": "indicator--daf81302-0c04-4bdf-8414-d78da4786915", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25d1aee-4595-4931-9b73-c061dc9d410e", "sighting_of_ref": "indicator--bb2d33be-69b1-44f1-8e17-5c41c774e24b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c68e14-424f-4b2e-aa52-c1855b06b57f", "sighting_of_ref": "indicator--543c7dbb-a816-4d84-8c3e-76e84a97d3e6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7504c40f-c7eb-420e-8ba9-858b5ea6fa8f", "sighting_of_ref": "indicator--e10a5f13-eba7-4f80-8497-9ca6e1c0b648", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812aedcc-bddb-4035-af1a-e48bca1b7243", "sighting_of_ref": "indicator--1e73d697-9125-4f61-b923-538ca0f88452", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a150af0-14db-4678-819d-3c1c528761e2", "sighting_of_ref": "indicator--97e1aa8d-af62-42e8-9885-2b9fed5d22fe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678d3e85-d20d-4fa3-b86b-66fbebb043ef", "sighting_of_ref": "indicator--3c07501e-bd98-41a4-8e42-9eaa99207a01", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc0eb66-f898-49e4-bc3e-dc587763fc6c", "sighting_of_ref": "indicator--6511c133-1521-4c32-b001-9b3b0c00989b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c3e7e2-63a6-4d7f-9e34-13eddbb0e991", "sighting_of_ref": "indicator--dca821e4-fde8-492d-ba96-535a16312b14", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58795fdd-6157-4d4b-a10d-25523b81b66f", "sighting_of_ref": "indicator--dca821e4-fde8-492d-ba96-535a16312b14", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ae96dd-83ed-427b-948d-f8c4497f6e15", "sighting_of_ref": "indicator--c4193797-4d44-4a8f-8502-c116048b4285", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84db042-0f00-4023-8d82-4953beb3f4ab", "sighting_of_ref": "indicator--e1b03975-3745-4d8a-a179-dc82faed1ea6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22edfd36-717a-47da-8b13-894d0ba1dfcc", "sighting_of_ref": "indicator--a66b0a2f-a478-4472-bad0-645ce79f1257", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0033a82-7275-4880-9fff-38c493d76d05", "sighting_of_ref": "indicator--7dea320d-89cc-4a09-9723-865da2795fd2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7b8259-6c77-4457-8113-8eaf2fb63efd", "sighting_of_ref": "indicator--0fb5936d-7b33-4d05-adcd-4f8352ca4bcb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ba5488-045d-4890-8b7b-672d444d64ea", "sighting_of_ref": "indicator--67e702ce-b40f-4df9-b77e-9bd812b8d6a0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e13999-eab4-4e2f-92d4-3f2472d10b76", "sighting_of_ref": "indicator--02ac7101-4a9c-4cfb-b93c-bf68448c2a74", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200e0750-adcf-4598-b981-05587d65c367", "sighting_of_ref": "indicator--96ce9e9f-d0f4-451b-8fcb-b39369f2aba5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7cb434-0d13-4b65-8daa-943d7d929fd2", "sighting_of_ref": "indicator--0c145fe9-d14e-45de-a20c-29bf524b733b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ed978a-1064-4eb6-9539-c3374a71e1c9", "sighting_of_ref": "indicator--556fff85-9e88-48f1-9b8c-9c97bdabe8e7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0660e65-fe9f-476c-9df0-87118da7a92d", "sighting_of_ref": "indicator--d59a9c0a-f6bc-4d48-a813-9494d1d6588a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cccf6fa-9c41-40b3-bcf8-898ba7a25995", "sighting_of_ref": "indicator--68fc49d7-8901-4ab8-94bf-66f23307e2b6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e8e2ff-b778-4d51-b777-4998dc072099", "sighting_of_ref": "indicator--ad6ecba7-90cb-44be-8734-9339c7c1f16c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8089fe88-f833-4883-b5c5-5b53419f2cfd", "sighting_of_ref": "indicator--e69912c1-a7cb-4161-b89e-48928359749b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4d3247-8471-4cc2-abe6-e5910bf8803c", "sighting_of_ref": "indicator--24460157-cf25-4931-aa0e-31a01e78873a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd043986-e997-4b18-af1a-55e99a95c176", "sighting_of_ref": "indicator--cf13f10b-5ca9-4be0-8a68-37e8afc7b161", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae890ea5-6913-45ac-b833-26d691a77cc9", "sighting_of_ref": "indicator--328e6349-3a1d-43db-ab02-982599c766f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3786377-bff3-44ea-b7f8-19c3f70b2215", "sighting_of_ref": "indicator--dcb3bd7e-734a-483f-9b89-54156decc61c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46514eee-ef05-417f-bb71-974d21c820d8", "sighting_of_ref": "indicator--921f91fb-e167-4a2e-8532-a728ba762a75", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953e3866-0176-4849-a7d8-bda5b6021a43", "sighting_of_ref": "indicator--05c2965b-724c-4085-bcdc-d5f3f6802a34", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c868090-93c7-433f-9a27-a5bc3a971ecc", "sighting_of_ref": "indicator--1389defa-aef5-48ea-88a1-b26ea02900b2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aaf3bef-bfa3-44f0-9e95-0edf94f12799", "sighting_of_ref": "indicator--865fd6d8-aae7-47eb-b9f7-8cb765c4252d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ff71b4-70c3-4898-9602-bf22a6a919e1", "sighting_of_ref": "indicator--598022f4-861a-411b-a3a5-9df4980fb028", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8315dd24-3995-49f4-a034-2a7095b52fb8", "sighting_of_ref": "indicator--10778890-6058-4c15-88a6-cac968828971", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5b3304-33ea-4849-a9d6-40b4cb7a0594", "sighting_of_ref": "indicator--724835e2-d49d-436f-8585-0b13b95b5c1f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0205f525-f6f8-40b7-98eb-31c4e14cff04", "sighting_of_ref": "indicator--3557c929-5a9f-4d09-bb89-e8cc0771e951", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf4c22e-913b-4295-ac55-77d6f161b93f", "sighting_of_ref": "indicator--7ca78653-f1cf-4217-b1ae-566b640b41a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ff3a1a-74a6-4b9b-9ea5-f598910a932f", "sighting_of_ref": "indicator--7ca78653-f1cf-4217-b1ae-566b640b41a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f8eb77-4c80-469a-bcfa-dea348ca4c32", "sighting_of_ref": "indicator--f41f1659-fdea-4c7f-9f6b-b7ab01771936", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914facca-94ef-4b1a-9bdf-fd2364095f1d", "sighting_of_ref": "indicator--bb6224b3-3749-49e4-9068-cdeff57f5823", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04900563-e561-4eca-8496-c48bc14af3ed", "sighting_of_ref": "indicator--67963ae1-3c37-4ca4-9545-2e506d4b0495", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd05f238-adb4-4135-8f61-ecbe239dcf87", "sighting_of_ref": "indicator--67963ae1-3c37-4ca4-9545-2e506d4b0495", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77afc08-1e14-4a65-92dd-1d6d49047913", "sighting_of_ref": "indicator--67963ae1-3c37-4ca4-9545-2e506d4b0495", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ed8ed4-9c8f-4759-b0ee-15528abc7a0d", "sighting_of_ref": "indicator--e8a3d4c7-f74b-45a9-900c-2ab3d8de77be", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb83946-1dca-4fc5-9862-160a3c2178e3", "sighting_of_ref": "indicator--d0b15fff-a5ed-4d73-a4b9-7d8799728ced", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2213bc89-e9a8-4320-a27f-16c35072e2ca", "sighting_of_ref": "indicator--e7b30859-d452-436d-872a-7911d629ce7b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca3d2de-2648-477b-97e9-211034a31d50", "sighting_of_ref": "indicator--7138729f-0e33-4274-99cd-e4bf797be98e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9124fa16-b8b3-4b46-a0a9-6753ebcb0e9d", "sighting_of_ref": "indicator--bc885fb0-6ec5-46d0-bcd4-3226da56cbeb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6126c0-4f9e-4ec3-9222-b8c8b80bb5bb", "sighting_of_ref": "indicator--bc885fb0-6ec5-46d0-bcd4-3226da56cbeb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6103b02c-7bed-4ddc-8c20-8ba845204c44", "sighting_of_ref": "indicator--2f6e0aa6-27ed-4a7e-bcaf-0dea085fd103", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23a3821-7487-4175-8ceb-3b42fe5a92b6", "sighting_of_ref": "indicator--2f6e0aa6-27ed-4a7e-bcaf-0dea085fd103", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d87af5-57c2-48c4-9e2d-6f2ddbd48985", "sighting_of_ref": "indicator--8910d4bb-0c5a-49b8-9b83-f11c691d2891", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9c2a6b-f91e-4cd9-aa9d-90d424914c6d", "sighting_of_ref": "indicator--7633a6b6-5b37-4957-9077-0cec789ccd78", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11faf24-1371-42c6-9ad8-baa46ca75b49", "sighting_of_ref": "indicator--5e72c5fc-9a0a-4234-a81e-d33fce6f0e74", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6480f29-d691-4d94-bc34-0236e543b987", "sighting_of_ref": "indicator--24a3df33-26eb-4bc0-8258-7e082348eee9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bfe699-f0f3-4039-96c5-c7b8b3ac209f", "sighting_of_ref": "indicator--4c304c9f-25d4-45ca-85ab-88229a3f99d4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a074e6cb-8669-45bf-b348-c0390a9b288f", "sighting_of_ref": "indicator--4c304c9f-25d4-45ca-85ab-88229a3f99d4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d997b2-0985-4371-80ae-2e7863e34a5b", "sighting_of_ref": "indicator--4c304c9f-25d4-45ca-85ab-88229a3f99d4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68d8bdd-54b6-4de9-8824-9f0396c8147f", "sighting_of_ref": "indicator--7b08f780-2a6d-43c1-9e04-586d0c9750c9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc0604e-7f73-429c-9617-48772cb9a2af", "sighting_of_ref": "indicator--69650c53-7f25-4aa4-839d-734bac9161bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66e06b0-7692-4233-bc60-e817bb9e12f0", "sighting_of_ref": "indicator--69650c53-7f25-4aa4-839d-734bac9161bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00424073-c0ba-419a-8877-e3a6d0854f3a", "sighting_of_ref": "indicator--c9df19b8-76b1-440b-816c-e3fe71b4340b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e67c4d3-e28c-4645-b21f-c4ba6b74101a", "sighting_of_ref": "indicator--d8d38447-6b80-4b77-a675-b6f0d7a79f01", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639fc7ae-e79d-4d54-931e-53bf86139293", "sighting_of_ref": "indicator--d8d38447-6b80-4b77-a675-b6f0d7a79f01", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d629b8b0-d7d7-4a7a-8697-18421fa6decf", "sighting_of_ref": "indicator--d8d38447-6b80-4b77-a675-b6f0d7a79f01", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2c4b15-9b07-41a3-acad-790202be62a6", "sighting_of_ref": "indicator--1f7636d0-94b6-4fc0-b04e-3e1661e2f70c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea42759-0011-4ad7-ab67-13bae31bbfa8", "sighting_of_ref": "indicator--1f7636d0-94b6-4fc0-b04e-3e1661e2f70c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa1ed20-1263-4945-bd60-3615750dcef0", "sighting_of_ref": "indicator--1f7636d0-94b6-4fc0-b04e-3e1661e2f70c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5ff12f-ea87-4117-8609-90813a4c98c7", "sighting_of_ref": "indicator--6c37a6d5-c661-43d3-907f-be3d95ab39aa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06709b71-18fc-4901-a1fd-c758f3de0ef0", "sighting_of_ref": "indicator--6c37a6d5-c661-43d3-907f-be3d95ab39aa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40214216-0eb4-4e8f-9db9-d77693955579", "sighting_of_ref": "indicator--e589e8c2-819e-46d8-9e09-b3419e8c8447", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2950f922-4a8f-4ade-96f1-d8fe5a8e9c1d", "sighting_of_ref": "indicator--b9592073-c24a-4999-ad33-b9c1d5ad78bf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db63f7b5-5443-4d8e-88b5-632f5f762f03", "sighting_of_ref": "indicator--b9592073-c24a-4999-ad33-b9c1d5ad78bf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dce2e9-4985-4b20-b509-ce5f40572196", "sighting_of_ref": "indicator--b9592073-c24a-4999-ad33-b9c1d5ad78bf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad27bed-4302-4191-b3f2-cece69811c66", "sighting_of_ref": "indicator--32827e43-ab4d-423b-b198-4f33a02c7f53", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6814ff-c14d-4ef3-bff4-084d5ade0ec7", "sighting_of_ref": "indicator--32827e43-ab4d-423b-b198-4f33a02c7f53", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fd3448-3600-44fe-b722-5a4b49bb0f23", "sighting_of_ref": "indicator--32827e43-ab4d-423b-b198-4f33a02c7f53", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e23b730-bf38-4bee-b06e-87b4416f5b17", "sighting_of_ref": "indicator--e2bcab0e-97dd-490e-846c-ff3c4b1a8f5a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056d4d3c-b0a2-4af5-a800-d4ecf98e2a4a", "sighting_of_ref": "indicator--e2bcab0e-97dd-490e-846c-ff3c4b1a8f5a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfd5448-9a81-434b-b183-5b999392c4f0", "sighting_of_ref": "indicator--e2bcab0e-97dd-490e-846c-ff3c4b1a8f5a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90cb38e-0f4b-402c-b067-e79760ad9d8e", "sighting_of_ref": "indicator--100af4fb-2d13-4832-8808-83b51dd6376c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe260ae-ed23-44ac-9d14-f2b22bf7a736", "sighting_of_ref": "indicator--100af4fb-2d13-4832-8808-83b51dd6376c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8700cb55-e1c6-443f-b5ae-4ca8c849e825", "sighting_of_ref": "indicator--100af4fb-2d13-4832-8808-83b51dd6376c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae8c85b-41f7-4689-9bdb-825670f63056", "sighting_of_ref": "indicator--f8536307-e9d3-4162-aa9f-4c87b3466155", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb7ef98-a159-4e94-ba79-6f19cd3786c8", "sighting_of_ref": "indicator--ead5d989-3ee3-4525-aae6-a536f72b1964", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63198659-0dbe-48c3-872c-d15bb901ee57", "sighting_of_ref": "indicator--ead5d989-3ee3-4525-aae6-a536f72b1964", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af6b84a-f940-4e26-81f3-acf698ba6c23", "sighting_of_ref": "indicator--0b111244-173f-4ad3-9dbf-b9bb72baa3fe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cff71e-5281-4819-843f-32174c102738", "sighting_of_ref": "indicator--0b111244-173f-4ad3-9dbf-b9bb72baa3fe", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a51949-b545-4219-b5b0-c66d2730fc16", "sighting_of_ref": "indicator--4dffa878-8959-4151-99e2-0be2d553abd9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7a3d33-7be2-4f7c-9f99-bed72849b18e", "sighting_of_ref": "indicator--4dffa878-8959-4151-99e2-0be2d553abd9", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c92bf6e-03b7-4df8-afd5-7b88bae6b91a", "sighting_of_ref": "indicator--ae341977-c860-4ab0-a8d4-6ffff6e16597", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17e8e88-aacc-48ca-89fe-8d1c97d911dd", "sighting_of_ref": "indicator--ae341977-c860-4ab0-a8d4-6ffff6e16597", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5ba7ae-721d-40be-b0f0-c762925d762e", "sighting_of_ref": "indicator--4f41dc25-da26-449f-9c27-265fa3a558b6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88ee8d9-fdad-4c1c-8999-8c375408ea07", "sighting_of_ref": "indicator--4f41dc25-da26-449f-9c27-265fa3a558b6", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a526abe-f55c-410b-af19-349ea7cb62f8", "sighting_of_ref": "indicator--bb452f15-07be-4fa5-a07b-da252a0db58f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101163d4-b3bb-45e0-afba-2e48ed73e076", "sighting_of_ref": "indicator--bb452f15-07be-4fa5-a07b-da252a0db58f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf98663-97c3-4f9d-b544-7519334256dc", "sighting_of_ref": "indicator--64baf83f-e029-43e8-b16a-cd6aab29b5f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e46877-8557-44fc-887f-542bde015090", "sighting_of_ref": "indicator--42c3d047-afb6-415d-b199-d6f448589ab7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0af0ee-e4f1-4c11-8777-5a14962b48df", "sighting_of_ref": "indicator--42c3d047-afb6-415d-b199-d6f448589ab7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e52965-bba3-4cbd-862f-e0da30534253", "sighting_of_ref": "indicator--953e8ad5-beb1-4892-84b8-c394a5f9f001", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c78adb-05d7-41a2-9ff4-cefab1624d64", "sighting_of_ref": "indicator--953e8ad5-beb1-4892-84b8-c394a5f9f001", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83380952-557c-433a-bd7c-7cf3893ed3bc", "sighting_of_ref": "indicator--7b5a82e7-b493-477c-9473-83050d896f02", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1fd34f-7f1e-4ca3-8afd-77f8b4644cde", "sighting_of_ref": "indicator--3c4f6f71-6d41-45e9-a06a-20177beb2dc1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c483a0-52c0-4387-affc-53d352806c75", "sighting_of_ref": "indicator--35d545e5-7ad6-4c4f-bb2f-48fde46030f5", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1aaaa2-d8cc-4b63-ba6b-8de404a60b2b", "sighting_of_ref": "indicator--b4dfe933-dee8-4361-90f6-28b269738aab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440a6947-ff78-4538-b704-c539d3e04418", "sighting_of_ref": "indicator--b4dfe933-dee8-4361-90f6-28b269738aab", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0416bd1-89bb-4394-b6a6-365213640440", "sighting_of_ref": "indicator--d7991088-08d4-4b12-8b12-2e7c47ffb9f7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf19b55-9eec-48f2-addb-932dab7a63d4", "sighting_of_ref": "indicator--d7991088-08d4-4b12-8b12-2e7c47ffb9f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ce7dd7-7358-4e63-8c91-743cfe51f18c", "sighting_of_ref": "indicator--5d0f8200-9d65-4a0a-81c3-537e54070498", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d1ed28-9f8c-4398-8f61-5b31dcc9623b", "sighting_of_ref": "indicator--54d47839-e84b-48a4-89e5-b602684f7fbe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d97fae8-1a2a-4d57-8acf-d2c9d20c55d3", "sighting_of_ref": "indicator--54d47839-e84b-48a4-89e5-b602684f7fbe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f8882f-34dd-4390-a259-fbbd6ec27c2a", "sighting_of_ref": "indicator--49f5df81-5f04-4773-a70e-5e33af00b843", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1eab4d9-36aa-4f3d-8e0e-16d046f400cf", "sighting_of_ref": "indicator--49f5df81-5f04-4773-a70e-5e33af00b843", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040e2d66-eed7-44c6-b070-7b50d5e734f9", "sighting_of_ref": "indicator--49f5df81-5f04-4773-a70e-5e33af00b843", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc27b055-f72e-4f2d-96ce-20e93158a32f", "sighting_of_ref": "indicator--3469f034-280c-4d30-acbe-f18eae52b5f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46df5bef-c705-4c46-bd5d-4d4a7257c4ca", "sighting_of_ref": "indicator--3469f034-280c-4d30-acbe-f18eae52b5f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cfaab4-29e7-41bb-b052-6684f62c4dfe", "sighting_of_ref": "indicator--3469f034-280c-4d30-acbe-f18eae52b5f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4458d85d-b042-4744-83f9-7bff4c4377e8", "sighting_of_ref": "indicator--95cdeb30-4673-4cb4-b503-34a88b176213", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3daa9c87-011d-46f6-982d-1c219b07776c", "sighting_of_ref": "indicator--710f7c79-15b9-4713-a679-5875c6d03b69", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac885f7-66e7-46e3-a5d4-e117019f2986", "sighting_of_ref": "indicator--182dacff-47ec-4473-99d0-1b1033087ae1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f39412-7a72-4c29-b349-808f106c81d7", "sighting_of_ref": "indicator--a253ca5f-d010-490c-99fc-bebda936112a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735e13e4-4b32-4c87-93a3-b57d5a56de0c", "sighting_of_ref": "indicator--a253ca5f-d010-490c-99fc-bebda936112a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607fd91b-1d64-419f-8bbe-fc15b00ca00e", "sighting_of_ref": "indicator--51a3e680-8a28-417a-b60d-e20a272f36e7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf33c53-fc24-4366-b69d-41dafe09cd40", "sighting_of_ref": "indicator--51a3e680-8a28-417a-b60d-e20a272f36e7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7676f3-8bf0-4ce4-b17e-6915afdcbf82", "sighting_of_ref": "indicator--51a3e680-8a28-417a-b60d-e20a272f36e7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aac399d-6aaa-4d28-9ac6-8a180251753f", "sighting_of_ref": "indicator--4afd7ba2-7259-4efc-999e-3d0031e682a2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ecbe25-a06a-4192-925c-5d57594d836d", "sighting_of_ref": "indicator--4afd7ba2-7259-4efc-999e-3d0031e682a2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ced176-c49a-4f8a-94b9-ffe88076a619", "sighting_of_ref": "indicator--c3e4043e-b8c2-42ec-b8de-e7b7072bb373", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0a1108-08d5-4a72-aac2-257e09426619", "sighting_of_ref": "indicator--c3e4043e-b8c2-42ec-b8de-e7b7072bb373", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05588d99-fc78-4e57-af3c-1c2bce5afc72", "sighting_of_ref": "indicator--c3e4043e-b8c2-42ec-b8de-e7b7072bb373", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92bd9701-e870-45b0-bb1c-caf7153c2870", "sighting_of_ref": "indicator--93aa4606-b950-4bfe-b37c-ac79277d7cf9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80699868-da16-449a-8ed9-4ce2bb5456ec", "sighting_of_ref": "indicator--93aa4606-b950-4bfe-b37c-ac79277d7cf9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2633efd5-a05b-4b41-b835-3c4e6d5b9526", "sighting_of_ref": "indicator--93aa4606-b950-4bfe-b37c-ac79277d7cf9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8db6e38-1f60-4f2e-acee-7b9d8fdab079", "sighting_of_ref": "indicator--644c35f6-1a7f-409a-adc0-b73450272409", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ad1059-5b9a-4ba2-82df-87b1cd4aaa6c", "sighting_of_ref": "indicator--b621fe75-dc96-4f78-aa15-20f4abaddbab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b333e2-f6e8-4f92-9d32-a8025439a86f", "sighting_of_ref": "indicator--b621fe75-dc96-4f78-aa15-20f4abaddbab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9914447-cf5c-440b-82a4-8756eebecc7a", "sighting_of_ref": "indicator--b621fe75-dc96-4f78-aa15-20f4abaddbab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7742c9-18d6-4844-979e-028ef7a6b5da", "sighting_of_ref": "indicator--2bff2ab6-0281-42c0-89b8-c134d52af914", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d25c1ac-1c46-4800-8a1c-527ec1dd2dff", "sighting_of_ref": "indicator--2bff2ab6-0281-42c0-89b8-c134d52af914", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7da0f40-7656-4057-9dc8-dc4f6166018d", "sighting_of_ref": "indicator--002ba936-e4b8-4a02-baa0-886ed5262006", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0de339-7aef-41b8-a4f6-07964341e791", "sighting_of_ref": "indicator--002ba936-e4b8-4a02-baa0-886ed5262006", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899bc1d4-6dcc-4dab-b910-9f9b64ca1eff", "sighting_of_ref": "indicator--002ba936-e4b8-4a02-baa0-886ed5262006", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3ce6fb-267e-479b-8272-08943d009955", "sighting_of_ref": "indicator--497d647d-ab11-4d8d-a3a0-dffa654881d2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274ea61d-daa8-4569-920f-78e900f14b9f", "sighting_of_ref": "indicator--fa7e8bf3-7999-43e9-8b73-d341dcc41236", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2255496-24b5-4817-a0dd-4fae558b3283", "sighting_of_ref": "indicator--fa7e8bf3-7999-43e9-8b73-d341dcc41236", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4156b249-0612-4697-ae97-413e2530b382", "sighting_of_ref": "indicator--fa7e8bf3-7999-43e9-8b73-d341dcc41236", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f78677d-d975-4a2b-abdb-4a92a44108e4", "sighting_of_ref": "indicator--7f447c07-3286-47b1-904c-bccf3cfef6e3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a55c4f-05aa-4771-92d3-7d34d44969ec", "sighting_of_ref": "indicator--7f447c07-3286-47b1-904c-bccf3cfef6e3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8caf4e54-ad85-4ac3-a98e-e34ed8c5cdbd", "sighting_of_ref": "indicator--eb1498b7-f08c-496a-a4fe-a3b8717e93f2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf33739-648e-4982-9095-1d6f3a1f8d58", "sighting_of_ref": "indicator--eb1498b7-f08c-496a-a4fe-a3b8717e93f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7159b0-0a03-4e55-9c10-e3258c9e70c7", "sighting_of_ref": "indicator--eb1498b7-f08c-496a-a4fe-a3b8717e93f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4c03cd-e4f4-449f-a794-19f762589ee4", "sighting_of_ref": "indicator--11013176-0117-4c96-9bb8-fe58ff4b78c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a301460-f058-4720-888f-18eeed13d2a5", "sighting_of_ref": "indicator--1ae62625-863e-48d3-9f5d-db2d1b8a384a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7573314-1509-427d-a3c5-2b4e8990b628", "sighting_of_ref": "indicator--1ae62625-863e-48d3-9f5d-db2d1b8a384a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3f10b2-65a9-45d3-8d06-36ab8d7ac0c8", "sighting_of_ref": "indicator--8e5fd293-93b7-4f5b-a7ce-663c5c04cf66", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4664e30b-c84c-4541-a4c0-23b94e754da0", "sighting_of_ref": "indicator--8e5fd293-93b7-4f5b-a7ce-663c5c04cf66", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064ea4e0-ff14-4b7d-a12e-b2a8806b9a4a", "sighting_of_ref": "indicator--2825778e-d7e3-48c8-88c4-d6fe958719e0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cb3625-66f6-4480-97a2-735f2e7d4211", "sighting_of_ref": "indicator--2825778e-d7e3-48c8-88c4-d6fe958719e0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9338022-3fda-4914-be9b-823bcd5aa97b", "sighting_of_ref": "indicator--2825778e-d7e3-48c8-88c4-d6fe958719e0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10f493b-1908-4930-adb2-91ebcd03fc21", "sighting_of_ref": "indicator--b2812472-95f0-476a-be55-5542e996503a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2273885-0f87-430e-9dbc-2605262d716f", "sighting_of_ref": "indicator--b2812472-95f0-476a-be55-5542e996503a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef6005a-962f-4e24-8e56-afae0535090b", "sighting_of_ref": "indicator--b2812472-95f0-476a-be55-5542e996503a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d152d2c3-cbea-4cda-a23f-2bad9352145c", "sighting_of_ref": "indicator--69f5c6e0-5db6-486e-8d0c-059c0679af73", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039422bd-c583-4170-9d4b-e8c50bea1e11", "sighting_of_ref": "indicator--69f5c6e0-5db6-486e-8d0c-059c0679af73", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f62460a-1d5b-431a-9e45-35cb4a3a4453", "sighting_of_ref": "indicator--69f5c6e0-5db6-486e-8d0c-059c0679af73", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cec456-10bf-42fc-8f2b-84bfeee00263", "sighting_of_ref": "indicator--f0eb16ba-f886-412e-9826-b6e338b89938", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a6cb17-f605-40b9-b103-1f500806caf5", "sighting_of_ref": "indicator--f0eb16ba-f886-412e-9826-b6e338b89938", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac67920-0186-4e66-a477-ac57c8f3152c", "sighting_of_ref": "indicator--f0eb16ba-f886-412e-9826-b6e338b89938", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee002bcb-549c-4688-a8ea-be2101323425", "sighting_of_ref": "indicator--37c485c3-b199-4b7d-ba4b-f338b01465a6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b99cef3-3ef7-4bc8-b2a8-1e3fccc1fa35", "sighting_of_ref": "indicator--37c485c3-b199-4b7d-ba4b-f338b01465a6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747040db-491d-4d38-8ae4-4ecfa2832fa2", "sighting_of_ref": "indicator--37c485c3-b199-4b7d-ba4b-f338b01465a6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c976629d-2ee5-453b-9cea-54124dbf9cbf", "sighting_of_ref": "indicator--1cce5dd2-d811-4b58-92b3-70fa1adc8166", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb3c026-6c48-4c07-9367-fb12384bdc64", "sighting_of_ref": "indicator--1cce5dd2-d811-4b58-92b3-70fa1adc8166", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f08390-eb93-4ce7-9e64-32a96c1d2ce5", "sighting_of_ref": "indicator--1cce5dd2-d811-4b58-92b3-70fa1adc8166", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d3fe64-11d9-4500-b2e5-2bf42e9de9ff", "sighting_of_ref": "indicator--803ec93c-a8cf-4674-87c1-829b89f1564e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0b6b02-ceff-4de9-8cf3-ced3a3a7ff4f", "sighting_of_ref": "indicator--803ec93c-a8cf-4674-87c1-829b89f1564e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f67f82e-e545-4678-989e-425034a77fd3", "sighting_of_ref": "indicator--b256f788-e491-4534-ab62-9209491b4865", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608e9a4f-42a5-4910-8f47-120aba0c14fa", "sighting_of_ref": "indicator--b35c4933-ae21-442f-a6a6-df1cf51e780f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b99371-e6bd-4bc8-95d9-e689a0c39b62", "sighting_of_ref": "indicator--4fd2e591-4b52-475a-86af-1e8fe112d49e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6eb4687-515b-4f6b-ab0e-822e1511fc99", "sighting_of_ref": "indicator--4fd2e591-4b52-475a-86af-1e8fe112d49e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef296af1-f3b2-4f50-bff3-c331f2e0492b", "sighting_of_ref": "indicator--4fd2e591-4b52-475a-86af-1e8fe112d49e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfeb2e9-d8d6-42ab-9fe2-8d72a024e6a4", "sighting_of_ref": "indicator--fc8da723-0f49-4033-87af-dc311d756cb6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49add66-673a-4d40-a9e5-9ef76efb51d5", "sighting_of_ref": "indicator--fc8da723-0f49-4033-87af-dc311d756cb6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d79e076-169e-47cd-bc3b-b6ba45c8871e", "sighting_of_ref": "indicator--fc8da723-0f49-4033-87af-dc311d756cb6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd079bad-0750-450e-b9ca-d2bf1dfa8ca8", "sighting_of_ref": "indicator--83cb8cdf-e233-464c-9619-412519cfa79a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991f022a-734e-40aa-ba47-b596ec423eb0", "sighting_of_ref": "indicator--83cb8cdf-e233-464c-9619-412519cfa79a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4aa15da-92e3-49b6-b426-be24687340ba", "sighting_of_ref": "indicator--83cb8cdf-e233-464c-9619-412519cfa79a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58d650f-4369-4f3e-9ea3-202e34e479c5", "sighting_of_ref": "indicator--29b2b1ce-211c-411d-94ba-5f28ff314c45", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e6ab01-97b3-48fa-9898-c69c3d1f4f80", "sighting_of_ref": "indicator--29b2b1ce-211c-411d-94ba-5f28ff314c45", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03cd0fa7-dc2e-4a99-96d4-b904675e6ae5", "sighting_of_ref": "indicator--29b2b1ce-211c-411d-94ba-5f28ff314c45", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95f1200-1ccf-45fb-8787-7f2453d74572", "sighting_of_ref": "indicator--8bc66bd3-bb1e-466e-a9f0-ce00b3a72ecf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3890da4f-1817-4ccd-a5a2-12f10387cb3d", "sighting_of_ref": "indicator--8bc66bd3-bb1e-466e-a9f0-ce00b3a72ecf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b0b45c-691f-4402-9494-e5c20d24e0a9", "sighting_of_ref": "indicator--8bc66bd3-bb1e-466e-a9f0-ce00b3a72ecf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b318ff-6821-4f30-9a08-7ff07c2efa4f", "sighting_of_ref": "indicator--032fc1d7-62cc-42b5-8b38-a7c4f573d1b8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd71d0c3-9cd7-4c45-a66b-3f8a0708b84e", "sighting_of_ref": "indicator--67d8dc0f-d0c1-43ba-abda-026f94656fde", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770e6030-d10b-490c-a6c6-a1ea7d1835c5", "sighting_of_ref": "indicator--67d8dc0f-d0c1-43ba-abda-026f94656fde", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b11885f-4375-4415-99eb-eaf63669fc46", "sighting_of_ref": "indicator--67d8dc0f-d0c1-43ba-abda-026f94656fde", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90886ba3-9f87-4ecd-b88e-97d3a9122e28", "sighting_of_ref": "indicator--31273e99-8843-480e-a71e-3eb291d961a9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebdab3a8-2872-49ec-9ecd-bba9ebb09a5d", "sighting_of_ref": "indicator--778b6d20-2578-4608-a9e6-7d5050c7a33f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ffc98a-6b9d-4fb1-9335-40bae9bb0965", "sighting_of_ref": "indicator--778b6d20-2578-4608-a9e6-7d5050c7a33f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3030c005-2544-42d9-8bc6-c4499bed1752", "sighting_of_ref": "indicator--778b6d20-2578-4608-a9e6-7d5050c7a33f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c8d41c-3a3c-49f2-9ba0-f5e0cc6f6ea0", "sighting_of_ref": "indicator--9b9d7a4b-09e7-4e63-8d06-daf596f8dd36", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626c33ae-1193-4dcd-a5fd-7d990b3646f4", "sighting_of_ref": "indicator--b7c14427-f36a-4044-b39d-f36eae677776", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77dc17ba-2ded-4414-b214-3bc5326ba891", "sighting_of_ref": "indicator--b7c14427-f36a-4044-b39d-f36eae677776", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91797eeb-151b-40c0-8fc7-013790301ab4", "sighting_of_ref": "indicator--b7c14427-f36a-4044-b39d-f36eae677776", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d369fa-d459-4884-8148-1e366d7923ae", "sighting_of_ref": "indicator--31e51a3e-5ecc-44f4-9194-da7a1f52013c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9acc4de-464e-4b1f-9f58-7a99c8ecef4c", "sighting_of_ref": "indicator--31e51a3e-5ecc-44f4-9194-da7a1f52013c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25b0f59-9fef-4d8a-9e10-e10e2a695139", "sighting_of_ref": "indicator--3865d068-19e5-4fb6-8eda-249e3daaf271", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c97dddf-c5d1-419f-9aa0-5a78bfd75147", "sighting_of_ref": "indicator--3865d068-19e5-4fb6-8eda-249e3daaf271", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a34df4-3830-41b0-aa65-55098cf588e9", "sighting_of_ref": "indicator--3865d068-19e5-4fb6-8eda-249e3daaf271", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae87d4f7-05b6-4ce6-af62-f94bc26bf65f", "sighting_of_ref": "indicator--b81931e8-9fd9-4f40-ab66-718668f104a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833b82de-f36f-44f2-b53d-7126c54c6267", "sighting_of_ref": "indicator--b81931e8-9fd9-4f40-ab66-718668f104a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d957c7f3-7a11-421a-a775-6aad2e96e0b2", "sighting_of_ref": "indicator--b81931e8-9fd9-4f40-ab66-718668f104a7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a907aa6-4599-415a-8705-5323b82ee4bc", "sighting_of_ref": "indicator--e50e6bc8-c109-4531-93f6-c85a4700911d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc6120b-def3-4879-b968-4eba4fbfc2f5", "sighting_of_ref": "indicator--e50e6bc8-c109-4531-93f6-c85a4700911d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3dda00-ca9e-47f9-980f-f02d000a43d2", "sighting_of_ref": "indicator--e22e4779-4366-4d48-b8e2-418bf9f6bb2f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4e9fbb-7a93-4d4c-b082-4e15eb4832ca", "sighting_of_ref": "indicator--5983b1c2-d43a-45cc-a3aa-2d51faf62f1a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c37211-ea1d-484c-9b9b-8defcbcf6898", "sighting_of_ref": "indicator--c464ecaa-6eff-4774-8846-a6effa67df30", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d49f13-c5f4-4f5d-a84d-97c12d7e5c51", "sighting_of_ref": "indicator--cc3caa69-d4dd-4226-aa60-d9e1001d6171", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbd4281-af38-4120-a107-5cabaf6c9cc7", "sighting_of_ref": "indicator--e44b88f1-6a1d-4d65-82a3-1f8c3af18398", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee2ed59-9af5-4f18-a5e8-57a7f96eddd7", "sighting_of_ref": "indicator--fb8f5550-4f4a-4348-9133-ef0fed620011", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd93f30-376a-4f0b-a938-0d513a9b0a4c", "sighting_of_ref": "indicator--eff8ad5e-c1fb-4cf0-9ce8-cdce87f115d8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf4d95d-d19b-4115-8ced-976a8ddd62ba", "sighting_of_ref": "indicator--aed6012c-347d-4ba6-af89-0d04e521073b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acb4b4e-2d9e-4fbd-bd40-1484ecb68533", "sighting_of_ref": "indicator--d431a01e-95ce-4f7c-8034-cf02a0da2325", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03580154-4a0d-42c8-849e-9c9e3785d521", "sighting_of_ref": "indicator--c1bf50e7-44c3-4012-aa02-aa9105822361", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098774e3-fcd7-4849-9e07-f18c5e09414a", "sighting_of_ref": "indicator--8eeee390-7f3f-4482-8372-2c0546f06145", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447d82fd-ff3a-43cb-b4a5-f5a3ea3155ad", "sighting_of_ref": "indicator--47a6dc61-dc83-4c65-b127-a9cb1795b2fd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb20cf7b-222f-4c55-bbe5-4247fffd26ef", "sighting_of_ref": "indicator--6e39f602-5ed6-431f-bd7b-0b85bf7c0491", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f8bc1a-eb2b-4ac3-9662-909023aec725", "sighting_of_ref": "indicator--e3cf0b93-63b0-49a1-9c54-c34c9494dbc0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd56c58c-14de-42ac-93d2-bf44faaf808f", "sighting_of_ref": "indicator--e3cf0b93-63b0-49a1-9c54-c34c9494dbc0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d450157-041d-4aff-8529-f533a91829ea", "sighting_of_ref": "indicator--ec69e36f-3ed5-43c6-ad3f-35124ec3badc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e96ef68-ae46-4c33-a29d-b7889938fbe8", "sighting_of_ref": "indicator--2af8c637-b697-4484-a44e-841393e038e3", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dde5c0-c7b9-4dd1-9aed-a8c932566688", "sighting_of_ref": "indicator--96369460-695a-4e90-a121-6c9a105a599b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8776acf4-958c-49ff-8d4f-38cbeab2bb59", "sighting_of_ref": "indicator--b91644da-722b-42ab-9ba7-9da31c953f6f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9885b162-1e8d-43cb-820c-ae3d753f52b1", "sighting_of_ref": "indicator--00939854-99d3-44b9-b8e8-249a568dd1d4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f7f104-3efe-4e8a-9dfb-987c2946324e", "sighting_of_ref": "indicator--8ca43d41-70ff-4da9-bf28-4e693e8da3db", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed4510f-8f57-4d02-8a47-a93c92c59920", "sighting_of_ref": "indicator--58aa1097-dd2f-40e5-83ed-b34039bfd839", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd860371-a4ac-49e6-99f8-6196ea6375fa", "sighting_of_ref": "indicator--d4d8a19d-c374-446c-9b75-4d50fe0875fd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d95a6e-fe6b-4316-8725-533775ab9d4b", "sighting_of_ref": "indicator--d06bc036-202e-4e52-81d3-fe7e2adfba35", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f27c34-6f46-4dd0-af1e-4aa8c7ec7a79", "sighting_of_ref": "indicator--b15d5796-6e69-4c6d-911e-bbc6e5a5c63a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d47ae2-05f5-46b5-b848-80f719334851", "sighting_of_ref": "indicator--c9533e9a-bf72-4a30-b19e-04de28c88ced", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e3aab5-ff5b-4341-8bc8-4a1acd3d7cb9", "sighting_of_ref": "indicator--6c0a9452-f1b0-4f81-b3c3-3d0be753bd0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050671be-5689-4656-9e31-419e9d4e7d06", "sighting_of_ref": "indicator--073ba7f7-ab04-4855-8fd0-492d25781546", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f196934-1b83-46c5-84b7-72aca5a90425", "sighting_of_ref": "indicator--073ba7f7-ab04-4855-8fd0-492d25781546", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c392c97-eef0-4745-b5c1-78bb339c1039", "sighting_of_ref": "indicator--b73a9d0b-d867-463b-9113-99e06bff2086", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6900cccd-4f75-457d-9dfa-b1ff262db26e", "sighting_of_ref": "indicator--d14de327-3745-439b-b101-15f6937d4e1e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6369481-46e9-4269-bc70-db5755e8e752", "sighting_of_ref": "indicator--139e43a6-31c9-4378-9d64-f1d39dff23d4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e022d4-db60-40db-b51f-3817f493dbe9", "sighting_of_ref": "indicator--139e43a6-31c9-4378-9d64-f1d39dff23d4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb025c9-0321-4bd7-b7ea-b3a7c41fa8ab", "sighting_of_ref": "indicator--22181a6b-02f7-428a-aa1f-502b54c8cf6f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610a585f-4c55-4c20-b1ee-4c73f3d1d381", "sighting_of_ref": "indicator--45a6a9e1-1144-413e-8e3d-3a8bd8a4c70c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2daf94-2fee-45c7-8fae-cd5fd26acd37", "sighting_of_ref": "indicator--9c471517-fd1e-46c6-871e-0429f890bb4f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2dd29c8-2d01-4e02-a9d4-67be2266ecff", "sighting_of_ref": "indicator--a3faffda-6462-4b37-bec9-f80fca412d1a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec48cd36-d458-400d-9f87-15cfd23b1aaf", "sighting_of_ref": "indicator--a3faffda-6462-4b37-bec9-f80fca412d1a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4518733c-cfd4-4292-a2a4-a38920a40d06", "sighting_of_ref": "indicator--a3faffda-6462-4b37-bec9-f80fca412d1a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8211831b-719f-45fc-a645-8f3f34863a49", "sighting_of_ref": "indicator--b325390b-8a47-4372-9ca5-4102b1d1a766", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680c7c7b-ef65-4846-ae06-7afe26218627", "sighting_of_ref": "indicator--e3f0159d-3821-4a53-ae89-389e0eba5d3c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc8efb5-ee25-4df0-92fe-794c29294210", "sighting_of_ref": "indicator--e3f0159d-3821-4a53-ae89-389e0eba5d3c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc0e41c-364e-4c00-b3de-1a6054d1e3e7", "sighting_of_ref": "indicator--48f20020-3638-462e-b843-c3e9e15b1a53", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99aa85d1-0a93-437c-8ff0-3fc0315f9692", "sighting_of_ref": "indicator--e80b6ba4-08ce-4a93-8c59-7f9e08ec8444", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6328cd23-740e-4820-b5e2-4581cedf2e2e", "sighting_of_ref": "indicator--568c847a-d60d-4af8-aac9-7f51d865beff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc66cb5-04cc-4911-8990-d3b5bfc2917d", "sighting_of_ref": "indicator--421f67fc-3e20-4c25-8ef3-01cb1a132791", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a8fb0b-5855-448f-9cb0-0fa1e99d5ac7", "sighting_of_ref": "indicator--175f1c75-c2f3-4deb-b128-9a1c4421c9d0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da1ab2d-07ff-4b60-968a-3a2bc51a0110", "sighting_of_ref": "indicator--1504cd9a-a716-4291-ae0b-3c7717347db5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b939eb-bf9c-48b1-b860-6f0956fbd99e", "sighting_of_ref": "indicator--fca0e848-e240-46c5-8be2-0944678b994c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd571c10-0e1f-40c1-9374-9a5427e42494", "sighting_of_ref": "indicator--7f5dce4b-0d65-4ba0-b6a6-5871e926cdb6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d6a9b0-425d-45ed-8368-9cbf4b96653b", "sighting_of_ref": "indicator--30453dc8-a335-4eba-adef-bca9420b2ff1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0684d83d-599e-4e26-80be-133f13ea936d", "sighting_of_ref": "indicator--850caf08-65d1-45b0-b0eb-eb873ec075ab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d64c2c-e7c3-4aa9-9dc0-c77b44be794a", "sighting_of_ref": "indicator--9d4e9c12-8498-40ed-b690-f321790b3144", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e605f167-de4a-4efb-8eec-2d81c9c5f3d9", "sighting_of_ref": "indicator--400b6392-4036-4403-9bfe-aac559dde83d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c3c6cf-4090-484c-bd6f-cf23b2110276", "sighting_of_ref": "indicator--5ee70ca4-2658-4ad6-bc63-8b0bef5cffb6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6602b51f-6fbe-473d-9675-0ab802d04e07", "sighting_of_ref": "indicator--5ee70ca4-2658-4ad6-bc63-8b0bef5cffb6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e606826-c025-490b-842e-d56b3ea98721", "sighting_of_ref": "indicator--5ee70ca4-2658-4ad6-bc63-8b0bef5cffb6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f721e34-fb7c-44c2-b4c7-3c4a573a9fea", "sighting_of_ref": "indicator--0fed8c3e-fec6-4a8b-be5f-84e929e37ae4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50bb4c89-e6a0-4511-a59d-58dafe7f8a3f", "sighting_of_ref": "indicator--9d0ff04a-dbf3-474a-891c-86e8e1155835", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12686ed-71c8-497b-8162-e6d8f41d744d", "sighting_of_ref": "indicator--93f2aef2-fdad-49e5-8489-5c65ca473f8b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2427c022-7a18-4948-aff3-e1990396bbbc", "sighting_of_ref": "indicator--a465f5fd-be16-47e6-9ccb-bcf440e22b17", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e32a022-1d47-471b-846f-34edcb7592e0", "sighting_of_ref": "indicator--1cdcaf7a-95eb-4f47-8387-6d512c57041c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fc15e6-a0bd-49d6-a330-36b22c9dcd6f", "sighting_of_ref": "indicator--e6bc8f3e-0d37-42ff-b4b2-ca04629693c7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6026c5bb-8d44-4c57-b14a-c893220847c8", "sighting_of_ref": "indicator--0304e037-8e0f-48bd-b19b-de5395673dec", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604112e0-e55f-45f5-b1ae-a62915d42454", "sighting_of_ref": "indicator--ed02b27c-f352-4c5f-aaee-990d9e2cd8a4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2165b1e9-8103-4bfd-9582-e368657a90da", "sighting_of_ref": "indicator--ed02b27c-f352-4c5f-aaee-990d9e2cd8a4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cba49f-5a0b-49a4-acc7-799a89d9b444", "sighting_of_ref": "indicator--ed02b27c-f352-4c5f-aaee-990d9e2cd8a4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef74c574-b3f5-4d4d-8c63-d8fc82661605", "sighting_of_ref": "indicator--5024af01-f74d-45d8-9769-b9a522b15abd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbffe79-266f-4752-9075-71aa0d58ba52", "sighting_of_ref": "indicator--dbf65185-2ca8-4a3a-a9e4-a04479aeb9d0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd93a17-2937-4355-a2a8-6243f5819481", "sighting_of_ref": "indicator--dbf65185-2ca8-4a3a-a9e4-a04479aeb9d0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c31415f-26da-4555-800c-fad3b37908ad", "sighting_of_ref": "indicator--dbf65185-2ca8-4a3a-a9e4-a04479aeb9d0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9eb5853-1e71-4683-afaf-b4a400aad636", "sighting_of_ref": "indicator--57434f52-0cd2-43f5-a55e-27ab7f8188c1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8b2115-a4af-426a-beea-6757fd2cccac", "sighting_of_ref": "indicator--57434f52-0cd2-43f5-a55e-27ab7f8188c1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a9058d-d5cd-4f0b-9546-0449591c4596", "sighting_of_ref": "indicator--b396d7a4-8f8b-489d-a1e7-10938c11482f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322c60ed-2830-495d-a51f-724cc10c5a3e", "sighting_of_ref": "indicator--bfb59be7-2bab-4937-9bf4-8903489566b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6208e798-f18a-4777-9d15-1fc758d2b274", "sighting_of_ref": "indicator--1057854d-b889-4a0f-944e-f76194e97998", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8a9c2f-5866-48a3-8fd9-a4585de76726", "sighting_of_ref": "indicator--70eb9967-ff19-4865-bf79-edae819fb4ed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712e17b2-ac51-4739-a672-4eac25a1ed4c", "sighting_of_ref": "indicator--616de5ce-6881-4dd8-b540-a3ddc6ef7378", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111ccc72-63eb-4259-81b9-46ff612ed67c", "sighting_of_ref": "indicator--30b8e543-164b-40e5-a050-fbf56f5decc1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5138324-3408-47de-97e2-f96aca276b55", "sighting_of_ref": "indicator--61e861f7-bf05-4bee-b965-5ff7fa5977ea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73564daa-2df5-4896-b453-9f99243b532e", "sighting_of_ref": "indicator--dfcec597-8387-4961-bb12-2041a9eaf1b0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52480c3-b5db-4362-8bc6-140c083d2b1d", "sighting_of_ref": "indicator--efd6bb5d-c824-4569-994a-2ce7fc024907", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea387543-066b-4d3c-a82f-0076dd680a45", "sighting_of_ref": "indicator--1e302ef9-18b0-457e-8a09-0a5b6ae1ceff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c47a95-e640-4f27-a604-f566c6fcf42f", "sighting_of_ref": "indicator--4994ac25-3caa-4c7f-a888-dccfcba5d003", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d6b536-2001-47df-8f7e-98d15f77ef36", "sighting_of_ref": "indicator--6ae859db-f482-49e1-bfc9-a9e2426226c9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fa7bdb-4a17-4c9e-9d19-540a3cd3d653", "sighting_of_ref": "indicator--3d44533f-f05e-479f-bb34-a1616a275412", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680387b4-a1f8-480c-aef2-4142f2d7206f", "sighting_of_ref": "indicator--93f017a5-39b6-4dc5-a5f7-c162a5e4c8a8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89121040-6410-4ec4-94a0-ff2f9d082f85", "sighting_of_ref": "indicator--ba14b098-bb89-4cda-8c89-7329de613a9e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbe93b7-ecfa-403a-b4b2-cf4db51150e8", "sighting_of_ref": "indicator--8d1141ba-3978-420b-a544-80d206d63ce5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38ea45f-70d7-445a-8c72-10a8db64e2a5", "sighting_of_ref": "indicator--6fa4eeaf-e189-4ac7-839d-fdb6122a2646", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6335bdf2-fccf-4a3f-9df9-9c2e4cb1854b", "sighting_of_ref": "indicator--bc0213ae-17af-4f36-b3d7-d3c9be74df05", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eaff6b6-c766-458b-ba13-2bd064f73ce9", "sighting_of_ref": "indicator--ba81b1f1-ff40-4491-932e-0357dd6a12fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0a5a83-a104-488a-8f83-249b3657c51a", "sighting_of_ref": "indicator--8582ed40-3a51-4365-8852-29739386a8a4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9dea34-0a1f-4253-a666-e9fadd025d26", "sighting_of_ref": "indicator--cddf0c6e-a2ff-40e5-bf7d-b1b7209725d1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e85186-6a1a-4087-b1c1-ad4fc2514ce4", "sighting_of_ref": "indicator--7eb2f948-02e2-4b9b-9e67-6111784ae484", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6693d1-1af5-42c9-9abe-b102fc94dbae", "sighting_of_ref": "indicator--e919da05-d5d5-4d40-9f87-a0eca50f2568", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7c5fd3-17f1-4af6-a185-e7f8c08d53ce", "sighting_of_ref": "indicator--b069c4b0-2344-4e24-8f59-790430255b94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6396b891-3492-4952-b643-a5b7ad43713b", "sighting_of_ref": "indicator--c936ca38-8eb7-413a-8d05-73e4b560342f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a0bbdb-6706-4332-9d93-f4ad3db41bf9", "sighting_of_ref": "indicator--c980f7ed-4042-4aac-bfd8-e2ec8b29b84e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b428c57b-96fd-4752-b764-868f35e83f83", "sighting_of_ref": "indicator--af96e595-1ffb-4b8b-951f-754ea22555a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eefd278-a2e1-49c0-8ae1-f2a230ac6cdd", "sighting_of_ref": "indicator--2cc89f9a-355d-4a31-a4a7-2f1b6bf48801", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870de0dc-1840-42a5-a252-5c98ace4b67c", "sighting_of_ref": "indicator--9e8b048d-89ac-4b00-955f-fb230f6c0a90", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ffa805-dfdb-40ef-b5f7-5bc546a3021b", "sighting_of_ref": "indicator--aa441b06-0801-470d-b109-ea5ebb1f5f87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7c6c81-2f91-499b-8a84-18b683df7047", "sighting_of_ref": "indicator--333ee321-4ddf-4ba8-b701-67b48ce69bc7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509ab59c-ccb8-4bcb-9fef-e3d9013c8eba", "sighting_of_ref": "indicator--1195e1ec-2caf-428a-9e72-264296eeadae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dba55e5-d5e2-4f02-bf66-cdfd09cd5123", "sighting_of_ref": "indicator--d4de0ea8-9bda-4a07-8962-b58d213e7224", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed29726-11ea-4264-924c-8ad403e83b73", "sighting_of_ref": "indicator--6b2443d4-f910-4d11-bf59-dadea77838d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62021e4-1efd-42b9-b816-5195cea9af24", "sighting_of_ref": "indicator--d5776294-dcad-4f59-aaef-ef416f36664e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99947774-eef9-4640-999c-c9ea0307dca7", "sighting_of_ref": "indicator--b10156fa-7acb-4054-b83a-e818bbe5e1b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3cd279-6363-4133-8995-d228e0d894da", "sighting_of_ref": "indicator--60145414-3e96-4d8d-a1f3-060ef3a32e69", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59562c07-a764-4652-a6d6-df549e71fa6b", "sighting_of_ref": "indicator--e92d731b-8722-466b-b838-443fa9b4dd90", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2690c324-936e-4b52-bb85-d4810eb10b3f", "sighting_of_ref": "indicator--7a59c246-21bb-4c78-ace3-20c1316959f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec24b611-15a0-43bb-a8f8-9e19a5a89814", "sighting_of_ref": "indicator--d7375613-e084-4268-b712-541cf76bfd1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145b8811-1092-45d3-926b-f50333c9b43e", "sighting_of_ref": "indicator--e25f4995-e741-421c-b81f-c19a4a6cacd9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cf4e60-bf3c-4fd2-8fa0-9f597157ccc7", "sighting_of_ref": "indicator--14152762-5560-4e31-b579-4d3b84fe169f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4a5a34-56da-498c-a29c-ec83f661e124", "sighting_of_ref": "indicator--09a4f320-f2f8-4191-9f34-c7dd4061bdb0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e532a4f-e87b-4747-81f8-7838ecee426e", "sighting_of_ref": "indicator--b5ca4513-18ca-4a40-8521-131139ef2535", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a9ad03-263f-41de-a52a-ed959e3d22d1", "sighting_of_ref": "indicator--0945bd65-a50f-491d-9f49-8056abd11738", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ccc99b-789d-411e-83c2-affc28782890", "sighting_of_ref": "indicator--032f6d21-ff2f-498f-bcfc-9267599bbb1e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de19f650-8681-4f94-b9ae-23daa40eb3c6", "sighting_of_ref": "indicator--720356b0-2e65-4e92-8599-200bbaaa6301", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4979fe9b-4ca8-41e4-8974-be969e370ba0", "sighting_of_ref": "indicator--1637e0fe-fe1d-4fca-8b5e-0fe44f03229b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89506133-82e7-4eee-84c0-63663ece3dc7", "sighting_of_ref": "indicator--495cb864-64db-416d-ab54-11f7503e4196", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40a8370-56f6-4a88-a1b9-32414e8e40ed", "sighting_of_ref": "indicator--b3765c67-b683-4d0d-a410-c4682f325523", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a446f766-a5e0-4371-8814-40a65f48ec4e", "sighting_of_ref": "indicator--c00b5165-3655-41fb-a476-18c912aadc71", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015bd80e-051e-445d-9db4-0d27e6fbef42", "sighting_of_ref": "indicator--00b7c737-3217-4119-b832-62f5268ca15f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68955d39-aa31-4e21-b5f0-9edb3e29b61e", "sighting_of_ref": "indicator--00b7c737-3217-4119-b832-62f5268ca15f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c969af2-7598-417f-92e9-8149803781d3", "sighting_of_ref": "indicator--f932a18e-2f10-43c5-92d1-68e514d3960f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb99c255-7f84-4e3e-a000-07fdc8a20d14", "sighting_of_ref": "indicator--1caef9d6-588a-45ff-897b-cc1a0813b79d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fce76c5-a7ee-4dd5-b09f-5483f83cd0de", "sighting_of_ref": "indicator--fb6c617e-5ebf-40ff-89b4-5de894d662b3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08505276-20ea-4db3-afe7-d43ffc758e15", "sighting_of_ref": "indicator--b77d0b6b-5cea-4483-a3ec-2be406ded449", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341737ee-8cf6-4007-b758-d72d6af82c5a", "sighting_of_ref": "indicator--55d08254-9c57-4f52-a037-8a441ef0db77", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe6950d-9342-412c-b757-a922c1df4ad8", "sighting_of_ref": "indicator--09624c89-d34a-46a0-a8d5-16d0a9c04f7e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3906d38b-4be1-4a6a-a85d-bc51b656c92f", "sighting_of_ref": "indicator--f702abd1-8099-41ac-9d0e-35e6b435c6a9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256eb080-1004-4152-b883-d51e75439bed", "sighting_of_ref": "indicator--ac2eb0a2-4f0e-4f04-b248-7ecbeb8bbf41", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4f9317-9c81-473d-bb67-34b255dbf1c1", "sighting_of_ref": "indicator--669d6126-11ab-45f4-bfcc-51ec122396cb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077676c6-fa18-4283-b225-dcc166e5f02b", "sighting_of_ref": "indicator--92b8ef20-8e5d-44ee-9a42-53b15f2c7735", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd1806c-2dda-4b2a-ab78-4d3113c8cc28", "sighting_of_ref": "indicator--e88f2658-34c0-427c-8fac-18b22f5c2af0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cc630c-9e4e-4c45-a6df-a4fa37653275", "sighting_of_ref": "indicator--bfebe550-6c71-48fb-b96e-e1a19e7abe08", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e003529-5dc5-4f7c-9552-e014a34d2922", "sighting_of_ref": "indicator--2331de33-799a-4dc9-97ff-6e44948b4224", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59efe80a-029a-4124-833d-6f818b42c43e", "sighting_of_ref": "indicator--c889fd24-c32a-4ea4-9ae3-e4bfd62c44dc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616c7e87-077b-4eff-be97-845e7f20bd55", "sighting_of_ref": "indicator--a11fca20-b85e-4905-9553-5bb8156c1bc6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2cf97e-9baa-4aae-be0e-3994914aa599", "sighting_of_ref": "indicator--52091089-ab2b-4bea-8490-881d381351e2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04924c9d-d164-420d-bfd7-a8f55edeca11", "sighting_of_ref": "indicator--517432bf-67dd-481d-9765-69aa0c37d06c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abcbdb5-03c4-4b88-9fa7-9a6a8ac4399b", "sighting_of_ref": "indicator--7f457259-826e-46f3-9f0a-3316a6b191dc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb52cb3-8893-469d-af7b-a1b675ddfb74", "sighting_of_ref": "indicator--1c7837ee-2e26-4e51-8262-51854f93ca90", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b143e6cd-64dc-4e6e-a0c0-9601a3a95a33", "sighting_of_ref": "indicator--5e36e7d6-f104-479c-8a54-eb387c92c2fd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d32369-3b59-4d81-9172-e2047c5aa52b", "sighting_of_ref": "indicator--b2ed1d76-82d3-48e0-bb99-358317d935ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb1a326-b913-415e-b608-428355f9af52", "sighting_of_ref": "indicator--7ed159d0-a7c0-445c-a43e-802cd2622151", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00141668-508a-45ab-b186-6001965a366e", "sighting_of_ref": "indicator--e31a40ec-0bca-46cf-b4ec-abf36f34c968", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad482035-2029-4f4a-83b1-85db19014fbf", "sighting_of_ref": "indicator--1c6f7080-619d-4e18-b29b-c5d1a5c1c67a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e18de21-1b87-4516-a3df-c79ae408e53f", "sighting_of_ref": "indicator--d9b766ca-5f34-4ebb-b848-3efec88444bd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ca48c1-6c30-427e-9915-152f4c1295fd", "sighting_of_ref": "indicator--baea076d-fc75-432f-8a29-90cd2a3b3828", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1ebf75-43e6-4442-b57e-df0d5b45a0f7", "sighting_of_ref": "indicator--e029a7fc-f2ad-4db6-bc35-b7d8856d8120", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1746591-d8e7-4e46-ace9-ab937d741bd0", "sighting_of_ref": "indicator--a54e53e1-4fe8-4f2a-b6c4-68b5bc3d2eeb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd38ca97-639a-4b8a-8ca8-0392db006d3d", "sighting_of_ref": "indicator--0ec9a7d8-f179-49bd-966c-ea68d465a3d8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e272b09-631e-4afc-a6bd-205546cbd07e", "sighting_of_ref": "indicator--fe24c06b-ec9b-461c-9f74-73beca094827", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3156de0f-206c-44b3-b22c-3d02fd7677ab", "sighting_of_ref": "indicator--18f9e6b3-003a-409e-9905-45ffcfe60d25", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe8e861-d72f-45a0-b812-b2adafd9d915", "sighting_of_ref": "indicator--b64f2368-43a4-4161-9d55-8b0f415db4de", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a655424-80c1-4023-9503-d00e360cf179", "sighting_of_ref": "indicator--871028d5-99c0-44ca-969b-84d9b2760ca7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50dc0870-0400-4bda-91cc-b4843ad443c8", "sighting_of_ref": "indicator--5804f3f5-4db0-44dc-94c4-6449b84e45ab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06a13f1-a573-48b2-8ab8-609031202a75", "sighting_of_ref": "indicator--3f2e0cf3-8572-4a18-a0ad-1ec9c1dda340", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74c12f0-17ef-421c-a884-17797c70a6af", "sighting_of_ref": "indicator--d6423e88-7287-4d77-9101-77ff6fdbb144", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad4614f-1faf-425c-b67e-6089bccc0be4", "sighting_of_ref": "indicator--38feea11-aea9-4c4e-8914-12e0204acf77", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f4d46e-3be6-4f80-bf53-be1f6a251217", "sighting_of_ref": "indicator--807dff50-ecaa-4f83-b404-6e66fc1a8654", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96947d3c-b76a-4954-9053-2e7b3d33a90c", "sighting_of_ref": "indicator--5b7b80b1-95ec-46f2-9561-5c8f2a4836ac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247eb1a3-be66-4301-a018-4290dece5a59", "sighting_of_ref": "indicator--bd081702-973e-4aaf-8a93-4b6675102f4f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e322b55-e052-4bea-a965-09163ba699b8", "sighting_of_ref": "indicator--a60a5770-4e0d-4269-9c86-5bf0bd043b3e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a7f390-d6df-4809-a18d-b768c35d3e3a", "sighting_of_ref": "indicator--42bfbd69-a050-40af-b1ec-b39802026d59", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ead304-ff73-4c66-a664-552ae2914aff", "sighting_of_ref": "indicator--8c6729d7-407f-4e9b-a56c-7c8c1cc7cfc1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c3f7b1-edb0-4320-9469-92a5d1de7516", "sighting_of_ref": "indicator--8c6729d7-407f-4e9b-a56c-7c8c1cc7cfc1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d84ad6-c727-4ada-a9b8-56b9fc608e18", "sighting_of_ref": "indicator--cfbfb45b-fb49-49a0-a4b4-04a60723c1e0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63061eab-7bd9-4472-9b04-95302ff8bb02", "sighting_of_ref": "indicator--cfbfb45b-fb49-49a0-a4b4-04a60723c1e0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612c942d-febc-4cdd-9f81-ce874deb6fb6", "sighting_of_ref": "indicator--765ba8dd-4243-41d2-adce-1f8d3fd93e1f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72dbe2af-6d80-494a-875d-ec33539b82a8", "sighting_of_ref": "indicator--765ba8dd-4243-41d2-adce-1f8d3fd93e1f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4545d3-56c3-4a85-bb1c-bc2346b5f0e0", "sighting_of_ref": "indicator--3d35a925-c3d4-430d-882b-109f82bed08c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a81d88-0f3a-4a1c-a070-d8ff582c58a5", "sighting_of_ref": "indicator--3d35a925-c3d4-430d-882b-109f82bed08c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582c03d0-ae1b-46dd-bc88-5322d977b2ba", "sighting_of_ref": "indicator--58bfee1f-fb0b-4558-aad0-b95525b53c9f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2598ce7-483b-49f2-b3ac-f5bf5178083f", "sighting_of_ref": "indicator--58bfee1f-fb0b-4558-aad0-b95525b53c9f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8a1751-2a20-4e1a-890f-ead21cc9fd18", "sighting_of_ref": "indicator--4e05f171-8fa3-4528-8b16-bd04b9d23319", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52bbfb0-f310-4775-8931-e11ea5ebc7a9", "sighting_of_ref": "indicator--4e05f171-8fa3-4528-8b16-bd04b9d23319", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529c0266-c172-404e-b224-3a4fb0197534", "sighting_of_ref": "indicator--e7497c9d-c704-4107-b376-01ee89ebea0f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85f79b2-8fd6-429d-8ff5-16002219e4fb", "sighting_of_ref": "indicator--e7497c9d-c704-4107-b376-01ee89ebea0f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6930b6c-ce13-4260-a1f4-8a41235c4e53", "sighting_of_ref": "indicator--5f5391b0-bea7-40ca-a2db-0f2dfb3278ba", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed6b48b-c97d-4e92-be28-5c400b5d5b8c", "sighting_of_ref": "indicator--5f5391b0-bea7-40ca-a2db-0f2dfb3278ba", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072a36dd-eda1-4474-90f5-1e53c202776c", "sighting_of_ref": "indicator--86127da2-f96f-45c3-bb7c-db461e129876", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a394be2-3976-4ffd-9ae7-ecdb75625004", "sighting_of_ref": "indicator--86127da2-f96f-45c3-bb7c-db461e129876", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51368a4-ac71-451c-b1c9-1ab5f2e62c7f", "sighting_of_ref": "indicator--8d8412a2-5ebe-474d-8fd7-a0984d164c43", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0311945-639f-42ef-b80f-319f203fa16b", "sighting_of_ref": "indicator--8d8412a2-5ebe-474d-8fd7-a0984d164c43", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddc0d9a-19d6-4b36-883e-864b62bd830f", "sighting_of_ref": "indicator--d989f5f2-1314-497c-8d02-4874ba5e32f5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c237747f-bdd9-43ff-baa5-469265312554", "sighting_of_ref": "indicator--d989f5f2-1314-497c-8d02-4874ba5e32f5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780a241f-b703-4b07-a315-7a96c0e906ce", "sighting_of_ref": "indicator--9e11c5f7-d744-4aab-bc68-ccb8691d046a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ceaac3-44f6-4794-8edc-80e9e9349401", "sighting_of_ref": "indicator--9e11c5f7-d744-4aab-bc68-ccb8691d046a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef9011f-8fc3-40d2-8e2d-4ec9559d5bd4", "sighting_of_ref": "indicator--9b961806-03b5-4615-baec-86f2e1c2e67e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc387d7-e28c-46e0-b429-e3abfbcfce2c", "sighting_of_ref": "indicator--9b961806-03b5-4615-baec-86f2e1c2e67e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fee801-346a-4765-8a93-d32e87fd3acf", "sighting_of_ref": "indicator--ce35bacc-e867-44a0-b08b-985f366f5376", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be30f60-874f-4d58-b067-4ee5888dff24", "sighting_of_ref": "indicator--ce35bacc-e867-44a0-b08b-985f366f5376", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d18eef-6cb9-4bd4-ad1c-8c089921b0c9", "sighting_of_ref": "indicator--c3bcc500-bde5-492c-9789-991345882a62", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d9a4f6-bc95-472e-9a1b-ab3d8ecf0c4b", "sighting_of_ref": "indicator--c3bcc500-bde5-492c-9789-991345882a62", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286808c2-f03d-4157-a317-2da92de9ab0d", "sighting_of_ref": "indicator--d7d55c79-f6db-414c-a925-d7713c4367ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b615b1ea-a70d-406d-bd3f-a642bdb333e6", "sighting_of_ref": "indicator--d7d55c79-f6db-414c-a925-d7713c4367ef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67bcca5-4b4b-49ab-8cc3-21ad90e0a0a9", "sighting_of_ref": "indicator--d78c345d-f340-405d-a0d6-2a3ac679dcc4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244ee762-5794-4f3d-88f9-3c1570fce66f", "sighting_of_ref": "indicator--d78c345d-f340-405d-a0d6-2a3ac679dcc4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05054be5-7879-40dc-8524-63525a901e18", "sighting_of_ref": "indicator--4fe7b320-9865-49ef-a141-aff8c12a76a5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f1f6ad-48ab-4d18-9f19-6b6ba291be83", "sighting_of_ref": "indicator--4fe7b320-9865-49ef-a141-aff8c12a76a5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449bd407-0645-441d-ab68-fc0150c40cf2", "sighting_of_ref": "indicator--fd415e73-a78d-4a8d-b634-2c477487fdac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcc77ca-79f3-41a5-ba1a-d9024e47c16d", "sighting_of_ref": "indicator--fd415e73-a78d-4a8d-b634-2c477487fdac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48df731f-7e11-472d-9740-3693ec2d0d6f", "sighting_of_ref": "indicator--66c8e870-3218-43da-a712-043439c9271e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0324677-44b4-4384-b38e-0c81d79c4231", "sighting_of_ref": "indicator--66c8e870-3218-43da-a712-043439c9271e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5c4f38-bea1-4019-a9ef-846cda94b053", "sighting_of_ref": "indicator--f145befb-cfe5-4771-8caf-b99176b5c2e8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02247253-45d6-43e2-bba2-a2e208d98345", "sighting_of_ref": "indicator--f145befb-cfe5-4771-8caf-b99176b5c2e8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3839ec5c-bc4f-480b-82b7-e94416020eb3", "sighting_of_ref": "indicator--11b7cd3b-31ff-4aab-9743-c0ef5fcb7698", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea30c54-0690-41fb-bcdd-0e9b8b1fc7d3", "sighting_of_ref": "indicator--11b7cd3b-31ff-4aab-9743-c0ef5fcb7698", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f3faa0-479b-4094-adbb-063f30fc1ce6", "sighting_of_ref": "indicator--c6996604-1da2-4ace-bb75-b734653b4677", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b02f02-e563-421d-b16f-61a0f8108951", "sighting_of_ref": "indicator--c6996604-1da2-4ace-bb75-b734653b4677", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30cf978e-db0f-45ef-8c10-dcc00cd36efb", "sighting_of_ref": "indicator--29f58c69-bc4b-4bed-bfe2-dacf3e295efa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb404059-dbc3-4eb1-be6d-cb4d21f730d5", "sighting_of_ref": "indicator--b0ba2f80-ed67-4f87-95a1-2f537944b4f8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04401042-89b2-4bb8-9df3-e22813a0f872", "sighting_of_ref": "indicator--b0ba2f80-ed67-4f87-95a1-2f537944b4f8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70dbcca7-9832-44da-be42-edae607a9488", "sighting_of_ref": "indicator--95483620-7791-438b-a261-43afb4d6a3f8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b9e4d6-3837-482f-b9eb-a35fb5884e13", "sighting_of_ref": "indicator--95483620-7791-438b-a261-43afb4d6a3f8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59cf5caf-e278-4aac-9756-527f037bf098", "sighting_of_ref": "indicator--8d12c509-3b9f-4d31-a711-7e9a96c7886e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--183e70cf-9bed-4249-aabe-0243d0fe13c8", "sighting_of_ref": "indicator--8d12c509-3b9f-4d31-a711-7e9a96c7886e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7889491-775d-4458-b695-ef5495ddd9ee", "sighting_of_ref": "indicator--d94f099a-ed9f-4329-816d-6432b08f8b71", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69354a4b-4222-43e2-80b4-72b1f5cab2d9", "sighting_of_ref": "indicator--d94f099a-ed9f-4329-816d-6432b08f8b71", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192dc021-c5d8-4f85-8eb7-4b6d22579f36", "sighting_of_ref": "indicator--9aed2c8c-19ea-4993-80d8-1a11d1fcd210", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd5079f-d451-4f45-a6f5-59a1eaa3ef98", "sighting_of_ref": "indicator--9aed2c8c-19ea-4993-80d8-1a11d1fcd210", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533aec22-78ce-43a6-b147-81e511eaa411", "sighting_of_ref": "indicator--bedeef4b-ae93-464f-aa17-37e60dda5c67", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f47cea-2427-41d5-bcfa-1cf3254fc84b", "sighting_of_ref": "indicator--bedeef4b-ae93-464f-aa17-37e60dda5c67", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ca54f5-6a77-4a8e-841d-9a0fcff975df", "sighting_of_ref": "indicator--e25b6d1a-5280-4ab1-bd1a-7911804a2c63", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048c7873-9089-4c75-8010-37b87e716274", "sighting_of_ref": "indicator--e25b6d1a-5280-4ab1-bd1a-7911804a2c63", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0e9b48-de4a-496f-9bd2-e43f68ba6f10", "sighting_of_ref": "indicator--210ea03a-246f-4047-8cee-937d0cc435af", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db60f954-7c52-4ec0-80df-b4c58eb6224f", "sighting_of_ref": "indicator--210ea03a-246f-4047-8cee-937d0cc435af", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfcd24f-b5e5-432c-9ff2-e84cac20d906", "sighting_of_ref": "indicator--c8695f42-1325-4202-a53b-fe3a60e1beed", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e68929-ed6a-4be7-b114-2a42f9146763", "sighting_of_ref": "indicator--c8695f42-1325-4202-a53b-fe3a60e1beed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd50262-fe9c-4932-a608-f62b76f0b30b", "sighting_of_ref": "indicator--98e3e9b4-55d1-4c1e-ad62-675ab2a30a46", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e97231-f090-4c50-b8d7-7e5cdf9bda1f", "sighting_of_ref": "indicator--98e3e9b4-55d1-4c1e-ad62-675ab2a30a46", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27bcea6-7c24-49a7-a05b-1cdff8d73454", "sighting_of_ref": "indicator--33b3b3fc-ff8b-4676-a562-7b46120200c0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7f9e53-fb54-48d9-b883-1772d3d69e03", "sighting_of_ref": "indicator--33b3b3fc-ff8b-4676-a562-7b46120200c0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495b4c5e-5551-44a4-98e0-66f533b55ad0", "sighting_of_ref": "indicator--22f1b3ec-b1ef-43a2-95db-00a6242c75a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe71f73-c4c4-44f6-814c-a666c7b51cd3", "sighting_of_ref": "indicator--22f1b3ec-b1ef-43a2-95db-00a6242c75a7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62c6169-9933-4eab-be70-3e6c756d518c", "sighting_of_ref": "indicator--1709d202-2b6b-4751-999a-a4e02e60bc7f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79255693-83e2-467d-8982-2e509bc34a63", "sighting_of_ref": "indicator--1709d202-2b6b-4751-999a-a4e02e60bc7f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83216d56-6ef0-4b26-88f9-8f8b4e99488f", "sighting_of_ref": "indicator--279f3555-382b-44c1-933d-05b9e9996e53", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f060244-5fba-41f3-a097-ec18ac610bd4", "sighting_of_ref": "indicator--279f3555-382b-44c1-933d-05b9e9996e53", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f175a1-f581-459c-bb7e-02ded1f1e5a7", "sighting_of_ref": "indicator--3d6f63ad-585c-4f4b-852b-88fc33ee7d2c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4769db69-b03a-4bcc-b701-5c5fc820ffb4", "sighting_of_ref": "indicator--3d6f63ad-585c-4f4b-852b-88fc33ee7d2c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21f4576-0f13-4e80-b5b2-5612725cac26", "sighting_of_ref": "indicator--0b070bbb-a9c1-424b-8a18-b806c8c328e3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987803d2-d02e-44ec-9bce-1889587de4a7", "sighting_of_ref": "indicator--0b070bbb-a9c1-424b-8a18-b806c8c328e3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bc32c4-f75b-4f68-84dd-e84b06e0b9ec", "sighting_of_ref": "indicator--458725c3-f0df-429e-9b7f-e68357ff1610", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3030dd5-9028-45ff-a40e-ed8392f4fc8f", "sighting_of_ref": "indicator--458725c3-f0df-429e-9b7f-e68357ff1610", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac81ad3-c332-4cfe-a00b-d77d43786883", "sighting_of_ref": "indicator--365f412c-7067-42b7-b942-e7dc28df3c37", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4e9ba3-56e5-4bb4-b3fa-cd18875f8f30", "sighting_of_ref": "indicator--365f412c-7067-42b7-b942-e7dc28df3c37", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17caace0-901b-48c9-8259-f3cacd402e97", "sighting_of_ref": "indicator--2eaa0930-293d-4da7-bf3f-ce947a5e0517", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb11d96-82d1-4a1b-8d74-b9d8ce6140f4", "sighting_of_ref": "indicator--2eaa0930-293d-4da7-bf3f-ce947a5e0517", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08492d64-cf3e-4dd7-a48f-4edb1f339887", "sighting_of_ref": "indicator--92e66a95-bff4-43c7-a6df-4e1569e70a6d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b7adba-099a-4481-9c55-dcd5afe36615", "sighting_of_ref": "indicator--92e66a95-bff4-43c7-a6df-4e1569e70a6d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68debc5-a2c8-43ee-86ad-74776f65b525", "sighting_of_ref": "indicator--c03ce5d5-93a3-4b4a-ae4a-1cf12edd6939", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fce7b5a-dd2d-4dd3-ac34-e59217fe5881", "sighting_of_ref": "indicator--c03ce5d5-93a3-4b4a-ae4a-1cf12edd6939", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2efa218-d03e-440b-941f-7626aee70e79", "sighting_of_ref": "indicator--26e4c003-fbba-48d9-9cdf-555a067bc877", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5161cd9-2e26-4199-a5d0-7fcd7c94f6a5", "sighting_of_ref": "indicator--26e4c003-fbba-48d9-9cdf-555a067bc877", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d3c3bf-696c-42c6-87c0-98bcc543c961", "sighting_of_ref": "indicator--e8276425-bee5-417b-8000-04f4a7001b8f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a78e2e-9f95-40d1-8b84-30038e50d919", "sighting_of_ref": "indicator--e8276425-bee5-417b-8000-04f4a7001b8f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32651d9e-b2be-4de2-8445-e6a0def2b171", "sighting_of_ref": "indicator--502a1dd5-eb22-4eef-9f19-45010756f4a3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee03799-5dee-4023-a490-267641bee2a0", "sighting_of_ref": "indicator--502a1dd5-eb22-4eef-9f19-45010756f4a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e1df3e-dae5-427d-8469-d52b555ede0f", "sighting_of_ref": "indicator--652eb72a-24f8-491b-ae49-8dbd67e24350", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b48e49f-c8a5-4f10-908f-d88d69c4d17c", "sighting_of_ref": "indicator--652eb72a-24f8-491b-ae49-8dbd67e24350", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742de7e3-3e31-4b05-bf3b-6e432b7bedeb", "sighting_of_ref": "indicator--9e900d8f-f9e8-47fa-bf96-c4a24eb7a59d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6193d72-d237-46f2-aa19-b888d12d79c0", "sighting_of_ref": "indicator--9e900d8f-f9e8-47fa-bf96-c4a24eb7a59d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628c30f0-bebf-4b03-94ec-bf504555b138", "sighting_of_ref": "indicator--9a1b94fb-687f-44ec-95b0-31826b75c73a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fabb11-e846-400b-9be6-fc16a53c527f", "sighting_of_ref": "indicator--9a1b94fb-687f-44ec-95b0-31826b75c73a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48015ea2-d491-4db9-95a9-4cde29bc0b2e", "sighting_of_ref": "indicator--6eb40bc0-99a2-45d1-986d-19531b3acbc5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef69445-d903-47e9-8178-d4948e96fa60", "sighting_of_ref": "indicator--6eb40bc0-99a2-45d1-986d-19531b3acbc5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63a6f03-240d-4400-8aee-e8bda68cb5ba", "sighting_of_ref": "indicator--6cc1b370-1c9f-4ab6-90b2-fd10a1b0c02a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b00de8-527a-4689-b9d9-bdba7f786893", "sighting_of_ref": "indicator--6cc1b370-1c9f-4ab6-90b2-fd10a1b0c02a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2cc6415-e155-47b8-8f7c-0c75b5475ec3", "sighting_of_ref": "indicator--51b31ff6-fa1e-49ba-bc41-3180ff3e0f9c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620fb176-7e01-41b4-aadb-e8593ee0283c", "sighting_of_ref": "indicator--51b31ff6-fa1e-49ba-bc41-3180ff3e0f9c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6743daa-4613-499f-8d29-e52d63365959", "sighting_of_ref": "indicator--362ef07e-6eed-4ea3-b1a7-6babc99cd2bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09096a82-6e5c-4570-9d82-b2fdfd456e05", "sighting_of_ref": "indicator--362ef07e-6eed-4ea3-b1a7-6babc99cd2bb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a38ec4f-faea-41d4-bf0a-5a122eef5fbb", "sighting_of_ref": "indicator--275ef815-6f2a-48ef-9832-0da001c14b5e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05ccf49-8d3e-4bcb-881a-63e7ee6ba1cf", "sighting_of_ref": "indicator--275ef815-6f2a-48ef-9832-0da001c14b5e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b29779-76a2-48c2-9394-6f783f9133b6", "sighting_of_ref": "indicator--f806ca51-c1ce-4c13-987f-ba92b0795035", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f440e23-c71a-4383-ad37-39194eefc446", "sighting_of_ref": "indicator--f806ca51-c1ce-4c13-987f-ba92b0795035", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0586c2-3516-4ac7-a63f-b795da26422a", "sighting_of_ref": "indicator--dfd3383c-c535-4b2b-b8b0-fc9a3a5787d5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfba6d00-3eaf-46c8-8b2c-9fc70f89ff41", "sighting_of_ref": "indicator--dfd3383c-c535-4b2b-b8b0-fc9a3a5787d5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d02f96-1595-4fd9-bf92-b726bcb73c38", "sighting_of_ref": "indicator--aeb69cc7-b714-4248-b1bc-c8f229831cd4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20eedd04-9f32-4c2f-bbde-1bda0e3083d4", "sighting_of_ref": "indicator--aeb69cc7-b714-4248-b1bc-c8f229831cd4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3d2dff-835b-41dc-ba92-b8f79e962fa0", "sighting_of_ref": "indicator--3aef2f41-ae14-455c-9d67-cd52bd5b01fb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc91e0c3-fd8d-4ad8-828e-68353eeb905c", "sighting_of_ref": "indicator--3aef2f41-ae14-455c-9d67-cd52bd5b01fb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02949aab-6ce9-464a-a432-4f7e2128c281", "sighting_of_ref": "indicator--69129a43-b45f-4869-b583-f5b6eba0428f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84964aab-b557-4e8d-85be-675e3d951acb", "sighting_of_ref": "indicator--69129a43-b45f-4869-b583-f5b6eba0428f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eeec14b-b637-46cc-aae8-a75652454026", "sighting_of_ref": "indicator--de471213-e6db-4177-afc9-3137002b207f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7ac253-eb67-45ae-9101-61cf70584340", "sighting_of_ref": "indicator--de471213-e6db-4177-afc9-3137002b207f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16860fbd-824b-41ff-8238-e6d5b9370201", "sighting_of_ref": "indicator--2350b73a-8bc0-49eb-9b3d-a9d72aa036cf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a76951-c0ba-45b2-b35e-438f5564cc8a", "sighting_of_ref": "indicator--2350b73a-8bc0-49eb-9b3d-a9d72aa036cf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60a1935-0d0e-4773-964a-c4acd97af8ad", "sighting_of_ref": "indicator--d6f6c240-f8e0-410a-ba2b-8905b1e785f4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e011732-91e9-483e-affb-15191f578801", "sighting_of_ref": "indicator--d6f6c240-f8e0-410a-ba2b-8905b1e785f4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a01c211-8da2-401f-86e7-7be3a9c63741", "sighting_of_ref": "indicator--c7ac2ea2-4bfb-4025-8925-96a575d2af75", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b28d65-8bdc-49aa-9b88-394647013ed9", "sighting_of_ref": "indicator--c7ac2ea2-4bfb-4025-8925-96a575d2af75", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34af745b-f071-4c73-a761-b7f6d0426499", "sighting_of_ref": "indicator--d578bf3b-e12a-4926-a0cf-47484e618af6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ae83c7-ff8d-4308-be57-693d928ef0f2", "sighting_of_ref": "indicator--d578bf3b-e12a-4926-a0cf-47484e618af6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6b08d5-3b04-4823-90ed-58eecd3c9839", "sighting_of_ref": "indicator--963e6e33-be6f-4e74-901a-7aabb6e0185d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befef00d-8694-4a06-902e-884ed8a02925", "sighting_of_ref": "indicator--963e6e33-be6f-4e74-901a-7aabb6e0185d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36afd16d-2985-4838-a4fe-d500767b45df", "sighting_of_ref": "indicator--4b205aec-95cb-4a13-ad0b-acfa90b24a70", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d653624-02f7-4d47-a781-beef44c02a67", "sighting_of_ref": "indicator--4b205aec-95cb-4a13-ad0b-acfa90b24a70", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1498f54b-1fed-416e-aa8c-277da0aa0b6b", "sighting_of_ref": "indicator--0d484f75-a1fd-4fef-96fb-cefe8eacf782", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4171214c-41e4-4330-aaf8-ae81e3a3c84a", "sighting_of_ref": "indicator--0d484f75-a1fd-4fef-96fb-cefe8eacf782", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a54c05-3852-424b-8762-c65bdca20904", "sighting_of_ref": "indicator--934f69a1-245c-4497-b027-2858404d2075", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4209d410-b67c-44b2-a8f3-9af60b5952d4", "sighting_of_ref": "indicator--934f69a1-245c-4497-b027-2858404d2075", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906802d5-3f14-4616-b522-1c5833abc820", "sighting_of_ref": "indicator--476ee07a-3d4f-4442-94db-4090c2b5b80c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e12c75-1320-4127-bcdc-72d51368e2a9", "sighting_of_ref": "indicator--476ee07a-3d4f-4442-94db-4090c2b5b80c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024e47b8-2b52-44a9-8b92-af21b55b3c71", "sighting_of_ref": "indicator--62b8f7ae-e320-428b-93c8-c44777927b9e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875a5fc6-498c-453b-afdc-4b372d17ce04", "sighting_of_ref": "indicator--62b8f7ae-e320-428b-93c8-c44777927b9e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2167a41f-0407-4e1f-af72-e8a3caa731c9", "sighting_of_ref": "indicator--65bf92a9-284a-49ce-a746-80dd0aa504ff", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbf1e4d-461b-4856-982d-1f08bcaaa07c", "sighting_of_ref": "indicator--65bf92a9-284a-49ce-a746-80dd0aa504ff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950d0e4a-0715-474f-8357-9f895b07597a", "sighting_of_ref": "indicator--709a36f9-8225-46f2-bdd8-8a88ce064999", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ec3ef5-81c6-4795-9e91-f71fe74e1e0b", "sighting_of_ref": "indicator--709a36f9-8225-46f2-bdd8-8a88ce064999", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c69fbbc-5f3c-4bfa-afa0-7c7d39632670", "sighting_of_ref": "indicator--ecae8c85-883c-43e3-8d12-a1b39d1e6420", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4f4b2a-5bb7-4928-b48e-9327925514a7", "sighting_of_ref": "indicator--6f28ef6d-35e8-4ad5-834d-b44d6a506b63", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08452215-0419-4282-a703-15b22ccbc036", "sighting_of_ref": "indicator--6f28ef6d-35e8-4ad5-834d-b44d6a506b63", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57f5477-0429-4713-9269-6a5b916b143b", "sighting_of_ref": "indicator--6f28ef6d-35e8-4ad5-834d-b44d6a506b63", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60bf86d-ae31-48d6-94a1-f91fdf5d7390", "sighting_of_ref": "indicator--f19053f1-0942-47fa-b2ac-f445a1e75e38", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1103d0-f861-49c4-815e-e495c17da956", "sighting_of_ref": "indicator--2a6d33a0-4fdb-4ed7-8051-cb231fe7371f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad3d738-9d66-451d-b222-d309ff34301a", "sighting_of_ref": "indicator--3b8e5ffd-dc4d-4331-84c0-cda1c22b805f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64eecd1-cb60-4f7b-ac8c-3d465f2107a1", "sighting_of_ref": "indicator--aaec1996-e2f3-42de-8939-f22f2dc401e1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9819e641-47ac-4269-a5ec-cf49637bd0df", "sighting_of_ref": "indicator--93c617dc-85d8-4738-beba-997fe01b39f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56f71d6-9051-47a5-b41e-ca275c46f336", "sighting_of_ref": "indicator--93c617dc-85d8-4738-beba-997fe01b39f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe0c506-3bf6-48e3-a908-2055c197b493", "sighting_of_ref": "indicator--c3d6f84f-8bf4-44c8-b92d-554a7bf523f0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff982194-c2f2-49ad-8216-6d6125647f30", "sighting_of_ref": "indicator--42c923f7-9cf9-4471-9d85-7797474013a3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73d91b6-c68e-470d-b0f1-befc23ab35c8", "sighting_of_ref": "indicator--42c923f7-9cf9-4471-9d85-7797474013a3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d77e797-12f0-43f1-8d33-8d454a76c4bb", "sighting_of_ref": "indicator--af625ed5-9539-4405-8d95-d907fcc8f93c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9dd6a5-1b85-457d-a08e-9c334b09169b", "sighting_of_ref": "indicator--af625ed5-9539-4405-8d95-d907fcc8f93c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf340fb-03e5-4e2c-bca2-35467ad333bc", "sighting_of_ref": "indicator--eaf6d4c7-3e3d-4e17-a752-c67057f5ddf5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc874db9-e399-4165-9cd0-c4161f2dd56a", "sighting_of_ref": "indicator--eaf6d4c7-3e3d-4e17-a752-c67057f5ddf5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042a48a5-7317-4528-8a71-511ce2390a96", "sighting_of_ref": "indicator--eaf6d4c7-3e3d-4e17-a752-c67057f5ddf5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dcdf2e-2ef0-4995-8d8a-ef755ec056aa", "sighting_of_ref": "indicator--7f3fd49d-6a0f-4fb1-a762-17f25dc4f03f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415ff8c7-2f6d-499b-a84e-12c1eecbef8a", "sighting_of_ref": "indicator--7f3fd49d-6a0f-4fb1-a762-17f25dc4f03f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8472e984-4b01-410f-81fd-c1d465669fe5", "sighting_of_ref": "indicator--7f3fd49d-6a0f-4fb1-a762-17f25dc4f03f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf346523-af17-47b6-b86a-9671bbe7c2d1", "sighting_of_ref": "indicator--33be4112-87cd-4f64-b7a0-17aa22f0df28", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40379bab-0bf2-4d1a-8585-0cc07273c1fc", "sighting_of_ref": "indicator--33be4112-87cd-4f64-b7a0-17aa22f0df28", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e76e933-7a33-4487-a919-738f8d9a7d14", "sighting_of_ref": "indicator--33be4112-87cd-4f64-b7a0-17aa22f0df28", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60619535-4f70-4c10-988c-afad9bb4d481", "sighting_of_ref": "indicator--093ebbd7-cea7-4b9a-8b89-efa36e09c81f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93fdf26-af7f-4ce5-a2f4-4528d6df5be3", "sighting_of_ref": "indicator--093ebbd7-cea7-4b9a-8b89-efa36e09c81f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a09e71-248e-4a84-85e5-276524f5453d", "sighting_of_ref": "indicator--093ebbd7-cea7-4b9a-8b89-efa36e09c81f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86cde49-bc68-4f61-a3f1-7c6e26465380", "sighting_of_ref": "indicator--65357923-bb4b-4121-8a3e-a588787ee882", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d1898d-0e5f-47be-9d97-cdae87e38a92", "sighting_of_ref": "indicator--65357923-bb4b-4121-8a3e-a588787ee882", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec5a04a-d307-4a57-a9e5-fa57bcfa77f7", "sighting_of_ref": "indicator--65357923-bb4b-4121-8a3e-a588787ee882", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d851d6f5-cafc-4c97-a7c4-858b54b49f47", "sighting_of_ref": "indicator--982fddce-6f8e-4b4f-8b29-bec0d9a18c82", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d28155-9469-4f4c-8b76-1f88c6f65240", "sighting_of_ref": "indicator--982fddce-6f8e-4b4f-8b29-bec0d9a18c82", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b632fceb-3e62-421e-9d30-d75e839cb8ed", "sighting_of_ref": "indicator--982fddce-6f8e-4b4f-8b29-bec0d9a18c82", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38c3045-e9ad-49fe-857b-792433082b56", "sighting_of_ref": "indicator--881f0faf-c172-4246-b19c-ebb1e74ac503", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9798cd8b-9b96-4d63-a614-41f812328480", "sighting_of_ref": "indicator--86460065-5691-4a94-8b84-ba94cd43e059", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431b178b-9cd0-4a53-b5ef-8c073a47aaba", "sighting_of_ref": "indicator--86460065-5691-4a94-8b84-ba94cd43e059", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961c2761-de50-4235-88eb-3678926cef96", "sighting_of_ref": "indicator--fc44e5f9-af91-4625-925a-8996029c1eed", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49fba907-b4df-4df8-b70b-e17b77f66b37", "sighting_of_ref": "indicator--95a19eff-b403-42ad-96de-509e770d0dc4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83076da-e8fe-4b8d-98f5-5f584ad9957a", "sighting_of_ref": "indicator--265efc12-899d-43c8-98f7-d9543dc0695d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa3480c-f4d2-45f7-a461-bb90755cf392", "sighting_of_ref": "indicator--4f8be205-8d53-4359-afdd-07916145bbb6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a2c5a3-4725-4bdc-a6bc-c6026ac35793", "sighting_of_ref": "indicator--6e2abe79-3878-47f4-aad2-6eeb7ed80413", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e269534-7f17-416b-8897-dfe3a241f376", "sighting_of_ref": "indicator--c9a7bdb8-ba43-4e8f-a9b8-e67538e976ff", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2cd2387-9788-4044-9c88-a4cf5913ab00", "sighting_of_ref": "indicator--267f8661-9e4e-4db9-a688-1039ecd5dd28", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cf6800-55d7-46b3-8855-f9df4c197592", "sighting_of_ref": "indicator--267f8661-9e4e-4db9-a688-1039ecd5dd28", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e421152e-fd8d-4613-af4c-0c4b331bc68a", "sighting_of_ref": "indicator--267f8661-9e4e-4db9-a688-1039ecd5dd28", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4073b2d-3069-4edc-a38e-101b1eb7cfe0", "sighting_of_ref": "indicator--f57b0eee-cd84-439c-bdd3-e8b33d447de8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66af2297-4749-40ea-b105-ec8304f5ffdc", "sighting_of_ref": "indicator--f57b0eee-cd84-439c-bdd3-e8b33d447de8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4290c39-e11f-4465-87c9-6ee8adf42cfb", "sighting_of_ref": "indicator--f57b0eee-cd84-439c-bdd3-e8b33d447de8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c977ca6-d230-4e21-bfff-fbe2f0d39927", "sighting_of_ref": "indicator--5bcc3366-0907-4e54-800f-a0441f8ca405", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc94b40-eecf-455e-ba72-dc217b5af970", "sighting_of_ref": "indicator--5bcc3366-0907-4e54-800f-a0441f8ca405", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0665cf-fa99-4e3e-8442-4fb61d4f6551", "sighting_of_ref": "indicator--5bcc3366-0907-4e54-800f-a0441f8ca405", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f055db2-7a60-4348-a4ca-d8a66e78e7e7", "sighting_of_ref": "indicator--90d5369b-e5fe-4ff1-9ffc-77f073d7885b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fed32ae-6d4e-42ed-b0a6-db471a080197", "sighting_of_ref": "indicator--90d5369b-e5fe-4ff1-9ffc-77f073d7885b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01c7c45-df04-4d88-b846-a074a67056ac", "sighting_of_ref": "indicator--90d5369b-e5fe-4ff1-9ffc-77f073d7885b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b414c344-abd4-47d3-8b13-ddff6cfccc75", "sighting_of_ref": "indicator--00e54de2-3ef9-4f24-b145-9b9f38351bcd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3110d0-5c2e-40af-b94d-138365bdaabf", "sighting_of_ref": "indicator--00e54de2-3ef9-4f24-b145-9b9f38351bcd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e2a082-04a8-4a80-9fab-dfa85e22ec43", "sighting_of_ref": "indicator--70492959-64a7-40ce-be12-a75bd943d3df", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0b5c31-bec0-4efd-ab09-e0530c9908d6", "sighting_of_ref": "indicator--a522dc68-4370-4d2a-a1c0-c79b8e1dc227", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aeb1c3b-ef89-47b5-8722-13235107b08c", "sighting_of_ref": "indicator--455e7014-1863-4963-8a4b-682460eac3c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c70d56c-857c-4b3a-bfa5-53975f596993", "sighting_of_ref": "indicator--a688d032-6a18-4a47-8d56-b7d4e59d0595", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05b689c-f624-436f-9a96-fcee625b3730", "sighting_of_ref": "indicator--8cc91fbb-c8fa-49ce-b444-1277c519043c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88533c12-86ca-4d5b-8d1c-bc4a329c2a9d", "sighting_of_ref": "indicator--58720d7a-115c-4c9e-a5e5-282c95b089cf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0717d4eb-40bf-4586-a37a-3dce73025ac1", "sighting_of_ref": "indicator--58720d7a-115c-4c9e-a5e5-282c95b089cf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772f47cd-9bfd-45f3-b24a-804075b1d367", "sighting_of_ref": "indicator--58720d7a-115c-4c9e-a5e5-282c95b089cf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78d859b-cc47-40eb-89cc-3df27489a4a2", "sighting_of_ref": "indicator--1251f478-9ead-405b-88d0-073812e28ee7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330e3e58-f270-4ac6-9aa7-659eecdac428", "sighting_of_ref": "indicator--a89b8b65-0347-42f8-9454-ff52827accc7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b1ab60-eae9-48ef-a096-75a0cedab608", "sighting_of_ref": "indicator--cce0c862-72b3-4dde-8c65-2e9084c6cb25", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7f4fa2-acf5-4613-9bf2-2f9596dbff4d", "sighting_of_ref": "indicator--3b5e0140-8596-45e6-ad1a-75b8bfca13c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cbef35-b70f-4fcf-866f-f3cd0708a676", "sighting_of_ref": "indicator--9f46414d-da33-46a2-b36d-deceedd7a792", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbd9096-9650-47a0-a63e-baa8ffb09b45", "sighting_of_ref": "indicator--653b8ec2-23a8-4280-b99d-529899454109", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e95d001-601b-4466-880e-70201fdf9cea", "sighting_of_ref": "indicator--b0355704-ad76-467b-95f7-638c710e1e02", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e16281-00b1-4f58-9e10-71ab4d006c1a", "sighting_of_ref": "indicator--c5fc73cb-e457-4bec-b781-23e5649e46d8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6226014-d25a-4fb8-9079-b27b0a3b8832", "sighting_of_ref": "indicator--cfb39482-1a1b-4cf9-b869-531e4bcf6c88", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33b3148-c8bc-47fc-9b8f-9dd6b5c11610", "sighting_of_ref": "indicator--9349cbfc-ab0b-4919-ae7a-f0142d12c5f9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1f3837-42b1-41a2-8975-820503b564c4", "sighting_of_ref": "indicator--dc469b0a-055d-420c-9c76-ec62709588b3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a000ab-abe7-4635-af51-ab83865c1f9e", "sighting_of_ref": "indicator--260af825-684c-4b0d-9dfa-75a67a89f7df", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1024b7-23d5-4ac4-903a-9728fb0e22f0", "sighting_of_ref": "indicator--260af825-684c-4b0d-9dfa-75a67a89f7df", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4368ac-206f-436b-8d07-5793bde5a394", "sighting_of_ref": "indicator--52bebae8-d0c3-4c72-a16d-0771f99b430d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057bde4f-29a3-45ee-af9f-05cf414d8a5b", "sighting_of_ref": "indicator--52bebae8-d0c3-4c72-a16d-0771f99b430d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8e87db-f3a5-4048-8f1f-f80248b63f01", "sighting_of_ref": "indicator--8e48c7b6-87c2-4b5b-872f-d5f3839ae5b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83aa4b57-e727-4d4f-ab77-a495d43e510b", "sighting_of_ref": "indicator--9dd516e9-87f3-40bc-8345-253c5945975b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a84d9e-1631-4866-a21c-a71620517116", "sighting_of_ref": "indicator--9dd516e9-87f3-40bc-8345-253c5945975b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f82bf48-97c5-4c77-ab6a-113d2a9d7d32", "sighting_of_ref": "indicator--cc65c0b4-ee1a-4c83-b5d7-84bf5099b17e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef26328f-bd96-48f9-81d8-a54062d00054", "sighting_of_ref": "indicator--3d35cb74-43a6-4871-a9ae-901d57386d86", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f02de3-3981-4899-9ad4-391a9f52c758", "sighting_of_ref": "indicator--e8bc81c0-81d7-4199-a747-99d908c481c5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64222edc-3de9-4934-84d7-35c2b038624b", "sighting_of_ref": "indicator--4c9b2cb0-fa9b-4a29-8372-c58732521b60", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffdaf9c-1926-48eb-a344-9bd6dcf10735", "sighting_of_ref": "indicator--aeca78a3-55e3-4a9a-9961-26a268113767", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8fe8e9-7d0a-44a5-aab1-3be4e97073e9", "sighting_of_ref": "indicator--26682129-ac9a-43cd-8080-4e5db13f22e0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04098baf-1d91-4abf-8817-538a2c5e2320", "sighting_of_ref": "indicator--7b021571-5981-4d10-a6c8-77f82f956d81", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4661e9-8966-4ce2-8cb4-7c2b6c3261ce", "sighting_of_ref": "indicator--97fef8c7-1374-449a-86f8-d9c90966b8bb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e7a36d-c2f5-4779-ab91-1b4d7101d3f1", "sighting_of_ref": "indicator--97fef8c7-1374-449a-86f8-d9c90966b8bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fc9e8d-8e79-42fd-b9ff-8c1244c56187", "sighting_of_ref": "indicator--97fef8c7-1374-449a-86f8-d9c90966b8bb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03cb148-db10-46f4-8786-82de06f93a1b", "sighting_of_ref": "indicator--c20fb60a-c223-4202-82ad-c25d9c62a132", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88f008d-0d5e-4063-9061-06265d49e4b6", "sighting_of_ref": "indicator--c20fb60a-c223-4202-82ad-c25d9c62a132", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def068e7-c09d-409d-a171-95a1a276fcd1", "sighting_of_ref": "indicator--c20fb60a-c223-4202-82ad-c25d9c62a132", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e76f2b5-dce9-402f-a325-12e320a123f7", "sighting_of_ref": "indicator--3d1bc048-bbd9-4e9b-a20c-296c0b3d7683", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7cd844-c9ca-4d12-9f6a-869189d7914f", "sighting_of_ref": "indicator--3d1bc048-bbd9-4e9b-a20c-296c0b3d7683", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df70aa0-f333-4a7a-bf12-a4889761ca5e", "sighting_of_ref": "indicator--509c5445-e460-47ad-80fe-3ceb237fd00d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16f6f0e-5efa-4b70-827e-1464064935fc", "sighting_of_ref": "indicator--509c5445-e460-47ad-80fe-3ceb237fd00d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35145118-18f6-446a-a177-8343d4c3402f", "sighting_of_ref": "indicator--509c5445-e460-47ad-80fe-3ceb237fd00d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca261181-1c17-4429-b575-4a58a13fc9fe", "sighting_of_ref": "indicator--a7e7501c-fc4f-4fd5-bdc9-dfa7bf9619c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd89da60-7642-4b16-b9c4-b68aaf48111f", "sighting_of_ref": "indicator--a7e7501c-fc4f-4fd5-bdc9-dfa7bf9619c7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c58e2e6-94a2-4356-886a-344fe80f6598", "sighting_of_ref": "indicator--a7e7501c-fc4f-4fd5-bdc9-dfa7bf9619c7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e2493c-518f-4bbd-a544-85ad485bd684", "sighting_of_ref": "indicator--9711bc91-b2cc-495d-bd89-fb826eb44c54", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f674c55-f015-4d5e-bb0e-ee41fe79f183", "sighting_of_ref": "indicator--589f3811-97d0-4b6d-b9db-4ecd1d9d6b12", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71b34fa-edf7-46ea-a2e9-c003c8a97302", "sighting_of_ref": "indicator--f55e700c-237b-4086-9c53-2a1572a0b758", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc80661b-573d-465e-8ed4-23688521884b", "sighting_of_ref": "indicator--a9ecc303-9f1f-4d87-8716-fd1833e4c2ac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1db834-3f32-4292-83de-3f3db168f3dc", "sighting_of_ref": "indicator--a9ecc303-9f1f-4d87-8716-fd1833e4c2ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba43a2eb-9cd6-4515-a98d-e0ab1ca573fa", "sighting_of_ref": "indicator--a9ecc303-9f1f-4d87-8716-fd1833e4c2ac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303456e3-24e5-4258-ab96-d3f2174995df", "sighting_of_ref": "indicator--758228e2-32b2-4734-9eae-cb6c3811ab45", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbae748-3be9-40a6-b7f4-c160b8f3d7a5", "sighting_of_ref": "indicator--758228e2-32b2-4734-9eae-cb6c3811ab45", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71591db8-831e-4f15-9e52-4a905fd1b8e4", "sighting_of_ref": "indicator--1ca3382d-5233-49c0-860e-e7d5d6ab82d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202494d0-327a-450a-ae30-929349e7524f", "sighting_of_ref": "indicator--1ca3382d-5233-49c0-860e-e7d5d6ab82d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d796f7-abb2-4dc6-b948-a6168fa2d3c6", "sighting_of_ref": "indicator--1ca3382d-5233-49c0-860e-e7d5d6ab82d6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b4855b-44d0-4e32-9292-52c7aa4f0fb7", "sighting_of_ref": "indicator--0e44f221-a01d-4b8a-aee6-9bd07a1a5c47", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944cc3e2-45e9-48a0-ba82-fdfe7bd33c07", "sighting_of_ref": "indicator--0e44f221-a01d-4b8a-aee6-9bd07a1a5c47", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9beefa04-3d40-4e80-8752-5925f47b5a32", "sighting_of_ref": "indicator--0e44f221-a01d-4b8a-aee6-9bd07a1a5c47", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55bc6311-bfe1-4340-9ee2-565ed04ce99e", "sighting_of_ref": "indicator--88d047d7-558e-40fa-bfe7-95680bf5e032", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084d9d70-0ce6-439c-a66e-2d3f2d5d9fc4", "sighting_of_ref": "indicator--88d047d7-558e-40fa-bfe7-95680bf5e032", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7662e4-b850-4612-bb42-38d05b66f434", "sighting_of_ref": "indicator--88d047d7-558e-40fa-bfe7-95680bf5e032", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48aad558-645e-4c8c-b058-b6e743c012d5", "sighting_of_ref": "indicator--80b5ce15-59ee-412d-806f-5fcd4d7c81fc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb1db4d-02a1-4911-8369-6e04fcf1f73b", "sighting_of_ref": "indicator--80b5ce15-59ee-412d-806f-5fcd4d7c81fc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ac11fe-6e80-446b-9844-c90d0eb3c404", "sighting_of_ref": "indicator--80b5ce15-59ee-412d-806f-5fcd4d7c81fc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5bcc1c-f143-498c-bd79-73fe04c5f7bb", "sighting_of_ref": "indicator--d5ba7821-a850-4155-9afe-24cd902310ee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b6bfb3-9c70-48f1-b02c-62cfd91dc150", "sighting_of_ref": "indicator--d5ba7821-a850-4155-9afe-24cd902310ee", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14525f0-d022-4197-8bf8-b6d2d1aa8252", "sighting_of_ref": "indicator--d5ba7821-a850-4155-9afe-24cd902310ee", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42976dab-30f8-4cdb-800e-f6d5ad74599d", "sighting_of_ref": "indicator--e34b85ee-7897-42be-a64d-e493ec6038b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78d880c-58d1-43f7-8f39-83989eea5c98", "sighting_of_ref": "indicator--e34b85ee-7897-42be-a64d-e493ec6038b7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d514b55-51ba-4d75-93bf-2d2042ece91d", "sighting_of_ref": "indicator--e34b85ee-7897-42be-a64d-e493ec6038b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6f95d0-8b14-4034-8bc4-84a41b6ccb3a", "sighting_of_ref": "indicator--a66ff0d0-bba8-49ba-b3d0-62416cf481c1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1d8146-8334-421c-a168-679193fb4835", "sighting_of_ref": "indicator--a66ff0d0-bba8-49ba-b3d0-62416cf481c1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67b3b6c-857a-44ec-8406-4e032cbe96f8", "sighting_of_ref": "indicator--a66ff0d0-bba8-49ba-b3d0-62416cf481c1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8dc53ed-bdb5-4bc4-80d9-a61f003f8ce9", "sighting_of_ref": "indicator--9d65374c-46bb-4fae-adc6-2839af53fe22", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6253cd-e650-4118-a9db-9b646a1cc49c", "sighting_of_ref": "indicator--9d65374c-46bb-4fae-adc6-2839af53fe22", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef5d092-2fd7-424c-aff2-5ac88f11622f", "sighting_of_ref": "indicator--9d65374c-46bb-4fae-adc6-2839af53fe22", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1073dd88-68b1-486a-a9f2-6081334a51c9", "sighting_of_ref": "indicator--a82c714c-192a-437c-83a8-dfce5d37338d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672af3e4-245e-49e1-b509-3d7b2fdeb944", "sighting_of_ref": "indicator--7123e784-21bc-4491-af47-ffb0e56cc597", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc72d7b-9800-453f-bf3b-a43ba2146421", "sighting_of_ref": "indicator--7123e784-21bc-4491-af47-ffb0e56cc597", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504da8d3-afa9-452d-9172-75c8a206481e", "sighting_of_ref": "indicator--4567925b-bdaf-42b3-acf6-e4b16657bb63", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d836b8f3-c2fe-4e64-9c81-8eb889722d52", "sighting_of_ref": "indicator--4567925b-bdaf-42b3-acf6-e4b16657bb63", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5358cf08-4761-4c16-90af-d65aa386ee33", "sighting_of_ref": "indicator--4567925b-bdaf-42b3-acf6-e4b16657bb63", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f14bab7-cc92-4752-b4f7-6a463501b6c2", "sighting_of_ref": "indicator--5a3dc421-1180-4582-b22c-5e23feb50b0c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc2d57d-b13b-4ad4-be85-0477baa39352", "sighting_of_ref": "indicator--5a3dc421-1180-4582-b22c-5e23feb50b0c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ed56d0-7e2d-43eb-9730-564e07d41609", "sighting_of_ref": "indicator--e1269a3d-3b4e-4890-bcf8-24c85c9dcf64", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31347723-b44c-4fea-a993-ded1ed07008c", "sighting_of_ref": "indicator--e1269a3d-3b4e-4890-bcf8-24c85c9dcf64", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9509d1-3857-4324-af08-cecf40f0a864", "sighting_of_ref": "indicator--974fa4a3-0d07-4c3b-85e3-980c207067f9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5cd840-4907-4fdc-948c-bfaf85158f52", "sighting_of_ref": "indicator--974fa4a3-0d07-4c3b-85e3-980c207067f9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cde9cd-d9ad-42ac-8f42-54e504c2184c", "sighting_of_ref": "indicator--974fa4a3-0d07-4c3b-85e3-980c207067f9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f1690b-a861-4956-bbc3-b3b7121acc21", "sighting_of_ref": "indicator--40487e60-5907-4342-a4f6-dc767d7c4d8b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2de5b0f-5f91-4987-97e8-90f39165518a", "sighting_of_ref": "indicator--40487e60-5907-4342-a4f6-dc767d7c4d8b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d719fb-709d-4f0d-94bf-4a09facbba02", "sighting_of_ref": "indicator--79d09006-1806-48d0-8282-6065e6105f66", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b6eb4c-8faa-43df-b886-078e66d1e31c", "sighting_of_ref": "indicator--79d09006-1806-48d0-8282-6065e6105f66", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e5c084-3c05-4d13-8a5c-95d4a86b9811", "sighting_of_ref": "indicator--79d09006-1806-48d0-8282-6065e6105f66", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819013dd-6e06-4fa2-8aed-c85d5477d505", "sighting_of_ref": "indicator--39605fad-f887-4d6b-a861-5d7cbe02794b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42538c65-f1b1-456c-abe5-01554628bded", "sighting_of_ref": "indicator--fa6baa27-805a-4d51-9375-6816456756da", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72513e5f-b9be-4fb8-96ec-cd23f521cfaf", "sighting_of_ref": "indicator--fa6baa27-805a-4d51-9375-6816456756da", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4486d901-c0b3-40f1-b294-1aa2c772c47c", "sighting_of_ref": "indicator--fa6baa27-805a-4d51-9375-6816456756da", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a961f9f-7e2a-4b5f-8376-257576ba3a27", "sighting_of_ref": "indicator--74133e86-9dcb-49c8-a7cf-0a9a6acfa327", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9bbcb59-4d23-4e1e-b24e-002fee266ed3", "sighting_of_ref": "indicator--88b3139b-56e8-4bdb-8d02-c380b53d8230", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa95a61-8ecb-4ffe-a511-7b241ac548da", "sighting_of_ref": "indicator--88b3139b-56e8-4bdb-8d02-c380b53d8230", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6dc3c3-f772-4814-8438-73166f4fecce", "sighting_of_ref": "indicator--88b3139b-56e8-4bdb-8d02-c380b53d8230", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432bc5cc-98bd-4da4-85db-d7222961c233", "sighting_of_ref": "indicator--d3f8237d-9cd5-40bf-bb06-76b8272ad110", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8817fd0-b1e5-487d-8b03-6e7a1bc087d5", "sighting_of_ref": "indicator--d3f8237d-9cd5-40bf-bb06-76b8272ad110", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b42e563-57f5-43ea-9534-e450e7b3f81f", "sighting_of_ref": "indicator--d3f8237d-9cd5-40bf-bb06-76b8272ad110", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ead8ca-c919-42c6-862e-a348d9d9fe8b", "sighting_of_ref": "indicator--d6721a6a-6f45-409f-b169-5f81ef1250cc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32b8d37-984f-4bb6-b288-2dc69e28bf7a", "sighting_of_ref": "indicator--d6721a6a-6f45-409f-b169-5f81ef1250cc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931f0ef0-71d0-4335-803b-10de49853218", "sighting_of_ref": "indicator--d6721a6a-6f45-409f-b169-5f81ef1250cc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa20ccbc-89d4-489d-a2d4-0b5623de6880", "sighting_of_ref": "indicator--de1aa3f2-ad3f-4ab9-841d-d89a6d5c680c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3aba15-2b85-41b9-a8c0-3582e99032a9", "sighting_of_ref": "indicator--de1aa3f2-ad3f-4ab9-841d-d89a6d5c680c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d28235-34f3-4096-b84b-05ea7547104b", "sighting_of_ref": "indicator--de1aa3f2-ad3f-4ab9-841d-d89a6d5c680c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cc3472-0bc5-4119-9793-1a533c90af56", "sighting_of_ref": "indicator--e00a0857-3ca2-4918-b388-d063098598f3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5907c9-0585-4cfa-8a34-cd0c92b4f6e6", "sighting_of_ref": "indicator--e00a0857-3ca2-4918-b388-d063098598f3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9021303-ffc4-4a54-aefb-5659f32aeeb9", "sighting_of_ref": "indicator--e00a0857-3ca2-4918-b388-d063098598f3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c1033f-558c-4bc4-94a6-04366b99994f", "sighting_of_ref": "indicator--2b8727b1-e28f-40ac-adec-a3651b3cbc45", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26dd85f-9e20-4a95-a824-6a1afcff9dfe", "sighting_of_ref": "indicator--2b8727b1-e28f-40ac-adec-a3651b3cbc45", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea8ffd9-995a-4fff-887c-ccc144592440", "sighting_of_ref": "indicator--2b8727b1-e28f-40ac-adec-a3651b3cbc45", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e98482-fb4c-4664-a6ac-c5579cb410b8", "sighting_of_ref": "indicator--f4085920-3ff8-454c-8e9c-eab5dc24aff3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1179288a-8630-4708-889a-2c88c19da0dc", "sighting_of_ref": "indicator--f4085920-3ff8-454c-8e9c-eab5dc24aff3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48af5fb-6c43-49e6-969e-6f8bb7b4c8bf", "sighting_of_ref": "indicator--f4085920-3ff8-454c-8e9c-eab5dc24aff3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfc71f8-dbd7-41b7-902a-b1a74da8f6c3", "sighting_of_ref": "indicator--3fbd49a7-f134-430d-a964-f8ad3d8c973d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c37231-ceaf-44e8-8029-de1ec0d45d14", "sighting_of_ref": "indicator--3fbd49a7-f134-430d-a964-f8ad3d8c973d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39bb34f-c31f-4758-833c-4742574445ab", "sighting_of_ref": "indicator--3fbd49a7-f134-430d-a964-f8ad3d8c973d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3255b445-86cf-4b84-a8f0-c4749b28b713", "sighting_of_ref": "indicator--d5165611-40f4-4b48-a10b-cb97fadc7b5c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc42b9fc-91d5-46a8-af9c-9951d088a75e", "sighting_of_ref": "indicator--d5165611-40f4-4b48-a10b-cb97fadc7b5c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc09b4f-4c97-4158-a657-a59b27ce697e", "sighting_of_ref": "indicator--a10e6ef5-b39d-4db2-af5c-87d5a9129fac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a9c73e-2402-46d7-8033-99f8c0d3b39c", "sighting_of_ref": "indicator--a10e6ef5-b39d-4db2-af5c-87d5a9129fac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a37980c-ceb5-4da7-9f9c-b4243c5fdb59", "sighting_of_ref": "indicator--8e411607-5963-4230-97c7-da966809eda1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4b774c-98ee-4f02-8367-26cc2a4686ff", "sighting_of_ref": "indicator--8e411607-5963-4230-97c7-da966809eda1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1543e99-6b12-429c-9c3f-5ee0b140eeaf", "sighting_of_ref": "indicator--8e411607-5963-4230-97c7-da966809eda1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57749ff1-5092-484a-a8c7-25c5454603ef", "sighting_of_ref": "indicator--74a13991-fafe-4481-8557-9ef08aa50082", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ba5207-443f-44e0-97b8-1a14b671d6c8", "sighting_of_ref": "indicator--74a13991-fafe-4481-8557-9ef08aa50082", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9b4680-86f4-422a-b418-bda9cdd1ae90", "sighting_of_ref": "indicator--74a13991-fafe-4481-8557-9ef08aa50082", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb905b76-e084-4425-8b07-1fb073df05a0", "sighting_of_ref": "indicator--8813b020-5171-4d83-8bd6-6acca9f624cf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50cd42a-adc7-4b3c-aada-7321ee95a90a", "sighting_of_ref": "indicator--8813b020-5171-4d83-8bd6-6acca9f624cf", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226355e8-ace5-4ae6-9130-b313a519c246", "sighting_of_ref": "indicator--a6afe6c3-a3c1-430e-84e1-352314778c34", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bcb8e4-3c56-46bf-a0f9-a3d2de4749cd", "sighting_of_ref": "indicator--34a02e65-450a-477e-8139-1c4e7f461154", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3bce92-c360-4d18-81d4-5e1b581556d9", "sighting_of_ref": "indicator--bd74e86b-a336-4407-9a83-627c60eab9b3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d3c24d-403a-4dd6-947e-0bc432540962", "sighting_of_ref": "indicator--52c27953-e412-40b9-943d-9b159b52e423", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83b2c0f-6e2c-4e65-a48b-4a4294b628f2", "sighting_of_ref": "indicator--191e024d-a097-40d9-be0c-765c09773c12", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d418a3d7-a18e-427f-9d57-d587ccd2cb76", "sighting_of_ref": "indicator--ef37a110-2850-46c1-9902-ee16645bd742", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0f9050-92e7-4b48-bbd8-e4136f363d2b", "sighting_of_ref": "indicator--26d399ef-2b02-4e6c-8155-f151afddd20d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5f361b-e888-4e3f-a3f1-320056d25897", "sighting_of_ref": "indicator--fba24024-f70d-44c5-9866-2f68700fae74", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe861127-b973-438e-b7d1-17bb2972f9e9", "sighting_of_ref": "indicator--fba24024-f70d-44c5-9866-2f68700fae74", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b15919-1274-4ff2-ac04-6be804256121", "sighting_of_ref": "indicator--446f5c25-d452-4104-be70-ab2f99a80531", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef0316b-5c5f-4fea-85c6-622deebb121b", "sighting_of_ref": "indicator--3fb38453-8c3c-404c-928c-bed096ee32aa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ccfb07-488a-4714-8a84-9a9b02db041f", "sighting_of_ref": "indicator--a23844fa-8087-40e8-ae56-cbc85d44183a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d58b90-3975-4d17-b341-02b49ce9ba06", "sighting_of_ref": "indicator--f28e41ea-f95e-4c15-8adf-8401e340d53a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96e59c1-d4f6-4412-8985-adcc951d6efe", "sighting_of_ref": "indicator--b070d80b-ffda-4a1b-83a9-39010d5a07e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4c2d3c-5271-4ad3-bda5-22314fb1f648", "sighting_of_ref": "indicator--6b1fb959-861e-40ad-a816-09e03205b90e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394fbb03-6b75-4ba8-a6d4-b267938ffa0c", "sighting_of_ref": "indicator--fd5703de-72a1-4fb4-a22c-023733defc2b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44441bc3-9b91-4bd1-9e62-33a77f58668a", "sighting_of_ref": "indicator--fd5703de-72a1-4fb4-a22c-023733defc2b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d56c45e-53fd-4a36-950a-0c6017cdc3c4", "sighting_of_ref": "indicator--fd5703de-72a1-4fb4-a22c-023733defc2b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ebcd82-6027-4677-973b-d01bc38df2e2", "sighting_of_ref": "indicator--636e26e1-6736-429c-ac77-1a512c808509", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9a621c-7a34-4b2e-98f4-2c23202fb806", "sighting_of_ref": "indicator--17218b1b-2c6b-4aef-a99b-1d65292d2dfd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd48ca6d-a8dc-4b57-972c-c58fe0da34a9", "sighting_of_ref": "indicator--17218b1b-2c6b-4aef-a99b-1d65292d2dfd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23b6a7a-c49e-4b8d-8982-ec4d71eb9e06", "sighting_of_ref": "indicator--17218b1b-2c6b-4aef-a99b-1d65292d2dfd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01179119-d375-445e-9577-65b5f47d1f01", "sighting_of_ref": "indicator--8f3af078-1f34-4e93-a170-81f1c21ad41d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d14b8df-e98b-4519-bd82-dedc25bdf3ba", "sighting_of_ref": "indicator--8f3af078-1f34-4e93-a170-81f1c21ad41d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967baf1d-46e2-4e47-a5c2-886074ba2a71", "sighting_of_ref": "indicator--8f3af078-1f34-4e93-a170-81f1c21ad41d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b639f03-f20e-4ebf-9428-6c47f4e2ac34", "sighting_of_ref": "indicator--352f7ae4-abbc-44b3-83bc-34eb6df7c892", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ffaa24-fa47-4ada-9b5e-28703a3aad03", "sighting_of_ref": "indicator--352f7ae4-abbc-44b3-83bc-34eb6df7c892", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa36315-3530-4816-8741-f6273d404d8d", "sighting_of_ref": "indicator--352f7ae4-abbc-44b3-83bc-34eb6df7c892", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67303bb6-7baf-40aa-8a7b-d102859cf353", "sighting_of_ref": "indicator--83dc947f-016e-42e9-a145-5fcd8cbc000a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c196252-58ce-4bf5-a36b-3d2414bfb01f", "sighting_of_ref": "indicator--7a67ddcf-8138-4f59-b930-d584c611e922", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd73b4a-7d74-4ad8-acf2-444ffa243387", "sighting_of_ref": "indicator--bea47ea2-8bd7-4b01-ab11-70927733a417", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fb0222-1734-44d7-9081-f42879f5b1d5", "sighting_of_ref": "indicator--5e01b064-bb79-40fb-a4ab-667aba37d355", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8920657-2dfa-49fc-a4d8-768a7f975e09", "sighting_of_ref": "indicator--ed30cffd-5574-49b2-83ce-aa01591f9b51", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496ddb85-6a3c-4bf2-878b-7323d040b214", "sighting_of_ref": "indicator--57c61a4b-b591-4518-bba6-24acf151d8c5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9c7245-1fdd-476f-8f3b-e6aeecfbe1c4", "sighting_of_ref": "indicator--251d3357-4a18-41cb-adb3-5f805c1bd539", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d529a7c-b1f6-406a-8b40-23d4889f62e4", "sighting_of_ref": "indicator--251d3357-4a18-41cb-adb3-5f805c1bd539", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5f8d7a-488f-40d5-9874-18650c0b3286", "sighting_of_ref": "indicator--10c82301-520a-44e9-81ee-f84d2fae47af", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93031b73-504d-4474-b64e-3f5de1fabade", "sighting_of_ref": "indicator--10c82301-520a-44e9-81ee-f84d2fae47af", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5552573c-5aa3-48e3-a9d4-e5cec7c4f125", "sighting_of_ref": "indicator--161ee400-4874-4f26-b718-d4a50c6cf616", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb277e4-c6c1-44b7-914d-a589b5370f42", "sighting_of_ref": "indicator--161ee400-4874-4f26-b718-d4a50c6cf616", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a10c47e-e59c-4970-93ac-b58f6023d3be", "sighting_of_ref": "indicator--0f0e1d97-be80-4237-a854-eac34419d966", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea8b9a7-0788-4473-96de-a02424a95ba3", "sighting_of_ref": "indicator--0f0e1d97-be80-4237-a854-eac34419d966", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38359c63-22ec-4055-bbd8-7607df14eb7e", "sighting_of_ref": "indicator--281889ec-8320-48a9-b730-a76fa4ddbfd5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0218fc45-2398-4b15-a97e-69c2b2da2322", "sighting_of_ref": "indicator--281889ec-8320-48a9-b730-a76fa4ddbfd5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82772c38-5ea2-4cbb-a5a5-8e27bf4d2cd8", "sighting_of_ref": "indicator--281889ec-8320-48a9-b730-a76fa4ddbfd5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b3bab6-72e1-4e8c-b417-3bfb6d2fc1bf", "sighting_of_ref": "indicator--d178e3a3-12b5-49da-b8a9-2734694b2439", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1ccdbe-cc89-42cf-b905-f91d382af38d", "sighting_of_ref": "indicator--d178e3a3-12b5-49da-b8a9-2734694b2439", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5188102b-dd66-4d59-b98c-eae25ec51b2c", "sighting_of_ref": "indicator--163b7d82-a59a-4951-861e-e862a57c120b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a84468-1900-4ff3-aa51-03addba94bdc", "sighting_of_ref": "indicator--163b7d82-a59a-4951-861e-e862a57c120b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a7668b-3592-4ace-b603-46a8561b580f", "sighting_of_ref": "indicator--30118947-2c6c-4032-9b6e-deec44aaa2d9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef502ed-ba34-4cd4-b7df-1f1bbffde0f9", "sighting_of_ref": "indicator--30118947-2c6c-4032-9b6e-deec44aaa2d9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d51846-01dc-408c-94b5-2d43fe3fdc2f", "sighting_of_ref": "indicator--fad67a75-a7f2-4bde-98e9-f5069449c5c9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480595c6-c872-4cdf-a284-0d10b5703dad", "sighting_of_ref": "indicator--fad67a75-a7f2-4bde-98e9-f5069449c5c9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a61f99b-97d4-45e8-8176-a76ec5bbfd3f", "sighting_of_ref": "indicator--c2c349c9-5cec-4453-bb41-f4e848211eb7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6ced8c-0d37-4d7f-a1fc-c7f3f44cab24", "sighting_of_ref": "indicator--c2c349c9-5cec-4453-bb41-f4e848211eb7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ea6fed-b79e-483f-b93d-199763320507", "sighting_of_ref": "indicator--d1ba5c1b-c09c-43ef-a134-f3e88fa56ffe", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44270d3-c9e5-4d47-ade1-04da0b01a486", "sighting_of_ref": "indicator--d1ba5c1b-c09c-43ef-a134-f3e88fa56ffe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6dc088-cd20-411b-8633-19e1bd3b2e70", "sighting_of_ref": "indicator--c14d41af-3577-45c2-a6c3-af554de40c72", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533a9287-5700-4c53-a241-b7c579d05c9f", "sighting_of_ref": "indicator--6b9ee597-325a-4af4-b803-bda8b80d25c1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903dfb09-2188-46b7-a265-9ef7cdc8170b", "sighting_of_ref": "indicator--6b9ee597-325a-4af4-b803-bda8b80d25c1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f079c416-5ff6-4620-bcb5-268e7bbc7884", "sighting_of_ref": "indicator--2ddb0613-e3e3-4999-830d-393c2b4884ce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f11fa75-529a-49c2-aba2-5e6f56b0e7c2", "sighting_of_ref": "indicator--2ddb0613-e3e3-4999-830d-393c2b4884ce", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d456df-5210-4055-8aef-c0ba2fc89d1a", "sighting_of_ref": "indicator--8c8a4b1d-2f6e-4432-8f64-761bd2fc9591", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7fbfa8-700e-4b7a-88e9-5dd7a13371b6", "sighting_of_ref": "indicator--8c8a4b1d-2f6e-4432-8f64-761bd2fc9591", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d068ee-25fe-4a1d-ab6a-d19082723e59", "sighting_of_ref": "indicator--8c8a4b1d-2f6e-4432-8f64-761bd2fc9591", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a44d38-7c7a-4d1b-9ff2-7461207e8a88", "sighting_of_ref": "indicator--01779195-9f7c-49dc-b001-b4273ec1117d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af886cf4-8f53-4dc1-8e17-13cd94e53747", "sighting_of_ref": "indicator--01779195-9f7c-49dc-b001-b4273ec1117d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a1b113-e377-4666-a922-1cfd9eebcf7b", "sighting_of_ref": "indicator--074420f0-7277-4147-b21a-1d8c71d922e0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693e7763-65d3-4217-84d8-aacae7523b5d", "sighting_of_ref": "indicator--074420f0-7277-4147-b21a-1d8c71d922e0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68abe063-b7a9-446f-ab87-e4b47c023134", "sighting_of_ref": "indicator--53082518-3aa5-46ee-9a1c-029280bd1c4d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfcf517-b420-4f58-a706-ba7ac7923c72", "sighting_of_ref": "indicator--53082518-3aa5-46ee-9a1c-029280bd1c4d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1e6955-9dce-4b39-acdb-e317303f8663", "sighting_of_ref": "indicator--a2d9ead3-072b-47fd-b4df-bd21a66118fa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9848b538-66c0-42a5-996c-c2a1acf272c4", "sighting_of_ref": "indicator--a2d9ead3-072b-47fd-b4df-bd21a66118fa", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04edcae6-e055-465f-a91d-6225edef66bb", "sighting_of_ref": "indicator--2dadd335-a3f5-441d-b10b-ba7cc0b48850", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ce6d6b-ed98-4fc2-8113-f02e24841fec", "sighting_of_ref": "indicator--2dadd335-a3f5-441d-b10b-ba7cc0b48850", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdb7902-48dd-460a-a9f5-90d95622ae6c", "sighting_of_ref": "indicator--867f4b33-a342-4ef1-ba4d-575812fb9695", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e73236-6577-477c-91ea-599a72ccf036", "sighting_of_ref": "indicator--867f4b33-a342-4ef1-ba4d-575812fb9695", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489cfa5a-ac9c-4695-9152-2dd0f3755c9e", "sighting_of_ref": "indicator--382321f0-5d09-4478-a8fc-dd3c2b0e7ccf", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de05ba3-4585-4391-bfb9-fc1c5c0968f7", "sighting_of_ref": "indicator--b94dfaaf-87e4-4e89-a6a5-7f083b12ab25", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b094e602-21bd-4011-9a65-fc31bf2f0680", "sighting_of_ref": "indicator--5d4b8350-4ef3-4c7b-9ad3-14cd6daec547", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7fb473-7e6f-421f-a1a7-31c182829118", "sighting_of_ref": "indicator--5d4b8350-4ef3-4c7b-9ad3-14cd6daec547", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57965d83-68d7-4c12-a132-83a4581ff98b", "sighting_of_ref": "indicator--71a64f39-7e30-4ad0-a7f8-b02ca7fe9beb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743e7509-4f7d-423b-9e3d-caa25bdb428f", "sighting_of_ref": "indicator--71a64f39-7e30-4ad0-a7f8-b02ca7fe9beb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12c4337-171b-484a-8e31-b1dd332d176a", "sighting_of_ref": "indicator--35e44e7e-3021-483b-a9f2-db2576f918dd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babd39d8-42d5-4270-b6fd-1e04089370f0", "sighting_of_ref": "indicator--35e44e7e-3021-483b-a9f2-db2576f918dd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6dfb9e0-cbee-4b1f-a719-a46e7262e9c9", "sighting_of_ref": "indicator--1ba1258d-e4fb-4d1b-9738-7a6597e84f5f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b033678-0a2a-4714-b4bd-e6ab3866c37c", "sighting_of_ref": "indicator--1ba1258d-e4fb-4d1b-9738-7a6597e84f5f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a7cbae-19c6-4f00-9a6f-2a3addc8f006", "sighting_of_ref": "indicator--a7364db4-1dca-4674-a1af-58a346d54de5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4b5ca4-8d15-4113-bda2-902c1186ad94", "sighting_of_ref": "indicator--3b432c9f-5c50-42df-a1c3-e024d5513fc2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39ba738-64e1-4415-a6a7-8da3ed4206fa", "sighting_of_ref": "indicator--feb1e0db-d1b6-4ffb-bb1c-689804e2cb41", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20938a2-aefd-44f5-854c-b7eb2262cf8a", "sighting_of_ref": "indicator--33cfc0e8-7c0d-4c9d-9f03-0ac03e16a5a0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7b13fd-663d-4574-b5bb-fd6decf54985", "sighting_of_ref": "indicator--e2bb6616-986b-4ed1-b549-09d3c259ad71", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cab322-094b-4f8d-9f34-6b450dc3f01f", "sighting_of_ref": "indicator--e2bb6616-986b-4ed1-b549-09d3c259ad71", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d81f37b-f5a8-47ef-82ca-6e166eb1ea1b", "sighting_of_ref": "indicator--b0ee88f9-2d01-4623-8064-70ae1d70b0b9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508f57fb-84ce-4108-a371-021985b72e0e", "sighting_of_ref": "indicator--0cd561bf-4de8-4bc2-a9b3-dd59377316db", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012ce6de-8f74-4d53-963d-ab740ec20725", "sighting_of_ref": "indicator--516b2abe-a1b7-4eed-babd-9897603b3f75", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d0d846-c2f2-4441-89ab-9040eb9cdcb7", "sighting_of_ref": "indicator--48e8da77-0f37-4575-968b-8ee024f86d63", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadc0252-35b7-4bc2-8b75-54b3619a5dec", "sighting_of_ref": "indicator--91009cce-cf0b-40cf-a398-12df85577e1d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33e95c6-14af-4452-8d19-3d9c2d81077a", "sighting_of_ref": "indicator--17b47d76-c948-427f-9646-429ed1847354", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a50ad2-2f7e-463d-8941-6cb2ea209868", "sighting_of_ref": "indicator--76ca926d-08c9-4224-bf29-3b4ccd0ee803", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73f4440-acdb-4354-9336-390c219fdec6", "sighting_of_ref": "indicator--76ca926d-08c9-4224-bf29-3b4ccd0ee803", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7029f186-921a-450b-9593-f0563c0f93ea", "sighting_of_ref": "indicator--28496fb6-d028-419b-8cf1-61c938c8f41b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f893d3-3f02-41ad-83f8-1023540e4da9", "sighting_of_ref": "indicator--5c3f1ed1-3ab5-466d-99ff-ea3739c0dfe6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8763a5-cbab-4ded-86d8-69e088a175be", "sighting_of_ref": "indicator--5c3f1ed1-3ab5-466d-99ff-ea3739c0dfe6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd76a2a-4020-4ded-92f6-a1b076070c69", "sighting_of_ref": "indicator--5c3f1ed1-3ab5-466d-99ff-ea3739c0dfe6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759d9511-715b-4473-8999-9ca0717ca79a", "sighting_of_ref": "indicator--1948af74-438e-45c6-9262-d3fad0e83811", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b7ea76-06cc-44a8-b398-af98260c05c8", "sighting_of_ref": "indicator--1948af74-438e-45c6-9262-d3fad0e83811", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59327a1e-adcf-4e39-851e-fe4f138b62a1", "sighting_of_ref": "indicator--1948af74-438e-45c6-9262-d3fad0e83811", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255a2f5e-c8eb-4434-871c-1b1745193896", "sighting_of_ref": "indicator--66851d01-91f4-4600-a477-5d69d72fc188", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc1dde9-62d0-4c97-b189-65dc8c9f55c7", "sighting_of_ref": "indicator--8e756bd1-d125-40f1-8686-6d51f975a329", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5722f84-6f22-4191-a229-940863fa350b", "sighting_of_ref": "indicator--8e756bd1-d125-40f1-8686-6d51f975a329", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f956d7de-303d-416b-a1ca-04fbe3293909", "sighting_of_ref": "indicator--0c529c73-212a-4c50-9cc6-1bbc18bcbfeb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ba681b-8439-4bd9-977d-fc1353f75f14", "sighting_of_ref": "indicator--8738eb93-13d3-4deb-b626-488554073d21", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd83ec2b-c518-4c55-8488-166f10b3eaa6", "sighting_of_ref": "indicator--8738eb93-13d3-4deb-b626-488554073d21", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb97dbd-2561-4e6c-96fb-ac6ef94ab415", "sighting_of_ref": "indicator--d55fbfb9-3e66-4ac1-a0a0-5446006b7258", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5759556f-a550-454a-910c-4833646a5a0a", "sighting_of_ref": "indicator--d55fbfb9-3e66-4ac1-a0a0-5446006b7258", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb44b3e6-d295-4dcc-b227-4d4994be8922", "sighting_of_ref": "indicator--8f5ab87a-3886-4c3d-8608-cfe59412486e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13279c17-4979-4d87-967c-eec67774965c", "sighting_of_ref": "indicator--8f5ab87a-3886-4c3d-8608-cfe59412486e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263831a1-b123-4c97-bd8e-3a6a0b4ad882", "sighting_of_ref": "indicator--d61be938-bff4-4c20-9992-610d854b06ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfdff6b-6535-44bf-8878-9564b2ab8b97", "sighting_of_ref": "indicator--d61be938-bff4-4c20-9992-610d854b06ac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56352d6-4d81-40ab-bb95-86cf864b2232", "sighting_of_ref": "indicator--17f5bd53-4112-466f-b1de-5a5682c18ef5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c617105-b4e2-4e01-9b8a-4f1625ed28ae", "sighting_of_ref": "indicator--17f5bd53-4112-466f-b1de-5a5682c18ef5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5345c77a-3f2f-4fa8-8946-9a8c58850d31", "sighting_of_ref": "indicator--6e758a61-9f8f-49dd-83a4-8d3d61e81e62", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffb4dbd-51dd-4fc2-b062-1c205864b75a", "sighting_of_ref": "indicator--6e758a61-9f8f-49dd-83a4-8d3d61e81e62", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3127ed51-8c89-41bb-95d0-9b578cea597a", "sighting_of_ref": "indicator--b3661cc3-814d-4bf4-b704-2062722676cb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa4728b-04d2-4ef2-b439-07149b4956b2", "sighting_of_ref": "indicator--b3661cc3-814d-4bf4-b704-2062722676cb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a80b1f-024b-4aa8-87ce-fda5f85ff204", "sighting_of_ref": "indicator--7b56c9f6-0b0a-4a5c-8541-dd0e360769a6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9725ac7f-ee65-44b8-9ef5-b6039e6207af", "sighting_of_ref": "indicator--7b56c9f6-0b0a-4a5c-8541-dd0e360769a6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ba070a-fbcd-466e-9e26-0b780f9eac08", "sighting_of_ref": "indicator--e75fe72a-da57-4572-b9d9-4271503891e5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffcd1ee-28b3-4ba1-86a1-7b4e01ef933b", "sighting_of_ref": "indicator--e75fe72a-da57-4572-b9d9-4271503891e5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21602e0-d29a-4ebc-9900-92392dd3b966", "sighting_of_ref": "indicator--48f8069e-4a86-4e94-ad11-3317e27664ac", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e940f5d4-f9e0-4ac3-982a-90c0a25f0d70", "sighting_of_ref": "indicator--48f8069e-4a86-4e94-ad11-3317e27664ac", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5c7de0-b22f-490c-ad0d-9df69cf9ccef", "sighting_of_ref": "indicator--6f5448ec-cc65-43dd-9f8f-7260cab29611", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817b7160-fe4b-4582-9dfc-daa515be6da7", "sighting_of_ref": "indicator--6f5448ec-cc65-43dd-9f8f-7260cab29611", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7bf75d-8956-4ba5-9f2f-cf81585004af", "sighting_of_ref": "indicator--ce41183d-5917-4917-9e9e-e8df5b353354", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a20155-5862-4bd4-8fb1-8561c1bf61b5", "sighting_of_ref": "indicator--ce41183d-5917-4917-9e9e-e8df5b353354", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210ae90f-80e8-48bd-b3a5-31787c9a79f7", "sighting_of_ref": "indicator--16515276-a540-48f7-906d-0d55238cc918", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8d6aec-0e55-4fb8-aedd-be3af0870c96", "sighting_of_ref": "indicator--16515276-a540-48f7-906d-0d55238cc918", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5259c3bb-2e75-4cb0-8490-b75e94759967", "sighting_of_ref": "indicator--cfd62daf-12aa-43dd-9d11-a72d27f2f3e4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8adcd1-99f9-41e6-8b9c-30a6b1affedd", "sighting_of_ref": "indicator--cfd62daf-12aa-43dd-9d11-a72d27f2f3e4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a508307a-4c86-4bc9-81e4-0f5833abd0b6", "sighting_of_ref": "indicator--b37d002e-cb3b-416e-aa73-a082259d8f16", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd8de1d-a5fe-4661-8084-ad7445b46c6f", "sighting_of_ref": "indicator--c2c1fc8e-4492-454b-8e65-b97c5fc736b6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c6c7c4-f527-4747-a62c-ce1c9fec8335", "sighting_of_ref": "indicator--5bd1c5a8-2b7c-4d62-b26a-9ea6918be5fc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fe8344-a152-4c50-8b00-5ea9762e2d98", "sighting_of_ref": "indicator--5bd1c5a8-2b7c-4d62-b26a-9ea6918be5fc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2377a182-3cec-41ae-8e18-cdd42a2d44fc", "sighting_of_ref": "indicator--0ebdf9d8-a653-482e-89f2-ebb01ac0f34f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e952fb-f124-4bab-91e8-b2f8bb53aaf5", "sighting_of_ref": "indicator--242a297d-b7d4-49dc-9f26-c3dfdd5873ca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6220a97d-8e99-41fc-9b81-da9e4a044b51", "sighting_of_ref": "indicator--15290fde-7bfd-4db2-9c2b-ff0ee2c0af41", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f469b1-797c-43cd-b7ee-ebdd2bc22460", "sighting_of_ref": "indicator--38610ffe-8a24-483c-8970-8bdd1898ab70", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1af67b-38ef-47c2-8adb-4682cc8e3290", "sighting_of_ref": "indicator--38610ffe-8a24-483c-8970-8bdd1898ab70", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f388a06-4581-46ba-a9e0-c33cc634a013", "sighting_of_ref": "indicator--b560e9e3-3656-45e4-9eda-984367afe747", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ef88f9-b126-4a6a-9089-1c0ed5996072", "sighting_of_ref": "indicator--7b1d5439-a4bf-4cb2-b48b-212ed76e2aeb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e1e66c-b8ba-4d09-89b4-bcaa3610e4b2", "sighting_of_ref": "indicator--7b1d5439-a4bf-4cb2-b48b-212ed76e2aeb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432402c4-e752-4bce-9e68-9d4a043d938d", "sighting_of_ref": "indicator--458a130d-963f-4b4c-9f15-69a97af1246a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ec3170-fc4b-408a-9374-183dceced2fd", "sighting_of_ref": "indicator--9e53db0b-807b-47df-8bfa-1b1c3caaa47c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8ced06-4d31-4bc9-b5eb-6394cb55ee58", "sighting_of_ref": "indicator--4addf624-9d87-404c-b4a2-e8be01da60a7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2ed78f-9a73-4e03-9f0b-29f2b93e8168", "sighting_of_ref": "indicator--d45a195d-af49-4a25-bb65-c6da87b8ec71", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22571f7-86ac-4b3f-b4c7-38a3a8be330c", "sighting_of_ref": "indicator--d45a195d-af49-4a25-bb65-c6da87b8ec71", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf30c39-257a-4c17-8123-14d321b49aec", "sighting_of_ref": "indicator--88d78693-0516-4339-a457-480bf7bc8362", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30274aa8-b8df-4dde-9d9f-41798cf76eb2", "sighting_of_ref": "indicator--88d78693-0516-4339-a457-480bf7bc8362", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b0b79e-432a-401c-8c9b-e75f0cfc03c0", "sighting_of_ref": "indicator--10a40de2-be06-4d76-a991-dde083da51fc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee45ad9-5cd7-4d10-9610-9e56db098030", "sighting_of_ref": "indicator--10a40de2-be06-4d76-a991-dde083da51fc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7b0d4b-e8cd-4edf-8da9-a810588b414d", "sighting_of_ref": "indicator--0bd85edd-e02d-4fd0-bbb8-39ddacc7bac7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e96150b-9282-467e-93e0-486c95f311fe", "sighting_of_ref": "indicator--0bd85edd-e02d-4fd0-bbb8-39ddacc7bac7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3164d9d6-b298-4c9d-b546-c2f01d23c820", "sighting_of_ref": "indicator--27b08259-7cdb-43b2-94f2-415f1c1234b3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097a5274-3b59-4e58-82e2-5e4304145cc8", "sighting_of_ref": "indicator--27b08259-7cdb-43b2-94f2-415f1c1234b3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135bda86-44d9-487a-89b1-f98cb9b75579", "sighting_of_ref": "indicator--11c69e1b-0875-46a9-8cbc-f58bec058e4c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e06b18b-e940-4744-a6a6-fc824fbd627f", "sighting_of_ref": "indicator--6a6ce87c-eac1-462e-839d-4aa8c7f85474", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f4529f-fb4d-4173-8a91-e3b2fd13a891", "sighting_of_ref": "indicator--7cf4276a-802e-4c49-9b11-760a257acf57", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe795c4-dd3a-4974-a987-0a3e29747684", "sighting_of_ref": "indicator--1701d256-558d-4eab-a944-a7e17bbd8160", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891149e3-c5d0-4f33-a18d-5282364096a6", "sighting_of_ref": "indicator--1701d256-558d-4eab-a944-a7e17bbd8160", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--badf600b-56af-4349-935c-50abc58125ff", "sighting_of_ref": "indicator--36999f4e-aab6-48c7-a7f6-80ac16ad23a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc79eec-d325-461d-bf97-cdb7748e75c3", "sighting_of_ref": "indicator--36999f4e-aab6-48c7-a7f6-80ac16ad23a7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4e5d39-95da-4f0e-89e0-f622428bd1a6", "sighting_of_ref": "indicator--c7f4ee88-75a1-4e5d-bb5c-624dcbcd8c3e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3c86e9-e2be-486f-add0-0efca9af096f", "sighting_of_ref": "indicator--c7f4ee88-75a1-4e5d-bb5c-624dcbcd8c3e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d654dc06-3c50-4034-927c-0958911573d1", "sighting_of_ref": "indicator--26813b5e-a539-43c8-9afb-4269aa178731", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4512a5-04c2-4d83-afe4-66097ace1f45", "sighting_of_ref": "indicator--26813b5e-a539-43c8-9afb-4269aa178731", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746d8420-fb8b-4968-b958-5ecf754c246e", "sighting_of_ref": "indicator--ff3fa885-0a88-4007-a6b2-249e95f9a682", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633a576f-56f0-4ca1-bfa7-ef9dcc8ccac0", "sighting_of_ref": "indicator--ff3fa885-0a88-4007-a6b2-249e95f9a682", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4540bf48-cda1-435f-834b-db853168a9c3", "sighting_of_ref": "indicator--850d6214-ebda-4bed-8e19-1a9da8ba5c9c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5abf6f-4803-4192-8c53-5db68d3aea1f", "sighting_of_ref": "indicator--f63282f9-24b8-4d01-be10-9ead81b8a448", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8329f5e9-f943-46fa-8d33-ce774c4e69ef", "sighting_of_ref": "indicator--d8b6318a-eb68-4b96-84b8-82eae390fe0f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9067bb88-e598-420d-8b2c-d6e4ebbfd668", "sighting_of_ref": "indicator--10674195-b5a2-4afd-a818-1e43a2fdcc24", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7075060c-677b-4973-88e2-ccf36bfc67ce", "sighting_of_ref": "indicator--168fba3d-193a-4870-ba4a-fecce4df7135", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7db135-9824-4dfa-9e64-75b3efa46788", "sighting_of_ref": "indicator--168fba3d-193a-4870-ba4a-fecce4df7135", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b287c33-bfa3-4450-accd-6a851c94a88e", "sighting_of_ref": "indicator--1aee2190-07b1-4a28-b183-d137006f5a3f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2077b568-64a5-4a0f-b329-e378ff85a1ec", "sighting_of_ref": "indicator--1aee2190-07b1-4a28-b183-d137006f5a3f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5a68ad-2f00-4453-8945-a24dbd66c1db", "sighting_of_ref": "indicator--519cbfc2-7944-43e3-8ffd-81400ca21a23", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84a1811-d14d-4e8e-a350-95624e49cf2b", "sighting_of_ref": "indicator--519cbfc2-7944-43e3-8ffd-81400ca21a23", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a669650-eaec-4314-b4a6-9f7be74c715f", "sighting_of_ref": "indicator--cc821037-243a-4286-91fe-b71a1f839b1a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c0f297-86f3-49f7-92b6-520f081e11ce", "sighting_of_ref": "indicator--cc821037-243a-4286-91fe-b71a1f839b1a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daaec382-8255-4471-a5ad-361dc4f31492", "sighting_of_ref": "indicator--4cb9be70-c2da-4e0a-b619-ff761e54236e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df827b8-618d-42ed-b680-a4c60a48f5c8", "sighting_of_ref": "indicator--4cb9be70-c2da-4e0a-b619-ff761e54236e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d98b70-cdb4-4dd8-b686-6a7251da1b1e", "sighting_of_ref": "indicator--f8356fc4-ce4c-497f-895b-bf4c01468e2c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba98e2c4-dcd3-495c-bcc4-101c58f7b17f", "sighting_of_ref": "indicator--317afa55-6dc4-4bda-a3ae-1cd268e982ea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacecc7f-3919-4e86-83dd-4cbd9587227f", "sighting_of_ref": "indicator--0e6ba7bb-2989-41ae-87db-208b969ab19b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c3c85a-ab08-4c74-a508-db7becc25436", "sighting_of_ref": "indicator--0e6ba7bb-2989-41ae-87db-208b969ab19b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80304a7f-592f-4329-bc4c-d93328a9d5a1", "sighting_of_ref": "indicator--d49263a7-03ff-4b06-9165-5b72601c6bbd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55616ff6-dce6-4b8e-9ebb-3340e09b88cd", "sighting_of_ref": "indicator--d49263a7-03ff-4b06-9165-5b72601c6bbd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91206075-59aa-4318-aeef-0d73ba9920f7", "sighting_of_ref": "indicator--42931042-15bc-47e6-aa1c-a32087b133e9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffff5130-3952-4e52-b7fa-196485be5957", "sighting_of_ref": "indicator--42931042-15bc-47e6-aa1c-a32087b133e9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd75db7c-1a83-466e-a231-7722bc5c0c6d", "sighting_of_ref": "indicator--778ed651-42d4-467b-9c56-c22d9e52850e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4418ad81-723b-42e5-9045-819ba095524c", "sighting_of_ref": "indicator--778ed651-42d4-467b-9c56-c22d9e52850e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476a15dd-95f6-4cef-af71-c8050396598e", "sighting_of_ref": "indicator--faa901d5-1d2b-4131-9e79-7f49f7837058", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0314fc51-a22f-4f99-a0f0-f1c6e603824a", "sighting_of_ref": "indicator--faa901d5-1d2b-4131-9e79-7f49f7837058", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba20a29-2ac5-47de-98ab-c16b92d42bc2", "sighting_of_ref": "indicator--48f28c8d-42cb-4b1b-bbd4-9c0aa6b8b070", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0cd10b-179c-4c3c-9657-7eefee630692", "sighting_of_ref": "indicator--48f28c8d-42cb-4b1b-bbd4-9c0aa6b8b070", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11335c7-8ba4-4d6f-9b1d-33a055a906b5", "sighting_of_ref": "indicator--e1328953-3274-4888-8016-5518a4382fa8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5ac54c-714d-481c-a472-0ad0995707ec", "sighting_of_ref": "indicator--e1328953-3274-4888-8016-5518a4382fa8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16facbf-eff2-40c3-87a7-dd1e690141a1", "sighting_of_ref": "indicator--5f73fda5-a581-4c99-9be8-8114eb364526", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe25900-c03e-49d1-9165-bcb400590e1a", "sighting_of_ref": "indicator--5f73fda5-a581-4c99-9be8-8114eb364526", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd22aab-cf9d-45dc-b967-56f450c6ba3e", "sighting_of_ref": "indicator--4a02f8ec-c3b6-4b4f-a968-f18e254734f6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d063401-5471-4f7c-b141-17d23ec87f22", "sighting_of_ref": "indicator--4a02f8ec-c3b6-4b4f-a968-f18e254734f6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95f9569-502e-424e-ab46-4a151298dfe3", "sighting_of_ref": "indicator--47ce406a-395d-4842-9ef9-076ec60a5e71", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f67d0d-e871-4cad-8565-d56ee6877894", "sighting_of_ref": "indicator--47ce406a-395d-4842-9ef9-076ec60a5e71", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c546f3c6-e750-4e9b-a665-b19f92bcc158", "sighting_of_ref": "indicator--cfe209ef-98ec-42d5-b804-e5277c6df7fa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1d95db-bc17-48af-a65f-8270e5ed339c", "sighting_of_ref": "indicator--0b9f25eb-b33d-4cdd-a22c-e5ea224f5b53", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491bb29c-e8ce-4e00-b2b2-2b73d3a44365", "sighting_of_ref": "indicator--a3739a99-2f8b-48ad-ad8f-d70ba79f5b7a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c592e96-131d-4387-ad94-920c531f2698", "sighting_of_ref": "indicator--a3739a99-2f8b-48ad-ad8f-d70ba79f5b7a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b6bd9e-54af-47cc-a42a-f79e52a08f99", "sighting_of_ref": "indicator--827b18de-308e-40c7-bb9b-22b238e7d468", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a37fbc-bd39-487b-b82e-b2a6d30a46c2", "sighting_of_ref": "indicator--61358be3-c405-42ee-ae02-058581c04e44", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58c7bd4-a7e0-4c03-ba71-bf5692209d54", "sighting_of_ref": "indicator--61358be3-c405-42ee-ae02-058581c04e44", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a84b982-5f85-48b2-80e1-df4f33c21f8e", "sighting_of_ref": "indicator--328ebc20-14dd-4ac5-8e63-afda9acc66d0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247fc5dd-4598-43ea-9579-3a337ae0e9bb", "sighting_of_ref": "indicator--6a6e2279-7b7c-43bd-9db1-2a453c4e5535", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316e18c2-280a-48c8-8a93-0d8f59ce0371", "sighting_of_ref": "indicator--d7bba8e8-9f2c-41dd-a946-ba3ec8d4b8f7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48165f8-e230-48a0-bf4b-bd71e45bc544", "sighting_of_ref": "indicator--1f2d17b3-a5ec-4ffa-998c-42bfc93704f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbe4bb7-93ee-4812-abd6-29efc02df679", "sighting_of_ref": "indicator--1f2d17b3-a5ec-4ffa-998c-42bfc93704f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0fb2c6-6207-4026-b100-6e23b007ed96", "sighting_of_ref": "indicator--9e0938e2-ef91-4190-b9bd-9ddf3b4a09d8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e43b5ff-5920-4bf6-9e06-48df292ad52b", "sighting_of_ref": "indicator--9e0938e2-ef91-4190-b9bd-9ddf3b4a09d8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcf7795-2ece-48f3-89a2-6c5e150b6a81", "sighting_of_ref": "indicator--12847437-0612-4791-a0b8-91272258bca2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195c8eb1-4ac4-45a1-ab33-8ce3dfbbc653", "sighting_of_ref": "indicator--12847437-0612-4791-a0b8-91272258bca2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5ff9c6-86d8-412c-9ef8-c5a411998c6b", "sighting_of_ref": "indicator--b1a85d9f-5e49-4073-a7cd-2f8b658c7248", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad7019a-3e9a-4c5d-844f-1ed7acb948b5", "sighting_of_ref": "indicator--b1a85d9f-5e49-4073-a7cd-2f8b658c7248", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95d0344-00af-412e-860a-3646c8888657", "sighting_of_ref": "indicator--82659594-0893-40bc-83ad-90b7b8d3ac7a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8dd844-6fa8-4efe-aa3a-9aa69ab1223d", "sighting_of_ref": "indicator--82659594-0893-40bc-83ad-90b7b8d3ac7a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834335ec-6c8f-4ffb-928d-1c7999abbcf3", "sighting_of_ref": "indicator--2161fb77-54f9-416b-901e-afbe318e0957", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5491d801-191b-4e6a-bfb6-1c7a21589e0c", "sighting_of_ref": "indicator--b65836d9-0e40-4d3d-bceb-04fba6dd8396", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c643059d-0f8d-4610-a4e7-daa1490226cc", "sighting_of_ref": "indicator--c13ed9ca-a20d-4fdc-8816-5288e5c9db02", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1253a78-b35d-4cb9-9f27-6e380ea8d0c2", "sighting_of_ref": "indicator--36469c3b-1a75-4b33-8903-c72d41e4be1a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0d9b38-fd12-477e-98d3-77ecb52fd666", "sighting_of_ref": "indicator--36469c3b-1a75-4b33-8903-c72d41e4be1a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61561bb8-a57d-41b1-876c-93fb166b7ca9", "sighting_of_ref": "indicator--13ab9d04-0b58-4057-b77d-d4f919e438c4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a15832-e33c-440b-9e0d-4d2196e8e84c", "sighting_of_ref": "indicator--13ab9d04-0b58-4057-b77d-d4f919e438c4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861146e7-9562-4698-a20b-392b83de102f", "sighting_of_ref": "indicator--e651b57c-d916-4682-9049-dffaa33171df", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aff0880-c51c-446e-84b2-12d04d13eaaf", "sighting_of_ref": "indicator--e651b57c-d916-4682-9049-dffaa33171df", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1b4b8f-e8e9-4b1e-a9a7-4e852594cbcc", "sighting_of_ref": "indicator--c9b70aaa-9146-478e-afa2-9953f075449b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6078839-4947-448f-bd17-88a080663378", "sighting_of_ref": "indicator--c9b70aaa-9146-478e-afa2-9953f075449b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21762b13-732f-4cba-a031-1650b707e882", "sighting_of_ref": "indicator--63c21a23-4388-46e5-a41e-fce616423177", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2631d356-6952-479e-bcda-295c3ea0cc6b", "sighting_of_ref": "indicator--63c21a23-4388-46e5-a41e-fce616423177", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec5bb74-8631-42a2-b55d-b0fa5603e35d", "sighting_of_ref": "indicator--835e3f08-48f8-4d0d-b676-1b18f14c9a09", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3509750-9026-4af4-8aa0-fe867ae8a933", "sighting_of_ref": "indicator--835e3f08-48f8-4d0d-b676-1b18f14c9a09", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d9c4bd-c27c-44f2-9deb-72786288e1ef", "sighting_of_ref": "indicator--816377e4-4694-4009-83a7-c1a6f0fa7a17", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccd27ed-f8d9-4265-b920-c8b7a4a10e5c", "sighting_of_ref": "indicator--816377e4-4694-4009-83a7-c1a6f0fa7a17", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955d3101-6860-4350-a64f-28567debd253", "sighting_of_ref": "indicator--1b34417e-41fd-468b-a83c-670a00db7a62", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4a8f6e-e305-430a-8cb8-51787dc3e249", "sighting_of_ref": "indicator--1b34417e-41fd-468b-a83c-670a00db7a62", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a20281a-24e5-450f-b87c-e4393e57a9ba", "sighting_of_ref": "indicator--85082373-ca11-432b-b247-e3be41584902", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccbcd69-5b29-403b-baa4-d10d7897356d", "sighting_of_ref": "indicator--85082373-ca11-432b-b247-e3be41584902", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32eb87d-352b-4d3a-9ccb-1724b05ed11f", "sighting_of_ref": "indicator--431ea978-cba5-4ac7-afb4-38c7b2ea4f5b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca27d0e8-8462-4973-a933-dea020c45f62", "sighting_of_ref": "indicator--431ea978-cba5-4ac7-afb4-38c7b2ea4f5b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87289a8b-ccc4-4862-b503-a90ebd7354e3", "sighting_of_ref": "indicator--3f26d047-18b9-43f7-a12b-89f2fe5e8588", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c2fb7b-1efc-4d62-ab11-7b1d2a50a399", "sighting_of_ref": "indicator--3f26d047-18b9-43f7-a12b-89f2fe5e8588", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4d1968-6fbe-4d8d-9fba-f06f89fb6c42", "sighting_of_ref": "indicator--b2fbdf6f-84af-4874-b82c-351795c4000d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ab9adb-deea-41ba-ade9-389d277a50ae", "sighting_of_ref": "indicator--b2fbdf6f-84af-4874-b82c-351795c4000d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acdb8a1-4380-4385-8885-37978ae3ac74", "sighting_of_ref": "indicator--588f16dd-39bc-417b-ae0f-438cb3993025", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c421fffe-89a5-4c64-9524-662e01e31b2e", "sighting_of_ref": "indicator--588f16dd-39bc-417b-ae0f-438cb3993025", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1dcc03-57d3-4409-874d-a471f9b5f3c8", "sighting_of_ref": "indicator--96baed01-0fcb-4ac1-8982-442224ecb96d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cde06d1-e873-439f-ac18-c3c24e1dfd5a", "sighting_of_ref": "indicator--96baed01-0fcb-4ac1-8982-442224ecb96d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17eabac-99a5-4ef4-9681-b991047b5505", "sighting_of_ref": "indicator--6c57e0b6-89db-4941-99a6-83cd0baabf06", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6ef433-8cc4-4c3e-aef4-2629416a80a6", "sighting_of_ref": "indicator--6c57e0b6-89db-4941-99a6-83cd0baabf06", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12756d86-66fa-411f-9a3d-37e205826c44", "sighting_of_ref": "indicator--3bd79a8a-df1f-4673-a92a-cd1cfe3d040f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b075d3e-ab6e-402c-ad7f-1cc1f5d4571a", "sighting_of_ref": "indicator--3bd79a8a-df1f-4673-a92a-cd1cfe3d040f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bf317c-811e-47fd-b746-9bb7cf675e23", "sighting_of_ref": "indicator--379b6da7-2c55-4106-ba64-8a1a417c12ca", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92895592-9149-46f2-9f96-eecc9cf412a6", "sighting_of_ref": "indicator--379b6da7-2c55-4106-ba64-8a1a417c12ca", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786e1f3f-bb73-41b0-9f83-ed4cfeee23ed", "sighting_of_ref": "indicator--0b8f9e19-328a-4f09-826a-13e4a609c9c0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aafd1b6-3390-4714-961f-407c261f5845", "sighting_of_ref": "indicator--0b8f9e19-328a-4f09-826a-13e4a609c9c0", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e238b3-2e1a-4436-9eb9-0ed3a59dda6f", "sighting_of_ref": "indicator--6ec66e32-42be-4c09-9e3e-aacb5e35746f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21df87c8-119f-471e-a332-1dfe099ea3b2", "sighting_of_ref": "indicator--6ec66e32-42be-4c09-9e3e-aacb5e35746f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638dc667-1ba6-482b-b96a-c939b11f8a61", "sighting_of_ref": "indicator--e6620514-e63a-42e5-b4ff-22460c465386", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d960221d-13a3-4b2f-b24f-b930ed367a2e", "sighting_of_ref": "indicator--e6620514-e63a-42e5-b4ff-22460c465386", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291b0aea-5870-463f-9e68-3d3c36905f3e", "sighting_of_ref": "indicator--d2014ac0-1dd1-4e02-b2fd-7bf950431232", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f465838d-7352-4ff7-a427-315275cb5f8a", "sighting_of_ref": "indicator--d2014ac0-1dd1-4e02-b2fd-7bf950431232", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551aeb13-a823-4190-926f-91e510e6d90b", "sighting_of_ref": "indicator--cb3f1b47-b209-4dc6-abd5-ea8e7e1007c6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f0724e-a12f-46e2-ab00-449e293c8e36", "sighting_of_ref": "indicator--cb3f1b47-b209-4dc6-abd5-ea8e7e1007c6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c6b76a-e821-4f07-bda9-6504dbfa12a9", "sighting_of_ref": "indicator--73d89a8e-9f94-4eb5-ad85-3cb916427758", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773743bc-42d0-41cd-b000-728a699a0296", "sighting_of_ref": "indicator--73d89a8e-9f94-4eb5-ad85-3cb916427758", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324423b9-18b0-4564-8156-f170495c21f3", "sighting_of_ref": "indicator--eddafa96-1fc7-4e5d-8936-e48fbbe28edd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ac9859-441c-42c5-8024-08df99f21d06", "sighting_of_ref": "indicator--eddafa96-1fc7-4e5d-8936-e48fbbe28edd", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4a1cb3-630f-491b-94f9-4b99c3ac317c", "sighting_of_ref": "indicator--cd8b1770-2c39-4e21-8002-88823cfbddf9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18604b57-087d-4961-b7a8-93286e59786c", "sighting_of_ref": "indicator--cd8b1770-2c39-4e21-8002-88823cfbddf9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4472e5c6-e8c1-401d-9c8f-8dc10bc69c62", "sighting_of_ref": "indicator--8a58526a-9b24-46f6-be2d-f0a8e623ca18", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f140ff-15e5-456f-9716-24c526bcf70e", "sighting_of_ref": "indicator--8a58526a-9b24-46f6-be2d-f0a8e623ca18", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5812c050-9ba8-409f-bf07-068a607fbb68", "sighting_of_ref": "indicator--df2370a5-f561-43bd-9916-bd3f579d7340", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bf7dcb-ba38-42a7-b950-2a5e23844129", "sighting_of_ref": "indicator--300881ae-c110-464c-9e58-df44bb2203a1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a3b670-c312-45a7-a5a1-e2efda5592a9", "sighting_of_ref": "indicator--300881ae-c110-464c-9e58-df44bb2203a1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d55bc41-f215-4469-96f5-153bf2725bd1", "sighting_of_ref": "indicator--21b25a72-3f8a-4eca-a3ee-6537b109fdc2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051b911a-c7b4-4cac-8782-6aceb794dbcb", "sighting_of_ref": "indicator--21b25a72-3f8a-4eca-a3ee-6537b109fdc2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e968ad-a70b-43f6-b282-f06db6bf6b21", "sighting_of_ref": "indicator--85117e0f-26b0-4a6a-a872-b6503b16cbce", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242d8d3b-97a1-48e8-a3e4-528f118b064b", "sighting_of_ref": "indicator--85117e0f-26b0-4a6a-a872-b6503b16cbce", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09afafc-8532-4b81-afe6-c3d4570f74f0", "sighting_of_ref": "indicator--dcbdf024-ef78-405c-a9d2-a6dd875d0e6d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1138c44b-b57a-4d15-8316-e9b8fe4c6ede", "sighting_of_ref": "indicator--dcbdf024-ef78-405c-a9d2-a6dd875d0e6d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b5f314-e197-45bb-a754-c3aeb521b928", "sighting_of_ref": "indicator--6270f0b4-df0a-4f0c-b2dc-cc21d471a1dc", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b89b9b-ee49-455e-b5cd-061b49e0899d", "sighting_of_ref": "indicator--6270f0b4-df0a-4f0c-b2dc-cc21d471a1dc", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfd5f31-b3e7-466c-ab3f-92f95a3c81e0", "sighting_of_ref": "indicator--0d4d79a4-cd96-47f2-9c02-1aa9ae4712db", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d234f38-5671-41b8-a2d1-19dba629c24c", "sighting_of_ref": "indicator--0d4d79a4-cd96-47f2-9c02-1aa9ae4712db", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934f27a8-7f9a-4982-ad90-9e045f5e425f", "sighting_of_ref": "indicator--10224eb4-c0e2-402a-9d45-8c5f66cf3381", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abbad00-d251-449a-aaee-ca01357931b2", "sighting_of_ref": "indicator--094cd362-edb1-45e0-beae-1523f1349cb1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa1bd35-e684-4dbb-a709-be375ed6f4b7", "sighting_of_ref": "indicator--a01fa3f4-97f1-44df-9b44-17a7c8769173", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbf29ba-53a0-449c-a453-70058b7061e4", "sighting_of_ref": "indicator--aeeeeb42-7219-40fd-bdcd-e4fe56f12d2a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59ffd3b-bd40-469a-af9a-aa46bff77c90", "sighting_of_ref": "indicator--a19cd994-caa9-40cb-a44d-9d513091799c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd8f561-1e94-4d7a-ba46-fc94354a1b7c", "sighting_of_ref": "indicator--2b601224-d454-4e7b-b520-4b4a273554ab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bdd3ee-d838-445e-90d1-6f1e3b12c57c", "sighting_of_ref": "indicator--2b601224-d454-4e7b-b520-4b4a273554ab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b543cf0-c5cd-4792-b25f-0e6263573b5c", "sighting_of_ref": "indicator--e061c7cb-2dcf-4891-9045-4975456731b2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a1bbf2-b8e1-4d87-a82c-769ba07dedad", "sighting_of_ref": "indicator--e061c7cb-2dcf-4891-9045-4975456731b2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131e7235-a91b-4c11-a1b0-1c036265bb91", "sighting_of_ref": "indicator--8c4b0965-5801-4a2b-a260-47643b35768b", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec7f757-4842-4e4d-8d21-70a2ddbd584e", "sighting_of_ref": "indicator--8c4b0965-5801-4a2b-a260-47643b35768b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22e8fab-3960-4427-9e3f-cc46ccdb95e8", "sighting_of_ref": "indicator--4f2143d9-53c7-4ce4-9e30-87a633ef8cf8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095c5d30-4a4a-4540-a4a3-9bb18ac8e339", "sighting_of_ref": "indicator--4f2143d9-53c7-4ce4-9e30-87a633ef8cf8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528c9f59-74fe-42fa-a1f7-4391e1313019", "sighting_of_ref": "indicator--c4c53b65-93fd-4c22-b62c-bf59ac82def4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea909bf-3e8a-4809-ae2e-92e0eea63658", "sighting_of_ref": "indicator--c4c53b65-93fd-4c22-b62c-bf59ac82def4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cab995b-22b3-452d-be42-464b9cdf4f5d", "sighting_of_ref": "indicator--ca0d9fae-111d-4b23-9f22-cfba2885c222", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb08866f-dc06-4e0a-b3ad-3e5ae14125fd", "sighting_of_ref": "indicator--ca0d9fae-111d-4b23-9f22-cfba2885c222", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79e0dc5-9281-49e5-a145-44ebe8979304", "sighting_of_ref": "indicator--14eec826-3bac-4760-bd7e-6401953b82b9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c22775-9db9-4f20-904c-37496e56a758", "sighting_of_ref": "indicator--14eec826-3bac-4760-bd7e-6401953b82b9", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce58c6a6-404d-4e5a-be69-b1ac60a1ad87", "sighting_of_ref": "indicator--44d3b008-274f-4b97-a50d-ad119f647a7d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c51390-ca08-48bb-b868-bd8eb53daab5", "sighting_of_ref": "indicator--44d3b008-274f-4b97-a50d-ad119f647a7d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6135ca75-d7cc-4c5f-bdeb-2b5ab52cd457", "sighting_of_ref": "indicator--13d88c16-cf26-42ca-a5c0-a4fab821356e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eaa606c-b432-4aa9-bb64-0b4cf1d8b666", "sighting_of_ref": "indicator--5e99b8f2-aaae-49fe-b712-e5f9971bf8ed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc464e72-865f-4333-af46-61fce09dd7e2", "sighting_of_ref": "indicator--455ed697-8f4c-439c-8716-88ea923ed64b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9a3d7a-fd8c-4bf8-ab76-d2d6b5deae89", "sighting_of_ref": "indicator--c35a2b76-cd01-4b6c-80aa-5400f0bf07f2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc33b53-c6e7-4430-adef-7ac3ad5a770e", "sighting_of_ref": "indicator--c35a2b76-cd01-4b6c-80aa-5400f0bf07f2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc85705-140e-48a1-9f41-d06f59065156", "sighting_of_ref": "indicator--0a283355-cad0-4877-a0dd-5d4f47b66eb1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4d0bb6-71ba-4aa6-8a0d-cf88e73a1ee4", "sighting_of_ref": "indicator--0a283355-cad0-4877-a0dd-5d4f47b66eb1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ebf292-5e96-4b91-ab8f-1c50c1749b66", "sighting_of_ref": "indicator--d7d16b9c-53a2-491b-ab6f-1f876bb27f15", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4476eb2f-03c6-40c2-98b0-a336c74ee221", "sighting_of_ref": "indicator--d7d16b9c-53a2-491b-ab6f-1f876bb27f15", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7436cd56-2b24-421c-904e-0035bcd21731", "sighting_of_ref": "indicator--ab053ea8-bc5c-4fc3-8cb3-4449094b2afb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf317c7-8509-4ebc-933c-b169758ef154", "sighting_of_ref": "indicator--ab053ea8-bc5c-4fc3-8cb3-4449094b2afb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162d1480-c2e1-4317-a95c-a1949158eceb", "sighting_of_ref": "indicator--ab543da2-8c72-4b8c-9b78-6047e9c45125", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c999eba-3ba7-4f3a-bf5e-8424c808cf1f", "sighting_of_ref": "indicator--ab543da2-8c72-4b8c-9b78-6047e9c45125", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebf5ebf-94f1-469b-9753-7f84de211fbe", "sighting_of_ref": "indicator--c473037a-47c3-4d9b-b8f7-c047673208bb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a3994c-432b-4977-afb5-d2004ba3126d", "sighting_of_ref": "indicator--c473037a-47c3-4d9b-b8f7-c047673208bb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fafbf9-23a5-47da-907d-c3720379d1b5", "sighting_of_ref": "indicator--84f2d311-292f-46a4-b3d9-62c5e974ff7c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9202f750-f9d6-4e34-af79-1b96ac6906ac", "sighting_of_ref": "indicator--84f2d311-292f-46a4-b3d9-62c5e974ff7c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf141b4-5d89-4afe-874a-9b0d9f88e666", "sighting_of_ref": "indicator--c492587a-97c2-45bd-a19a-95469fbddd43", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a17295-97b7-4ae4-b4e5-6fd8b0694f1e", "sighting_of_ref": "indicator--c492587a-97c2-45bd-a19a-95469fbddd43", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec51cc4f-c407-441e-9f5d-765993acd93c", "sighting_of_ref": "indicator--c2b0367d-626b-4a00-b492-f7d23749ed59", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85365253-4222-4881-af3a-96f640a87624", "sighting_of_ref": "indicator--c2b0367d-626b-4a00-b492-f7d23749ed59", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578c1777-40ae-4e79-b09c-9243ceb7405b", "sighting_of_ref": "indicator--db744ad5-0cd1-4d53-beac-c86edb411cb7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84208cd0-3059-4d60-bb61-5b6cf712c8cf", "sighting_of_ref": "indicator--db744ad5-0cd1-4d53-beac-c86edb411cb7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43992a7-0b10-4c2d-bb6c-09310f3b9921", "sighting_of_ref": "indicator--c3f1d557-fd10-49a6-b12a-2cfddc90030c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bd32c8-eb0d-4ed0-a04c-552ab36cb516", "sighting_of_ref": "indicator--c3f1d557-fd10-49a6-b12a-2cfddc90030c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9004693e-b446-4288-8490-54997cf11e05", "sighting_of_ref": "indicator--9af33bed-499a-4de8-89cf-15bd2c8ef61d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f77382b-f632-4660-a052-a5af7ac577bd", "sighting_of_ref": "indicator--9af33bed-499a-4de8-89cf-15bd2c8ef61d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b9f6b3-5e45-4411-a627-2dac594af3a9", "sighting_of_ref": "indicator--cb3ef5df-5071-4e04-8369-5300a8046289", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b3ab7f-b913-49f9-a108-5aa66c9441d0", "sighting_of_ref": "indicator--cb3ef5df-5071-4e04-8369-5300a8046289", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25112f78-ccca-4d35-be88-4af706fed064", "sighting_of_ref": "indicator--6689e14c-8718-4330-b114-4d6e909924a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19be0453-246f-400f-8b72-0f974e7b14bc", "sighting_of_ref": "indicator--6689e14c-8718-4330-b114-4d6e909924a7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5be05e-bee1-40ca-8eff-5d615a598be9", "sighting_of_ref": "indicator--370e4f9c-bcac-4934-95ff-d11d7730c618", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985382c2-5a48-4b0f-8ce2-c0c5cc7ce2c9", "sighting_of_ref": "indicator--370e4f9c-bcac-4934-95ff-d11d7730c618", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c530b3-8e1a-434b-87ea-4f2caa1d3a3e", "sighting_of_ref": "indicator--236ae05d-6656-4dd1-9478-ad788dba65f1", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8676dc-609b-4744-969c-810c2d84ff5d", "sighting_of_ref": "indicator--236ae05d-6656-4dd1-9478-ad788dba65f1", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b4a967-3582-4da6-af66-da26dc12d8e7", "sighting_of_ref": "indicator--770cb876-1e07-48b9-a82d-ed10d0d60780", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b074a476-b23a-414d-a26c-d67cd2f9ad3b", "sighting_of_ref": "indicator--119553b5-aed6-4a2e-a37c-7ed0b2c126f5", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150d14c1-d931-4cde-b27d-88e91e53de59", "sighting_of_ref": "indicator--119553b5-aed6-4a2e-a37c-7ed0b2c126f5", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfc9733-388e-4c66-a514-0c1a37704ac9", "sighting_of_ref": "indicator--81ef75d8-96ad-42d5-99da-4208bba1cb65", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691620e1-f27e-4153-8a00-12abe1724063", "sighting_of_ref": "indicator--91ecde23-1c73-4c76-bdaa-15f5ea467f02", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21a07aa-5d10-446c-8c6b-aa82004e5670", "sighting_of_ref": "indicator--844b26c3-00d4-495f-a381-1d89eaa04556", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e275c09a-e90b-4b10-925e-85b3dc307700", "sighting_of_ref": "indicator--9032c6fd-e6ea-4ec5-81d2-976a92d56d6e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6c2860-04d0-4f03-9f9b-03b95d61f4f5", "sighting_of_ref": "indicator--9032c6fd-e6ea-4ec5-81d2-976a92d56d6e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd07c05-585a-444e-8da8-2b71fc530eea", "sighting_of_ref": "indicator--75985efc-400d-4742-9a96-784bc823eb1c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81938f1-0b05-42b8-8e73-f7bad181fa1f", "sighting_of_ref": "indicator--6b9e2222-d5a5-4e2d-86f2-eda55559d741", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2388adc6-c942-4db0-96d7-e89220c55cc6", "sighting_of_ref": "indicator--7ddecf2e-22f6-4f2d-8cbc-fcce64ee7b99", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496a5577-47ac-4401-82cf-f97592a4ec77", "sighting_of_ref": "indicator--7ddecf2e-22f6-4f2d-8cbc-fcce64ee7b99", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0315a470-b511-401a-8bfa-c12768e54a19", "sighting_of_ref": "indicator--ed651b90-54b9-4078-b9c3-a525fa940285", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b314cd4d-fd02-4eb1-9877-155546b49652", "sighting_of_ref": "indicator--ed651b90-54b9-4078-b9c3-a525fa940285", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedb87ea-0798-4b43-8bee-5e244b946853", "sighting_of_ref": "indicator--e8825fe5-e72a-4aae-abe1-c4fd9293003a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2f6780-4901-4307-bc20-8bfb3c6bb491", "sighting_of_ref": "indicator--e8825fe5-e72a-4aae-abe1-c4fd9293003a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f943d7-0cfb-4d5a-a14f-331fa1ea74ea", "sighting_of_ref": "indicator--5e144e8c-2952-4262-af8a-4df827ef963c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b943e9c-dd06-4de1-9ed1-1a730f585302", "sighting_of_ref": "indicator--5e144e8c-2952-4262-af8a-4df827ef963c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7b9ce0-7357-4a69-953d-27a625cfc3f0", "sighting_of_ref": "indicator--aba45cbc-7553-4645-aaab-6ffec6390e00", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3deb1f98-df74-42cd-bdc9-5e09f3fadb97", "sighting_of_ref": "indicator--aba45cbc-7553-4645-aaab-6ffec6390e00", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7a536b-5e0f-485f-8a9d-3abbebe08b91", "sighting_of_ref": "indicator--d7cbf731-3c21-4c60-9496-f9a2b4fa66d6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be96d5f3-465f-4306-9a6f-1700642a2db0", "sighting_of_ref": "indicator--d7cbf731-3c21-4c60-9496-f9a2b4fa66d6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520a09b2-2d2c-4958-80dd-7eff06686636", "sighting_of_ref": "indicator--b51d7b07-24ef-4290-8243-a0957d9783b7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9908bd3a-0f6b-4592-b457-ef85abb58523", "sighting_of_ref": "indicator--b51d7b07-24ef-4290-8243-a0957d9783b7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70dfa5ad-d9a9-4b70-ad67-11a57d49d945", "sighting_of_ref": "indicator--c07649a1-bacd-48ca-90e8-ce85e292bb11", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54139569-0bd2-4b84-be4d-5816b95bd916", "sighting_of_ref": "indicator--c07649a1-bacd-48ca-90e8-ce85e292bb11", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a7b1c4-85a4-48cf-ab36-78a9235eea94", "sighting_of_ref": "indicator--bda82836-b17d-4264-ac46-d8778ac4e4b6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c72fdb-5648-4a53-988d-eaf049513d0e", "sighting_of_ref": "indicator--bda82836-b17d-4264-ac46-d8778ac4e4b6", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d58b24-a3bf-4060-9fee-64a0479283d4", "sighting_of_ref": "indicator--cca75173-4ab2-45e4-8d83-617ce41aa879", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22984fd3-db2e-41d5-814c-5bd0c522f3a7", "sighting_of_ref": "indicator--cca75173-4ab2-45e4-8d83-617ce41aa879", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7957eb62-e7a0-4639-9d3e-b931751d83ae", "sighting_of_ref": "indicator--7d2befeb-9e16-4fb5-86cd-4dc50e5c4f11", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3d1f3a-4415-4c43-b878-5891c7f5c90e", "sighting_of_ref": "indicator--7d2befeb-9e16-4fb5-86cd-4dc50e5c4f11", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa08ba2-81b3-4b37-8a22-ef0730c2e35b", "sighting_of_ref": "indicator--d1477181-e028-4678-a2f5-8a1e3af24c1f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283ba962-a636-40f3-9a52-f41b2ae3ab0e", "sighting_of_ref": "indicator--d1477181-e028-4678-a2f5-8a1e3af24c1f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260c490a-4bec-4e6c-a1b2-632d1336b1b4", "sighting_of_ref": "indicator--9c7b152b-f9f8-4a7f-a349-bdc49451e71e", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad19ede-2f17-41d4-aa9f-72ffec696255", "sighting_of_ref": "indicator--9c7b152b-f9f8-4a7f-a349-bdc49451e71e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0965e0-f6c6-43aa-8303-7db55b18bee9", "sighting_of_ref": "indicator--7bac9a40-1f03-4f84-8105-951a36e28cc7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040c533f-dd15-4e42-9017-bcf79afc6cd7", "sighting_of_ref": "indicator--7bac9a40-1f03-4f84-8105-951a36e28cc7", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6721b16d-97c2-44b0-95a7-9f085cb7e94c", "sighting_of_ref": "indicator--40adf280-28bd-4cb4-ad21-8a96f3a2c3d8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64633407-f37e-4004-bedf-a9885ec5beb0", "sighting_of_ref": "indicator--d130e746-f838-4edb-89ac-d8456bb44caa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae68aea-846c-42bd-b2e5-4b1c4258d10a", "sighting_of_ref": "indicator--fbab49d5-2dde-45b0-9174-53ecc95d08cb", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea374b2-977f-46fc-801a-5dd6b42888d0", "sighting_of_ref": "indicator--d32c2a6a-48d8-4153-a552-c2ebf95cb59a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6ab30d-b615-4c71-8d86-c4e7c95e84cf", "sighting_of_ref": "indicator--cceb1be5-3488-43bb-9bd4-8f0c5e9da23d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80da971c-5c3b-40f8-af51-10cd4bb10d7a", "sighting_of_ref": "indicator--f36a2c30-63af-4bef-b953-b64c7bdc2f15", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b6c0b7-3520-40ab-8961-223d92f1d9c9", "sighting_of_ref": "indicator--fe068912-a438-4fe0-91ab-9484a5a34bfe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600cfb32-d846-4c5d-a7ca-623aab96f656", "sighting_of_ref": "indicator--d676c7ea-0dd5-4ecf-9022-6da14f18a3c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2c3e68-b25e-4f87-b54b-fcb11511768a", "sighting_of_ref": "indicator--165530cc-594d-4165-a710-7544f6c116eb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15545ee-8f6e-4cac-9092-ba633350feea", "sighting_of_ref": "indicator--b6e42c2c-ba7d-4231-ab4c-0160b696c904", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b01ab05-9651-43d2-8ff7-c68b97363140", "sighting_of_ref": "indicator--b6e42c2c-ba7d-4231-ab4c-0160b696c904", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ed0c04-66a7-4b03-ac72-a9ea61f4d429", "sighting_of_ref": "indicator--be74f4c9-e53e-4848-9220-ba6126085918", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acd84fc-7558-44de-a041-3990a25568fa", "sighting_of_ref": "indicator--ea0ac61c-9c6b-4017-a409-2c1caff73c80", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652559f8-75b9-41f0-bd7b-c67d19f46d49", "sighting_of_ref": "indicator--ea0ac61c-9c6b-4017-a409-2c1caff73c80", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9133a588-1ade-4f79-8399-ea2df059466d", "sighting_of_ref": "indicator--ea0ac61c-9c6b-4017-a409-2c1caff73c80", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d513c8fc-99df-4cc7-8faf-6bc3a8f7caff", "sighting_of_ref": "indicator--0251ad7f-12cc-4680-a690-a455e70eb473", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5a8224-6e00-40fd-a88a-91244857c653", "sighting_of_ref": "indicator--0251ad7f-12cc-4680-a690-a455e70eb473", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596958bd-b563-43d4-8846-4fbfadf08615", "sighting_of_ref": "indicator--0251ad7f-12cc-4680-a690-a455e70eb473", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e6c8e4-3f0a-4d23-9d67-e225b92e99f6", "sighting_of_ref": "indicator--3f859acf-dc88-40fe-9613-959d53a8bd69", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8c2512-46d3-4beb-8e94-2cb38aa09820", "sighting_of_ref": "indicator--e7c57d8d-4e4c-437d-ba18-50b12bed1211", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f96d00-b4ab-46f1-8669-3ae25e0b2d40", "sighting_of_ref": "indicator--d23de2b9-157a-4eb4-877f-0e68678b8bd2", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e5811f-0cc4-429e-9930-7484555c9134", "sighting_of_ref": "indicator--d2b606a4-a3a6-4f6f-ab4f-2e83a9c2ff6b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10692c6-67c4-4dae-9793-6b0f69572599", "sighting_of_ref": "indicator--d2b606a4-a3a6-4f6f-ab4f-2e83a9c2ff6b", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ecc7ae-33a2-4a6b-8eec-9691fd4572e3", "sighting_of_ref": "indicator--a89b261f-bd78-42b9-bdbc-555b5c8c210d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38062c28-a742-46d9-ad3e-0666fb0cfa67", "sighting_of_ref": "indicator--a89b261f-bd78-42b9-bdbc-555b5c8c210d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2a7730-2bbf-4aa5-98be-7976b7b492d0", "sighting_of_ref": "indicator--a89b261f-bd78-42b9-bdbc-555b5c8c210d", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aed1018-0e59-43d7-8311-758f3dba86a4", "sighting_of_ref": "indicator--50411574-1bd3-4385-bb02-ef1af3bb1584", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4818a6-0355-48d1-aeeb-39c357faa22f", "sighting_of_ref": "indicator--50411574-1bd3-4385-bb02-ef1af3bb1584", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23c8d65-4ca3-45f7-898e-806bb6fd0fa5", "sighting_of_ref": "indicator--f9b5cd99-fe25-40f1-830d-8078427e006c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704262cc-58df-44db-aed1-e8b71cc87c78", "sighting_of_ref": "indicator--20d97653-ddca-465f-bf6c-c1a119e9adb3", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2fcefdc-4c6e-48ef-ab92-ff74467eff00", "sighting_of_ref": "indicator--20d97653-ddca-465f-bf6c-c1a119e9adb3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43d15bc-a5af-4734-9a00-63e2d56205f8", "sighting_of_ref": "indicator--db2599d6-0026-4450-8cb1-b91e4460224d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd7c3cc-58e4-43df-ae90-809994646bfa", "sighting_of_ref": "indicator--db2599d6-0026-4450-8cb1-b91e4460224d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7159a397-ffe3-48ff-9246-19deb79146ef", "sighting_of_ref": "indicator--db2599d6-0026-4450-8cb1-b91e4460224d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9a1274-872c-4e79-bd5f-7f3b23e96888", "sighting_of_ref": "indicator--c323f632-1dd9-4415-a6da-e0f472ce34d8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116cd2cf-e4d4-4a72-9ede-289150c08a2a", "sighting_of_ref": "indicator--c323f632-1dd9-4415-a6da-e0f472ce34d8", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed914e75-f2a2-4ef9-baeb-39ebbf9f5cb7", "sighting_of_ref": "indicator--332b7253-ac05-4997-8c0a-1d160b00583f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d39f523-1715-439d-9c5e-b1ed3ac3a932", "sighting_of_ref": "indicator--66313665-2dbf-4292-8c26-e6f9e44789a7", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fe2720-c3ae-4559-9e46-97d1979b12de", "sighting_of_ref": "indicator--75a6dd44-017a-4c0f-ab46-2886c3f16e70", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46142f72-4696-4fe9-ad62-4895407efc5d", "sighting_of_ref": "indicator--75a6dd44-017a-4c0f-ab46-2886c3f16e70", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f96cd3-5e11-41d0-9146-4a5ca1d4c1d4", "sighting_of_ref": "indicator--65cfefad-d390-47b6-93f9-29e8af0440ea", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f8e933-a48f-4ac5-beb5-2b82730c3be5", "sighting_of_ref": "indicator--65cfefad-d390-47b6-93f9-29e8af0440ea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7f2274-8e39-47d6-953c-97634cf7ec2a", "sighting_of_ref": "indicator--bd869aee-36ee-4324-b8eb-1646ee2abc19", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949ecfad-4650-4402-a8f1-8debf90089f7", "sighting_of_ref": "indicator--731389b7-e173-48f0-a4f3-e4812c93d91a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92939ae-b5ef-4d06-9632-035dc60ff024", "sighting_of_ref": "indicator--437991d6-73a1-4099-a5b5-0f4381980a99", "where_sighted_refs": ["location--96b451f6-0b69-4bbc-9b61-93360a496a21"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f7b341-1eb8-44b8-829a-ebf7cdd1a599", "sighting_of_ref": "indicator--945cb78d-dcda-4ac9-973d-9f30de338748", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6aacc1b-34f2-447c-bdc9-c5c36b4fe368", "sighting_of_ref": "indicator--8b564b10-7123-405d-8275-8b6bf435eef9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748873aa-c0cf-4b44-9f41-313eace91563", "sighting_of_ref": "indicator--8b564b10-7123-405d-8275-8b6bf435eef9", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5bc330-5145-4930-8442-cf50fb3d1ea4", "sighting_of_ref": "indicator--280eaa4b-0327-4eff-a9bf-02f16f65dce4", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c250f0b-1ec0-43aa-9781-ac9a824fcd28", "sighting_of_ref": "indicator--a42dface-208f-4dbb-84a1-259cb28e2523", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7e3d61-bbc3-4edb-832a-780636b8b672", "sighting_of_ref": "indicator--070b9b86-402b-41a1-898d-7113785e9789", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a2b9f6-ecfd-47c9-9539-2b2c96a7e4c3", "sighting_of_ref": "indicator--070b9b86-402b-41a1-898d-7113785e9789", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e3d7c9-1d06-4e4a-96b9-f4b9e4f0a082", "sighting_of_ref": "indicator--070b9b86-402b-41a1-898d-7113785e9789", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84383ca-c768-4551-93f7-24615ad6697b", "sighting_of_ref": "indicator--a3666fe9-7d12-4038-a83b-081fff535cab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502b1f5d-92af-46d8-af36-766877f2ab6e", "sighting_of_ref": "indicator--a3666fe9-7d12-4038-a83b-081fff535cab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7027e24e-4faa-4295-9fb9-e9c7fb5356fc", "sighting_of_ref": "indicator--a3666fe9-7d12-4038-a83b-081fff535cab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56948be-7253-4abd-a4a0-55a3a5bc6ba8", "sighting_of_ref": "indicator--d6d7e1a9-abce-4a54-8ef6-2d98201b2d83", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e35c3d5-2790-4722-b17d-a34d91c35a3d", "sighting_of_ref": "indicator--a5fa49e1-c29d-4566-9a06-d605ac904498", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcd0567-c70f-467f-872a-5636bf5eda83", "sighting_of_ref": "indicator--36c687b3-2437-4f05-9d5c-fe70d6c09745", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963a8219-d2e6-4970-999d-bd7b089a0d1c", "sighting_of_ref": "indicator--36c687b3-2437-4f05-9d5c-fe70d6c09745", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368d871c-0a31-467f-88c2-b46854246fcf", "sighting_of_ref": "indicator--36c687b3-2437-4f05-9d5c-fe70d6c09745", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61577f79-e5a6-4bf8-bdd9-eb263d17a4b4", "sighting_of_ref": "indicator--eb094d4d-abfb-4a52-9dd1-db9fa2215e7f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06107b6-e1e0-4fa8-a03c-cb2bacfada9b", "sighting_of_ref": "indicator--eb094d4d-abfb-4a52-9dd1-db9fa2215e7f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0156bf90-8c53-42ab-af9b-1e4acf1546e7", "sighting_of_ref": "indicator--eb094d4d-abfb-4a52-9dd1-db9fa2215e7f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81259d45-6c7e-4569-bb08-93909f37cbce", "sighting_of_ref": "indicator--052d62ff-b47f-4374-9d4f-b986b05c2c81", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3b047d-c04a-45e5-8463-8df0ac9d9ffc", "sighting_of_ref": "indicator--57bb34a2-d03d-4d2b-9dcb-ed69cdd63174", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbc22a2-6ca8-4b98-9f88-517b1a08c9fe", "sighting_of_ref": "indicator--57bb34a2-d03d-4d2b-9dcb-ed69cdd63174", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5a53c1-a1c5-4931-b4c1-f4963a0d94b6", "sighting_of_ref": "indicator--95d1eace-f769-4e96-9cad-838500e84e03", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9517c8fe-c092-473f-8be7-fc7fe9a9e869", "sighting_of_ref": "indicator--13f8b98d-8160-409b-9aab-76c2248dac87", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81612f98-301d-437d-968a-00cc1e287940", "sighting_of_ref": "indicator--3046a0b9-fcf9-4312-a99b-4cf362c21243", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38dae4a8-1fd0-426e-b876-0c1869ba454c", "sighting_of_ref": "indicator--9b1df89d-e425-43b9-bb27-69e42d568051", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49441c1-ecf4-482b-a73b-68a9b4e1b45d", "sighting_of_ref": "indicator--9b1df89d-e425-43b9-bb27-69e42d568051", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be35c91a-a227-4268-ae34-b4e97ce014b1", "sighting_of_ref": "indicator--9b1df89d-e425-43b9-bb27-69e42d568051", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfc2997-5bd2-42a1-ba79-d2838e39905e", "sighting_of_ref": "indicator--8a726fb3-68e4-47cd-8afd-a70ff637ce00", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ee16a1-5f04-412c-8598-ccd464aace16", "sighting_of_ref": "indicator--8a726fb3-68e4-47cd-8afd-a70ff637ce00", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d276b4-48ae-40eb-af29-5d1db1ed2e59", "sighting_of_ref": "indicator--e8812a79-2c82-46ea-a447-1248692788cb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5a0f4b-03bc-4fbe-a02b-a7297d91d8c6", "sighting_of_ref": "indicator--7abf8ebd-2d9e-4c69-b211-249258549586", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149be47d-ee26-4850-b407-75533cfb7fa5", "sighting_of_ref": "indicator--e95833b3-1fbd-4a40-83e9-e95c33428bcf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22588b4d-31fa-4a73-9809-2a86b61a080a", "sighting_of_ref": "indicator--b8e60937-15d3-4682-8114-0121c4797d52", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00356c9c-7259-4311-bc8d-5064f9ccf00d", "sighting_of_ref": "indicator--e35f2e54-536a-40cc-832a-8697875b363a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c275fa9d-0b81-447b-8bf6-df916ceda184", "sighting_of_ref": "indicator--842a15fd-c68c-4011-972e-acaefd7ca327", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1ee2a6-a747-4331-be4e-1de300b40a91", "sighting_of_ref": "indicator--a32719c2-b9de-4b80-aed6-da0090529547", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440f1bcc-487d-406b-898a-e9d9f2f73c4c", "sighting_of_ref": "indicator--8cc6421b-e2cb-497c-a7ae-c7295b9cb1cf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48760a75-3446-4ee7-8837-05ecd284f6af", "sighting_of_ref": "indicator--bc986160-c88b-4316-9a21-27878744006d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea09c4f-b0b7-4885-8a84-a0789bca41f4", "sighting_of_ref": "indicator--88eac1e6-d40f-4d8e-b3a1-16670200f24d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7295b0e2-1b45-4f7d-b70e-e7d1eb846f10", "sighting_of_ref": "indicator--89304b4c-49c9-4157-acb3-1c66138e7dc2", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4100eb-91f6-43dd-96ff-ef451eab4641", "sighting_of_ref": "indicator--d32934f9-2757-4e89-af90-71f8fa236e05", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d07323-1628-48b1-a338-7b4d6ba334df", "sighting_of_ref": "indicator--d32934f9-2757-4e89-af90-71f8fa236e05", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611d40e8-3321-46f6-9a97-22a3ef3fb31c", "sighting_of_ref": "indicator--d32934f9-2757-4e89-af90-71f8fa236e05", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1aff73d-1c8e-4d47-8ddd-58d4058099b8", "sighting_of_ref": "indicator--1dc5a636-f284-4f9f-93b5-ee589789ec55", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af20285d-197c-4227-931e-6dbc34813686", "sighting_of_ref": "indicator--e2f50014-6a16-4748-a16e-7c748664c436", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23ab547-d459-4591-a6ce-d9b717bded1a", "sighting_of_ref": "indicator--e2f50014-6a16-4748-a16e-7c748664c436", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83041fbb-a60f-47e5-951e-3dc7a87f02df", "sighting_of_ref": "indicator--4762b169-c309-4312-bb35-0885d4e9cf78", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed6bda1-44e3-45ee-899b-31a399e13fd6", "sighting_of_ref": "indicator--0479539f-eada-4806-8f79-3782c15f94aa", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb0724b-0ea9-45fb-8a74-26a50921acc2", "sighting_of_ref": "indicator--34423330-6150-475b-a677-d4ed9c71e521", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf9b31a-a443-442b-a3b1-c33c1597a712", "sighting_of_ref": "indicator--34423330-6150-475b-a677-d4ed9c71e521", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741f6d28-2c16-41b7-9d4d-afeceb3b0a5e", "sighting_of_ref": "indicator--43f5cdb0-ba52-4e1a-ac3e-bd8c4da5760f", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9d6e15-0ce9-4683-b1af-6dd435347ca7", "sighting_of_ref": "indicator--8f4ed9f9-e506-49c1-9d1e-cf1505d44c79", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a6c81c-8116-4613-83ce-f5f6deaf241e", "sighting_of_ref": "indicator--8f4ed9f9-e506-49c1-9d1e-cf1505d44c79", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643d67ea-2c47-425e-a4e6-a48cd09da0b5", "sighting_of_ref": "indicator--8f4ed9f9-e506-49c1-9d1e-cf1505d44c79", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681a4c7f-0463-4dc3-b5f7-eb29fb524b12", "sighting_of_ref": "indicator--b8a53c91-4071-42bc-b2bf-35c0f346233c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e303d2a3-da30-4fd3-b2ea-1195bec5d30e", "sighting_of_ref": "indicator--e6d77f7e-71ed-4711-9c67-81cd0348d622", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2558ef6-71a5-4bc8-adb6-bdf00cf75d01", "sighting_of_ref": "indicator--691718e2-86fb-4db2-871f-819ffd5572f9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfafecfc-b4f0-4361-9984-69caa5c26c1b", "sighting_of_ref": "indicator--49892c9a-8e01-49be-838e-eb08d1910290", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d2c8f2-49f8-4bb4-b76f-36653de992ab", "sighting_of_ref": "indicator--49892c9a-8e01-49be-838e-eb08d1910290", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7277890-5041-4479-8f3c-30dbc67158c6", "sighting_of_ref": "indicator--49892c9a-8e01-49be-838e-eb08d1910290", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a4fb38-abcd-4248-8ebf-8f5ae3c55872", "sighting_of_ref": "indicator--37d1629e-1cb5-489b-b186-2ce5b24c44f3", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc198f1-7919-4ace-ba9a-2ed38744fe7b", "sighting_of_ref": "indicator--66b9955e-59df-41d8-97b7-9d50237432ef", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8accf89d-5886-433c-bf8d-2325c45065ab", "sighting_of_ref": "indicator--5694a518-59c5-4939-ab94-e180ebbca60d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4979d8b3-a974-449f-b345-27d8e144f215", "sighting_of_ref": "indicator--5694a518-59c5-4939-ab94-e180ebbca60d", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ead522-b748-41ef-995a-68365c2a58c7", "sighting_of_ref": "indicator--be085b6d-eb68-4b86-b2bd-b581240423ab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e35e04-9a40-4689-81fe-16e04b869f28", "sighting_of_ref": "indicator--be085b6d-eb68-4b86-b2bd-b581240423ab", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4baf8dee-5de0-49a9-a2cc-763b2eb39763", "sighting_of_ref": "indicator--be085b6d-eb68-4b86-b2bd-b581240423ab", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49164b6a-b596-45ab-b9eb-03a2f466df3b", "sighting_of_ref": "indicator--3ed50936-6ef0-41bb-b7bd-581e93da3d4e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98dae326-1782-425a-af39-67913f5c9e03", "sighting_of_ref": "indicator--8d12981c-db7b-4fa3-937f-c5f8bedc8bea", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7c5ac5-0986-4665-8412-2adaf6f93a8d", "sighting_of_ref": "indicator--8d12981c-db7b-4fa3-937f-c5f8bedc8bea", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154a3ce5-1d0a-441b-aca0-4c3d2f935f90", "sighting_of_ref": "indicator--8d12981c-db7b-4fa3-937f-c5f8bedc8bea", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193e35ab-88d8-4aa7-8157-9d5e22e7e729", "sighting_of_ref": "indicator--ef03a107-4af5-4c15-92a7-165a50a916ef", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f0753d-ca59-4b28-92e5-c768c447053d", "sighting_of_ref": "indicator--a2c58ac5-0d7c-4176-9eae-1ec8e4335c6a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a863e9c-6458-4e79-8dfa-492a583399ed", "sighting_of_ref": "indicator--400bc8e8-cbcf-47e2-89ef-111846ac584a", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4190eb2f-62cd-45f5-b739-0a45aa8bfebc", "sighting_of_ref": "indicator--29d8e5f7-56f8-4776-8e00-5b65e912f59e", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13935e9b-b761-4e98-aac2-cb184f79b345", "sighting_of_ref": "indicator--a7c06152-c6b5-4c77-9e65-020043a96a98", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fc2676-7c74-4cf5-8c10-0530337f3a94", "sighting_of_ref": "indicator--a6926f97-a3a3-4697-a4a9-d59e1ca20a10", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e72661e-8417-41f5-99f1-9ddbd9e9530d", "sighting_of_ref": "indicator--a6926f97-a3a3-4697-a4a9-d59e1ca20a10", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19f2b58-05b6-48aa-9c27-a2e8043cf861", "sighting_of_ref": "indicator--28689584-14f8-4365-a3ac-d6e070cb7955", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be7b97e-59ae-4593-bf45-3cc0b70cd951", "sighting_of_ref": "indicator--f394f116-e1ce-4351-8041-1577cd6929db", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8283bc8a-8fb3-4e41-984b-9dc950b68e1f", "sighting_of_ref": "indicator--f394f116-e1ce-4351-8041-1577cd6929db", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcea362-08fa-43e3-9d4d-fbcf6612aabc", "sighting_of_ref": "indicator--a4c115e3-6d13-4547-be64-06e64c3683e0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4821521d-18cb-4a6b-8133-8cdcc7b26bca", "sighting_of_ref": "indicator--474c9a92-6567-4ae2-bfed-fa30f650fc71", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c48e0f-cc90-433a-a0aa-6d6c6b0a711a", "sighting_of_ref": "indicator--949f3ef7-e3a4-49c5-ac60-6bb92e59c1e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fe1a0e-db15-4543-8cf3-f8019af957c1", "sighting_of_ref": "indicator--32353e24-4147-4c96-98da-4cddc153e55d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25002faa-11b5-426f-9f43-2490bc775627", "sighting_of_ref": "indicator--5757de8b-2086-42b1-91de-85e907fa28a6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f29fbd5-7dd4-49ae-99b3-948179b282e3", "sighting_of_ref": "indicator--aa51f3f3-6674-4a04-99e9-a73a0c95a072", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05963bcf-32d1-4ea0-863a-6387ed9f08bb", "sighting_of_ref": "indicator--d36f4391-48ed-4b6c-bd5a-ccb9a3f6600a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a27ad9a-85dc-4a5f-850b-97b40737a389", "sighting_of_ref": "indicator--e44e0d72-bf74-4f61-a8c6-0a9f196c2cf9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9544b86-cbb4-40ec-b4b1-2864ec66fbc3", "sighting_of_ref": "indicator--2aeeefa3-bd88-4b49-aaf2-e7fd83838cb8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437f6b09-eecb-4d84-bd4b-d050908d5baa", "sighting_of_ref": "indicator--1c3f28f1-412a-4ef1-8ecb-46d3f889ffdf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2939798c-047f-4018-9a42-e2ce22b62abb", "sighting_of_ref": "indicator--6d7deefb-b149-4afc-ad94-32f4290a0f9c", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1b132e-da2e-4cf8-9559-3a9dd0611737", "sighting_of_ref": "indicator--d47bb12e-bc06-4882-9109-6f2532d6852a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647fa875-b641-417b-a2a8-3e1e95d99d3c", "sighting_of_ref": "indicator--acad9c06-99e3-4d02-9fd8-e02fa7f4b194", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38c72b1-c86a-4a15-953f-6a32ddae4a58", "sighting_of_ref": "indicator--e87b0f2d-6fdd-4d65-b0ff-32714e24a551", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947f2d01-c997-49a9-81d1-db46f1647a5a", "sighting_of_ref": "indicator--7c184bdd-6505-4f4f-9bc3-bcfa69d57470", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5af555f-d8be-42f3-8189-b787e9b25aa3", "sighting_of_ref": "indicator--935fe32c-4444-4164-89e6-b925f362e7e0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30bd23f-e2f4-4636-afdd-4f9bf27d9404", "sighting_of_ref": "indicator--935fe32c-4444-4164-89e6-b925f362e7e0", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5607e66-4e1a-4fb0-9023-27638d8f0fe7", "sighting_of_ref": "indicator--bb141ef3-7c0b-4efe-beb7-437471036f65", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b07912-1064-428d-a359-235f0b181c69", "sighting_of_ref": "indicator--f3bbbdb1-4465-472e-ab7b-ce7015da0b40", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679a1c2d-760b-416c-972a-ba54d0e65983", "sighting_of_ref": "indicator--7492f51b-a498-43b8-8994-b580d706b7fb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b7affe-8fcd-4d8e-93ba-a284dfecb73a", "sighting_of_ref": "indicator--eb5240f4-0e34-4336-b8e9-a264cb8954d7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b4ee7c-e312-492d-898b-f7727ca4b5cc", "sighting_of_ref": "indicator--d6e6b385-5405-4991-a08a-f77d7c39b740", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08fbcd92-88e1-4788-b94c-c3c23ae3d2bb", "sighting_of_ref": "indicator--d6e6b385-5405-4991-a08a-f77d7c39b740", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9838478-d0a9-4763-bba2-f9fb2850cad7", "sighting_of_ref": "indicator--d6e6b385-5405-4991-a08a-f77d7c39b740", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70c23e7-74a8-4b5f-b5a0-faf05704cd79", "sighting_of_ref": "indicator--0b55b595-d48e-4700-a432-bda4c79f5df4", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d934d6be-ac65-4751-a351-68a65feab421", "sighting_of_ref": "indicator--df851a36-4868-47d2-9e59-6e6fb278736b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4e8f4d-93ce-4f3b-9610-2f6a66cec794", "sighting_of_ref": "indicator--16be9300-bc94-427b-8171-557e09d02657", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a776fa-bcde-4195-8ec5-390350415be2", "sighting_of_ref": "indicator--85105d18-ae06-41a4-90cc-3a8018e4f9bd", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3c03ac-9eda-4e81-9582-a80415163e6b", "sighting_of_ref": "indicator--a6e71718-d9ef-41a6-99ab-a6d8383cf0db", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09b8e07-2fe6-4fd7-9004-f11152905df5", "sighting_of_ref": "indicator--0deb962a-5d09-44f5-9690-a0fbd7f83ba8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5057afc9-e0b3-4d18-86d5-7302d1dbcf47", "sighting_of_ref": "indicator--cc962dae-2e96-4c1f-96b7-59a51bcd2e0d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68588712-149a-482b-8ff0-5a3556dc5798", "sighting_of_ref": "indicator--658fe5fa-6a8c-4f37-8748-1129cd60bbeb", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88482b0d-f899-4dec-8e26-0a9a6473bd21", "sighting_of_ref": "indicator--e39cd282-e598-49ab-ae6b-5e938e14d24c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7eb5ca-7b25-427d-a583-45bc60ab1b50", "sighting_of_ref": "indicator--cf02bfd9-2b13-4061-ab34-fa609cf9f2d8", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78b8abf-8203-4305-bb97-14fd9c383aef", "sighting_of_ref": "indicator--a8b78af5-d491-4b9b-bea5-d6b105ddbd1c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3787194-d001-4200-ba2d-a5ec04bf4966", "sighting_of_ref": "indicator--1f5934e9-8e8d-433a-81f5-1fdb7e17460d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53412f61-7694-48f2-8e69-b763611f36a7", "sighting_of_ref": "indicator--577124e6-508d-43c3-872c-17b16feeafca", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109108f3-4e2a-465d-8792-d42a97dbc208", "sighting_of_ref": "indicator--4bfa8b91-c285-4d2b-8bb1-ce2fbe2c609a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc7089e-dd33-4719-aa13-61266dead928", "sighting_of_ref": "indicator--4bfa8b91-c285-4d2b-8bb1-ce2fbe2c609a", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd55bce8-ea62-434a-8f31-4521e0422f01", "sighting_of_ref": "indicator--cfeb5081-2c2f-4451-889a-6aa39d4f94ac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052a39cd-f8f3-473f-aa50-b05e03648c3a", "sighting_of_ref": "indicator--d05d493a-71f6-4a1d-9e3f-dee621914f39", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0acd86fd-f918-44a6-bfa4-0d955afab140", "sighting_of_ref": "indicator--a3ed2f56-e7f5-4d05-b5fc-89163c63acbd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e237934f-2853-431d-8d7e-862ef9451948", "sighting_of_ref": "indicator--e822b8e8-3caf-45ee-9fa4-f11edc3a2a32", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdaee7b7-196f-4d48-9f69-b7a725c56278", "sighting_of_ref": "indicator--86094cbc-fff1-42ef-a501-1640192348e6", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0474896f-39bd-4ba0-b51b-8bf5aadff0bb", "sighting_of_ref": "indicator--22c489c7-3f8b-4dde-bb80-31c3c5840f1f", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d375c7-469a-4c32-864b-19dd84d801ed", "sighting_of_ref": "indicator--a954246f-9d9f-42d1-8bfe-8954e9f66398", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da921c4a-80be-4954-8d99-7576e66cd127", "sighting_of_ref": "indicator--285c8bfc-3b92-43f6-abba-aabf6b333904", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511ad1a8-dd41-4b6b-a64d-fe0944ed9ab0", "sighting_of_ref": "indicator--4320d190-dc26-4a22-8f82-e6eca84c0d57", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea42286d-2e1d-4665-bc04-f3a118986a12", "sighting_of_ref": "indicator--4320d190-dc26-4a22-8f82-e6eca84c0d57", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc982a3-a6e6-4a85-b464-c06b24874e23", "sighting_of_ref": "indicator--4320d190-dc26-4a22-8f82-e6eca84c0d57", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a378fec9-97b0-4583-b095-dcedbddddeb5", "sighting_of_ref": "indicator--ef34204e-2abc-431e-af37-9b8013f11d3c", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d93395-ace0-48a9-86bb-0b49d01135ad", "sighting_of_ref": "indicator--4d6003d6-9c1f-4fbd-9695-dde25b3a0f7d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b2bfad-0373-45af-a6ed-a10e171bb45b", "sighting_of_ref": "indicator--d2946fa3-3150-4fbe-9899-447e9570713d", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7f5d25-ea08-4aa6-965c-62487481f76a", "sighting_of_ref": "indicator--3627e08a-6ecd-45d2-8974-10b13a924dbe", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdc46f1-913e-4d18-9ba6-b8cb6b5a4d61", "sighting_of_ref": "indicator--c49fe18e-2580-4959-b74a-4ed94aa14b17", "where_sighted_refs": ["location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ce2df7-1c19-4f6c-b98d-207bbcba48d1", "sighting_of_ref": "indicator--c49fe18e-2580-4959-b74a-4ed94aa14b17", "where_sighted_refs": ["location--54ddff5c-a2b6-491d-829e-613f058ff4b4"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92c74b0-3d99-4a0b-bdde-345b641ac683", "sighting_of_ref": "indicator--9b328054-609c-4c51-97ba-bf755695964c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ddbd19-e95b-4def-98a8-0d07e6a84a62", "sighting_of_ref": "indicator--b724f51d-1916-4bfe-a7b3-300fbed53e5f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9caf6905-2ebe-4527-8f8c-7ba69838a542", "sighting_of_ref": "indicator--456baef9-5498-44c4-9489-9b17992f8abc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f234fc-2b0e-4ac3-be61-f4359b22aff1", "sighting_of_ref": "indicator--97cb5b8a-704a-4353-91a0-ad2e4dec7901", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506d6a85-9de3-4e48-a2f6-ba6e8e37ceef", "sighting_of_ref": "indicator--7d870bf9-8a35-4d95-8071-0433dd55a391", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadf5fb8-37b9-4fbc-8c1a-53c6778b1b1d", "sighting_of_ref": "indicator--6fa20f75-3fe4-486f-84d5-9edcc85f1430", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b927be14-fd7e-4e8c-93e0-e2e791947db1", "sighting_of_ref": "indicator--22b7eabd-8451-4cf4-adcd-fb706ea27f24", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45266a4-832d-4255-82ae-2dc50dfde29a", "sighting_of_ref": "indicator--5d2e7b21-9698-4355-badc-74116e353f88", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c5f923-0f46-4947-b03e-13150add7f67", "sighting_of_ref": "indicator--6a782b90-282e-4922-8885-481b3d63ea4d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b70fedd-6435-4150-a1ae-3381bbebc92b", "sighting_of_ref": "indicator--709dbebb-4965-4193-90f8-1cb44db4bbbb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a18aff-2315-4982-8a9a-8810ed48437c", "sighting_of_ref": "indicator--42f98d54-40a1-45d9-b4c4-de5e1c58505e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208a91d5-437f-4c63-8043-8300fcac876c", "sighting_of_ref": "indicator--5640d293-78e0-4bfd-8516-eaf52ff786cb", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe5a8ed-78d1-4a4d-8e74-e26da49d4fe5", "sighting_of_ref": "indicator--c2e0f47a-5003-4783-8afe-d3da25aac2b4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5973929-b14d-4a40-9ccd-bb6350ac7875", "sighting_of_ref": "indicator--140aa22d-32d5-4813-811b-2122cbfef08b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4f9757-927c-4cd4-b499-f32bf74efeb7", "sighting_of_ref": "indicator--4a5a589f-792a-4c7d-a432-094ea7f18ac2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad056218-7f60-4a46-89d8-bde280b4080f", "sighting_of_ref": "indicator--594396cc-7d8a-43c2-b932-30fcbe2ee679", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b043440-5e7b-4ba9-9c13-d0af3efdb8b1", "sighting_of_ref": "indicator--cd6c675c-ce1a-45c5-b00b-8672c1b72170", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da37d85-cac1-41a8-ad47-4d68f33a10b0", "sighting_of_ref": "indicator--00fa620c-9cdc-4a60-b0c7-0cd71b305263", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ee36fb-8b23-4e6c-abd4-8c67c257c05b", "sighting_of_ref": "indicator--89fee55b-eac3-4d8a-b94f-b188225b2a7b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4177c8aa-8e7f-461e-9ea9-22cff2c8c85e", "sighting_of_ref": "indicator--5483d4de-d01f-445b-8daa-ca594d1f36b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebd40f6-d700-43d2-be58-cfc39e7145fb", "sighting_of_ref": "indicator--67475d19-8eac-4437-b228-398d76164c57", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36aee10-c08e-47e5-8983-5bf0502de1d5", "sighting_of_ref": "indicator--389f5a27-3aae-4c14-9987-ef99c6532ea9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035362fb-4af3-4416-96e0-555690d5559b", "sighting_of_ref": "indicator--adedcaf9-840a-4d89-aaed-504ab69dc2a6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d60dc2-b8ad-4bf3-8549-ad55379a8a4e", "sighting_of_ref": "indicator--30ccfbce-2454-4ee7-8332-9f2dc5c46c5b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e630763-ba40-4f24-8a7e-91c4aef27284", "sighting_of_ref": "indicator--a6375007-baca-4b65-beda-f008795bebdf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406a922c-8048-4d56-8baa-0dcaacc6192d", "sighting_of_ref": "indicator--69891d23-fe29-4718-9f54-2685ddbd8a95", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e094aa-38ba-489c-b775-6e1591bed1bb", "sighting_of_ref": "indicator--3fdd9537-13bf-454b-a4e7-5f6d2146ea92", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3d779b-656f-4bb1-b380-b76ef79707f2", "sighting_of_ref": "indicator--45faff4f-2afa-454a-8254-41cf8e70df32", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dba2a29-713a-4b35-bd19-a28cb78d4a4b", "sighting_of_ref": "indicator--4f9807d2-d31e-49da-9776-2797fb840642", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f41c5b-9fae-4496-a571-212e6e8cf095", "sighting_of_ref": "indicator--b9313e70-6846-4065-a0ee-e76c04cb2ddc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51e3999-6813-4337-8f18-e9969407263a", "sighting_of_ref": "indicator--1369c4bf-fa88-4006-a4b9-d50a86112475", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b75e25-bddc-4202-9086-f0e349331845", "sighting_of_ref": "indicator--e20c984f-f1ae-43ff-89a2-e5b0c4cbddbf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17783d17-03df-4a4c-9a11-da8c5b610c3e", "sighting_of_ref": "indicator--5e483b3c-6c8e-491f-925a-f8ffa39f0941", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96d8d82-b8f2-4eff-bcb8-df60e6ff60cd", "sighting_of_ref": "indicator--a244f730-be7a-4976-8b40-49bf35cf51bf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5605a527-f03b-4ade-b476-675e1682dad6", "sighting_of_ref": "indicator--da23b866-6f95-47c1-9223-c65ba445e84e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740a64ce-90be-48ce-a951-c78605d81b3d", "sighting_of_ref": "indicator--157e7855-9aef-4d49-9b76-013253e279f5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33000e0a-f250-4102-ab69-bebbdbeac76c", "sighting_of_ref": "indicator--94e1c1de-f39c-49a4-9072-d5cf0eaa1822", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53345c73-92cc-412d-9d6d-3409524bc387", "sighting_of_ref": "indicator--94b83583-ab6c-4ab9-b245-6fdae7331255", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa86a7c-94c4-4379-8386-2eeb0a30fbc1", "sighting_of_ref": "indicator--e9a4e0d8-e8eb-4515-a3fe-8498e8c00ca4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9677bd-004a-4fb7-b0dc-d3d85f4d0831", "sighting_of_ref": "indicator--b9b1bc68-d7dd-4879-b2cd-036e3452633b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7a57fe-c532-4b92-9518-73d652764f06", "sighting_of_ref": "indicator--a7189059-437a-4b66-962c-bfbd9f029ae1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bee07d2-80b1-40b4-b685-271348ed978a", "sighting_of_ref": "indicator--ce9c19db-9fd9-4f2f-bd15-717f4b1a78ab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c8755b-68e5-4657-b86b-f2e533b03c77", "sighting_of_ref": "indicator--49b9caae-8987-4994-9e9f-84e3a5138c3d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdab71ce-463e-4c65-91de-d3282f4e0f7b", "sighting_of_ref": "indicator--d16b1f36-28ee-4eeb-8238-8aeea2b3aada", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a42ea34-42fb-4db4-8814-9d24d14427c4", "sighting_of_ref": "indicator--3e999253-4b02-4de6-b066-a469c15a5b48", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567f39b3-6590-4ad6-a467-be624f635bc3", "sighting_of_ref": "indicator--5a904986-ba21-423f-bca0-4502affc5c8a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d839598-4d1c-4e2e-bf00-493087033a69", "sighting_of_ref": "indicator--66a1a79e-4095-48f1-a40b-1a06ae00acd0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46cfb7c2-2aba-4c1c-9fc7-4c1814289f9e", "sighting_of_ref": "indicator--7433f231-6ed6-42bf-9d97-bb051209255e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b201849c-fb2c-4809-b1db-f996483aef54", "sighting_of_ref": "indicator--60f8ebd7-8f9f-43db-8402-b9e70869f238", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e3790b-6fbc-4df1-a431-f14fcd96507d", "sighting_of_ref": "indicator--16cada4c-5e1f-4be7-a19a-e9d48c75258a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27a7fda-ce59-4352-b427-b5087c8a32cf", "sighting_of_ref": "indicator--c30a6c0d-bbb5-40a5-b093-baa4d0ff0365", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6317fa66-9de0-4d55-ab7b-e752887f033d", "sighting_of_ref": "indicator--930db01e-7816-4040-8fe7-6005cb866589", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6540a81-47b7-4697-8c64-1ea686d2789b", "sighting_of_ref": "indicator--1c1997de-fc71-4eae-9a02-529161234f51", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9425dc8a-d114-45c3-83fe-81478ac6ead9", "sighting_of_ref": "indicator--d7120cf8-66ba-4519-a806-ec859543e58a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd986c9a-4df3-4939-82a5-830fbdb44520", "sighting_of_ref": "indicator--30519849-22b5-4b35-9070-815a228aa6de", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0dfe2c7-a2fa-4c71-943a-10a628bcd1eb", "sighting_of_ref": "indicator--509ca33b-c415-4c89-b5a7-1434435d9fe1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8b9ad1-c036-48b1-b483-7cb98fba6028", "sighting_of_ref": "indicator--ef753e7a-0bfc-49f1-8264-45782693f3c5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9929e844-eaba-45d1-a501-1cb5f9685393", "sighting_of_ref": "indicator--9dafa52c-8430-4777-984a-8da86b525151", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6622e29-f1cc-484c-9b8d-b87a65f968e2", "sighting_of_ref": "indicator--1101e39f-6fdb-4909-b745-40df3edca55f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ae923b-93b6-4ef6-8642-e5c13720bb0b", "sighting_of_ref": "indicator--03e3c2e7-5024-4b9b-b8fd-b3c4b4dd3f60", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7788f525-dac0-416a-926b-ba3a4bbd8480", "sighting_of_ref": "indicator--157202c3-1d4f-48ba-86ec-d40e962807b1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fbff6a-a719-47c7-a5d5-3181f946978f", "sighting_of_ref": "indicator--3fec856b-0c07-48cf-9db8-842dd8ef60f1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e174233-5fb6-4bd2-bad7-059268debbf7", "sighting_of_ref": "indicator--32f10ae5-38c5-479e-8df7-66d9a1e0930e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94462119-020b-4b10-ad5b-664aa2e40f7e", "sighting_of_ref": "indicator--066cf4ce-ef49-4170-982f-797f2a0dc2a4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a47445-a940-4a03-b161-99db471d2f69", "sighting_of_ref": "indicator--b202a9dc-0e76-4420-83e9-7f9c1ab547ed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0d5142-4237-4007-9c99-e96211c5e667", "sighting_of_ref": "indicator--7a340647-287b-498b-a96c-7e6821853e6a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49999dbd-313f-4a03-b36e-b455f43b6fe2", "sighting_of_ref": "indicator--20fd8801-b3a8-42d3-9f09-072cb1a37364", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8278195-8c6e-48b8-9e7b-90969870707c", "sighting_of_ref": "indicator--25760874-5562-4c3d-9199-fbc92ad01c8f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523770ab-9fc5-4393-9cad-18d71a344cbf", "sighting_of_ref": "indicator--027e785f-22c3-4f66-899e-96da95380598", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313c9b00-c8bc-4add-ae12-73afadd5aa62", "sighting_of_ref": "indicator--ed3f2798-3bfe-4547-8215-fd334b09d4e4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882952c8-aa54-40c8-88d2-28bb9722ee4d", "sighting_of_ref": "indicator--43294f73-232d-4d2b-a7ef-e70a5a0f42d9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f544814b-757b-41e1-a472-d919b5dfa5b3", "sighting_of_ref": "indicator--d6280fa6-70d4-498b-9e82-4157ddc603f9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769e65d6-1a5c-4bb4-bb9f-d9ffe3fe106f", "sighting_of_ref": "indicator--3d0c0362-3110-4ebf-81c0-2054274c4c10", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc6fb2e-ee96-4cf6-bfe4-f5a3d8ffa581", "sighting_of_ref": "indicator--d9748bed-fc4d-4adb-bc65-20d64d0ace7c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2c31bf-7779-44d1-b7ad-1b35da8c4a4e", "sighting_of_ref": "indicator--dac9ea0f-7ada-4ec5-9ff0-b2ad13142526", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e6fbd3-ce44-46f5-83fd-4fdfbe5b3af1", "sighting_of_ref": "indicator--533dccfe-1732-4b86-a81a-10347b3995fa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45510ac-0997-4fbd-a050-5cc137419c2e", "sighting_of_ref": "indicator--7f9920ad-d591-46bd-8443-71f0a0f34c22", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368e85f9-1281-478c-9ea5-17793827f474", "sighting_of_ref": "indicator--9c22217f-4d50-48e2-bc15-d2dbe1969fd9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475103c4-320e-4d88-bc7d-15ec57cc0c2a", "sighting_of_ref": "indicator--269ff4a6-c569-4713-9f59-4639c217e07e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5026b40-2905-4d91-a124-26821640567e", "sighting_of_ref": "indicator--30f7becd-b526-4337-ba1c-a78dd5ff6b6a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e62d1f-d497-48d5-a6fa-d8a0fd26b7d2", "sighting_of_ref": "indicator--62d7712c-1026-40a9-8df3-1fa9cdc01f05", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256fda91-7564-4da2-be1f-0fc9a89a44ce", "sighting_of_ref": "indicator--b8c53648-f8ee-4a2b-ae2f-acb5baf0ead3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b38ada-62b1-4d58-8909-5ea1a7b1b9fa", "sighting_of_ref": "indicator--dff0e6f3-f3a8-4415-beee-cd92d1895996", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca01d1f-500f-48f3-9d12-40cc5f012179", "sighting_of_ref": "indicator--eafb4279-e296-419b-b058-a8bdd681c2d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ad1772-2b1b-484e-ac98-76767c2c478f", "sighting_of_ref": "indicator--8fd0c55d-574d-4c44-9f24-bcde91a9d507", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef20e14c-56dc-442c-a413-44c9758845f2", "sighting_of_ref": "indicator--a0cbe8cf-6b45-47fc-b1e4-ff46adde10cc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ff3d0d-adc0-4a78-898f-9b2681d3fdda", "sighting_of_ref": "indicator--933e3684-afd0-4192-b479-cf1757759868", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd8e48f-1d9e-4d9d-89ed-8519de3d40f9", "sighting_of_ref": "indicator--4c7c281c-a857-4e44-8a8d-347fea77fd45", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ef44ef-ec31-437e-bd89-afb0d2fb65c9", "sighting_of_ref": "indicator--f145aa67-a3e6-4053-ad79-ed41e2a6e876", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00fd360-fbef-4961-a302-387fad2177a1", "sighting_of_ref": "indicator--f4c6f781-f781-409d-afa4-e8f24c7e5efc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5332cdd8-2ba7-49b1-9bcf-eb239a6eaf80", "sighting_of_ref": "indicator--86a809a0-0ef6-484e-9d3b-34f2f3b01a06", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14527ebc-c517-4add-a694-180599f795d5", "sighting_of_ref": "indicator--15a946fe-d76a-47a3-8ec8-b921f2ce110d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4de77b-1fca-4cf4-a9a7-629dc27166d4", "sighting_of_ref": "indicator--1ee288d8-b12f-4de0-9846-5d6522c1a86f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4042ec-9e6d-4a7f-b538-a784710afdc0", "sighting_of_ref": "indicator--c0b9e048-3245-4f75-8bf0-75ce92c1264a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c664cc9-af71-4d94-804e-24bbebd06754", "sighting_of_ref": "indicator--eb72e7cf-ed4d-410b-a161-640f1cc249b0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6168993-3af8-4d4f-bbfd-e53fb21a5c6d", "sighting_of_ref": "indicator--93642ee6-05d0-4ced-bbfe-80e3fcdd8b28", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8e9d4f-1951-4bd9-bcaf-65ca9fc5b9c9", "sighting_of_ref": "indicator--f58ec6b4-ffc7-4b3c-a542-d4665eb49fef", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7b7461-62ba-4c00-b911-68bb7935ba0d", "sighting_of_ref": "indicator--3c61c1ce-5d4a-440a-8dcb-dc06a45a31c8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05957fd9-6e3b-4321-b22a-88d52010c8c1", "sighting_of_ref": "indicator--cbd6f673-147a-4d8d-aa11-50d86955440b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfca65e-816c-4b3a-b222-651a8d316c2a", "sighting_of_ref": "indicator--6fc5f501-e25c-4989-95ab-9a5269a71ac6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af50cb43-78ae-4034-97f1-e7c10322e789", "sighting_of_ref": "indicator--bbe190a3-8fea-461c-bb01-c286b23aaa50", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d1586b-014b-4453-acde-6502c4239c2d", "sighting_of_ref": "indicator--80b7e2b9-a730-44bb-a970-a522a6de5164", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3788f858-c1ea-4007-b6c2-dd95ce4f0737", "sighting_of_ref": "indicator--3aa566e4-314e-4dca-ad5f-705e3c90de9f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb279080-67a8-4e92-8a79-7f3cabf7354f", "sighting_of_ref": "indicator--8b2e985a-f7ae-4c4f-8957-5b0d6a7e8e15", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b880d51-0b4a-4837-98dd-ff5dd5251252", "sighting_of_ref": "indicator--277c1413-9239-4417-b774-3ac0064aba42", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ffb5c1-228b-4ed7-9e5b-bfa34114446e", "sighting_of_ref": "indicator--aa7cf5a5-3ac2-480b-a89d-9dac48843512", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c125f54-9de4-4703-bdac-3e642655d7c2", "sighting_of_ref": "indicator--7a178a5f-321e-4b34-b024-8724d115b342", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f7dd32-3999-4e04-8ad5-072749c23d89", "sighting_of_ref": "indicator--680b3dec-a164-4827-b5da-9679c39bafae", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed04d6e4-8605-4c6e-ad96-8c5ff603548e", "sighting_of_ref": "indicator--6384e76e-4692-4517-b943-2d063c3f69e9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21f3505-4ff6-433d-a51d-5042341e703d", "sighting_of_ref": "indicator--8add73fe-68c9-478e-8d1b-d9c7eec49243", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1abeba8-2f0e-4772-adf0-d1e42f1670a7", "sighting_of_ref": "indicator--ab866910-c43f-46f2-a83a-ff4c0c1e1e85", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cf92a1-9d9e-4233-acd8-b860e9142f0c", "sighting_of_ref": "indicator--34401c61-2f16-482b-a8b6-e6a23fb0cd2d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bcb83a-ad41-4561-b967-2cf7882cd914", "sighting_of_ref": "indicator--780ce061-c030-47b4-865e-92415afb1953", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7707628-8b5f-472f-a61b-c4d6c1e118bd", "sighting_of_ref": "indicator--3985b6fc-5ea0-47a7-b897-c2e90811764f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e7343b-063c-4924-ad65-d3b02c8c1f2b", "sighting_of_ref": "indicator--6018671d-505c-4c94-9e49-97f25053f711", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85abd884-d1d4-489f-b002-c8bc7554e80f", "sighting_of_ref": "indicator--1f096332-9b0a-491c-b85b-b8eb4a0aa407", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04929a10-ad0a-43ac-9998-908d4b6d7ae5", "sighting_of_ref": "indicator--a0826c27-f21a-4b11-9ae2-1f717dbbd6e8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e10aec5-dafb-46f2-91f0-2b6fd3a3c47d", "sighting_of_ref": "indicator--02a436a0-0079-42f5-9902-2bfae95a5dab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd215b7-7587-4e68-bc76-b863d2bf0e8d", "sighting_of_ref": "indicator--70f7adde-aac4-46c1-9830-5302d6e3177f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75d73c4-1800-463c-a3e2-5dd43b3fec67", "sighting_of_ref": "indicator--bc01c70f-d5b8-4fa2-b131-5f1705f4f91c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d727100-4686-4eb4-acb2-434317f24047", "sighting_of_ref": "indicator--d06651f2-805b-4fae-9cab-8d0ac7debe1b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717ebf48-e924-4720-994e-430ab945d0d5", "sighting_of_ref": "indicator--e3f86c32-5369-4d62-88e3-ade1b00c1248", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b6986f-8078-4b26-811f-0b3a24f36d4a", "sighting_of_ref": "indicator--0f729b41-f05b-4be9-83e3-2751ca2fe8fd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792a5472-c1ed-4e79-8df7-ed4349d8f209", "sighting_of_ref": "indicator--9e0456b3-b46e-464f-a74e-aa03e48c7aec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5657eef4-b870-4adc-85f0-ef4ac4c31a9f", "sighting_of_ref": "indicator--68353934-46b8-48d5-be27-85079eb5752d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0f7b52-1595-4033-88a6-c5af8d6458e2", "sighting_of_ref": "indicator--89fe447e-fbeb-4ea4-a47d-dc1c6be0d175", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67905544-7d45-4297-b81c-2064e37682ec", "sighting_of_ref": "indicator--9bb9b22a-9e4c-47c5-8ffb-edbaadab7f74", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a645554-abd2-426e-b72a-11f2ed573372", "sighting_of_ref": "indicator--3e96160f-b315-490b-96ea-c06ce88d2e52", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7cde51-072b-4583-8a92-f5622f154694", "sighting_of_ref": "indicator--faa8a620-bfb9-4a53-a67d-dffa66951662", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc8985f-5436-4c32-bed8-cea77a6820c5", "sighting_of_ref": "indicator--e22f5243-ac38-4484-b479-cc32afa94fe3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab0f488-2be1-492d-930a-7f1d4c5defe2", "sighting_of_ref": "indicator--0aa07af1-d686-4c62-b94f-80cea37f3113", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04710ec0-4530-454d-811e-20814826c750", "sighting_of_ref": "indicator--85e4172a-26de-4d79-88c4-0c2412dffb42", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffcabaf6-833a-433e-854f-644807d54f15", "sighting_of_ref": "indicator--4d37b116-8f4b-4003-8664-65be89f1e967", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9029cd25-3e4a-4aac-9be3-6c2fcfc0e24c", "sighting_of_ref": "indicator--4668d01a-648a-4a27-81d4-893253137939", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd1e5ef-0d3f-4f47-9074-10e8528a93fd", "sighting_of_ref": "indicator--1819e47c-a307-423a-9845-2af7f4f1aa15", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af88ee3e-610a-4fa0-b835-edf1eb02a614", "sighting_of_ref": "indicator--615f893e-e4af-46dd-ac6e-9fe1cb4eca12", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1998ee-a98e-4a53-9aab-7a885d644bd4", "sighting_of_ref": "indicator--af9fe755-ed1c-4b30-a644-8503880ceadc", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadd2328-5ec1-4d45-af7d-cbeeceb41aaa", "sighting_of_ref": "indicator--b944ab50-600c-4949-84c1-87a9c12c8769", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c99dd4e-5170-4877-946f-9bfc9800f412", "sighting_of_ref": "indicator--91f19343-4cd7-4520-8a0b-591d75924004", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6efde70-66d1-4a8d-87c1-01a78d87c83c", "sighting_of_ref": "indicator--1c4135df-b825-4552-bc29-aa28c781222d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f711f8ed-1cc0-4983-b295-879a294be4f6", "sighting_of_ref": "indicator--5f9f4310-8392-46fa-9a88-a89b80442bd6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77ed672-a199-4837-9e5b-8842f3024441", "sighting_of_ref": "indicator--58358401-e403-4bec-a509-fec5a51415c8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755e7b86-541a-47de-b615-97ec6e580cab", "sighting_of_ref": "indicator--4c82ff60-8eab-4959-af4a-0358b3efaa78", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef40fb6f-ec2f-4c44-83e8-ad02e0d0c077", "sighting_of_ref": "indicator--49a1d934-3e2c-49d0-9e6f-8736a898de74", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef1427b-14c4-486e-8ad1-248b7cc47c90", "sighting_of_ref": "indicator--a63bc02a-2249-45dd-83ed-0f885859b69e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31480d98-bf77-4799-805e-a9f2bced184c", "sighting_of_ref": "indicator--a8a19a03-47b8-4b2a-b988-f170f8fb3093", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63eff205-9ccd-4aac-827a-ad64b917fd1c", "sighting_of_ref": "indicator--20af483d-d11d-4287-8676-fe0f541f8133", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc1d205-beb7-4474-b220-3812c5c22531", "sighting_of_ref": "indicator--d1f02371-20a6-4305-a739-a51c90a5c420", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800f64f1-64fa-4bbb-ac7c-8fea6923fb50", "sighting_of_ref": "indicator--dddbba66-680d-4a29-adcd-bff691f1f6f7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec36f183-d2d9-4e70-9b3a-16a4d39a0eb0", "sighting_of_ref": "indicator--7da7c4bd-7f37-4d9f-9ace-b3254e2473c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90767d8-18ef-47a1-a23f-4cd74bd7ee0a", "sighting_of_ref": "indicator--b7d0b0d1-89a7-4f3d-8e1d-99a8ec1af009", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9797a142-1e28-4bb4-8bc2-cd1b5291ca08", "sighting_of_ref": "indicator--97d4b83a-5074-41c8-93e6-69b36ac32157", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebb2e10-ad78-43e7-ba40-1ca6fa2b253f", "sighting_of_ref": "indicator--ca876a2b-1b71-4045-aa28-ca35492183c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ee811c-5e11-4b77-8f2d-1b9d8250e43d", "sighting_of_ref": "indicator--8a07c4ee-e802-496b-b834-1ad0763ca6b2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ae6406-71cb-4f68-a813-1c4d6e44ca31", "sighting_of_ref": "indicator--a979e546-2b53-4ef1-878e-5bb91a8ca14a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8571e407-30c2-4f6a-a74f-e43c1ce13630", "sighting_of_ref": "indicator--6ef00bab-c218-469d-8753-f45397fd17e6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68533ad3-d84e-4326-84df-e405a3f5b31e", "sighting_of_ref": "indicator--8cbb25e3-0e4f-46a8-948d-e06c2e1bbff7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afdf25d-6326-45cc-8a27-1c6bab897ca4", "sighting_of_ref": "indicator--e6709998-1291-4b58-952f-aeaec9dbb73c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c71bee2-8ef5-43b0-94d6-6f897705f4c9", "sighting_of_ref": "indicator--04965d84-2551-4d6f-a83d-4db1cc2c6cd4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c820d7-e8c3-4779-833e-a9135858da6f", "sighting_of_ref": "indicator--2f3150f4-4491-4186-8cf4-1a090be3d230", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605300e6-ecf5-4fd8-8649-7f8ecb55ea8d", "sighting_of_ref": "indicator--db41b25b-f42a-4fa5-9d84-d4d987149cd5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d80daef-b72e-4421-9d7d-0f969106d4ed", "sighting_of_ref": "indicator--68664033-ac2e-4ded-b454-9777d982e8a1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96c41d3-d1ad-4228-a7fc-402bedcda3c1", "sighting_of_ref": "indicator--0197425b-3df3-4d94-93b3-f783cc0e7910", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc53642-4a4d-47e3-8165-3c7ec6ba78bd", "sighting_of_ref": "indicator--5cb8031b-4289-40a6-8dbe-efad2f826a97", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286f57fa-bc46-4775-b3d5-febe7c385168", "sighting_of_ref": "indicator--4d06f590-a747-4e17-b082-fac159fe45e1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e3020c-b861-4c47-b81f-2acbb4a8a733", "sighting_of_ref": "indicator--b461f9ec-6e97-4f6e-86ca-fdb8278e3016", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86ffa14-88f7-41d0-b26e-8989583f6305", "sighting_of_ref": "indicator--963b1b4b-7bfa-4940-bd0d-64ced3a27435", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209e5fdf-fcb4-40ea-9f1c-79bc641e5062", "sighting_of_ref": "indicator--7cb1f70e-7ce7-484b-9942-f836fa55a60e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b720cd-dcb1-4bce-8813-b124ba3eea3c", "sighting_of_ref": "indicator--8de0d1d5-caa8-4b6a-9487-f3ebce7cff12", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b19a02-b6a3-401f-96dc-463f2533becf", "sighting_of_ref": "indicator--dd530d0a-1c47-4c20-8890-d8ff375b846d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2e7cf5-cecd-4c65-830a-5f6bb0d29ee5", "sighting_of_ref": "indicator--a6d920c2-29aa-4af8-8cdb-881ac887da52", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267d8c00-d738-4b1c-909c-4ab3f0719f8a", "sighting_of_ref": "indicator--6fb9db4a-a3aa-4917-9452-31719bb34944", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81d8e8f-8eed-41b7-87c3-58d2a7bac0b6", "sighting_of_ref": "indicator--e7f11efa-24c6-482e-bf82-c399912b7f83", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829ff8db-f154-47d3-9870-db72fe78689c", "sighting_of_ref": "indicator--d81ce88f-668f-4c3f-88fb-79f7134b9e0c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43842bf8-2db2-4547-a4fa-4d163af57faf", "sighting_of_ref": "indicator--3fc05e43-f796-4d50-837b-8e844d8e1f2b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d362ad6a-b385-4ec8-9027-e62ccc98b42d", "sighting_of_ref": "indicator--ba67d7d2-5605-43ed-ac75-3a4f770a699e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25c7ab6-39d9-49d2-a359-b3468e260ccc", "sighting_of_ref": "indicator--dcefcec2-dd6c-4fe2-88e7-b9f2317766c6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f1f5d3-6ff0-4a57-a0a5-c878836ec59e", "sighting_of_ref": "indicator--c40dda4b-6a3d-4e5f-b4ff-3a8666911122", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5e55e9-c5e9-4c75-86fb-e0f7beaba7c3", "sighting_of_ref": "indicator--39a914a2-a0ef-4404-995e-255ffee25b3f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e8d996-102f-4cd0-a53a-1d85460ce310", "sighting_of_ref": "indicator--ecab68c0-a74a-4107-a1e5-d4f59657c803", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c733db20-3f9f-486d-96fb-e203ae78bfbb", "sighting_of_ref": "indicator--2dab65bd-0a76-4e20-b96a-6a5757f2e4f3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f263fc-df4c-477d-b8f0-f847567bf2b8", "sighting_of_ref": "indicator--2b1e0239-5fe7-4685-af09-0c44874aa492", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6d4f03-1a0f-4a4b-901e-07f3a2d81cea", "sighting_of_ref": "indicator--0400d1b6-881a-49b4-b255-81cb01175df8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f95e68-76dd-441a-ad8b-76a5a79e4a10", "sighting_of_ref": "indicator--20f85820-d6d3-4b4b-b6ac-887ce2c80716", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18171db7-ee57-4ca8-928b-404e7e30ed87", "sighting_of_ref": "indicator--fe528d26-1c2a-4759-9bb3-fe81186f7668", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3b9ffb-2ba2-4311-bed9-5f980240488a", "sighting_of_ref": "indicator--062f4ca1-6091-4352-95db-8bb416b5c4d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f7d496-fab3-445b-895c-1c5e28db4150", "sighting_of_ref": "indicator--540a1e39-87cd-49b1-90b3-f455da12defa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356914fe-b188-4b4c-83ec-5d8e7fc704a5", "sighting_of_ref": "indicator--d8000569-e113-43ac-a0f1-1944691e9b0c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b6b498-f218-43a2-81b5-67be04427355", "sighting_of_ref": "indicator--df2c7d82-c26c-4268-bf55-a983244957ad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e94401-4c90-4f42-875d-3f8664ff8273", "sighting_of_ref": "indicator--274aed65-1876-45ee-9bdf-6bcbf576a86f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c14239a-8be8-408e-b112-22aab308818e", "sighting_of_ref": "indicator--72647c9d-0ec2-471f-8f30-373fd642a819", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f35cd8-f90e-4831-9e85-3ae519dba659", "sighting_of_ref": "indicator--6fd78733-658e-4aa8-be02-4dc6e72ca62e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488f9dd1-2c97-4fe4-8315-f06d2ebd3556", "sighting_of_ref": "indicator--504d7bbc-16e0-41e0-bc41-8d5292311082", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dba47ee-4120-4c6c-bb6c-5e8ce8e46b43", "sighting_of_ref": "indicator--472a4b7f-3188-42f7-8a5b-1626fe10a7c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e3f5a9-c507-4f0c-b91d-f66d5c8fa1c5", "sighting_of_ref": "indicator--3ad2ea28-580e-4180-b043-3dec00f52fa3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ade9fe-34b5-4dfd-8b91-c9f362237879", "sighting_of_ref": "indicator--4dd6bc50-b683-44f4-9a47-9899803c49e0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36c0cc1-eb17-44bd-a8b8-a5e0c68390b2", "sighting_of_ref": "indicator--737c96a4-05c1-48c2-9f1f-1c41f09ffb48", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b194645-9f4d-4c73-b066-3e0b4b7e312d", "sighting_of_ref": "indicator--1f403580-1786-4164-9800-bbe3e1d89965", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ca0301-abe6-4898-a07a-f739cd70916d", "sighting_of_ref": "indicator--df141132-7462-4dfe-95b3-e4cb83bc3065", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0faff6e-e89f-4fb2-847e-5d4e9b3643df", "sighting_of_ref": "indicator--621119ac-b3d0-48d1-af94-4dbcf8b70222", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f61072c-f98c-40e0-81eb-29ac0046af2f", "sighting_of_ref": "indicator--c8ebc29b-a0a6-4625-ba7f-96a100b7b324", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac7bdd9-b590-4963-8a21-a65d2432938a", "sighting_of_ref": "indicator--a1d950ee-af32-4909-b645-d283a6fcfc41", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3dc337-2aab-4433-bf3e-804cd1a241f8", "sighting_of_ref": "indicator--ab4c14d6-d9ae-4d32-9708-1e54f504554e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e427e6-7bc0-425f-8b5d-2ae2c72d0399", "sighting_of_ref": "indicator--8ac187a6-734a-4366-88d3-36cf2777c419", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1174d3-8337-404b-a57b-d2b18fa4c8a3", "sighting_of_ref": "indicator--ebda8893-82f7-43fe-8677-1dccdab7e2ab", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df93df7-ce71-48f0-ace2-dd1fead1379b", "sighting_of_ref": "indicator--db8f9535-4622-4074-8826-33bc253f1b02", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5accea3c-0f49-45f3-a8d8-c16594aa1534", "sighting_of_ref": "indicator--38b68e9d-a5b8-4400-9245-9807406a820f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7db0735-b971-43e4-95cc-cec1bdbcd75a", "sighting_of_ref": "indicator--944c0ca1-4c34-463c-a062-3df84d713e05", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205883cc-8220-4b57-a574-91fb1959e698", "sighting_of_ref": "indicator--9116edc0-1de6-4756-94c8-7fae58119200", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1639b2-1414-4f86-8654-d965c531f36e", "sighting_of_ref": "indicator--61658d44-5376-476e-bb6d-b819ce5ef860", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86dffaaf-8cb5-4bd8-968d-e2e3696824d1", "sighting_of_ref": "indicator--c15d41b6-8d71-4a9c-bf43-83ae407b4557", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50238007-5da0-4569-8612-e8beec166b4d", "sighting_of_ref": "indicator--93f78802-1386-4b8c-9d48-f035253280d6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bdc161-41bb-4af3-867a-a933d1b45aa7", "sighting_of_ref": "indicator--1a7d81b7-3900-401b-a069-3775cc748d1b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18f3955-6811-407b-802f-ce551a7ebc62", "sighting_of_ref": "indicator--b66166a5-36ba-4255-9bef-3556e1ac8ac1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59e4a63-b2cc-42c2-911e-3ad4557c43af", "sighting_of_ref": "indicator--07ca5319-fc31-44df-88ea-2d23e8377bbe", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fcc3c4-e56c-477c-bfa8-f4401712d21b", "sighting_of_ref": "indicator--7acfefba-9604-4fbb-ae5d-acb3ec5fd698", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e0b3ca-5796-46c0-a58a-50c33decf2aa", "sighting_of_ref": "indicator--063519ef-69bc-4a06-b50a-f883782e82b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e1df04-8cc1-48a3-9ffc-03e54290cc30", "sighting_of_ref": "indicator--be765ea5-e85e-4fcd-877d-9bfa568f694c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d730c1-d9ae-4b34-984a-b30f13c1df99", "sighting_of_ref": "indicator--41c78a1e-ba3a-4ea1-8a65-d241abf509aa", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38156e96-bc26-4587-b3a3-31389fd5ed5a", "sighting_of_ref": "indicator--aa2c1a52-4a4f-4b68-856b-350f753b48ee", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8249752f-cfd4-4e45-8275-e5951bb469a3", "sighting_of_ref": "indicator--21d99905-c407-45b6-9123-78f306e474b8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223d0ddc-34e8-4ae5-9a69-044a08a991e3", "sighting_of_ref": "indicator--35b68339-9490-45e3-b3d2-0c6b048ca185", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75222f11-b108-48e5-809a-4b970ed9740c", "sighting_of_ref": "indicator--56ad128f-c003-46df-8e80-7fa5237ee238", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01581b05-7583-425e-a51b-998b7545a4ba", "sighting_of_ref": "indicator--f9b31f01-7dfb-489a-89a6-8664a6fbcf71", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4014bd29-f3e0-4123-ae48-6295b2e02634", "sighting_of_ref": "indicator--b4fb9669-c277-42ea-aec3-2c3b48512077", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a7c4ba-a4e1-41d9-89eb-81a586d74be6", "sighting_of_ref": "indicator--42e56998-edb2-4dbe-a3cc-890cff1da1f9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4647ac00-2b86-48b8-b622-d6c0d374c1f0", "sighting_of_ref": "indicator--8ebd628b-fbc7-49fa-b49d-236c8ceed063", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869405a0-b9d0-41f5-8993-791d3bcebc69", "sighting_of_ref": "indicator--063eede3-48b4-41cf-88d4-3d9914747c56", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5a5c92-cb38-4b47-9a47-6efc866d4dd2", "sighting_of_ref": "indicator--8d4ec864-6f31-4cdd-addf-bd0c16786275", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfeda627-84c7-47fe-8e96-364e84c28538", "sighting_of_ref": "indicator--9c76763d-8143-42ce-a68d-aa414ab134c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b93a8d-8f52-4b83-ab3f-8840b234420e", "sighting_of_ref": "indicator--9242a08f-215e-4eaa-9f5b-1b50678b5071", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02896d4-e39b-4e6f-bcc6-0f76af22c177", "sighting_of_ref": "indicator--71ec5434-a598-4f6e-a80e-f2460d8e655e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982c16cd-ef6a-4450-a5e2-9025ad2c91cb", "sighting_of_ref": "indicator--c22c1854-016d-49b7-83d0-28dd4af294ad", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0f9726-ecb5-4f46-94c1-6404cacabede", "sighting_of_ref": "indicator--1168cd18-d054-4826-9566-c05a301da04f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5e6db6-7bdb-4955-94f5-8a15aed67a59", "sighting_of_ref": "indicator--aec42f0e-0733-4ff0-bb0e-d72a271e5272", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b00c1cf-e2c2-401f-a473-d65966ec1ebb", "sighting_of_ref": "indicator--0f4928ed-396a-4c7c-919a-4064332df41b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9571ef72-f66a-41a2-894e-382711a02cfd", "sighting_of_ref": "indicator--ff568a83-d2d8-4b39-854c-de7c2e84e9f4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167515ce-2eb7-4db0-9b7a-86db4e20dee3", "sighting_of_ref": "indicator--c5a3a82c-e2ea-453e-819e-d9790e4cae4f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9906a29b-09fa-4893-873a-eae510604cc0", "sighting_of_ref": "indicator--e44bcd21-a461-4df8-b71d-824823533e34", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ad49c8-9723-47c3-a502-37ca36e55b3e", "sighting_of_ref": "indicator--ad2d2054-cc86-415c-9206-5721a08365e8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28cf835-4fde-477d-a030-c887152b2124", "sighting_of_ref": "indicator--2f6a25ed-f638-428d-a46c-ecdfb978771d", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1c5cdf-e720-4513-b43c-3086ba1e8823", "sighting_of_ref": "indicator--21bf37ca-32ce-447e-8a2f-b6059ebd9662", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05e9489-4fbf-41d6-96d7-7f393f124309", "sighting_of_ref": "indicator--0710fb7a-351d-4801-b1d5-449b7d17d0c0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd96644-8505-420f-ae24-0b62a587b030", "sighting_of_ref": "indicator--8b3fde3f-0f71-4636-8c86-84a14d21e5b6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24815d2d-2f40-4c1f-b46f-06cc767623df", "sighting_of_ref": "indicator--92dae7f5-c291-49e5-b986-b3cceda6d539", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb44be2-20e9-4d91-bb66-bcf85a601637", "sighting_of_ref": "indicator--b4c96f7a-8ee1-40a4-8e26-3bc50168a9b7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d323ef-af82-4fa8-bfa9-43a1cab0e543", "sighting_of_ref": "indicator--d219f16a-ccb7-4b52-98e9-5393fb94ed31", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133e0799-9da5-425a-90b1-919a7f6c04cc", "sighting_of_ref": "indicator--e80abeb5-158e-47e6-8385-653bba92000c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4dc0a44-fbbd-40e0-bf93-32f9932efe1a", "sighting_of_ref": "indicator--44727e73-e96c-4f0f-aae7-ab6ec2681dec", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc82cfcc-1f05-4170-9601-1fe33ed85fdc", "sighting_of_ref": "indicator--8440b68f-413c-4255-8332-908340791a54", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbdfd56-56c7-49a1-940d-f851a84b09d8", "sighting_of_ref": "indicator--80581b1f-1cb8-496c-9e01-786243b0e912", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f036c5-ac42-419f-8b92-c34ac3061a02", "sighting_of_ref": "indicator--679579dd-8dcc-45b8-b1e3-e53c297be348", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8484b6d-de17-4249-b4ec-00c21e30791e", "sighting_of_ref": "indicator--bf66895c-cebf-4194-91c4-9480ea3a9b20", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5772d5-4f0f-40cf-9554-5d4e40b30abc", "sighting_of_ref": "indicator--d8c452b6-afd1-48be-b443-d0cf5d548b8c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55ee1ef-99ff-4f7a-b56d-bc482e820509", "sighting_of_ref": "indicator--4c427d4c-533e-4a39-9e82-f309c3502f37", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65eba1df-417a-44a1-8ada-4a12efcb82d1", "sighting_of_ref": "indicator--7b8cec1a-b807-4637-97d6-015dc72fbec5", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c61265-6989-4a30-bdc4-2245d61ac6e3", "sighting_of_ref": "indicator--7d557e01-1ba5-48b5-86f3-81a424caa9ce", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6cddefc-a6b0-40fb-bd45-fe6e9d1e77dc", "sighting_of_ref": "indicator--d8007430-3777-4904-8ff9-f4fc9aefb8ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5149f6c-64a1-45a6-a884-77ce25530387", "sighting_of_ref": "indicator--fe0618f0-fdeb-4509-acc1-b2a5902706c8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5504e38f-859d-4578-9195-f36768681e35", "sighting_of_ref": "indicator--37d28d74-85d6-4e2b-bc7c-11cd17ad59b6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83d7240-e8b4-473b-84be-ffcdfb969c41", "sighting_of_ref": "indicator--0516675d-542d-4558-bd40-4d2279c55119", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0551fde7-f5aa-452e-9aaf-1298ec0419e3", "sighting_of_ref": "indicator--3e6ea525-0ad6-40c8-a36b-cca3f2045f9f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940ab775-d77c-41db-a4b1-48359bdbcc87", "sighting_of_ref": "indicator--14f0ac4c-4da6-4914-b613-e7cc04541427", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c8b89e-081f-4dcd-bdd1-fcd32fd0de55", "sighting_of_ref": "indicator--c2d0bc93-c6a6-455f-aa61-ff24598892c7", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ebfdac-e089-4d05-af9f-0faa7f2d18bf", "sighting_of_ref": "indicator--c07af8e2-6579-43c6-a6ef-6554ea2994a6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ea24b9-b5c5-438c-965e-6e6cb7596a0b", "sighting_of_ref": "indicator--91335793-f784-42b7-8c10-d26ba4a52d13", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f436d3c8-b218-4169-a1c3-fd3f8ebb14d0", "sighting_of_ref": "indicator--adbab5e4-8ddf-40fe-adaf-1387146b51f8", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcaad32-decc-474d-bf5d-eff9e2d898d1", "sighting_of_ref": "indicator--a6f4fe74-33dd-4d42-9c6e-2d26c85d2999", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee2b162-5c7d-40fd-b0dc-9c95ad1b5299", "sighting_of_ref": "indicator--7bd8ebf9-0945-4929-a089-a6265a0d5ab6", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5ca6a5-8937-41dc-a5e0-d5cec6f1cf80", "sighting_of_ref": "indicator--e28f9642-5d4e-4b96-9251-291a98de52b3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c5c5bb-6ffb-442b-8685-6d602eec8f7c", "sighting_of_ref": "indicator--a31e2b76-1ef3-4a5f-9094-5bb79a368569", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8923895-e249-447c-b35e-b9a673d2c16c", "sighting_of_ref": "indicator--0559108f-947b-4805-bc9d-822af80a6244", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477b5939-35be-4767-a413-767ec7adeb53", "sighting_of_ref": "indicator--e7b9e0ff-709a-4ee1-b783-0fdd2cfd48b3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a486ba8f-90b3-486a-9e17-b7187798741b", "sighting_of_ref": "indicator--b555fec0-2eac-49de-956b-7b715101613f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8415dd-0a7b-4cf2-8244-05d96805ad88", "sighting_of_ref": "indicator--d764115d-2681-4b31-a79e-4e694703cd95", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a982d9-4b11-44b0-b101-0adb3ecc7ee2", "sighting_of_ref": "indicator--ae5c354e-70a6-457c-92cb-2a533c07d911", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ff6e19-4804-4bfb-ac97-644cc6e9b553", "sighting_of_ref": "indicator--00e3dfd1-a138-4b14-8f80-ec7493dd06dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e899afaf-7f85-47cc-baea-761de93a3a77", "sighting_of_ref": "indicator--1b1c3fb0-6449-45e7-a14a-0247e3c7af8b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dbec1a-0584-45b6-9c5c-0186e6f52040", "sighting_of_ref": "indicator--4c1a2f75-2e2f-4cfd-9a16-e98092d6e462", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3af04b-d545-48c0-a082-9a29e56315ae", "sighting_of_ref": "indicator--fdb6a36a-f994-4581-99f8-3a7cbeddbd94", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413115f9-d28d-48d3-961c-ef0d252b832c", "sighting_of_ref": "indicator--b9bf12fe-22d6-4981-956c-9878feafd613", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ef232e-b306-4b40-a60e-cde5cb67d27f", "sighting_of_ref": "indicator--a18dac20-5409-4b82-b36a-2a1ab1dd10dd", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785cb597-7318-4b8a-b765-96f774532a6f", "sighting_of_ref": "indicator--3c7b92fc-a168-401c-a190-f6e4aa8a1e71", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32f796d-f4f9-4ec3-ac64-7aebfa02c904", "sighting_of_ref": "indicator--36a2d4b9-3330-4434-a02b-d5b8233616ff", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07455a2-49f1-4870-a85e-10b0ed86c248", "sighting_of_ref": "indicator--14596c19-d295-4407-8c13-31a2fbe73a85", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33186b7c-2182-4162-8bc2-038cbc47b17a", "sighting_of_ref": "indicator--67ae2821-dfd9-44c0-999a-d06474d1c25b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ceebe7-a208-46a1-ac45-fa2090ee28b1", "sighting_of_ref": "indicator--9ab11ec0-52cf-404c-b6bd-68ffd09b6f5b", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a25ef80-0f71-4c22-ad49-04f7a491fb37", "sighting_of_ref": "indicator--cbaacd08-ef77-45c7-b7aa-0e6fb94c57ed", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b3f73e-22ed-4f4d-9a63-0f8a3094df40", "sighting_of_ref": "indicator--24d162ae-5289-4055-aac1-aca4fc8d3236", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83efd2cf-3f40-47e2-8dca-f2b0ccfabf3d", "sighting_of_ref": "indicator--48f3a828-e101-4777-b587-b41de07cbe2f", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06747dc5-0374-493d-a7db-10888de65d2a", "sighting_of_ref": "indicator--fcb568fd-ab81-4b86-a2b3-8ebd8df2c27e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03173761-0d7d-4285-b8cd-b723d43c4feb", "sighting_of_ref": "indicator--d701ffe4-b867-4d98-b3a3-fc76f076eb10", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88a14d1-ea17-4456-9d12-a47499de3ef8", "sighting_of_ref": "indicator--2ee47285-797f-48de-b50f-244ede431c94", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea066a7-1062-4eb6-a1e5-249cfde1e6a2", "sighting_of_ref": "indicator--a6eea521-01fc-4eff-9a35-e6ae56461711", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88d4f2e-8f9b-441e-85b9-06f9fea0ebf8", "sighting_of_ref": "indicator--75b6a717-acb3-4cd5-a229-a6cc26f84b2a", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f4a90d-c207-4fea-b36d-defc3c7bc1ce", "sighting_of_ref": "indicator--d9f7385f-e926-4bbd-a1a3-2f11ba2a9da3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8170129-d550-4f7a-a9a6-57516093ccb3", "sighting_of_ref": "indicator--430bdecb-29b3-42b3-b6f8-33f634901db9", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701c83f1-045b-483c-9aad-5f286551358a", "sighting_of_ref": "indicator--8a75e9c1-ab22-4b5a-b24c-e616cb98167c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e161a9-df63-4b87-a866-88610856175b", "sighting_of_ref": "indicator--f1243cab-8a24-4cf2-a5c3-49d866d7aadf", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7235d66-8fa3-4333-a8f8-d08a7b8f9378", "sighting_of_ref": "indicator--9abfcbba-add1-4603-b58f-e6d5e2a4109e", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c8323f-2a97-4dd8-af93-3df445168179", "sighting_of_ref": "indicator--3b3056c7-ff60-499d-ab43-e3a248831ead", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5558ea95-480f-492b-889b-281dfa910808", "sighting_of_ref": "indicator--02f93931-723e-447e-9ee1-0f1edd6c7b82", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7395a2e7-bac0-45a8-9c6e-34c9478fc5ca", "sighting_of_ref": "indicator--c7bede41-e7a1-4456-8b6a-7d8bf8e86d7c", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19f0013-92a0-47d6-9274-4d668e90fbbc", "sighting_of_ref": "indicator--a426e807-6d7b-4d19-aaeb-485643bae8ac", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac56e2a6-4f21-4e38-b4d7-a99d9e4a6e21", "sighting_of_ref": "indicator--e5d57be6-e4b6-4aaf-8ae4-3ee77dbf0e45", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae01c9d-7116-4a37-aa09-7d610b32c3f5", "sighting_of_ref": "indicator--43c9f491-68f8-45ab-922f-d5f70e58f2a2", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5439e427-eedf-4349-970e-54b40b9f0f18", "sighting_of_ref": "indicator--29820acc-e268-463d-8f4c-ac219d7f9462", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47074cfb-95f3-4172-9353-9b00e1a2faca", "sighting_of_ref": "indicator--b84c1d33-1cf4-43df-a608-044c5dd40fb4", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b3d07c-2cfd-474b-8c59-0853e589a814", "sighting_of_ref": "indicator--f569d7f7-d8aa-428c-9c18-df123513b3e3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583bcd20-34a5-4551-bf44-df439ac7244d", "sighting_of_ref": "indicator--563782a3-b7cd-4e07-b3eb-a235289dbff1", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c59c0fb-8510-4685-ae4d-2482fc66d188", "sighting_of_ref": "indicator--cf7dcc4e-7564-4866-98f2-70b4c32948d3", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264407fa-b677-4917-ae72-ea68f2597377", "sighting_of_ref": "indicator--9d460bae-076d-4156-9c43-fbc436015ba0", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49025f3c-9f1c-48bc-a81f-9638829af28f", "sighting_of_ref": "indicator--5b427584-17f1-46dc-b6e8-84bf3dce8089", "where_sighted_refs": ["location--302587c8-5d95-4f5a-bc90-428354ae1d06"], "first_seen": "2026-06-16T00:00:00.000Z", "last_seen": "2026-06-16T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--ecba1f1f-af6b-4d08-a57b-432b5a48970a", "name": "Threat Report for 2026-06-16", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-06-17T11:00:01.806Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--302587c8-5d95-4f5a-bc90-428354ae1d06", "location--8bf68ed4-b7fa-4afa-a379-2812c0aed5c1", "location--54ddff5c-a2b6-491d-829e-613f058ff4b4", "location--96b451f6-0b69-4bbc-9b61-93360a496a21", "infrastructure--c47f15aa-fd5b-42ef-b228-777b96438760", "infrastructure--d0c0e47f-76e2-44e1-afb1-3de17f4213a7", "relationship--746be285-3146-4d61-96ec-cbaa426a537b", "infrastructure--3d01cc85-3cac-4a33-b631-09b8d7cca864", "relationship--7705169f-c56f-4bd6-9b84-1faac64c8c0e", "infrastructure--8ab8b4ed-a2d9-44ff-9018-e6c0494e2fec", "infrastructure--6d8702af-e767-457f-9ad7-2d7a51586f50", "relationship--b4fd9506-fcac-42db-beaf-3aff8156f953", "infrastructure--70319363-2219-40cc-a0a0-63789497bb84", "relationship--bc472419-48f4-44e6-ad2c-2125b305d61b", "vulnerability--8b5b2b1f-fb27-486b-9fac-e36c38c998bf", "vulnerability--be10e45c-5e3e-4783-a578-e8cf127b8e61", "vulnerability--5f14d94e-a9d4-41a5-a46a-9cbbcd04ac20", "vulnerability--dbe0c875-a6ca-4a1e-9389-d09f6fdd66c9", "vulnerability--14747ef6-d470-4d66-a18d-42ccd89ca08f", "indicator--41e3ea8e-9aa2-4c44-a85a-40166b0c2f62", "indicator--8c8f9050-916c-42f8-bc6a-362fdeb84d1e", "indicator--7efb33f2-8a5a-40ee-b613-2ad9ce6ad996", "indicator--30f4f9ba-4e47-445b-b6a4-a75316ca7f04", "indicator--73124879-7167-4916-952f-fc70cce919cf", "indicator--5b89f651-80f9-4c5a-a30f-a9d229ff6932", "indicator--cbe93c92-5830-4421-9fac-9932a80bbda3", "indicator--a92eae88-7492-4f6d-89ab-b677d20beaec", "indicator--db626187-7ef0-48c3-81c7-6cb45b4ea1a2", "indicator--48593fd3-73cb-420d-b6bc-c58a0d56b873", "indicator--bb4ed264-4462-4e45-adc4-652129b83b48", "indicator--c752ec58-a75f-46ed-b45e-914afc5dee84", "indicator--82885440-fceb-43f5-acd2-dcd573b54368", "indicator--36271ef1-c17c-48c4-9a5c-ddb8fb452022", "indicator--6510502e-4400-4514-99d4-a4192179c2bc", "indicator--62b20ff7-a746-4877-93e1-f78742035bd3", "indicator--6a99e74e-0210-4b47-a48b-39ea4b740e6b", "indicator--449a21ed-981e-4d61-a0ae-172fb12b8619", "indicator--fe0f9c23-ff3b-4402-a420-494deb83ea31", "indicator--114aac2f-3733-4e4c-9d05-5c10e752f963", "indicator--b71dfdbb-c842-41d2-a978-d1715e9bf38c", "indicator--a2e1cdf5-3884-44be-98ae-594f1a036b56", "indicator--103abb78-3712-4cdd-aa7c-d44d15c2a27d", "indicator--980f6045-9b76-499f-a621-9364743e580d", "indicator--ff48b370-df68-4c57-84ca-7fa56f13dff1", "indicator--cb7d9810-dfdc-4bf1-afdc-7a9374d6541d", "indicator--5d965ec0-6d1c-4dca-aa9a-4560a9e4236d", "indicator--df0dc8a4-971e-4f31-85b6-bc17c9bfa2dc", "indicator--a62760b8-3b41-47d6-97a8-dbddf0b592b0", "indicator--136d6487-fdfa-411b-b331-e5f8ade81e9c", "indicator--45ffeb10-2163-4931-8169-bd4538190489", "indicator--117c8b3d-ff96-41d7-baa4-96dd6bfedb43", "indicator--c5cb7ab7-fc24-47a4-b49f-32769ae3e4c7", "indicator--56f7ab73-0f01-4759-aa15-b7a2d2ef350d", "indicator--75371e3b-65e5-4998-9e10-4d559dea18f3", "indicator--a2cf8322-fe81-4a01-8cec-c94a4acaf578", "indicator--6037e657-e2e7-4ed5-84ff-d5e41a6ac6d7", "indicator--ad273149-86aa-4093-a098-7cd0b1aace6e", "indicator--df46f5a2-a25c-46cd-a99f-0c9411ec847b", "indicator--6f3d1251-35ab-4493-800d-bda8fb300725", "indicator--fb95e1ef-91a2-4c73-a8d5-636cab290118", "indicator--7a1a8718-6be1-44db-83c0-91076f61e7f4", "indicator--13d319a4-c8e0-4f5e-8a4e-946b37126314", "indicator--982c7003-6f7e-49fd-a11f-e01be3e27f1c", "indicator--43a373b1-16ce-4386-9e22-031e43ac79c1", "indicator--5528ea5b-3e89-4e7c-9e62-e858552043d3", "indicator--b6829aad-bd34-4999-a56a-55bf01f575a4", "indicator--ba60b218-4eb9-451b-8b1e-54cc7aca5709", "indicator--7ce3abc1-8294-4411-a8db-48a22330d04a", "indicator--0c4addac-33f9-457d-b3e2-4320625e70e1", "indicator--f61fda30-e41d-46de-a34e-d13468d8f004", "indicator--ff1b46a7-c63b-44ca-8d64-0b699af2fef7", "indicator--8275e747-d3c1-4d32-90c3-01c2ae16e3b7", "indicator--9d9651a3-005c-490b-8505-96428c302775", "indicator--9360bd3b-d7c9-4022-a059-a3a11d377b41", "indicator--1b7fedb5-d436-4bb2-84c0-5c4f49fe81da", "indicator--ddf57ea1-3273-45d8-b944-58ab1b936870", "indicator--7a640873-55df-4f10-beff-962762cf6154", "indicator--de1373f2-c9bf-4436-b18f-04ac9a4fa99b", "indicator--52d2c1d4-8f45-42b0-8dd6-b6c18809f5b1", "indicator--9c44d00b-c1a5-4b8e-88e5-be4ee86df109", "indicator--a7fcbca7-0041-4481-af74-3d6605fe56b1", "indicator--7011c14c-289c-4c27-99bc-1128ae313369", "indicator--7efc3b5c-af28-47a1-a4f5-317b54e8539e", "indicator--f284d55c-1c32-45df-87f5-137f204c291d", "indicator--f5c3ccaf-ba94-4d92-8191-3a1c7cd87984", "indicator--c30768ab-8268-4147-9ba7-e450fc1ee90f", "indicator--c69c0419-8f4a-4e71-bb15-ee5c6f80578e", "indicator--0b19f3f4-1f86-4c48-97ec-7d8a6406c72c", "indicator--db4e76c6-6a66-448f-8f56-135e854cffff", "indicator--d9dc4eac-b4b1-497f-bd5d-607aac52a03c", "indicator--089a410a-f709-4317-a98a-d8235e80d649", "indicator--3aadfa95-18e6-4d72-a9de-ba480a748f56", "indicator--1c50c68d-19f8-4ca2-96bb-1c5cf9c444ea", "indicator--997e9ed6-c942-46ac-ac7f-3f026b671c5d", "indicator--d71de3cb-1f71-4bd5-b9ae-b607bbc211ff", "indicator--1c312de9-d3b2-40bc-b3b3-ce13af81f673", "indicator--ee3cbf72-f394-42b8-abf9-eda9b6f5d90a", "indicator--200f5abe-39a8-426a-ac14-aaba44d15dd8", "indicator--0b3d7a15-dc50-454b-891a-2451673c1fb0", "indicator--a3d9778c-891f-4ffb-8193-ab84c07e4eef", "indicator--ab292990-0b21-4062-b4f0-fe9dc5dab592", "indicator--064f0983-3186-4960-8e78-2cd29c5beb49", "indicator--60eec8ca-3c98-43ef-ac42-f18d8f457e00", "indicator--1d61c91d-c8f3-40ae-b098-d15bbadd988e", "indicator--accd1d65-7e13-4aff-a0fd-bc0ccd057b70", "indicator--f494ecae-37a6-462b-8dbb-1de8bce09718", "indicator--535d9f8a-d35a-465e-9bfe-ae9187399fff", "indicator--147a6d0c-6bb6-4766-91cf-e8081c0220b0", "indicator--ccabcbe4-9c47-4f1a-b89b-a8afce26a8ed", "indicator--bfd6ccaa-02fc-4fcf-a0c7-0905535257ff", "indicator--7cecb74a-8a70-4468-b918-df93c439047d", "indicator--bb7abf2f-3b14-43b6-8e42-82aac1e4b247", "indicator--5bd068b2-8ac3-40d6-a9bb-7e5609a6ac19", "indicator--d5dcbd64-c3cb-49a9-bfe4-a35416fae8a5", "indicator--1bce8f76-086f-4734-b122-d151c4065896", "indicator--aad9cb3d-a9b4-4329-b1fc-e3081486b5fd", "indicator--543fe7ef-7d2f-4d9f-a26b-a68d27004980", "indicator--e9093ea2-838c-45e4-80e8-235d09e3b140", "indicator--77c31750-fb01-4397-9870-8168007e8275", "indicator--8a6abcba-5c26-4990-8599-65a22f20d911", "indicator--8fd25c4b-5c4f-4d0b-9078-7504aec68e98", "indicator--3b8979d1-a5d6-4b0e-b997-a9fe53b132f7", "indicator--63939163-d17c-45eb-9e9d-dff775c7b205", "indicator--fe2ec1c8-d4a9-481a-b5fc-db63ddd11801", "indicator--a19ed70d-96cf-4add-81fa-22d5b823e57b", "indicator--5394ff9e-3b4b-4aed-8ac7-9e15fc6135e4", "indicator--dcbdeed2-ec1a-45e4-bcc3-db071fc841c1", "indicator--43cd6eb6-d164-4f75-b46a-f5626a0b0e98", "indicator--c616b178-971f-4722-b28f-d6fbad322bea", "indicator--db1719f4-6450-4b61-95e5-94d9c74e48c5", "indicator--e4f072fb-d18f-4fd4-9331-e1ba132b785e", "indicator--52339e07-7b8f-4407-b41d-d6dea01b36f7", "indicator--0021ac39-8400-4173-96ff-32cf33fb7394", "indicator--e623b18b-8aec-4c51-8b07-383851a9ca98", "indicator--6bbf4dbf-d9e9-40ab-aec0-895730eda940", "indicator--90702657-a005-4e7f-b6f8-cbedef55b5e2", "indicator--f1ff12a4-82bd-4b36-80d7-230ac906dc3f", "indicator--b91cd285-62af-404c-a6fc-8b043f896622", "indicator--46c7d647-ba2e-4d0d-949e-fc37e2bb3532", "indicator--ed37cd93-5858-497e-85ae-f2df8cc571ac", "indicator--92725058-7b8e-4cce-8cd9-13a8f5aea6c4", "indicator--001cbdce-91da-45f6-af77-1339e5d89ca3", "indicator--86104b03-da43-483e-812a-a3a269b6f00b", "indicator--d75c596c-cd6e-414f-83a6-fa010cc8ed9b", "indicator--c4358038-6ae2-4f46-a506-02219679492d", "indicator--9030c3fa-431a-41ed-9d63-580320589b36", "indicator--50585b3f-b78e-415c-a88e-ca244b0974a7", "indicator--6318c99f-cb62-4405-8fa2-fd063107dcea", "indicator--41d45cd8-bda7-414d-a7f4-abc901e8fc0f", "indicator--9497b734-26f0-4aac-ab7d-1c592ff1511b", "indicator--87e72229-a4ee-4c8d-a2dc-fc233cae4fbf", "indicator--9f6744c7-11cc-4991-91a6-bb43b93bd4af", "indicator--ffc84e0b-48f0-4a12-99eb-ae2c95a1639d", "indicator--85139cf0-e70f-43e9-b9d1-ed7a12426ba6", "indicator--839f5412-47ed-4a0f-9fb0-274203e67a11", "indicator--9c906d43-372c-458a-97b6-85443366602a", "indicator--838a859d-7420-486d-b305-6ee319a28b13", "indicator--84eb4dee-1a0c-4e14-92c1-d8e80c7af524", "indicator--2f6e8c79-f482-4cfd-9ada-6f29230ed3dd", "indicator--4070b22a-b571-4ea0-93c1-0a5a357c469f", "indicator--187aa118-fbe3-4e79-b395-c934e64baefa", "indicator--242cf00b-3874-45dd-ae67-b76597ca9df1", "indicator--b9aa5bd7-1d32-4d1f-9494-419afbf1738b", "indicator--dac00aa1-32fe-48ac-84b6-903b92dc80b7", "indicator--bf87441c-2ac6-41cc-a55f-a01251c6f54d", "indicator--98cf2563-3dd3-43ee-9728-26bba95eaedc", "indicator--da3dc367-e956-492b-8316-02d421f12aec", "indicator--417f599b-6ddf-464a-8848-f8ec45fa3790", "indicator--8a3a5d8a-5f66-4659-b2b1-4c45950f17b1", "indicator--b24e8242-784f-4832-a230-6879c9a70e94", "indicator--402661cf-fe47-42c6-a4aa-8f2499ce2007", "indicator--100be4f1-f563-4fce-bd9e-9e03237b5be6", "indicator--6aa2a166-0ff5-4870-b420-a7b27f56dd50", "indicator--4826e581-b65d-49de-9ce2-053bde828e38", "indicator--598b3989-0ea2-4874-999f-57215d86bd4f", "indicator--2295dd66-9077-464c-a858-048f72ad8e61", "indicator--f2b90a13-c55b-4388-a47d-cd5576aa0894", "indicator--6c397cae-708d-4307-8d9a-3cefcfa9fa85", "indicator--02058c0a-5f60-4a17-90a3-ed760f2198f0", "indicator--bc831f12-2afe-411b-bc31-255217f00509", "indicator--15f9be6f-65d1-4748-a274-b9eba0af7f9b", "indicator--c67aa13a-38d6-423f-a48d-1aadd9cad397", "indicator--332c8396-2373-48a5-9cbd-b20cb154025b", "indicator--a422aa84-47df-4364-9d5a-322b643f0491", "indicator--58a57f64-f3d9-4fff-a8b0-73ad3782d55c", "indicator--6e120575-678c-4cdd-9ccb-778d920e9d50", "indicator--dece2293-4ece-4427-a5ca-0f55a27b8a45", "indicator--23e1cc06-0d8c-4b86-9967-8345c24d8050", "indicator--800e0c81-1aff-4da5-bd68-989a02ebfb5b", "indicator--a8a199db-3949-4947-94ab-c57092b17c84", "indicator--b37b4c32-f54f-4daf-8523-94a9972167b5", "indicator--2e154a4f-435e-4d73-a6ba-3a09d5369dfa", "indicator--892ab55e-f47e-48ed-b83b-c18d5290c58c", "indicator--d80f6d23-eba8-4904-b513-e6740b798e6a", "indicator--24db3e85-224d-4bfe-be88-605ac43ef659", "indicator--36c51328-c451-4aec-b088-c53402b064ff", "indicator--9f37520d-fb04-4236-9e40-6840cc4060f6", "indicator--ae8954b5-35fe-4fee-a6ab-cfc983577b06", "indicator--8b8f36b1-4830-4244-b9f2-645c62dc5d31", "indicator--7873cebb-e27b-45d7-b52e-f6eb8a8035d9", "indicator--49482b9b-73dd-41e9-a590-6a8c4feddf5f", "indicator--86c2702d-f53a-4e93-b854-5041a2ff94de", "indicator--ee804043-f127-4ed4-a779-1bbd054d0859", "indicator--2877fc93-bdac-4405-8170-6e09b72ad017", "indicator--d62a8e55-a657-42a1-8f40-82334cce51fc", "indicator--f00cf956-1acf-4c6b-ad76-81788c206635", "indicator--b4899a04-bae6-470a-ba57-1853786c5714", "indicator--2557875f-a631-4a9a-8bbe-daba4dcd574d", "indicator--dc9fff21-97c5-48c8-be95-c0b3a9c1a59a", "indicator--cc5e2436-7622-4079-a848-49ad0b5b6548", "indicator--e3bf5731-aee3-4293-b983-5a82a14bc273", "indicator--b01686a1-ec21-4605-9433-faee048701b0", "indicator--90dbd131-8f9a-41ee-bfe9-42731aedce50", "indicator--083a2909-6115-44d1-85f0-bb9f7fe0abb8", "indicator--8ab959e2-3cfa-4357-8a3a-36c978e11d63", "indicator--5d67e589-b43e-4cdd-b8f0-2f4f802a59e1", "indicator--9028f5cc-1a60-45dd-9a21-dd2cec396dd3", "indicator--48f79a9b-2bc3-4166-9ab0-6b825a678a9a", "indicator--4ebe5059-8897-4934-9bf3-9e9598dd7d25", "indicator--0f67dcb5-71db-44bf-8bf6-923149518a36", "indicator--e7397056-9d9e-487e-9120-200448bbd009", "indicator--ee6ad132-a90d-4b50-9cdd-a989ddc1f2b2", "indicator--6e3f5d0a-22eb-48a1-b322-44a306ebe6f3", "indicator--0b8a7345-9048-4f37-adf9-7a290e56e647", "indicator--9af82d05-3f7d-496c-8789-d383f0d48b0c", "indicator--96c3ec56-59ac-4097-ac03-8d5ac02dcea4", "indicator--925d1e3f-c288-4366-a1e3-d05a92bd1bd0", "indicator--c4497ef4-e825-4c6d-a70e-90e0ad6fe29a", "indicator--a75a0ce3-8a5d-4f29-9970-87e143e5fea3", "indicator--83d3e2f6-ea2b-4e19-9a98-324eb542cbfc", "indicator--5bbcf535-4015-4e1d-b06a-379df41f4620", "indicator--3b1cc0be-bfce-4120-be69-956d861cb924", "indicator--e4671f9e-42be-4f92-aa64-109ec431c5b7", "indicator--a9c24faf-1791-45c6-a0fe-b2882f3659b0", "indicator--67e3b2ab-79a7-4538-8a8b-1bc88a253bed", "indicator--609badfa-473b-4c9d-9f82-1ab5629b455b", "indicator--c66261f4-e8ea-4819-9cee-9514aa1a2bef", "indicator--7eff6012-2cc9-4b29-af35-cf688c14826a", "indicator--b3753a1a-f69b-4f27-bb52-92b56f950168", "indicator--07c468a1-7f94-42cd-b420-786b9770916a", "indicator--c38dba20-3909-4250-b07e-8fe20d4e9dd2", "indicator--1f33f2ce-17cc-4578-b652-455e38ea2149", "indicator--2428a800-5734-486a-a3ca-cf057c0b29de", "indicator--91244f35-32b1-4049-b8c9-53384c4f6b42", "indicator--5c148d24-cd7c-45ac-a880-928b8b2a8a62", "indicator--0c161a83-2703-43bd-989e-30e423638ebe", "indicator--35562323-0d0c-4b87-92f1-26ebb8a08b65", "indicator--7988ce26-1b07-4376-8d22-0e542c146d72", "indicator--e2e1b45f-bf76-4197-ae47-9f5328e12877", "indicator--44131bdf-85bb-4c2c-9049-c6f11106eb2a", "indicator--35a9b575-6ea1-4a7c-a26d-ab3cd9d6047e", "indicator--94880a60-3e50-4ce6-8d1e-01ad76736646", "indicator--de35e843-a3f7-4c3c-ba03-9c3ed6478cb6", "indicator--013e9fb4-b3c6-4af0-b3d1-890818bb8062", "indicator--047e9d53-7be2-4ed8-8703-5bacb95ea8c0", "indicator--cbae007f-3f2a-4518-99de-b5f8b5cb5c3d", "indicator--0556e092-4974-4124-b3be-ba938fee4d01", "indicator--85418e9c-f033-46b0-a573-97d32ff6faf9", "indicator--50d68b2e-d835-45b6-a0f8-989bd174e609", "indicator--a92e0e10-adc9-4856-9b87-0d31d7d3ad3e", "indicator--a7340b81-58c2-48f2-814e-d1751046ced9", "indicator--925e62a4-bb8e-4301-b7df-096b252ead8f", "indicator--c51dccc7-a10c-40a4-8973-69bcf2473564", "indicator--287e2fb9-c1a1-44ca-9d8a-737b5cebd2f9", "indicator--45caeed6-f9a7-4eed-8bca-6b168970b4e5", "indicator--71704984-7127-4179-b64c-65f6232f0342", "indicator--8b79355a-3bc4-4ab1-bbe8-1e44300daec3", "indicator--369aab27-8434-4c7c-8bd5-af218e6cc5c6", "indicator--c1b33d9d-9b7e-4394-a8e3-b3bac824108c", "indicator--004bb072-c74b-47ac-a630-bc9681b53eee", "indicator--e234414d-83a1-4918-863f-813b7e128b54", "indicator--62858434-6b1a-461b-9311-14d5c9830bca", "indicator--dcdb549c-d288-4b2b-986f-e64b8f9d63ed", "indicator--23267d24-d94b-4d92-ae83-8d16a7f01fbe", "indicator--24c8c3a9-8628-4598-ba51-833de0cadd71", "indicator--fd86ff59-4d4b-400c-b9c4-a3ef21bf46de", "indicator--cdcacbc8-7963-489b-9f7f-4771e73783fc", "indicator--4ae6f1f3-7d97-4b9c-966b-85022f6b1614", "indicator--5bd05204-3c8f-4ea3-968b-5e0f10595ced", "indicator--4d19a018-5a61-4579-a722-93322a19e188", "indicator--44c59601-7dda-45a1-8882-096197dd9ee9", "indicator--c1863aad-b0a5-4ead-a26b-e15e9fab4aae", "indicator--d1df33b3-2f86-46d0-8a7e-8159f1e9bc08", "indicator--a0d0871c-3a82-4969-844e-06f4cae5bf12", "indicator--fc732948-a6fe-42e1-b8c3-4617b61b6699", "indicator--738d155f-5c02-4207-8664-4ca0ca68b8c7", "indicator--a75747a9-0b62-497a-8b2a-e54b23983e9d", "indicator--e52454c6-815d-40d2-850e-c98bcd5acddc", "indicator--25626b66-b641-42ca-b9d9-0e7e221f4407", "indicator--01c6a006-fd38-447c-8358-8d8b725ee9ad", "indicator--5dfb4495-a6f8-4e37-8f69-6e1d189e1dec", "indicator--6488c869-4adf-4e73-9733-8c6c351d81ce", "indicator--ac3b3a01-6625-49d2-8186-dfcb67f24d10", "indicator--7ba973dc-b4f3-4522-8dbf-5e357ee05876", "indicator--c4261115-4fd4-4482-a1da-17ece3379d67", "indicator--e18d9641-6c7c-431c-89ea-efb887ff735a", "indicator--5a06dea1-0584-4a32-bf55-eff4329e1b6b", "indicator--e00ea1e9-09f5-4421-a4f1-147492995f18", "indicator--be5861bf-5fbf-44dd-8406-fa2ef86f843e", "indicator--310557e7-bb6e-4027-88b7-0769891d6ecc", "indicator--5bf9b25d-7a99-4e9e-aed9-207200841c95", "indicator--791f06e4-a4b7-44fc-82f2-005714a46570", "indicator--ea4a38c1-f418-49bc-b1d8-167eeaf7b929", "indicator--968e242b-8bb4-46f5-91c7-690d83bdfcac", "indicator--998e5246-d068-4d50-a13e-2137a79b50c6", "indicator--4501d822-7219-4d37-8672-d3b1760e0f6f", "indicator--9c847050-e677-40a3-a3d8-6c517a1ca4bf", "indicator--77e835af-299e-4046-a7ed-d35672181f14", "indicator--bb45bb4f-803f-4896-b3ba-01561591c7d0", "indicator--553c99bc-5f94-4d0a-a06b-11548223d154", "indicator--ece01292-e161-42a3-bfec-aaed907b2ebb", "indicator--93b0d3f1-7f8b-4b6c-8e62-ab4b806f688a", "indicator--86b2d083-079c-4b5a-8881-15671de0e759", "indicator--cf775325-1ee6-468c-8506-ca36c89bbd95", "indicator--2dacb46e-9350-4342-8d13-bd577d2ed6dd", "indicator--b1d24beb-d8c2-4fa0-995f-b711bf5474ee", "indicator--d85ca3e0-c6b6-4015-bfc1-21f7106c4fb0", "indicator--d375c436-41d9-4e21-b8f0-576a152257a2", "indicator--dc9042d7-889b-4ca0-884f-d41724fe1cfa", "indicator--0176b42d-984a-4257-a739-d5cc940b72d4", "indicator--2cd6fe85-18cd-419c-8ff1-da0a9db297d2", "indicator--39a00d8c-7577-4767-9766-e71847ac9e7b", "indicator--c3525b61-b0f9-4297-ab3e-1ead3b498566", "indicator--99e0663a-4fa5-4a2e-9344-293500b38821", "indicator--dda29a29-09d5-49ac-a1aa-b6de0ba6b71c", "indicator--89cf4319-348c-4d07-8b88-6fe95ca7011e", "indicator--c8d78b15-824e-434a-aab4-264ecafe3fb7", "indicator--584f078a-d975-496e-94dd-9807dbe35993", "indicator--b038d6ff-f8b7-45af-9fcc-418f0d110329", "indicator--d83202a4-1faf-4746-9a69-9ed762afbca2", "indicator--aec4bed4-b155-4f12-88c3-ed16bba06ab6", "indicator--abbf8be6-ef1e-4ae1-b904-792ddb8d17e9", "indicator--923b1bbc-ca59-42fa-a0bf-5b462ccc473d", "indicator--9de67aa8-7fbf-4403-8aa5-7179d2eb0244", "indicator--5d2a4122-0398-4fd7-a8a2-9c9b0dfdb0f4", "indicator--a29c4391-3d6b-4fbc-a77a-531c5fc8fbbb", "indicator--7ac9fcac-424e-4716-9731-51eb25600747", "indicator--090070a3-71af-4099-9bd1-7633b88bafd1", "indicator--ee215df6-77c3-4c53-955d-a3c19dff04f2", "indicator--05eaa83a-e0a4-48b0-8876-dc23ecd54d0f", "indicator--c080376c-5395-4977-973b-a606ecf44cb8", "indicator--25080bde-1e13-4a97-832e-0ba19de8a8d4", "indicator--068bef2d-0cb9-4ce7-b569-dcc9aa97c9c3", "indicator--b50f0706-4a45-4241-830b-09b698b6edf3", "indicator--3892d8dd-4f62-4c04-9712-acba19d78efa", "indicator--a189047e-e1dc-42ad-a020-50f669542100", "indicator--757ae5bf-6910-4132-8175-81be5ab634e0", "indicator--696173ac-2e38-4ace-ad68-42ea69e24270", "indicator--cf20d660-eaf6-4ffd-890b-5cd7d97563a0", "indicator--ee82ad8f-f922-4075-af86-e81c832c3325", "indicator--6fc4667d-63f2-4a82-a0be-49f6c07bb1cc", "indicator--512e642c-8a30-4363-805c-970e5a78e856", "indicator--720bf223-5a05-4b74-a2eb-5c0dea405895", "indicator--986107d2-08b7-4096-bf10-f8753e692fea", "indicator--9062da5e-c1a4-4c9f-8a45-595d77b47b58", "indicator--c4e1713a-d83e-403a-ad3c-1bfa2546f2b9", "indicator--e53c46ad-d37d-408a-bdb0-4610fb14ff7b", "indicator--da69b693-565a-41ff-b7ab-d5b4c6429e18", "indicator--b38cd2df-91d0-4b83-8358-70e3af5c7a95", "indicator--d8b7b2e6-5cf6-4b34-a106-efb1941e5b90", "indicator--8bded65c-cd01-400f-af4b-cde9b9dda628", "indicator--60d32827-7e61-44d7-9bfd-d43383e2c952", "indicator--473e5cd5-6467-48de-8886-3e2bbff374cf", "indicator--8fd63d86-37ae-440f-8ae1-7184c1f4b187", "indicator--d9597e1e-d92e-4488-8eb2-9b3ca3f028d5", "indicator--b6d3877b-1cc6-4bde-af27-077af7dd789a", "indicator--7437d303-ab98-4c9d-b997-8796c2e64443", "indicator--0575d416-575e-402e-bb4a-b2cb9e36c890", "indicator--3faf404b-a033-41b7-ae90-2f912cf668fe", "indicator--dbbf3667-e4b8-4cd3-8173-ff58cb652d30", "indicator--3c292998-7449-496a-838c-609d46577795", "indicator--962c2772-ec99-476e-bfc6-2f75fb8642de", "indicator--2d5715cd-1559-4b2f-be56-a266c17c24bd", "indicator--953c96c5-e485-42ef-b4c1-63ba14c33657", "indicator--e988ca33-0207-4cd6-9d7e-97672f868283", "indicator--cba0a0a2-080a-44b0-9f78-d1d31ed9af6b", "indicator--b03d20e2-eaab-4d4c-ae8e-6ad24a376fbe", "indicator--79297c80-e7b2-4ad4-a023-3a8aa43a1db5", "indicator--700b4587-f21a-4b3e-b6d2-8e1a64b84646", "indicator--ca0f729a-b6e6-4752-b33b-813f4c2aeef5", "indicator--f9f9a8f3-726a-49b3-9e20-4a0a0a105765", "indicator--e9ecca6a-34e0-4810-95ca-b3082cb3e115", "indicator--94ca0f47-ac9f-4335-9397-23c68920454c", "indicator--3351e223-a85e-4e4c-91eb-1148870aab19", "indicator--1aab8704-d450-43a7-a5ad-6fd4bde3102f", "indicator--851a5a57-98d4-4781-b775-48f5b074b156", "indicator--70c5435e-e2f7-4781-9eab-013992ee194b", "indicator--56188e40-f92a-47a1-9015-9926d26f290b", "indicator--88a2c191-247c-4d22-8df4-893168ee2672", "indicator--014a3a0c-0ad5-47d5-b3eb-d3c4439cc4a3", "indicator--8ce7ce1d-e8cd-42a5-8548-5b1dac157558", "indicator--3803a343-62cf-44e0-aa88-a4eda0ecb5b8", "indicator--15fe4fbd-ed1d-4171-9b6a-f30fd227bd2b", "indicator--7682d637-eb6c-4841-94cc-0332fdfe9c7d", "indicator--74aeaf0d-f58b-4b1f-83c0-d602788da941", "indicator--4f8572f7-4631-4d9b-a9f4-e329fbae0fd2", "indicator--2c137d07-3474-49e0-a5e4-ddf168288cd8", "indicator--d5282482-f0b9-4fd1-ac5f-2c1bc0441eff", "indicator--7e040075-c753-4eaa-a065-e31603e67b13", "indicator--7d7c6c1c-e5ae-4c1e-9e8d-44f48143c15b", "indicator--1079ad70-ddc6-4948-8de1-e87eb1086c21", "indicator--34f54078-b99c-481b-9ed9-ab108a973356", "indicator--22b243ec-fa83-45f4-98e7-d61ca8186ae4", "indicator--ba55579d-c9f6-4d04-9c76-17ea25293f88", "indicator--d1d1a1ea-c315-4b26-9c01-d1fa253eacdf", "indicator--db9268c9-28b6-449b-bec0-1e4f6ed78437", "indicator--3d56f178-8357-4744-81b0-85217871daaa", "indicator--bbb12973-b5ed-4795-b735-8a134f5fd3c8", "indicator--608f7277-8124-46b6-81ba-cfaef4812ad6", "indicator--c8d78d78-6d65-49b9-97eb-69529cb7fd9e", "indicator--b4f05b2e-3e61-4239-876b-17c165763a51", "indicator--8c9ff6b2-c2d0-41cb-8048-18b48f5cbdec", "indicator--03cce23d-e6e3-4675-9452-806cc11d5e9a", "indicator--0ee6b869-cab3-45d8-9310-d194bfc874ce", "indicator--27259538-9812-4575-ac42-93b2f95c436a", "indicator--2e61e854-a6a5-4f2f-985c-cc1c5fb1b7dd", "indicator--9ee2d8e6-ec62-4a00-88c7-e1a6d547e566", "indicator--1bae680e-c206-412a-a1cb-c48c1a091a5b", "indicator--a5bee9c6-0f7e-4568-906a-43c767c8ac59", "indicator--e4273ed9-6c20-4fd9-9a6e-8912ef32dcb3", "indicator--f5a490d3-53cd-43fb-9a5b-628a2ea2d7b6", "indicator--1b7f7716-7760-4900-8fff-a54320a81758", "indicator--fba40230-e3f3-41a0-9caa-79ee481e6e14", "indicator--991c90c5-ba56-4eb0-a3cd-7da30db915b8", "indicator--2b06b6c9-c33f-4e09-a43e-8abe33ab8112", "indicator--546486e6-0689-4c00-8cc5-1a2d0b09f5be", "indicator--a74d3e86-7dc7-4940-8c26-429795e80d2d", "indicator--9f6ad513-1456-4305-a9ba-2bb79208efad", "indicator--b6daf96b-9efe-4a7b-9344-07b84e646106", "indicator--2a7e9924-157d-4586-814a-ababe3091b03", "indicator--f6e9731a-21d3-4971-9a28-f1230c3c9c93", "indicator--1fa914b2-7980-4f1d-862c-84f1d2665581", "indicator--2fabea5a-a8fc-4cb0-8ff1-fadde4c1ec8f", "indicator--c09a2386-d7a2-4c88-b1e3-b3737e8a334e", "indicator--0cc02a5a-2db8-4673-9030-a7ad3b72dfbb", "indicator--cde83317-3648-46af-8f17-bdb52fca4a1b", "indicator--43bb2f91-d830-4e07-819a-c604819ce944", "indicator--368d2ca0-e82f-46f0-afbf-72ab3049f16d", "indicator--79054bfe-637f-4d91-b669-158a58eb0fe5", "indicator--9067ddf1-5571-4a01-99a0-54746c79eff7", "indicator--f5b4cd3c-e401-44cb-8928-e529abae4f5d", "indicator--dd970c62-18fa-467b-aff0-af95a86fd1bb", "indicator--b2607001-4601-4215-9338-802dc95bd1af", "indicator--2ee2852f-8b83-46ec-877f-684c21797fc1", "indicator--b7a25a2c-fa2e-4cc8-b666-65bfa3a83587", "indicator--8b84d8cf-e9ba-499f-b6c1-a463a3478b0a", "indicator--ce545433-c830-4b5b-9ab7-fbe98701a702", "indicator--ba5139db-1546-41de-83a4-f93076b64bcb", "indicator--57911d54-f8b3-4be6-8008-6a6cf8819eca", "indicator--5f0ef0b0-1ca5-46d0-807e-a259cc23fd2c", "indicator--c39fef24-295d-40d7-8760-f9abc6c18b36", "indicator--f4ed76fe-d973-4849-a0b3-33f983611fa0", "indicator--e767c371-b3ae-4e2a-9f00-9433e3544533", "indicator--eaac1822-6126-432b-8e70-594ca018bd91", "indicator--5accd039-f710-4e8b-b543-ebf5aa8528d3", "indicator--0beb2bce-028c-4545-b6b7-6f88b2bb4a2c", "indicator--6ab4dc99-fccb-43f5-9db8-ec37b0c82f3c", "indicator--1b01bafa-f4d1-49ac-8836-7411dc132e92", "indicator--73d18f8c-d442-48d5-8bb8-ed355c9d398b", "indicator--d290ec94-4a2c-4f1a-ac6e-26744a9b68b5", "indicator--3c7dc481-9991-437a-bade-cce124bf6f07", "indicator--79389a0c-2ef6-48c4-b171-bacfaeb1a92e", "indicator--d89ef51c-d746-42fb-95de-306a72820c51", "indicator--75be8db0-3848-4984-bb00-0da4fcfb2151", "indicator--cf775347-25f9-4dcb-b0b7-031320764dc7", "indicator--6c6b8eff-c500-4069-a3c1-b48ce8de3d6a", "indicator--147d7885-56c1-4678-a074-cd5eaed5796e", "indicator--8a9f57fb-7781-4e8d-b7cd-deb42e1f5644", "indicator--5f39a0a6-3bec-4126-b2ff-9cf43e7ff8f5", "indicator--3cb9cf74-c64a-4daa-af4e-c228f6221c67", "indicator--86425e1a-b98b-4012-b36a-7a043ff1016e", "indicator--acef370e-9288-4029-9395-f126f1f00619", "indicator--5bc3d20d-8a42-45af-bddc-78896346ebc3", "indicator--63bae397-8f7e-4b70-a4f0-62565c18386e", "indicator--373143a3-61ab-4f56-bc8e-ee7cf3e7298f", "indicator--dda5e784-665c-410a-b4ea-5e6205dbea99", "indicator--8f661b2f-c057-4739-b9eb-5f099c975f31", "indicator--7ce58150-c052-424c-889d-2743e2fa8de8", "indicator--f3fe00ec-ea76-4786-9caa-04717e84fc99", "indicator--fecc8ba3-2b00-4d77-bc0a-500f98d43a62", "indicator--02478bcf-32f6-4d3f-bf56-04f2b29a0c3a", "indicator--80dafa0c-948c-43e4-aa4f-d0e099e99774", "indicator--16e4dfb9-89cb-4d1d-a48f-bb88fc6835b7", "indicator--525230d0-5496-455f-a1e0-002661e9aebe", "indicator--9555a312-7e9e-4008-a7c9-2253f9902900", "indicator--fee44aa7-a4f1-4a0e-b06f-cd75a9499d5c", "indicator--23dd54c7-bc63-4975-928b-3560de4c2972", "indicator--f1198db0-7352-4bdf-b2e4-8820277ed31f", "indicator--8b2d761f-bd16-4574-8cb7-ea242ad57409", "indicator--82379b70-c5b5-49ce-9c75-b61a478b1059", "indicator--30a4c254-42e6-4c21-927d-27c81a9862d6", "indicator--2c741a8b-cbd3-43f0-894d-b6ccfd860284", "indicator--c0970b1d-f51b-4185-8229-d19c4f8a6b7a", "indicator--88be7fc5-d102-4b8e-87e6-314d12cb6a1b", "indicator--ed2b951c-f9c3-4e76-a659-0314f99638b6", "indicator--d8de16b1-9e43-4de8-bf7b-f92812a7159c", "indicator--3f714505-b06c-48dc-b178-af558ca025c6", "indicator--0a0a8336-ad7f-4401-b76c-836ff32991b3", "indicator--2af43f16-fe3d-48b9-ba99-61ce8f1e7bb7", "indicator--be632545-a51e-43b8-890d-4aca27e181bb", "indicator--c4a9143e-bd98-418e-974c-80f6fa32c4e7", "indicator--a6375c4e-0a8e-42ab-baae-90103204e7be", "indicator--b9e8eff8-e266-41e9-a7f6-6e97543207d1", "indicator--01045227-25a1-4c03-9cd1-bf706a8f01de", "indicator--93004a7a-126c-4092-88d3-114671378854", "indicator--51f90fc9-42f4-4bf7-806e-c6d3969152f4", "indicator--21e6910e-d9bc-488b-9772-a4a733f13192", "indicator--80f8c0dc-ecf6-41d6-a809-8eca85b5ceff", "indicator--7d1b5e42-f3ec-4a3a-990f-e3b53f28b665", "indicator--686d374b-9aca-4470-87ea-a037105b7b65", "indicator--d8c52b83-2a2c-4430-9d18-d3fcb7221472", "indicator--e4f3cad1-ebdf-40ba-9f4c-19699b28ec11", "indicator--ac0e4b4c-d2c7-490b-be8e-4306c21eecca", "indicator--2d1c68d2-cc5a-438a-b4f5-09eab423fa73", "indicator--9903f86a-7354-4560-9810-8bc522a05960", "indicator--20955614-cec3-4229-8057-12706fd5a374", "indicator--bede92bc-4611-4fb6-9d48-3fea555718c1", "indicator--dcef51ff-9d53-41e9-bb55-599f19a21e06", "indicator--b5133530-a7a0-4942-a176-0a5394bda97b", "indicator--1a23af15-295e-405e-99de-92c1c2487be0", "indicator--70126fa4-62d9-4138-a360-3233616a4cb9", "indicator--2a7c1059-0aa1-4d71-8284-bc9bea3c08f0", "indicator--9c1878da-798b-4f15-b5ea-8cc7d9f3a061", "indicator--78ad4810-721e-4db5-ad72-1c6ec41d75c0", "indicator--99c2475b-f904-42c7-a0a5-838763dd9db0", "indicator--99cb0a3e-3ba1-46aa-9a8d-2e9a65063986", "indicator--533b2ab9-7470-4a34-baba-ac42b770748f", "indicator--b6674da0-99fc-4c61-add2-20da93f0d2cd", "indicator--235f0766-81d1-4aa5-acda-6f5e399183e5", "indicator--7652e9bf-8157-40e8-836e-19487a38f9bf", "indicator--55bec290-755f-4889-b02a-7eb197beba3d", "indicator--1edb22ea-e690-471f-b126-e0cbdac78b01", "indicator--45e34b4c-0977-429e-bc90-fe7afac64b3f", "indicator--79a88c51-731d-4e5c-b7ca-be0a7af118de", "indicator--528cfb49-496c-421a-88e3-126f06aa7bf0", "indicator--8d32137f-5730-4e08-a803-d3e0b52fa977", "indicator--9a357643-9def-4a0f-a1a4-2c7b0d006276", "indicator--f0199cfe-41cb-4ac4-a237-d2a0bdf402de", "indicator--0ea1c48e-9142-4cef-a711-c5a9e0a9e501", "indicator--6bfce209-6e3a-4538-95ab-adf0b4055211", "indicator--80d1e8d9-e401-42be-b3aa-69089125f1fb", "indicator--5978614e-3104-49b2-b05b-ee07609a6a9c", "indicator--8dbfc113-ed1c-49ab-a916-a00cc739bb71", "indicator--63a143b3-5e0a-4de1-9206-903af8abff40", "indicator--60cab8df-e29e-4bb0-8b80-4130d2659d90", "indicator--327baa1e-8dff-4b29-954c-3b6a91b3d538", "indicator--943af817-43d4-4af4-8c36-bc44173541f6", "indicator--f4f9d448-06d5-4a39-bca4-f9ea21292a31", "indicator--649d0379-c713-4cb8-a695-d72467391f3c", "indicator--1db08574-fa68-4a23-b00b-27759cfd669a", "indicator--78a690d3-d538-4ff0-9c8d-19d13f49cc5d", "indicator--1be0b6b1-0a4a-49ce-a64a-d88f3c1adea9", "indicator--0aa59bb1-5cab-4e0e-8df9-6cf5cd37d301", "indicator--9bc38854-e821-44c1-a3c1-7513ad038e30", "indicator--08f566f2-a85b-4d74-84e6-7893b3368902", "indicator--4ecf0d86-bf40-472c-8a9b-49ee47100d77", "indicator--0e1b31d6-3182-4336-afce-7980e0a316bb", "indicator--cb49d73a-6eef-4659-9e7d-c75fbf4905aa", "indicator--68f2ba37-3d9a-4349-9b72-e37c854bd13e", "indicator--523f9880-e014-440a-b2b2-50f6f9a564d2", "indicator--7f67e5f7-7c5e-4613-afcf-f1ee1851b247", "indicator--1f54d4ab-f129-4f78-bd79-12ac4b1848a6", "indicator--755244f6-7243-44fa-87d6-e1c11f48b099", "indicator--d4f27a1e-462c-433b-bdd6-e653b10b80ea", "indicator--a814f738-d385-424f-8f37-d8e1a1d458bd", "indicator--c91a7266-470c-4aec-b82e-b8b71a9306b4", "indicator--0a9c5175-e6e4-4432-9320-422c719321c2", "indicator--001f9a88-3742-41ef-bb1f-5714bc7e675a", "indicator--85d7a91a-6f48-4b03-863b-0727b3051736", "indicator--77b5a166-a347-4c06-b06d-4cf20433675a", "indicator--d1c046ec-96d5-4f84-8c02-aaaf64d443b3", "indicator--a403943b-2460-4e4b-be98-d2f980f97773", "indicator--27d412ad-acb5-46e6-bf56-19a084cd7430", "indicator--ef8785a4-709d-4978-a0b1-b94727f2e552", "indicator--d8ad6948-cd79-42b2-8a87-f0d1dc33d84e", "indicator--4cd4be47-0e3b-41a1-8cd1-fbe2b09320e6", "indicator--b6f0389a-6484-47d2-8bca-1dcc98cdb62e", "indicator--dd9513e2-1c37-4ea3-96f0-d9bfdb05a1bc", "indicator--8755af1f-37e7-41a5-9238-51bc140247b5", "indicator--416ded70-6fb7-4e65-bdba-046b63e12965", "indicator--1cacc35c-dc1d-4586-b259-17479e3c2a86", "indicator--3b1874bd-10bc-4381-8f31-d54b2efed1b6", "indicator--3472922d-8fda-4bea-a10a-3b05581e11ce", "indicator--f8bb1ac4-f82a-4e3c-80bf-9e0f612b32a3", "indicator--9e655dba-81d9-40bc-ad3e-0d4132fcb2b9", "indicator--9b7137a2-eb13-4841-82aa-9471e98fe4cc", "indicator--20e76aef-38d5-4178-adee-e0199730cbbf", "indicator--b7190cdf-46c6-4a4c-8826-20225d99cb49", "indicator--fb78bbd6-fd70-4b45-b13a-29c756b52930", "indicator--3b8d18af-52d5-41f9-834c-e6dd699ee454", "indicator--47dbc0a4-1cfe-40b6-9432-8cb206fe89e2", "indicator--ee7d5c21-3c37-4d57-a8d8-51ceccd0eb16", "indicator--bbecff95-e952-4b5a-a281-f5a98ceca587", "indicator--4db03893-8a3e-47bd-94f6-d6959b0a4f81", "indicator--2d6ad689-8467-4c6f-8da2-e9a3536d5968", "indicator--16aa83a7-7126-4700-8db4-30e838ce377b", "indicator--8b5fd878-238e-4bc2-9ea1-88550eab0014", "indicator--1994a631-49c1-4130-91db-22480f2cd0d9", "indicator--46e4c05e-ba27-4125-a8cf-8847b7ecb3ab", "indicator--24a76eb6-aa10-4387-bd41-a0e2764f41a6", "indicator--3d6212c3-5eb0-436f-a577-47e5cfdc2e63", "indicator--cdd08d17-9b39-42d2-8a0e-7aad175b1a6d", "indicator--03f70161-01d8-4558-a9c0-c35bb6ecb22d", "indicator--82c50ef8-3c6a-4cdf-8226-1db7cf7c17a1", "indicator--c4d09e56-727c-4678-8c25-03e590c4da22", "indicator--d86b640f-a474-4b42-a5d7-efbf0808d701", "indicator--8a650f82-1d7f-4bc3-a9f8-7099bda402ae", "indicator--5a275c0b-d746-4024-b629-33ff5de27a33", "indicator--1e551c52-e9dd-4ae6-bc8d-0bffb2947442", "indicator--c09a35de-ba4a-43ce-adb8-f7e550d319f8", "indicator--a989c47f-be0c-4cb4-b6eb-55b34d0cca85", "indicator--cba77390-8183-48d1-8d9e-801e248538ce", "indicator--66d4dbd8-c3c8-4cf9-8eb9-63713e3f52e6", "indicator--bd1484cd-8eea-412b-b004-4ac6e86afcb8", "indicator--f7b99b14-b6f1-4c9e-9eda-83acd8b76c82", "indicator--fa047f88-57e7-499a-82a6-9a015d133b20", "indicator--990016d8-3fb0-477c-a849-259bfe8c346b", "indicator--cc537e59-6023-4f5f-bc73-e9b2191343f7", "indicator--84d8abea-6908-49a6-82d2-8caa520c294b", "indicator--c287d891-8b4e-434b-833e-5524040271ea", "indicator--63ffdbaa-c16d-49fc-a051-af33fdfd4346", "indicator--497467d7-9c60-4da2-897f-9c5df20f532c", "indicator--42ada5a7-640d-46f4-a3b4-94582b49efa5", "indicator--6a3f330d-5c13-4e57-a148-bc2a27ac6c57", "indicator--ab242e77-0b29-45ec-9c24-9086890032ca", "indicator--ac06a0c9-7b7d-4b1b-b3ea-7c205a649627", "indicator--e210603e-0585-4c31-915a-1ad8c55cddbd", "indicator--a41f3f5a-d17e-47da-9496-5c648255e0a4", "indicator--bf2da703-f8dd-4b57-9eb9-b04d37fafed3", "indicator--769b88d4-0e0e-4f41-8327-16145fa6b423", "indicator--240d98da-98dc-4394-9b66-dfa65595fb63", "indicator--33c7ae55-9025-4cb9-953c-cf0306c1e404", "indicator--eab697e8-2c39-422d-a404-13c941764d92", "indicator--637af056-e821-46ae-a9ff-52b79fca6cf2", "indicator--5ef12499-4f8c-4e97-aa5a-7ad64b086b7f", "indicator--4c75e8d4-0d4d-43e9-a324-caa9f8057635", "indicator--cf8349f8-79b6-499a-8de4-171068ecf936", "indicator--d39d9e1e-05da-4c77-beb1-80c39c9d8b8a", "indicator--14bb4701-b4f3-4309-bef9-3daa6b020274", "indicator--105450e5-3a83-40fc-bead-d8b3acb93b59", "indicator--edf3e1c1-94cf-49a2-aa63-5b5bf8768adb", "indicator--9b52f232-f97a-4933-989c-3524cb74b2e4", "indicator--ac23756a-a8f2-427f-b8b6-2147998d7c07", "indicator--ef3330ce-2076-43fe-943d-368be5649872", "indicator--9f17930a-9612-44c8-8253-2d1a9d634bbe", "indicator--6ca6c22c-833b-4707-a5ec-66d5b7eb9b70", "indicator--c2f6a087-adc0-419a-b5ca-24df31b1af78", "indicator--5967c167-2913-4202-ab6b-d3cb6e4071c5", "indicator--34098624-9a5c-4b8f-9a20-d773d593a333", "indicator--8395e3b9-fb69-4a86-8ad0-da0e60c1d0e1", "indicator--31148e76-f270-4144-b999-c0e2dff23335", "indicator--5341272c-ae60-4af2-b028-75a28da3cc96", "indicator--aeb8b4d7-b4e8-4f3c-8f20-7c4331b97d5b", "indicator--92ccf75a-42ca-4b38-982c-efe86702bc67", "indicator--56ec51a3-e8c2-4491-9720-1cb769875b19", "indicator--768300df-d6be-4c3d-a82c-13c842abb9e4", "indicator--69bc2dec-1889-4e0c-9074-006df0727792", "indicator--bd18b2a2-93b6-4619-8c69-50a03bfa0730", "indicator--e67caf4a-2528-4ba9-b3bf-cc91437c4493", "indicator--4a89c8b8-4a8f-487a-864d-55af7e1b580f", "indicator--0bbd54f7-8791-4fba-b8f4-0175f82a63a6", "indicator--da741d3e-a1be-4761-965c-b6af7b156527", "indicator--2c621bb5-ad88-4d4b-a701-54328f583439", "indicator--36936ad4-14ae-46fc-ab18-10453beb431f", "indicator--fae640c6-c17d-473b-b3ac-ee63298ab5c5", "indicator--3e3eed7a-674b-4aa7-960e-d9b2c8866708", "indicator--df8c4dbb-cf4b-4ebb-81da-06c116f82646", "indicator--f0cf2c7a-d244-43df-b5d5-ad3ba3f2b8cb", "indicator--77d43d60-3686-43ea-a91e-490d1289109d", "indicator--f5b8b7a9-9d0b-47ad-9124-e6e0c902bb6d", "indicator--f4f7c79d-6a1f-4742-adad-0ae24d4e1bfe", "indicator--984853e2-2a24-47e6-af13-3d5e4f2f6dab", "indicator--6cff5e5e-a62d-4590-9d97-f8085a06df37", "indicator--a5eb3e95-be2d-497c-899c-09f09ffca826", "indicator--87d9ea91-27ec-4ec7-98a1-b880fe01dad3", "indicator--203ace76-fb91-451d-9f01-f74efc7ae962", "indicator--fe12c581-7fe3-42ae-8878-a44a5c62a371", "indicator--b01f3fbc-452c-4dc2-96c7-dfc5f815868d", "indicator--38c6d742-b6f7-4289-a9eb-618cd630b1d3", "indicator--baedb7ed-c2cd-48b6-8c2e-5e3b85768b0a", "indicator--b2e51008-445a-4d8d-a494-8ac13d9eab23", "indicator--4a07b409-e409-4d15-8210-945d7d3c2eec", "indicator--37ac6212-f571-44f9-b791-8c1ea786b2a2", "indicator--b5f1479f-c0b8-41f1-a785-eff2ba411ff5", "indicator--c7159622-c936-4264-bbda-90bd7992ed3e", "indicator--0d2fd1c3-1b6c-4795-b615-3477373d9b4f", "indicator--0d69d7cc-a5e8-43ba-b9e2-0996c8f4d1f8", "indicator--c956687e-48f0-4d93-81d1-e99bc94fe381", "indicator--ea0c93ea-2002-4c0b-b678-cec51f53bdb5", "indicator--da564f94-162b-4795-b945-c1fd86d95930", "indicator--25f305b1-7317-47d2-bb2d-b2de8f884aa1", "indicator--6136183e-10c2-4740-9161-12b773299081", "indicator--49317fcf-bebe-4553-be6f-b867c38088b7", "indicator--2687f565-38f5-4476-8d79-9c731b0d402c", "indicator--2eec08ea-e535-4df2-ae1f-2b08376eb6ff", "indicator--d223b239-87e3-474c-8e64-a13e3ed892f1", "indicator--4108a5ea-ec25-422e-9e63-ff03f7247aa4", "indicator--ebcc656a-a9e9-4395-bae7-49479d003698", "indicator--e8a08806-cffd-4ecb-98ff-3ac8df1d9996", "indicator--0b8efe0e-bc75-467b-a7b0-e5f1fc71b084", "indicator--6b85b530-545c-4522-aa21-1135f9e973f6", "indicator--f262466f-cf3a-4e1b-a647-56d15d8b36ef", "indicator--6fc8a51f-97f2-40a4-b93e-a4aec3e318f7", "indicator--f9d559bf-2c79-42ba-907a-87b0795d3c4e", "indicator--66c9c816-93ed-4a7f-a7b4-c633e5b825e2", "indicator--f7335aa8-6620-4c15-9612-e646369d0af8", "indicator--f558775e-98e8-4d6a-af59-da749e3719e2", "indicator--c8b14673-6ec1-4508-ae29-4984a262dccb", "indicator--cbdd4d8c-2f52-4597-9375-6a41cf361f69", "indicator--93de2704-d5de-4131-a51a-d93a6b814053", "indicator--119b8d56-748e-4a90-b248-18c9a862c74a", "indicator--bde278fe-c7aa-47c9-80cb-ced8cb195e1c", "indicator--61b63a11-9d20-41a2-867d-91a9e44e2380", "indicator--64963db9-57d8-490a-9b6e-9500c4b4d9f1", "indicator--c8ec0bf5-0bed-4002-9cc3-7d78b0024b66", "indicator--808bcc38-7a2b-408d-8494-d2ce5083223c", "indicator--510f8b92-5ff3-40ae-bb2b-24f4475ae967", "indicator--5c633d5c-a231-4dfb-8345-e5220ec025f3", "indicator--4e548831-2ed4-42b8-be03-5f359b528bf7", "indicator--9ee6809a-ac64-4330-b2d7-386fc23d6d97", "indicator--b2b239bf-3909-4bcf-acb0-78a489e918bc", "indicator--0e5b2b29-63ec-4b13-8ae9-5a598d8a2ea2", "indicator--4d1888e6-858b-4c4f-9a34-af0f4cd2b433", "indicator--e4e86714-f26b-48bc-b409-250e7d0135c6", "indicator--32473416-1305-4114-a3cc-1583b0d93e25", "indicator--7f56b4ec-ff7e-4327-b89f-fca34d524844", "indicator--7287f818-5225-4ba8-aac2-e9c86d78d2a7", "indicator--95342172-76b0-4611-afa8-8dc548703a9f", "indicator--1b1fdc3f-48df-46a1-b013-75bf7c521e71", "indicator--cb986bc1-6c46-4ed5-ae23-80101005bd30", "indicator--6cecf6cd-e8cd-4a8e-a641-39d3828d3066", "indicator--b2eaf742-72b9-4d1f-abf8-395754ae96b0", "indicator--45df0a71-ce45-47af-a845-3201584c47b7", "indicator--d6ba603e-88ce-4938-952a-3259a64fe9de", "indicator--3d8e7d1a-a463-41fc-a725-661d7a5a0699", "indicator--5797d40a-22c6-426c-9f6d-92787b46988f", "indicator--825a4f30-77c4-476d-b56f-65677fa7c7ce", "indicator--fa77f533-7513-49f7-bd25-f5de399042ea", "indicator--9708e5ed-6d63-42fa-a331-f348260f305f", "indicator--416a4bab-c1a3-49c4-aa61-1b6d09c14bb5", "indicator--a686822c-8a7b-47e1-811d-cc7fdfb45895", "indicator--15e6124b-add9-43b6-95b1-746554c7237a", "indicator--5bd14a00-88a0-4357-829f-67f45264f423", "indicator--16d8139b-ed3d-47b2-bbf7-75611b0589c6", "indicator--3fd5b8e4-c174-427f-86c3-de7debaff1a3", "indicator--642457d6-2626-492f-885f-5387dbb59fa9", "indicator--a833233f-d41c-4615-9af6-dc38eec0f5bb", "indicator--c5b5421f-efa7-4762-bcc0-992b3dbee8d1", "indicator--d58e0a33-41ca-4f9c-9968-9778b130cb6b", "indicator--6ef17513-bb21-4430-9184-30aceeba3f69", "indicator--9ea51c4b-43ff-4941-a98e-261e66e96963", "indicator--ea3c419f-ad99-4013-b04a-95c18f73a897", "indicator--0e1b8478-02fd-4562-a954-e221a3c60879", "indicator--787f3f2c-2651-4b55-a1fc-4d521fdcd29f", "indicator--d7d6a779-5d54-42bc-b1e8-2d036c0de906", "indicator--08fc83bf-9c94-47e4-a4ef-5e32f0eaa4a5", "indicator--fe9cac4c-619a-4493-9aa9-39bae2b14146", "indicator--86359b81-e874-462c-9aac-a82fb20a0505", "indicator--dfb51f26-3867-4d2f-8136-fdb9523f7c48", "indicator--f5f74cef-e5b8-4936-a67f-d25a1241d973", "indicator--d6a2bb21-9225-472f-847c-3c18884f8663", "indicator--632dceab-9b32-416a-89e3-9fde83044ad5", "indicator--58420e44-c5e2-4cdc-a304-21347abb1a4a", "indicator--00d44ccb-0666-490b-8539-46c0dc8e3bab", "indicator--48ac0c4b-7ba4-4b53-88a9-eee8fa683933", "indicator--b3bb9398-023e-4685-92c1-6a0c03b8642e", "indicator--3b32f01e-e43d-4a66-b697-3db49e41ce8e", "indicator--7f7a20e5-2948-4c16-8657-78c0bce66d28", "indicator--b9bd712c-72bb-4018-95f1-71ee62f28a6a", "indicator--85175c1f-534a-455e-8456-aeb48bb92a64", "indicator--7e2e53a8-52f1-4ec6-b303-03b3a09ddd73", "indicator--3c27479f-f0e8-4091-9f7f-bd819f5be368", "indicator--9259621d-1ebc-4c28-8a8e-2a84249d27b1", "indicator--06f31aef-9ef4-4aa4-acf3-b11356d24824", "indicator--dbefca10-f406-4346-98af-95bd96004e8c", "indicator--3e72be0e-bb7d-4ab0-9e1a-c2aaa1755434", "indicator--3f7db93a-1b6e-4716-97ce-ff9faa4ca2b2", "indicator--b6c2d89c-7432-4e8f-9bb1-1354064aa2ad", "indicator--494f09e5-d5c8-4e4d-bdbd-7eb627148137", "indicator--1a4c05f4-2931-41c4-ba0a-487ce0e803a4", "indicator--2401815b-6819-48b3-8e67-8735aeb0aff7", "indicator--eb15a4f6-8842-4553-82d4-69d33a34d2ab", "indicator--3122f87e-9b79-4e54-80c9-7c2494cc8126", "indicator--aaef9080-f320-4bef-8d4c-12207c0deb79", "indicator--ad180ad4-78bd-4e35-b960-e381bfdfd516", "indicator--edbafa28-c95a-4d8b-b25e-cb03e8e692a7", "indicator--740b8fca-8329-4772-b0ab-59588201d950", "indicator--d5078de1-82e2-47e2-ac3a-c4a6cd3fec70", "indicator--8a448623-9222-45c0-bf2e-84fde1426405", "indicator--23f2e516-f0ff-417f-b318-65d74636fe59", "indicator--df2b474b-5082-445b-9c42-fa86901fb7f1", "indicator--811c8046-839e-4b8a-8d50-f62a201d6d62", "indicator--f785e7c4-8d89-4eeb-ac1d-56b089229b4d", "indicator--9298fefa-abe5-495f-9d4a-9147aa096c40", "indicator--8424e582-12e5-4ce9-8e86-47fb23be6cd7", "indicator--b075d6ce-6269-4c6a-89a9-47c0f72e4f3e", "indicator--9c07a6ad-743b-40b3-a7cb-a426ad4e46e7", "indicator--f5f74e8c-bbc3-46a7-b2d5-43609913e403", "indicator--ae90ce7e-a883-4b37-89c8-c6f83c5467fb", "indicator--f353600b-673e-47f6-8229-5f72740a0916", "indicator--06f1d932-199f-4518-b9c5-163bf8a71d71", "indicator--91ee39ab-13ae-448a-af55-13914766f8bd", "indicator--e8009347-b041-4027-94d8-0a6bd3e4cbbd", "indicator--1746010c-a562-4fe9-b68d-0ce36290cd2a", "indicator--7d92e309-9b4e-4dc4-8c8d-ab4e62566f8e", "indicator--5e870232-799a-4560-a2d5-3eebcd507683", "indicator--4c9d42fc-b692-46b6-b5aa-ab748fbbb25d", "indicator--3cf00965-4d96-431f-9597-8126907e6be2", "indicator--d7bf3a44-2708-411e-a00a-c761a9079c8c", "indicator--6001e1fd-1d42-431e-8787-1cb8e6d95535", "indicator--e523e950-f58b-4174-8be9-138bd1efd15a", "indicator--052e1ead-7a4d-457e-8af3-02aaeb285db0", "indicator--904c168d-9aac-4238-a296-80c924d02517", "indicator--27afb64c-716d-47be-a071-1fc95205eeee", "indicator--d432717c-ce73-446b-9f3a-c9581be8cf94", "indicator--e3e6543d-4451-4f8d-8ac2-f8287796188c", "indicator--f69a1564-51ef-4c12-a1b6-04eed4c9b738", "indicator--9d532afa-745a-400c-ade1-da0fe34f91e3", "indicator--d61bc00c-c7cf-4aea-b4f1-290ab8ed121c", "indicator--25668331-e8c3-4f30-82d1-6cb54605b57b", "indicator--b15c0770-7088-42c7-a55c-94b2db7abad3", "indicator--0d81c6eb-94ba-4f9b-9816-480f2ada870d", "indicator--26b22eb4-c2d4-4b5b-92e7-d86fe756424f", "indicator--12c1ee48-7019-40b7-8170-66194d664681", "indicator--33314f39-c849-406a-b3cb-eea48f54dae6", "indicator--2f20fe51-e1b2-49fa-bb22-77e138a4417d", "indicator--c2cddf9c-070e-41bc-b3bf-8eb0b94d4bed", "indicator--14bc808f-6488-43a3-a3f2-1ded0529734f", "indicator--ed6ef1b3-4334-4e2e-a171-963735a5fcd9", "indicator--f821e2ad-39f0-41c2-9f8b-c6c9d7ced074", "indicator--a4a09cea-0f2c-4f90-ba1f-783d78489a99", "indicator--672ab2dd-27f6-4978-abbc-f4b4b4f6a3bf", "indicator--48c7e872-ae10-4e1f-ae88-4e83d4c4a861", "indicator--29fec396-ac7e-4566-9700-3fbdd8ab0bc5", "indicator--37c09814-24aa-4690-8df5-76fb9015b851", "indicator--966d5334-1525-4f05-a6d8-d21a160be867", "indicator--6173e0c5-7cc2-4b98-b4b8-a2f3c3dc2b98", "indicator--3f72af27-bb59-4739-b93f-490703914b36", "indicator--a5f98d02-19c2-481f-88d0-00154662bbcd", "indicator--ae60eb64-db95-4bae-bdb7-8e8bd41fae8e", "indicator--c73685fe-2b58-46ce-aea6-bbb9b0e4a79d", "indicator--527c115f-825c-4d12-9cf6-e3881dc0fb9b", "indicator--e0841972-7f55-4f15-b686-5898109a9337", "indicator--6137b31b-f3b9-4ce7-a116-3dafe63147a0", "indicator--ac570957-9bb0-4cfb-bf5d-78b3d5e47680", "indicator--e885f4ff-4e20-41a1-8d4c-9f7668e7d2b3", "indicator--0546d0f0-ea2b-4506-b554-4ae534cf622e", "indicator--228df503-00d6-4ab8-b1b1-57b2785d42d8", "indicator--fe464260-47a7-4f7d-ade9-8678cd4c83b3", "indicator--ecb2f2fe-caec-4793-ac05-1d60981dd528", "indicator--006e200c-5ef3-4778-a56c-96cbd4268e41", "indicator--04bf457b-d0b4-4f31-b341-e632c70a5d6a", "indicator--8d8b41f9-4293-4a45-84dd-0bbb3fd6d6e9", "indicator--d3f5ac98-95ad-46ec-904a-8b37a56d5b29", "indicator--96772d09-1e77-4e13-beaf-0145123f7531", "indicator--42cd2acf-a855-40cb-a807-fef0cd71326c", "indicator--476da04e-88c7-4436-9b06-9029b7eaf9a7", "indicator--8cf8db54-c141-4504-8d95-db58669f56ca", "indicator--98ced61f-a24d-44ac-b0d1-6e8b88ad6320", "indicator--79ecd25e-eefa-4ec7-a14f-5ccae19b3094", "indicator--58046917-8b87-4db7-8566-1518eb9945fd", "indicator--f6989014-3df1-4dd7-9a8b-7045c4d52950", "indicator--03b5bc3e-f61e-4430-8470-fb72c33e2b54", "indicator--6fa4baf0-a0f5-46c1-879e-a56940fff5e7", "indicator--29484438-9020-4afd-b51e-45f9792b650c", "indicator--bfd79bbe-5090-4ce4-8049-670672d8ab9a", "indicator--c57f1e3f-1e3a-4938-a3e4-0b6f613bc2f9", "indicator--4c85ac1d-58db-40f4-b4a8-a8c6700330b2", "indicator--b65f5eab-9fd8-490c-b358-24070f107a31", "indicator--72056fc1-b16a-44a9-b54a-b2178b158981", "indicator--946d6285-06ed-42c8-bc75-f049811a03ef", "indicator--7f068394-423a-44a1-946a-0aff22181d2b", "indicator--91207cb5-c2ee-4882-8ceb-95335fc41f6f", "indicator--4c38cfb7-59c0-4418-a4f1-77117d04d68b", "indicator--d43f162f-1daa-4931-9a4a-403fd0fcb2f5", "indicator--8ee02a11-235a-4715-af6f-2d111effac46", "indicator--eaa181bf-f4ae-4b51-9fe2-6b7a9e6e1d30", "indicator--25bb32cd-2a59-4fb7-98bc-a5ac87b8483b", "indicator--dcccb30b-520f-476e-9213-cf67eb21664b", "indicator--fd627a11-9cdc-4522-b88b-2ffd0651e1f7", "indicator--2071f139-2164-4675-85fc-a953f6b22f41", "indicator--4aed3d62-7d4e-499b-b3ab-e020a4e070ac", "indicator--92833d21-9e1e-4344-bc5f-9d37850229eb", "indicator--441b75ec-01b2-4e43-8708-30ad7baeb7b1", "indicator--a1146857-8352-4def-854e-874d4e1c8ef4", "indicator--2994551c-abb7-4f2e-9acd-6c9d637169de", "indicator--e68e910a-27d1-4017-b5f7-b738197c5ace", "indicator--c3957eea-d432-43a4-8725-b33aaa2a7426", "indicator--64d80933-b840-4769-b5aa-f4d586e652e5", "indicator--db12992e-4aab-40e2-88fa-6dd789e00429", "indicator--66f33985-4ae2-4bb0-94aa-e0024d715558", "indicator--9eb92225-df5b-4fd7-aec1-a9c242b446dd", "indicator--fc128adf-102f-4aad-a47c-6de547f8e910", "indicator--a18520ef-dd00-414d-b779-509293af975e", "indicator--9fae331f-7058-4113-93b8-4b3021e513b7", "indicator--b4e3ab69-4944-45d4-81c9-133f520468c6", "indicator--0f6b1ba0-eda3-46db-9b67-b7293d536665", "indicator--baef56e8-fab0-442e-8270-86acf4b92fad", "indicator--0fce26c3-ee06-4392-ada8-980943714aa1", "indicator--85cc180f-cfca-44c7-8210-42f1fbe23d8e", "indicator--d5d0b39b-4a4c-4d32-baba-1cb50a8f7b91", "indicator--eb524a72-e7e0-4a44-84f8-19b75b8ca8e2", "indicator--582d2f3f-bc49-4e00-bc92-f581ce9883e8", "indicator--750075ab-8692-47cc-9af7-ae15546d7505", "indicator--6b23ff22-1704-410b-a4b1-2c0386a8d50c", "indicator--d6e9f2a4-0822-404c-8311-e5e31a4acf43", "indicator--3664af8b-f28c-49d8-b841-e9a2af15bbd4", "indicator--4c172d7f-843c-47b5-afa6-6df16bd56218", "indicator--0d197d09-3ac4-46b4-8b83-a18fbbba556b", "indicator--d939d677-e40c-41f2-ab30-20ade0d846ff", "indicator--a658f513-2954-4456-be2b-aa5150230965", "indicator--ad941dde-a6aa-45ae-a35a-241f388b6c4d", "indicator--bec3bef8-338e-4793-814e-f85d092ef097", "indicator--6b4c0a86-2c9c-468b-a615-aead43992087", "indicator--069dfb74-7535-4716-b309-601540f6daf6", "indicator--0aadcab9-1e0a-4685-85f5-14dab90a5297", "indicator--a692d16d-e2a9-4494-9c57-ea110fcb1064", "indicator--cfcbc245-4410-4087-8e5c-8af5f0152f8b", "indicator--ee78bcbc-92f8-42ec-9624-9e0838622f34", "indicator--1950c1cf-b786-4845-948c-63b946844ebf", "indicator--81fcebe3-1cda-4d2f-8278-21ca3190bc45", "indicator--9fd1cac0-cea1-4882-adcf-77d8d0a6c2eb", "indicator--b79ab9be-1278-492f-8b4e-a9aee910b858", "indicator--b5170f21-e5e9-4383-910d-257340da0106", "indicator--923b1b96-c5d8-458d-a082-11219ddca130", "indicator--9faeb8ef-9ba3-4e8e-823a-0ea44cc58bd3", "indicator--4e7f0719-1f85-4fdd-af9f-8521cee57375", "indicator--9cdb459f-09fb-4b93-9b63-b3f952488d15", "indicator--b5f61bfc-9605-42de-aeab-a4540dd76ec5", "indicator--479694d2-da66-4429-ab29-46f8efd59eec", "indicator--a650422b-08e3-44c7-a73c-f42c4b919052", "indicator--fb57002f-2c8d-4f79-8c64-606fb29cd873", "indicator--781d0c6d-07f4-477c-bb0c-d3918ae6723d", "indicator--5f36ca4c-d97b-47c3-a8a8-061fc2efb2fb", "indicator--2d0590d3-573a-4b10-b6da-281786e9994b", "indicator--5bf2458e-75a3-460b-9eb4-d4876bb14f40", "indicator--d97d9678-5221-43e4-b646-4665239b4f85", "indicator--4ad4827b-860a-4f54-a8fa-be8c0a4b7abf", "indicator--bc3852f5-1e76-4e1a-823f-0593292af803", "indicator--935c4fec-caf5-411d-9129-d28557820212", "indicator--0b93eb01-0dcd-4692-91a8-f9685a122343", "indicator--ed1814c5-cdcc-4912-a33e-d791987db44a", "indicator--c79f5002-2cd2-4418-bbbf-6880221739fd", "indicator--8aa8bef3-e0fb-4e6e-a495-f7644fe8fb25", "indicator--a94d6d77-5485-4108-8b7e-15a340634434", "indicator--955fb76f-42a2-499f-b8f8-c94dfdf8cced", "indicator--0d8f6f0a-7bb0-40f4-810c-cd8d03d11ac5", "indicator--ccc05600-eddd-4547-bc8c-b087bfbeeb5d", "indicator--08cf13d1-f5c6-43c1-a0e2-a07c28ae891a", "indicator--16f14345-746b-40ac-9ad2-2d9f4f384354", "indicator--37269baf-7cb6-41d7-bbcb-4589872b7728", "indicator--88517455-3353-4f69-8050-f09ef3aeccc4", "indicator--6ddbec57-50c0-4d66-b07b-ec45c507c5f1", "indicator--c444e7d6-8e45-4856-895d-97407603b9cc", "indicator--4be3cae7-4e69-4f3d-831e-c32caa81628d", "indicator--165f1d6a-0ad7-49c7-b696-39a114940674", "indicator--d6a13675-8e05-4077-934f-676075340088", "indicator--7fb2c522-e5b7-4a07-9ee9-ce68819e8442", "indicator--5443e883-91db-4e26-bd44-88a64495eab9", "indicator--a0e22c62-966f-42e0-9475-67a46795b855", "indicator--569c73bb-ca59-4bb1-afd9-ee194c7abdea", "indicator--6b3fedf3-fb6d-4efe-bab0-a78508ba45e2", "indicator--0953b6b3-3e21-4d77-91e3-553246af77f6", "indicator--82f33782-5284-4808-9709-6e6fdf1dc445", "indicator--5914a764-ce09-42c1-802a-e199c026f147", "indicator--0966322d-1c6e-4ec9-80d5-7b2062bcff56", "indicator--1d4bd382-77b3-4919-b761-4db913bf8637", "indicator--254fd1ee-e982-4a1b-b96d-9af82addb883", "indicator--9aaf8251-f724-4b46-9ea4-1a23ee5e8e38", "indicator--0340aeea-74ea-4ffa-bdf2-e8fa6cac69e9", "indicator--e94893b9-ef83-43af-998f-47fc4d96e1a7", "indicator--f5c3e435-e304-4eaa-a712-5d6f7e22aa41", "indicator--8e9e1a89-0fd7-4677-aa7e-d4701bc76f09", "indicator--3f7a3184-7ff9-4b6a-8bfa-80b1d0cf7450", "indicator--3c7a7435-dc1e-4539-8017-9ed0c77caa5c", "indicator--3ee80129-f5b2-4cbd-9454-8f1f04333ef8", "indicator--fa7ed844-021b-4b61-aaf4-cbaf3e01762f", "indicator--eaaa7daa-688c-45d2-9168-def6356b2c83", "indicator--84ce348b-5757-4d81-be2a-f743e6dd191b", "indicator--3883023c-9efe-464e-a476-a0351ced7efe", "indicator--759832ff-d9de-4c09-a5f0-62904f831d01", "indicator--ac34ba2e-bff3-4a14-942b-366acc68dd16", "indicator--4c77e721-08c8-4ced-96bc-bacd3f9294cb", "indicator--807b4996-1beb-402a-83f3-635d0b8bc606", "indicator--20b8db82-ead0-477f-8ba0-28497fdba89b", "indicator--9c544c69-3803-4e45-adb8-289299fc330c", "indicator--18a818e9-0b6b-4c5a-9cd2-7802899b3b66", "indicator--56391c1b-1d87-4bc1-b7ed-e5b0e6a11f0c", "indicator--56b46f24-ebe0-4279-8371-aacfc2848c4e", "indicator--d8b57958-6f38-4e98-a669-447af0c005bd", "indicator--5b98e943-e4d7-4df8-8fa7-7dc6dd42607e", "indicator--11bf4da0-50ac-4db0-b969-a51fed89fc7a", "indicator--413ed1de-782b-463e-b44d-9fa62f5d1769", "indicator--380ae454-5872-4a89-8bc1-6049a9ba9718", "indicator--881ce6da-b48b-460a-a4ca-16ee34cde27f", "indicator--8ebadbad-d67b-440b-b3a6-2d57c0c04889", "indicator--bdebb845-045e-417b-9596-17b6e1c4a2c5", "indicator--e51820e1-d71a-4ab1-9d08-406222ce5c32", "indicator--c168dea6-3ef0-45be-bf36-39cb07e4b7fd", "indicator--b330ba16-860f-4e17-aa09-8d0c4cbd3ae7", "indicator--354ccfdf-1c40-4a56-86e4-5fbbc5a56abb", "indicator--e1f9ad07-4030-41d1-94e4-118cb0000392", "indicator--49dfa4ef-ac2f-4a82-b229-428925bb444f", "indicator--bae1d34b-9c29-4f42-b438-45f626728e7f", "indicator--661d9e30-ee7b-458a-9b9a-fcc244db33d8", "indicator--b1d0581e-c450-4bca-8eca-86f4958b8cb5", "indicator--0917f26e-599b-4cd0-8879-a724d9d87b3b", "indicator--fede5bc1-616a-42a2-b504-df0bd6ebc1d6", "indicator--8d575667-0a52-46be-bb77-ce309245b07a", "indicator--a50b2377-8d81-48d1-a5dd-9263e7d31a7b", "indicator--88d43869-e0b2-4f0d-8337-20c4046ca2a6", "indicator--e8a20c56-73cf-409e-b221-ca87ec8ed5dd", "indicator--2b1da659-3bfb-4143-b21c-4d7fb81da040", "indicator--29995291-1f57-4eeb-bfba-877b74f08ef0", "indicator--804d6cfe-37cf-41b8-8d14-e87f3180068c", "indicator--fdd33c67-19e9-4c5d-ba19-663ccda51386", "indicator--d9580c25-52ac-4e0f-aa10-46c14d6d8d2c", "indicator--ccdb47ba-c39c-4b67-96c6-a2deabf8f464", "indicator--c4477274-b530-44cc-b712-2e8e8f6bf7e1", "indicator--a962da90-6fe8-481d-892f-cdaaa3cfe66f", "indicator--1274a3d0-f58d-4257-bc46-e5713d4833cb", "indicator--c0618517-f922-4e4f-aefd-dd7bb62b7226", "indicator--b2097d87-e664-4107-8215-eb77b6805ac2", "indicator--1e44b11f-818b-472c-9d9c-662fbc601be3", "indicator--b485d125-10dc-4ce9-b318-8023ab411c36", "indicator--8a1f2124-6099-412e-9bc7-5b0f17ef5e8c", "indicator--5439b48c-5352-4aad-ae16-140073a1fc3a", "indicator--370afb96-e8b7-493c-9459-d15879850724", "indicator--21f450ed-8f1b-45b8-9663-8d12e1e3fa6d", "indicator--367955bf-3ff7-4ab9-85cd-279593cb4e3f", "indicator--a732d89b-7fec-406b-bbef-f441cd50e730", "indicator--0189e280-53a3-4d92-9870-6a006f079295", "indicator--e2b44a35-c0f6-4066-8ab8-432b270a49a7", "indicator--549a017e-014d-4191-a945-194c9e402bac", "indicator--bc6f4eef-2f31-43bc-861e-11013ce8041f", "indicator--0b3fa64f-a845-4379-a2c5-14ca550f9e02", "indicator--c5f44f17-fc4f-49ca-a324-33b4c4485cf9", "indicator--c9304f34-0a1f-4f4f-aef2-01a543d4c266", "indicator--0e67db06-b7a7-4396-9afc-24e5718307ad", "indicator--38413ebe-d5ef-4194-8eb6-996761f29a46", "indicator--dc561aae-c874-4f7c-88d0-4b5eefa939fa", "indicator--61c96392-6e6d-4bf1-8784-b8ac4ea6cf50", "indicator--70a09b40-4856-4d38-afde-d3bae4323081", "indicator--1c8cec46-37a7-4ef0-b323-84f3f3561120", "indicator--c5fb0165-a36b-4e12-9de8-ccdff79f8ee8", "indicator--63e77234-4775-417e-949b-4f5e0dd72317", "indicator--63953d35-dcd3-4524-a606-550e98573e1e", "indicator--ff556ade-34f7-4069-ae0e-cb6661e28604", "indicator--885cbf68-4885-45c3-adba-0faa8f005646", "indicator--a4911e31-016b-44e7-9a33-bf950ae31269", "indicator--fa4aba3a-3995-44ed-993f-5e4e879cc4f1", "indicator--8ea26a87-aac9-40eb-a485-aaff804d4116", "indicator--5ef22fc6-8ae7-4bf4-8cd5-7e4ba26a821e", "indicator--b954ea01-fad2-4bbe-bd6e-8cc603fde331", "indicator--160b2430-a107-4cfa-9429-92850fa21214", "indicator--a3937515-ad52-46db-9823-bbaeb1241dfb", "indicator--9d3c64df-b548-4fc3-9761-fa98934e9396", "indicator--94f04779-8ea2-4cc3-8079-d98f7c532bf6", "indicator--504b7fb8-4a9b-4b7a-933c-39b06d603147", "indicator--912b32c5-6c39-4f5a-91a9-0f21e55373f8", "indicator--38e572e8-4530-42b8-a9cb-dc12ebbfb17c", "indicator--41ca4dc7-4866-46e4-859d-756ae8849c40", "indicator--a1a192bf-eb6c-41a7-a03a-d2fd3c35bef0", "indicator--b1903a65-e33d-40f9-b4af-040a203b4569", "indicator--11bc5086-ac45-47ca-b325-8bfdd2b7118c", "indicator--3c4eb7c1-e129-4f45-b5a7-c860d916923d", "indicator--f184c151-fcab-4a1b-a215-741af4af933d", "indicator--ffa0bbcc-e1a7-480b-ab73-66ab4eb62266", "indicator--a200066f-64f0-47bb-a788-996271f29151", "indicator--0dd4efc7-3192-4b6d-a9e5-0157ce212b50", "indicator--8a8d41ba-6f2f-4ea1-90d9-f3652058b4cd", "indicator--49cf4c21-df33-4a88-b8e3-6ca32eef5c44", "indicator--f008513d-bbd3-4d61-9616-62fd96a9d2a3", "indicator--ba775fbd-1b9d-460e-8213-67824c0e69ff", "indicator--39d06a81-df76-42e6-8630-655f92acd684", "indicator--420a22ae-7950-4d3d-a69a-e1f1fc487024", "indicator--a1ef6f6c-2cbe-45be-b145-2c6276f91b3d", "indicator--5e40e081-75f2-4be7-ab64-abdf529727e4", "indicator--75df38ee-011e-4cf7-9615-cd853d3c3dcf", "indicator--b1bd95b7-a496-4bd0-8e7c-1c0b2fa40865", "indicator--30cce575-7a74-475d-978d-4b99562c2be4", "indicator--98bf4282-0e74-4d3d-8360-2ac771f41ec7", "indicator--1c980a8b-bde2-4174-b8a7-7c6c531fca60", "indicator--a7954a17-9693-404f-b20d-c55f68a0029a", "indicator--ef8b84f6-99d9-4aa6-b9a6-3b6f36289909", "indicator--bdb32d26-f69e-41ef-9904-c55b9b4111f7", "indicator--38819310-6b3c-40cc-a085-775808f8f46e", "indicator--07304754-d9be-485c-9932-fadbbc42b1ec", "indicator--7be6e1e1-cfe2-411d-a729-eb63e4d2ea52", "indicator--671c8fe8-4032-4cb4-8a62-0782b7be2d67", "indicator--9ef15276-9236-4597-b2a2-d9847d2385a5", "indicator--3123f282-cf2b-4f3a-80b1-e47485cbc384", "indicator--3315a6c5-2bec-4db1-ae69-2d2a9014b53e", "indicator--0ea8017f-39ad-48fc-b7e4-e34046524f76", "indicator--60feec86-ea6f-49fb-b583-53a40f61f784", "indicator--b8a5c3a0-847a-405e-9001-1f7f4aab7ed7", "indicator--ac36f789-74fc-4837-8964-27623e9dfdd6", "indicator--5b4c6d7f-8f7d-4995-a961-396294628971", "indicator--143697d6-e3a1-469b-a5cc-3f765babbc29", "indicator--32d4ae16-c0c0-46db-a2fe-5981319af229", "indicator--434ef12e-79c3-46bd-8443-38a3bb1c2087", "indicator--8f9a2d37-5ded-4cf7-a3c0-89a934384ac8", "indicator--d3d29fcb-9831-4857-be85-d6a2ebef1c38", "indicator--7ead788e-bb85-4bb0-9fc4-164c68d891c7", "indicator--871a6196-551c-4b0d-b620-75be8094e34c", "indicator--be882dea-69c4-4251-882f-680c3efd3975", "indicator--1263a933-c514-4a48-88de-8d47fafcc0f2", "indicator--4f61b16e-20bf-416a-be0f-e6a658a2f290", "indicator--c0472d52-9e4f-4baa-83f5-b0338e0f22aa", "indicator--2767a2b4-d111-4077-a3b6-13a103908e91", "indicator--89a07569-cdb0-486a-a443-b7892a3fb05f", "indicator--dc383712-2bfa-4c33-9a40-e9438663683b", "indicator--38a8043c-e7a2-4b4e-8edd-687b08630a76", "indicator--36e7cf9f-ea00-4daa-85b9-ea32e4fe9036", "indicator--3241afd8-aae3-4a74-8259-6efeaa3c11ee", "indicator--bab5ff32-2de7-4029-92b1-5cb24a6ef155", "indicator--698a021e-48d2-4464-8546-f7e777b70485", "indicator--699a625d-00c7-4808-b6b3-a2d0f59f8672", "indicator--90cf2fbc-4205-4342-830d-272885e59fd5", "indicator--dfb5d092-b7c1-48fb-b528-af3fc02f2b2b", "indicator--89fc70a9-f6a1-4077-99cb-132923cb675b", "indicator--dcd84708-be0d-4917-8661-6ddf727c2660", "indicator--38b94e38-c91e-4584-b084-69e1607f6f90", "indicator--68927d44-69e8-44c7-bb30-d58c6329cc31", "indicator--d96a6b7b-9627-4850-ac62-4707fad2e1fa", "indicator--037065da-e851-4c48-9c64-3b1ab98a5ceb", "indicator--32151a85-fdf0-4002-8a82-0b79b218cd09", "indicator--62bd0943-2629-4519-a18e-dfc297680671", "indicator--b50051b1-a41e-41bf-bc06-8788fad6d519", "indicator--6e99ea90-8340-48a9-a6c4-61de1f53e48d", "indicator--7858e022-30d3-48b6-a58a-ed7190fb3d8c", "indicator--26199e67-16bd-46eb-9e01-195eb4ad7e21", "indicator--d8d91d5a-0524-4929-9c6a-4bd37e1ecbc6", "indicator--d174eef6-93b0-4905-8ba3-9811cdd80726", "indicator--905fb3a7-9919-45df-810e-435f380e36bf", "indicator--d6ce6e20-5264-46fc-8aac-9e7a45bb7789", "indicator--df0a5886-42cf-412d-b02f-606445a5f46a", "indicator--6c7811e7-b7c6-44ad-8904-4004fdef8392", "indicator--0cfd0613-cccf-4862-b359-038f1d6b2222", "indicator--651aaad7-dbed-426d-af2d-700394294ed2", "indicator--6597ce5b-7d4d-4d17-b62f-34c5314e725c", "indicator--573eef06-a4b5-4bdd-8335-bb1a46ae944f", "indicator--bca0d611-e3f0-4576-ab36-7dcfba8d1c61", "indicator--f6c02a02-b6a7-4b86-97e0-1f6b608bc6b8", "indicator--ecdf1d84-5bb6-457e-8688-7186f951cc23", "indicator--26c99ee4-3a69-492e-9fd7-9cf01ca6cb94", "indicator--17d18b8a-aad8-4f80-944c-151f48751a82", "indicator--ee0d0a1a-3ea5-4035-91dc-5bab07339e6e", "indicator--67fe32d7-21b1-494a-9051-f0ee9243b658", "indicator--3c2c74b7-536e-45d0-9862-537d5d2d7b4d", "indicator--127c7df5-0b82-45e9-9af2-ff4694d78e62", "indicator--328b8873-65ba-4519-8b0d-e3f6d2a10b40", "indicator--d4418914-765d-4828-ac77-f2f57a976952", "indicator--af78dbd0-29f9-4bd8-824f-f7a75a92ddf0", "indicator--7fc9205d-629f-4e1a-9318-d32f734a8350", "indicator--5505b910-2cf9-43c3-9971-a1aa7ac9c9c6", "indicator--c57ec120-9214-4b13-9fb0-a8c301d32514", "indicator--50e77902-5969-400d-ba26-4a360da96fba", "indicator--7878be7f-9eed-4a7d-af8d-f5bdbd145c44", "indicator--b04ee859-abaf-463b-a6f4-831f093b383f", "indicator--47f232bf-3494-442e-bd49-0dd6928b1baf", "indicator--46c0018d-22c9-473d-9b8a-edf9871c5894", "indicator--f1d9708c-737a-4e77-8d8a-60487569947a", "indicator--54b56c29-9a21-46ba-89d2-cf7042328abf", "indicator--6d215e7d-733c-4227-be3c-184a315b6f75", "indicator--92b94838-dbd4-4036-bd51-2850d8bc9978", "indicator--2ed54974-d713-41e5-883e-09c2254a6451", "indicator--6a16dd9e-251f-4bc6-b3fb-c860894a20f5", "indicator--69db8007-e71b-4681-ab16-e81a6a55f315", "indicator--fee3377c-8c5c-49c0-8b67-3ff059d59aa4", "indicator--d4792d62-5eef-4986-8220-7168052e3dae", "indicator--830775cc-095d-415a-b85b-e625c6252c86", "indicator--8ead8b1d-4148-42cb-8fcf-7ddd2b1b3d48", "indicator--5a704dfd-5a6b-496e-bac1-ceabec24731e", "indicator--98d8c909-a943-48a9-930f-d78db18fbcce", "indicator--ba2a2757-1dae-432a-a92d-fa53608661a3", "indicator--5dbaf191-7168-42e1-a18e-77487841eb01", "indicator--8cc66e03-3eb0-4d34-9891-d2eeb5771775", "indicator--041de66d-b67a-4cfa-bfae-8c53c1e6ab36", "indicator--71d694ed-4086-4e7d-ace0-f51895a94eb3", "indicator--160bd8e5-3af9-40c6-822d-484a6993e336", "indicator--2ee20deb-390b-49cd-b138-92154739bdb9", "indicator--74c02757-7347-4cbd-980a-1ab3ade8f356", "indicator--8782eff0-064a-4d28-aac0-c221e283de06", "indicator--d5e62c59-216b-4526-b8e7-229287a5df1f", "indicator--c88b880a-b772-4f85-a3cd-686ae8848881", "indicator--7f1d5885-942d-4a9b-932c-06fceb200310", "indicator--851b6887-9aaa-4dca-abaa-13d46cc68234", "indicator--0fe11899-db9f-4b1c-a4fd-d5f49085071c", "indicator--7abc697b-1515-4f31-9124-dd6a0dbdd11e", "indicator--eee6b16d-b02e-4ba1-b353-710c91d57711", "indicator--36dc2c3a-4bdc-4186-8587-cbbbcdaf93e8", "indicator--80592685-f6bc-425a-aa46-0f5f4ef4bcc3", "indicator--fb5d6e7e-931b-4a4e-973e-2b5c64d9483d", "indicator--a86ad4bb-39b2-4185-b551-4b621372b1be", "indicator--8c720149-dbac-48f6-a08c-fe28d6d73bc6", "indicator--c6d2d388-2821-4be8-9083-fb6f40a976b2", "indicator--ee38fb6a-929f-4a9f-8ae3-e81a7b9dc594", "indicator--2aeb044e-c63d-43b3-8947-6df5b26bcd59", "indicator--7dc221e7-a87f-49b5-9548-70270c753fd2", "indicator--60d4ef1d-013a-4b1c-8348-ca4b78094413", "indicator--ead4e1d9-8037-421f-b9c2-0d5af5f9b241", "indicator--967ea697-87ce-4b16-88d5-6afbe3cd310c", "indicator--7eb082f2-d296-4d15-b18e-d48511cb7dbf", "indicator--9ff1a877-eaed-468e-86e4-f194747f507b", "indicator--7aa4061e-bf8c-4f58-b869-64cd4814d590", "indicator--2f9c8377-33f6-4401-b4c6-9b089d3a751b", "indicator--df4b105a-869b-4689-868a-f4947c9b80fd", "indicator--dc53ec65-ec9d-4fd6-9e8f-f9f822266e8b", "indicator--c64744f0-7cc8-4c95-ad50-2f9cca87027a", "indicator--517abd19-317c-4ac5-9ba1-5b8bbe729681", "indicator--609b48b2-1967-4f42-b37d-2fa069b59ff5", "indicator--deacc9d3-1895-481a-b8bb-635e5c81ae4d", "indicator--ae096483-679d-4f89-8ecd-11175312b1eb", "indicator--889e3ebe-256d-4550-8a10-7bf0eedfb6ab", "indicator--0e4b7ade-3326-441c-86bb-1d433e80b822", "indicator--40e6c60c-5fe6-45dd-90c3-34c7d5ca84dd", "indicator--539a4de4-6aaa-45d6-9ebb-bff56e68c7df", "indicator--8cbb80f7-4853-4f9c-a371-2ba7569d4618", "indicator--bd84b3c9-19ac-44b7-b9e3-70495f7a8058", "indicator--4758fa18-51e2-494b-831a-8c7799d7852a", "indicator--289d2014-de21-4cff-8e64-c9247af4d370", "indicator--797b8546-715c-491f-8cca-a41737be4de9", "indicator--2df5e268-0357-4298-aed0-9b7679be2656", "indicator--69b1701f-06b0-4e4c-b2fc-af0d0d7ed7e7", "indicator--05ec60e8-af53-422c-9b24-06ecca68cfe8", "indicator--8ce3963c-ff2c-45ec-a6d5-1aaf57f273e9", "indicator--d5283453-fa29-4b22-a39c-98dfdbbe7324", "indicator--8872f015-aec3-4fe8-affe-7c2f9d898a75", "indicator--8939f714-6d33-4f11-a11a-2f3bd8f8854b", "indicator--9f22e75e-6a1f-44e3-ad9e-b19c39ed2b50", "indicator--cea3b8fe-1949-421f-8fcc-bd77dd9cc382", "indicator--c2dafc55-78ec-4591-9593-4512208fe2e8", "indicator--52ebb902-852d-4b67-aaf3-f2717205eb4d", "indicator--646dbc4d-32c3-4b28-b5c2-96e737d115ea", "indicator--da271b25-09d1-4141-a4e3-13817661aa14", "indicator--8c93bed9-bda1-4247-9749-b674bf1be1fb", "relationship--4bb54d32-9b4d-4f3f-b83f-5f3c4c9f967b", "relationship--08030eac-775a-49a3-ad31-0f94e1a8ba4d", "relationship--5be32ba5-18d4-4f72-b11a-d5d607fd9ff2", "indicator--59c8ceef-5c3c-4a4c-b8d6-1ba7d82cdc7e", "indicator--f7b34596-2e92-49a0-97d8-c3698818a9f9", "indicator--7c738f76-aed0-4100-95ea-1e294f5ec051", "indicator--aa890eea-7742-46b9-a5ec-1bd6311fc546", "indicator--d4aeab50-7e69-477a-bf0e-87b8bba4931f", "indicator--75cc2dbf-b369-4a73-bc89-a0a3d63ab877", "indicator--9465fbc8-cd73-4f36-9190-3b4a50639065", "indicator--6a40b002-d550-4996-9d2d-2bfefd0176cd", "indicator--84e35c1f-6894-4d1a-b087-1dc5a0510aca", "indicator--071840d2-1914-4816-9437-810c2db8c09a", "indicator--21f68e0c-8ed7-4549-88da-ff5ea15e61c8", "indicator--39ec8ee6-b707-4bc2-ad86-8d6bd564340a", "indicator--64bcdd5c-e34d-4802-9ec2-6d198a1df05c", "indicator--c1a3016d-0866-4221-acb6-cae629a5a2c4", "indicator--b0654dd4-75ad-4cfd-a056-06cba1368330", "indicator--e316173b-f1cd-4c1d-bd80-24d06f40945d", "indicator--98c81e2d-a4cb-42e9-abb9-e0e68c06adab", "indicator--0fc89fb6-b5c4-4388-aeb2-795907e1dfaf", "indicator--777441af-5eab-4d16-a6d6-9478c1b10f92", "indicator--4bb0b66e-4e40-4b55-b78a-483bfaafa44a", "indicator--36acbbb2-2f4e-427c-9aa5-7ac2761d59dd", "indicator--af7b4d72-4b26-4432-8ef1-cdaf0cd48df8", "indicator--4448eff0-9f41-4b61-bdfc-ec00b1455c11", "indicator--7d02adba-e5f9-459a-999f-15078a72e1ad", "indicator--ccf49a90-2e46-41de-8288-2ff2acbfb43f", "indicator--555b9190-bf23-45e2-966f-5f9a9f476fdc", "indicator--0fadaac3-909f-475e-8cbb-870d72f3b95a", "indicator--e1e1a537-3350-4f99-a80e-316db97fe304", "indicator--d6394332-e385-4915-9f80-d7716dac2d4e", "indicator--db7163c9-35e2-4c24-b8d1-15c656c60aa9", "indicator--82484cd5-6db7-4772-85dd-f7b1fa5681c4", "indicator--62953e5f-56e1-4a17-9a8d-11df0d7ad3f3", "indicator--a02939cd-cfd2-47ae-8c10-888ab6fc21cd", "indicator--106d23bb-0a7a-4177-bf00-893ee7a00d97", "indicator--2532fd96-445c-498d-ba85-58fcf0ede5d4", "indicator--4fdbec8f-1a86-4448-8f42-81a0dea62d9a", "indicator--b9c4e838-8e5b-4099-8a1e-02a89cf4d99e", "indicator--fbe45b6c-fd2b-4de2-ad2d-bdff2ce555cd", "indicator--58acf598-a9e2-4559-bfc0-cdab96ad12f1", "indicator--f9520b76-b8fa-4090-98f9-dbce6b9f7a97", "indicator--6d637ef6-e9a0-4beb-ada6-1533e304bff3", "indicator--e10ffbe8-2eb4-4e73-af30-745c10869d19", "indicator--2e491d88-19f9-4826-8885-7e4607e7a167", "indicator--c9527878-86fa-4c6a-a21a-4de81b5c897f", "indicator--93af0b4a-e79e-4860-84f8-4277011935bd", "indicator--96bed0d4-8d84-4c15-ac9b-292c5695b663", "indicator--c3e9a795-5965-406e-8c70-f4ef278ed9f0", "indicator--85eb9892-88b1-4550-ab23-b4b6bf48f362", "indicator--7ae52aa8-edc6-4007-ba71-ba30957085d2", "indicator--5620c8c8-ed9a-4c4f-9de1-ac22bb767bc2", "indicator--2da5eafb-df5b-4399-9a0c-8fc55f559156", "indicator--ca642fbb-dede-4d98-8f1b-aa6e8e5054e5", "indicator--a97d8288-84a1-4c66-9491-aab85c627ea6", "indicator--56fff7dc-9750-428e-b8f2-0e07eb5c02a9", "indicator--5195c16e-1432-4695-b771-5fc18007102f", "indicator--aebc3271-1eda-48ea-9169-6df4a6dc4d8c", "indicator--2152db63-692c-4ee8-99ac-9d936db56dcb", "indicator--7a38597b-59e8-4a97-b384-589e1b862ac1", "indicator--87dbbcec-14df-4647-a12c-4af1cd37e4bd", "indicator--169d101c-636a-48db-99cb-c572326c1d31", "indicator--7f877694-459e-44fc-b454-d2e8c77119ab", "indicator--b6390dd6-2c4f-4a56-b275-76cbc8894e57", "indicator--72b15437-dd35-471b-9187-a1acdd52e35e", "indicator--b069f9cb-3d2b-41a4-b659-ab7d214cf857", "indicator--9e56e464-1384-4d39-8039-33cb9fa9d5ea", "indicator--a9ace8ff-e600-4bdc-ac0a-83a029f4c8e3", "indicator--747bdf26-22ec-4e5d-924a-2760830a3b85", "indicator--f92e756a-be13-4b29-b3df-983d14aa3850", "indicator--05924385-4168-4c16-8e52-20916bada32d", "indicator--cdef6094-afcd-452c-9c31-d382681cbdd3", "indicator--6dcb3e63-cfaf-4d2f-b6cc-981615710315", "indicator--103c9e1d-ebcf-44d9-9b43-e5ccfd18b80a", "indicator--df024336-7edb-4a93-a17a-0da2961f0c18", "indicator--999e7b1f-a889-4292-b773-0e147f92c699", "indicator--087bc119-ed49-4eb9-b902-cdb210723f17", "indicator--ea9b34f6-a973-4790-aa99-123092d3979e", "indicator--1dca07b3-b0f5-41d4-b9b9-4e3d89822769", "indicator--be90e88e-9cc9-460a-aefa-a120640e6c92", "indicator--a14311db-042d-415b-8cd9-111358894c6d", "indicator--a2c08e06-1587-4eaa-a798-7c2a6392bc6f", "indicator--a64dc330-2f27-4964-bba0-60c928009294", "indicator--6d85a656-c32d-4b07-909f-3980120cc6e9", "indicator--c231fd32-cf2e-459d-ba64-f4c56f5afed0", "indicator--ad39d143-dd7a-4e09-9154-cd55d2e3980f", "indicator--ed22ac73-92a2-44a0-8afa-57e123f8a432", "indicator--31dde4ef-4f7d-4781-aa33-b5347943dfea", "indicator--52222ee4-2918-4d7e-90a2-301f434a049d", "indicator--e212f520-5746-466f-93b8-75ff8e1a229b", "indicator--be5fc6e3-66f9-4d12-b7a0-7dbef37adad7", "indicator--00b7f301-f029-4804-a986-5882c70062c3", "indicator--429a0d94-65fe-438c-a6a8-f621abe4d9fb", "indicator--96dde6ad-f702-4fd0-9432-a5cbffebc130", "indicator--3295b6c4-2801-459a-9ab7-12efcf226494", "indicator--d0ac1f8f-f9e5-46e7-85b5-bef4e00f4b99", "indicator--4c07a09b-b25c-4459-b874-559270669af3", "indicator--689ce541-999c-42e8-ad6d-753aa0edaa40", "indicator--0bb895ce-c4fe-422d-80c1-132e1e54b286", "indicator--cf4ac6ac-476d-4897-a037-37c2f93abfcf", "indicator--75ac1b45-72cf-4c8a-9245-4656b2d679ec", "indicator--4ca8f1e7-4c6b-4b77-a864-e7ec51c7e00d", "indicator--6743daa8-d8b3-48a4-b74c-fc31cbbc15fc", "indicator--0699f462-0ffe-423d-89cc-56c4e4d56e23", "indicator--5a351221-c91b-4a30-aa9f-a67da04f4588", "indicator--7c5258ea-49a0-48aa-a11e-ab7857fba734", "indicator--8f181abd-8336-4927-a2f7-044e6d48c650", "indicator--ab2e1aae-4a47-4231-be6e-e713924c35fd", "indicator--eade3dae-4605-44e3-a7a7-5fd747edf486", "indicator--8d83870e-2087-46a5-a9c9-0755345c5538", "indicator--bb574704-e6cb-4828-937a-368074cf1601", "indicator--e9c4033c-cd39-4397-bcd9-3b71d6357304", "indicator--c3163b87-5ae3-42f5-b7f6-6ed48df6cc77", "indicator--87dca58e-fee8-4581-8485-df27e1e946ff", "indicator--2d856f45-00b5-48df-afda-fb60304e6865", "indicator--0483446d-049f-4588-9639-6131792f5a06", "indicator--d1808d1b-26ce-4a84-8505-07712a08ef6f", "indicator--51cb6a9f-c1e1-4a89-8f29-676dc264789d", "indicator--3e5114a2-c83d-4131-bebd-e3b0a25aa54d", "indicator--57d54dab-4604-4333-9985-3495d77dbf08", "indicator--e8a37ce8-3224-46f6-839b-ca61011b7fa9", "indicator--f9a87e5a-3342-488d-90ee-f9e2c9daf8d7", "indicator--6154a919-2874-4258-aa2e-9145c76dc6ba", "indicator--5d5076ff-19b1-45d0-b6c2-6d2d4402dad1", "indicator--fe817c39-c962-49da-b5ed-e32e47280b10", "indicator--a8d0c6e9-8e1e-4926-87d7-8a4e45e861bc", "indicator--2386e8a3-e484-461f-a9ec-9e75b4c0c80f", "indicator--29e04675-9b26-4858-8d72-67ac64955e26", "indicator--28be1440-8148-44a2-acbe-28ca8e989e5f", "indicator--75fc7d45-aaf0-42f7-a858-47ef30ff4502", "indicator--2acc6978-0ef6-47bd-b1c9-c9c6fdd6f6d0", "indicator--dd256c26-d554-431e-8ea6-b6b045195d1e", "indicator--28040799-062b-47f4-a5c7-397b83ae2ed7", "indicator--25c47ff4-6940-4305-bdd8-ca408652d32d", "indicator--0301f961-a2d1-40a7-a302-ea962d1635e3", "indicator--dea862db-c05e-4e95-bf6d-3ec2df3f50dd", "indicator--f75f899d-a888-4db2-a8f5-560d88ab3f75", "indicator--0ef7c31b-7ea8-48a9-a415-be2e69160731", "indicator--84030b34-c47c-4238-9d94-fca9803575e4", "indicator--66e75ef3-0a7b-426d-9e29-d15fa471f57a", "indicator--23bed59a-d09e-4444-9845-67d893001e36", "indicator--07eb0871-2663-4b11-8ab1-b4685d9617ca", "indicator--ca43ddcc-d81b-4e04-a6f1-cc345b6d9236", "indicator--a00ce239-786c-4f95-8f7d-39582a1103f1", "indicator--9312d272-9e41-45f3-ac10-d57164834cd3", "indicator--ee1f2965-d89a-4f81-bde3-172392a60c05", "indicator--67f940ee-0ba5-42e7-8dd6-d5bb46fac73a", "indicator--42cb0641-29d8-499d-a429-270f81eae9d9", "indicator--f1ca95ea-5456-4fbd-b0bc-2db8fdfe9a8e", "indicator--70460eb0-1651-41fe-ab9e-62e84e6ae162", "indicator--8b16fcc1-9067-411f-ac51-62da0e5a201a", "indicator--7e354c1c-979c-4bd9-9313-6a7032a74f55", "indicator--93efecd1-2e9e-4157-9672-798b37282e31", "indicator--94d4e25a-d811-4c22-8d76-a53b43b1be11", "indicator--d2c530ba-9ded-40a0-a085-54a817d834f5", "indicator--65ba1800-c773-4db7-9e05-ed611510c53f", "indicator--ec5b0bc9-dd76-4b19-a89c-713b5b193532", "indicator--6b82d20c-39c5-4ac4-817d-12aaa123298a", "indicator--7462043b-7562-4fd5-8f46-bec33b76b4f9", "indicator--3fd887c3-5d56-466c-a890-9801c962d568", "indicator--9f7b7982-74c1-4e26-abe6-b57aa70905d0", "indicator--939b7c8f-d555-4b08-a392-30a281c546a1", "indicator--d6ed404c-3039-4904-a930-e4d61f23070d", "indicator--648c6a52-b8b0-4e33-b93e-09e8c9057246", "indicator--df7e5f41-45b2-4165-be20-a725dc04abf6", "indicator--aef88da4-4548-4ef8-92c7-1f910bafe830", "indicator--db0697cd-9c05-4e99-acd5-26d0dd94293b", "indicator--e99b347f-9905-4848-8ac7-7e1abbcb542b", "indicator--ccddcb19-f72c-4f59-ade8-fde6ac0460e5", "indicator--d45e3dea-e20c-445f-b1f7-0665410760ab", "indicator--b1eb63a0-31c6-4800-a76f-2e2db23f69eb", "indicator--5ca72f30-1afd-4677-8354-be06f06ad612", "indicator--4646ff27-745a-4fe0-a4ae-57d2203a24b8", "indicator--63951d8b-f395-4c8d-8127-754eaaa96ac2", "indicator--61e714d8-89fe-45ee-8f36-5ce6fe57b70f", "indicator--413dec4e-4ffd-4ddc-9faf-f52d076d1bcc", "indicator--a6649cf0-b3f4-4b2e-94a4-632dd944997e", "indicator--d0e64988-42b2-402c-8ff7-5a4c3b65087b", "indicator--078d37e9-e70f-4566-b00e-84053ee8a379", "indicator--e87de29d-f5b5-439c-bbc0-42ef284a2a0f", "indicator--904d6aaa-881e-4de5-86eb-1e36ac659cac", "indicator--b5e6470a-2ec9-416e-80a7-1249162b1940", "indicator--08bec26c-d801-45e9-8fbe-70ed6244f3e9", "indicator--0a5d366c-6043-4c88-b4ab-e0f8566b708e", "indicator--7ce9a618-50f7-44e1-b8c6-7f3e9baaf99c", "indicator--1771e1c7-5ace-499d-b79c-07a4a908597c", "indicator--30575b1a-3499-462a-b561-7904d8555ce8", "indicator--abb9d8b0-b0c3-4e14-89b6-aaa56e8fccfd", "indicator--5442914c-c4cc-48de-98e8-07fa6e32e0a4", "indicator--c3d21d50-fa9d-4084-ac2e-e9cd3991637c", "indicator--c2f29977-3ffe-4b51-bfc1-d42c14597eb2", "indicator--0ea9406a-7b92-4000-994f-39a35f54be98", "indicator--33c18532-0a0d-4d11-8ccc-7294a43f938c", "indicator--74da9e8b-a0dc-4f5d-8551-5160bdbeabbe", "indicator--3ad71ef3-efb4-4ed6-bb95-8a59ed55390f", "indicator--86bf1acc-83cb-492d-a69a-f55fd5ed64ce", "indicator--bf760244-fdec-449f-ac9f-8d271e6e0f28", "indicator--98d22d63-1b01-4c35-ac22-151d93acc00c", "indicator--3a9956f5-92c9-47e9-9cdc-1bc4b2986d1e", "indicator--3d06ed73-56c6-4ebd-89ba-53c5f69ab374", "indicator--a652773d-e862-43fa-8cee-ae09002b2a30", "indicator--df86c195-e73b-465a-80fc-a1ec1f14d1f7", "indicator--0f34c249-7f88-433a-b438-63a349b9647e", "indicator--dfa3e3ce-f696-4f29-9b4b-65a16f139ea9", "indicator--fef11e70-fce9-4799-a2dc-4b45390f4e21", "indicator--1f9923a3-e2a0-4c7e-905b-796f70c57e6f", "indicator--6daef584-229b-4964-bbab-63771c25848d", "indicator--e2991077-2e81-4a2f-b18b-37548372781a", "indicator--583c1761-ec0c-42ba-96fa-ca938f908905", "indicator--dd4d71eb-ff06-4b24-ad99-4a4de839de1a", "indicator--2eb93217-2adc-4db9-a24a-3d3f2cab4c92", "indicator--702d54c1-3602-40c4-ab60-22f0935c9694", "indicator--46b9ce66-d3bb-4bfa-aebc-c5bf527db359", "indicator--04af5ea6-479c-4ca7-99d3-f0bab624ffbd", "indicator--67816ddf-9bd4-4566-841b-cd52a7c9bcb0", "indicator--ff44498f-a9b1-4a0f-91bd-85e1fcf3eda1", "indicator--572f7749-b13a-40cf-9d06-560f2162669e", "indicator--ee7dec67-ea86-458c-8169-b2519294e7a8", "indicator--726ed5ca-ead0-419c-8995-ba98c08578ea", "indicator--d57b343f-7467-483c-b415-f9e84715235e", "indicator--cd3f473b-08c4-468a-b4a7-d31725a23d99", "indicator--8064df03-a011-4688-8f81-51bd86ece729", "indicator--7e48e827-21ff-4f55-b1bd-56f573d77015", "indicator--42937583-5713-4b8f-a92f-6302351474de", "indicator--2aa387df-0f90-4f0d-bb04-71e0732f9f21", "indicator--6bee9246-d6d0-4ef5-a874-fdf55fcdbcc5", "indicator--62045c07-6bcf-42c4-9e82-4fef9997aad1", "indicator--a90565f4-f8e7-4da3-9cf4-7f5350cc03ac", "indicator--d418c00c-0ccd-4fe8-b828-736b129c5514", "indicator--c82ed9c0-aed9-4f3c-8ad0-76a91a507fa5", "indicator--688e4ecb-479a-413c-a104-01003469f6d5", "relationship--744e20cd-1856-4990-99ad-30dc4f70b22a", "indicator--c4a01749-8775-4d4f-ae5b-523fa2dc0ef4", "indicator--711351b6-4463-47e8-a696-18d7e98ca325", "indicator--cdc0c762-222f-455b-99af-ee8e869284f5", "indicator--f59e4a34-3408-4172-bb39-891017dc6501", "indicator--e1255220-e635-4b80-b506-e7bf00599871", "indicator--4f4970c0-7009-415c-af5c-a07504b5a905", "indicator--8b69e3b3-419e-4f2a-8a90-77eed81ed6c9", "indicator--279c4e57-be5a-4c73-8a5c-63964a28b71d", "indicator--3c6b86f5-1b38-4b0e-a953-63e1306b1fb9", "indicator--54e0952d-20dc-46ca-93b6-e424b4ea6e85", "indicator--874f2f7f-60cf-439f-9f15-1a77c483440e", "indicator--6b70a828-15e6-4897-a2f0-421bb6d490d5", "indicator--56d974b7-4727-4d51-a9b2-dbebe86ec71d", "indicator--cffa1eb4-7249-45b6-854f-fb1398824458", "indicator--0826a287-ea60-4fe2-b862-bf3560432bd5", "indicator--6fa3cbed-70e0-4fd0-a289-71a2cb05ce55", "indicator--78329191-3470-40c9-a569-86170aec3d0a", "indicator--5acaa944-0873-4c14-8627-7ee8254c9953", "indicator--56657793-2223-401e-9cb0-3b9ea3cb6118", "indicator--e8c52a7f-9fa5-4a4d-b9e6-836f5fc32cbc", "indicator--0bef4980-a98d-46e6-8473-7685ac68d34f", "indicator--0d8dcb7c-1a77-47eb-ac91-644c8248a561", "indicator--caaad08e-5f0e-48bf-aec2-80f6c1386641", "indicator--dd165074-b1e1-4eb2-ab5f-0fb039d85dcc", "indicator--352c6efa-3917-4c39-9ef1-8c462bba7f6c", "indicator--c371c2a0-97b8-4c3f-b54c-122121d4e788", "indicator--8c18fe29-8240-406f-8823-98a48e912d4d", "indicator--0cc73745-89aa-4d5b-953b-f0fa99b0d676", "indicator--d7df8c94-4822-4c18-96cb-9d8f4fb7605e", "indicator--722098dd-2764-4e0d-b0b4-480dd6dfb275", "indicator--ddf83b35-b139-4043-a0ce-7b986c649acb", "indicator--fb2e0f36-2117-4113-8fd3-c895e573bf3d", "indicator--42bb18c4-6963-40d4-a0f5-1028e57cf95b", "indicator--2d2fd692-982d-414a-aef5-ab15b1d86eda", "indicator--8bbc6841-29b6-44ad-82aa-76f9f0c4f0ee", "indicator--9811db59-f348-491b-87d2-c35e76ed2159", "indicator--06b4d94b-021e-489e-b0d9-9a0900144540", "indicator--31e4b2dc-fa2f-455e-a465-ad3f2ec73240", "indicator--1353a29d-1c17-47ee-a59b-b913b6e1187a", "indicator--e493bb9d-47ef-446c-a96b-4fad018f1efd", "indicator--73954999-71ed-46a5-a391-fcf8fd03b0cd", "indicator--cefe96c7-feb3-47ec-8cac-a4f2ec9b311d", "indicator--50c1cf1e-9090-46dd-8a4c-551324ad39e6", "indicator--0858f285-a4f8-4ff0-8f02-328281b6e949", "indicator--a38962b5-ed18-435d-845c-e6c2a4acf424", "indicator--e3b5c3f9-9fed-4b77-ada2-58947af90c53", "indicator--468c9b28-d49b-4cd4-9d68-1baf3ce7f3f3", "indicator--8043a15f-3843-4c1f-a4e0-aa60590dbabb", "indicator--2939163d-7621-4211-8848-b5afc347eeac", "indicator--e59153e7-bdaf-4ea7-bd03-748db2bbdc3c", "indicator--5a110ced-6f94-48c9-9ab9-4d6d984080fb", "indicator--1c34a5c8-76e5-4fdc-9090-021a766ff758", "indicator--34d66044-3114-49c1-90fc-24cf0a0831aa", "indicator--6f90fc00-1807-4ef4-84d3-aeb207a0540f", "indicator--1f55783f-9316-40e6-b665-486cb8690199", "indicator--86dece13-477f-4a52-bb64-ccf4c4efb1d6", "indicator--35e15417-c28c-44c4-9f0c-699ad3cbba5b", "indicator--4b48233e-bd64-493e-89d7-62758930cb7f", "indicator--65a63365-b448-4411-878f-46e1869a73b3", "indicator--df4bcb99-fdb4-46d9-8ca6-6ab8bf580b37", "indicator--92134b0a-589c-4aaa-a3e7-4e43c1a51ab8", "indicator--60808395-55a9-41cf-b4c3-5bdb365b1772", "indicator--fd39de07-e391-4fad-8b47-49c1a056d1db", "indicator--bba8618d-32c9-4149-ade7-68980310ec8b", "indicator--81a3d088-0911-45fc-8c63-a514badbb728", "indicator--d6d68a27-59ad-437e-93ef-e602f49c77d2", "indicator--1da6dca0-0e78-4758-a6b7-ce527157e887", "indicator--5ea60fda-dc8a-45b5-9892-69c3d3c76ecd", "indicator--0f29522b-3ea2-4853-b604-aca2cf838c1f", "indicator--827cc809-da59-433c-b806-43c4e82f0138", "indicator--d4464fa3-941f-4ff4-bba5-fc9bd5cffdfb", "indicator--715f0e9b-4dbc-494b-bb14-9ef0a3d0ef6d", "indicator--52335f82-1858-4d29-936a-fbde85a745ef", "indicator--7911839c-be3f-44f6-935e-003776cb6d65", "indicator--1a8365a7-1895-4f38-bff8-acd77947b97f", "indicator--3b39f83b-d62d-4ed3-979c-cc9d72de81b2", "indicator--b71ea352-d766-4705-8547-fde7210d6b76", "indicator--74dc8823-c226-44a9-ac20-62e23c4dc269", "indicator--3c9ba46f-4905-4cca-9d21-50f9f22bbb20", "indicator--c0735512-4750-4398-9899-54b9f726cd78", "indicator--04c61fe5-0ea2-4315-9a20-3dc85c0bfe57", "indicator--6f602e01-de08-436e-bf1e-43f771e46d06", "indicator--1cf885b8-2c54-40db-8d75-917e99724445", "indicator--04c02f96-4ca9-4d1c-91ef-65781d185b68", "indicator--5eed3daa-c32a-4746-91b8-367a9bbf1ceb", "indicator--5e1431c5-c3b4-437b-a585-739404f5cf90", "indicator--ccb347ae-0ccd-4b64-99fb-2f9d5ea5d304", "indicator--e9f6512a-14a6-4d2b-b8c0-5d6580e733c0", "indicator--16f8ad70-19e9-4341-adc5-0cea29dfea89", "indicator--b71c8b07-c1c5-49e0-bda7-01b39d860d96", "indicator--b359527b-07aa-4adb-acb3-ffc86c88bc02", "indicator--e18d4bc6-62fd-49f4-8cc3-83ce462c6fdb", "indicator--0ca86c92-af79-419f-9577-ba010efec1d4", "indicator--2f3ffa3b-6cca-4709-a098-f41187cb7d9e", "indicator--9fe1f9e7-6560-44a7-9ad9-2a0c81525f86", "indicator--61350a24-dcfa-40e0-95db-5355c052627b", "indicator--e7022fa6-bb61-4e5d-91bc-8e634ba25c21", "indicator--a14380d9-748b-467b-8659-5b6c7bc65f27", "indicator--7fadcbc0-8db9-4bea-b070-7ab605acb6eb", "indicator--9b816ce3-88e4-449f-9128-10028e5760bc", "indicator--b14f3560-434e-4778-b2c9-1ee1563468fb", "indicator--22b35ec4-9fd9-4a39-a93a-f987f56c23c7", "indicator--e803d17c-680c-49f2-b3e6-533aeb1a2439", "indicator--642b0bfa-41e0-4d76-b5a4-11d70b960a7c", "indicator--2360e7f6-4dff-410d-943c-387793bc624d", "indicator--5e006baa-b2ee-4c6a-adf5-69e481f002f3", "indicator--0fd837a9-f475-4790-8e6a-7dc957b20b49", "indicator--70946062-9542-47af-8378-6b495cd47bcd", "indicator--34ebc27b-6cd8-4002-9088-90da1d9ab37a", "indicator--cb3ee5eb-db8e-4ca5-ba3c-8e4624ded7f7", "indicator--4c989923-67fe-411e-a667-be0cffb7178c", "indicator--622affdd-b449-4787-9c0a-cf0777fbc426", "indicator--80fc9e42-22d1-4637-90bb-041d3064c9d6", "indicator--9909a7ab-64a7-46ab-afa6-4d63006cac45", "indicator--d49c5bf5-4169-4a8f-bde1-7eca725b60c4", "indicator--0f5ea77a-35c1-4439-a73c-f6567edd54e3", "indicator--5afbf9c1-6848-4baf-b3f3-a8b186552e09", "indicator--3928c4ad-50d0-4c60-b1ba-b9f4bacbbd93", "indicator--8c3f6321-358d-45e2-a7e5-999a4fd7739e", "indicator--80779c3b-7c23-4cf8-b791-74f9c01e7644", "indicator--8c75bd6a-4a25-4e9a-beee-e42ba5ea2cfb", "indicator--569f8a9a-a8b8-44c4-85c4-58a9f4c33c06", "indicator--5cf2694c-28ec-4dc2-b013-8266f7cfbfe0", "indicator--c6e1cc3b-d593-408f-aec9-c17f3294a204", "indicator--05734903-e69f-4e52-8638-36b551439cbb", "indicator--5d5852ea-c99b-4ec9-93cd-4d6f33edcfd0", "indicator--70ec2c0d-b968-4ebe-b385-6f0f6459065e", "indicator--9c211a7b-b8d3-4c00-be18-fe5b7bff4e3c", "indicator--663e1f06-9554-48cd-8f21-a1455c3f60a3", "indicator--4901bb95-5775-4ae6-a352-447a0456ddbd", "indicator--d7bf37be-8499-4ae5-bb41-a44e6c0178b0", "indicator--a2236b77-df25-4bb0-94bd-949cc70d238e", "indicator--d8bdf1c5-2567-443c-88f8-4353519aa2a0", "indicator--6b85b357-ec86-4756-b92c-1479331c34d3", "indicator--42639094-142c-48f7-8883-59293ce8885b", "indicator--37ccf266-82ad-4af2-855a-db2c005e2c42", "indicator--9ac4a324-390f-4157-ba21-a8b4f34982e6", "indicator--689c2a72-d1ab-45db-8509-b6f1d73f8176", "indicator--358c58c7-4de8-41dc-b556-578fd3b9032e", "indicator--fef768b1-f9d8-44d5-9d27-8b57d8de5e7a", "indicator--dc60d159-4ced-40b9-a400-409b19bd594e", "indicator--3fe6b909-5291-4543-96e0-47c62f5678c9", "indicator--d2997c85-2470-45da-b990-507dbf2f0002", "indicator--baaffc49-74b5-488a-941f-1fb22d8135da", "indicator--9a5ef63e-24fe-4f8e-a79c-3bdf5862aefb", "indicator--7bfd1901-9a92-4bce-85ce-d7a799c94f64", "indicator--fd070a80-4e9d-4b64-bba5-d2134b4fcfbf", "indicator--0026f245-98b4-4cd1-847c-891e07411914", "indicator--e016cc04-9785-4976-a672-92bff3de2d8a", "indicator--6fe787e6-344f-42a1-ab47-f670f14503d0", "indicator--cb63d60f-3c0d-4d2b-865c-6b48077871a0", "indicator--598026b0-2275-43e1-b2bc-c1dd3191bce8", "indicator--4d264943-514d-46af-8ae4-47310cd511a7", "indicator--09d7115d-42a6-4a0f-ae20-bbb59da9f424", "indicator--40184c69-d841-429d-9ba5-8982ef34509f", "indicator--2bf45b05-7415-447c-b80f-c7aeb800c5c9", "indicator--598f3727-e502-4cbb-b85d-8440644b712b", "indicator--e7f5989d-951a-4b98-87c3-812ceedeb9da", "indicator--6d2e99ee-ab8e-45e0-b0b7-5925650f55fe", "indicator--55534ded-b9cf-46e6-a0bf-b4815ed329de", "indicator--c2028f12-66d7-4894-ba4b-b195c092dc89", "indicator--682754e4-637f-41ba-9734-dc739198c5af", "indicator--a3647544-b479-413c-a0c1-94fa8c216df1", "indicator--92d1026b-e98f-4628-9302-abffa8fb95fd", "indicator--45ba7dcc-181c-413a-9313-8a8f022b6c6b", "indicator--b51d2439-7562-49c2-b0cd-b5fc51daaa75", "indicator--bbece38d-b98d-46de-ad14-1ad7c47a1676", "indicator--d5380c4e-7301-4317-81be-0fcd55fc7897", "indicator--fb7fbb5b-eba6-451b-9cba-4f0d4f157936", "indicator--48683a6d-23a1-40ef-98a2-76283123e846", "indicator--6b549b0f-29c4-4a47-afcf-8e54171e60bf", "indicator--7f530bde-2f5c-4d7b-83f8-cb16d7e91cc4", "indicator--15a7353e-7d46-4899-ae12-7a98739b1d2f", "indicator--ca87eb26-e373-4c1a-a873-f4afde257df9", "indicator--5467d30f-dd96-452f-9cba-3b9681e37330", "indicator--e342a5f7-ca53-427b-b30a-a4d69c8df04b", "indicator--332e35a8-a776-42a2-8178-f721b77786aa", "indicator--cae4a027-c1af-4629-ad4b-80453c1b54b2", "indicator--be268ba3-b0a6-4c5d-a197-fd27513791d0", "indicator--4c9eeeb8-d210-4c80-aa18-6539431d7529", "indicator--e0d20c2d-0179-47ea-ab91-3fb5440707ef", "indicator--995ccb51-e37a-4184-a651-60953899147c", "indicator--42e85609-d7a7-4902-bb98-db7f0a106b50", "indicator--17a0ea8f-dbcd-48dc-b483-171d8072ce2b", "indicator--7201948a-0a4f-422b-9d6f-e25e8c8c5422", "indicator--4a15befe-f3a8-4a5b-a094-05fbad6b3bd0", "indicator--3c56b039-1868-4b18-b5d8-b4fee598085f", "indicator--f078a722-1bf0-4ee3-abf6-2ec82c10eb58", "indicator--1504f795-dd59-4e8d-8cc3-1d08029413ad", "indicator--45a8c7ed-31c2-4a02-9535-c5c67d9a9001", "indicator--5572e47d-68bb-4ec3-b097-efeabf09fdc7", "indicator--295f3e59-2a1d-4344-aa32-45f7330bafeb", "indicator--f6dddaef-de2f-486e-8eba-ff29e11c74e2", "indicator--9b6f183a-4e8c-44dd-b905-5a6770f2a183", "indicator--514ac2a5-da9c-4d36-8266-bf4f10e074cc", "indicator--c855b11e-c3fb-4fe0-9bc5-e6616ac4b8f2", "indicator--42cbae5b-5254-4617-a2a7-d9a1d5d94773", "indicator--ae8485dd-8fc9-4d7c-8aca-92d5846bc898", "indicator--660135aa-093b-4c52-b4bf-f28443591a29", "indicator--182cc7d1-5ca6-46bc-92c8-c5fb8a2f2853", "indicator--a7628ae1-3449-474c-9539-3c7b9a5dfba6", "indicator--e86dfc53-0ad6-4ac8-8cb4-5319e1122070", "indicator--ce85ac66-c99e-493a-9be5-e286237d1258", "indicator--a7cedfc5-51bc-4e00-a3a5-c7156fb0dba3", "indicator--9b11b0fb-85ad-4e5b-b027-49b80a38fedd", "indicator--15d15859-6c07-443e-bae7-6429d7e73899", "indicator--51a2c140-9343-4297-9e10-c274198b7235", "indicator--76ad66c3-14eb-4e80-963f-8db12714fe6e", "indicator--a8964721-5021-42d1-a761-9054594aa63b", "indicator--9b8086f5-3665-4452-9708-758a7ce12940", "indicator--4914434f-999e-4104-bdee-b16c90bbca98", "indicator--db252601-0086-4d4c-87a4-cfb29f25db50", "indicator--195510c6-fc2d-432f-9ede-0600b3481347", "indicator--82b49323-3f65-4775-af3c-79336b192ba4", "indicator--43016c85-0f0b-41f0-b52c-37c98cc90d46", "indicator--cfa0f188-85dc-44c6-ac41-083ddb094642", "indicator--91108bea-c6cb-4bdd-9b45-cc75cc556d85", "indicator--df095d66-bd1a-46d7-a1db-c756b9764467", "indicator--99df6e7a-54c5-4973-af57-625ea49c10e2", "indicator--ce452347-2b26-4e64-b2d9-73c93c62e476", "indicator--146ce873-bc47-4728-90f2-3b11c9cdfc92", "indicator--7a2f005a-3095-4400-a028-c86d1ed84fdc", "indicator--77ba2b26-2109-458d-8b80-a6284b68da2e", "indicator--7b41556b-d527-4457-a2cb-9d6484ba52d3", "indicator--6a2bc5d8-120d-4d36-84e1-286886e4c9a9", "indicator--265ce838-0304-4461-824b-4d25cc3722cc", "indicator--fb01c331-726e-4c85-9237-f877053e480d", "indicator--8b972e5e-5f71-47d3-a45e-714740352592", "indicator--58f198c9-e21a-4a19-a1ca-4bb4f3e164f1", "indicator--b3925f78-7b4b-4a82-8191-47f4349b41c5", "indicator--4c273115-5de0-4f41-ab48-5aca6b420570", "indicator--60c96e10-c25b-4a5a-9d87-608b4509dd9e", "indicator--f85d8e22-8769-4966-a6d3-defa908add5f", "indicator--ef89a4fc-6855-4b88-b567-a9974386a426", "indicator--483619bf-7e87-4883-b0c6-173e79cd9a11", "indicator--950ba760-d853-4d8d-b62b-440c2912a904", "indicator--64812f06-e4ed-43df-a81c-19a55c6fd38e", "indicator--033af0c4-d914-4b2a-a308-742c9054f3ad", "indicator--ade60ada-c8f3-4544-b90c-c6b8449079ef", "indicator--61e2fea2-a03a-44d5-b68a-e0676e9db56d", "indicator--69865246-c4dc-4280-8574-8133e6bd4fec", "indicator--7f2978ff-00e2-40d6-bd1f-100461d6f08a", "indicator--17699291-d21c-4032-9885-e8d07a258199", "indicator--22a6b596-50cf-402a-927b-96c2d3d89973", "indicator--db87a1d2-b4e5-4e50-9626-b74a57d7c6f6", "indicator--ebc55c2e-5966-4465-a3ec-4ef52bb1c12e", "indicator--6edf1a14-7ea3-44f1-ba9c-2a92c5b38460", "indicator--ab8e8f10-698b-428a-b11f-eab7718442ed", "indicator--39caa479-e986-4185-8d93-ea9f008abc83", "indicator--915b2e5d-ee03-407f-ac8b-bd7a9b2f1d52", "indicator--3ade8132-030c-44dd-8876-066e898578c9", "indicator--ecac53f9-bc4a-46b3-8170-23ea6144eb9c", "indicator--eadc2aa4-f5ad-4dbf-a833-a94360980128", "indicator--9aa4bba6-d8d4-43d8-bbf3-9d3b69feb752", "indicator--2fd9f6bd-003c-47fe-ae7f-62fba9ac7a9b", "indicator--b4704242-e302-4a9e-97d5-b417fdf24470", "indicator--c2130cee-a8e1-4737-be70-1d7564e9da4f", "indicator--66d2e6b0-471e-440c-a148-09448e219bcb", "indicator--5f3516da-ca46-479c-ac37-166ea2debb5d", "indicator--864f163c-5bcb-49dd-84bc-33dd56480776", "indicator--7775cde4-6c3a-48c5-9bc2-ae2dab9bf7b8", "indicator--4c62ec09-73fa-485e-af93-808e1d0eddab", "indicator--b6a004ef-0087-454f-8fcb-386230d14f4b", "indicator--014ec143-f662-4dc5-871d-681a53d95d23", "indicator--0ddb2e38-3323-4f67-b744-e3d04ea0316c", "indicator--ec105bfe-5480-4b7f-9652-10de628f554c", "indicator--1419474a-008c-4aa4-b926-a24bec5c4545", "indicator--07fee812-f14d-4683-b970-aa4197920697", "indicator--922ddb65-3e8e-4969-bfe9-81a765e34294", "indicator--7103de2c-246d-4748-aa30-e5f3f1d1c658", "indicator--7f11f474-bf8c-4ffe-8bc8-2a55c040a4b2", "indicator--634673f5-41a1-42f7-b005-b37552956477", "indicator--8a2ba465-50a9-4062-ab10-c55b9dea03e6", "indicator--3668f754-1e2f-4a59-b2dc-be19888dc0f1", "indicator--521d275f-8011-4d99-8e30-ca18b49f0559", "indicator--e26fc5b3-0b0d-44de-b5e7-619669e2a525", "indicator--b00709f7-7ed8-47aa-85e0-a6877f69a808", "indicator--63d06ee8-7261-48fd-83db-316537642ed1", "indicator--ae1fcbb6-2a24-4929-87df-5a31cece7a18", "indicator--b1211774-c49b-40ed-b04d-ccb5b231c028", "indicator--eafeafa2-bf1a-4426-9af7-60d437e82976", "indicator--b6b92822-9683-4d6c-a53e-182c3076bd48", "indicator--2290ddca-1d5e-4430-b47d-1cf85f4cec3d", "indicator--d35598d1-7810-4370-be1c-006f7696bd9a", "indicator--89435bff-2ba3-4ae7-bf39-524521ef2aa2", "indicator--291948fb-1d1e-4aaa-a838-faa55b84ff73", "indicator--4676ae28-a6b3-4b8a-a78f-563825c2e6ce", "indicator--0e43a16e-772a-46f7-8b74-545091511be6", "indicator--f31a16b2-6ff0-4fcb-9cb5-f7b1a4dda336", "indicator--6326e386-0aea-443d-ab0d-eb824a17a54a", "indicator--a57afc5d-b08d-4957-a437-80f9c519543d", "indicator--9a1b5ecf-c52f-4ae6-b9c7-3a6dea53689a", "indicator--bedb8ede-6407-45ad-b80f-1c2b86a38c70", "indicator--253f043b-5c91-4e51-b4f0-e7dfba99d46a", "indicator--e635d72b-1d61-43cf-b0ff-e164066bd773", "indicator--c8e583c8-f992-41aa-985b-6e605388ed55", "indicator--15d7cc23-c0a2-4ad6-b088-bbf25137a3b6", "indicator--e49feca7-3b4f-44d0-8028-a8b4492a29cc", "indicator--66b51eee-27ca-4b2c-b56a-ab46baf1936c", "indicator--e359c03d-f3bb-4318-96ab-94220076234b", "indicator--d4c2758e-a4da-49b8-9f51-d191ecdf5520", "indicator--726ad914-64c1-40fb-937e-de116be8a908", "indicator--1d04cd9c-6787-4ef0-b0db-af82c79fe457", "indicator--b9f260cc-d6b6-4465-b2dd-5eddde9d6201", "indicator--c5f80bcc-74f5-42d3-beae-bf34119d94aa", "indicator--62e78cd7-15d8-417d-ac13-fe695889bea9", "indicator--85236e20-296f-4b8a-9a4f-ab77dac0cf2d", "indicator--439a7a75-31b5-4d5c-afb2-680de36181ae", "indicator--c5980147-374f-40c0-aad5-d373dbc55ddf", "indicator--4ada7cee-39fa-4834-9411-2597816b83ac", "indicator--84598477-9cfd-4444-9800-8cbeeff64576", "indicator--f7e6711d-7201-467e-bd3f-dd48fc66ab5e", "indicator--61da13cb-0dc9-4745-be6b-964c1966bfd5", "indicator--28bc9613-2f46-46e0-be69-2ddc0489ba52", "indicator--7ad06328-6bb8-4d98-8a2c-30aae6df7b18", "indicator--bde1c44e-f782-433a-923d-664041af601f", "indicator--d174c7c5-c4df-46f7-a3eb-153dde121255", "indicator--fb67540d-2d71-4004-9ef4-89f2b9365a45", "indicator--e55dd941-dd99-4165-b5aa-12e62e4deed3", "indicator--ee9d6543-55b8-47cd-8be9-a86addf4c00d", "indicator--98e261cb-3b39-4103-b122-7a174dd82725", "indicator--bc33b448-709f-4de0-93e0-6933cac4b242", "indicator--f5aed551-8fa8-4299-8c1e-f6fb233405c6", "indicator--477235b4-71d1-4abc-910f-e206dc407961", "indicator--3e113296-bfd9-4aac-a696-421f9af97c81", "indicator--559eee09-7598-42fc-9459-f9f3e08a79c6", "indicator--acc5ad8c-c7d6-4f30-9c08-7b040ffa2b97", "indicator--acb7fe15-9e98-49be-832c-15dfbaf94239", "indicator--2e0ac627-7d3f-4930-a967-b243c54e9e57", "indicator--8502fdfc-4d22-4420-afa6-faa94899eaae", "indicator--7da38554-9fef-4654-99e0-2b12e7a2c034", "indicator--1e549260-ae0b-4baa-8f60-d982b2e9b939", "indicator--93671cb0-1e0e-4d1b-93f5-40e27648c106", "indicator--0d933f14-ec53-40ec-b85f-03221b76a966", "indicator--cee377d5-30f0-4c82-b5f4-9dede0682fed", "indicator--fd45eba1-afe9-418a-a91e-949ab7ded00c", "indicator--ac1863b2-5ab2-438c-baeb-bcf59dd10a9d", "indicator--a60b8648-38c0-46a6-bd85-ea304ce2e0e9", "indicator--437ac834-0140-4439-9170-bef4e90ce083", "indicator--a027b424-bd99-4b4b-b3d1-918a59c43629", "indicator--45e1d3b1-0fc5-4e41-8019-ff47cfbf784d", "indicator--3b66bde3-3a07-4a6b-bf3e-dca171c89290", "indicator--de0dce64-42db-49a0-8784-4b4b37722931", "indicator--f665dfe0-d5f9-46f3-8d78-9ca9b8f21603", "indicator--9f4f52e9-af4f-479e-9206-7111baf0ebb6", "indicator--9198b4aa-6376-462e-a6b6-5d7f38fe54cd", "indicator--b83c787b-5ec8-4d18-90d0-a39517b8e47a", "indicator--9c915054-6967-4ce9-9a31-7e25f77f8d28", "indicator--cd9bf059-028e-4e31-ba83-168c958dc267", "indicator--22c7d20f-1f0b-458d-bf92-e005eb18e518", "indicator--2f1893b0-30d3-4c6f-9ec0-77ff47141b6e", "indicator--c8cb3b99-e764-4414-b95c-0efadf3322be", "indicator--53b555df-366c-4a56-a25d-c758f7bcb45a", "indicator--614610a4-4458-45fe-8c26-acad355b0d13", "indicator--d1c58c8d-6574-408e-ab24-e8af0a46cb56", "indicator--b10ac620-ed45-41cc-b004-b735d938e2e1", "indicator--4b6465ea-932b-440e-9fda-41a05c377483", "indicator--27c6a6ae-f58a-4d43-a3fc-2ebfb8db8485", "indicator--243ecf53-34bc-4115-b65d-044513c7c366", "indicator--b2994fc7-2b60-455b-8f0d-6d98d85b5f39", "indicator--bce551ac-8f87-456c-8fd3-d485290b2d13", "indicator--01d555ed-2265-49f1-a66d-67ebb1f101d3", "indicator--97f0c717-0086-4bf0-9665-6818e4e2d022", "indicator--4577a143-8158-46c0-b53f-6d83b544641e", "indicator--41e564ec-0512-4f65-884f-08c07b758b6a", "indicator--bffc2164-4d03-4571-addf-e2422b50ccb2", "indicator--0c10a4aa-aca9-401c-8947-cf9496ede244", "indicator--1155b1f0-4fc1-44e1-a490-dc7483202a3c", "indicator--5b9a7991-e360-4da6-b598-d7f1e8c2b99f", "indicator--d8d89c57-dcfa-4d71-a063-b601eccddf83", "indicator--3479bd6c-de2b-46f3-be54-cd71b380a660", "indicator--d53f12e0-1b3e-4efb-b8b2-8f795497db26", "indicator--33dcfcdf-d63c-4d87-9974-68d103c003e0", "indicator--16e08eb6-efcf-4552-a5fe-f4d1cbffb2b0", "indicator--8ce32997-0aff-4b40-8912-5eb167c04227", "indicator--96a71dbf-173a-4560-a934-c4140d5ae367", "indicator--5763bec8-d30f-4277-940c-2d73b5046275", "indicator--0f6193a2-d044-4d3a-aa19-9e0302dab3a6", "indicator--dbb4c425-4fd4-4312-8f50-85d70a8b063a", "indicator--0c87110f-020e-474c-a7ea-2de6dee85e32", "indicator--531ba4a6-e091-4ade-9645-b47bdc9675e2", "indicator--bb3e76d2-8d33-42f5-8816-fa500790510d", "indicator--b3ca9898-98fa-4ffc-873f-4f7ed60a6375", "indicator--ade2952f-3f21-472c-ad6b-61c05a6cd258", "indicator--22027364-a10c-4dd7-8c5b-084dba5d07b6", "indicator--95de966f-e5a0-4a0a-be8b-5ad89f1c6868", "indicator--28bf0d60-7f83-4d2a-b51c-1f79f172dd8a", "indicator--2185522a-99f4-43e3-97d0-7dbe88988cf7", "indicator--f303f4b0-5732-4f6f-aaae-6a5b17ce35dc", "indicator--136c5892-4120-4918-b99a-561989cfeaab", "indicator--1c12d7fd-9a25-425f-9144-7f62a1e606ff", "indicator--e7d71da4-8de2-4136-aaac-c1259b577254", "indicator--3132f3fe-57ed-495f-b728-193f1c19fdfc", "indicator--b50d3ab3-3fbd-40b2-bd29-36e1b30c777e", "indicator--be1da4f3-670c-489b-bced-0e7dd5f31c6a", "indicator--a90df885-5177-433f-9f4e-4624ea3fc5c8", "indicator--b80cf379-376d-469b-95bd-3016213fbacd", "indicator--c5578085-01b7-4840-9f66-31c7bfeefa1c", "indicator--2976d001-ea6e-457f-be74-afe633a48b1a", "indicator--95cac632-157c-4991-aa2b-ba0086fc79d9", "indicator--65964e8b-9242-43a0-a1f3-076918a27107", "indicator--67a92b9b-62c6-491c-b3fe-bdd3ccf42c63", "indicator--749a94ff-1ab6-4125-9c5e-85e650f838ed", "indicator--266bc309-636f-4052-a169-5842b064d482", "indicator--582fffa8-bade-45c6-af3e-fdab510e7d90", "indicator--06cfeed6-cc6b-42c7-878e-35a9ee641d28", "indicator--a1226d9f-79f7-4690-8df5-458c410c344f", "indicator--7512c883-57b5-48b9-ab26-c6d061178f47", "indicator--1468ecf8-44b5-4a2c-add7-c9e643ed9919", "indicator--aa7bcde6-9c5c-4514-835d-1da6bdf90439", "indicator--3047ce64-37c6-428f-b9b6-dba2007004cc", "indicator--7ab3abd5-0d56-4b7b-9146-43bb537ca768", "indicator--5a26c529-afcd-4793-9d12-6da43fc83cca", "indicator--d778b24d-eb1f-4b97-afbd-5ae98ad0b78b", "indicator--01c90757-9016-48e7-afa1-98561849df52", "indicator--5d5ef1fd-ed2a-44d8-ac75-6612de82677d", "indicator--7919c4b6-2269-49df-a46f-8a13ae9e308a", "indicator--7ddf07a8-76bd-45ce-874b-ab759ed6e584", "indicator--2c62f281-a6c0-4668-88d8-0ff8a7b607c5", "indicator--21261335-befb-4b33-aebc-60472c4c25d2", "indicator--2adc5a88-51ed-4270-8a0a-89505ed92d36", "indicator--595e4bf1-6f80-4b91-8277-315199b49af9", "indicator--6a0b8f15-6d01-49ce-843c-39db60efd7f4", "indicator--88427d09-3cc5-4900-81a0-7b692ad9c795", "indicator--22e9f9bf-09e8-455f-9cb4-7e5a8804da7d", "indicator--e5f27974-c1e0-485c-bf0c-50e0b657e6e4", "indicator--e0f05e88-2721-47f8-90ea-24947cb80b59", "indicator--7acd8adc-4d17-4331-b764-5bebf9e3ec29", "indicator--0500990c-80ce-4681-90eb-dea3ddb591e2", "indicator--5a67d4e8-9da2-4abb-90f8-651354732b79", "indicator--c69138d7-364f-4a51-8a17-cde747d98ed6", "indicator--8687caac-eacf-45f0-b166-5cb8f64dc8f7", "indicator--929fb1b1-2de3-436d-983d-f27c787c2e25", "indicator--5457f5e1-6104-46f3-861d-ad498f9327bc", "indicator--4919b8c8-5b69-4f23-8a48-3deb40c0a3f5", "indicator--8ff27550-1f44-4098-bde5-81b0f9994129", "indicator--4cb7f6cb-0492-4af2-8538-dabbdcfbbd2a", "indicator--165ee0af-60ce-4e73-a6a6-65cbbbdf63cc", "indicator--5a5e2a90-f017-49a9-851b-8eae1b5f0de4", "indicator--beefb9d6-1b0f-405d-a630-f99ec43c9d89", "indicator--4641193e-c9e7-4516-b5ac-07dc4b8db36b", "indicator--d4573a0c-b3ea-475a-bb02-9e390b48aa72", "indicator--08470a9e-8699-44cf-888b-7e9c30dc00f7", "indicator--5be91e8a-68f1-4a12-8f5b-d49d8bbf48ee", "indicator--e03e3b74-44ec-48f3-b210-6573bf18efa7", "indicator--5472e0fd-403a-4d18-9e72-3ba3aac8b3bd", "indicator--f7dd477c-ae03-47b8-b657-7b2d4fc0d072", "indicator--54968270-9ba1-4b02-b64f-bf9e4ea4b8a6", "indicator--5f8e362f-a366-4ae8-b56a-c9e3fa555a4b", "indicator--b58bd99b-abf2-4cb9-9e20-bdf3dab3f9ed", "indicator--67b6c2c1-a70a-4257-8496-983c50a90f5d", "indicator--2b5ec899-7109-4384-a4fc-1ac872c92213", "indicator--1638ba3e-b17b-4bfb-9255-3177aa03aeca", "indicator--31dffeb4-410c-4009-ba72-154b9d1ed618", "indicator--ebf20e97-fc1f-4da7-bcde-70b08c93f722", "indicator--cdc8d51c-41f5-45e4-aacd-0256e471867b", "indicator--6e1eed55-6e48-4a06-adc1-8028c637b754", "indicator--8b693a52-15d2-4c46-8b59-710efd32485e", "indicator--1dd76bcd-5834-41d6-b665-8e1d11f8371b", "indicator--093b1062-7bc7-4698-b0b5-1bc901fb2334", "indicator--fc082faa-69fc-41b9-a883-e4cf6c076f6c", "indicator--3390f50f-0d24-44fc-9366-24d5d2e46c5f", "indicator--b479be96-05bb-4cb3-82a4-577bd75cf806", "indicator--5cd117a0-cebe-448b-9ea7-20269e4c781b", "indicator--a6a69474-0adf-407a-b3c9-07739339e915", "indicator--3b6b5125-3b88-4a9e-aae3-781ec99f387c", "indicator--d84113d7-fd09-4ab9-a94f-a4c6a1530c30", "indicator--975e348b-7fa2-4810-a1e1-f3d1505bc95e", "indicator--c78bc188-d78e-4e49-bc90-7721463f6290", "indicator--22c42e61-16df-4c44-9cfb-97041ab35be7", "indicator--c41f21ee-a32a-44bb-a651-eff9acb84e93", "indicator--d019e094-4f6b-4852-98e4-328e2ce78c86", "indicator--75f751b2-9f97-4dfa-b3c2-f177efdfc667", "indicator--f7b8738f-3658-4679-a98c-59ef5c0cbdd4", "indicator--6ea5f274-97a6-4ec5-b478-0d665e4f2aec", "indicator--8fd33d78-8a8b-4004-9585-54afc7dbd518", "indicator--cfcfb351-61fc-42cf-b703-7fab105f0e0a", "indicator--55d250c1-33e4-4148-b476-8c659952b938", "indicator--64e9bc64-ce7c-4d74-b41d-d971d1b90cd3", "indicator--439a8eda-82a4-4d1a-af8e-9b1cd93d3a2c", "indicator--4479219e-a243-4ce6-9b9d-846c1b66b8a3", "indicator--079fe049-3f22-4aaa-b7ca-8ed2ae3a8cf0", "indicator--65e384a9-6fe2-48e9-bb85-b025b7e15f3c", "indicator--284284d8-9b14-4183-93cd-a3869ff345f9", "indicator--7655acc1-e9e9-4d44-a634-5416e5f663d9", "indicator--f27e54a7-99e7-4240-baaa-5081b5b522b3", "indicator--4a2bb04e-dd8f-4328-b8ef-ed189f1099cd", "indicator--80bcb0f4-0a48-4501-8615-42cde5acee91", "indicator--eeb5ad84-e1c4-4494-b144-41cebd1d959b", "indicator--8b217bcc-d768-426b-93d4-cc70ab1db134", "indicator--d597dce3-3e0e-4777-a627-cb31113f99cc", "indicator--a975c818-18e5-405a-a507-d36fd56966f9", "indicator--a86c0497-96fd-4e95-bbfb-8d907234afbf", "indicator--dc5c0cc9-37da-4255-904d-31d8a46e8dff", "indicator--e769d10b-36a2-4f0b-a345-15e700d6acd2", "indicator--3978fae9-db0d-4f50-8311-daa219bd8099", "indicator--33b369bf-19c0-4b81-9975-2cff4514efa1", "indicator--ab49450a-0b14-42f3-9d5c-40337ffeb4a0", "indicator--a2147772-0731-4009-bfc1-0f12b58fbaab", "indicator--5eb36c73-34e3-4667-a54c-4c05ad9afa9f", "indicator--35bf8907-8a2a-4d98-ade8-1e62ac4c2aba", "indicator--db9f8e1c-0a76-4cfd-8f93-b58e1b14e217", "indicator--d3196258-8adf-4b1d-83d7-72304c7abbc7", "indicator--5c443bda-7245-45b2-bbc8-8df574d56f17", "indicator--cab934b6-475d-4ce4-9315-e11621029096", "indicator--f3982b92-9402-4d05-af33-19e17d34fd72", "indicator--c6ff081a-4df6-4b91-a052-33c20a675759", "indicator--d6f5948f-a844-4674-a4b1-3e21c9295a16", "indicator--8f39f8c6-a035-4a6d-9477-654eb0811c6e", "indicator--799803ab-3d24-4545-896a-b79ac38fd230", "indicator--9979c663-8812-4d68-b161-86723d4bc1db", "indicator--b7557ab5-b728-4976-8d11-135fe8377963", "indicator--d7a89596-10b1-463f-8c18-ec7b55ac77e3", "indicator--a2701fa5-1845-4247-8d91-419658060e8f", "indicator--02a4f26e-69e9-49bf-912e-675e4d892bca", "indicator--563152bd-a3a4-4914-b239-ccf7400d56bf", "indicator--8016f941-ac27-4b21-9e1d-33235a83148d", "indicator--adff211a-cb26-4153-962c-9ff2a195b30f", "indicator--b37d1fa7-a97d-4f27-a7ca-7d5ef37538ae", "indicator--9f5cfce7-f8ba-44f0-bf32-e7f361b95a10", "indicator--cde339d2-5739-4444-9d99-315b88fdada0", "indicator--fc725edb-de04-4215-ba18-815bb86f7f35", "indicator--05cde682-f752-48ec-9d21-a0ae70c1677d", "indicator--3de9bbbe-5cf0-4bf8-82ef-b66eb2fc3cd3", "indicator--9176ecc1-6eeb-4faf-af55-ddcf12481fc7", "indicator--5f5bde51-8ba2-487c-8a97-35967e05b4e7", "indicator--210f0cb6-155d-4a42-a24d-c3299bb7a9c9", "indicator--6fb67191-fda4-4d5c-8ddd-d98364037098", "indicator--3d3abf66-1781-4ed4-bcdb-ece1779cc941", "indicator--369a8b8a-984e-429a-b55d-16c24cae8f59", "indicator--5d678846-e51d-4ab1-8a69-e7d0e48da823", "indicator--3a4f2bab-0a97-4336-bddb-2fe162805dd6", "indicator--a0b6f99f-8d96-4a58-8e10-9ad707bd9621", "indicator--c19099c5-a9ee-4f0a-862b-2789d32967b4", "indicator--b532e3ba-95e8-4d62-95ba-1d9dbff37cbe", "indicator--86e3f608-32db-4f43-ad5e-e46b857a3137", "indicator--bbf17b05-df1b-45e0-a0c0-b52ebee36ac7", "indicator--81698486-a6e1-49b5-9b9b-914b59b1fe49", "indicator--6dc53b76-eacc-460f-9b99-3c53d5e18fb0", "indicator--55697847-298d-486b-9716-bc3eb0ac5710", "indicator--079e2037-3559-448b-ab21-49341ee4d3c8", "indicator--9216ddb7-32d8-4292-a494-cd5f265b403c", "indicator--0236d93b-504d-4229-b8f1-f0d66a97444f", "indicator--5262ed89-9820-49bc-9811-2f8f32314b47", "indicator--f32df108-a42e-4d41-b8fa-b3f3d658e168", "indicator--58708c6a-fdbe-4efa-8fc8-f08791a96035", "indicator--bcbb71e6-6be0-47e6-852b-6af581583fd7", "indicator--243d40f4-1874-4420-8b45-b95ffba239cc", "indicator--ec909ecc-8494-4f13-8271-0d92df615cc7", "indicator--e052495c-b899-46f2-9c09-a08988230221", "indicator--d853c0be-45b8-463a-b835-3d99763f1d96", "indicator--99b8d1c6-3bf8-4f7e-bbb6-50d855539d24", "indicator--2e0da7ab-b6c8-483f-a9c1-c4c4a336ba99", "indicator--8138a018-9516-4fcb-8d6b-9ce04dbdc14f", "indicator--c1e6e785-d05e-4f4f-a078-1c840663c12c", "indicator--6978f4ef-f766-4f9d-914f-e6380055d456", "indicator--77bd7dd8-8139-4b69-92fd-95ac853069a4", "indicator--f3c07537-e89f-4f0d-ad43-4559e16297ac", "indicator--c28b55b9-49ca-46bb-b7e2-8c57b89847ee", "indicator--ebaa5411-f26d-4810-831d-fdb6e26fca4a", "indicator--89e73932-6b59-41eb-839e-e2d1b2fb9b20", "indicator--2aeea9a9-1f55-4416-b4b1-7d55ddeda6b8", "indicator--511e72ba-e819-4450-b7a0-d4c9011b2356", "indicator--26eaf4c8-6584-492b-a21d-dd67ca628959", "indicator--0829245f-92a8-4f28-8e59-2f4fdbbae245", "indicator--05c3f37b-2c97-4698-b48a-3ef807fe18b9", "indicator--152bfda4-b597-43ce-8afb-b19c0045e82f", "indicator--540fa3d1-b683-4b8b-bd45-1be7f58f5d81", "indicator--8e84aad8-f663-4933-91ba-34a5ec52becb", "indicator--0453bbd3-3535-4ef1-8bcc-d127508399bf", "indicator--f3982bc5-744c-4a02-8968-ae6bab7f3be7", "indicator--1e13ca38-5292-4ca4-b542-e52abf1cdd9f", "indicator--3dbb6b33-ba01-48b8-a4b5-e24be4122cdd", "indicator--17e95a35-8afb-4778-98d9-adb64052c14e", "indicator--ad869dd6-4008-4981-b592-127c4998ad4b", "indicator--4d450089-e792-4cb5-abe3-0285324b18ef", "indicator--8aee888c-9ca0-4803-b831-5d621747d134", "indicator--b50b3950-542a-4054-bf08-8aba28de8c99", "indicator--f27fc4b6-cab5-486b-987f-008021445309", "indicator--b1a8d6bc-bc96-47e0-98eb-e313427a15f8", "indicator--7358be0b-5680-4fb5-999c-88b9a0dd2c36", "indicator--e4970aee-31d6-4fcc-ba53-98dff41d3090", "indicator--8a902e8b-34bb-45f9-8f5b-fa54d4d8a050", "indicator--10854bc7-de2b-4779-90af-45990e666df9", "indicator--632eb023-82b3-4f3d-990c-6d9939725f19", "indicator--2b6b15d6-e437-4457-ba5a-3abcc2383897", "indicator--4cdd1ec6-0ef2-42b9-8220-fda6a00244e8", "indicator--133a311f-b36b-4ea8-8e69-8bcab802e51e", "indicator--a4de42eb-501b-4ec6-9316-d5040581c42f", "indicator--7bd65eb8-dad0-4c72-9b09-24a81a48c339", "indicator--74537246-bbf1-4867-bb45-1741d5de006d", "indicator--1980335d-6b31-42ee-801f-609fcb74d326", "indicator--878c747d-3b40-4221-9f3b-aee49b74b290", "indicator--90678c8b-d547-4271-8ea2-2be2d4f7e0de", "indicator--97d61dab-24e9-418d-b1c4-86258567dee9", "indicator--2630956c-7d8f-42c1-bfc9-2dca357b43f7", "indicator--1a42093e-12cf-4fd6-ae86-db3c8c4c9c5b", "indicator--0189c906-8c46-4423-8a7b-3457b3e1387d", "indicator--d81a595c-8c57-4652-ba17-9c62b7b2ae05", "indicator--e16ae6be-3fa9-4b27-b682-ed4803aa3c06", "indicator--f24d74ee-a940-4691-aea0-4e894497df49", "indicator--cc93a795-9269-4b86-a19a-27d38e64472b", "indicator--34afb275-3ed9-4638-b412-4e32bd7b964c", "indicator--f770bc6f-6858-44ca-96a7-723f886a18b6", "indicator--ed8a3a36-c17c-4830-a127-aa3467629998", "indicator--d6ba0e75-c020-45ae-b998-abf7482b3756", "indicator--e9243847-ec33-4a4b-b6c6-25a1aa9193a7", "indicator--8f384bea-2e33-454b-b7b8-570d511abe0b", "indicator--8b53ace3-0c04-4cc8-8d8c-e6f3dcc7be28", "indicator--60377bb0-bc93-4f11-b020-d884b0f164d5", "indicator--777b467b-3306-42f0-894b-a6a49e795d29", "indicator--13714c41-1bb3-4f38-99f5-9aa704f12562", "indicator--f9b58f31-17fd-4f05-a6e0-85969efdf294", "indicator--a9c114ba-6c28-4d86-bd1d-9ccc52bdd9f9", "indicator--ddec2de9-f3d5-44c5-a434-f2ee1a3f952e", "indicator--8608b66e-293e-40a0-a23d-db2657fd49de", "indicator--73195875-15b1-403d-939c-1b773a401bd9", "indicator--07d31906-1ff0-4440-ad31-f40234726523", "indicator--b66676ba-68ff-444e-8850-ec85e46b8db4", "indicator--18a9d52b-1ede-4044-a1ba-499d73ac6318", "indicator--5f4e1304-7071-4508-82c2-7ead0a2533fd", "indicator--b3a841cd-0e61-4d36-aba5-96a961bd7a61", "indicator--2e180dd6-f58f-40d1-b7b4-94e87d049d98", "indicator--4c65e9d9-6646-4824-b0a4-e0fb74788fe9", "indicator--b6497e35-9f6d-43ef-b331-22ff25dfb3ef", "indicator--27fb04fd-f452-44b4-b0d4-beba3ebc8056", "indicator--b28df47a-ee8d-4a71-b775-facbf5966919", "indicator--18248881-2c4a-49c4-a258-3af9e2b08e0c", "indicator--574b0d77-4adc-4dfd-89fd-e7a35be3972b", "indicator--cbca4e96-7185-4519-b10d-34818a23d512", "indicator--a8ee57ad-233f-4342-b667-eb94047e2232", "indicator--102e22c0-4e86-420d-8f97-04fd907362cd", "indicator--72910b9c-328a-432c-b8a1-819d2e81c42c", "indicator--712552e3-ffe6-4843-8f0f-2d9212dbb88a", "indicator--3c0a8cd5-1a52-46cb-9c86-435e3fa6099a", "indicator--7b4b5f5c-7655-4f7f-b5a1-e3ffde589892", "indicator--3002713a-f727-4e68-9fbd-7c15838fd191", "indicator--e68c74a7-42f6-4850-b13d-1b16ef74b3fd", "indicator--ff94fae7-c08c-448a-a8cc-f73eb2493b2a", "indicator--286bac8c-c577-4423-8a74-829008871eff", "indicator--0fd00bda-7c47-4cbb-ad8f-a72b6e16135a", "indicator--74cf88d3-57a6-4a41-a425-e411010268b6", "indicator--b6df5508-7869-48a4-930d-42ac5f717026", "indicator--15b2f165-4cc6-4669-9a36-542fd4ee77d7", "indicator--62611f32-80e3-4059-927a-bbee34fa1385", "indicator--70cca4cb-d905-4db3-8872-35e2c1f0dc1f", "indicator--756d1e1f-9ed8-4e74-b006-a3971699040f", "indicator--6fe7b31c-d96d-4b05-8778-9da72b400227", "indicator--6df1ede2-2db1-47e6-8f2f-696f284d7f42", "indicator--6600cf2f-c07d-4c8d-943b-bd1febcf00e8", "indicator--2d13ae50-8402-41eb-818d-31ea79b0d35c", "indicator--f96581b5-b4f7-4a2e-a490-4434bfee550a", "indicator--e64e3c75-af85-44c3-a3a2-da972e56121d", "indicator--9b467ebd-785b-4d05-8803-050a7e0cee38", "indicator--240a894d-266b-4dee-8e61-2878841e8a98", "indicator--a52c1b40-0b60-47b9-9e8a-c2c2bf67e120", "indicator--9296f7c3-8eb1-41d3-ba8f-ff590e381605", "indicator--85f2b7e4-f7b9-42c5-b18c-bb0744aa3329", "indicator--8bdaea6d-8054-434a-82d3-a22dfaa81559", "indicator--6286ff1e-3054-4f18-b712-030f7c438300", "indicator--eaa7e7fa-83fb-4a06-ae5c-fd8c3432d661", "indicator--557fb7ca-6fc3-4fa2-958e-933f6cbdc81d", "indicator--1bf7e06d-3071-435c-9445-ecef7dc1803a", "indicator--64a2293f-2428-4b5d-9d93-71f946423d03", "indicator--19040342-b4ae-471d-baf4-d2e9c6e0bcc7", "indicator--3d3e1917-c122-45c3-947a-d0b6115c6e60", "indicator--04175f99-863e-455e-b40b-f5dec20ad327", "indicator--30eff1ca-4041-4e2e-b3f0-4645b92a47bf", "indicator--053a3294-b520-4679-93c5-d6f50aab36a7", "indicator--fa39e0ce-7997-4948-a5bd-f856dbd78cb5", "indicator--c319c6a3-b6df-49ad-acc7-21f46a876c7d", "indicator--a948c75b-3787-4023-aaa0-33b56ec123d4", "indicator--10b2bd14-8529-4f76-99db-8f59c979727d", "indicator--06fbef23-96fa-404d-a004-19fe452daa40", "indicator--695ce78a-b24d-4704-9c6e-c608f65670cd", "indicator--875d5dba-2dfa-46ee-a7b8-6b33246ca67e", "indicator--b3160071-790d-403f-af2e-ac10680726c0", "indicator--f1f66b61-c41a-47c0-aedc-8f447cb9b1d5", "indicator--898840b0-f144-4935-860f-62243a157ac7", "indicator--6b7c863c-5552-4492-b823-cd54de6e3837", "indicator--efd205d3-bd42-4531-a50d-2b8fb4b6df21", "indicator--3a130b6e-345d-4db2-b57d-d7e68a5c387a", "indicator--7193d5f7-94d8-4eda-b4d4-1b3ca3b4b744", "indicator--8857c690-07b1-453f-bf01-3ec0e2fca964", "indicator--57c6b510-e71d-49ff-9e96-b0d9ba7f25c2", "indicator--18566262-5ae9-4918-bce4-46b79a2ac551", "indicator--11a9ca51-38ac-441d-aae1-0e11477f55b1", "indicator--2497b120-9de2-4a65-95b1-f0ebb16d394e", "indicator--a6ea96f4-b13c-47bc-a5ff-eb412317c1c5", "indicator--81dfbcb6-e10e-4482-938d-648a93510ae5", "indicator--f217cac7-3b67-4e66-9047-c26190e665ed", "indicator--b0a45c42-145f-4ff7-b64a-fda041563d88", "indicator--82a810c2-2b33-4f88-a84e-df8e478232d8", "indicator--de51412b-ebc2-4c6c-bd04-4594db7d596d", "indicator--db34d338-059e-4f14-8cb2-a4d1641559af", "indicator--91557861-07fb-4e08-a119-eb80263cf772", "indicator--defbe104-44fd-4ea2-a7af-5f6f20175ab0", "indicator--871acdec-a182-43a5-9c14-68a30e8271bb", "indicator--c4aa110b-4bc8-45f1-88bb-21337787c888", "indicator--a8c29d40-80a5-4e62-8308-26612a77cd36", "indicator--586de1b8-b864-45c1-9f1a-a0bc7d510666", "indicator--09ba8aed-fd62-4fec-9fa9-88b011b0d02c", "indicator--bc2fa386-0c16-4110-9f99-b1493fe5c959", "indicator--04b7dd71-fcf1-471b-8eb5-4546e72473e1", "indicator--6756378d-3d1c-4545-97a9-6e17f3349849", "indicator--c0140290-bbc5-4f3f-a195-4f8032de7319", "indicator--12e109c2-3409-4c7c-a96b-d6da71247e0c", "indicator--e5aab7dc-54e9-40d1-9e75-fd957fd7e894", "indicator--480106f6-1993-41cd-8b2b-0225e30ede1d", "indicator--400026bb-d414-4bd6-9d3d-b63591ffaab4", "indicator--3fab0cb1-682e-4490-8184-0613cc37f100", "indicator--1f2af356-2217-4be1-a87d-07cc142f63b0", "indicator--f4c60a1c-2682-4be5-81a8-edf0153e2b24", "indicator--64140a88-6059-4c3d-a61c-978f9844726b", "indicator--5ce36858-7572-4992-8050-6463f7e77ad4", "indicator--71149890-2a19-4d12-9a06-5baf245842d8", "indicator--c86b48e0-a30a-416b-b775-5b0042c835a5", "indicator--e78d67f8-91ad-4a92-bc70-335824dacdaf", "indicator--a51b4705-1c7a-43a8-8388-102cbf122b02", "indicator--6f1e731d-2eb1-4343-ad21-3294c94aab0d", "indicator--b7ea7ad9-0b7e-423d-a9ad-8bbe11f07254", "indicator--1dec5189-bd26-4ddf-b50e-061102376c22", "indicator--64fc0460-ebb9-4656-872c-01b46717ffdf", "indicator--e4b5fdb5-3350-4e20-8397-6c9a3b8c6424", "indicator--91d3ae94-6a1f-4b2f-9e80-decb8a90e527", "indicator--e1cb8eaa-3b4d-4a5c-852e-07c17bf24c24", "indicator--ab10c03b-84e8-43a5-abed-e91c6582a2d6", "indicator--13fcee9f-8636-4852-b31b-4993e79b387b", "indicator--3209ab34-48f1-4449-bd5d-ad36ed780afa", "indicator--29cb38a5-712f-44e9-b595-40640d5ec8aa", "indicator--98491f13-72b4-4fe0-aa63-0bbbb4e90e68", "indicator--90eac0a8-6705-4c41-89f2-7f9874fd69a7", "indicator--dcfd6b11-e602-466f-bf95-88234fa51dd8", "indicator--03456744-a973-4014-8f4f-790cf94510a8", "indicator--10a35548-4894-4240-8278-7648a9fd4215", "indicator--6ceb1762-8cc6-414f-b8cd-2845ee03f9d9", "indicator--dde8b014-a575-4970-b5ce-30c38f05bd20", "indicator--4c8272e4-acf5-43b7-9c43-8dfa88073ac4", "indicator--0f621db8-b183-4a7d-ab20-d3297c2b3cac", "indicator--bec75248-68dd-4b8f-aeb7-411fe2e5d6fc", "indicator--e7e172db-8421-4531-a331-8f8b91b50420", "indicator--a3572b0b-c92a-418a-8c1f-e17d364ad9a7", "indicator--9204d962-3191-45aa-9169-7d06f28c47f7", "indicator--9775f629-2392-44b6-b685-cc741eb6e4db", "indicator--8d0ca9fc-c787-42ce-aab0-91e6a31ff809", "indicator--6c53a36f-0392-46e3-96f6-2a05467573fd", "indicator--d4e65f76-73fa-4dc4-9573-234498fa5431", "indicator--bb98a146-860a-4349-ad05-a865b1f30453", "indicator--f6915c86-219e-4528-b389-ca39aa74f577", "indicator--a8c74b8d-ff18-461f-babd-4f6d9e211111", "indicator--2f5ef546-f280-483e-aa48-f2a3773a462e", "indicator--20d10bd8-421c-4ae6-be33-889d40aff7b0", "indicator--a66f480f-d8a8-412e-8d86-a04a0108e451", "indicator--f8b7e0a1-4783-4c01-8fc8-bac622979778", "indicator--67546002-7246-41fb-af17-fa5f0a1c2acb", "indicator--0a1ea1f7-0e70-4409-aa16-d09b9173fb24", "indicator--e01e9da5-cd62-45cc-a452-8a2c163b0693", "indicator--42b67940-eed9-4bbf-9ee4-6ee6904539e6", "indicator--a323749b-1b31-4ee8-ad24-88b36c44fe9d", "indicator--6ddfb89b-6031-4772-b180-e2be10899015", "indicator--abe5aa46-06ce-4ba8-912b-ddd55dbd7f11", "indicator--bb03d3bf-4ce5-4ab9-a318-30fb5e723055", "indicator--521a11d7-4497-4891-b2a0-0828f9f45ceb", "indicator--3a256a3c-2d1e-4899-bbd2-9e2db4e207ec", "indicator--9c727b1a-7075-45ee-9410-5e53039e5f48", "indicator--4d3d02b5-ccd6-4189-96eb-5c84df1dc84f", "indicator--65bdae2b-8d6b-4201-b02a-61b4294f2500", "indicator--8d43b18d-28ad-4852-bb31-7a6e5530fedb", "indicator--4c6cc32d-29fe-4354-bc6c-e880391bf1eb", "indicator--aec7a964-ca91-4bd6-9a3c-15a9d013d2bd", "indicator--8cec54a6-cb5d-4f45-bc0a-f07c2f59cea1", "indicator--431e76de-364f-46ab-aeae-2d20e8f279c3", "indicator--9124b201-71b0-4a5f-9b62-10aae61870da", "indicator--09fd1c4e-a3d1-443e-8749-4ddd528d07eb", "indicator--fd6d8254-d24c-4545-9308-d992a4474059", "indicator--1d4b49ed-96ae-47ce-acb8-e5a1d2e273da", "indicator--a1281511-bae2-48e7-86f4-128676deda3b", "indicator--f9313f9b-d44e-4504-8d09-160f87893b5c", "indicator--e7c8b7a1-e973-4523-b6e1-4e405bbdb0db", "indicator--202406ce-3a96-4e49-bd12-9322bc2297b0", "indicator--ca4c304f-ae64-4821-88c9-359cc7ceb705", "indicator--851e1a6a-f8fc-4cc8-81a3-b8ed13024221", "indicator--193df2a5-596f-4d4b-8926-3d3ded7db8e7", "indicator--7817d804-1cdf-431e-855c-b741a42915eb", "indicator--50c64937-8df2-4146-a320-c4be7843841b", "indicator--474357ba-39d3-4639-bcbf-8aa6c6597b8a", "indicator--a7f5f8bc-f783-4313-8d9f-61dc37dd62a5", "indicator--bf1357fd-4c8f-4519-9db2-cb0f49c9966c", "indicator--53ecdc62-a024-48ab-87bf-8c9c6d154722", "indicator--c172ba75-a71c-4c8b-a74d-a7f92c4c17af", "indicator--1e95dc58-31ed-4846-a5d3-ce8a900ba681", "indicator--ee185c57-549c-478b-b349-279c3db49210", "indicator--2ffb5ea5-620d-4ef2-98da-77e6debf6d10", "indicator--2b73026c-d452-476a-a0ed-b4b0853b41d4", "indicator--d0d78cfb-3eb8-434e-a5a5-015c6ca80f85", "indicator--7f76b5a3-f478-4800-b809-e22020582e80", "indicator--27f19caa-c496-460f-a828-34a6a6ab78ab", "indicator--5194b0ea-b688-45be-be2b-0fef84a4f247", "indicator--0170c7da-972c-411e-b114-800ffb705a3e", "indicator--b5499b3a-af5c-4473-a018-21669fb8ec45", "indicator--7f00b74f-5887-4175-815f-17f693381b9c", "indicator--5d206a7a-61ee-4cb9-b607-5c2a40ee1871", "indicator--21ee0612-192c-4eb5-a967-25d84e056179", "indicator--ee4f9f8c-eae2-4c49-9f60-5a34820247c7", "indicator--161d8cab-10fd-4698-943a-4a4bee7f63cf", "indicator--08e39a15-f429-46cd-8235-b35aa21015cf", "indicator--2a1d30e4-72cf-4e0d-b97c-29e0949d368d", "indicator--c717484d-7c7c-4643-b9c2-44a6de04026e", "indicator--4bbab253-72ed-4ccf-8e5a-854606dd9e02", "indicator--caaa07cc-d1d7-44b0-b393-f76b1b8be13c", "indicator--14c35e96-1ab0-4062-984f-15b99b0fbf8a", "indicator--d95e7832-2e5f-4cc7-99b5-8dfebdde84f7", "indicator--4de0d326-94db-40f3-b90f-724d8a583693", "indicator--5dbf6c9e-b07e-41dc-a35a-a0aa90249e9d", "indicator--4120edf0-7548-4579-94dc-fb227d4f7caa", "indicator--af20ad67-5c01-41df-ae15-afa7b8374102", "indicator--2952f90f-8916-44cd-8b2f-ce655be91691", "indicator--b2cc8464-70c1-4f7a-86c9-68025a3c2f8c", "indicator--b7336b1f-ee67-4124-8270-62b9d92cd379", "indicator--f290ec40-cb64-4f4f-9cea-7f3e9289fc89", "indicator--81ab4448-f6ff-47e8-9ed1-57670d840b3f", "indicator--cf147ca3-ebbc-4eb8-b523-96406e8c8bb7", "indicator--fa27dec7-1aa0-47d1-98d9-489cc4d6ce89", "indicator--26838fc4-0d67-42fb-9f25-81495a82d856", "indicator--06b8cd29-18cd-4149-b094-9a83a7bac97a", "indicator--88cc18b2-1bb7-4cbb-adb9-76ce00d5e92a", "indicator--555edc87-a947-454c-9b2b-f3bbfe1eab70", "indicator--368a7e81-509f-4651-8c0d-df04c2840550", "indicator--7bf1cd1e-90a7-4131-bcba-b86976ad8342", "indicator--f4dce9cb-b429-496d-8f2c-aa5806a06f67", "indicator--61fd4d8e-d6c6-44e7-8189-8df290c2402e", "indicator--9a6c35bb-9657-4ac5-aaf0-037446c62fc3", "indicator--0d09c41b-dac3-4012-9bb8-5ec66c334505", "indicator--c5ea4124-5960-4b91-93fa-d489db264eec", "indicator--2ab596db-8e2a-4070-b018-19904a0ba63f", "indicator--b2870227-159b-49bf-9cce-6561dd523b2d", "indicator--27a6356f-316d-41b1-ab6c-4a2fe770ec26", "indicator--0fed5d20-d46e-44fe-bbe8-7a9d40fe50fa", "indicator--759de2cb-5af9-44fe-8b15-0874018aa2b2", "indicator--ef3447ce-1170-44b6-bdb9-3ffcf1f68428", "indicator--3f6d4792-cc21-49ad-a591-ad156ce3fab5", "indicator--ee90dd50-4605-49ac-8da7-8cbb911296cd", "indicator--67356af9-521b-414c-acc0-92c0d0a2e83b", "indicator--85c552d1-7c80-4d21-90f2-56cb2744d82d", "indicator--0d2bc2ed-14f8-449b-9433-5f668f371927", "indicator--c218d6d9-a717-472c-b6a7-7e5173deee1a", "indicator--3b7c4702-4ca5-4d6d-9b41-8277e79d2840", "indicator--e81a916c-dd08-446f-9093-979c3ede2ff4", "indicator--89ee97cc-76fb-4048-9b1c-cb866a11cc4c", "indicator--8f34482c-9e73-4ced-8441-a47a9ea18d39", "indicator--6316d2e4-c283-4130-9150-f7dbb069d642", "indicator--2fb921f6-13ca-4019-937c-014a2f71b3a3", "indicator--7ec56962-76d7-4f93-9266-9dbf8a91555e", "indicator--7340e454-a214-4684-8140-79aac1f6d8aa", "indicator--7511b43b-30d0-4b61-aaec-1c6e2a08a590", "indicator--702ac729-e890-4a19-b788-bace9beb8765", "indicator--4f285b1a-1ff4-438a-9cd3-738af541b842", "indicator--116e31e4-b897-4154-a344-3f23380a314a", "indicator--8180d75d-8501-439a-aae1-4f92c6e917a3", "indicator--faa15334-b4ab-4f0a-9db5-8d1dfefc324e", "indicator--5666f7c8-717f-421d-baa3-f491b77ec6f3", "indicator--47ab26b8-1e83-4555-befa-031e86614cd5", "indicator--7f60d776-7190-48ad-bffe-b7e851167bdd", "indicator--d1d4dfea-7a2e-4eb6-8b2c-3fbcd3fccf80", "indicator--c4763f3e-39e3-44b5-91ea-26d7b008b7a4", "indicator--95483a24-2582-47d1-94c5-080168aba75f", "indicator--7c4f791f-bfbe-4853-b447-9630d6590b4e", "indicator--16195958-8838-4e98-97e8-bb7d571daee4", "indicator--3409c82e-f7ff-42af-a984-4da6bc1272d8", "indicator--ea6b5fc2-d861-49f2-bf54-9c8825b213b2", "indicator--0540c8d4-f5c0-43b7-b255-06263e1652e8", "indicator--84b4a470-b6ba-4e7d-a931-f86f71adcfde", "indicator--7d697113-db1f-4093-95ec-033d5171fe35", "indicator--bd50882a-8cf9-4269-bae5-89f4f3eb9daf", "indicator--a28e3351-8439-41ea-ae43-06688d9b6935", "indicator--4587e2b7-b458-41d5-b4ee-bf8cfdff2030", "indicator--ea2b4a17-bc50-46fd-a4e0-f7522b3b55d6", "indicator--fe7dd770-d60e-4580-8723-564c00c3c4a9", "indicator--8b82527a-ca84-49e4-bd44-efb3276d69f1", "indicator--b43ea478-ad52-4186-b0e9-1985b7199994", "indicator--99859c0f-ac23-4069-b3f8-3ba5b46cb64e", "indicator--339476fd-1965-4643-b218-cbe6c0118a4f", "indicator--a6eb70dc-db41-4afd-a448-1087fa30b7eb", "indicator--4ff05af9-be57-4d73-bbb7-00046aea8413", "indicator--97f5188a-d40a-4cac-8eca-3240be8e7f1d", "indicator--8017e543-f02b-4e9b-b299-cfe6065b4036", "indicator--f172b3fb-cdea-4b03-b559-ea828185a28c", "indicator--222a4749-dc2a-451c-a8da-185acd77d81c", "indicator--7e9ec8b6-9fea-46d8-bd4f-297ccd7b00c2", "indicator--a7d0b199-1cee-4144-86c5-3cd10a122ee1", "indicator--90c05812-951e-46db-95f1-36b4e25aca66", "indicator--9cb1a351-314c-4c0d-858b-35062c21bf44", "indicator--cca44027-ed8a-4e66-b91d-3654012665ad", "indicator--79493a6b-9931-4a11-ba0c-51b07889ba69", "indicator--701ff55a-94a9-4ada-9e20-6b33f6766456", "indicator--548699aa-df53-42f1-b748-a51e50532f73", "indicator--c83c8681-562e-4592-ba33-319dd7a6945f", "indicator--fd01eb55-cdf3-4b93-b5ef-55c0b23f0db2", "indicator--6fa46e65-7c6d-4db4-a2d2-130f7c22c2b7", "indicator--fe9b4001-5309-4575-b168-0dcfece09e8e", "indicator--e5948f02-ad90-454c-905e-5ead90e81d97", "indicator--4f27af30-06b6-4d4f-873b-f50578f0d5fb", "indicator--1b85ce82-a4c0-4649-9670-4e84fa76dcec", "indicator--5f6afb66-4edd-4258-a667-82d83f2da21c", "indicator--cb6e6879-3c4f-4732-bf8a-28845befc018", "indicator--f216363c-ce4e-4e45-a425-5c1834c2f888", "indicator--bed98a24-e1b5-466d-abb4-11b929afd45b", "indicator--60598241-8722-4438-9425-65b6eb9e97b2", "indicator--e573381c-6bcb-4753-8f07-707f9d1d80d0", "indicator--7900488f-174b-4236-948c-9ccd9cba5164", "indicator--440a49ad-e83c-425b-bd86-436aaf12844f", "indicator--91bcf1d5-c272-461f-8b2a-fdf594618c78", "indicator--1edbbaf8-2555-46fc-92b1-c4445cbfeccb", "indicator--a99104f8-c194-439b-87fd-bfedf1109384", "indicator--f9ef853e-998b-4672-913f-944b326d6607", "indicator--c270b24f-5bc7-4095-a889-20d483037c75", "indicator--6258888f-1914-4daf-a0b7-0ba0bc127b38", "indicator--15a3c4f1-52a3-4ed2-8344-820a3eba058f", "indicator--1b69ec33-aa29-47f2-83f0-80b6edcc5ac3", "indicator--bddd725e-2f20-48ba-bc24-ac8a79b7664c", "indicator--b7dbab50-084c-46bf-ab5c-5e1c15e32c08", "indicator--d582d369-76b9-4aca-810d-52964bc86a37", "indicator--47104720-81f1-462f-9517-daf03db35aab", "indicator--f0e862bb-3d70-4b8c-9123-6ab932c79f30", "indicator--b565b430-69b3-4a5c-9186-adf7394a0b01", "indicator--222290a4-c863-45e6-ab3e-cd596ad54fb8", "indicator--75f1def9-5559-4f6f-8ce4-eeeac84c0833", "indicator--523bb247-d743-4a73-9150-c1754511fbc6", "indicator--7825842f-679c-4bc8-8ae9-df0c0dc99179", "indicator--d5225a62-d653-45ba-856f-2f9de50015ae", "indicator--3881531c-4f8f-488b-b258-ed595e466006", "indicator--1afa2c26-1278-4c74-9a6a-2c7ff8b366e7", "indicator--acdf8aaa-1610-4402-867d-c679aed5e13d", "indicator--a0c05a10-9e53-4de5-90ec-9e2f14da02f2", "indicator--a8a5c76f-56f6-4146-8a22-c4e58a5e0ed1", "indicator--dfa99e4b-a3a9-4b73-bbaa-e046c06b0a3b", "indicator--801a540a-2596-475f-a7f5-526cb174f419", "indicator--108837a8-1da0-4275-bfb3-92aa074726f7", "indicator--b48d7cbd-c3fd-4f54-b5d0-5204243aba0f", "indicator--9f215213-3c43-4ae0-955b-e37b0a152dd9", "indicator--40c7e51c-a28a-4cd6-9a28-5ba8d32bc35e", "indicator--7664b50d-bbaf-40bd-b38d-13b5e2764034", "indicator--01e0b20f-357b-438b-a124-9915a33eabe3", "indicator--67aeeb32-701d-4665-bf35-841ba783160d", "indicator--03fbffab-f2ce-4eac-a872-266d3f8dbfd2", "indicator--f6f0493d-9b60-49b3-a98e-7b476b8029c8", "indicator--9b846ca9-c0ce-4f04-922c-3abc553ab3df", "indicator--6409b069-79ce-4f86-b6b1-14aa9bf6633d", "indicator--4e9297bd-938b-4b4b-a6aa-2620f972b671", "indicator--dc9af42f-aec5-48b3-a241-12a5d5aa87e3", "indicator--36071106-aa28-4037-bc1e-2625cdc49ac3", "indicator--6b64ac7c-b54f-4725-a774-e540bfdd89b6", "indicator--3da4806c-1fa1-49f6-b720-0ca9f16ff6c8", "indicator--9a592a90-c7bb-496d-9b79-46c51c084216", "indicator--57140f36-b08f-41c6-8ee4-6c0afb1051db", "indicator--cc5acc85-6a58-4d65-811a-6851489e34d5", "indicator--3c74d24a-fed9-498f-9fe9-bd5564af212d", "indicator--9436ce21-b5fd-4f3b-81a3-f27c33df3efd", "indicator--12e5f770-b118-4ee1-8639-1ec53b9dc521", "indicator--65bb9fdd-bd73-44f8-b237-fbc25fd06875", "indicator--430be606-47f2-42a4-bcfd-7449fabd66ab", "indicator--4068fffb-4b62-4dce-b618-a2032633ef62", "indicator--6eeabcf5-0270-4fe1-a279-711ee4e6950c", "indicator--d3646c46-3f78-4aa0-afcf-4b7bd7da102d", "indicator--846682c3-587b-45d8-bba1-1639b9744795", "indicator--4a264d42-6e05-493e-a2d6-d08b9bd4ebf3", "indicator--cfd97879-b7c2-4374-9c63-bb8c34ea810a", "indicator--db046462-0e56-4130-b2d8-f9d35008ca6c", "indicator--8a9a5f2f-48b8-436b-91dd-4ac04580cf7a", "indicator--9ce19359-f729-4fde-9950-f4e18678c8bc", "indicator--263dd325-2c51-4416-bc31-fbaea2d37b3c", "indicator--cd1298a6-f141-495c-b081-9177f151900d", "indicator--100cc191-12be-4089-8077-8ba68731c7c5", "indicator--d37d3f88-2542-4b08-8415-cfb03afb944f", "indicator--175036ec-b78d-4b1c-b1f7-ea1f0f5ce3f8", "indicator--ba023a97-bb26-4d7f-b910-53b00ba5bb14", "indicator--537df253-b8f7-4971-bced-c649032263e9", "indicator--4f39e4ef-5f9b-4c59-97f1-2e94198b1f6a", "indicator--ce1efda2-f3f0-469a-8e92-93b21e3c3978", "indicator--e4adf4ea-8748-4676-b3fb-fcde66ae64ba", "indicator--5af8c21e-10d5-4405-89c9-941a9a844a53", "indicator--cefec799-21ba-4efe-bb2b-215befba576c", "indicator--0afb5c6a-9ab8-4ddf-a71a-65c9e86f2c3a", "indicator--af9c1449-923c-4b82-adc2-aad9ef0a38b1", "indicator--9571e959-e9c2-4c84-9771-b943fa1e6d46", "indicator--a5f28df8-2829-4b15-9716-1489e8f2d9ca", "indicator--8f20b03a-ae68-49a4-a680-81de035cca8f", "indicator--d355d73a-452c-488a-b244-99fb68868b6d", "indicator--75c3fea5-2d4b-4df5-b6ba-7449493252f5", "indicator--ad52ac50-37d0-465c-9bbd-696a9ca8a503", "indicator--2e20ce58-2259-4b62-a3a5-dd5e9c7b31fe", "indicator--20de76f4-a3ed-406f-afb1-3610d08e8219", "indicator--22cb0c28-8c0f-43fe-85e8-e14c894a2cb6", "indicator--262ac9b2-0428-450d-99f5-ba3cba5c7aa8", "indicator--0bac5713-e8bc-4791-b57a-189fa60049d4", "indicator--9987336a-7634-44d2-a217-9dbc32c9d41d", "indicator--a50ccd26-26ff-446a-821e-f6deea3ae0b2", "indicator--bd0e3699-bdf1-4f02-844e-8f6926b035c3", "indicator--1c1fd02d-53c0-4fa5-815d-96a7205f0f91", "indicator--70bacc53-872d-4b0e-89e3-d15906fd8e10", "indicator--8d736c80-91b5-4c25-adeb-f3ccc8a36468", "indicator--12332ca3-1c7a-4da7-a340-4a89e050b34a", "indicator--0c04d6de-e245-4aae-ad11-436204a54462", "indicator--40b84946-4045-4640-beed-2fea16abbb8f", "indicator--897c6e91-56b5-4356-8c63-404670e484ea", "indicator--66eaa3f0-2d16-4576-bb04-4d2e23022e44", "indicator--7aa18bb6-857b-4ae3-8e25-0e595ca48d17", "indicator--ec9ff659-6d24-42f6-9f85-ebb1eb7455be", "indicator--07dcee0c-bd9b-497e-bbdb-4d0cd4614bfd", "indicator--db48596d-4425-4f8a-8121-72b4d6bbd53d", "indicator--66a3fed5-b1a4-49db-9821-82f2c739845e", "indicator--a003e6d8-95fd-4eef-9165-62e529620b66", "indicator--e209b78a-271f-45d5-ac90-44490291682f", "indicator--75327798-df3a-4973-b729-fee964ecd29d", "indicator--1af72073-f479-41ba-896a-b2af27647d4f", "indicator--5562f043-ae9c-41bf-b52d-86f85cf3b462", "indicator--7f7990fa-1332-4d54-ad9e-e70feb43bc58", "indicator--85f01b5c-0c4d-4f2e-8e8d-099c669f4eb0", "indicator--cf20076b-cf25-4254-b574-ef4cfec88b61", "indicator--b673cd79-cb35-4606-af80-c2f0d222a068", "indicator--f9063989-f2d6-404b-9aae-b9674272cd81", "indicator--1a5319d4-145d-4f0d-b93c-1f594b9f20b7", "indicator--bee54ea9-ada0-4975-816c-cc348aeba878", "indicator--cd20dea5-9c72-4534-a858-9faeb98f55fd", "indicator--c7f7c5de-f613-4d13-8401-6dd16decb6c3", "indicator--383de37c-f3da-416c-8b18-ae769da67804", "indicator--febf458f-1c31-47ba-87ad-f6cb3c4f67aa", "indicator--b0ab9d61-ba53-4997-98db-43e4199d50f6", "indicator--4f98ecd4-a8b6-4454-b09a-aa28fe1b6f8e", "indicator--89668b4e-8090-4e83-a45f-1e406682278e", "indicator--8f6cfba0-0481-4803-8cbe-f10fa7296cc5", "indicator--8b39b55a-ce77-4515-93f5-12e049e0d5b1", "indicator--08eaa5ab-3c70-4c1f-a00c-6631e5a13320", "indicator--2c701fd3-f6d5-4ca3-a287-5ff71bb08431", "indicator--18d162f0-0e7b-46f9-8c71-906af6ac807d", "indicator--a3dbeae4-8685-41ad-9167-69bc7a00aa13", "indicator--258dbe51-34e7-43b9-8d10-d0d9840d2b78", "indicator--f1c32223-1d05-4ab3-9b72-1e2b8273c2eb", "indicator--c9141d28-8060-436d-b676-e1393f692a4f", "indicator--7aae6b46-8bd5-4414-852f-db8f89c04420", "indicator--a6240c50-6738-4422-84bd-1d1631166a31", "indicator--adf7a612-3a20-4bcc-ab4c-a801a0836606", "indicator--77f184cb-e079-412a-8e34-9d146adf3467", "indicator--d7ca3c03-bcca-48fd-aee8-faefbf5b3b08", "indicator--421cd5fb-f047-41c8-846d-0d4e0b50fa0c", "indicator--cc6828d6-9072-4a60-8d79-6d593ed554c8", "indicator--18dc19e4-4345-473f-8ce7-7e03fa424830", "indicator--31a2699c-5f8e-4a16-8ae2-158f46ae3549", "indicator--5f7d3ff1-8440-4e84-b079-42079f00ed54", "indicator--5b33c881-f0af-4717-b0ed-5b22abfe118f", "indicator--97924823-152b-4069-905b-5b2d38051211", "indicator--baee5f9c-0f1e-4e6b-9649-09e1e67a5335", "indicator--e73081a3-e58d-4b77-b71f-4ba4985fc807", "indicator--f6a55b35-4e1c-4fa1-aede-1e0acf6a666b", "indicator--ba286473-48c8-4f61-9cd2-fd31590d51a8", "indicator--de48038c-89c7-4488-b733-e289de715dee", "indicator--3033a8e4-a4a3-4ef3-a5f5-3184a040b4c6", "indicator--81e280c9-b120-41e0-9cf7-f126991a1241", "indicator--71200d88-a4b6-4606-9604-fdfbee9b90cc", "indicator--f0ff692f-f524-43ea-a1df-b7e0c933fb1e", "indicator--76f4faa2-58fb-4419-811f-254b9e5ae8cf", "indicator--9580e0a5-423b-4cd0-987c-b2c858751067", "indicator--047da2df-1bc6-4ba9-b0bf-4100a2c0c9db", "indicator--f2dd7a28-ae39-492f-93c2-c95f124fc7b8", "indicator--eb5a2205-21b9-4aaf-bc4d-d27afc640e7f", "indicator--5c66e45c-5e2c-4e0e-a174-2bc2521dc232", "indicator--9c541a29-4c60-40ec-9f23-eb42b6f5b00f", "indicator--96ffc306-6513-4456-b84f-c1c2400c402e", "indicator--91dfea46-e123-4d2d-be19-931cca9e0908", "indicator--1c1a292a-b8f0-4f12-9566-ccf536894097", "indicator--d74291c7-04a0-4e0a-b0da-c2fd71f18bb7", "indicator--15ca0a2b-31dc-423d-90da-33ae419ff865", "indicator--2bba7e12-9560-428d-b8be-9c582570fe1d", "indicator--f87aa0ac-0a35-4858-a2a3-1ea7dcf428e7", "indicator--fb939a57-b60b-43c8-9dad-a0e81cbcb495", "indicator--89e916b6-5962-4d8c-a6cd-295229653170", "indicator--7dd613ce-ab57-4cc6-81a4-cb502ac23d94", "indicator--85fc30a5-a4db-4df4-8b02-c0d93f4f42a9", "indicator--32d7fff5-820c-4ac5-b786-c641f69281a1", "indicator--17264269-2c1f-4d64-8803-676b0e4772e2", "indicator--7b7e66b1-f9cc-456b-92d3-09a4a0c49b54", "indicator--2241f2d8-f5f7-43bd-afbe-664ccf313ab2", "indicator--99e8f294-2d74-424e-920a-fca0cc3b58d8", "indicator--207daaf5-76c7-4c9c-ba34-a26875054011", "indicator--54927f2e-3426-47a7-8ed6-e55e1c803275", "indicator--ea6b851b-b98e-4fe4-aa48-734e956879f7", "indicator--702ac903-4c70-4593-bf7e-419881bce870", "indicator--b0814f18-9b98-4643-b8fb-3fb86f14b551", "indicator--106d3143-f3c7-45ae-90a7-fc6889268317", "indicator--035625b7-2d44-41c9-8fe0-02b6b463961b", "indicator--820497f5-d0cc-434f-adcb-c95dc5924154", "indicator--6d33ab43-8a6a-4166-8ff1-e5336ccf87ef", "indicator--802b84d1-bb0e-40ea-bb1b-aa08142f6e1b", "indicator--a443ad0c-cc2f-4752-b2e0-5e6aed15d1f0", "indicator--0bc4647c-619f-4fe1-8d6b-bdc47c4ef7c1", "indicator--5ad6bed3-14d7-45f6-bddb-a3646a201051", "indicator--0b5cede5-6c54-48c9-b22d-c0fe970994e3", "indicator--c4280ffa-bd6c-41ad-be21-4476d43ff508", "indicator--00f5f1ab-f215-458a-b070-80424a5ee319", "indicator--2e7e36c6-6631-43c1-915d-665f19e1105e", "indicator--a9325164-187f-4f88-846f-3eb203242c03", "indicator--ce41de73-bee9-4f98-a8c6-989b8209aefe", "indicator--666743a9-0292-46d4-b3cb-289436582618", "indicator--557aee89-967d-47e9-bb31-b1b32a5dbe43", "indicator--d82ae163-31ae-4407-80b7-0c0945bdafc5", "indicator--71b85765-bb6a-4ac0-80e2-5ca991e094a0", "indicator--8dadc947-68f6-46c1-8084-1c19115061f4", "indicator--8f1478d5-0021-4a29-9198-ce1e72a6d169", "indicator--0bfb8c09-d2e3-40af-8754-a12442ef2343", "indicator--2335626f-6484-4e7e-a18b-86cd501dbfde", "indicator--70de726c-21a6-4a1a-a07b-38cd8325aa7a", "indicator--1978f3d3-c027-4a78-9390-db5f27fed2c0", "indicator--a850f9a7-3506-4410-a5f4-44b6b37de6df", "indicator--da995b3b-2295-4537-88df-001bf28fd496", "indicator--966fafff-cbcf-41db-8217-103ca186ada0", "indicator--ff7e90c0-5b3c-4217-8200-e4403c1b023d", "indicator--435a4e94-9f9b-4cde-bd55-aa0c4fcac46b", "indicator--f8ee697e-2c59-477e-b7d8-8ec26ee1920d", "indicator--161f2ad9-917f-45dd-9b14-8ef1826c2053", "indicator--6556d920-d83e-42b4-a4ea-cd6e5fe7a6ad", "indicator--df1b9a5a-bf7c-4798-95d3-41d5f7424675", "indicator--8371f821-4087-4d6c-8f5d-ad6363085d48", "indicator--f908acd7-0435-42a8-b4ec-6a7df2bb6b8b", "indicator--d4a69487-da58-46da-a3db-357793ca8a98", "indicator--3d61c07d-961b-4c44-aed6-a08b2e0faec5", "indicator--10eb7db1-84fe-46c3-9e7f-93f6bee0afa9", "indicator--3c1786dd-d6c2-4ceb-a47b-d078bd73f457", "indicator--10dec763-bec0-41fb-9969-b63dad48784b", "indicator--03218920-3791-460f-9db0-fc7e187852e6", "indicator--c6a5769e-ffc1-4cf6-a899-4fe7fbaa52e5", "indicator--c2f63370-62ef-445e-a079-e44eb9eafbc0", "indicator--e2c60211-435a-4060-a33e-9e966dd41380", "indicator--4b4a754e-8d1d-4b35-b711-3170ee0ede3e", "indicator--ce54d1ac-2b60-4b5c-a135-aa71b91f1f1d", "indicator--c0081405-afb5-4a79-929a-9eb79e7c1d47", "indicator--c9877a9f-4849-4c1a-a073-173b41c77bf3", "indicator--6caf56e1-934a-4848-a46e-77b885cad029", "indicator--cb7d9a75-7cee-47ec-bc42-71862f63ea45", "indicator--561d6f56-605b-430c-8c92-a5005c252ddc", "indicator--3618b41b-7ff8-4e6b-addc-923984349a33", "indicator--377ee82f-000a-4bd7-bc0d-28daa72dbd85", "indicator--15105ec3-0fb3-449a-a8ee-7e142ae6e6ef", "indicator--9d9dd65d-2c68-4aa7-8544-e6fcf4ec681e", "indicator--ba8e0a8b-03ef-4a44-af62-6937e195b157", "indicator--f1148a63-d433-4517-b67d-50c98887f9fa", "indicator--02a4f37d-3aae-4ebc-8ecd-2842f6c34de6", "indicator--61e93ab1-da88-4621-afa6-ebb355cbad95", "indicator--9b46277a-4727-4056-8fda-ac92970a5e72", "indicator--ae718e35-a09a-438e-aa2a-5756fad75259", "indicator--ba6f936e-31c1-4805-a0fe-5be537e28075", "indicator--06934a5f-8d95-4f4b-93e1-ca2e119a19d0", "indicator--bcc9c2ed-1ccb-4fe4-a21c-093c50b8c101", "indicator--3d32f28e-ed50-494d-9b8a-f806a1204946", "indicator--f5abb10e-5a07-4be2-83ab-65e7708ce48d", "indicator--ce3c6168-1894-4d51-96e6-789b89229470", "indicator--5048c835-f274-4d9c-9009-0cd29b7a5357", "indicator--42f2e9db-f3c4-48b5-bc5c-d8dd51e13cab", "indicator--a2db50fc-ff2a-4516-bc44-906e35861e67", "indicator--237734a2-e833-4dc4-b6b4-1dba1c1108e7", "indicator--e7817c52-fb74-4eb2-8cc3-f1659d49dd30", "indicator--03b060bd-4433-4e8c-a9fc-1a2bf6e2a1c2", "indicator--e203df04-5e0f-497c-9c9d-05bf03daba6d", "indicator--6f221d70-38f7-42d8-a7a1-7c02b717f7ad", "indicator--e47c55db-9f7f-461e-ad10-31fc3c806ebc", "indicator--b070e48f-4614-4424-a4e5-733351ce57ca", "indicator--49e7c2de-2e90-4317-bf7f-6507b1b57739", "indicator--3375f787-fd47-4ee7-9ff5-dc8c00aa55b1", "indicator--c46d109e-1114-4de6-b09b-40767b839a99", "indicator--ad20f55a-dbba-410d-9099-ac5a969f8579", "indicator--b3efa062-6740-4e0b-9d7f-cd4c7dfe3417", "indicator--c39b195a-4503-48c9-9029-3137b619d504", "indicator--e078f462-dc9b-4b93-8062-0b13eb8efa55", "indicator--f3c287b4-8048-47ae-990c-5ad226a0cf4a", "indicator--535069e2-30a6-465f-8508-60f10fa81d2f", "indicator--1dc11569-4218-4039-bc00-89b3665d6806", "indicator--2e2e55ef-d0b2-4ba6-9303-bacc6f4f6d83", "indicator--e71ef5c3-3d3e-4da4-a0c6-e250246b64d0", "indicator--f5f0ae17-f820-4651-804a-b1a9d8f0b21a", "indicator--824125cc-d1ff-4767-bed6-57c814b63ba5", "indicator--5e5a32b7-ecf8-4fc3-a880-9fcde2e9a5e3", "indicator--85706cf1-90bd-40ad-9ac5-43ed354bea3d", "indicator--cd34baa2-0121-49d9-a4a1-38faa7c705b1", "indicator--4c694354-9067-4a96-be0d-437dbfe6fbec", "indicator--68e17eb4-1731-4e1d-a30a-0ab0e87be4af", "indicator--63a1fc05-199f-4266-9e87-80e8f2f033b2", "indicator--b64e06e7-c3a9-44d4-99e4-56144ddc0ca2", "indicator--a56926b7-77c5-4471-96bf-5f3d6ea96b53", "indicator--16efdf0d-4186-41de-b839-30ed499d4064", "indicator--6e9491dc-9e84-4342-9f8c-a29ed037cdcb", "indicator--fca97be5-d16a-40ab-aed9-6ca12c7b9963", "indicator--7bca913a-c747-46d8-929f-dc6cb45b2875", "indicator--7af383f1-561a-4d62-9ff2-327edc8133e2", "indicator--a310630d-87e9-4cf1-bca6-b7782dc0abdb", "indicator--d75b8e31-5358-41ab-b362-2e622cdbcb28", "indicator--9a7e7fa5-f304-410e-9671-c1a1daea87c2", "indicator--9c1cfabf-e327-467a-8029-a3bf00f87433", "indicator--6f6fc558-2b3f-4da1-800e-b39b76b8ae57", "indicator--14b49899-6705-40ba-b276-1618b4021bed", "indicator--028e434a-1a4d-44c8-9fd0-3159e101d93e", "indicator--df34fcfa-7af6-4fcf-84d5-20e7de489864", "indicator--c9e55977-922d-4a7b-a4a6-06b77585a51c", "indicator--81db7418-ff15-4c06-8979-85c6abf046e0", "indicator--27e19395-7fa7-4206-a9f8-b62a041eb229", "indicator--b97dce87-346b-4b1d-b0f9-5eb4933553e9", "indicator--a94d36c4-637c-480f-a02a-7a29f4b54a92", "indicator--71ed8bcb-44a2-43ff-8970-0fd0f36ace69", "indicator--9ece85b4-a093-4451-984e-50d3db2d73e4", "indicator--8489bf54-7518-4135-a794-34998edc4e49", "indicator--d2e24978-f2a8-4fbb-b840-f5a51f93c172", "indicator--059e706e-b14e-4b00-abfc-6c9b4c5e3cb6", "indicator--95978fca-18f7-4cf9-932f-f44c12df5936", "indicator--b726cfd0-e11d-4d3c-b2b5-4ea91184587c", "indicator--7d3eb7de-106f-4578-9888-53b0ce94bbcf", "indicator--1abdef1f-1ff9-41b3-98db-9b68b0ad2091", "indicator--b2c4629a-2c82-4a37-82a8-051f9e7f6f2c", "indicator--528e0b19-3535-4b9c-a2be-84e7c0c272b3", "indicator--e599fd15-4c45-4aca-ad27-5370315715bd", "indicator--2a58bd08-cd85-407e-8e2e-7a045330f660", "indicator--74fe41f3-bdd0-4962-b6c2-ebd0c00e538b", "indicator--112cf322-6b34-4eb9-89ee-fd8194f998c5", "indicator--3258881d-0aa8-401e-be7b-6a4faf098a28", "indicator--4abb608f-dce1-431f-9fe5-33131abba778", "indicator--ce3fdda6-2fd3-4be2-b920-e6dca657c7b3", "indicator--a21a8a80-53fc-4013-9927-91e333a51659", "indicator--86c73dbf-b08c-4c55-bcb3-e75f8ba56d4e", "indicator--0f224fad-60a7-4921-9595-844eaf8a7307", "indicator--31de2e60-93a1-436b-95ed-6ee7efe6a686", "indicator--73bc58c8-55b7-4af3-8d76-ecd69841a8fb", "indicator--407b00c6-0add-4e96-abd4-4c36d79b8cad", "indicator--9c4a45b3-d17e-444a-a4a6-3f3f06396c6f", "indicator--f5694d04-15d2-4378-b202-d301fcd8f2fe", "indicator--e5d44811-6a78-4cf8-a9bf-23f74c351b96", "indicator--b9281772-735f-4838-9812-fc0c9d3dc963", "indicator--0e9edb31-6823-4714-be5d-df291f6ce472", "indicator--7380577e-4554-4da1-aa32-a4abf7e5583e", "indicator--455f2844-dd7c-48fd-b291-aa7e1a8367ee", "indicator--d63f123e-507c-43d4-96d1-86351dedf899", "indicator--16f56d79-9a2d-47cc-855a-1060c13941a8", "indicator--41f5a12c-0609-467f-aa8b-3b4c6b730f7a", "indicator--101f9932-2243-4a74-a390-5517d9c378f8", "indicator--569827a6-6dcd-4d57-86fd-467207752574", "indicator--f0d458a4-a898-499f-9cac-56cde51fb117", "indicator--94c976fe-8ad4-46eb-a045-2bbc04863bae", "indicator--d0755a02-a0c2-4d3b-a2b1-ae5d904aefb5", "indicator--c244fc3c-2664-4c53-8154-ade0c7461017", "indicator--f5b019f0-145c-4c3d-b891-f25d70326cd8", "indicator--ff4b66e1-8544-4d87-ba4b-17e090b80421", "indicator--1286b457-60f5-495c-bd13-f81fb52ddefa", "indicator--d40f6370-1fe5-4f8d-8a40-0462d0e3cb91", "indicator--ce7ebbdf-278e-4a9f-9456-09e7d03811a1", "indicator--91c3626d-b563-446b-b2e1-366762cf281b", "indicator--2dc6eab4-4bf4-40b1-b37d-cc1a2123e2db", "indicator--cf637492-6ac2-4554-85e1-a1239dbcffc0", "indicator--43186266-9f8f-426a-be4d-4848a6d757dd", "indicator--4e9aba04-b973-418b-9487-714d45914563", "indicator--28f65f6c-b5ab-4421-a117-55742801676f", "indicator--2132d278-fad8-4584-836c-f25263d49b58", "indicator--85041627-f9a9-4161-9d30-b1d2baf7b426", "indicator--b4ec6794-7d72-4ca7-9af8-c14927178e2c", "indicator--8081b013-477a-418c-9886-a9da06f313b6", "indicator--91199ff8-e283-4b84-af38-cb6ea662174b", "indicator--1807efae-2423-4e65-84fa-60c486160147", "indicator--a9993375-32c2-4102-9cc2-affef9422c25", "indicator--6ac3ff1f-996f-45b7-9b03-5e527b908916", "indicator--80bfe43a-0132-4f79-a607-bdc2d48288d3", "indicator--4e1b73ec-561b-40a0-a726-159624777aca", "indicator--3d0e4e3a-491a-4233-8460-a0fe9784c5e0", "indicator--b3dd1444-245a-4fa0-9cd6-f606ebb7c0aa", "indicator--f868b175-3f99-4e03-9811-52856aecb98b", "indicator--79358fc6-a1bf-4f45-b051-bbaa713e3726", "indicator--07f12aca-741c-4317-8069-e42a835e25e9", "indicator--dc55be7e-f21d-4b37-b8cf-19ea255587dd", "indicator--21f00d5d-babd-490c-826a-554fef17d1ef", "indicator--e9fc6a59-19de-4b4a-9af8-11a066ae117d", "indicator--3933e0c2-1147-4a29-af7f-7ef14347d12d", "indicator--c613de27-6dc0-46ff-8809-7614db649708", "indicator--c65eabc4-f7cd-4948-bfdc-d309b1c80797", "indicator--26685b5d-983f-4984-9cf9-756300f9195b", "indicator--56340d6d-d67c-495e-b9ee-8686931addb8", "indicator--17202cd2-7baa-43ad-a03e-ac1a27dc706e", "indicator--103ec335-a872-4308-b583-a111fd7c34d6", "indicator--c3faa7d6-7563-43ec-9730-9fc7eb3b0846", "indicator--70e49763-8894-4403-a5b8-7bd8223ce5fc", "indicator--6c02b17f-f550-4dd3-a235-ae4457b61f26", "indicator--23ea6af1-9479-45d2-8d47-4944f104671f", "indicator--5f7da0ab-32b6-4dfd-875e-3fcb1c5c5557", "indicator--a23fc500-c239-4e63-a0ad-cfbffdf2a203", "indicator--0ca27a20-c373-4550-bf0c-4fb23c631acc", "indicator--178764a1-0cd6-4d0d-ae8b-b7ac374d8b98", "indicator--9bc22840-1054-488c-ae08-e8675584fcd5", "indicator--ae0238ed-c127-4979-ae14-66de9bde1526", "indicator--d00ef87f-0fef-4956-813b-3d399f390c2e", "indicator--8e576a74-4c8e-4083-b234-6c59da10bb23", "indicator--47ba4965-2e5e-4650-90a6-073286e7da39", "indicator--dbba2597-1912-4659-9f69-f1e31e5d2242", "indicator--f6b24790-e9ae-4563-b349-dd14e10aa664", "indicator--73184276-69a2-4a03-be8e-e41d3cae1660", "indicator--985ca424-a4f8-4ad8-b998-b7ac52635fdf", "indicator--335c7b5e-efeb-40cc-894a-785c6220e65d", "indicator--c3e201a1-9014-4ffc-baab-4083139f4e7b", "indicator--c60654fb-d472-4cdc-b823-6b8584333f3f", "indicator--d24f69fa-ef08-4917-ae33-fcd403432c81", "indicator--1ad0911c-3218-4a6a-a800-47203f29b9ae", "indicator--ebb227c1-23da-41fa-81f1-ef719a71fe09", "indicator--17706f0e-b3d3-48d3-8bf4-35646bed19d6", "indicator--64477047-7765-47f3-84b1-4b9de2f3933e", "indicator--a09394bd-3e1e-47cb-9fb0-eef43e284076", "indicator--ddbbb152-4bb7-4151-9c61-d054ef749d33", "indicator--07241afb-b655-445d-9afd-16db6de4122c", "indicator--a7171f2e-0f0e-4c86-9c8b-5f26206e750a", "indicator--71de4124-2681-4b44-85f0-0ae63b43900f", "indicator--e2aff1ce-173f-467f-a1ff-5f21186ded80", "indicator--6cc713d7-5a27-4cf5-a4d5-8094f80f9963", "indicator--6174ce0a-51b8-4675-8855-90496e225b26", "indicator--d0641a1d-42b1-48a7-a285-0423feeebb4c", "indicator--1275c23a-00f2-4f9a-995e-9dcc6ce4bac8", "indicator--66fa0c84-e484-4e23-b922-b41ce8462bae", "indicator--a7dafa78-8c23-44ef-bb93-8f3d5228b49d", "indicator--645005bc-ac1e-4572-93b5-67de10800376", "indicator--2535ca6b-1048-4304-bcd1-200efd03dfab", "indicator--5b883723-a515-4248-9ade-09af2df2a36f", "indicator--404065e4-f18b-4aca-be74-c44500e35a4c", "indicator--f0d39fcd-220e-43c7-bca9-941dbe55e0c2", "indicator--ab4ea7cf-9388-48d3-a6e5-31063f209d8f", "indicator--750312fd-1bc2-4b5c-8ae4-dc2faa884a8b", "indicator--16cf2e0b-2b3d-454e-a875-008c18b12552", "indicator--644a4c36-f602-4443-9f8c-9e49c24fe57c", "indicator--7517c4e3-07c4-4c88-ae32-4174b480ce82", "indicator--31104739-6290-4be8-9564-36144e194d98", "indicator--471de689-1ced-4a25-b197-375201d0690e", "indicator--77c44658-9f2c-4324-8284-f63ba3988d67", "indicator--504cc505-0363-4a6c-a9cc-153c22e0d9ae", "indicator--6ec3d6c3-66f7-443b-a3e0-9e110a19e441", "indicator--5686ee77-1b9d-47c5-85d9-fd1bafffd8e1", "indicator--50fff339-9218-48d7-b307-7de3c054be00", "indicator--2ebf9018-8e6d-4652-844e-eb2b5d6b333f", "indicator--0fe907e2-9baa-4f10-93b2-3f09979e51d9", "indicator--02c5605c-e5ab-45c5-a45f-73ac01cefd47", "indicator--26ceb172-499f-4132-ba93-bfccfab3d5c7", "indicator--f2486c64-a270-406b-b5d3-0103469871bf", "indicator--a1285214-13b9-4faa-8023-8c5f45dd4632", "indicator--61849ff0-d731-4482-a1bc-eeedb4b72022", "indicator--d577c2a9-9b63-4195-bb58-d60f35254ddb", "indicator--a844ce64-7723-448f-aeb0-44bba830260a", "indicator--df5773c1-5782-4616-aeca-ec3aef75c587", "indicator--0a1f8a24-3877-432e-88cf-62df0d6b43e6", "indicator--3439fe46-1834-4788-a45d-4f5d75cc44d0", "indicator--52d5d98c-8122-4b2f-abd9-5569961dcf4d", "indicator--2e4c9c6c-a9f6-489a-b6b7-fba8cff48e4c", "indicator--6ceb0998-9bd3-4893-ace8-85b1bb5bfc3b", "indicator--cbe17639-829f-487f-8b86-8a87f1d4c3c2", "indicator--e9545a37-616f-48c5-bd06-d22a76652b64", "indicator--d24e8bcc-0680-4bbb-909d-be7daf7e468b", "indicator--9b51c64e-3cca-4328-93b5-8eedc5674b15", "indicator--c6747e4b-bdbc-4c08-93fd-013208b84522", "indicator--9234fa94-f1e1-441b-9411-910d6f91da5d", "indicator--d8b67f49-ef7b-4c88-8880-494f9ae44634", "indicator--47a9a72f-7c95-499f-af42-682ef9ffb445", "indicator--89a4f0db-50f6-402c-b4d9-192cbc7b5eea", "indicator--21b5919a-73b8-48a9-a704-475b99289e15", "indicator--ee008ee3-ba81-4de4-bb0c-cfd626096855", "indicator--4bbf108f-7f89-40ca-9038-2ed656437b64", "indicator--f22d6472-a98f-4fd4-b4c0-1dbf1a64b2d0", "indicator--245b71ba-5486-489b-be3d-3bef1506955f", "indicator--fe41d0ab-1400-48f2-aa04-dcc45248ab0b", "indicator--ce92ef37-daad-4f5a-881a-1212ade079a4", "indicator--70cf6ee1-bd8f-47ac-9d70-f8418dec85ef", "indicator--68561b0e-921e-4ac9-b3f6-b2ab1bcea30b", "indicator--38ab8527-cadd-49c0-bd0d-27ab6097866e", "indicator--ecaaeb9d-7635-49cd-926c-df72d2a1c9a7", "indicator--67378a45-ce4d-4f8f-8780-de7e3e88a8ad", "indicator--d67a26f7-43ba-43bc-9af2-b43287c574e5", "indicator--30605c89-b78d-413b-8123-7de0db08ba3d", "indicator--0723305d-60cc-41b1-8000-a4e5dd85b520", "indicator--0636f501-6c46-4913-b914-0289f7a705c6", "indicator--7c7dd0c6-22b8-4d70-aff0-acb8abd1b293", "indicator--6f3642c1-634c-47fb-b1d7-d050397b62a0", "indicator--e2f3236a-781a-4d74-b345-46e57e82936d", "indicator--20187aee-9765-4218-acde-f23db31dad95", "indicator--bec2c3ea-4ffd-4682-8b98-28228ec4cbd4", "indicator--05331cad-1b27-4922-90f5-a689c5b17614", "indicator--2cbc63ca-7f6c-4e7b-970e-409e16def28f", "indicator--0ba68edd-5d50-451e-8ce9-fd9987b0022d", "indicator--0cc0b685-b9d1-43e8-8a47-7164678af094", "indicator--82d4e613-4be9-4282-b4ae-0db12aa64760", "indicator--93a5daa5-4745-447d-868e-e6d8f3378273", "indicator--56f51ecc-af0c-4677-a51d-f2186308ae61", "indicator--b3ebe307-70a2-4c4c-b35b-1719115b6d24", "indicator--c6af2a3d-047f-4542-995c-2d46fa7869e1", "indicator--7b64a14a-56dd-4100-aeb1-02906c3a8b32", "indicator--bc2fbe8b-47da-408e-b916-9676d5b2f53f", "indicator--74439513-408a-4f04-a5ee-908e772fcce5", "indicator--b6533452-c67b-4edc-addd-749f50d03830", "indicator--f64bddeb-919e-422d-bc06-540ff62f289c", "indicator--b4baf8d3-b105-4fba-b1dd-443b3d216af4", "indicator--0817ea2b-1db7-4b9b-ab4d-55037cf73241", "indicator--b3aecc68-93ab-4cc3-9d13-a7e599b11322", "indicator--2a7ca631-c297-4620-be7b-8dd53c2c6a2f", "indicator--ff7f769c-2eb6-4d24-9081-0c30cab5d3b0", "indicator--80d4377f-3a12-470f-bbb9-559a23937568", "indicator--3fac143f-18ab-4fca-a59e-b91f6f4fea21", "indicator--9fbe56e9-46de-4180-b303-5db72363de94", "indicator--ab188254-dc80-450b-9147-b1d8308ca874", "indicator--3450f6f4-d85a-4c77-bcf0-4113ce46e239", "indicator--4c458bd0-4cee-4834-9bb7-3e9d95db89dd", "indicator--06b97e43-af6b-4f0d-ab34-c1c1ef455781", "indicator--afdd6ab8-d480-44b5-a244-c9d9bc9934b4", "indicator--7e3f617b-e0db-4d33-b2c8-b602ee6944b2", "indicator--35f4e7c5-4d1c-4369-9a39-231019b7c87f", "indicator--7b4e1837-2172-49a6-ab76-0d8c1da8841b", "indicator--793dd867-a2ff-4cf3-8e59-b402d7a13b88", "indicator--8f41098a-ed67-424e-aa12-3ce1f9aebb61", "indicator--8d32c846-9658-44d5-861c-dd0c5d602617", "indicator--914b60b7-5d3b-4274-87b7-4e3dc6e98757", "indicator--2073f0a3-8792-4236-a5db-cfa0b1ab0e51", "indicator--e5cd520d-9780-47df-9cf3-cf89296bb7bb", "indicator--8b2b7482-1dcf-4116-a2d8-98e3fb3e176e", "indicator--7874b377-c601-4118-9215-f6b76552a82f", "indicator--f1806f88-4bbd-41a5-9bc6-87b0534f91ab", "indicator--a1dd2362-5b0d-4a34-94a3-6c300e499b53", "indicator--b3661453-258c-4ef5-9ff7-184e2a12ffb6", "indicator--f294cb21-a0b7-4d1b-9e3a-5758c683fb38", "indicator--42b2ced6-3a47-4ec2-b326-929a98ccafc9", "indicator--0c6e9e79-a1c9-406d-8dcf-9a507525ecf5", "indicator--5ac11526-3e3c-4b9e-ac33-d1b6a245e99a", "indicator--32855dd1-c56c-424c-9cdf-3aa3b06c7244", "indicator--9a235ea1-f204-4a0a-8488-c659f8360225", "indicator--a5d73305-60db-4d5b-94d0-1c078170df6d", "indicator--be08fe5c-6994-4756-ab3d-866337031be1", "indicator--cff977e5-32c3-4ce6-b7f3-1c275087c073", "indicator--2847c264-cf80-4a33-b9ce-65c24a9b3222", "indicator--daed682a-04e4-4731-a8ab-efa371beb754", "indicator--2921fede-9ca5-4f8d-8052-12126d1d8077", "indicator--35e4ec73-549a-40cc-887e-0ef99b792626", "indicator--5268e08f-780e-4487-ac19-04fb011daadb", "indicator--d2ce7016-c62e-4a0d-bb1b-ad20b06636e4", "indicator--4a55c846-7206-421d-b750-630d99486b2c", "indicator--ce79d878-8177-4010-a0fd-8848468f0f3c", "indicator--421215db-075b-44d1-b7b3-efb765af9274", "indicator--74c5114c-4bd7-4472-9c8a-7ecb349729c5", "indicator--86b117ec-8a34-44d4-b2f6-3dd2dfb886a8", "indicator--89006b5d-79de-4144-981e-43257f16a2e9", "indicator--bf3fdcde-2f84-4dca-8233-37f7ef747306", "indicator--ba7a518d-0845-4b45-bda3-1dff29d5e8ff", "indicator--32b28558-e2bc-4376-86c1-9e4a7ff2822b", "indicator--619ae033-0436-421c-b1dd-38921b40cbb5", "indicator--2da29976-eacc-4153-b913-4f180cf2e6e1", "indicator--60fd0d42-ed80-4a0c-9719-642fbbddbe02", "indicator--f8de6f4a-6de2-42ad-9384-1927b8fe88c8", "indicator--b32f5f0a-0649-4b41-b75f-57c4a87ef206", "indicator--581880ea-6707-4169-8b8b-3e9a3d74c75a", "indicator--b7a381d0-b86b-436e-93f7-bdcea37485dc", "indicator--e0b82003-76de-4dce-9f23-d08f1f6d8c87", "indicator--25d6e1d3-f9c6-4c7e-a0b9-077593d14d80", "indicator--0c10dc49-ab55-4f97-bb24-037ee717e64d", "indicator--f4e0bdae-a45f-47ab-b8a1-3bfbd51d5ce8", "indicator--22a01848-ffda-4e30-b7e1-2b5da7d785bb", "indicator--62d8875a-99d4-47b7-af2f-f1ba133ccdd0", "indicator--00a22890-5dd9-48a6-947b-6d76a096a8f3", "indicator--f1c10c83-134e-48cf-94d9-46da55313c00", "indicator--50e5ec19-80a6-483e-8a21-1cfbb63f7c83", "indicator--e6d0b015-6d8d-4407-9151-b72301ada982", "indicator--4f3c425c-9070-4aea-96a9-7055cf634ec0", "indicator--55feeb29-9aae-4c45-be96-74a206e59f48", "indicator--694513ba-8505-4f9c-a40c-41b41b11bcdf", "indicator--4aae4dbe-8f62-4f5e-9826-79bb44503ab1", "indicator--ac27b892-4101-47f0-96f5-f139a2d1785b", "indicator--2047fe2a-7cdd-4469-b88a-daa11af002cf", "indicator--662f3398-7f8f-49f9-a850-559eec341e1a", "indicator--a3563dbc-3eb5-4669-a353-83d311dce208", "indicator--39d43d74-3e23-45d5-9347-615a7ae69f0e", "indicator--660b27ee-748e-48c6-a96c-a2599590d7d9", "indicator--fd81e989-eac5-455f-96ce-f2d5f4f7b29f", "indicator--47970b3e-5863-42f8-a42f-d7e9a2b89c2b", "indicator--f918df11-9a3d-4ec9-8456-339814e8cde1", "indicator--b9dd7dc2-0cf5-4b5c-bd1e-550b561ad9e1", "indicator--5eff680c-1460-49ab-91f4-2eb6fe865bd8", "indicator--33e56f3a-9924-41d2-aa54-cf0e23f86362", "indicator--b3230241-8bc2-4a80-8a38-3db0c77e6198", "indicator--92627e57-8bc0-4275-bf7a-9258766a2392", "indicator--0201681b-da80-47b6-aaa6-2901c1fc6cfa", "indicator--92d7b58a-6e04-4992-8eea-05afc7f8ee88", "indicator--bb0d604f-59d0-4fdf-a834-7f4e7dcdb4fe", "indicator--3f6aff2a-0ed9-4716-9a07-deb9664245d8", "indicator--98004933-de65-4529-b9c9-64e300e5ec11", "indicator--91592bc2-2e76-413b-a4ca-3b58463ee5f5", "indicator--0f601661-32bc-416a-bd62-4a5b0558153e", "indicator--932096f4-e825-4525-82a5-156cfa0c76df", "indicator--8c516c44-b96c-49a6-aa69-e2ebc6d705d0", "indicator--00c3d16b-9ccf-44b0-a5d7-aa63562c4a85", "indicator--30f687c9-b25a-41a4-ac52-e1632b439e66", "indicator--cef0d961-5ed5-44fb-af2e-593b5b8f5ad4", "indicator--988a00c7-8278-4f69-847e-f9fd4c4eb4c3", "indicator--67873d7f-0c80-4788-ae6a-946d9ffec6a9", "indicator--ed551679-b355-4c53-b036-7ead01a336e9", "indicator--0d722f10-1ed2-4567-975a-b04f47b0bc3c", "indicator--b4045930-2dff-41b9-bb49-6fa44bd39956", "indicator--bd837846-f62c-48eb-a667-b9e94730159e", "indicator--a9629faa-59e5-4788-9169-06e1b9be3664", "indicator--c741086c-aeb0-423a-9d5e-0b17e26edeaa", "indicator--1affaa77-81ac-45a4-aeee-90477e0099a6", "indicator--e809e2ab-b87f-46b3-8866-588234ef442e", "indicator--d1a9b480-6ab8-4f57-826e-bbf3149d0ebb", "indicator--a2b6120f-1e19-4a0e-99e7-a1cc2c04e06a", "indicator--b7a3faf1-57e2-4407-a16c-17c273835662", "indicator--1dbcc52a-6065-47cb-b3c4-fbc545515cf5", "indicator--f8ecff90-76e8-478f-ad8a-8fd98e3124bb", "indicator--8bc91264-cadd-4691-9388-720d6497dfc4", "indicator--c3538879-a482-4c4e-9558-ae4a792ba519", "indicator--ef22a6ad-ba6e-4aa2-bc92-b8bdbf8a486a", "indicator--c88c0c76-50b1-4e39-b8b1-e5d090ba8b02", "indicator--498541f4-8378-497c-abf5-d984a3700b43", "indicator--376408cd-194a-450a-b2ac-2346c3fd2c8f", "indicator--4dee34d2-bf11-4f5d-9ef4-896332c464ce", "indicator--2dd0c7b7-30e7-44c2-b9b3-82b5c6e96908", "indicator--b3e8ce1d-c259-413c-b3d3-61b8fa00b0cf", "indicator--8edf2aa4-0a26-407a-89b1-fdcd8db3f3a9", "indicator--c8884443-1045-43f1-8838-2a3623ac86eb", "indicator--71444b57-7c47-4a1f-8389-39f21934bc72", "indicator--81ecc28d-3993-4f21-8cf3-b1c737fd39ea", "indicator--62fb8abd-438f-42bd-9d1a-e8771d9aa89d", "indicator--7daf59d5-910b-471a-99c4-1b80e30b178a", "indicator--0719fd16-3fb9-4a07-9dcb-7823255e8039", "indicator--cbcc798b-e18b-4d08-aed6-579987208079", "indicator--1cecc42c-7787-4578-9655-f576b07ef929", "indicator--4546f2ef-1805-4449-b003-e2cadadab39a", "indicator--7c83a069-6de0-4e17-9e64-cf37db7022d4", "indicator--7bff5fb9-8dd6-4e03-bd88-ff88e866e9d6", "indicator--13373555-33a2-4c6e-be3f-8e2b526f0c62", "indicator--4d81abef-756d-488a-adf7-f561c5d6c777", "indicator--a96b384f-fdda-458a-8b96-8520a699b0fd", "indicator--d717809d-17c1-4708-aedf-853dd7b17c23", "indicator--428651e4-ca96-4b6b-bca4-c0e1d1ba1374", "indicator--692d4cb4-620b-403b-a6b2-0557fc83c47c", "indicator--829103cf-b9d1-4c5b-9669-481041f16fbf", "indicator--9c065f3f-154a-4367-8082-55d6dc65dfc8", "indicator--41ed3796-89c9-4d90-8233-fc4341fee255", "indicator--3d6167d3-eb41-4285-a715-d6ab8e7e9b98", "indicator--3000db90-b878-4488-8d9c-84310075d80d", "indicator--bfffa7cf-e320-4028-b8a6-9334ceac3b73", "indicator--b6175cac-1648-4d37-8e85-65d84ec219f9", "indicator--d11bca54-7392-4222-89c4-0819fd2f288a", "indicator--3a8db3d1-3eef-4553-9636-8dfc49a40e7f", "indicator--e43e5592-b8a8-49eb-bee8-c4f136ab1a4e", "indicator--cc93e2bb-232c-41d8-a6c5-81aeae78b4fa", "indicator--60089624-544b-48be-8fba-d3dc79c80b7b", "indicator--cb3f3644-d1da-49de-afee-2557f69d81d2", "indicator--02bb9ad8-9858-48b2-a225-26cd298df51b", "indicator--3d55ff0d-075f-45a4-bb0d-607cf0dc6d5f", "indicator--da6500ff-8e58-40e4-848f-2b03077e5a5e", "indicator--25964940-945e-4d54-b094-606cde09a2e0", "indicator--aad6375b-7735-44ee-bfb9-8e975b588c19", "indicator--ec77ce77-709b-4c96-b756-83c7026d5ac0", "indicator--7eda21f4-a11d-4259-b03a-4466d104c67a", "indicator--1169f8fe-fe9c-4e19-8e80-3feb9c40701d", "indicator--96fb3ed0-e3d4-41ff-bef9-c889f1d7fc37", "indicator--515e2cd5-f77d-4c63-a20f-b1c35ec98efb", "indicator--dee58f6d-fba9-41c2-b857-2b36e55d7065", "indicator--cd09f9f2-d62e-4075-84cb-9729624388a4", "indicator--1b38a639-5b48-474d-934e-e670f2a438b5", "indicator--d509ee2c-bbdb-47a2-98a5-effc006f13f5", "indicator--67794f0e-1a12-4387-9e8f-6405f512d66c", "indicator--9ccaaf8e-413b-46f6-90de-cedaf8c08265", "indicator--84edda3a-5e71-4174-ae27-e6625515964d", "indicator--b90204c2-fb25-41ed-bcdf-e48881325af9", "indicator--31ca1b35-c066-42dc-ac55-912570d68a01", "indicator--2fdf4fbb-b3de-4721-9f63-a6ee22884d28", "indicator--23b6414c-f52f-4bc1-96b3-db76780aa442", "indicator--f71dc97a-7a20-454c-9969-8b065f5b0d43", "indicator--aa0fb78e-f1be-47f6-ad9f-623c1672e74c", "indicator--cb4e7e68-393a-414a-a35c-e2bdd3eed0e0", "indicator--7d7589f8-91ac-42e5-ba5d-ebbad487f0d7", "indicator--374ac8f9-a8ee-49fb-b4f7-35778bd74728", "indicator--1f00a5cf-378f-4f61-9174-7499dfaf503f", "indicator--2b1d4867-1333-40c0-997d-95e77acfc550", "indicator--0bdc4396-a049-4a4d-936a-94f0ee32565b", "indicator--f730ae7f-1f72-4626-a99b-b49fef94eecf", "indicator--69d77eb9-b656-4302-afe4-62ecb3f2bad6", "indicator--fb1d2e4a-bcd3-4f8c-972e-db785f84ea2c", "indicator--02da55d7-9902-447d-a689-cd434a3cafcd", "indicator--7014b6d7-3dca-484b-96f2-664ecb17e740", "indicator--f11210af-6cb5-4d7c-b154-62517be76a88", "indicator--dc53ec85-9821-436a-959d-15023103569f", "indicator--924f3370-2aa1-4a3c-b74c-1c24671e9e4f", "indicator--3d1a302a-356f-4d56-bac6-73fca2f933e6", "indicator--11ad0870-7894-46e4-bc19-6bbcd29803bd", "indicator--a65f852b-4e1a-438f-bf25-99bfd8d851c5", "indicator--51bf81ff-42e3-4ac6-9cf8-36a4e24e7a9f", "indicator--27c1fe2d-2184-4e66-bda8-fd57db347c9f", "indicator--911c8824-de6f-4fba-8d14-ad51949d7e87", "indicator--2789f831-b0cd-4e51-bb3c-9be05210217a", "indicator--2ca99678-e4c1-4023-858a-b4bd4f40b259", "indicator--8d1904d2-749f-4aeb-8fd1-e3ea5f0ed845", "indicator--f32b6467-65df-41a7-ba50-84d2e15967a2", "indicator--76a13f60-292f-44fd-9cc1-275b394f1ad9", "indicator--a9e40d4c-7e72-4584-aa4d-c730de8255b8", "indicator--1820c454-b6c6-41da-9ef2-ba747cd0a177", "indicator--df4dba1c-9c0a-4522-a1c2-cd8f37fd0a4f", "indicator--f4826d11-ec78-4d66-9772-74ab37cd7e20", "indicator--45acb781-f4ad-48b8-9f4e-e5671792c554", "indicator--c3bbd361-d769-4e39-ba47-780aef4191bb", "indicator--b7c844f6-5874-4daa-8a10-bf2988e857b8", "indicator--f6dfeb77-6415-480f-ac08-c349e73af173", "indicator--424fc716-4b43-4d50-90eb-a5e1b27f316b", "indicator--ae98264c-d9a1-4a93-abe5-d4b7371f5f68", "indicator--ed533683-f1d5-4c4b-a355-403c711e602e", "indicator--5fa46f07-3f62-4189-be8d-4251e3e9fec9", "indicator--9e3a3d75-5231-4b17-8b04-a2e236983943", "indicator--c8a0b138-6f49-4b47-806d-405a56a041a8", "indicator--0d295756-f129-494e-9d51-f44885e8c842", "indicator--01c00e1e-f629-48ec-ad4b-7738393f20a8", "indicator--bceb9bdd-0106-44dd-ac98-4ee872ff573f", "indicator--d6eef098-d08d-49c0-9ecb-cdda0fa63878", "indicator--4607bbf3-dc54-410d-be13-9bd852b668f1", "indicator--9fac6c04-6d4f-4799-be80-19b53590c66f", "indicator--ccecfdb6-0424-469d-bc26-e6a139be7943", "indicator--6aa68044-4d2b-440d-87b0-a91ff7e6c085", "indicator--a392cda7-051d-4848-8605-de23dd5ea806", "indicator--81967e86-fdf0-44cd-a9e5-816c0b06b8a6", "indicator--8b5c8b5b-e182-4157-aad5-6b09c14b0dfd", "indicator--654a6609-00fa-4924-86bc-147b0e56437a", "indicator--cd6563d1-a15f-474e-8b0e-42800c766bd6", "indicator--a3b4d377-00fe-4e0a-a77a-4fedafbcdc26", "indicator--2a70fe3b-9bf2-489a-8592-b5df06efc533", "indicator--6d7894a4-56a8-4ee5-b130-3551339ada62", "indicator--47cafc41-e56d-4ea7-8bbe-68cff803843b", "indicator--e1dfa85d-000f-484f-9b6f-40e94cc8ab20", "indicator--8b295cc0-1ebd-4913-a1aa-b591a002f54e", "indicator--7cacded1-3637-45d9-86fa-32a8ab03af2a", "indicator--b784b1e1-0c1d-4f93-a50d-e0259c6dfbac", "indicator--6ca8e3f3-9c1a-4245-a355-cb54e90802ed", "indicator--c1f21d7a-ebc9-464c-9556-35569afac929", "indicator--924f39e7-3681-46a5-b3ba-dceca713e0e3", "indicator--ce414d90-806a-44e9-973b-49851730640f", "indicator--49e08085-1684-49f7-b7ad-57d9b5ebbc95", "indicator--8b88d785-3b96-48e8-90b4-a3d20535e068", "indicator--2b049d62-45e9-40ed-8860-7510cc3b023f", "indicator--c68cc05f-fc75-4583-89f6-883f67711dd5", "indicator--3fdb91d3-fb7d-4b6f-a3cb-c359ce258925", "indicator--fc79d28a-af7c-4162-b32d-82f7ac00e1d7", "indicator--21423e11-3560-4f24-8999-49f3be89ecf8", "indicator--3108fb05-7a3f-45a9-9b2c-a377d5be369d", "indicator--d145ee38-9995-4af6-8a54-d3b58120f282", "indicator--60bfc391-7f1f-4d62-9d1f-36ff87f45b9e", "indicator--3a5bd743-be2d-4f48-97ce-8ecd52f2e051", "indicator--cd1a8f9e-42bf-43cc-8c75-e745d15ad08b", "indicator--b0865223-a132-43ee-a9d1-6bcae95e6627", "indicator--0db8ad9a-251c-4938-9e42-ab6d4422f2d2", "indicator--164e3aa5-ad98-4891-ad96-6ff5805d87d7", "indicator--4ef224fb-3110-4f10-87f0-ce974d023ad3", "indicator--9fac3dd4-a93d-4978-abf7-dc815c48a774", "indicator--40ccaf15-d7e6-4635-95e0-808b9b45fa36", "indicator--e52d141e-d019-42da-a353-ca53f553fc42", "indicator--1a9a9375-ecb2-45cb-8104-cbaad941d835", "indicator--76427f82-b7ea-41a2-8a2e-1f7ac80e7945", "indicator--bf68aaa0-9248-45f4-91ec-2f541df26668", "indicator--bbca3787-ee1b-41da-997c-f0cc5c495285", "indicator--1b5ccde7-dd8c-4675-bdf7-76404f0e5189", "indicator--927ca40d-78ca-4e03-8d2c-a5f3721bb77f", "indicator--422c427e-4ed1-457e-aff6-11f1e2d58a84", "indicator--07415d33-2972-419f-97de-7855a93f6ebf", "indicator--314fa0d0-ac6a-446e-8bf5-ca4702b2573f", "indicator--c18a3182-cb35-42a6-ab7b-da4e1dc1532c", "indicator--0526d110-e2e8-4191-8912-7fe5ac9b783c", "indicator--df80821d-a01d-4af7-bbe9-8a43e5afd960", "indicator--512983e3-5343-48c6-baba-8294e7482dd9", "indicator--586b352d-0a93-48b0-9078-2cee29f5fc82", "indicator--337794c2-ce93-45dd-b92f-3bb12b0248f3", "indicator--ee123cf5-02b5-4979-a7cb-f97852fdfaa4", "indicator--baf355b6-2ce8-4177-be63-a31182f4a956", "indicator--e95d0750-ba79-48cb-a3ef-56ab4db5dd6c", "indicator--ba5c227c-5104-46c3-8687-68e3e8db779f", "indicator--3f67548a-dc6d-4b6b-ba5e-52547ad44dde", "indicator--cb2b59dc-d83e-4fa2-b94f-b30505f14081", "indicator--3ac29a7f-ca57-44aa-a924-c2acbb2e8fa7", "indicator--f74268fd-fefd-4a13-8853-aff47ec47e1f", "indicator--6d2a3368-75bd-409c-8f50-2d30710e3e2b", "indicator--b3e87ce0-4f21-4815-b0a9-1c06588fe536", "indicator--82de6cc1-d34d-4ed3-b3e9-bde0cd4c122c", "indicator--68f2d5a5-6632-4922-a4a3-9ee44696b80f", "indicator--193b5be1-7da9-47d0-b280-9ada2f2c833c", "indicator--4eaa1056-2764-4b49-aa79-f68ec0451115", "indicator--9ff67dec-3eb1-4056-a71b-8b5fbc14f75e", "indicator--2ffd57e4-f472-4fd8-91bf-a0452cf0b4e6", "indicator--57658d8d-7a24-4a79-bd10-4d940175fe4b", "indicator--59a7c094-4328-4176-a2d8-c4289e4432b1", "indicator--94d32da8-8eca-41b9-a3bb-162f1a5bc9c8", "indicator--faedc300-3dc9-4678-a78f-23072706f597", "indicator--ee24d056-2afd-4a18-af3e-7bffca715c4b", "indicator--93b4a9c5-a131-4c46-915b-5d53a0cfe8e5", "indicator--e6569c58-88a0-493d-9782-36cceb7ff9d0", "indicator--2c6d11f1-dc1a-42b9-be1e-a29f0bf7451a", "indicator--c1a0da69-c694-43fc-8a6e-816e88578f57", "indicator--678aeea6-6a26-480e-8e59-fa6c6a4dd507", "indicator--a5fbb1d8-32c8-4482-b5a2-875bf2ca5227", "indicator--2c5ba841-30fa-4e38-963a-1180281a0faa", "indicator--7c388b81-64bf-4aa2-857f-4e49289b07b0", "indicator--795ac4e3-3172-4214-af5e-82b2057e2bdc", "indicator--a6b7fa9b-7760-4281-b974-582bbd05f9e7", "indicator--23b87814-bc16-4ec4-9c9a-c3d452b363e0", "indicator--233be00d-adda-46e3-be3f-23532a3a623e", "indicator--66d51a66-9744-4e14-aa21-71202cb02053", "indicator--dc01e0a1-f159-4bcd-b8f3-5f976cfebc14", "indicator--c14f6c55-68ec-4085-b1d8-921c11365791", "indicator--5580503f-987e-4475-96e7-2793ea641286", "indicator--55578979-2f1d-4568-a380-03703c701720", "indicator--daef8f22-da15-4e0f-aa54-29de6b2cae2d", "indicator--b02b641a-fe64-44c3-8474-48fb3948660e", "indicator--db32fbe3-ce43-4d2d-9281-2611532f7da3", "indicator--8a35e9a7-a066-41c9-9c7a-21b65181e47f", "indicator--cee07cd6-aef7-4828-93c1-4811fc6fbe41", "indicator--b517e987-7d8e-4477-b532-464e1e170131", "indicator--91a1f647-5225-4fd3-8f17-0f518f807c05", "indicator--1ba2f842-474a-4f7c-9018-7318461539f1", "indicator--5d28ffbb-fab9-4f30-adfe-c7a34ad65fbf", "indicator--6401fcae-ce45-436d-8741-ce14df83195d", "indicator--b0eeafd5-67b7-4261-8ad5-a5fb9efd916c", "indicator--ab2d1e86-59af-4c9b-8a36-65de4ecba521", "indicator--dadf5195-6be8-45da-89d0-3e630f5ae501", "indicator--b7315bc4-fbe2-46ef-9e5f-07f2cc3bb0df", "indicator--b6e0293e-f7c8-47b1-b257-825b38862ad5", "indicator--fe946049-baab-4558-bfaa-3fbc8b67742a", "indicator--a390248d-b954-4120-82a9-21f9307e9c07", "indicator--1f285d73-17a0-4d97-95ab-2be9643298d8", "indicator--eb6ee45c-fa5a-45bd-9c63-06580fc0966b", "indicator--1608cd27-fd34-4684-93f0-189e4b6319f4", "indicator--b766c7f8-ebf8-4539-b23b-4e45b77d1b38", "indicator--70eb5de1-e60a-47b4-9b74-cd95dce4d799", "indicator--db32bc52-5add-40ed-bda3-bfe63077e4a8", "indicator--1563ae9b-048d-49dd-bd04-79cd0693982e", "indicator--7f883a06-ec0e-4513-bdb0-592f645f0684", "indicator--b29295e7-c0cf-4d54-beb1-bd91f2494957", "indicator--1b1fa07a-274c-4b65-84db-e81dfa4dc17a", "indicator--3bc7a445-0fd9-4a85-845d-1a630fceee28", "indicator--df15eeb8-5e2c-4ea1-a716-1d2e1b2b13a1", "indicator--cb6dbdfd-8f9a-4ec5-93ff-3b16a0e42057", "indicator--3a5e6851-f8e9-475c-925b-9f05b9820e26", "indicator--1a0be993-8814-443b-bb38-38a24714a80f", "indicator--16a8f477-5b2a-4549-bf67-b32964752c49", "indicator--9c8dc31a-d5f9-410b-ad20-a666c771fdf6", "indicator--2b52e8b8-a3f7-450c-8c07-f725b121ad59", "indicator--ef0956db-d7b2-427b-a070-d21c2d60a890", "indicator--2dff1cd1-e7a6-42c3-85f5-87ff13ce2903", "indicator--9bcafbee-3c22-439c-a0c4-c18e1d2b7c28", "indicator--1dfa770e-9c1e-4d83-b622-bb5a82a8919f", "indicator--51c72f64-f110-4975-a71f-8896f46a154c", "indicator--fa1e9881-a097-4848-a4c7-6064b8fc036c", "indicator--3f9a5738-fadb-41db-9ce8-e5e426969e93", "indicator--f0076fe1-2527-4ac9-a62c-0b09ad05ccf7", "indicator--7c98e7df-c970-4f7c-9aaa-92623ad72a8d", "indicator--b0400d53-b8ed-4a12-b10c-427ccebbe076", "indicator--95b54f42-72e9-4462-9b9f-ac5f4f5d1628", "indicator--1bc4e94e-5da7-4d3a-b8f8-9786f906d28e", "indicator--e672678e-e986-4472-b50c-96cdfef7da24", "indicator--82776f36-8b7d-4e63-83ea-11a5a517b6c1", "indicator--86060329-a048-4f60-950f-2a5c3d4c3e66", "indicator--183a9b86-7601-4f97-88e6-66087e4027b4", "indicator--629c5ae2-5da4-439d-9483-72ff8f74d9b8", "indicator--5038d4ff-0829-4897-8b35-e21f4e0c037d", "indicator--aae000c3-986e-4eb9-8b82-972de7adeb4b", "indicator--42d5ed27-63e7-4bb3-8cae-a6b9f8cf4f86", "indicator--8d4cc155-8920-4960-85b5-244e77145216", "indicator--af5a3b62-2627-4846-9179-23e64718a48b", "indicator--3c09bba1-fb16-4d0f-b81f-ac8ff0cd729d", "indicator--e4ad2ac2-a90e-486f-a388-f0f39d7943f4", "indicator--7fe2a6a2-e4d5-443f-922b-903088ef36d8", "indicator--6df1568a-5a97-40da-ba4b-b2ec497ee5ac", "indicator--b63b306c-0b4d-44ee-b44d-ea6110b4f85f", "indicator--efe782d4-e717-4c80-870a-6a71ddcc4aa6", "indicator--4590147f-fd2a-423d-91c8-46f255d19d63", "indicator--277891c2-ad17-4462-ba13-4ba8a3ce2b78", "indicator--c3366789-fa0c-49c5-bdef-7210caf24c0e", "indicator--0104fac2-e0d5-4ba6-bc42-7970564bd1b2", "indicator--5da3c2e2-7915-44a7-9de5-2e1029597c06", "indicator--012f9ff7-fd0d-4e09-94e0-2ba0d219039f", "indicator--7c821925-c677-4a44-830a-a25acb2463de", "indicator--1e77a59b-fbcf-4691-9fa7-ae4e932f3b62", "indicator--1ed61c1c-3f2b-4b34-afb7-d45a61c22895", "indicator--ca1bdd1d-c6a8-444a-9f56-c2cbd79fbde1", "indicator--0ccf8d28-84f1-45dd-84e7-aa735ed14ef4", "indicator--94fcd96d-2d27-47d7-b9d0-8a6257c5bfbf", "indicator--f59f33e3-64d7-43a6-8df6-2b5786e48ccb", "indicator--9ccc7b43-e8b6-4980-b90f-713f7fee3337", "indicator--10c52638-7b24-4590-9064-d66b19537732", "indicator--48f72683-7b44-41eb-ace4-d74eab1d38c5", "indicator--041df810-6e07-465f-bfd3-f665a2fb0780", "indicator--55e10416-2868-4424-b896-66c440ed3950", "indicator--7ef0fcb6-bf81-4f04-91f4-9adaaffba7f7", "indicator--73e20687-09bf-4adf-85ae-a2917652c232", "indicator--57085a02-d71b-4a18-a230-c90e0bae79b9", "indicator--db31bdea-e49f-46b2-b824-420bbb01e0a1", "indicator--a1374bd9-61b8-41a8-ad6c-9795aefec460", "indicator--5db3b27f-7cbb-469b-9a66-40857c0002c9", "indicator--477e2190-f816-4cbe-9aec-f5e24793fe77", "indicator--3539bed8-ef91-4920-a50a-6c995b2b61ad", "indicator--9fd94735-421e-4d27-a975-cab55c05af39", "indicator--44f7049d-869f-497a-9f2e-9e54817c48be", "indicator--e266b073-45fa-46ac-838e-a4b9cd9d9312", "indicator--2f9ab897-f89a-4b26-90b6-5b0b5a274ab0", "indicator--c710300e-a478-4981-9492-96a678bbd6ed", "indicator--d61298e8-80fe-4688-bc90-902450f40e8c", "indicator--13335c98-f8a3-4cd6-8040-1d79343cc718", "indicator--859ec0c3-0640-40d2-9a1a-c4dde183b528", "indicator--f1e747d7-a988-4ca6-8302-089d5bd1441d", "indicator--94d07c96-a0bb-4228-8ce1-276679f31b4c", "indicator--cda1eae1-41b5-46c4-9238-400ec7ac622f", "indicator--294a7e09-b085-4b26-926f-76ee534214f8", "indicator--a21a07d7-cb4f-485f-a444-b00ad311f460", "indicator--2644be21-f8e6-4e25-a56d-69af4c5cc0c9", "indicator--20b2ba15-6860-4b62-ae0d-9e798809b7c6", "indicator--e299fa91-c922-4d72-85cf-0f7fdb59f18c", "indicator--f904afbb-3efc-4c55-8007-6bb286409821", "indicator--af8034dc-1224-440a-83a9-449d3e2cbb43", "indicator--11c24fee-83dd-4031-8485-1668658f87dd", "indicator--92205957-573d-485d-94ae-3c75e6b13f2f", "indicator--d956854b-ba31-4772-a24c-a0e8b1f4781a", "indicator--b27f689b-60a4-4d47-87cd-fc9b18e38369", "indicator--91d91ed1-f13b-4b95-8de5-0d03fc55a925", "indicator--8271db8e-e13b-43fc-9201-472eee6824ac", "indicator--82dcdac9-aadd-4364-af97-fc86c12ec9b6", "indicator--26977f82-7d55-492e-a63b-fa8efa44c37a", "indicator--b6143834-d28b-4409-8c4e-6ca4c1086f18", "indicator--47545f33-a1a5-4b31-8e31-b0a703d8ca29", "indicator--f9f9880d-f20d-4959-92ae-1f6fec326754", "indicator--8941d482-d5be-448a-8f0f-142a04378ac5", "indicator--33c6db73-f2c9-4027-9e7f-a94291775e51", "indicator--808422db-57e9-4a9f-ac64-2b419edc7cb7", "indicator--afd18cc7-089c-42ca-a33e-88497c17d573", "indicator--1d8e7538-13fd-49de-b9b8-ec70054a8465", "indicator--048ba179-ad8c-46f7-a8b8-baecfdd49055", "indicator--c9b835c2-055a-4443-80b3-45ef62d3ebc2", "indicator--3f771e09-b2f1-4aae-8e35-e01b9f0ff3d2", "indicator--7dafd04a-9aa1-4d57-8f46-6d1bd964ce46", "indicator--ac5278a3-9b82-43df-89f7-d2d884de843d", "indicator--baf444a8-8232-47ae-8e79-da0a51eaa2d6", "indicator--f966202e-fd7a-40ff-9e25-a18c0c7a064b", "indicator--e1a83701-9379-40e4-8686-bd8ce40262e6", "indicator--13f2fb33-c35c-496a-a129-894cc83123b6", "indicator--29b6e8f6-247c-412e-b7fa-12a85e8db0cf", "indicator--50f1e2a1-c90c-4bf5-a67d-1740df448e3a", "indicator--f81ebd2f-886e-42f1-abdb-bd1493bcb204", "indicator--ab345314-108d-44f9-b5ab-1b9b3860544f", "indicator--c5bfe08a-16de-45ee-958b-9660fe262fff", "indicator--8f3757fd-bf9f-47b9-80bb-e752b82c482f", "indicator--d30c8e6a-7a98-4e8c-b684-05c41cb388a3", "indicator--08014f74-81ad-4e6f-862b-9c19155da909", "indicator--322801a8-3ddb-45c1-80ce-2dada7ad6481", "indicator--03e165c0-aca9-4be6-8a8b-163381a93858", "indicator--242180e8-88aa-4d4f-ad4b-67a038535bbc", "indicator--4f2bc135-d7ba-4ff8-adc6-2f7b1ad0e5d5", "indicator--f1a049f6-b212-41fa-bc61-dd32d8e5ce66", "indicator--5d564ed7-97a6-4028-9d09-721c4f0d2b57", "indicator--7fdc3907-5d73-4afa-a6da-46d5ba7eda66", "indicator--6622be1d-1d3b-4cd1-b5b2-9ca04b551cc9", "indicator--819cafe1-1730-44b5-9093-d0c14ad5b196", "indicator--ac96b6d9-feeb-4b7b-93f7-3956d0854251", "indicator--98ad26e8-7564-4d0e-b3d0-503725a38467", "indicator--2303a868-e040-496b-bdb9-16a4cd6335ec", "indicator--479b0987-0295-47c5-8014-4b0c28d272cc", "indicator--440ecbf9-dfa7-4426-8a3e-bbe781ba32e9", "indicator--328cd119-f3d6-4f37-a46d-03d9049c1be5", "indicator--b6b25a16-0686-4da3-8224-a9512d74d03c", "indicator--cb1383a4-bd84-4267-a712-07cd4cc653c8", "indicator--8dae336f-4801-42cf-ad2a-7675f1538030", "indicator--afa0f792-782d-4cb7-81f9-7a8e509fd78f", "indicator--27e0c760-5bbf-43ef-ac09-5756635009ef", "indicator--92cfa28a-51dc-4b42-bac2-93c87967eef5", "indicator--cd84f8c5-7294-4d42-8d6a-b74cddbd40b4", "indicator--1a9fe7d8-3527-4a93-8a6f-624058070506", "indicator--8adcebdc-88d6-4ad7-9acc-c85d6fd52fc8", "indicator--7dd93f61-88c2-48b1-bf65-e8b1279b5b42", "indicator--babb39ee-34ef-4ebf-8733-51e01e1d3fd6", "indicator--557aff06-d5a4-4bc0-aba7-47db9a173281", "indicator--d4711821-04a5-437e-a810-1268295c8e9f", "indicator--3852e773-d4c9-496c-a39e-dfe47ab9b4bb", "indicator--526abb35-86e0-43f8-8ee7-bdbbbe83ff05", "indicator--d46d6fa0-e71d-4120-b4c8-607effdec102", "indicator--1a505e60-afb9-4721-9d75-13cbe0ba564c", "indicator--1e5fa0de-07b8-4a29-bd2c-45fbe31809f8", "indicator--3524dbf5-d44f-43eb-9f63-05520681bc0b", "indicator--facb0ce9-653b-4955-9b53-031a90a903c5", "indicator--d19e8e61-def8-43b9-b23a-7cf157a4eacf", "indicator--1a9d9ada-e420-4892-8989-389ceef6ae0a", "indicator--ca01ee7f-a4af-4a18-b7a3-6080165dae06", "indicator--a9d6d1a6-9f2c-4b13-a0b8-99291582e6db", "indicator--b35475fc-03ea-4ace-9405-d818f51248ea", "indicator--d374d296-050f-4ce4-90fb-9e7e2b9cc789", "indicator--73f24f1f-3ec8-4c64-8ff4-04960a733bd3", "indicator--ae216851-7cee-4a3e-b116-5b47bce418fa", "indicator--1b738442-7b31-452b-bfe6-65a6ecd936e1", "indicator--1df5e042-f28a-4932-9902-f489f8dc1f01", "indicator--067104ce-8fb2-4377-b4f2-cf18fbf7a2e8", "indicator--73ed3c81-997d-4390-9fb6-46ce7290afce", "indicator--0ef4dff2-8363-4f1d-98d6-633bd5281b56", "indicator--9e02a048-ba52-4c32-95c7-4b09303598d1", "indicator--8abb4115-2f57-49fa-ba9b-eaf74aadf6cd", "indicator--982c9041-6e7a-47ab-8d00-834c03b8559a", "indicator--04491ced-9f39-4250-877d-e1105f2534ac", "indicator--1ecad8c7-f79a-45bd-a8f8-e24a8af55eff", "indicator--3d09ca33-ffe7-48d4-a6e5-589a659f68f6", "indicator--6892633f-6496-40ef-a952-9e51ffb9a40c", "indicator--99e9d41e-a3a7-4e29-99ca-9d90857da440", "indicator--727c5cc2-ea85-44cd-affd-a4c7c6fa936b", "indicator--05186be4-e132-4719-8c1d-a75068c925e7", "indicator--155d7cca-7f32-40f1-bdcd-aca71713c805", "indicator--1c0bbde7-4fe6-4d4f-b7c2-71dcc140e6cb", "indicator--c9ba35df-bc77-4d36-9535-019f40031373", "indicator--df263a06-dd8d-4c82-bedc-c2091975a4d1", "indicator--10470f0a-f65b-48f0-b3f0-bcd27f6e878f", "indicator--5f2830b0-3e70-4f4b-a184-e55f55c83957", "indicator--2b85b29a-f803-4abc-8970-00acb210e461", "indicator--06629b93-8da6-460f-944f-278ae0659c66", "indicator--ea2e66bf-47f6-4e22-b417-0d7362127cf1", "indicator--78063c0e-5771-460f-9f05-46f3e22fbd14", "indicator--e03fd0d1-e4fb-4ddc-b36e-ecd1626571ee", "indicator--2f15d6f2-6192-44fe-9dca-9aeaf3406d00", "indicator--816ddee5-baf5-48dc-ba50-000e84ed5afa", "indicator--cee5846c-2652-4ec7-801f-d79658672135", "indicator--799bb22a-32f3-4766-8539-cc200cfd4161", "indicator--973f1996-2d6a-4e0e-8702-c0841d6e12e1", "indicator--42da5c11-23a3-435a-acf5-3691d6268ae2", "indicator--901ae4f9-a3bc-4ce6-9954-e85264618002", "indicator--51dd48ec-d4ce-4d2d-ab0c-1651c076a601", "indicator--218486af-b6d2-44d1-a9f1-8c658f3a93a2", "indicator--53e525c0-9794-45c8-8373-cbb0797b5d1e", "indicator--d7a20180-fefb-4f7c-9f90-4232f99e247d", "indicator--9e54240c-8fcb-4767-8b92-97d10567bc28", "indicator--d8ca30bf-036c-4ccf-a174-a510dd79bfc0", "indicator--9a65a958-f960-4ed1-a47c-de6bcaf3a678", "indicator--f2178095-1a31-4390-8f06-f1033c73cfd1", "indicator--a36050f7-ace5-43f4-8f93-64625a1683b8", "indicator--77625a34-5307-4ef9-9941-8ca781a9f08c", "indicator--4d277ca1-779b-444f-a130-a1eafccf8bfd", "indicator--09a8469e-7335-4ed0-a347-27d2401da7bc", "indicator--f164b21a-547a-48cd-80eb-ef62358c6129", "indicator--fd26090d-274d-4d5e-aba2-ebca74165dea", "indicator--1f0f13c6-6e80-4644-8963-494b2745d6a8", "indicator--6380945e-3d34-420f-b156-7f7ca1400243", "indicator--02e650a4-ec0f-4b78-a1eb-7f92120e8bac", "indicator--be537a47-ee2a-41bf-bbc9-314835ab3353", "indicator--d3a0460f-551e-4210-98f5-c285ae0c5ee8", "indicator--a2ab9a69-3fa5-4006-93ca-cf833d70aece", "indicator--cad823a5-1f75-47a7-bc60-2873e35456cd", "indicator--20b5d9cb-f7d5-4afb-bd13-94a6e41d1fc8", "indicator--d335aed6-d8a5-448f-a46a-6dc78e93cc20", "indicator--6b3c630a-c4ca-4796-882e-c69c09060309", "indicator--b4f3d66e-226a-4bd9-8887-f45b6acabc2f", "indicator--6d3d78aa-987e-45ae-9b0c-7797cef76c2f", "indicator--8e4a7020-f079-429c-a257-c56b860086d1", "indicator--add6ef56-86e7-4b61-b32b-e94d137fb8bc", "indicator--5a6b145d-6cdb-4cca-863f-9ba048878d1d", "indicator--d188f6f7-c2a8-4c57-a85c-c7d61ff500e1", "indicator--c7ccd8ea-8d8a-40bc-b224-ba8016d7c428", "indicator--6a683f06-86a6-490a-9a54-334295da1991", "indicator--85b75711-cdeb-41cd-b625-510a0964a590", "indicator--e0088bda-086c-4503-9886-e73738fd5ee4", "indicator--7ed664f3-5501-4ee6-b05d-10043a93e8e1", "indicator--2fa7a707-ce9e-42fb-812f-67b305115d45", "indicator--1b51e5c2-6bf1-4d08-a77f-e474c5a37706", "indicator--2c48f1ab-d416-4dbc-aebb-4cb18c73b37f", "indicator--7c793226-7a69-4862-a4c5-34fd4007193f", "indicator--192e0251-de41-4768-9f80-cb8f58fee6ee", "indicator--9a7b14d1-3191-49ff-b854-74a123b38788", "indicator--386b2f4c-0d26-4be0-94e8-1e5c3f8a576b", "indicator--3b27cb1d-df7e-44bd-b925-cdeff0f4d6c2", "indicator--2b6e50d5-39f9-4e60-9eb0-bc0021fa6361", "indicator--79fcedde-f044-4359-b62e-7270f215391b", "indicator--ab6665a4-5cb9-4615-93f0-7cf9119edff4", "indicator--c57d575d-8650-4820-968a-286a33ef11f5", "indicator--8f9bf9f0-14f4-47f6-ad1e-eac8a5d8c1d5", "indicator--e7737ae0-c965-44c6-834c-7542787aab5a", "indicator--bdd29508-ded6-442f-a55b-e976fcd53136", "indicator--a41c2863-c21a-4df7-bf11-e0e9d1114b7c", "indicator--40a36a47-adf3-49eb-b7ce-4ac76b872588", "indicator--33f407cc-5524-411e-90a0-f66deef75bf8", "indicator--90e139c7-7115-4f4c-b142-979693bf7ecd", "indicator--26c1daa1-a4fa-42e7-95df-693c54ccffff", "indicator--df350b5e-1d5f-4aab-aaea-e8351df9da40", "indicator--ab29075c-ff66-4cb0-a96c-6e5026885f20", "indicator--10fb21ca-41c1-47da-a571-59cebeb64f1e", "indicator--a1ddff5c-aa57-4696-bc73-b89305dc8fbd", "indicator--1ecacaed-a564-4570-aa69-1d8fc756deb9", "indicator--64e8ad64-2ccb-4347-be7d-562a54a91e91", "indicator--29823620-787a-4eb3-87b7-67a5a51b613d", "indicator--23fa43fb-9b58-449a-b100-0f1b8d23a9b4", "indicator--1a615de1-6a76-44fb-adfa-22cd77ad0f97", "indicator--3df9439a-7e38-465e-bce4-a7f355b38498", "indicator--bf8c188f-6bed-4236-9d04-4d4c747ec240", "indicator--14cf6be0-7198-447d-8756-86541521abb4", "indicator--eb6c03fc-b706-41f5-9d1a-2d8edf09d5a2", "indicator--af1b71a4-e928-471c-8872-cae22a20522f", "indicator--1c3109e6-8a43-4a59-9bbb-593f71f3a901", "indicator--5ac16dd8-a978-4d1a-b07f-c185a45e0f49", "indicator--68150efd-fd1d-4127-8c2e-8273ec96a50e", "indicator--eea1f633-e9ef-46bd-9295-849a4661ddda", "indicator--02d6d997-0023-45e5-b808-b5969239a397", "indicator--d800c2e4-699b-452e-80be-672b0f10862e", "indicator--6a8f287a-1294-410d-bb22-dbf6a5b7edd3", "indicator--12199e46-3442-4d86-b37e-368b8f67786a", "indicator--7f9b44e4-a25a-4f8d-99cc-ea6449bcabe1", "indicator--481bc477-a535-4bbd-94b5-2aa54703420a", "indicator--07b536cc-7946-4104-b452-317cda78b434", "indicator--4aba3fbd-f8a4-42a8-a602-109cb360c394", "indicator--5ca143e1-5de4-4f8a-b5ef-41dfcce58ac2", "indicator--f803dbf3-502c-4b4f-a210-7c64f39c37e8", "indicator--26fd1885-dd86-4b3a-800f-0259df001616", "indicator--96b83228-a204-458a-a761-26d66886bd50", "indicator--c696bc5f-83a4-4612-bbcb-845436e16398", "indicator--e2e61aad-e38f-4f55-b9af-ab21ed345857", "indicator--7b2f1ae8-ac17-4cf7-a91a-e71473db6de4", "indicator--655de51a-9297-4db9-bae3-380d813dea83", "indicator--4b985cd7-ead9-4d72-b8a6-3915ab757864", "indicator--0972d1bc-a655-413f-a0d7-f3bb4cbdb11c", "indicator--c76378e1-e700-46b9-ad31-58c3633a086f", "indicator--0accca65-bb5b-43b4-bd5a-1a267ed495b9", "indicator--c2e7d50b-c125-4c99-822d-3733051d1403", "indicator--194f6d0f-7cf3-4604-a061-462f60b62895", "indicator--c5f1f233-ebd3-4aba-95a9-44a21d0ebc4d", "indicator--7457f712-aba0-4704-bff8-9f5d096aa30c", "indicator--99abac7b-d2dc-4b2c-912c-1638dff602f7", "indicator--e3a31343-8340-42eb-a2f2-1acfa3f719d8", "indicator--6cf18b35-9057-4e57-9980-30fbe4d18976", "indicator--e3e2628c-8a0a-4b21-9576-e214700eda81", "indicator--e0c47058-beb9-40cb-8d4b-3df628337b6c", "indicator--7008a68c-e275-458f-be5e-0fc0c515a8a2", "indicator--86ad887f-dfe0-4454-a02b-c49f45fc6208", "indicator--651f855f-e4f8-46b9-b53e-4afc39b77eb6", "indicator--14260a87-4719-4408-939d-c9999ca94fcd", "indicator--3be95516-2ca2-45c7-9847-f2be09df5607", "indicator--68988554-fd11-4c4b-9693-ed0da44c02b2", "indicator--f7e553f1-4bb8-4987-8161-8fae2b9689ae", "indicator--eb24e96f-e494-4937-ba8b-4a5d7493b720", "indicator--bebbb123-5b6e-44c8-9cda-2ed5bca8058e", "indicator--0d10efd6-ada5-403a-931c-69da25220070", "indicator--2af98e25-6f8d-4024-a3ec-4f1aef6a9688", "indicator--89e4da04-82ce-40b7-bcd2-15604efbbfae", "indicator--a2e715a2-6789-40ed-b8b7-45564dd67aec", "indicator--d751746d-99a7-45d2-8068-aed8273b266e", "indicator--746d1e12-b7c6-4992-b9ed-f6e37a8b3715", "indicator--168a788b-74f3-4f13-b988-41be0e7ab047", "indicator--c1f20827-87c9-4f60-861e-49d7b0dd1324", "indicator--ccb507b3-5710-4bb1-8145-4942df93a56f", "indicator--fae56c96-2cbb-462e-aaa0-e39cfddecf24", "indicator--951625ca-66e7-424a-9041-dc86b0444a48", "indicator--4c967bd9-a91e-4926-a4b5-82777251f761", "indicator--253b66cd-9977-4d94-b13d-a320fcc604e7", "indicator--2ecbba66-9d58-4539-82b6-5848b46efc12", "indicator--0c8add02-fcbf-4cd2-b2fb-6e2878793ac9", "indicator--d67cabaf-9425-4315-9e4f-080f30c48610", "indicator--443a728e-775b-443f-900e-409e39abb971", "indicator--2c2340e9-e70f-4168-9758-f1a688233c61", "indicator--5fa6b152-3597-466d-b218-cb433f62d864", "indicator--a91072a7-61cb-48f4-9901-0a443b1e3c5e", "indicator--845f9be9-e446-448c-ac18-3b18c84bba3b", "indicator--11edc5c1-6cd9-4059-9b9d-5ee0bb96815f", "indicator--1346cc80-1b77-4cc3-a0f5-708ad0aac9f4", "indicator--a408298c-886a-4f20-9dc4-7b6f1c8c1bb6", "indicator--444867ca-c088-416d-a723-9fe28b8e0913", "indicator--3184025b-b801-4afc-8955-23a8d2d40e89", "indicator--594f11ea-a2bf-4e53-890d-237f336a025f", "indicator--3efb236d-4f31-44ac-b4c1-b43e0e03f946", "indicator--e035787b-8af4-4534-b624-acee5736e747", "indicator--24578ec6-28b5-4726-b9cd-caed785542ff", "indicator--7bc8fb51-8d30-40fc-b7b9-2c15decbeff4", "indicator--e03bc10e-1359-4581-8b44-6422c5b7a444", "indicator--41814d8f-a89b-48ad-a978-199699e407c6", "indicator--781da563-ea88-45a2-a5b8-3550286efe8c", "indicator--9c937675-33f2-4e81-9dc2-02a0a7ab301d", "indicator--5ba8d9c0-ce21-40e0-b0c4-b135acf28e95", "indicator--e2fea3bd-d557-4f44-9ed5-45b3cc8c4bb3", "indicator--077b75db-646d-4c84-bef8-ed4ccbfbda22", "indicator--e3fdb459-a095-47b6-b665-51ba445ae885", "indicator--dcce8085-9b0f-4ca1-bc4e-caf58881f793", "indicator--8a9a6e0e-cd55-4428-a47d-3884d58440e7", "indicator--dec1b9a9-9d5b-4f66-9694-0f797409671a", "indicator--1242ee6c-394c-4c35-ae79-983c9cd858fd", "indicator--a0b41f07-cba9-4c60-a784-0e06cba19fa2", "indicator--217f1cb3-9c92-4cd6-b7d7-30a05e36daee", "indicator--51d381ea-7196-4788-b202-45c8a059321f", "indicator--73abcbdf-175a-42bd-825b-911d02e6d447", "indicator--6a62fae3-f726-47e6-96e3-b3eb8f75a8a2", "indicator--b4cae8a7-396b-4f09-905b-93ed36466390", "indicator--0ab01083-ce01-40ba-8793-ab77e84a818a", "indicator--39ed087c-cc03-45d0-9a95-8c5c727dee21", "indicator--6a2efb49-dc93-4fe3-a8c6-cc3b4c149b27", "indicator--24d61881-b5ab-4a50-8d2a-97ba0202697a", "indicator--156b829a-32e8-44a7-ab42-66469d913096", "indicator--58cdf83d-9eec-4213-b5fc-1de183cc8977", "indicator--32496645-1f65-4275-9fba-8724980397b7", "indicator--eba6a419-d175-491c-922a-ab380379daba", "indicator--55e9fe27-44bc-45d2-b5e6-0ef136471960", "indicator--648b4ea0-cd6f-4582-899a-a3fff232143a", "indicator--8ee87fa4-29cd-434e-a65f-5b4566dd290b", "indicator--90407b79-325e-41b4-985c-8edd662d392f", "indicator--4b26da89-8ab4-4426-b33a-376468afc1c3", "indicator--5917d584-0c1b-4a4b-b985-eacd089ac444", "indicator--702221ab-a5bb-440d-99d3-ebdd2ec4bda2", "indicator--75f263fe-0aaa-4fb1-bbec-03548dfd966c", "indicator--ea7d2688-ad25-46a3-bf75-e1ec2fd3e901", "indicator--9732e698-1aa5-4523-9e13-50f43e4ee469", "indicator--86bb515f-76dc-4a23-a37a-0edcdb01c2f2", "indicator--da02d5f6-bb28-4374-9a31-8cd5d7e27419", "indicator--a667e4da-4368-4e7c-bcad-64698d76b50b", "indicator--501535e2-d7bc-42cf-972f-2cfe5dfd63dc", "indicator--a0975fe8-7209-4efd-84d1-b6b694643e90", "indicator--2c065215-a27a-4b46-b858-b179a66b1454", "indicator--22175c4b-af9e-4b2d-8eeb-6caca2a21528", "indicator--eeec2f5f-a7a6-404c-a8fb-ab3df0b74493", "indicator--3e7bbcf2-6c99-4dce-88fe-48f5e5b280ae", "indicator--cebda886-1c69-4e38-9662-b0321de45be3", "indicator--a64e7209-d180-4938-96d5-29e8313757f2", "indicator--08930e56-dea8-45ca-9973-04a65a50d6ea", "indicator--777893a3-4a19-4227-bca6-80f0a6982194", "indicator--ce2606e6-6ece-482c-9cec-db2fc124604a", "indicator--97a3fda9-cf86-4805-8856-acb875486f75", "indicator--1a21687b-bd43-4c03-8653-658844919059", "indicator--f7c89afd-0f4a-4d82-826c-62ad5c4be4d9", "indicator--2a630ee1-7e20-44fb-9bc4-7a31e22285a5", "indicator--684bb15f-cd95-499c-91f8-ff3794301831", "indicator--5ab7a6ad-1bea-4c7c-b318-6161e83184b0", "indicator--ddb6f389-95d3-46b1-816e-ed7fbc2bdc94", "indicator--aab7b3c4-5600-45ff-a0ca-66aec79f1530", "indicator--35105fa1-7692-4f70-a56b-706137d9028c", "indicator--f4099359-4472-420e-b5ab-4d94ab4e276a", "indicator--2d45407c-b612-4fab-ac6e-a47bb1344c04", "indicator--fdded5fc-cea2-4e24-8fb1-51da8aa03e38", "indicator--faa17379-ad59-43de-8437-302645df7106", "indicator--28818104-40f8-442e-a81e-efed04da45f2", "indicator--d1de42da-bd71-4199-9b46-dc8166c75635", "indicator--7407c1c1-abac-4ac9-8771-2d3b4728d6c6", "indicator--8021ecbf-0848-4cbc-b40f-672d58e7f43d", "indicator--ebb2559a-63f6-487f-865e-577ffeb41b9e", "indicator--2ae7b789-9089-4c90-ab47-87b1b281054d", "indicator--2e17073c-7171-41db-86a8-e9600e30fea5", "indicator--a8d9fed7-7f54-48ec-842b-4e7f8698aaa7", "indicator--c7af28e2-e5aa-40d3-9622-57861880b1a1", "indicator--c70c5d17-a2c5-4a4c-ab5b-6e862690d12f", "indicator--85ddc8e1-2555-4f7f-b85a-b3615bfb2b19", "indicator--fbd96ed5-d531-47e5-bfd0-554b68ae84b6", "indicator--83b1911b-e5e1-4c0c-9635-163f59144925", "indicator--98c4ea02-7ba3-4148-82e4-b8d4cd106888", "indicator--962952b3-ab50-4eb2-9374-7a6f785bece5", "indicator--94eafe88-64a7-447f-a7fa-dcb85c5fbfa6", "indicator--65d62aa2-a4e1-453a-8e10-21df176006be", "indicator--55b4fba0-b0ec-4cfc-a966-664b6ae51c15", "indicator--e2ad2aec-3609-41e1-9d9f-74f1efcf7342", "indicator--b1f8abcf-ef83-4135-a2fc-dfd144589caa", "indicator--2ce9ca5d-e007-4192-9688-04a40deee44f", "indicator--b369e1dc-9d01-4c9e-8afb-e61bc5feae3f", "indicator--b5283165-841c-484c-a9cc-6bc3737d7b79", "indicator--9c7a713d-0d71-4f64-8bc6-a31b9d3b6d6c", "indicator--f9e86298-f50f-45d9-bab4-8736b0c1991f", "indicator--0f4f6990-605f-4b05-bdbf-1a5296979e51", "indicator--dadc1c10-ede3-4cfe-928e-69ee61af1394", "indicator--b42bc60a-450a-430d-b0bc-fe01af56f9f1", "indicator--fe59a039-1a40-4644-85cb-4e57917b2c98", "indicator--f007297a-ab1a-4604-9d5e-a3b4eef68a52", "indicator--55073bbb-58b1-4e15-9059-edc9a0933938", "indicator--7acf1432-9d13-42de-b176-c1f4f06404d3", "indicator--426209a5-12a6-45da-a0d5-ddee444cd03b", "indicator--67d8a17d-9fea-49c7-aec6-442271ecbc4b", "indicator--30894d80-6a69-4f48-a043-f9a493de4cfa", "indicator--1e6be8b0-540d-4249-ab57-61993fd036d4", "indicator--a37c27ba-28ad-4177-8de8-149993a97a3e", "indicator--33aac237-ecc4-4782-b73c-07878bea711f", "indicator--6dea1653-1b43-4e74-8927-f489cf348ed1", "indicator--39a760aa-3ab2-4b6a-827e-13805197a13d", "indicator--13740471-1ced-41a6-b12e-a207149c9df2", "indicator--3ae219b6-3605-4c23-98e9-c9cc0b04459b", "indicator--07f98a04-98a7-4b3f-acf9-3ebcbde575dd", "indicator--1f6acd1f-45a2-4f24-bf0b-2d9d111f9346", "indicator--73184ea4-025c-44b3-b108-43407fb9a02d", "indicator--f00bd25e-5f7f-41fc-a277-f851a7faa662", "indicator--38ca761f-9cf2-4dd9-95dd-b4c4edb906c5", "indicator--91a3b813-6223-48e6-92c2-b4d86b57331f", "indicator--82793b03-9bcc-4260-b0e4-0b88f6e615b1", "indicator--e46756be-d21a-4201-a82d-d72f860f29b1", "indicator--d6a6485c-42c4-4c7e-828d-8fa32bb1b315", "indicator--54cc59b9-98ba-482d-bf07-ef59dad698fa", "indicator--0cdf28db-b286-410d-afa9-c26bb1f8ac33", "indicator--14696538-3adf-4862-bb49-02393c3bef5e", "indicator--d1c406bb-194d-4ed3-b44d-d9a6c36871ba", "indicator--52c0c692-eb8f-4d76-8b93-be4ed506f1de", "indicator--ba74b428-f517-4e4d-8147-00891c3fb285", "indicator--befbae05-1d34-4bfb-b543-1f71d5f773f4", "indicator--938d433f-a196-4244-a18a-7d087708880b", "indicator--79f80a0f-eb26-46ab-bb3d-41bf1fa4f0bb", "indicator--718c7ca6-5acf-4f81-9f68-8017583fbd8c", "indicator--b4a91b6a-7183-4bfb-a9b5-f8a62c3365d5", "indicator--38ee3cea-8643-4bc6-9858-e6f328a98d1d", "indicator--726e4ccb-81f6-4409-9f91-6a0f3b5df457", "indicator--aaa97c2b-08d9-451d-bec5-7769a76a7850", "indicator--daf1a180-059d-4a5e-94e4-e88abd91eebd", "indicator--a1d1e6a1-7d4b-430c-94f2-51a68755a5a2", "indicator--e6d78b6b-6de1-446d-b155-82289b0776b6", "indicator--954647a5-d591-4576-8e85-697cb1f150fd", "indicator--9a2277d1-84d5-4314-8efb-1c257a0d9198", "indicator--4066a5d5-4f06-48fe-a82b-39cfefe1f406", "indicator--90d935bb-f20d-4335-8c0c-7e2d9d4e6279", "indicator--8a916832-0cbd-4f38-964e-d07914f2ca69", "indicator--e08b8383-412b-4cdf-ab8e-369c78bd0017", "indicator--11c83a0f-41e7-4eb9-9c0a-7e6032d58a57", "indicator--d6149d8b-4181-4979-bba7-e86c0bd187ae", "indicator--8cf48fa7-ec09-4a63-8e93-bf67645bc307", "indicator--97e430a9-b069-4ccd-9f88-d939f8fd6d40", "indicator--964c979e-2ef9-49c2-a892-b98bd3edd25b", "indicator--3cd066bc-88c8-4dc1-9844-b4f99ddfff1f", "indicator--0b15c164-c052-4180-bcdd-bbaac37c46a9", "indicator--38138c39-ea0e-4a25-8d0a-8ac8e07a4417", "indicator--977007f1-ebb2-4ff4-a1a0-54c5df848476", "indicator--9e2e668d-2470-4697-9b47-af09a82d39ae", "indicator--fafa0b64-288f-4c3a-9939-801cac428f60", "indicator--385b059c-3458-4d1d-b573-a4216e577bfd", "indicator--3981003d-49af-44c9-9169-b9d415162dd3", "indicator--72cb910f-e970-4294-b211-2185b0406257", "indicator--920d828b-9a2e-4037-8f81-932ff6f0189e", "indicator--74d82f68-6955-4d08-88b9-7ee581d4b845", "indicator--025992ce-459f-4ab7-9c04-ef4f52e092fd", "indicator--6c735ffb-0d0a-40b0-b699-c77f8d4e83b6", "indicator--184ec7d6-9d41-4a8f-818e-e70ae7bd4b84", "indicator--061c57b4-91ab-4596-b757-33198f80fe6b", "indicator--b9dbe497-4bb5-4838-b700-bba5bc7b7f18", "indicator--51f7fb27-2662-4943-bd7e-06198fb4f8e9", "indicator--aa914d26-18cf-4876-99fd-376b37b3cacc", "indicator--1da96876-9a1c-4baa-8462-982c81c8682d", "indicator--d4d87864-be21-4092-9225-e857330f046d", "indicator--af4eb32e-ea05-4e99-ab00-efe1e90c529e", "indicator--2f508dce-3473-4d34-8d18-9b47665a9736", "indicator--93233335-3bce-46ab-95aa-84c43dbb61af", "indicator--07fec940-ce00-427f-a5d8-8211fb1dd28d", "indicator--9168535a-b5bf-41a3-aa69-8ba8a493a1a8", "indicator--d6d00a94-00bb-4581-9f1c-774cab18bb91", "indicator--7e133c83-8823-4f70-828f-5d257f7251b6", "indicator--eb7cdee3-37a5-4fb6-bf5c-d8b7eedc290b", "indicator--fb2f6b04-fcfd-4583-af11-8bf19be49d63", "indicator--367a70ea-f6b6-42f0-85c0-54889c585f7e", "indicator--e28c532f-27ad-4b40-b7b7-f80609522262", "indicator--88cdf381-b510-486b-8fa7-bd164224573a", "indicator--6b69cdea-208f-4ff7-85fd-34117ce47249", "indicator--e1da94c9-cfdd-4e33-a42a-70c630c4e8e8", "indicator--47987ee4-fc32-4d30-b211-ea06ee1cacc9", "indicator--3abc9d7e-47fe-40d3-8ed6-557cf9519afc", "indicator--02362480-1eea-4f76-9cb6-2c5de2d071a9", "indicator--6ae8b646-948f-4a26-9bc9-b0d938963f69", "indicator--69e740c5-7fc8-4dd0-90ae-0808f5626442", "indicator--1a782703-f859-4153-97aa-355de160a151", "indicator--7f4fcf33-7e68-4c6b-8fb3-2601bda98fb2", "indicator--66e9a128-6f41-4b89-94b4-b7b129c8a34e", "indicator--3d55ad1c-0ec1-4741-b986-c3a21e310220", "indicator--eabcfc9f-0ac1-437f-8b2e-d35b1ef8e296", "indicator--3fd87a7e-3b41-493d-8f13-d769646e93ce", "indicator--6380c3b3-2954-4f6f-b88a-5897299030f2", "indicator--6462ffdb-db6d-4649-b7ff-3822bb23ec27", "indicator--0e8cb1ea-8581-44e1-afdf-17262030340a", "indicator--3dd7c3b2-9c0c-40bd-98b5-aaed06a9012b", "indicator--c103d446-9b1b-4e63-97e2-b1cf75344e43", "indicator--969a10a6-7ae1-40ea-bebd-7f884386bc81", "indicator--eb565316-6f73-415d-8040-f0ef43b56ea4", "indicator--5c269fe4-f5a4-4f6b-8b04-7a8ef58d945d", "indicator--f13d0d7f-ad15-40d3-9296-6608b628a90c", "indicator--0c3a6c6f-c3e8-4f5f-868f-76b838ba8572", "indicator--372dfab4-a2cd-442a-9a3d-ea1ee334052c", "indicator--df9f5306-9c4d-4061-94b1-7ce8ab2a6d77", "indicator--c91896a8-7044-4db6-972c-e644471b58c3", "indicator--a5ce04ca-9116-4d32-9080-dce119211d9a", "indicator--5525228b-26f2-4c4f-b386-1f5e934b2fdf", "indicator--c8ce3015-9836-4b71-aaa5-528e7ab1d25e", "indicator--030feb6f-a321-46be-b752-7f199c4c2d48", "indicator--7affd0ca-9299-42dc-b6c4-92ec56e8fd16", "indicator--c80cf4d7-7460-46df-a987-9447916fa42e", "indicator--10174e0b-f5c0-4a48-b211-03872b50c608", "indicator--06cca34b-0f78-43ae-88be-cfb6b740630e", "indicator--95333e63-7ddc-4e2f-ae73-1e6e6f7c8c66", "indicator--84d88364-e92e-4b73-8fb1-0a208b7661f2", "indicator--ba7ae10a-7ba3-4646-b0ab-aa56d18058b8", "indicator--b579c983-ecaf-4152-a3c0-0314d4a91639", "indicator--35f5ee41-46c1-4ff8-a812-e2b0a9b6633f", "indicator--3e005d09-720c-4fc0-b70e-10a59f433475", "indicator--1f0f1d50-395e-425a-84bd-feebca4a43ae", "indicator--16edc762-d7e6-4833-9f86-e081a153bcc0", "indicator--6bcbd967-5a01-49c6-9fe5-ef811d046c54", "indicator--8046fc0f-96b5-4eda-8932-74bdef539acf", "indicator--b20be02c-ebf1-4c2f-b654-6f350559b668", "indicator--963a8fb4-419f-4e6a-9e7f-60c739821d94", "indicator--87c598c8-0af3-423a-a6e3-8b8daa37b35b", "indicator--173add55-088e-48f9-a670-5f3e32ccdaac", "indicator--e76dc083-c91d-40c1-b6af-6915c610ca04", "indicator--f96519e4-7ba2-4a66-81c3-bbabf8903814", "indicator--ba38a928-7de8-47af-b9b0-39451b1e9870", "indicator--76b0845e-d3c9-45e1-adda-fe74ede103d0", "indicator--271f2f73-3fe9-4468-afd6-8ffe417fe009", "indicator--16f95256-f931-4280-8265-797e20caa7e9", "indicator--11e9fb52-31fa-46bd-b909-1615abab925c", "indicator--e34141c6-9efd-4d05-9b6e-0ed0b3a37c72", "indicator--d8e485fc-7907-4b63-a1de-14dacabcb481", "indicator--8b8c4f9a-1553-449b-b9a0-5fd91617bdb0", "indicator--339186ef-475a-4051-8cb6-93f380a73fd0", "indicator--146c993e-104b-4c6d-acfd-efbaa08fbf4b", "indicator--65164687-d0b6-4138-bb94-bc0d84067e56", "indicator--1a96a78e-da56-47a2-8e2b-7311deecc609", "indicator--b029d867-c05a-4620-ace0-6eb4774e36aa", "indicator--1abe2421-db6a-497a-b47a-dc402afe2d22", "indicator--0fadd87e-4a98-4f52-adc6-c7e3b5f111cb", "indicator--71e7ab08-fd7b-47a9-bdb7-b1b02940910a", "indicator--08ce4351-760f-4e9f-bc78-b927a67665e5", "indicator--68f65369-4a37-47e7-ba16-c94c02a2942c", "indicator--f400b98e-762c-45b4-9f32-b3f7bbb9066d", "indicator--21c69da1-20af-48f1-92ef-c42014082b39", "indicator--e06a5327-85c4-405d-9a4d-1442853173dd", "indicator--7cdf9915-d291-4dcd-9718-85cc021ce34e", "indicator--089761be-8627-4625-9fe5-086bba6d71b2", "indicator--b3519379-3f14-4be5-9e8b-9aaac2ea985a", "indicator--42567f40-e06b-481e-a8c7-aa7ac584353e", "indicator--5885fbee-6a18-4cd3-a39d-b00764d467d7", "indicator--57800277-4674-458f-b533-038b37a2b52d", "indicator--7e01c3f8-7fd3-4379-815d-f3992e02085c", "indicator--310c7883-5292-470d-8ec3-8dff650272d1", "indicator--9eb8d93c-11b6-48bb-8695-4592e705ed09", "indicator--cc39ee86-bafd-454b-9d6d-22263edbb2c1", "indicator--c7d8f21b-44de-4998-be4a-25d5c0c398b5", "indicator--27bc24d5-f0bf-4a3e-a527-3335a1a4103a", "indicator--6907a361-059a-4752-908e-4da6ee420d13", "indicator--5ba62c69-9832-4409-9607-7b57a3224880", "indicator--39486cfe-7548-4b0a-9de4-43b0be3e9ce1", "indicator--da8d50dd-84cc-4023-9c94-9e830aebfade", "indicator--5a6f4991-5d16-45aa-a2d5-856959877928", "indicator--6aa5582b-4af3-45b5-90d8-feb2bf35f6f5", "indicator--0655e686-f887-4728-b12e-e911c682eaa0", "indicator--0ad8abca-a144-4a91-9f7c-8061632fd5f1", "indicator--8ce5ebe6-6833-4067-9f4e-e7f6795a891f", "indicator--5fecaf04-9013-45a6-a133-7cad74a214cc", "indicator--6818e5ca-268f-44bb-b08d-706335a68523", "indicator--4cb0d3f6-2759-4be5-82ff-cd30ebb7eca7", "indicator--97f0034f-fec4-4f07-bc82-7f731a22d9c2", "indicator--99cc62e4-44fd-4b05-a772-49ca6a86c1c6", "indicator--af59fb6a-6662-40e8-a0ac-433e74cd2bc3", "indicator--5720a419-e934-4daa-8e8c-f181802290e3", "indicator--832fc0b1-4ce9-4dbd-b048-375d65f575a3", "indicator--43a190ab-a199-4116-a734-b64ed32384a8", "indicator--d691097a-58da-4fed-986a-ef54afc40c31", "indicator--74f6b780-0ee4-4f90-9d76-c98590ea1c14", "indicator--8e8d7a93-1a7d-4ffd-9bd6-3d0ec971c618", "indicator--75ad42fc-494f-4568-b9e7-e9620e218661", "indicator--5622b010-7116-4456-80ec-31e75f75f00f", "indicator--e21ac1c3-bc6c-4baa-91ed-a023f34b8dc2", "indicator--02af2f75-6bed-4ded-9e4f-c61ae3b2babb", "indicator--2ef0b66e-517e-43f6-a3e9-dfc75452296f", "indicator--8c9d20f9-ca17-4aa6-9478-9097eeff0de9", "indicator--41836347-b26d-4fd4-8334-148dc646dcf8", "indicator--9177ac55-7b78-43da-a54e-f8988e5182dd", "indicator--a8fa7196-ef22-4a92-ac95-3f3262017b14", "indicator--bf2916f3-f280-443e-af41-42dffe4a4385", "indicator--eb111fec-70ec-458a-acbd-1d4c1f0b5ae3", "indicator--10797d1d-ac92-406f-b8bf-67dd268373cd", "indicator--644c6ff5-1034-4bed-b1ab-a411bd910d4b", "indicator--fe7dce8a-86c6-4a32-9da4-6b3c13c59124", "indicator--38581e66-db79-432f-acc6-86ab287b465d", "indicator--e9f07bc5-5601-4321-9378-b324ed852127", "indicator--2e1d8c75-fec1-4b58-8095-98d6e3587208", "indicator--f316c16c-d1ac-4fbb-9fd8-b81d372057cd", "indicator--14fa5e70-7024-4bdf-a4d7-e325992c1712", "indicator--5abbb1ca-df74-4901-9e2a-407b08214a7a", "indicator--7a13e819-cda5-48e8-9560-b5b873bea838", "indicator--715f6447-9104-4397-bcf7-cfcf74975ab1", "indicator--b83650a0-c078-42b2-b3a6-72f45b89331d", "indicator--f17302d9-1172-44a0-a4a3-681b6fdbd87e", "indicator--9cb9df77-55c3-4a73-8da3-95e338b853f5", "indicator--121576e7-5e17-4510-b9d2-6a2c89f2ffb7", "indicator--b065f496-c1d6-4fb1-a576-920aacf7b76c", "indicator--d06e3f7f-b1cd-4eb8-a720-b59fa545696e", "indicator--dcbb9f21-6209-4913-b90f-c7bec37d289b", "indicator--b013b41c-80c0-4d6d-9f4a-6631622b96e4", "indicator--5e1c33a7-7d51-45ab-aa1e-7c8269c267d8", "indicator--09b05ab6-0b47-4d4c-bc6d-d5f78d9ada88", "indicator--3ccd69d9-875e-4eb4-9350-d9d4cb873b59", "indicator--cf5a4b6d-3205-4e64-8989-4c5056a1c544", "indicator--ee29476c-e557-48be-aeb8-9a5d60306108", "indicator--e9040932-85d7-4164-b3d4-7a9b6481a02f", "indicator--36d08a13-05e5-4914-bf7a-4e0a1bd8ab12", "indicator--2bf91f11-8c8f-4503-aab0-046b998be6da", "indicator--b4d24825-6afb-4a0a-8979-b039340be25b", "indicator--569c698d-fdc9-4fdc-bc4c-9a60e2421cc1", "indicator--f08194c2-535a-4e8d-b65b-ea955fdc157d", "indicator--4b58c910-334c-4c7b-b317-3fe4c08722f1", "indicator--b7d357e2-fe58-4360-a8f9-417ada2c60e7", "indicator--2041e11a-665a-4e0d-8692-dd8933ca12a4", "indicator--1719b847-64ac-476a-ad7d-7936dd9a3f63", "indicator--46a81143-44df-4ba1-bace-b2eb03685e0b", "indicator--b3f25c74-7759-465c-abdd-78c3f4b357ab", "indicator--40ec2353-ecc9-4866-a348-9730977d59bd", "indicator--42a7053f-38dd-48c7-99b1-0794052c9ae3", "indicator--7dbc6cb4-e56d-4c58-9fe0-941f5f41beed", "indicator--e9e3be26-af7a-4257-bd52-b3f4af9da5e9", "indicator--a0d4548c-6564-49da-9c14-9c91fa4b33cd", "indicator--af399420-d4be-4a27-aac8-072fa4e070c0", "indicator--88e43ff9-d199-436f-b2c5-d821a00d220b", "indicator--36ecccc6-120d-4ca1-a14b-cb8fc3c34ba0", "indicator--209f630a-2302-460a-8189-8a77e0778fee", "indicator--8a7f960a-9a9c-4196-ad20-de6d6c78565b", "indicator--944ce636-b266-4fc3-8994-8aa5cc44a02e", "indicator--bb8f2c76-9fa9-4b7a-bb40-2e6d6461d2e9", "indicator--ccebcc9c-b3c5-47ba-a112-e67c28496698", "indicator--f868546b-b999-4c02-9187-2f43628c5698", "indicator--add17ee2-3da5-4908-8e35-2b68e028f58e", "indicator--121605ff-2f48-423d-a533-2ae6f82ce6fa", "indicator--baafe5c2-fc5d-48e4-a14c-3b04baee0c18", "indicator--b104f963-9745-48e1-9c3f-504d0ff97907", "indicator--275817d8-d544-444d-9650-81b887b1a2e6", "indicator--400d8513-1b0d-49d4-9548-11e07229ae8b", "indicator--dd0b952c-3d8c-4173-a62b-97b3bd93398b", "indicator--4266cbab-cf11-4967-8ca0-1cb0649dc356", "indicator--c165431d-b6e4-4688-8b8c-2d68eb1250ca", "indicator--307f44ac-0ce7-48dc-ab38-2a643b257993", "indicator--49a03d82-5aaf-4e00-ae28-b4a80e0a0cfb", "indicator--d84e7c7e-4fbc-48af-9ef3-c673c499f356", "indicator--8c54655f-94c3-4e01-ae5e-9e12a78b3ead", "indicator--7a48ec83-2d39-4507-9e0a-3a8bdfd9f6f6", "indicator--0f049deb-be2f-4e77-8726-9548dbab3fe8", "indicator--aff506e1-6e91-4503-ad33-f4194aab9e74", "indicator--627502fd-3f7c-41a3-8007-67163a6d1dd2", "indicator--78d572cb-adfb-4ba8-b0f0-e1716d0562e9", "indicator--06569522-910f-47c7-ac87-7f37d1f447e2", "indicator--c9d39150-bc27-45dc-ad73-460d540a608d", "indicator--242bedf9-0482-470b-891e-c0559463d92c", "indicator--b463db56-e2f7-40bb-a1d0-334ae61ca0b3", "indicator--d0f68c57-90e2-4137-870b-7f28fc64ab8e", "indicator--719c4e4a-c9cb-4179-a3d7-47a491d56507", "indicator--ad342436-7ff6-408a-8eac-0e99eba9960e", "indicator--9c1c5f91-3e5b-44ad-8109-606767e03f2a", "indicator--1441ff92-0e32-4dd7-bf07-68927b0bbb8d", "indicator--e2b50ec0-1b66-4885-8e0c-108b635ac014", "indicator--2bd57991-6c6a-450f-b351-35e27c597559", "indicator--3fdb78b5-61d3-4a23-8483-315a4262f287", "indicator--88d611fa-7961-4234-b543-a78d88384b09", "indicator--a9449e71-2afe-4c81-86e0-13672cee8cc8", "indicator--6629c92f-be27-4bd9-a4c9-cb9ab29f9848", "indicator--0fdeae5e-8ea2-4bfe-bdf0-3afabd94cff2", "indicator--b559a7b5-83a3-4156-b38e-52df6c7efb6b", "indicator--193fcc23-5b4c-4aa1-81d8-b9674ded00bf", "indicator--4fb09747-06dd-4aa5-a429-ba5ebf3562d7", "indicator--a2957bdd-a76f-4af4-828f-c154825b794d", "indicator--72353380-1d0d-49aa-8701-ebe20fb1deac", "indicator--737e5736-a476-43d2-a5fb-bc9d27caa5c8", "indicator--e113a740-d774-46c0-8cd1-ffbb5c20a264", "indicator--7ada47c2-a785-4850-b152-d0121533de11", "indicator--7cf21e99-45e8-4a6e-95e3-2ee71d6dcc59", "indicator--41b0c6f4-e204-4fd5-9c89-9c13d538c831", "indicator--17842c39-f909-4912-b41b-2cfd2f8a187e", "indicator--e441d748-743a-420c-ad40-a733986f4333", "indicator--dac452ae-359f-4aaf-b233-87407d3e7715", "indicator--e9a44d6a-7147-4d8a-9c4b-a73bb4d112f2", "indicator--9c7b063b-839b-4c19-839e-4450acbe4dde", "indicator--13ff6853-94b9-447d-926c-ea703f5dadf3", "indicator--d2adaf30-4cda-489e-9088-1a6acef883f0", "indicator--1cb03b7e-7e6c-4121-b71f-9dbd450d50cf", "indicator--1873eba3-d72f-4b79-9d41-fd8d248e4c0f", "indicator--9fc7280a-1630-4ad5-a03b-d5a1374a24df", "indicator--a9ae3453-6052-46bb-b603-e9210ac1735d", "indicator--5de2fcb4-e098-423e-b80a-857acb4c873b", "indicator--1f650c33-2fcf-40c4-859d-fcdc9332d8a4", "indicator--fd1d7159-cedd-439b-801a-a212543b114a", "indicator--dafe59b2-abac-408f-b42a-917d962e505e", "indicator--342eaacf-3880-4417-b7c1-ddae7b769e45", "indicator--a510456c-31ed-42ac-a3bc-db2d311751ac", "indicator--37d878fc-accc-4f4f-b50c-7c36db8d22d5", "indicator--7aafeb85-6483-455c-9a02-c53aacb39262", "indicator--d10b45fb-f757-4cfd-9462-f5366ce1d8bf", "indicator--bd8d18f7-5cf4-4910-aa77-833e0a1863ce", "indicator--05d55007-aa0a-40b0-b071-7f0db88921f5", "indicator--34510b08-8db2-41bf-98c4-00871056ad4a", "indicator--09808320-9750-421c-af16-feae0ce0219a", "indicator--b5b71781-266b-4761-911e-6d9e75dbaadb", "indicator--c744901b-8f41-4a91-997e-b190155d80ab", "indicator--e318fc2e-85df-45c4-8e5e-68e541c65d7d", "indicator--3645e05b-01ac-4430-b448-3dc8fe5ded3c", "indicator--2bbeb3fb-ffc0-427e-8c68-6f37a4b69c00", "indicator--2de6b52a-a142-4b0c-b090-d13f2006d7ca", "indicator--00839277-54a4-4711-9deb-9011d41c3dbb", "indicator--752e25fe-d40b-488a-8544-bc565e57e3f0", "indicator--dbc67187-79e5-417e-8ce3-772a03d38120", "indicator--3b5308c6-2c3a-4086-8871-34d827a33755", "indicator--7acfbd08-fdd0-4e2e-9723-646d16454d4c", "indicator--1ea34c46-d7d6-4b7c-99d1-3fa526c3f6ed", "indicator--7340932f-6bec-4aa9-9aea-f4e58db74641", "indicator--c2ab0dbe-4090-4c22-97b7-2d9cecba8859", "indicator--bc787098-8173-4036-8c60-452efa8bf8e3", "indicator--26b209fe-25fa-4ca1-a536-971a67ae55ba", "indicator--ddd5756a-4811-4b71-adde-5f033702507f", "indicator--5da0628f-aeda-43af-94bf-b376f3bbd1a7", "indicator--d1cc6085-d5e9-473c-9701-4356cc919307", "indicator--1e70a35e-99f7-4f80-a920-0fe9517a982f", "indicator--7f9d6cdd-14d1-4aa2-bd43-081cd8afd786", "indicator--db94a6de-6b5e-43ee-a489-901c017193fe", "indicator--480fc2a4-c5c0-495f-a5a9-3e48f3f2d71b", "indicator--4cbb5a70-67f6-440b-abaf-8347fa460fe9", "indicator--24403bb9-68d2-4c4b-8ee4-2b1853e6536b", "indicator--26c3af4c-2135-4f61-aa65-f0a1076f7efc", "indicator--147c412c-ac21-4089-9c9b-84e943c35afa", "indicator--9718ea65-58c1-46e9-9871-1a3aa36be559", "indicator--f9f8cc51-56df-456a-88f3-5c265713851d", "indicator--92dac8f2-3f9b-4509-80fd-61a1ba838aca", "indicator--f3004070-bb80-4e36-96d4-06b8703c0607", "indicator--9d95cf6c-556a-4882-b28f-b210ac965d90", "indicator--135f25da-567f-4e70-8e35-7c3c1c226959", "indicator--f1fbc8d4-4453-4618-af4d-c08d9be7f64f", "indicator--28a5c6a7-d06d-451e-9bc9-760b1f8d1f10", "indicator--cb489eac-1fe5-46de-bda0-176b83bed736", "indicator--d9acf67f-feb4-4a58-865e-2d0ebdb1961e", "indicator--ff630bc8-febc-47f9-95a9-bc69fe06ce3b", "indicator--9a83241b-21ee-4c5b-aaf0-d43413986e02", "indicator--8f9a254d-ac93-4055-80a3-d6b90f4e1290", "indicator--559936ef-1bf8-46c6-afc4-cb781d5527b8", "indicator--01584855-8dda-41f2-8e01-0b4f6f06ff66", "indicator--bd2bc65a-c8c4-4c7d-b2eb-f4457b4b34f8", "indicator--f79864ba-a913-4536-907e-05624876ef76", "indicator--8106d82d-3767-48d5-9dd0-77dcf752a2ef", "indicator--d2f753e8-71bb-431c-8035-c41b1c09e9c6", "indicator--3fcb60a4-1723-43d8-b1ac-034b77b42487", "indicator--3812dfde-212f-48ee-8466-ab9249b8f468", "indicator--f0d70caf-87a2-49ae-80da-8a54c2d96f15", "indicator--cdda179f-78e9-4905-9476-b70fae5ba3e9", "indicator--9d09b7ae-c23e-458d-8c35-205eba280a1b", "indicator--2135f9ae-f71b-4280-9700-137b585aadb6", "indicator--5cc2aff8-395a-4e8b-8710-7fc14b27a911", "indicator--9e2aef9d-c605-4a5c-b957-a73d9696a9d8", "indicator--91ae9503-a16c-46f0-b96b-3ae1a3219f20", "indicator--7d0de5fc-d1cc-4507-8a7d-7f81c355dcc0", "indicator--49129857-6321-4ef9-aee3-76c6ad522716", "indicator--39b97adb-797d-4266-a991-7ff0a84a78c8", "indicator--22160b81-afc4-4c77-b0cc-ec2154b8cf16", "indicator--4ae15a92-f7a7-4bc3-88c6-217c572eb243", "indicator--b06ce5be-d187-4ba8-9a19-1393f1d54ec4", "indicator--a3b60572-dfdb-4e68-8eb0-4450b6d26136", "indicator--6db80fe6-9fcb-4fa5-95b6-036cf9d6fa7f", "indicator--8fcc0998-f306-47ac-b890-221ce921a4d9", "indicator--ae7376f0-9e93-4fe2-a0ef-9c04461e1932", "indicator--5b2d0896-78f6-49c0-885d-10872e4bf14a", "indicator--dc477abc-7519-41db-89a7-a2f5d7460356", "indicator--da46a131-10af-4765-b078-2778f5b0e7c3", "indicator--322a0bbe-d28a-4280-bf49-4d57dfd657b7", "indicator--d502a9a3-fd31-4a02-88b7-bb5df7fec470", "indicator--d84b17a2-4fdb-41e8-8e0e-7b356a9d0e33", "indicator--6e6eacc3-9430-4970-b8cd-e4d2f1ee0efe", "indicator--405686a4-90a9-4e07-9d59-a9f15784721b", "indicator--16c81a88-8eab-4867-91d0-f7ab0031149b", "indicator--a74ee920-14d1-4d67-9235-b5db731116f2", "indicator--76966a23-ee1a-4678-9028-dad8a7457955", "indicator--83a472df-4059-4d39-938d-7413ba913131", "indicator--96db7194-7494-4677-973a-d23f32cf2e6a", "indicator--44747194-425d-4553-9f33-95f08f0baa3a", "indicator--c0630bd6-ae4e-408f-8fbf-94d820f5b008", "indicator--a06d26a6-5ee4-407c-8fad-a413c9b9ef25", "indicator--fef0f744-6bc9-4a2e-9dcc-3ffa6e0a95c2", "indicator--6e9a0124-046b-436e-94f6-781c693a001f", "indicator--8e764dff-1d31-4eb5-be6f-d5eb9c46fbf5", "indicator--3b5e2bff-55f3-4100-9645-085cb64a1b2a", "indicator--b7463069-fb1a-4c8c-8863-c4193d1aad20", "indicator--722f461e-d917-454a-b170-33c94988e3bb", "indicator--6b8cf8cc-9d7f-413f-aa98-55b256719318", "indicator--d132f04a-e653-47ea-8a12-600270081162", "indicator--f13c59f9-054a-4814-8609-e2f022eee932", "indicator--15da90c1-04e5-456f-87ca-61b18c028ea6", "indicator--adced7e4-4343-4780-bad1-3ecd0d7fa6b0", "indicator--9223eb33-4060-4941-84f0-29a9890ce134", "indicator--e871dba9-1097-44cf-a628-7c82d7caf63f", "indicator--dd371bb1-fc43-4491-9f6d-69298404a0a1", "indicator--21ebacb2-9800-48a3-9d0e-c8638768365d", "indicator--26eb1b0b-4e56-4fc2-96d8-a15a0e75ac7a", "indicator--2171f52e-9946-4f7a-9b61-1975e9e736e6", "indicator--81197200-1430-498d-9b1a-7ffe28e358b4", "indicator--cb099ef9-be7c-4178-a134-fcc83f8636ee", "indicator--161772b2-c8ad-477b-9e6e-cc6f9b21a015", "indicator--7c9867a8-127c-40b2-9064-acfe75a8cf70", "indicator--0c17bb0d-f081-4f91-8fb5-7b599f9bce66", "indicator--8a8c41d3-200c-43c2-b24b-f41caffbd0b5", "indicator--8ea39efd-20a4-4d6f-bfaf-8e44739777da", "indicator--54e8130c-5d86-4eef-8b15-a20fdb59d088", "indicator--ef231e7b-a567-46cf-bed0-91eedf70ad11", "indicator--0c80ee5a-c9d3-4c43-a956-c30d9431310b", "indicator--b5fec191-6044-46ee-bed6-8e2fa2f4d560", "indicator--6921bcaf-d491-44f1-b866-658837a789c0", "indicator--dc0d44c9-a105-44af-be44-09c412dd430b", "indicator--303568db-6a7a-4fc5-9202-26f4453a1674", "indicator--4b42654c-c20f-4f63-a8e5-e2a05d2c5c6b", "indicator--cf3082a2-aca7-4c96-b0b2-32ae92c31a08", "indicator--b99f36b1-75b0-4abd-ae3d-7f2bdf9ff882", "indicator--d673b964-bc90-4574-b209-d45df15a8904", "indicator--7320dbaf-8e97-4b31-9529-c9c1feebb1e4", "indicator--b8eab79f-7252-4332-ab81-7b9386bd706d", "indicator--f9dc999e-9dd0-488f-8419-f016e1412b5f", "indicator--6e70d88f-2513-4494-97d7-cc14ebc19b39", "indicator--7b43cabf-423d-457d-a54c-fd862f87bdcf", "indicator--7f454863-8d42-40a9-85db-954d7f312718", "indicator--5f4a8c26-895b-4497-9862-84dfd263f2f8", "indicator--75620661-aa66-4424-8ee6-df3ce68997e4", "indicator--ad4d29fe-a4f6-4dc6-809d-ea63c6bb88f9", "indicator--a8ae0f35-9462-407d-983e-19d7fbea1914", "indicator--90149aed-80ee-4e0e-ae92-412417bbde54", "indicator--639453bb-7b87-4c98-bade-6a3f43c55243", "indicator--83c35e99-94af-484a-b680-5c66301b0da2", "indicator--25007d5b-7acf-440d-9f8a-b54580bab2ef", "indicator--b1f8c148-3602-4e18-974d-76f040776abd", "indicator--1849f988-02d6-4697-9034-cd995ac57844", "indicator--29e77235-8ee8-481f-82bd-8c94dfbd3c2c", "indicator--19cdb150-a99f-4df9-9bb3-72828b033972", "indicator--726292c1-686e-44fb-b500-af224c3573dd", "indicator--e34ab641-4918-4572-ba43-30f4b8468230", "indicator--bf87104f-2fb4-4573-8c46-f9a3bd4ce251", "indicator--e45bf7e0-340c-4ada-bcf3-58c0b8a45dac", "indicator--c588ed6d-bdb5-448c-854d-18e829aef27f", "indicator--cde6df13-dae7-4efe-9e79-e806ae43c515", "indicator--be8cc498-3508-4a22-a17c-9a326641d750", "indicator--ac830069-7411-4b17-90dd-2a73495f8e6d", "indicator--c5cd7bb6-19dc-4fec-876d-63b987e55976", "indicator--1dc76dc9-1598-4bb9-9ac5-78c58801be54", "indicator--80ba3505-bb82-4485-afbb-e240a53e35c9", "indicator--411608c7-594b-473e-930a-a2d19372e7b9", "indicator--cadce57e-58fd-4d64-aae9-427fbea831f0", "indicator--0f7023fc-318a-4f3f-bb17-a9ec340f3260", "indicator--2f487165-6f80-4ee4-958d-2109743b4a0f", "indicator--77f91430-bb2d-4600-b58f-1c6d3c4198ff", "indicator--91d960f2-73ee-4732-8eeb-e3203a8283cf", "indicator--6e9a112a-f433-4cf8-bde8-830a590baa83", "indicator--c46f6b73-c9b8-4294-8667-6f379ae6e9bf", "indicator--e6c06018-f7eb-468f-9096-cdb831bf821b", "indicator--ad75f573-2750-4744-8519-78e5555a9105", "indicator--c7d0ebc5-6d62-4956-a52a-5969a13e50bc", "indicator--514d56f4-ed39-4757-aa77-060d21048e5d", "indicator--a18367bb-bb88-4e7e-94a7-2dab1fb3e37a", "indicator--77db4d79-6a9d-4564-a388-5d75ead06fa7", "indicator--5b8d71b3-3cf6-4138-b616-506d5e37c512", "indicator--77003e96-e184-4f37-b0ff-d43b7c818087", "indicator--4891b82e-a2b1-490a-8d90-697e8a3946af", "indicator--4876963f-63bb-4f96-8b0a-68e7c872bb56", "indicator--0f17e19f-e132-4aa8-b32d-4e29e50b6055", "indicator--b091bdbf-dee8-4e0c-9846-765f0d41f421", "indicator--d4e17645-6aac-4c31-9997-e10711fbc54a", "indicator--cb0d89e1-9baa-4ff8-8916-eac1f780a9f9", "indicator--ed41b2bd-7bf8-48fd-aa5d-53e2683af4bd", "indicator--6c77d330-800a-46d3-883b-919d0b34a8a3", "indicator--a7b778cd-34fc-4f05-b4db-d55622f2616a", "indicator--823444d7-7cb3-450f-9a53-b09bef91c605", "indicator--cd214d28-9b6f-4fb8-bc1a-0bd579e63399", "indicator--87fff037-930f-4701-a5f7-02196e9995d6", "indicator--456fdda6-95ae-46f2-8ec6-8bb09523afee", "indicator--896f83f8-5985-414f-baff-66611240791d", "indicator--53c95a78-8763-4f8d-875e-daa80b987083", "indicator--e701eda2-a70a-488a-a8ca-da60f940987c", "indicator--1a2b4256-2681-45a9-80fe-911d08c94a57", "indicator--4a73361b-5f15-4d93-9e5d-f326d5b4881f", "indicator--b51a3dac-2e7d-4e17-a1fb-373305ec2b04", "indicator--a4c1b366-605a-43d3-830f-091e1030b38a", "indicator--7280d8ff-3ed3-4fed-807d-7ad3a4e2beec", "indicator--519384f1-68ec-45ee-81cc-3d671df9a039", "indicator--c9bc2aa2-c2de-4f36-9817-42a95401f2e0", "indicator--03cc2c31-e77a-4e4c-bc20-4d52ff1456f9", "indicator--b3646a11-8b63-4b7f-88a6-2ee833a866f0", "indicator--d9e567c5-f620-467f-9248-752543b73083", "indicator--a815ea85-cc32-4692-b3df-a77196b8f3f0", "indicator--f92fa99d-74d5-478a-a921-f0084ec259de", "indicator--d0925a0f-dc68-4bed-90f8-dec0685092e2", "indicator--f80ca00f-5bbc-4afc-9525-75753ceb00b7", "indicator--f614b980-e696-4134-84e6-5d1b3fd1fb41", "indicator--8c715626-ec1a-4495-9767-34a8a238e0a5", "indicator--5965149d-1d31-4266-bdab-b21e35509475", "indicator--3e43ac3c-f41d-45b7-bb15-6ac45114ab24", "indicator--d47bd703-c198-43b3-bc7d-1ecce9f3ec34", "indicator--1d665131-8a1a-4e55-aeb2-8cae880cb746", "indicator--e879c630-a8d1-4a1b-aefc-add0785033df", "indicator--5c306580-d160-4421-a2fa-948f6d86dc36", "indicator--bbfc6aa7-a0df-46d2-b1f9-de15fb04332d", "indicator--6251f627-bc71-4435-a54c-712d40631cc7", "indicator--f77151da-a0da-45d7-b3d0-4dc21b0cd8f7", "indicator--7c9a2a53-864a-4537-8ad9-3cf4c7778bd2", "indicator--70d287c1-f6d7-4e69-b5ce-77aadf961f2a", "indicator--23e3ed37-821a-447f-8458-854429412d64", "indicator--00b908e9-7a14-4def-af02-0f9839b6f2dd", "indicator--06293238-5999-45bc-951d-cc0eee08ff00", "indicator--80c2af64-1fcc-441f-b9de-94d0d1d20848", "indicator--896c5d8f-eb1d-4d0e-b013-c8d1335e9d27", "indicator--0f0db787-b233-427e-b4bd-3e6ff15b3412", "indicator--d523a3c4-1c63-4d45-b1ba-ca66f0d6130d", "indicator--293521c1-e832-4ff4-8373-43c42d7cd5d7", "indicator--ce1b166f-f28a-47ae-b24f-eee57bdc62b7", "indicator--43d3f10e-1d02-4662-99a7-84fb22fe8748", "indicator--07ac1051-17c8-4379-a698-c7c68d353ab4", "indicator--3e34cb2a-b3c9-4611-b004-dae2c044f1f1", "indicator--45ea46de-4e42-4bf7-a4e0-1ddc12824ad7", "indicator--8956200e-a73d-4007-8593-07cc5f25c355", "indicator--bf6c59ea-d5ac-4761-be79-4644698ec0f3", "indicator--74cfc122-cddb-42d9-8821-17f8a616cb63", "indicator--12ffb0dd-12a8-4988-9b01-b9cbc2b700bc", "indicator--8d03895d-7ddf-4876-b545-03896e17c22c", "indicator--2610b0c8-fb4c-4b11-b7ac-3e5691519a12", "indicator--ea044ef4-4d0c-4b75-b126-654c687e2ec4", "indicator--ed9cbba4-8746-4ad4-819a-b6a523c98e75", "indicator--a2984aa7-6943-4706-ba4b-9ac84f112e40", "indicator--933e124d-c625-4f49-bd06-f50012f6c449", "indicator--8b620c1e-df49-44d6-9a06-03e885c8a63d", "indicator--ce8bb939-171c-4d77-8e63-92180f1dae0b", "indicator--31be8d36-1233-44b7-a774-e8b1c2452478", "indicator--23bd5ba7-34f9-43f9-957b-ee704442a08e", "indicator--e570ccee-0341-45cc-bb2b-3db6118c7108", "indicator--18c13ffb-0e94-46be-865a-cd93402baeef", "indicator--b58d5877-addc-4696-9dcc-d296e11846db", "indicator--a2066baf-2340-4161-bd21-20ea36c0a319", "indicator--2bb1c78b-388e-4753-bda5-cfb4800892a8", "indicator--44648622-5451-4a32-8bbb-1fc91db398a6", "indicator--dbf403cf-4153-4415-a926-4006f2a14f8a", "indicator--b0ec7c57-cabc-4de0-9a99-ecf863922ca5", "indicator--06e8a6a9-07a0-47b5-bbd8-902b25e00361", "indicator--b749a2e7-4bf6-4043-b8e6-ffc14ad42114", "indicator--794c52df-94fd-4842-a40b-e2522683efa8", "indicator--6b9eacbe-6041-4b84-86a7-1919a2b30341", "indicator--842c385e-60eb-4747-84f1-0a18daf2a577", "indicator--fe552dd5-43ce-4bad-a270-772bc60cf796", "indicator--956a6890-7baf-4dbe-9f3e-a62186ed5465", "indicator--bd330786-c946-40db-8754-2d7f38918c96", "indicator--17eb47ff-232c-4fee-8d9a-cb5e737678fa", "indicator--4d38b45d-2251-4de3-b2fa-c5e61fd84226", "indicator--c61e924c-65fe-411a-9a95-553084e5ff84", "indicator--a92ac4e1-e2db-4562-8b2a-59b708a61a35", "indicator--35c5ecd5-9c29-4d3c-bc4a-7c543bd4e6c9", "indicator--3d285083-3e5a-45bf-86dc-9a4b8f8f2147", "indicator--33db07df-b0c8-46ac-bb78-327c5474619e", "indicator--4db136f3-cf2c-4c48-b4f8-26e38ace2bf1", "indicator--cca0f3e0-8e49-41d1-9a14-1e973f6358ba", "indicator--794acac1-9ed5-4fd7-b041-0885454f9225", "indicator--2a3dcd85-51af-4da6-aa9b-72d621f46cda", "indicator--1cea50ad-bf81-413a-873a-a21e69ba0081", "indicator--84579b28-944b-4d47-b405-ea81af57cac4", "indicator--a86db7fb-32fa-4f9d-8b65-4febd58fa00e", "indicator--e50de232-e76e-4d84-b558-4e0ec9ec93f8", "indicator--8c23faa7-39e9-4cb5-ad02-4b3f069b51de", "indicator--a4335aa7-4fc7-4285-b439-51b6d19cc091", "indicator--0082238b-8e20-4117-8851-cd09a53041ce", "indicator--059cd58f-33d9-47a2-b9c1-78e448f4b93b", "indicator--a83b166f-266b-4d47-a0f6-62ce29ddac87", "indicator--885636ca-a439-4eac-b8f5-12248f50882c", "indicator--12512e4d-a32d-4f35-8c43-4cec54475d9a", "indicator--51418dce-efbb-49a6-b235-7c6b945e7930", "indicator--438caeff-42e5-4403-86e4-a4245f5de054", "indicator--eba4d1ac-148d-43e3-965c-0cc2eccb001a", "indicator--f183c470-3dc5-40a4-b82d-b7cf0aff55d6", "indicator--b88cbab6-3f6e-4381-82cd-35e6d80de252", "indicator--0845293f-d702-4309-a29f-27300f81595d", "indicator--1532e3e9-1075-4e73-8d15-0acfb8f6a8ab", "indicator--a19a4ea4-9c41-4c2e-9ebc-8bf72b3ec0df", "indicator--7fc11b97-e406-46a0-9213-0c10e25e405f", "indicator--ed9ee46a-d272-4a9d-9faf-c9df645433d0", "indicator--94f6a7a4-889f-401d-a57c-32d6ae72a694", "indicator--2aecc71d-47d4-4b2d-a723-3dd9a896e4fe", "indicator--25897b48-d3ec-4f5c-91d5-31e9069e8490", "indicator--20a69689-2867-4fe3-8fe2-31a2b61bc380", "indicator--063c13bd-6c6b-4a2e-b97f-7bd065785697", "indicator--46a9769f-02ab-47c0-9838-c828bce8f80e", "indicator--209b94d8-9a58-4799-bfbe-b1f18ed453cf", "indicator--ad362f82-ef66-4fc1-b8e8-b6f9d6b71b9b", "indicator--870d8f7b-20f7-4a9f-8af0-63ecb0eb0a22", "indicator--d20f0047-b52e-4caf-9d21-8158ecf50513", "indicator--f44e50aa-7fa0-42bb-babd-a5d17fddd085", "indicator--ed6668ea-62eb-4a9a-8375-79446356b2c3", "indicator--2965bead-8d55-496e-acc1-103f6981c22b", "indicator--9bf58745-26bf-41e7-b332-99582c8f664c", "indicator--f234a7d6-c4b5-41af-8910-62bd3ead746c", "indicator--4abcb5b9-8ee7-4544-b9d3-3812a2212d85", "indicator--6680fe0c-1b15-4aa6-a7ff-4232595c20e7", "indicator--c068f87f-d07d-444c-88ec-f8b24fe38119", "indicator--b2e4f6a7-562a-4a3a-a6e7-3c24a53deb11", "indicator--9669d2cb-4775-45ff-8cdb-3dd406c98c4b", "indicator--ae1bf20c-dbbc-4d69-91ae-e48b2083125b", "indicator--b4ad4e6c-f189-40e8-8908-3b99ffc81565", "indicator--ac2b85c7-33e9-4b63-ba83-cee9604a4b8a", "indicator--f3b1b071-d2c3-4661-a4a4-18f8930d5a96", "indicator--1476f1a4-360a-4a2d-be05-fa90ad1ee164", "indicator--3fbd0f15-ead2-4c86-aa6a-f793ea84aaaf", "indicator--b384d126-8048-46e4-81dc-a716d744264f", "indicator--fab449f4-e543-46b2-8dde-c3c5579ea029", "indicator--3bd22f05-6c1d-4d74-810c-e305d84280b2", "indicator--d12d3ea5-08d5-4e5d-a1b1-5a7156f239dc", "indicator--da276da7-35f7-44aa-b1ac-7c196309bfdd", "indicator--c3411a24-4586-4437-8048-8b33c1c6bcdd", "indicator--b42e8c80-084e-469f-9568-6010e51d6741", "indicator--399800a8-c586-47a4-a99f-a1c5740f248f", "indicator--5abc80ab-61dd-4a9e-aaac-454033fc5901", "indicator--995a64c0-0a8c-40b4-aad5-631f33576400", "indicator--1c0ce1d2-b16e-49ac-b790-858a9e5a8ddc", "indicator--121ad4cf-cb0f-4142-8028-81a145f30e3a", "indicator--a0cceea8-1138-4f8b-8b68-53c38bd348b7", "indicator--33d6bb15-8e6a-4b24-be37-6fa1c2c1823c", "indicator--b76d4c30-0f53-41b5-803a-faf8b5c2c17b", "indicator--6b48d41d-2931-4d2e-917f-5d0c8ef204f5", "indicator--f1a1ef3f-9aa1-48fb-9395-cdaed5859830", "indicator--c5c60388-c9b7-4710-80ec-08fc15908064", "indicator--1bd5cffc-21a8-421e-86b6-bfc3cdfbd0ea", "indicator--ad3aafb9-34cd-4a5c-ac9b-6c3eae4f3f8a", "indicator--3512508d-d12b-4a94-8c29-21a19dfd62b3", "indicator--22e8485d-63e6-4cb5-8c22-85df4656f61e", "indicator--8d8d94d9-cae5-4b8e-a987-1e4bdcc1db6e", "indicator--2d8b5791-fb86-440f-971c-a748fda7074d", "indicator--7f217525-5d5e-4db5-aebe-b125f6cab800", "indicator--59478eac-80de-4e4d-aeb7-8bcb38ffe91a", "indicator--1f926805-d4db-43f0-86b4-c85c1a77e7fd", "indicator--d99062fc-1fb9-4255-9e6b-01bfe188f150", "indicator--b21654ce-a79d-44cd-b856-cbf2966d46da", "indicator--8a484244-0893-43d3-8cfc-22b5fbbdf8b1", "indicator--7b3ebbca-2a97-4885-b50e-be47bd095e84", "indicator--9c5a57b5-a3c0-46f9-bea0-6428d2c7039c", "indicator--bd2ccce2-7983-4605-b366-ca76837fbc91", "indicator--4cc9f8b9-53c2-49db-96e9-ecb5676b57a2", "indicator--2fa30d22-cf96-4796-aecb-9c0a044d1192", "indicator--248145b2-794d-4f00-9da7-ecb83c250ffa", "indicator--5311056e-978f-40e1-80c4-c47aea6cb72e", "indicator--4113ee4c-547f-4dac-8334-71073d6b424e", "indicator--ead68767-d64c-4dd8-9261-e069e2eecfea", "indicator--d3963a80-b193-41a1-82db-1e36e23a68d9", "indicator--1e0fdd6f-dbad-4a24-877c-d147ada68309", "indicator--96bb382f-1cc8-40c0-a1a1-ac0cbd4e06cb", "indicator--2c12bab1-a6d1-45ac-87f3-2687ef6ce8e1", "indicator--bcccc036-e483-44d1-990d-34f41a8f711c", "indicator--697260dd-1d77-4074-acc4-05d113de59d8", "indicator--37d97b99-41af-4e50-a5bc-a3dd47a40c25", "indicator--50aeaef1-fa52-442b-83ef-85cadb33a8e9", "indicator--438ad929-195a-42be-a2e5-7bf18654c83d", "indicator--d3a74f0f-baed-4c27-aba5-19ec999c230d", "indicator--ea085f40-7fc1-4779-b374-c1d9a7834387", "indicator--293cdd06-224c-4e20-8e30-4b8a9c384359", "indicator--559dd129-63f0-4468-b33f-6ff58c9406a9", "indicator--c5e8f38c-7ef5-4dde-83bf-f0848ba5013e", "indicator--a1fe51dc-83a6-4e3a-8635-61db4c8216c2", "indicator--bc05174d-fbe4-4bfe-b9da-94602edd0c0e", "indicator--f95c0537-35e0-454f-bc87-5cf5d12f3581", "indicator--105b1527-3cfe-4d72-b74f-a20735f83fac", "indicator--8a797a85-8c39-47c3-8b2a-5bc49c9f3b94", "indicator--4c38fc37-6d84-4013-b9d2-5ce13e389893", "indicator--c91d6a62-45ec-46ba-ad2f-9ac9f39e97cd", "indicator--fc38eeb6-cc7a-4a06-a167-3ef9c853c548", "indicator--d8c19a69-d8b6-43e3-920f-c1d4a557f0c9", "indicator--43a103a2-d99a-4dfb-9c6d-e210afabf38b", "indicator--e8fb4d9a-4d41-49a5-b08d-dcf216de4715", "indicator--5b7633ca-602d-41d8-bbd8-77ca9e7e5468", "indicator--63247f10-825c-439d-a5ea-1e87db7e3b2f", "indicator--d8bdb33b-d1ae-4449-bfc4-d2b22b5875d1", "indicator--a458bd1e-1a8b-4487-aaee-667a671f574c", "indicator--14b6f082-d82e-4d7f-98d7-067f02bb3a46", "indicator--b508353b-394c-4a4d-9f78-d116c97369a1", "indicator--971af5d8-731d-4f03-9196-687c35c58ddd", "indicator--acc156ec-f65d-4e79-b436-c1ea7c79e6e6", "indicator--958b168b-5793-4e5c-9575-4e1c738fa27e", "indicator--e84f6d84-e021-4a82-ba8f-8b0d8059c5e3", "indicator--facb1abb-3677-4fef-8c3d-c62eda0ffc3f", "indicator--543d314a-495e-42d5-aec0-d77adb934208", "indicator--4a449b28-1be6-4fd0-acbf-e5052ed3a586", "indicator--870f5f15-08bc-4707-b403-5d7bd49f999b", "indicator--8d7f05fa-d837-456c-b5ca-7a4afa031fe8", "indicator--bcf95832-7290-46f3-a7c8-352b4f9f2dbe", "indicator--ff533348-dc1c-4a68-abbb-b80019f514a4", "indicator--14a06141-3d37-428a-a996-816bb361e2ca", "indicator--72a39457-f28e-4bf0-ac5f-c9ff4e73bced", "indicator--e921067a-7438-4da6-8052-2dd6e9e5a683", "indicator--3f075a60-61e5-40fd-a61d-36b3ab4e90eb", "indicator--0d6aedcc-8af1-4961-b2a1-94e42743b1c4", "indicator--40331452-6c48-489f-99c1-40277c0a86ef", "indicator--7d32477f-d293-44d6-9e1f-26c67d71cf9b", "indicator--c19e75dd-4363-4e65-8c36-58134596e7fc", "indicator--4c2f8df1-9f36-41db-a740-29716297e36a", "indicator--b6c65ab2-1aaf-44d3-984c-b539ea4753cf", "indicator--7d2d494f-f251-4408-813b-f2c6e5920d60", "indicator--9113f94f-2f84-4c4d-9398-6d0861680e85", "indicator--2b847d91-5fb9-42c2-a322-8b592242f77f", "indicator--98fa0576-af3a-44d8-b399-64bf11bbbf8e", "indicator--230db436-31e9-4b58-99ab-aca19fa892fe", "indicator--2e2f7c87-7c8d-44be-859e-d513e9295aba", "indicator--3bcca0c7-fcf9-4d98-96c5-2b007babedf9", "indicator--d92560ec-87cc-4493-9876-91bb83a1f2c4", "indicator--02cca31c-00d4-4a00-b722-efe7eba1a5c1", "indicator--cb156f71-64f9-4381-ac7f-b9a7c6402861", "indicator--1663dbe2-555f-436c-8cc9-2adcbda67587", "indicator--e38ffb06-62ec-4cdd-bc27-e3b7b7a23c7e", "indicator--68a1d937-6d74-486f-8f61-368feaf0af97", "indicator--09ed22d3-c149-4f18-b5f1-e7e6854f74bf", "indicator--06015445-d1de-4ce2-a871-833949e5e967", "indicator--925a2b6a-c50d-4b38-b5e0-b84c1de4cc2a", "indicator--5b290c3a-01ae-4f3f-931f-6678f3e45cf7", "indicator--d52a29e5-8105-45ff-bea5-3f0cab3eca12", "indicator--2afe98de-de0c-4f59-9ec1-782abf936710", "indicator--a57c3e01-3c44-4925-a6c7-71d4de304b1b", "indicator--03cb925d-b012-41cb-93ba-fb9bdffb9729", "indicator--8de8c6b4-7978-473f-9b3b-e01f120ddd31", "indicator--5e8cdc43-a270-43bc-a735-e547da3fc7ec", "indicator--96c0b2e2-f2ab-4801-ba60-e37c1522fd64", "indicator--25a8131e-7e88-4c6a-8240-96e07b5c7ed1", "indicator--93b0f3e7-6bb8-4bf6-923e-55d92a645a23", "indicator--f4afed4f-ff55-47c1-95c4-289bcb77f374", "indicator--134df95c-967e-4b37-98b8-f9c85efb105e", "indicator--971883fb-d600-41a3-b05f-1297f86f0851", "indicator--8feb3372-58ac-4213-a726-921a50a31deb", "indicator--77627cee-a0fb-433c-9d42-3ec4c08c217f", "indicator--17b8155d-3f77-4322-b107-2d358d3786bd", "indicator--eb239db5-0cd4-4e6a-8275-82653734c251", "indicator--d63be1d1-1527-47bb-aac2-c37e774670d8", "indicator--6fc4703d-88ec-46bf-96d7-10264acd8717", "indicator--c7a6ec36-21b9-4322-b814-5156dae9ef14", "indicator--69a0a116-72be-446a-bfa8-314c51648963", "indicator--d22d9310-f5ff-4bc6-8330-c98fb998e626", "indicator--cb56877f-4155-46bd-89eb-5deb533ad1c9", "indicator--6a94a6d5-2c1b-4588-9259-3114b4e2972e", "indicator--a161bfd2-1b49-40d0-abe4-9d109b08c6e2", "indicator--e680e907-c399-4da4-9f15-9486d9afb568", "indicator--9613d426-e170-4a95-8db9-2fbce3b4e074", "indicator--149bba78-a4f6-43c3-9999-d3ceafe0e68d", "indicator--06c2f740-fbb2-4fe8-a358-a465d91196ca", "indicator--93bc7299-9c70-4f56-8366-3d7a10eae938", "indicator--4cd628d2-fa03-4d5d-a8cd-13e3d4daa0a1", "indicator--06111d2b-f1c9-4689-9045-663026ef71bd", "indicator--1e258218-7794-4fd3-8edc-f56c392d1326", "indicator--9426fa94-5a1a-46e6-ba1d-337a7adfd4c6", "indicator--b6e64403-8429-458b-9adf-75d3398179b9", "indicator--a262023c-4897-48f6-a1da-9eb099aeadef", "indicator--3fd4ae94-6ea7-45fe-bb60-8c52b61ad7f5", "indicator--656a55b3-2985-4481-b82d-d088801f1b8e", "indicator--322b2949-0d40-463d-8873-3f60b170f1ae", "indicator--481f5ace-c354-43d8-9d8f-c9e7f04b0c7c", "indicator--1fbabd18-4208-485f-bfbe-6640a6b1b98b", "indicator--a3bb19b5-3b0a-4658-a7ff-221233bd50be", "indicator--5dc58a92-f2dd-4f32-b670-72bc6ac9e2cd", "indicator--9b599797-a88f-4975-a77d-ecb1eaf79c3a", "indicator--3b5635b0-d4c2-46e9-9442-ceb9af326ce2", "indicator--edbd7be9-88eb-4191-9638-a16b5b35e68b", "indicator--7d21dd64-418c-4737-ae58-8dc7c33e86d0", "indicator--c37fc0b0-3906-484e-a57b-85975713e1d4", "indicator--6eb9eb6c-daff-42c9-9959-21ff657e6651", "indicator--606fb21f-9a84-4c21-964e-634fbf0d52af", "indicator--4d4434de-4ca6-4722-998a-a5781319be66", "indicator--9afda6b1-037e-4654-a505-4d1f5685b069", "indicator--692ee1c6-cfd8-40a7-9022-4b91d29d0593", "indicator--fbf96478-8f96-4028-8bc7-352f4bc8b98b", "indicator--35ed1543-c9dd-4a94-b849-49c86a20de10", "indicator--1148b22c-9f49-4322-af8e-2a0fa86a161f", "indicator--337a1038-4b09-4601-903e-8ef2c890ea9e", "indicator--737d637c-2bec-4c55-9b51-3b14c8bd35da", "indicator--14b91111-4f53-4f1a-abef-8851cadc7a6a", "indicator--b230ea61-113a-491b-9e93-d0a8104dd8ef", "indicator--03d980f5-0260-46dd-82dd-35df1a7ff3da", "indicator--2ce02da3-fe0d-4368-b699-221c95368402", "indicator--771f0e7c-aa0d-4a22-a010-39243533dad5", "indicator--9231813e-2209-45db-9229-5169b0f4ec3f", "indicator--7c13237b-4eb0-4290-a349-a1fd13194a4a", "indicator--51117663-fd87-4a96-b7fd-543edfd814a8", "indicator--7c7adbd3-b8c5-4b9e-8cf6-ac61e6817a51", "indicator--723f3383-b790-42a5-88b1-ccd06adfbbe9", "indicator--c5bc0a1b-0beb-4398-bd48-8ce3d672d6ec", "indicator--c67fc98a-9b4e-43e6-baa0-20616d05f440", "indicator--295cdc04-3ac1-4c64-9053-143d13b9cce2", "indicator--c7636bbf-7cef-45eb-9c0c-1800726b8690", "indicator--f64ee25e-fd6e-4cbb-8745-aa242727136d", "indicator--e7480e21-a24e-4578-9c33-e28290b9ec54", "indicator--cf0b2c5e-f2f2-41da-99a1-35d3428b05c5", "indicator--628193ac-c3ab-4c73-a2a4-7584bdbe218a", "indicator--3c7284c8-1dc2-4bc1-bd14-d5dcbee1a54e", "indicator--a3b35164-306b-43ce-b198-f7d2cb3d79f2", "indicator--02a13a3d-24bb-4dc4-b38f-7b0593b77193", "indicator--d0dd47f9-a7ca-4ff3-b547-788f80b3bc93", "indicator--c5560cea-3323-457e-b529-9c7aafc1fa38", "indicator--2172fd20-9eb1-4fb3-ba64-c422f4469171", "indicator--92850f3e-3955-4362-b60b-258aa16bcfd0", "indicator--68d3b9fe-3b24-4b89-a394-70a536007b5f", "indicator--07f6024b-2f89-4a14-88c2-b118514d0af4", "indicator--2fdb8378-a4e0-4065-975a-836c5a5b51f4", "indicator--4d129f57-6db8-4202-8227-f112540829d8", "indicator--f3edbb4d-9e3b-4113-88c2-d5a5f5f6ff60", "indicator--9e4fe5b5-6be4-45cb-994f-2d35fac81955", "indicator--f0119697-5492-4410-aa95-bbb6e0901957", "indicator--bd8b98e7-66d3-4420-bd5a-031cbbd5300f", "indicator--936191ae-9188-4142-a4cd-858c0083dbef", "indicator--8c277b1b-c870-46de-a655-8ac7a10125fc", "indicator--8082f8d4-4d0b-41c3-83d3-18407abe4940", "indicator--3135a469-26db-468c-9877-636058096736", "indicator--6529281f-22d3-4d35-9a9e-99fcec1c8f98", "indicator--e3a5e788-315a-4bdf-b253-37f97cfa45ca", "indicator--8b41688c-1be5-4976-b4d0-c610ac99ca0a", "indicator--ca9b580a-9c01-472d-8798-84f392561f38", "indicator--eb8b8b23-ff9a-4ed6-a006-b035f36721a7", "indicator--f272b7f1-d5ba-4469-b969-3774c2012dfb", "indicator--9a40c897-8565-40fb-a3e7-d26f07269569", "indicator--dc83deb6-dccf-4746-bb67-cabe52d404f4", "indicator--e4b7344b-d9e6-4bcb-be0d-bc22f7675982", "indicator--d2a78595-dc50-4e35-a93a-dbaf39ab4949", "indicator--1085f95c-068f-4f92-9836-551e6f7ad848", "indicator--d8ed01bc-9af3-4f0b-92c8-f678c93b4958", "indicator--e47c8d06-097b-4ccb-9ec3-b5f39f68c058", "indicator--5d8d9b98-52a5-4e38-8127-c091fd2b1e08", "indicator--14e78630-9779-44dc-aca7-75b6f53632d0", "indicator--7f763b85-8348-4f84-9ec5-7e2f62111872", "indicator--2056ed3a-38ac-4bd5-b83c-47c33a91c979", "indicator--c8ea4c5b-19f5-4969-9f8c-6350fa32e85f", "indicator--837a9027-fa5a-46d9-8c49-85d3bd48dee2", "indicator--e520c989-3d3b-4dd2-8cb6-58020522e780", "indicator--779b1595-8850-4011-9cfe-0d0ca996c81e", "indicator--fa068d47-c959-4c0f-ae71-45acac32d6e7", "indicator--0aafdca9-0795-4af3-bf14-c7fbf988dda2", "indicator--e63db6f6-94c7-43a3-b143-454f59db288d", "indicator--a067cd91-d1bd-4d5f-a0a2-8ffe85fcea96", "indicator--9eb63b72-b724-44aa-b13c-ddfb7b9df61e", "indicator--9719f40e-6eb9-4f2f-bed1-329d53019464", "indicator--83854e8a-0889-4ffe-8e70-b9c603142ca8", "indicator--052b8e3e-d76c-4b24-80fb-c1eb76579243", "indicator--7dec8b8b-178e-4dbf-9395-8a22f3853a79", "indicator--6d938733-eae9-481b-a4ce-343911923f01", "indicator--63a36ccc-6c0c-49d4-8022-55c08ca2baa5", "indicator--5f736810-480e-4cf5-aedb-6f548b0b1134", "indicator--0026237c-311e-4182-b5e5-b54fccf1bd17", "indicator--abe2bfe8-869b-4461-a039-1ddf0c4cd359", "indicator--d153c6ae-b8b4-4681-9361-599ad1abdc7a", "indicator--5638a98b-01df-4c7c-ab32-9ec687dec38c", "indicator--52f5ad3f-9171-47a0-b4ec-66b3e443bfe2", "indicator--0a5d7455-8ccb-47f6-ba49-93b4f5ac72ea", "indicator--f544a023-b6f7-4382-932f-03b7bfba86b1", "indicator--d821e5bc-1009-455b-ae0e-103fde4a56b8", "indicator--00c7aef9-f5de-4b90-a9a9-3d4a9163e025", "indicator--50d15727-da11-4ec4-8eee-48d91917018e", "indicator--eee03b28-58fb-4251-af5a-5072cff879a9", "indicator--0ea9e666-32d5-491c-919c-49ff3fa68760", "indicator--feb82b18-4598-4026-998b-49692340946e", "indicator--d8345330-750f-4c49-9a6d-44bdc87745ff", "indicator--e5fe47bb-5c57-4896-a53c-4587e7b533f8", "indicator--508bc9a8-875a-4eb5-be0d-bc156ecd5613", "indicator--2d12ff3b-0e8c-475e-87c5-80c1e673bd38", "indicator--9a3d4045-319f-4b57-afa3-952bbfdcfb53", "indicator--840d96d8-23b5-4735-95a5-6d605061d232", "indicator--e2f3b155-5b72-4b98-a50c-dd1084953dd2", "indicator--db9be75a-7113-4996-9038-dc456ef85d54", "indicator--b5de9120-3dcb-4c7b-bbad-5bcc67e4ff7d", "indicator--63aea80f-ea8d-4536-a38d-62ad6dea6543", "indicator--10d8f950-c63c-4597-b4d3-39c8cfc1809f", "indicator--dba8d6f6-52a3-4c08-99d0-e144eb73473f", "indicator--83daff4c-2093-4231-8550-78a81d09f264", "indicator--fbc62623-74cb-448c-9084-201a6f94fdf5", "indicator--c88b88d6-61b1-4879-9aa6-c1959919d495", "indicator--635d05df-b8f8-47c9-aaa0-fa1ed5ac2463", "indicator--f11eba81-052d-4684-a680-5784d5cc6fc1", "indicator--58ce7c37-6720-4985-94af-766714b2537c", "indicator--3f4645ef-ed81-4203-a4b0-2d5f3ec230b3", "indicator--d4d96059-a247-4b66-a3a8-212facc38f18", "indicator--7827a153-0385-4534-979f-d135bf34ddfb", "indicator--325e10c4-f56d-4509-890e-2a853ba19d68", "indicator--546f48d3-1a13-4ef8-8340-c4825f8a700b", "indicator--fb29d3dc-8dc9-4d5d-aaa1-a9584e08d7c6", "indicator--33b5dc82-0740-4273-88ab-5004d5477bab", "indicator--9bc65a68-63d9-4b6f-9b09-e91466bbd29e", "indicator--712e601b-8704-479f-a406-47fd39a4df2a", "indicator--30db2cff-4d7a-49e0-bf30-99a1b5d778be", "indicator--e32f9829-2e15-4802-a1dc-8b8cbe0604f0", "indicator--d7916c7b-e4ec-45c8-8de1-a74dfd3e1f2f", "indicator--02b46eb2-08e4-4ff8-aa83-6de0d36daadc", "indicator--8aa3f3ca-a13c-4833-826e-adcfb08abb34", "indicator--2521f5da-6c2c-4ef8-abed-5626f52def17", "indicator--850eb8eb-19aa-4b06-af75-54acdf81a9c6", "indicator--b3538d2a-b902-4cf3-96c2-37f4bfff8e6e", "indicator--d40c7617-874f-4619-a18c-e8fa4586369d", "indicator--d72999e3-3cfe-4494-94bb-15ef9c62bf04", "indicator--852b6210-d86b-4021-b91d-340720799ec1", "indicator--fecb3558-a36c-41b0-9daa-102e0d24e869", "indicator--45331235-c587-4b1c-b0e0-d947962e9539", "indicator--68a38cd0-827a-4d31-b755-99e7ecf84c38", "indicator--1aaa603f-9c6f-4bac-8521-d2eb0cd106af", "indicator--d3549103-d411-47fa-a967-4ae46363e95f", "indicator--36a59518-a536-4cae-a9b3-67689daac752", "indicator--f9ea27c1-7223-4949-81a9-1b7ec75f5f23", "indicator--622a9493-1aa6-4d2b-a589-5be1639e20a5", "indicator--bdee08e0-acbf-40ea-a283-671747d31625", "indicator--dd7f59f4-d6ea-429b-a33e-79c65c21e847", "indicator--93ac9df5-803f-4828-8dbb-a3148d502124", "indicator--ae7f2e55-dba7-4a99-97e1-e564229aa30d", "indicator--352b5ff1-ef4d-4403-8ed7-429715d5873c", "indicator--f057cad6-04bb-498d-a17a-7a0f3e9dec91", "indicator--63f46c80-181c-4714-a7f1-f8b24d3e560b", "indicator--881f3918-505a-41aa-b92f-201163077fe0", "indicator--c5d4fb10-87e5-4dc7-b634-c366b43c3e3e", "indicator--ed4b436c-2e62-4cde-b025-10049e522802", "indicator--582e3ad3-2592-46fd-abc7-a37fdd7895cb", "indicator--286ea5a3-897a-4df8-8148-899662c2578c", "indicator--962e1de1-089b-44f5-b859-d3323d4e7b64", "indicator--2f8658a3-03d2-42a4-a131-9878fe1bea26", "indicator--85249fed-f85f-4857-b277-e4a4891890b7", "indicator--2bbaa242-a750-4b3d-9867-6b1dfc65563a", "indicator--439626c9-599f-4c80-b785-f8579cc73cc3", "indicator--c40e22fd-3b51-42d2-ab83-4b8e82b47ce8", "indicator--f4666b98-2f80-48a2-83b3-9c3e5eca6c39", "indicator--21db1cb4-68e9-47ed-a810-6d09a60fbdce", "indicator--6d0c0c87-d4ed-4e01-ac51-1abc62dd6428", "indicator--5b210dde-f329-4f8f-9536-1df8a0634e32", "indicator--0dd170cd-01dc-43b0-8a9d-6ff41297d6b4", "indicator--e397795a-69b0-4dc6-b8b2-b287e7266308", "indicator--9adb9364-80b2-464d-907f-7da422f549e5", "indicator--39b9fe8b-4cc7-409d-88ab-e40875c7f8e1", "indicator--8a63d979-11c7-4061-a2c1-a95367120fb1", "indicator--f7873ae2-c1b2-4d11-8839-bc93e94dfa11", "indicator--ce9c9495-1663-4c91-839b-97244f9063fd", "indicator--9450b7fc-db20-4617-918c-2d6b4eea1314", "indicator--592deb6d-541d-47a0-90c4-14e0cba444d6", "indicator--32c78700-98e6-497d-8d1d-161f42290b82", "indicator--82e3acf0-d0bd-414e-8530-4a91140d8d99", "indicator--7ccb8f4c-0720-432d-bef1-245f75fced64", "indicator--0bfa9fb4-d40a-449e-99b6-c4171e6f2dcc", "indicator--c3555ee1-0809-45aa-9f9d-bbfe1a9f340a", "indicator--f0b87859-19a9-46e5-8ce7-f158d007af0b", "indicator--3f2e70c1-a1af-4c0f-98af-a02ada8cd18f", "indicator--26465d7b-600a-4e26-9391-3c7e95d26fe7", "indicator--d3044649-e0eb-4d17-bad9-f7fbb95c9856", "indicator--a576bc98-ded8-4ee9-b3f8-91fdc6aedd8e", "indicator--83c41306-7cce-4546-a6ac-68c10fbdb1c7", "indicator--ade0818d-361b-41a1-85f7-1d263eb05253", "indicator--87acb68b-76ff-4374-850b-77cc2be1a43a", "indicator--ac1fbc23-1439-430e-9f3e-90c83276107c", "indicator--df9f9c53-9828-41d8-883e-1c05e313f1ff", "indicator--e0d9f088-5556-4fd2-84f0-81e0bcd6bb0e", "indicator--4dcac4bb-80ef-4594-81fc-858a961f1e79", "indicator--1a45a53c-30d6-4bcc-92f6-1ae5914f0bcc", "indicator--2f64c0e5-d329-4663-9693-3f181443f0a7", "indicator--4ef09d1a-b154-4cc4-a91a-efddd7ef8a65", "indicator--7e6b8d98-2ffc-4711-917b-e6eec504f367", "indicator--2aadb69f-afcd-446b-b4eb-c3db10031723", "indicator--5cd70264-c0c2-41fb-a76f-b6be7fc5c7c7", "indicator--66b32a65-1e8b-4b3c-8f1e-6ba77ea156c1", "indicator--1fcf1b5f-562a-4c62-adf3-b1182a4126a4", "indicator--badb24a9-7ca7-4183-8811-dca088868132", "indicator--7f9de293-790a-4b9a-8673-ee4f7498a4a4", "indicator--bd282454-3e1d-441d-afc7-5effad729b66", "indicator--a3682c38-4d0c-430b-ae95-5bd30f0cdb05", "indicator--7b49aada-7d7d-456f-82d6-c4f0fd5aaca4", "indicator--980ff2ee-651f-4847-8416-135e91244b19", "indicator--f25058b3-7f9a-45b4-bfde-66739bab8410", "indicator--acda41cb-b860-48a0-a897-05834e7174d7", "indicator--0fb7bc5e-ddb4-4eee-80bb-15e10d7d40bb", "indicator--47ca80ef-3459-4e4b-88e6-0a3bc3797bbb", "indicator--91d17423-2977-4dca-9e47-ff45f82b6c45", "indicator--f278709a-3f1e-4373-aede-36112a9fdf44", "indicator--89917256-cae9-4da6-bc0f-29c2ecb90643", "indicator--808eae2f-66d6-44bf-ac5f-f11430318b9c", "indicator--1bd37055-6f3e-4dc0-847c-477cf5b7d6d0", "indicator--5036b766-21ee-4e84-97df-6d0d79811e18", "indicator--84aea28a-fc0a-471a-9dd1-59934b0c5852", "indicator--8e07dc33-4e04-463a-857a-92804c360e2e", "indicator--1060c7fa-ed89-4443-8021-cd09c07e8f23", "indicator--05b9ef05-4f93-4987-a8c0-4066ce118343", "indicator--c2bc7e1d-b46e-4ea2-ae82-63f7c5e6bbd5", "indicator--9aa0828b-932d-45ed-ab0a-510da87c0f87", "indicator--90519595-4d9f-4af4-8ebc-4d2c9c499eba", "indicator--d6aa52c3-8f1d-448e-9fa7-e7befa7e6232", "indicator--2dccabb1-ea62-45ca-8e1b-7d1553f09446", "indicator--eb0ec398-d770-4ee6-982f-b1057ab739e4", "indicator--107eaf9a-4df9-4139-889a-4ddd694c889a", "indicator--fc6fab76-d105-468e-a3d3-f8c73a7af122", "indicator--53e1267d-a3a5-4347-9868-845dc6c43366", "indicator--24a3b4b6-e077-4446-a1e5-43edd38db4e0", "indicator--fbcf6b0b-8cbf-4c01-967c-5d3a8e33fa3c", "indicator--3b385222-c4ba-453f-add2-0f084332818a", "indicator--5ff07feb-ad94-4c51-8a13-d1cbfb99bd8d", "indicator--bafeb0d2-01b8-4747-b840-3f61609845a6", "indicator--9d4c6557-e37a-49f8-991f-22c093796611", "indicator--fe5ef7bf-a8a7-479e-ba5f-52823b6ce8f2", "indicator--6f6c7c90-83dd-4f8f-8803-dcbf99d990dd", "indicator--439b6303-57e7-45f4-b76b-597344919e03", "indicator--93b1c677-f905-47f2-be35-14f3bf448eb7", "indicator--cdafa78f-2d1f-495d-a8d0-834156bcfc0d", "indicator--a2a61a5e-9c3a-472c-81d6-e9c7e99a69e8", "indicator--bf6186bf-bc8f-41ea-aeae-26f868290ca4", "indicator--44558cf3-8516-47dc-ba58-a08554e50daa", "indicator--b182c85b-4da6-4c41-b439-f70703061988", "indicator--6fe5950f-9780-4b42-b2bd-4b42a30443a9", "indicator--72ffc794-035f-42c7-8ea0-c07166681bda", "indicator--6668272c-39ab-4e1a-ab9a-ed58d8ae3eca", "indicator--fe9320b0-d820-4e12-85c7-9ecc181ba17c", "indicator--d042a7c7-6b03-4417-a539-348d6dcdfdb5", "indicator--7067585f-ecfb-4121-8283-58e7f7910a78", "indicator--76337978-2687-4c19-a91e-ca01941b538d", "indicator--a7e9c2fb-94b1-4836-b32c-09c36f2ef093", "indicator--ccdc9dc5-91b7-4833-942c-9f40900a84f1", "indicator--933eb70a-ab0a-4b9c-8e28-d28144543ee8", "indicator--5c024ada-8b64-47e8-881a-65043f45231a", "indicator--ceb93868-5141-475b-aacd-cf3109a0f360", "indicator--8bc281d4-3615-468a-8644-8d2b3ca60833", "indicator--cc560db2-f8ac-4782-b5d4-5d5a9b369ddc", "indicator--cddec9b4-251c-4251-b3ad-1fea854c0c59", "indicator--30ec24f1-ce18-469d-805f-dfef49ccdc54", "indicator--8ff4cfc9-5219-4462-8d21-04197a267cfe", "indicator--fe4a7c65-7134-4224-ae99-d24ae851dc5d", "indicator--2b8e91cf-dd09-4411-978c-4bb29b2de8b8", "indicator--8dc58ab4-474a-45d9-bf89-60f3c7014b8b", "indicator--64011e87-a5de-49bf-b441-d86060006f4e", "indicator--e23fdf89-9b65-4629-8b5c-0c1a466e6608", "indicator--70c9e1b6-9aad-4380-8837-56a599e3ab11", "indicator--09867f0e-f8dd-4546-9e1b-c567de80398e", "indicator--d1ba4c33-ea1d-4678-8598-9756dcf39f03", "indicator--daab4d02-d705-4ba1-a670-c2a350fdb949", "indicator--d0c0c491-8fe8-4c97-a6be-2823c04ac585", "indicator--0816bc75-3d2d-434e-bf8d-af5bdaf0d396", "indicator--f4cd996e-e0a2-4ac7-8d57-e32931977ca4", "indicator--f10ef2bb-5e98-4ba3-9db5-3b6bb93341a9", "indicator--0158dca3-4120-4ce9-a849-1837762bc1fc", "indicator--4792267e-7787-4891-bebb-484e076d3d5b", "indicator--81cdbece-64f6-4179-bbc2-607d5cc6db7b", "indicator--62a94851-114c-45ae-908c-067665d3a0e3", "indicator--314b9040-3b04-4595-b31c-a2dbbe3d1c3f", "indicator--6c7de57f-a8c1-4040-affe-19e58af2cb17", "indicator--803373d6-3da1-446d-badd-59db2d1a3034", "indicator--90a59622-9256-415a-b541-d5261dc70d07", "indicator--4f85718a-2d2c-4c51-be01-3e7aa167928c", "indicator--51477b62-f374-41ee-ae5c-e1557cf1fa5b", "indicator--0f6a2d23-211c-418a-9480-8b3c122b0bd4", "indicator--3d5498c2-c108-4800-80e4-eb24456baecf", "indicator--ee39ddc7-f43b-4a14-b0ed-f4be182f7682", "indicator--2a1604f7-84da-417b-955e-8151221dfa34", "indicator--715d42d5-8348-4035-a34f-de4b6e47b070", "indicator--d1acc04c-deb1-474c-9a07-3d96fce88d95", "indicator--13de28a1-f3c3-43e4-9a07-00111207cc46", "indicator--c344d328-92f7-483a-a3d8-9ae128005b1c", "indicator--31e39ef4-a74c-48a2-a66a-aab10ef200d3", "indicator--b72842af-02a9-49d6-82e8-dc91d5413772", "indicator--180da26d-5cc0-425e-8334-75baa1833e1c", "indicator--9f862666-84f9-4708-b1f7-4aaafdc59b8f", "indicator--41230bb6-46de-4fd8-8ca0-f19ccc020568", "indicator--fdbe145e-f76b-4a4b-b21e-822ac01244f1", "indicator--236a50ca-d36c-43b2-aeef-796ff5c7f5b4", "indicator--410eb209-8a54-4c65-a2a8-b4e96c99578d", "indicator--f6c2db9b-f78c-4130-894a-aaf9e2010b5c", "indicator--263be5d2-3f72-4980-a5eb-2d8f13ebd998", "indicator--147cefda-2e50-4990-9cbb-83d45d35edb3", "indicator--12ab825b-6fe6-41e7-8b30-da94a16848db", "indicator--d65c34f9-1241-4e94-b928-164e9bbe26af", "indicator--c18b5c07-96aa-444b-87cf-c1442545b2e9", "indicator--e4c32c6b-dae0-4c38-bc6a-d9627c0be413", "indicator--3b03b3a7-5818-418e-8038-6215ca0714a3", "indicator--9c010006-986b-4db9-819f-ed37820bfb86", "indicator--4eae93c6-c785-4769-aec7-b63155429a16", "indicator--737aa3aa-a9ba-4996-9414-d1340713e33a", "indicator--ca28f660-e7b8-46f6-87e8-19415d271052", "indicator--f5c6272d-2904-4ea6-a7b0-affc27f3456d", "indicator--4e875ea7-d33d-404f-b0fc-fe3e451a1b33", "indicator--d916b2ef-9cdd-4b83-afbd-9895bea80daa", "indicator--108ca366-2504-4919-9da6-fe88eea3e85a", "indicator--67424ea5-d4a8-4736-9340-a754ca84b473", "indicator--6cb7a218-388b-4b71-9e05-00c54674439d", "indicator--eec97eb3-631b-4cc7-b4f7-f1d2f0487e2c", "indicator--a3165541-3ff7-4641-bec0-9e5b51a6a101", "indicator--17bd56d7-f1ae-4a9d-a71c-6be5242ec877", "indicator--6c4d69a9-c734-4300-8ec9-8af959efb316", "indicator--61b38862-cf63-462e-8235-d7a2a1426eac", "indicator--1b4af467-d241-478b-9900-f0536d6dd93b", "indicator--ee0c5cbb-9811-4528-960d-45657e2d14c7", "indicator--f5cd9956-9a92-4452-894c-82b88f026bce", "indicator--a0efefa7-17f1-455b-be1f-9c4481e60fd6", "indicator--c4c83486-cb84-459a-9b7a-ea1d41509361", "indicator--f9f7c069-e456-422a-ae5a-c25cc5583786", "indicator--3cb58138-0677-4dd4-b2d2-e529a9067076", "indicator--f4682a54-6bbb-4735-ace1-fb1e5e664980", "indicator--fff57b18-bf11-4d3c-8c86-1b9e676f67b3", "indicator--8f0597ab-91f1-45df-ad8d-bafc0b6aec50", "indicator--9071a696-5de3-4b13-b7ad-e3590ccfa5f9", "indicator--7a3e4723-3c4f-4267-86ae-78a781c4988c", "indicator--9929a1f9-ec54-4dbf-97b5-7971d1219d8b", "indicator--ccc95b83-b2ae-41c5-8e9c-649ed84e188d", "indicator--eeebc42c-6b64-4cbb-9512-88e37bc5b794", "indicator--494c948f-2335-4b61-8a7f-f49049926824", "indicator--9bc1c8c7-3d9a-4ed6-bf19-a439176cc175", "indicator--120040a7-5e9c-49b4-9c46-67b4bd77da84", "indicator--55b8d00d-1fc5-4f04-b595-d2e1d0678bc4", "indicator--d992bbc6-9801-4f29-8ad5-7d32c12a76f4", "indicator--1742c319-ddfc-431c-9831-0fcc3eb4a6ed", "indicator--c4e6d883-330e-4eb8-b5c7-ec62c176534a", "indicator--ca9b31ba-afff-45c8-b020-2166e6cd7e76", "indicator--aa306947-63fe-4d4d-9c96-d46ec2512f64", "indicator--8912360e-4fcf-4642-9b4e-fd81755c97d5", "indicator--b09886c8-9109-4cb2-9839-2f468b2cc96d", "indicator--75b4a657-b6b5-4558-8f7d-0d422f77f59a", "indicator--292d803a-eeeb-4f8a-88cc-1f1fd3b6e8c8", "indicator--df812cd5-7092-4a4c-a05c-9c93aa706bc9", "indicator--5d1d5a7a-17eb-42c2-a16f-4c5f7375b893", "indicator--c2a73d45-9ec4-44cf-bdcc-e95518ca06af", "indicator--de15d720-a237-48a3-9d74-47226ee214d9", "indicator--66c87b33-fa94-4ade-92ce-6564b1d319ac", "indicator--0682bdc5-05d8-4c7d-a559-be02855491b8", "indicator--987a4588-3113-4c07-9d8b-eb082ab165bf", "indicator--1d78fbaf-b885-4632-97be-b747eb7f676a", "indicator--86ff2a52-f177-4c85-949a-d693d9338060", "indicator--164879eb-9e47-4e3c-9d1d-23af04d02092", "indicator--82ed21b5-45f9-459a-8574-5db3312b2f2a", "indicator--71b91795-87f4-493d-823f-4f5318509b2d", "indicator--2973f454-5eeb-4bb3-a529-d30d37baa7b2", "indicator--d8478324-0182-493b-be50-127fc7b5f5c8", "indicator--49e5264b-19e1-4e6a-bbb7-73c8fb890fa9", "indicator--bdc8720a-279a-4b77-88cd-450a22499cd0", "indicator--32b98ab2-2b37-4e3e-a011-ca02dbb793d1", "indicator--330745c7-b6f4-47d7-a536-a073773e6d84", "indicator--b552f2ad-9e50-407d-a096-fcfac6737cee", "indicator--a4dd0797-3f72-494d-90a0-f119d46d3db4", "indicator--ee6aeb38-d768-48a4-ab37-1571dd546ea2", "indicator--93e45a68-48c9-4c2d-8718-cac6dc9527e2", "indicator--025d4d8a-1fbc-4bd7-aa8f-9a0e383c3b53", "indicator--08f4cac3-fa50-4723-bf74-219a63cd374b", "indicator--a90cea41-7f5b-4592-99ba-53598bc3b360", "indicator--882eec0c-b16b-4893-94dc-9deffd709fbd", "indicator--c9546cd7-25f1-4d1b-a3f2-ae6f43b17623", "indicator--76bc0b5a-5258-4f4b-8762-2d07505fce45", "indicator--c372e4dc-4c40-4098-96e4-933bdf960234", "indicator--430a3697-2397-4d15-9a9f-5f803dce144d", "indicator--ee4ee041-8533-482c-9709-422dc4ad3b1e", "indicator--cc2f6a72-2ceb-4c31-abcf-dd9df7658eff", "indicator--83cdcec5-4e3b-4e7c-9f49-2ad554fa3119", "indicator--e20eaeea-78f4-4270-8602-7512bb9558b7", "indicator--e5be1b2b-fb01-4a87-ad16-9efffd2ac903", "indicator--b93083d7-a12f-4515-aec4-e5f352543857", "indicator--0f1a5dd5-25b1-4c09-9abe-f3e1bc851b1b", "indicator--48e48749-4e92-468d-8e0c-82a514100af8", "indicator--7322f7d5-b59f-47eb-976d-baa549723bf3", "indicator--28bbf73e-b4af-459e-9188-49046ef47392", "indicator--f24050da-4f07-4d68-8c4b-399492c762ad", "indicator--f1f2f035-6968-492b-b4d1-2984374cae22", "indicator--e766aa25-b62b-4645-ba48-685461b27295", "indicator--c9fbe654-2348-42f2-b610-609d283a4279", "indicator--7365df30-7600-4243-a56c-3009b1eaffcc", "indicator--5e25b31b-ebc1-4918-92cf-3db7eee8a546", "indicator--fcb4263e-7870-47f6-9089-2106209e5e35", "indicator--fb2d9840-f574-4bec-b1a7-9e092dc4a61f", "indicator--7092ed44-3154-4f9a-bccc-a2bbea02f23f", "indicator--51fa89e1-a57a-4f8c-81ca-649ade3533e8", "indicator--b97bd410-4bc9-466a-bfc6-830d09517052", "indicator--49fe30df-4673-45e7-8e21-32f261bce9b2", "indicator--fe29d330-788b-4d03-88ff-94d7309253b3", "indicator--7848af6c-9a55-4ff0-bfcc-ae932fc37dcb", "indicator--b1bd7f34-63f1-49a8-84eb-d3bc286f506e", "indicator--c5fb0792-51ad-4a9c-8d87-ef79a7a41c53", "indicator--49a9430c-7a59-4901-a9d3-63a841f201ec", "indicator--99faa02e-7bfc-435f-9fb0-c0ccb71bb76b", "indicator--e70933ee-83d4-43e2-ae0a-df56cde94a6d", "indicator--3cd4b5e4-8884-4e7b-9d37-4f8d584a5cae", "indicator--802a7806-6959-4683-a004-98bf1228e647", "indicator--d708004a-2112-4784-80eb-00da46f25198", "indicator--f3a8663a-a2d5-410c-adb2-e98307ef0bab", "indicator--22d3ca78-ee9f-4b5c-a2bf-0688932e0a7a", "indicator--32bc75b2-8e27-4c92-b6b1-a42ab06c85e3", "indicator--5e826be5-4115-4391-b125-9a1d75c465c9", "indicator--c0cb6623-073b-4035-9d61-b561b47c037b", "indicator--1136d07e-ca84-4776-8c16-6c592056e217", "indicator--cfa43b9c-2ab6-465d-b681-4bccf93d9b59", "indicator--2ec72d3c-417b-48ac-9a3f-7335acbba6f3", "indicator--98108fe6-d8ac-41c7-b203-065cd1b3427b", "indicator--504076ed-fd78-4866-8b9c-37ed4e95591d", "indicator--62ff101a-a55e-4f87-a7a6-808300231a14", "indicator--05f10ac9-f9fb-46f9-a2cd-1b8e4b3e7620", "indicator--77134067-6f2b-4586-960d-f128535174c5", "indicator--07615c46-e231-46f2-b800-bf21e34d043f", "indicator--64d9535a-e512-473c-a83d-0976128adc78", "indicator--af3162db-c17f-40d8-a395-24d32461ffb3", "indicator--6b542671-7c99-400f-acf4-dc4d9e62d80c", "indicator--76e7b8a3-1b3a-4d47-b7c4-4f365c0f71cb", "indicator--d6fbf221-b116-4865-b8a8-e6656751fb89", "indicator--57850bc9-09f4-4cd6-aa8d-a9c64fa2c4a7", "indicator--61dededd-59c8-4271-8a36-2b3593d8a52a", "indicator--86eb17a5-77b7-45f9-957a-4a6ef832f56a", "indicator--6f42ae73-82fa-464e-8ad8-0f3f00345b5f", "indicator--54593630-1b51-43ac-b7f5-759671e3dd14", "indicator--b0200cf4-e71c-4c8c-afbc-ffafa674c0b7", "indicator--588f8e00-c669-437e-8035-04da343c7963", "indicator--018a1a0d-39c9-4ff3-bae0-17c356625493", "indicator--07be5d81-9a37-4d9c-a463-a2f1a7a23059", "indicator--052a7313-3b7c-4f9a-8951-909c9decdceb", "indicator--8522d785-276a-431e-b915-79281964ca65", "indicator--1dc5bc94-9e6a-4435-a7ef-79cc7b8cd4e7", "indicator--187ecaac-16fa-4079-968d-6864435fe917", "indicator--0def017d-c1a9-4d12-8be0-3add0f4c445a", "indicator--f9b12f89-a6a4-4fb6-9bae-213bbae3ccf5", "indicator--97d875da-9165-4dfd-9d59-6103ccb3836f", "indicator--662116f0-cdad-4b63-b05a-a72f440e127f", "indicator--1758dbfb-6afe-45eb-ac3d-33c43dc5b5aa", "indicator--7fe35744-f0e7-4988-9116-30780c566660", "indicator--2315312b-63d0-429a-bdb0-b03aa1283a25", "indicator--3554af9e-8a63-4d7e-858c-4f6ef3efdb67", "indicator--560df764-5d1f-4cc8-bba0-a3466982234f", "indicator--460247fe-6e4c-4eef-b6e4-8d1cca6d18ee", "indicator--45b03e9f-2463-4970-9b18-98e26642da7d", "indicator--8a8da866-fab9-41cb-bfc0-ce8b2d7bbdd5", "indicator--7cb5c4db-7c6d-400c-b0f0-41c40667a58d", "indicator--686a4716-28e7-455f-addb-8e0da6bac105", "indicator--2164ad8b-93b5-4a04-8ac6-5389312f04f5", "indicator--1f041113-1a9b-42b1-9648-42ee8d817913", "indicator--8c04264b-6ee4-4f4f-93ec-f641867cf9d6", "indicator--cf9283bc-f8be-47b5-bcee-912f7de45780", "indicator--bf74777b-edb2-4faf-ae28-c77b2ad93d60", "indicator--f1770949-a2b6-49eb-8ed7-7300765e9607", "indicator--2b3c2b88-30a0-44fd-bdde-1100767db4c5", "indicator--fe07807a-e927-4f5d-bae2-7e8a34f815c3", "indicator--6c403fcd-1133-4bdc-97af-7af056857643", "indicator--f70e0d99-c602-408e-9a96-326f50890554", "indicator--2ba11f89-9f49-473c-93bf-7d3f94ba6308", "indicator--d98b2cf2-b331-4ca3-adff-f86e95aea505", "indicator--7bc8ed28-c91e-4558-a2de-3770e1c650a2", "indicator--48ae394e-d918-49b0-b9b9-c20edac5a0d0", "indicator--364805f6-e649-40a6-bb44-64555ae1c1e1", "indicator--5b619af1-285e-43fd-be23-3fc33a265b0f", "indicator--91f8266c-2981-4a4d-9665-6bb598b0763f", "indicator--543e06d7-5b7c-4aa2-b0a4-dc88ac0a3b89", "indicator--8338bbba-d90c-4364-a485-c7862c20a5ea", "indicator--ac9fe11a-66bc-49e0-a46a-c44d0d75b7e1", "indicator--0fa7eea0-50e9-47e3-ad76-82496a3162ce", "indicator--24f7a8cc-f58f-4c40-afcd-afa627491b3f", "indicator--520c1ff3-3f5e-46f3-9cb0-af7c80a51419", "indicator--6e5670b7-537b-4936-861e-cfac4bb311ae", "indicator--4abdf1a8-4bb5-4752-a711-155dbae93215", "indicator--583c8f51-18e2-4838-9f64-d16a12285ec9", "indicator--81e91610-92f2-4824-ac1b-1004a2c9b32e", "indicator--fd884758-1ce1-4d6a-85ee-ba879e0dea1b", "indicator--c5c709f9-f930-4855-91c8-9fed66f3d919", "indicator--d77350e5-feb9-4a95-934e-996a9315ad68", "indicator--04429c83-a1c1-467c-ae53-875a3c24e41c", "indicator--5c5fa490-5521-4076-b414-1f69631a0533", "indicator--c3ff9a42-b41e-4d0c-b7bc-321e5a38eed1", "indicator--462dee51-59ab-4255-9baa-747f46f14b62", "indicator--90e86c76-ec9d-47a2-887a-124657b7d17b", "indicator--45e45785-e338-4641-a426-30a03c0e7556", "indicator--ba49f4df-67fa-4863-a148-2c7970cf81f8", "indicator--0e76b647-5281-4e85-ad71-62a4e3e370ab", "indicator--057b132c-6743-4dd8-80fa-3d22a4a394f2", "indicator--01a2e9b0-4c95-45a6-97c1-88a17ca6fe62", "indicator--0e4ae3c2-49c1-465e-92f6-bb9e0602b2ef", "indicator--d3fd486f-ed27-4ea8-954b-f505e98fed04", "indicator--785c8900-155b-4bfc-bc34-b7209d1bd742", "indicator--766ccb07-bced-42fb-bfed-9be7a75b8f5d", "indicator--aac563e8-86ed-4564-ae23-08d4f669ad31", "indicator--c389aae0-ab1b-42b9-ba94-43a1e3051be7", "indicator--b1d9c441-0b1a-4da5-8071-1b02f33d1f14", "indicator--45c2a3b9-3d29-4bda-93fb-b02a8d820200", "indicator--ccd0abd6-6068-4676-9d72-7a8fa05cd459", "indicator--03d6cadc-09ca-4a89-b7bf-7a8f00c1928d", "indicator--26a001bc-0ee6-4df8-978b-571a1caa08a9", "indicator--59c00031-38df-4561-8016-7c9197bbebe8", "indicator--99f62db0-e293-434a-829e-06b182e1d421", "indicator--acb71fcd-57a2-42a8-b467-b40b28ccfe94", "indicator--8668bf49-3d8b-46a6-bba7-e31b38b10e71", "indicator--61745ebf-d6b7-4954-b333-530c1941cd8f", "indicator--be0f2f63-20d4-4fd5-adf7-095150850867", "indicator--bec457a8-b7e4-46fc-81a7-650d6032cc8f", "indicator--c6f01def-87ff-4b58-ac96-d49df6ddd1b4", "indicator--61a12b18-35d1-4134-a76b-8ccdc75a1884", "indicator--1f6cf4db-4268-4bae-8456-298873a57774", "indicator--d0b9fe07-0cb4-42b8-9945-a43b2ba810ce", "indicator--9e050392-19dd-4b4d-a08f-2a6b76590788", "indicator--b781ebb9-35b7-448d-b2e9-efdd7c968013", "indicator--b95330bd-bd72-4666-a97c-e284edb63e86", "indicator--daa48d2d-fbcb-4b9e-be6f-25a7deb5f07e", "indicator--4e4935d8-a3e2-46e3-93d3-1de371d6d18e", "indicator--8b87147c-8102-4ed7-b3c9-926745b78cc4", "indicator--d3d22ca6-28ce-415f-9f20-140f52770804", "indicator--8e00c879-613c-415b-8638-d92265eecb62", "indicator--706b107f-33d2-4833-831e-370c712ce5e8", "indicator--651f2dff-5b75-4c58-b68d-8117e13cae0e", "indicator--e87deb6a-6a59-4d97-8a69-09793e0714c1", "indicator--b4c937fd-e39e-45a6-81e4-484102badf25", "indicator--936df916-15be-4f30-b5d2-24faee57162a", "indicator--56d9e74c-9657-4c1f-923d-c956b7b8c602", "indicator--086bd5a9-4cc3-4bad-8188-8966330cdf81", "indicator--5a38ddb5-52cc-4759-acfe-33932ebb70f9", "indicator--a82d1d50-22f7-4274-ab51-fe54f642e612", "indicator--66d22f26-0086-403d-8f26-e571cd4ce928", "indicator--88286650-cd5a-4d81-a4bb-eacfc05a5b17", "indicator--cf18226a-f297-4f06-86b5-3374ea0a8bd1", "indicator--117b31de-8947-422e-83f2-04dc5fa8b61b", "indicator--ef63dddb-07e9-4b54-ae6c-195f22c3a140", "indicator--aeef7aa6-476f-4748-a8c1-8d485b847fae", "indicator--fe64c3a1-71fe-4624-90ee-89010d292648", "indicator--86d05b02-1c76-401b-a542-10d7b2a99cb5", "indicator--3a59951b-acec-40fa-9d47-6c006d73d615", "indicator--4c2c7bb1-06fc-4434-95d5-66e12e8965d0", "indicator--b5d8f0ac-bc50-4737-8dd4-d07abccffedf", "indicator--84f7201b-11ae-4343-8aeb-78297abd3e0a", "indicator--35d3f0b1-1315-42e2-b84f-06cab6ab6e82", "indicator--3bf3dbe3-570e-440f-8d77-d41374761680", "indicator--1cf3d2f2-273a-4b59-a011-9d6d2b8b6b6c", "indicator--7fff50dd-d67a-4900-acb2-90d3c0075fc4", "indicator--03ab9a11-f2f5-45d9-8e52-bd59bafef507", "indicator--d9e0b59c-5328-4757-9682-32ec611b36f1", "indicator--efd4c2bf-ce41-4d70-acac-e5184a4bb135", "indicator--944afbdc-388e-457f-9e2d-4704bd7373e2", "indicator--2477fcae-8f09-4d24-a2ac-9e1da63a2e6d", "indicator--7827b1c8-2d66-4e27-a3fd-1ebd8883bad0", "indicator--81259331-e3b7-4e0d-9dc3-edaf252cbd67", "indicator--88facbd4-db31-4038-96a4-45ca7f24d12d", "indicator--51a6d39c-1071-48a5-a335-e06eb0a8d63d", "indicator--e421313f-d599-4e5f-86fd-26038762e5ea", "indicator--30fde035-746e-4453-897d-cbe9f708cfc1", "indicator--2c1d6214-d839-4fa4-b29e-33da6702397f", "indicator--f72c1e53-c3a2-493f-a755-0ee3231191c6", "indicator--bc73e281-713d-4f35-9b3c-31ea001af720", "indicator--4e3bd178-718f-4e31-bdc0-7bc74481fd4f", "indicator--d0cee009-f531-4988-baca-b8b71b0f184d", "indicator--1d38c753-d85d-4100-b1ba-8d6a969843c3", "indicator--8ba45166-9d28-4279-9ecb-689a40a0aa1f", "indicator--fbdfd862-ca93-49be-b0ab-714c2a9b3d4a", "indicator--36dd867f-9eda-48b5-89b1-a704c3ed1b02", "indicator--724fa564-9f46-4fca-98f9-5916af26a7e5", "indicator--fb42ac8a-e22b-46d3-a32f-0535235a6a76", "indicator--c8d63e4f-6f02-430f-8455-187aae3e0740", "indicator--23f4269f-5d9d-4b7b-abd9-ebed1b4428f1", "indicator--1f07a731-b0f9-4261-903c-ebbbe4768625", "indicator--53f8b3a1-0b5c-4b81-9bd6-e0640465c39a", "indicator--18e97b92-d8b8-46c6-94be-36943ec905f9", "indicator--59b7720d-7d0b-49b0-954c-868ea567e18e", "indicator--17504300-ae26-43af-ae12-891a2bdd6f13", "indicator--005de425-8c08-47f8-adce-5d12dbcf8f60", "indicator--be4d065a-9af0-465b-98de-7a26e291fa85", "indicator--78612445-03ce-4785-8224-8ce758f800f4", "indicator--75f952d9-29e4-4861-ad5a-5cd7951464ab", "indicator--f732e4cb-4640-4af2-9fb2-2bf9068a8763", "indicator--cce729cf-4880-4745-8af1-74d53a6f1396", "indicator--733b1bd0-f39f-43cd-8e6f-b1178267ee65", "indicator--46fec94a-b18b-4a99-8001-a7c4d5b2ad83", "indicator--5b9ff5cd-8f3d-445d-bca9-2f27ee752ddc", "indicator--66497916-b2d9-4331-8cf3-e09a644d4f3b", "indicator--3a01d26b-fe35-4a7c-9a70-cefb77880486", "indicator--6feb0ed9-2c98-4dbd-a463-83d43277e91d", "indicator--e4fe83f2-3754-4740-8b9e-0206fb466b60", "indicator--8441d581-06eb-4464-99a0-6714e40f1e6c", "indicator--eda5ad36-d8e6-4ce8-8826-6dad8340b64c", "indicator--474703da-f588-40ab-b3ee-a7ba1aab4abf", "indicator--47fb06dc-45b2-42e7-9d06-739f6fbb8e6f", "indicator--ea6f18cf-9097-4cd0-b7c2-8b8cc2d34778", "indicator--609f160b-929d-43c7-83f0-8416dd341c1c", "indicator--b43eec82-cffd-4de6-810c-4fd0dd03f1c9", "indicator--5c721469-3d37-4d19-bff5-f69955484f10", "indicator--e559ca6c-c22a-4f52-b364-a898b920263a", "indicator--49776d21-35fd-4786-ad46-11504c5f15d0", "indicator--fd7a85e9-f8fb-4743-9b74-6074dad9717c", "indicator--4c177976-7eeb-4c6f-82f4-19ef6a7fae1a", "indicator--10100437-5d96-445e-a743-4b100b08b06c", "indicator--dd40eda0-6aa2-4e47-9b76-0f8e4f5fabb8", "indicator--28748851-9920-4ec3-b7aa-a6fa500d2d37", "indicator--5d2438be-3825-494d-802b-da99682d0e81", "indicator--71dfc2d8-04a2-4595-bb60-d348ab0b14b0", "indicator--cc55ec4e-aa02-4479-9f60-e5d4293edb45", "indicator--78bb1b66-5a72-47e0-a341-48bd964d6e10", "indicator--d42989c8-3899-49d7-af1b-ae95eadd7ea8", "indicator--5bdcd47a-61be-4c2d-8226-63ba5a33f50d", "indicator--19551a88-9ad9-45a7-ad94-d74fc4ebec86", "indicator--36cb2015-c4c8-47b6-bc66-5cc336abf194", "indicator--cdd8c611-366c-4824-bb7e-bd9361820882", "indicator--402b3cd4-5ce5-4e2c-a9a2-f7c0d63deb32", "indicator--ef495043-4291-4673-9850-5062fb93b8eb", "indicator--531a0a71-1c2c-4eec-9bdb-2137899a787e", "indicator--20fe97c3-f11a-4aaa-bd1b-a454268bf185", "indicator--673f366b-cf2e-4385-9d5e-23a927e9ed2b", "indicator--9e6f22c6-d80b-4a8b-af52-8ed55f7eaa7b", "indicator--1e627a0f-c3e5-4764-b571-8ec0c43ec035", "indicator--b4841ee8-ebf4-4249-b0d9-695a6eca069f", "indicator--ae43fe80-efd2-4f91-a0f8-1b2a892707d6", "indicator--b034f36d-a25c-41b7-b7fa-44f194356e69", "indicator--36444c77-2ebe-45b2-a6c4-7a5d090a1be3", "indicator--c60b6184-a92c-431c-9ec3-b266e675013a", "indicator--49d2bc5c-589d-4593-9563-6235c083bfbb", "indicator--39594b7a-8de5-4b66-ac00-d552df4210f2", "indicator--9ad56256-21ec-416c-9f5a-492fba57f79c", "indicator--ec5ce1cb-f6d3-4f66-ac96-055c657aa694", "indicator--e5d7eb32-dbd9-473b-991f-7ff4901bc6c0", "indicator--656d8dbc-0dfe-415d-8a1c-d9e147bc0098", "indicator--d5703ae1-a5f5-41c8-9ab4-94b051a9c26b", "indicator--4ff8e753-fce5-4ff0-a771-4afc25c23c9e", "indicator--a610c449-f7a7-4f7e-80c4-fd8e860afca7", "indicator--c9b084ed-ba87-4e58-9a2b-1d6b88cf7634", "indicator--d87e0b6e-2b7d-4379-99fd-f1493d917a43", "indicator--d7530cd3-bc0f-4669-881c-7043e0c22837", "indicator--7b758c7a-bf58-47fc-b12f-7cb05aec2774", "indicator--62f175ab-d15e-457e-828f-7a294e01afae", "indicator--96b78a60-a3da-4a39-a995-d44a1ba3bac6", "indicator--f2949a91-3af3-4723-b43f-b4d9ea4549cd", "indicator--ac7dd9a0-46fe-4021-b093-9b01de27469a", "indicator--459e9db0-9e99-481c-96b5-3599e77dd2f8", "indicator--3000aaad-4e01-41f8-aa81-5db78d4c4e1a", "indicator--060c48dd-411e-447a-bd7b-0ee2fa286981", "indicator--c37ff75d-50d5-452e-b985-8b8f8e35620f", "indicator--6d09b818-85b9-406f-b7f3-3b16558826b5", "indicator--4e87073a-6cec-445d-9967-636673f4deab", "indicator--cee28f15-49ac-43cf-b90e-53548d5c0836", "indicator--d74498a2-658a-405f-a047-85b25a285447", "indicator--970f143b-848f-4e75-ab79-cacae4002d5e", "indicator--a62d67fd-66e6-4aa0-b068-ce845365af7d", "indicator--627fbeda-6961-4fa6-b42f-cdfbf6b0aa22", "indicator--de781286-a6de-402b-add9-3fb0a4050e07", "indicator--ef079996-d96e-4648-abf3-1575a68194bf", "indicator--52a11715-03bf-4014-920e-237ed7f6101e", "indicator--581ee6db-0268-4464-b6e4-a44ab142d3bc", "indicator--7ded6f02-7eca-4843-9484-39a7667cb006", "indicator--5fffdd11-80de-4b52-940c-627e1e3ae2d3", "indicator--92033a9c-0594-4ece-81fb-08e03d7be0df", "indicator--c370e87a-ff55-4c7b-80bd-c5715196806c", "indicator--b3fa1755-5251-4902-86db-bff93199b400", "indicator--17295ee0-5b9b-41d2-b2fb-1fa81ea35f92", "indicator--1eec9b70-2934-4869-9931-6f28f602d8df", "indicator--106c38cf-6c03-490c-8f4f-3bddc6f43c2b", "indicator--9e8ae825-7339-493d-be07-10d71db96fd1", "indicator--8e1a6f98-953d-4140-a36a-bb0960bbeaec", "indicator--a8a9860d-83ae-4c33-9ccc-00723c43aa23", "indicator--a24d52c4-3372-4f9d-82e0-393467e6e8e2", "indicator--29e8c8c8-d2f9-4a97-9713-1a8f33c6d968", "indicator--8ebd8f35-c332-45e6-960d-e8b0349770d5", "indicator--3b6a751e-c5e7-40cb-b781-56fef397bed2", "indicator--7b0a72a3-a92a-4f54-a7fb-924be19cef94", "indicator--fdf2ad34-927e-4066-95d4-d6f816b8ee50", "indicator--b52f2808-7500-4ecf-8228-19124d9567b6", "indicator--eb14c709-049e-4136-9b47-00012632e591", "indicator--4b35cbc1-b77e-4f2d-be89-7bf7f9eeb858", "indicator--0eb6f0a1-56e2-487c-a753-5df830162dc5", "indicator--7122b39f-2875-47a8-8565-9cda3bae8374", "indicator--7b93937e-43f1-4130-8a37-2034ce63d21e", "indicator--fd6197b2-4a1d-4e66-9dad-931f2b99adbc", "indicator--42fec8e9-e2f5-4969-b1dc-cd07ddc3d16e", "indicator--b7df5f7a-096e-4a3b-bde3-c3de6846c684", "indicator--012de7c0-7c69-48e0-8f98-6c850095f3e9", "indicator--1b7cf7b5-4d9f-4b41-87ac-7502371b83fe", "indicator--1d22977e-33d6-406d-a7e9-1a6b67263d83", "indicator--6c4b3818-56ae-47c6-a355-2a7bde5b4d25", "indicator--27e760fd-4642-4626-b8e5-76391f77cc6b", "indicator--b992efc3-efd2-4069-86ee-d8dd604c1ebc", "indicator--b6319f92-9c80-4f34-8f97-822b6956194e", "indicator--40cb3d0c-cc07-4f78-8cfe-829e434d2b85", "indicator--78660c93-37f8-4240-b264-e93d4cb7b332", "indicator--91b57301-95d0-4d9a-869b-3b2068ffee73", "indicator--b1a64b01-ebbd-4926-879b-ec821c516cf2", "indicator--aced61ad-bf97-4bea-815e-11b7f5daba7b", "indicator--d887580f-f1eb-411c-b101-290465e08a8e", "indicator--be15722d-daaf-43cd-a7b2-328dbf83fcd8", "indicator--252464e7-a23c-4cf4-966c-177f13d13184", "indicator--c3a56320-11d7-4ffa-96dc-123ba6afabe6", "indicator--5900ab94-a109-4311-9c0e-5557711410ad", "indicator--93baaffd-c36b-44e9-88a4-86224ad87958", "indicator--fe5c471d-48b5-4ecb-9abf-67c6914b18e1", "indicator--d9f3cc1a-bd92-4499-a87c-d5555c379bd6", "indicator--986eeb48-3eea-45e8-a1b0-76ba3c9100b9", "indicator--cc854c4b-9f1d-45aa-a6a7-b3b43b4f4fe5", "indicator--7deeb656-700b-4944-a414-914ec55f5a04", "indicator--71b0d5b7-4617-41d5-87a2-f53f7fbbd91c", "indicator--3364945f-a1a4-4ded-afdd-dd049516d220", "indicator--b5d7a443-d77a-4506-92cb-f0fe1b1ce1ba", "indicator--06b6a9d0-e4b6-4593-b023-79bc32802e7a", "indicator--f9f64168-18e1-4471-b985-524bcf861565", "indicator--607d386b-54d5-4350-8e6d-44cfa5e14550", "indicator--956901d1-249c-4916-ad78-f8406005ec2b", "indicator--5afca054-5b47-464c-8155-18a23b57f048", "indicator--1349da26-c8f8-47a7-a658-8ab3f77cd8ae", "indicator--e82b5d63-8076-486b-b98e-81e40d111411", "indicator--34727166-4f39-4a45-8107-16ea9ffe9739", "indicator--cd95d671-089e-4f9e-b7ac-9f115cdad4c3", "indicator--9db350b3-f74c-413c-954d-8c692a63c6d3", "indicator--5ffaf4a0-0945-437f-8493-5cefe001b9ca", "indicator--96d029c8-9768-4e83-b241-dff638e40ea7", "indicator--7c2682b6-0130-4ade-b30e-c85ae1f2fe73", "indicator--0221fef6-7541-4c0a-9728-082df71f879b", "indicator--3bc08a7f-bc6a-4a3e-be5a-7966383ee6c6", "indicator--241077c1-bb78-44c5-a4e6-6db244e84b5c", "indicator--ebe8a212-00ce-464f-9354-f304be22bf0f", "indicator--04fa047c-8e86-4239-9f64-1d7b0803c52b", "indicator--d91c1bac-7313-43a3-b055-8f84922c4d28", "indicator--95580cc4-5f0c-46b1-980e-cf1a33f18cbf", "indicator--cc64cb17-989b-4f04-8bec-30390b688f74", "indicator--069eb601-ddf0-4588-861a-2e07056bde75", "indicator--ef4c3bdb-2af3-4be7-9320-6bf8ec909101", "indicator--2f5b81c8-21be-466b-8fd7-fc315a5c4fc0", "indicator--1228d7a1-ca5c-4587-9bb6-ed5314dd6ec9", "indicator--9fb53eb6-5dc9-4d51-bc67-0253def0861a", "indicator--fbf8c0b3-396c-4d65-8767-d13224c73975", "indicator--c4b424c5-3024-4a1e-bdaf-7fddcb0300e4", "indicator--3fa9b5bb-c8a3-4ce8-b12e-8ed521f7d8f1", "indicator--ddcddf72-4e8c-454b-9da9-acbc93a5a721", "indicator--99397450-6749-4584-832d-57c26a19d6b3", "indicator--18b888ee-6a1d-4a9a-8602-a5b069f8d192", "indicator--3e5203eb-2752-4afb-a780-bb4cbabc904c", "indicator--c84fb6a2-25fb-482c-bef9-fb50f6c0ec65", "indicator--e384f8df-f9fc-403e-84bd-9df8de4dbec2", "indicator--fe07881f-09ee-43fc-ad33-c33cad7dff6a", "indicator--8c998b71-0ae7-4ba4-9144-a9896f62438f", "indicator--2b963062-ebbe-497b-b953-5572a3874fc4", "indicator--ad81f782-3a8d-48d2-adb1-e3ed46add3fa", "indicator--9249c8ae-f6e7-49b2-9a4a-1ed28cae125a", "indicator--bfc140c2-43ad-4d3a-bf2b-11d5f8cdbb10", "indicator--9512207d-1992-4ae2-af39-1ef528175aec", "indicator--da339c30-0178-40c4-9020-d73d9a5aa620", "indicator--1d746692-e2c0-4c97-a84f-78190c9cd2b1", "indicator--313529fb-2f97-4452-8546-b36211e9e394", "indicator--7749dd84-dfa4-4202-b192-9841dc459e80", "indicator--0b404a0b-017a-4c2f-b36f-7b6cc34c6f5d", "indicator--b1fb6181-052a-45e0-893f-9a48236949cb", "indicator--8d874167-f7fb-462a-9a32-babd51f0ae51", "indicator--521965f5-d29a-43b1-94eb-0f9f96dd7a7c", "indicator--eb2a876e-f120-42eb-be85-32d4c82431bb", "indicator--d99fe7af-f9a1-40d8-9acd-e8f36e620eee", "indicator--0c798acf-a89d-4624-88d5-5d659a260515", "indicator--3808901b-47cc-4985-b9a2-a3b056cbaf9c", "indicator--c0d29523-dc08-449d-b8d7-509ff1947417", "indicator--110f46ca-feb5-4d3f-9b6b-564e0935378d", "indicator--4192c960-b742-4672-9e11-947b1e4edf61", "indicator--363a34c6-17d8-4621-a037-c73317e937bf", "indicator--66348aa9-6c3a-4115-81bd-7cafa3a3cfc7", "indicator--4e539d23-2db0-4304-904a-96e0f9a05cff", "indicator--bf2d8fef-3c18-41a1-9204-c18d9fb61fa2", "indicator--a400ce23-d0e4-448e-80f5-f06ecac11c90", "indicator--816b14a6-f333-4a6c-a61b-7d8af33b7162", "indicator--5a0c59b7-14d7-477a-86dd-d0234b16f1d1", "indicator--5c57cf52-619a-40fb-811e-2bf0416cac59", "indicator--fe5a15ef-25bf-46b5-9247-8781a088635b", "indicator--3e0f8b13-84b4-4034-b10c-012d9682ee4e", "indicator--a71c9df5-8fa4-46a1-a1db-b08ec409f6f7", "indicator--007603dc-7c8e-465b-ada4-1cb8d08f9b9e", "indicator--22fe4ef7-786d-4f61-8078-7dc0cfc8600e", "indicator--96523f51-2b64-4d3b-bf27-94a0bd8cb947", "indicator--93b199a6-f391-491d-bedf-e326e0609deb", "indicator--1133fdce-1e97-4784-af76-5ade4e823656", "indicator--69dc764c-9b5d-4ca2-954c-2c61e6f20240", "indicator--aa365427-9f9a-48a4-985c-fd47096ebd1d", "indicator--348ee22a-c1da-46ba-8859-b37a48d51037", "indicator--3b8e727d-2aa4-4ddf-b23c-9b315b07db7f", "indicator--8e18cb3b-9dfa-409d-98a8-4a695ca970b7", "indicator--29702ca0-19ce-4a9f-89e1-77a1ade917f6", "indicator--c950ec9e-44d5-47ac-a35a-18a7b3fe6464", "indicator--8a686548-3cf2-4d05-b5fe-c7a34b0a4c05", "indicator--c68a1b94-1de6-48b9-a986-20c0c3e6f166", "indicator--a50ec27f-8be1-4c72-9575-9b2677bbd820", "indicator--15c51f22-4600-4696-ad66-b29d2bcd5a29", "indicator--7b7fe2b0-5b78-4f7f-80a2-11fd2106fda0", "indicator--69473c9c-3a54-40f9-a0ec-5d19fd50b0d8", "indicator--5b7f19b5-fd30-489f-ac73-72b6e666643d", "indicator--de596edb-49b0-4920-9e85-3d9b911a5388", "indicator--b918ab9c-260d-4531-a1ce-e6e295f836f4", "indicator--ec458ddb-1b18-4ca7-b50e-c9de71af3391", "indicator--2c8749c6-88e3-4880-9d0a-bd9913da5392", "indicator--9d8eba86-4e17-42f4-b459-d2afe90777d4", "indicator--331dd4cc-a5ab-42f3-89fe-cf6fc0af9419", "indicator--0797eb3f-3866-45c1-88f4-99399a0e1a3b", "indicator--3a76f298-b2fb-4fc4-9690-2fdadce66615", "indicator--4e03ca67-bdbe-43cd-ab39-640d79af3cc0", "indicator--b8999efd-d418-4db9-8fe0-699955d41ba3", "indicator--81635049-20ca-487b-abca-2da624dfd1aa", "indicator--b84f81d8-059c-4175-8994-d388f2ea0612", "indicator--4503cf7b-1444-4c8d-96fd-47a176e47951", "indicator--95212c5f-5d75-4b00-ad53-490736c2bbf8", "indicator--8a48c06c-6b13-4890-b71c-a65954073bee", "indicator--fa03a340-ca01-463b-be76-8281935c48a9", "indicator--9ebaf2ee-2817-4c86-b719-fb1b8786fdc9", "indicator--95242856-35ca-4f0a-af00-53e715d08531", "indicator--13e10069-0c64-45f4-a5b1-b9b96bbeada6", "indicator--ee4c215f-49bf-4513-8f54-f313606c6620", "indicator--80255f7e-68db-4e3f-9773-ce6d731cf319", "indicator--83e3923d-8d13-45ca-8e22-e54ce86ca7c0", "indicator--36520153-2a09-4c22-ae54-08492cb9918c", "indicator--b91b7766-d01a-4895-953c-238eec13e89a", "indicator--b0472b65-dde1-46b3-958e-2afa514f8db9", "indicator--424774a8-1791-45a3-87e3-1405fddd21cd", "indicator--1fc71f96-1278-4e00-a3a7-997912416c5d", "indicator--d0924614-d3b6-44a0-891c-9a264109bd37", "indicator--bcd4403f-bf60-4b2e-a93f-b08aa2400250", "indicator--37cd0e07-03dd-4084-a070-7a65d29fb077", "indicator--e78ed885-8760-4b93-b239-05ce403906e8", "indicator--6bbf27ad-4a08-4e76-a18a-993f03202442", "indicator--d23e2472-2059-4901-a3cc-1349daa23417", "indicator--dc5bf01d-30d9-4cb5-8419-4385c2c4c808", "indicator--7819400d-9384-4a8f-a5ca-4ed610187310", "indicator--be1242ea-6629-4c77-a90c-7908b078ecf1", "indicator--aa1a76dc-be01-4341-87fc-1dd1f7ccc1b6", "indicator--2ac396b6-a9e2-49a8-84e8-0a20c2801393", "indicator--34fe6289-72f5-4705-b5b7-24b74afc05d6", "indicator--14f98854-c0fd-4a99-ac22-75002b4f26ee", "indicator--95bc9d69-591c-4058-9abd-1dd9e0ad957a", "indicator--f0e868f8-8de4-4baa-9c99-89167ae5264d", "indicator--64cadc68-1340-4aef-9e7e-cb0ffe101142", "indicator--2e367a9c-7297-4a9b-b8e9-7c4966e1b988", "indicator--49730cb4-5dd1-416e-adf6-a4d513d6bfab", "indicator--41e61ec6-df32-4bf2-bdba-355d53510a82", "indicator--2daf69f1-b386-49ab-98dc-0f5cea3f0e92", "indicator--81310f98-a8b3-426a-bc1f-3ab5f1dc80bc", "indicator--dd9d22c7-7dd2-4b5a-93c5-0be2d3b7d711", "indicator--87c2f5d8-7759-478e-a607-6f67a59f03cc", "indicator--8b95916d-c414-4bbf-a143-2eac85063f7a", "indicator--d61aaf0f-deac-4946-b204-ae84b63b8f8c", "indicator--b0fb9f1a-5111-4a34-b48d-536323bbd175", "indicator--0368c25d-6800-45fc-b5b9-b1818f6bb293", "indicator--669ae1fd-4e8b-40c1-8db5-019ed76bee2d", "indicator--80b7fd42-8e16-4da9-a704-bcb5304f3210", "indicator--b9b91326-2972-4822-b7ca-1f5a3751938b", "indicator--8409ad5b-cbcb-47ed-852b-28648f4833db", "indicator--8ed5fe30-3acc-4aec-ac31-b64849782fcf", "indicator--49b0343a-415b-4147-a31b-2fd4d30f6dc6", "indicator--9a7c7972-c0ac-4baa-89bb-5161931384bc", "indicator--33654ced-9d71-4118-a10c-4991a037f5eb", "indicator--1e5e87a3-d527-4d3a-9aaa-016ff3e9be39", "indicator--7ba4555f-a688-4049-9b74-53b07c19d250", "indicator--07263ebd-47ad-455b-ac39-b378c6940795", "indicator--05709633-44cf-4b64-b757-08cdbcbbfef7", "indicator--8716238f-9c8e-438f-9925-ab7376f4d76b", "indicator--80153370-f786-4c3b-88d6-1fe498d196e7", "indicator--c6ba083b-5eba-44af-8efb-432cf61f4728", "indicator--1a0173e8-b366-4949-9196-e3f3aa0fdc9f", "indicator--a6f7ea2b-e52b-44fa-b286-06306bd1d3c9", "indicator--54f59b3c-ed05-4ae6-99b6-cfe793f07896", "indicator--a2b06fd5-cf88-4239-9858-74b303ad0116", "indicator--da8a9439-4e55-4257-a43b-4fd72bd4cde6", "indicator--8080824e-2259-4bdf-9939-091395c6881f", "indicator--b38f9f47-106f-47e3-b1cd-e6bc11da678f", "indicator--388f0493-ffaa-4b47-824e-83c571cecd7c", "indicator--bf428219-2ddd-40c4-9f36-3a8315a7b417", "indicator--255ef8e2-c9fd-421f-9210-59b1a2b6dc80", "indicator--8f66b63b-cebf-42ff-9bd4-3eac99309580", "indicator--a7834e22-8fcd-4eee-9dd9-b561aec9c594", "indicator--8011d41d-b3e6-4c58-a082-8fa723ee6c29", "indicator--8cf68021-5e85-4b6c-971f-7624e2bc4411", "indicator--5776a0b8-c4a2-463d-866e-7ef2fcbaf74f", "indicator--c7ad74c0-ee6c-4107-baae-cb5fdd210291", "indicator--9a85bcae-46e1-4705-84fe-6a82f713a283", "indicator--f1178330-d4e8-4445-a3f4-ee583919dd65", "indicator--1252bc1a-605b-40ec-a9cb-dab22d0c1085", "indicator--bc151cb0-43cd-4f92-8668-83193d85f4c5", "indicator--3ad4683a-ac60-4016-8095-6cc3fa17d4df", "indicator--222cf25f-e590-45c3-89cd-c4a28423f0c5", "indicator--9ce545f4-fa70-4de3-af23-ec72c4dfd0c9", "indicator--59bc9dbf-5e55-4fd1-b61a-f35d9d9ef706", "indicator--0b0f820d-bf62-47e0-872d-c7476432e2a6", "indicator--79d1da16-a9a8-49cb-8eb8-9e3ddcaf5fe2", "indicator--8ba9ad2e-baa5-47c3-b327-6fef29a25da6", "indicator--8689b74e-8ed5-48ae-9476-130ad78aa586", "indicator--31265fff-0a6d-43ce-a830-65cef47d9edd", "indicator--93dbd1d9-47d3-4589-a7f4-f396ecf2ddde", "indicator--e157a826-43d8-482f-b263-3e5f5e168a93", "indicator--c168ba46-1733-4848-a5b9-2151e71ab99e", "indicator--c1cdd0e7-b171-4b05-91c4-58a354632373", "indicator--3a64d022-37b8-45b7-8c74-edb01186b5cf", "indicator--de193e3b-0bb7-4bfc-9baf-a71eb7d122fb", "indicator--92a02505-a195-499d-b860-48314d5364d5", "indicator--286e4412-6970-4bf9-8eda-c93cd8459980", "indicator--af43f976-6808-4aa7-9c47-c5f92c219f0f", "indicator--b0a2c6ef-af7d-41ce-8715-06ee44bebb5b", "indicator--84709316-5b56-4961-b5c2-e7ee8af9ed89", "indicator--7727e8e1-124f-436e-b8a7-396d0e88d234", "indicator--b810f98d-1fe1-4017-8fd2-020a8a8fac33", "indicator--2076ed5e-2424-40e0-8210-11d439efab6d", "indicator--a01273cf-e887-467a-886a-7016bb3a4fd1", "indicator--69123683-2367-4cc1-862b-d814cf3f70de", "indicator--cbb28bf6-0b0e-41ef-bd0e-ce08b81fd875", "indicator--d48bf286-628e-4521-9c88-0647d8472acb", "indicator--ede478b5-1e0f-4cac-9042-7ba8499e8617", "indicator--474f26e2-8b40-43cb-a551-8e38ebd675de", "indicator--d871c61b-efee-452d-b88a-c2bc88a9ee61", "indicator--57310e96-933c-4c2b-af52-f70f076ac4b3", "indicator--d3318701-af0a-4d49-9a59-056ff1290f60", "indicator--39572d2c-911e-4f99-98e0-00b39422f906", "indicator--4f452a8c-7430-46cb-99fb-30843e214e59", "indicator--6adc32dc-cdd6-4c2d-829e-164fb1341ebe", "indicator--23ef7e9e-8697-49a5-b0d7-9aaee3383b7b", "indicator--4c737e9e-149e-4287-888d-1ffe2f4fb915", "indicator--c2830b3b-21b9-446c-ab4b-3a933ad4d0f8", "indicator--f8f3b3ab-a73c-4625-9aaf-a9c39e87db6b", "indicator--65436c62-ff68-4a48-bcd1-6a5b66ea7971", "indicator--57373ee4-762a-4d2d-8ba9-c2e6a56c1a7a", "indicator--dc3aef62-64d8-4c50-b002-9c93a7345292", "indicator--c298c48a-00b5-4ec9-82a7-4c39f99871ac", "indicator--cf307210-492d-4744-9754-70d077eb2d00", "indicator--4f857ac2-1726-4013-8b17-545242b39720", "indicator--cdf2e780-4d3e-4914-8bcd-5e37d7267ecb", "indicator--26bd35dc-2df7-4a3c-9a53-eec5e95781d1", "indicator--76c57c7d-3aea-4daf-8668-c8df8c23f7cf", "indicator--bcd17a39-ba4b-4776-9787-37d3e90f94c2", "indicator--114568ab-c34b-4381-92a0-476bdead0fd9", "indicator--7a6cc5fd-7dc1-4c5b-b942-b1db5d859dc2", "indicator--6192dd0d-e0bb-4d27-9db1-d8a8c8eb4b52", "indicator--d24f0a21-8b40-4056-ada6-7c123350b7d8", "indicator--ed80a632-3247-4014-b4bc-119ac2fefe29", "indicator--398af9ef-5a4a-4437-9dfc-b817018e88a3", "indicator--ae4d02f6-d35e-4852-8c35-78a9a27bc4f5", "indicator--47c3c37e-50e9-4730-a9ff-d698899fa3ba", "indicator--4847a9ac-6cf4-4366-83d7-8dfe60acf0a6", "indicator--665f18bc-d747-4928-a699-6966e363beb6", "indicator--500b265b-9823-41f7-a3be-c377e42d38a5", "indicator--6876a4b0-d911-452f-a815-89a1c8ec6bfa", "indicator--a7ccd9cc-e4d5-4c1d-8b5a-0e06ac1ca612", "indicator--324d72c3-c1c1-4b89-a851-5acbfe8e9973", "indicator--0c027542-67c0-4705-bd45-da39261b62c8", "indicator--8b24f582-251a-4e4b-ae8b-e79d5a232b39", "indicator--de37a914-868d-49b0-b6b2-0cd314fa1b5d", "indicator--b5fc5e44-1eed-4ac1-888d-ec5998c8107e", "indicator--9ced657c-7642-4103-a510-2f1d697d275e", "indicator--b21b9057-b59f-40a8-99f3-01b11bc0c41e", "indicator--cc8427c6-d160-449d-a836-66c4fd355423", "indicator--e46c4a3e-19fa-4f05-ae52-84b8d5e836ee", "indicator--baebd091-c173-4de9-9448-93688a970316", "indicator--db1a79ab-249d-4204-a9d6-04433bac1b1c", "indicator--840268e5-0663-4b70-a349-97b1b9f7b46d", "indicator--d58623da-943b-4f60-b5e2-efc15279677b", "indicator--40eef7e9-6d46-4c03-825c-eca700060699", "indicator--fec16e55-ca31-4cc2-83e9-abd8d10ce6ae", "indicator--975ff407-964f-4ff1-8fad-2811630e0bb6", "indicator--cf8dbe7b-4b65-43e3-8661-3071cf1a36cf", "indicator--7b1eddc9-2c08-48f3-b839-6732a002039a", "indicator--0e46132c-b67c-44a5-91fd-677679a26e3b", "indicator--0f5c51a4-f785-40af-aa7c-9e031efdb638", "indicator--50920943-a720-4c6f-9a00-1918b5aa7f06", "indicator--fde74456-d4dd-4dd0-ad0b-4edf9613adb2", "indicator--2770ef52-4a55-4acf-8e95-349164b59525", "indicator--14095b08-c62f-416e-a582-3a8fd851cb74", "indicator--c4714096-eb0d-4fdc-a577-089967c3f387", "indicator--7b364578-c26b-4870-a033-4ea5eb2dd46c", "indicator--e4430123-ff8b-444b-81a8-5c3780c4ca54", "indicator--180d7325-9d72-40ab-b68b-03f4c241f5c2", "indicator--a6967671-cb7a-428c-9b84-b74a02ccf906", "indicator--ea0f4731-9c56-4368-b923-924c76a7453f", "indicator--7e5d1d95-4952-4b26-a5af-8141556fbe1c", "indicator--a5f14b18-04f9-407f-abfa-9da8931be118", "indicator--c08a60cc-0168-4b2c-8711-67635aa2325d", "indicator--294219d1-4c24-4577-a224-3be0d993d713", "indicator--50be6176-aa7e-4d7f-99eb-e9fb123fe1a9", "indicator--f89bbea0-61ac-48b4-a3b8-9457d05e87b7", "indicator--fb74caa5-5290-4647-9b4a-54c8e085cd88", "indicator--69529b1f-7df3-4560-a8c1-d0ee03206469", "indicator--80f4c5f5-9c76-44f3-978e-75bd1e1ed5f7", "indicator--2d8a00cb-1b37-4a27-941a-cef22e38e917", "indicator--e709a10e-3896-4876-bfb9-9b6119f95ac5", "indicator--14fb5d32-76b6-4a61-8e99-4cc672399da8", "indicator--697dcafa-77ae-4256-bb83-d1fefa1fe272", "indicator--e409b4e5-6a0e-4212-b692-5b494d64f0a6", "indicator--e5820b55-8cc2-475d-9d33-a6f9228ab8dc", "indicator--1223a6c1-4f37-4bf9-bf25-b8b5fdf58bf8", "indicator--9e1fde4f-9d21-4ea7-99a5-6f7be371bc70", "indicator--597e9d0b-c76a-42d2-ace9-7fbed722a7cc", "indicator--882ef3cc-f590-4619-9599-943d01c128fd", "indicator--2c2f2007-4bf1-4716-9eeb-23c6e3a6d1b8", "indicator--b755a704-4b78-4d4d-9bd1-7fbb6ab0ef5e", "indicator--be0f84a2-d049-4912-9d1c-4a3696390437", "indicator--05234771-9cd9-478c-8e74-2d6f2ea82d67", "indicator--d42ccdbb-d634-4120-b818-3f34d6bd6093", "indicator--35571936-4681-4cf1-87a6-adf4fd10e737", "indicator--8685dac3-73c2-4fdc-aca1-2270d67abd53", "indicator--40803ae4-d3b4-491b-a0b8-ae0f33cee964", "indicator--f5553de1-52fc-4946-b99f-127a4b12a5c9", "indicator--d40bd14a-7b82-4ca0-8fe2-26bdf317c744", "indicator--07861cba-6cdf-4904-bb9d-970b4ee5a32b", "indicator--551944d8-793f-439b-8b15-ab9affc7f418", "indicator--28854bcf-5f0c-490a-924a-7e567ba40d9a", "indicator--f04b8b24-b73b-41f7-9a6b-85a41c219a14", "indicator--9b6cd1f6-e8cb-4157-881b-7e048d312418", "indicator--ea519e21-bb5f-4cbd-bac5-3504163e6e40", "indicator--e087387d-9ac8-4b08-8849-15aa85dfa29d", "indicator--3e7bb309-e9b8-4c8e-b00c-b5bc7814e377", "indicator--15d59411-4f82-4be6-be7e-e3753451cafa", "indicator--f9ea0562-3205-45bf-9954-f687e3eac6e3", "indicator--d13aded0-4ebc-4acd-b5ef-45df7066535b", "indicator--97499ebe-1c00-4c08-88ab-829b5caf4dbe", "indicator--a7459bc5-9961-4155-9f8d-8463ebc31af5", "indicator--b4c2bad7-3b64-4838-add7-ab5b50e7eeaa", "indicator--60a96d98-5e3e-4e55-bd6e-648faf90ed99", "indicator--a0cd57e5-4ab7-437e-9f4b-7dfe063e0b79", "indicator--8ab9baf0-b291-4fe0-bb46-5d6d4ba7dd26", "indicator--6f67df0b-a0e2-4589-82ac-7c5fe60ce7ef", "indicator--aeeeae3d-7d13-4208-a69a-a4e3050d6754", "indicator--ea0d1698-25ac-43f3-9ea9-9d212bbd757f", "indicator--99dba369-2d32-45eb-8550-cb5e4e407898", "indicator--16b853ab-a88f-4fad-8edb-dd4b5af88375", "indicator--6265017a-9f14-4a0a-b309-75f96f66117b", "indicator--7a8cbf41-0d99-466a-a13f-b2ce6b661e11", "indicator--ea8d4a1a-096f-40d6-a3ed-89b56fa14892", "indicator--1b863c22-d189-4435-bc37-c188c50ff613", "indicator--9cbe926a-58ad-4988-9106-62bc9903a11f", "indicator--d2c57bb3-fbaf-41d9-85d3-23c397a10c2d", "indicator--0de26baa-4399-4767-8c65-3ef0e73e6baa", "indicator--15adf90c-12b7-4021-b4dd-1fd5000ebda4", "indicator--0fc38af0-2901-4ebb-b1fe-d8c1b408ebaa", "indicator--f5de9825-5000-42e3-953f-3d8e49518a7c", "indicator--ac9a967c-5754-48d0-a476-f131e487b256", "indicator--5b860252-aecc-4939-822f-32467298b655", "indicator--99119071-bb69-4f05-a74c-64a177d3e2ee", "indicator--8263454f-7f7c-4532-9fef-dbe6c491ed28", "indicator--d0f1da36-9df2-48cc-bbe9-4f0a4447d93f", "indicator--ab92e3f7-9c37-407c-8dec-6d89658da441", "indicator--245ad358-f10f-4a5a-8443-e29e6c74eb8d", "indicator--ae3e55aa-ecd3-4714-932d-9e0f83336dd0", "indicator--d8b543f6-280b-41c8-84da-19346fc21ecf", "indicator--63890165-e58d-4d12-b190-6cd0c2b0bfff", "indicator--559b9b8a-d73e-46e2-ad37-baba1345b92a", "indicator--f349ff32-6bca-4754-ae37-3e58acc29079", "indicator--dbc5361b-3e6c-4a1b-9d3c-352da57e4d25", "indicator--32687172-e7e8-4676-a930-a5ab16425bbb", "indicator--506598dc-bfe8-4ac1-a526-12fe5899cf17", "indicator--a5236bbc-b66d-47cb-b04b-cbe15f356bcd", "indicator--2e147531-59cb-4483-8114-e03af4c998da", "indicator--c167cad7-bbc2-464c-b978-932f7e471fdc", "indicator--f1d1c7a8-ffa0-49e2-b86b-8235b32be9bc", "indicator--5125ac9e-81d2-4d86-b976-26fcd9b7d378", "indicator--ca1142b5-51e7-473d-aa7a-7ebe599c7992", "indicator--448f5f42-ecd5-4d2c-b61f-cc48b7bd291c", "indicator--9481c526-f9c9-44de-bacf-5ca7560cae1e", "indicator--4cd95a41-064a-4b7b-a3e5-a062d2d98615", "indicator--f1648f5a-ba45-4562-832c-0337c18c9965", "indicator--15ece04a-cefa-4084-851b-ae8248c08239", "indicator--14e0a1f1-b0d3-490a-a57d-9f800bda0aae", "indicator--56e3d717-cf1d-4f2e-8215-b6f04081e54f", "indicator--0e188c7b-c4cb-491c-a785-49117dba3d97", "indicator--8021c687-7e33-4096-b951-ebb274ef1633", "indicator--fdbd6237-231a-4083-9dbd-e31a1bf7a469", "indicator--0fb6d653-67a1-4ad6-898c-35e0a2af1e5f", "indicator--61a6f34b-861d-4e2b-a260-1c20bc0f844c", "indicator--49b823ac-51f2-47e1-afc9-008a90eb3d45", "indicator--6302ef4d-ab35-4cc5-bcc5-d0bd5021f15d", "indicator--4f2a3efc-b419-4b32-9fd2-7775872c6028", "indicator--79c651ca-50a6-4b0f-9999-e216f4301d5f", "indicator--d08a1142-0278-43d3-b997-b8a8d8eee9e0", "indicator--cca47724-665b-457a-9c2c-47bc70f2efb4", "indicator--b075e654-e238-4fda-b462-482561aaad67", "indicator--dee575d4-8b14-4917-be03-cb4e8c91e00c", "indicator--d48b0569-6fd5-4a49-b9fc-017bf05ea5bc", "indicator--539e03d1-b82a-41fd-a336-f29d9c68d214", "indicator--88639d66-141e-43ab-97b6-655a4f451aff", "indicator--56378d58-07ae-4c4a-ad64-ff084225e468", "indicator--14862245-3ac0-4a25-b636-9bc8f93fd2e6", "indicator--1510ce0a-bbc9-4133-bd4e-08572db63032", "indicator--5f1d6920-b641-418a-b353-10502104cd57", "indicator--6d1b0e3b-5e27-4edb-8497-181ff9dcee3f", "indicator--c9e1e5a7-84d5-47dc-8b25-acc94134e668", "indicator--d935ef78-23b5-4abd-84b6-e246620c3737", "indicator--f989c042-fe14-431a-a8c3-d0410692916b", "indicator--05f2bc5a-84ff-4763-a8ef-ad6e5be08a32", "indicator--109af669-566a-4b2b-a137-d7f2598a850d", "indicator--f4cb1409-ff8c-4345-b6fc-34f7b2733243", "indicator--84fd6d94-06e8-4758-b415-2cf460c7ce29", "indicator--d9816678-e205-448e-ab5b-acd4c1676804", "indicator--12801a6c-ac26-43b2-b364-9c78fb91c140", "indicator--0b9a473d-d632-4c43-b639-291fbc32e112", "indicator--c1775501-15c8-43b4-b7a2-4b73af11aa91", "indicator--7aeed6fb-e97a-4b07-a6af-bea7ee256f76", "indicator--27ee5d69-d3a0-452f-bc24-637cf786248e", "indicator--db3b9c65-63ea-477b-a0a9-7972b106c7d4", "indicator--812626ee-699b-4288-a32f-09205fc775bd", "indicator--3380aa48-22a2-4849-a185-d82a022e7fca", "indicator--f44188fe-5531-43d8-b427-2c03f28922b4", "indicator--54f39038-6403-42b8-9963-052920531df7", "indicator--9c122033-f3bb-487b-8261-62e978e882d3", "indicator--85642d50-a3d7-42c4-b165-ee83fc731f9d", "indicator--23c94d45-70bf-4b7a-b288-13e10657dc35", "indicator--057f51fe-d871-4ab8-aa21-414fc7ad39af", "indicator--63e544a5-8dac-477f-8da4-7ed922939c5c", "indicator--65210c6b-ae36-41b1-8839-ee048da0d5df", "indicator--af8abcdd-b624-41c9-9896-48fc6231f864", "indicator--087099f7-4206-4598-9236-1594d6564167", "indicator--1ec296f2-3b71-4a86-8931-72e593f3d226", "indicator--73dbc099-7ddb-4e5a-b644-6c717840161e", "indicator--d028ac30-8c00-4f61-b986-7d2883078e7f", "indicator--0f676d92-8bac-4d5b-8fc5-705d4ba6d44c", "indicator--0e92a444-2dd2-406f-96bc-136504504446", "indicator--18127406-9012-4ef7-9a2a-c96b5f06c4b7", "indicator--350b24fe-9df3-4d9b-8a36-5dd7befd28b3", "indicator--9e071118-b995-448c-ba25-45dc101a9d09", "indicator--80196f41-b290-4579-9e9b-b8d7206b70cc", "indicator--07ccf427-49cb-4546-9879-1f595aea07ba", "indicator--1abaeb17-8352-4993-a586-81991ca7ea8b", "indicator--3b8ca1fc-99ac-4c3e-aff8-61996120e367", "indicator--c6827172-b387-4fd8-af27-5975d943d8c8", "indicator--0788a31d-4704-4e25-a2d4-0e63b2266aa3", "indicator--f1878ca9-5c32-4a82-92d9-38f191cc8f10", "indicator--abbf2714-67ab-4fa6-81cc-9ef0237fa2a8", "indicator--f662ce4c-7912-41f6-bacc-1eaba689b1ff", "indicator--b5c96ded-f693-4be0-bc68-1402405f21ab", "indicator--af71ec2e-76d3-49ec-bfc0-b4ebab85e6be", "indicator--a8780f81-8610-466d-8720-cae89be883d4", "indicator--3f69378f-f61f-4ed7-a552-8ad2a4f2bad5", "indicator--03339770-d50f-4ba7-94e9-89beb17520b2", "indicator--9fbd0c08-f5ad-4457-ac16-c063d04d9efb", "indicator--83446bcb-9cfe-4bf4-a487-7bfccf499ebd", "indicator--676fb5e1-f79e-4af1-b8e8-3d7626d4ab39", "indicator--c23f3e9c-e5c7-4f59-aa77-67947b693ebd", "indicator--cdcd250f-e998-4b8a-8256-1287a560498d", "indicator--c48e9455-cd46-4185-b084-c96d7d3f291f", "indicator--d918491b-a580-4252-b39d-8cf4ae23882e", "indicator--0cd54bed-c1e0-4337-97f0-85f11d71b955", "indicator--541dfbd6-fcb5-4933-a177-3b6ad3deb3d6", "indicator--8a9c7c60-5e97-4dc9-9b57-7bfe176c043d", "indicator--c6429398-5a72-49dc-9f7a-680b56fddbbb", "indicator--1acc1d6e-e339-406f-8a35-958a87dcb0b0", "indicator--5f8ac91f-a41e-4aed-bd11-7413af9f55ac", "indicator--aed169b0-e840-43f5-a052-e4279448e150", "indicator--f24e83b5-a2b0-46d3-9541-ee70b193c966", "indicator--efae24cf-669a-4077-8f3d-3327b807bfbf", "indicator--066b2692-aec8-4a7b-a32a-9f144012a49e", "indicator--3cf3bf53-e23e-44e6-9fab-708eed190f57", "indicator--5c083254-c0d2-43ca-84c0-229e16ef8683", "indicator--35249453-4ba4-4e6e-ac81-9bbffb682eea", "indicator--8f41f32a-7bda-4996-ac2c-448736943e81", "indicator--02dfcc1c-edbb-4e05-b88a-27473d62ceba", "indicator--481a0c05-8532-4ac1-b37e-969f58400842", "indicator--5934ee24-3f04-4f87-9628-3a6a33762379", "indicator--959a439b-d5f6-454f-8039-5e6d65a8812f", "indicator--f66ee8f0-a558-476f-8527-876c8d6be957", "indicator--1762b849-89ad-4184-8f66-af6f37f50f87", "indicator--44c94ddf-f3e3-4ca5-876c-53f7d7320af3", "indicator--a46b3df0-4137-4a16-ba3d-8414fa0a9c7f", "indicator--d34053c0-d0d5-4f70-8192-9c5eaa376f1a", "indicator--1a58365b-cdd3-437c-ad77-d4850fc65641", "indicator--db8a9118-fb84-4cf1-a3cf-2f31300cefa0", "indicator--8604c7d0-c4c1-415a-850a-3d1e442a660f", "indicator--805a2d7d-eefe-4ec8-bba8-89e29483e569", "indicator--5c9f8bfe-5e0c-44d7-b17e-26a170485ab1", "indicator--58e4c372-6ed9-4bb1-9981-5c344a390986", "indicator--08070a68-3544-4805-b7b4-2790103167ed", "indicator--74d0d4d7-da2a-4fbf-ac98-0089ea2a564f", "indicator--e2ac7114-3557-4c16-9a9d-29b229e1136e", "indicator--d756783b-a521-4074-9d60-e85795f54346", "indicator--2772fac6-76b9-43d8-a1fa-d53f6853bc24", "indicator--a562d287-432c-462d-b2dc-6926e2615c61", "indicator--b6b0a1fd-29a0-420b-8344-6f5656054f2a", "indicator--b9b9e1ed-2117-42ff-afcb-9e5dc59ac492", "indicator--1993ea27-d472-45a5-9424-2df5a0f54177", "indicator--160ae6db-2552-43b1-ab87-b2eab8c237f1", "indicator--cafd0b2d-5edd-4eb0-a0a8-b28d552450ac", "indicator--4d839e6f-42d7-4e45-b4b3-d1424941826d", "indicator--c49a43ad-d297-4385-a005-17f9e90972cd", "indicator--75ecf778-b9eb-47eb-b1ad-9b34b7c15812", "indicator--a8d6a43e-4c32-4ed3-ad2b-f19fe5a339d1", "indicator--52b78289-16b4-4bd2-b9f0-e53e5534c8c4", "indicator--c1abcc7e-e23d-42af-8415-def5aa6a8272", "indicator--927915dc-c168-4ce5-9594-f9fdd11b2e6f", "indicator--93030c41-33e1-4b17-b9ca-db9fe124bfa4", "indicator--d4500d3d-e4e0-4a78-98e0-099b673dce0c", "indicator--207e2e54-595b-4f15-9119-8e7f97110e06", "indicator--b6c66e45-afaa-4f18-a189-29009916f042", "indicator--863c0e8d-ec2d-41dd-b025-d1af5c365382", "indicator--d90f66d5-b6a0-4abe-a900-1fecd144571d", "indicator--294600e0-98d2-4000-9a3a-bb77d861afd4", "indicator--bbdf11cf-fa74-4966-976f-8807fa3f5b83", "indicator--cc1dd58f-13a3-4590-a3f8-e5cdb4103c21", "indicator--f7a0cadf-33ad-432c-bd2d-284e6361f6f0", "indicator--055cad51-5d1e-4675-be6e-e927410d7da1", "indicator--7940c1b0-0f9e-4b78-b288-83aefbfeef5e", "indicator--f3a00e0e-d9ec-4bb7-a28a-9f192fc6a119", "indicator--f32dfd6d-5381-429c-9e76-14aee00fe73e", "indicator--a769ab7c-2b65-4bc0-a427-e4644e6f65ca", "indicator--21fc464b-358c-4ebe-a83c-d078cfd0cf37", "indicator--599af747-37e2-4d0e-af76-dad1ca159cbe", "indicator--0fb08bc4-75a4-43d4-978d-5b332452f5e6", "indicator--ead3d34a-7ea3-47c4-bc17-0841a5d84a8a", "indicator--ac8f060b-c8c5-4917-b6cc-0bbd393cdcb8", "indicator--549491e6-53a3-43df-9888-7179fb793550", "indicator--531e3c85-8605-4ea5-bf7a-4fd60683d079", "indicator--dce76947-bc36-4a0f-8355-9118bf84d238", "indicator--335af512-1a25-43a0-a4b3-8b74a0b8a356", "indicator--d898ae16-197c-488c-8517-ce72f0d88b37", "indicator--558b42a1-42da-4577-b409-9dba629858fb", "indicator--13e1e7ae-960e-4376-9c17-189793d4de66", "indicator--60a70d75-9381-448f-bae5-a8464fb02af1", "indicator--9be09489-aec2-4af3-aac6-e583ccd9a8d2", "indicator--10d0e389-9647-481f-96b0-0ed031d98ec2", "indicator--49c2fb5d-2ca7-4e16-8815-a1678fdea13b", "indicator--495dfb73-aaf3-402c-ae0a-1c9c801fa2d9", "indicator--8b36850f-7c3c-44e8-ab60-f43b23029ae4", "indicator--52e6c559-7995-4576-aec7-072458199b10", "indicator--1f8240e3-9671-4598-bab6-541d931fafaa", "indicator--9605882a-01d5-40fa-b8fe-2fa90e06688f", "indicator--ed31feba-2bfb-464c-9ada-d2a553307f2c", "indicator--462106a3-4c86-48a4-8f5f-1a106919288e", "indicator--59788c07-863b-4ed8-830d-88a3bad5d98d", "indicator--ab0d4066-4f18-4306-87aa-58b4decf59bd", "indicator--06c2926b-9d37-46a7-81f0-225b09dee326", "indicator--30f4d203-a89d-445d-a5d5-b7c37f0d29f7", "indicator--0857cc3c-6d24-4c88-8da7-9694070f4f75", "indicator--c95adbba-9a9b-48cb-b45a-85fe4374815e", "indicator--0bf924bf-f67c-4950-a5dc-6cd0329ace1e", "indicator--3379f563-cabb-4b1a-94f6-f1cabb3de364", "indicator--b31d588a-64cf-46de-a0f3-172c3537f072", "indicator--d3f735d3-207e-4a03-b11d-83c2dbaf34e3", "indicator--fd50c140-3f7b-4c69-a199-10139fbd3390", "indicator--8c5acc10-e4b1-4040-8779-3c1655c4818d", "indicator--a11737bb-d280-4734-8874-d8130dd502b1", "indicator--ef19a9f3-cdcc-4154-bc8d-8dca54a56c2e", "indicator--7c53ad19-233f-4df4-be3d-9781e53d3b95", "indicator--949e642e-464c-41e4-9b84-234e3bc5ac09", "indicator--1bb9a9a2-641f-437e-8f9e-f5f3281599a9", "indicator--1964b98c-09a2-4866-8a76-5bd1a8268708", "indicator--3a899651-53e0-4cd6-83cf-08137fbd1584", "indicator--39b51c2b-f04f-4c43-ad80-a25b743fbaf9", "indicator--50824338-af8b-4bc1-b805-8e1f190a45c5", "indicator--6fb647c1-ee15-4009-827c-043e786bb9a2", "indicator--1f03757b-96ad-4327-b243-690cda697b4e", "indicator--c1a75d3f-4a47-48ff-8868-aad017d5c9d1", "indicator--97847eea-9032-4534-9a89-677b05d22d81", "indicator--9b542845-c8bb-4b56-a8e2-49d2b143ff8d", "indicator--a814db4f-dc90-40c4-b241-0e1448a89351", "indicator--6c005273-2aa1-4824-96a6-872b2f1d5a6b", "indicator--bb57823f-bf40-494d-af38-acbb75f3c8ab", "indicator--9148d8d7-3ea3-4977-899c-e9a8bd11805e", "indicator--7ee73bf1-8741-4961-8893-8fc4be0f6aed", "indicator--2bf92266-61bb-4ce0-a667-329f036577b7", "indicator--089b8b79-31c9-4102-bde3-2878bfd33f79", "indicator--8b81bf7d-6a13-447f-b76b-af3df22ba5b1", "indicator--1e6a8185-e536-4e08-aabb-2b8ae4ba411a", "indicator--73ddd384-20c0-4a52-8653-dd577ecff27b", "indicator--f6f77409-ceb9-4abb-9df0-9bcf6e21f963", "indicator--036779aa-2b85-4f72-82ca-a9fc6371e6a3", "indicator--01cc36fb-b280-4b20-b333-11b78fc62b79", "indicator--79db3f61-8020-4252-a079-e4595c85f7fe", "indicator--01b8f3eb-2367-420c-94e5-d8748320f13e", "indicator--b52e8b65-47fe-497b-86ec-d8f3a96e2baa", "indicator--f2d0560c-a969-4396-9bba-dcd2c80384b7", "indicator--dade76e1-cc55-4541-bd85-59fe5c8e704b", "indicator--81f719c7-537e-478a-91b9-620933f04749", "indicator--bbf97203-c22b-480a-89ef-3a8f33c0b5ed", "indicator--087c3085-6a19-4215-abd7-eb8f8823eb0b", "indicator--b319a47f-c326-44cb-9ecb-8cc5448f9fc4", "indicator--3e4ddb16-5720-4e52-ad9b-fd660b3a9e22", "indicator--17de240b-25ca-42de-87a3-5d773b04a8ca", "indicator--9e7b0db9-c155-4442-a999-f83e1a329fed", "indicator--890de0e0-6e0c-4652-9fc1-b3497c76b317", "indicator--e4ccf58e-f6fe-413f-a990-8ef0f69b64d6", "indicator--6c0c96f6-54a3-462d-870e-a09995b79d63", "indicator--1b60bcb3-495e-49e6-b937-f6cba5715e2b", "indicator--df4914d6-b294-4926-b2ba-763f5fcb2655", "indicator--584b746d-0daf-4055-b371-d59df48bb4ef", "indicator--2b8cd9e8-ddbc-4d1f-917c-be081089e019", "indicator--869c6492-5442-49d9-88bc-b716f8c83f49", "indicator--86ea02ce-a555-4888-b8dd-8b30f4fa3f54", "indicator--1ecd33f4-8c88-4739-be02-f3558bde4efb", "indicator--cbcf910c-ea8b-43d0-8f12-556f76bb5cf3", "indicator--05567894-9eaf-4775-8ac8-fbfb43d49787", "indicator--46c2e659-fd5c-44da-a3ad-1f6f4ac623bd", "indicator--823d9f27-63d2-48b8-91be-1ad27eff1ae5", "indicator--a43e7f27-01ad-42d3-8cce-8b5d5e622579", "indicator--f1c1fe86-054b-41e0-8931-be06a28688bf", "indicator--76d639ec-3f4f-488f-ad48-3ac6dd219ea6", "indicator--e5ec2ebc-5c46-410c-977f-825fee487bf6", "indicator--39116a14-4df8-4f97-b9cb-051c5c901031", "indicator--24b8f2c4-6df3-45b3-926a-8dd8e60e9780", "indicator--e42aea78-9834-45ec-9ae5-c12201e2c156", "indicator--8f83716b-f95a-40b5-a9c6-d2faa2cb0265", "indicator--4a8cd0f9-9b83-4623-b636-903f93f025ed", "indicator--61f3282f-b763-4f66-be68-3b5217637571", "indicator--e3948425-1efa-420b-ba24-e21c2f72af2d", "indicator--ea9ad69a-6230-421f-a4be-91c6f78ffa29", "indicator--ed6fa204-db90-4a70-bb0e-01ed8582b8ee", "indicator--22c180b8-c9b5-41f4-a1a7-46e1e0398e9d", "indicator--481b95c4-ba98-430d-8472-639a99d04a2d", "indicator--7b8f6970-2f99-4108-92b2-39128d2a2ea3", "indicator--dfd5c681-7313-4158-a3b8-61876afb8433", "indicator--868feb7d-5a6f-4942-afe2-0b2e18cf2b9f", "indicator--6037bff2-f3df-497c-ad0f-190e57d1665f", "indicator--9d103610-73c8-43a1-9351-45467e0b73ec", "indicator--65a00258-7b2d-4e15-be5f-ce57b5712cbe", "indicator--c3c784fc-66ad-4b2f-8c3b-43133891b1a6", "indicator--ff953ac9-f15a-4594-81ae-bfe874df1dc3", "indicator--100b5b33-efaf-48d3-abb2-f71fd1135789", "indicator--d410b922-362c-4b4b-8456-bfc82c98439b", "indicator--435ad33a-77a1-4504-803d-96223ba01e8d", "indicator--0b390e80-9116-4f06-9ea2-ea1326aa76ad", "indicator--09fb0b8d-72bf-40cf-b0e2-81d8a066b6fd", "indicator--05e940e4-b1c7-4a1c-8543-c01d2a5fa2d4", "indicator--43c11061-9317-47d3-962e-4c5c1bd210be", "indicator--ef0b9bae-dc8a-4d02-aae2-0941813852c6", "indicator--4b6d96cd-03c6-40b4-9546-18c2c5394463", "indicator--e1e0668a-31c8-4524-af9b-bcba60684ed4", "indicator--0ac0598e-62b5-4b2c-b3fd-d1c6d8390dea", "indicator--6702c043-dca4-462b-9c2e-40249405702e", "indicator--d94ce43b-1ea8-4c6d-9e4f-489768d4d64e", "indicator--eff74145-07f9-44cd-9449-defc506cda4e", "indicator--821f8cf8-c8df-4ee1-ad5d-f282660c92b2", "indicator--c1132fe3-0f33-440e-9ff6-8b4129a90dca", "indicator--d264752a-6330-485e-9b0c-cf70747cef80", "indicator--8cd23860-7f3a-4b61-968b-85c7c3729916", "indicator--3759590e-a620-41f8-9a62-28f8d8ed68bc", "indicator--e0dc866e-356e-4ce1-962d-1df692b9b7f9", "indicator--8f395017-fbb0-4b63-8a7e-701f4558e31c", "indicator--a93132ff-f3fc-4966-8ecf-c29cf95aa3d1", "indicator--5e116106-1315-4fc7-908d-ded5d4b1a880", "indicator--4cbb0486-2d5a-41a9-932d-b1349580df0c", "indicator--6931934c-e413-46ce-81dd-c68a3aec394f", "indicator--3bd15b3e-c9c5-464b-8cd9-6bb77cc28d93", "indicator--d707e3b8-0f9a-4c3e-b0a8-37284ef9d595", "indicator--c7da13bc-0dea-40ff-9c67-ba2812869b86", "indicator--07f1294d-e776-4c86-9032-98e097f7f056", "indicator--7bdfa2fd-5f2c-4d1c-abe1-00a0cbec9710", "indicator--5349f3f3-b05b-4cbe-b643-e9818efaf9e6", "indicator--e66f96e9-bda1-4497-a5cd-e75b4ab1f511", "indicator--97e4683e-08a5-4628-9441-625dc2a52304", "indicator--ab684675-63a7-48c1-9290-a5818ac5072f", "indicator--6994e3fb-e5ce-4e75-b682-21907223b476", "indicator--2f614811-e7af-417d-aef5-38518550d984", "indicator--4505fa62-bccf-4609-be8e-eca916e6775f", "indicator--7baa220f-3261-4622-b429-2975064db0f9", "indicator--530666a1-c1fa-4f9a-89d5-5428a22a9153", "indicator--0a217702-f132-4c6c-a49d-af27425ea0c2", "indicator--de9f65a8-a2a2-4565-8ab0-9ffa00a2cbd8", "indicator--1c976d1c-0479-4d20-a83c-e7c4b20906a7", "indicator--4989d45b-1c52-43a3-b320-ae2765bbd8e0", "indicator--0ee03bf5-6f46-4869-aded-5aba6ba9a622", "indicator--c2040b28-19ef-4c9b-b9c2-0c3d10945d41", "indicator--40732532-8fcd-4ed9-ac12-ea4367866987", "indicator--f3ff8697-0d54-4346-b61c-4cd70c65fe8c", "indicator--8a53ed0b-346c-4115-a624-6919e8029bd8", "indicator--8b038869-1e94-43b1-8844-e9ea00bec8e7", "indicator--92aeac79-b4a5-43f5-b380-b4cc4289c622", "indicator--4ce0262b-95e3-413c-a420-3af693e71ada", "indicator--604b39a9-991d-4e7d-8a23-b95f20afad75", "indicator--64d6d02a-1f88-4bf3-b762-629a18ec197a", "indicator--0f809dff-671c-4c94-8254-c14ff5174dfd", "indicator--4b6c5f8d-f07d-4711-8129-51140ac66942", "indicator--9ef80807-0c56-4253-bd24-f8cbf3f54bd7", "indicator--51e5d862-1e18-4c16-b7d3-8e337cb634b2", "indicator--02d802a2-f39c-44ba-acc2-3e02e58238c3", "indicator--7ebf880b-7a22-4a57-9054-6508b15c1dc7", "indicator--4aa8e6cb-26bc-479a-8ba9-858709894a78", "indicator--fe50204a-02e6-48cd-b548-c253067956bc", "indicator--0a0c1fc7-a2d1-43af-a295-9dc6b8fbc340", "indicator--9d0d273d-8a9a-4e69-b355-8c4a44e7c4e9", "indicator--9efe7bd6-7b45-40b8-9085-e50ab05708bb", "indicator--5d8a7082-c4b5-41d9-bd99-5be87fe748ff", "indicator--2d170d97-30c9-420b-b42f-253094e40ee6", "indicator--62822c37-92db-4a33-9bb2-41b7bf2b241a", "indicator--c086dc0e-a5ef-4dbb-89d6-ea4229393093", "indicator--72ade922-f8bf-46b4-a52e-3f53e8775eb0", "indicator--abc109a1-97bd-4257-b3f7-62bffe83eaf5", "indicator--6d03deb1-f290-47c0-a6eb-154ca6e15016", "indicator--7e3ce935-e42c-46f4-9f31-4da92075c3ce", "indicator--7845008b-6049-4079-bf1d-ca6bb9fcf1fa", "indicator--4f1357ad-eb65-49c5-ac1a-a2149883a839", "indicator--d4ec28a8-4d59-4125-b3fd-b4325f1f8266", "indicator--7f3148f6-9ff7-4e7a-9979-7caa187f8b56", "indicator--70d083ec-71e4-43c9-94cf-c924f964b49b", "indicator--0d8db3f4-4314-4e68-828a-92a7fcd934eb", "indicator--1f4956d6-8109-444f-9668-1556d2d87466", "indicator--440d7542-a2b3-4a9c-9543-0bfe51935662", "indicator--846ed58c-38cc-432d-bdbd-c0f303799aaa", "indicator--41aa3350-5e60-45ef-944b-afd17e812690", "indicator--7c27df85-dda1-4ef3-8388-8f07ad3cad3e", "indicator--736c017f-50f7-4d2a-812d-e771c823aac5", "indicator--46bc4b57-6ce7-4428-b9f1-ebc1c39dc275", "indicator--78da77e4-1989-459c-bdf8-f83d3751010c", "indicator--6886c053-739b-4180-9c39-f6e45bc639fe", "indicator--b4b9ad60-1126-47f5-9010-e16bbc0209d3", "indicator--97e61989-4918-413f-bd6e-6d4cdaab9cb4", "indicator--6901aa52-5fd7-4b7e-a91d-e996fbdd3425", "indicator--1be7780b-6125-4707-a7f5-876dfa86cda3", "indicator--c666683a-4795-4b9a-9c1c-cc6f60374c9c", "indicator--099d74fe-bbb4-4ecd-8008-4099e61e5e1f", "indicator--593a949c-dba4-4e9a-9d0f-35cd9a142270", "indicator--649665a7-5321-4fd8-96b0-1ca13f9c3201", "indicator--94eb91e2-3c08-409f-b46d-eeba460e9f68", "indicator--f575a70a-8c53-4e20-81d2-8196faa9a6a3", "indicator--6318f2be-4ebb-4639-80d3-b97bc08f0856", "indicator--d26e65bb-003f-4c91-8e23-da54381ac790", "indicator--899f6977-ccc6-40c1-a29e-c9768d6dffa1", "indicator--214c1fe5-806c-4859-9415-327298bcfb12", "indicator--7c4f19c9-b3eb-40ad-a254-4d29adc09d48", "indicator--2110c982-791e-4211-af0d-eeabe3d6dc4e", "indicator--6236ab96-3fba-43fa-9290-53f163f4a3f7", "indicator--912f7de4-7885-467c-b516-bf651cea8d0a", "indicator--f8ef0dc9-ee9c-4e84-9a1d-15b416a1f0d4", "indicator--1bdf5773-3495-4ed5-a678-6e82be5c5d09", "indicator--94cea1c4-e5ff-40fd-9674-3a0a2a0e05d6", "indicator--a621d562-1b93-4bcb-a85c-3a05da6c69ff", "indicator--fd1b35bc-e0e4-4f1b-a12e-ed1ab7f2451a", "indicator--9ab95d2c-bdeb-48dd-863a-20c497a26d8a", "indicator--1b6f3e1b-8fe3-424e-a99c-4fed0820f958", "indicator--5e9bf276-787f-4113-986d-f441f2ad6e47", "indicator--6f28ddc6-bb1d-458a-b7cc-54252845d5bb", "indicator--10f6236d-ed30-4797-a06d-b195edc168c8", "indicator--b6bb40f6-e880-4222-9c7c-ced92635a50c", "indicator--513ea32a-080a-44a4-ae38-c9443b4b556c", "indicator--e4544985-3791-449b-862a-22a14b800605", "indicator--bb30dfce-4057-4e48-ac90-372b7ad50748", "indicator--dee40834-fee6-48f0-918c-ffe0a5fc2999", "indicator--41f124c0-c846-469f-9b8d-0fdb54eec7bd", "indicator--8c457ea4-6106-43d2-b13a-0208d7d1ddab", "indicator--b5677cf5-25ed-46e4-a5ba-4e49a3d3a035", "indicator--e8d28ab9-1acf-4ee4-84eb-36f7377761cc", "indicator--3bfa6ddc-1d52-44b2-a938-1b5a4678dfc9", "indicator--739b9067-7270-4eab-8002-2f8487337645", "indicator--205b01b9-1246-483c-ac0a-98f0f29c5d15", "indicator--8eb65b14-c666-4f7e-92da-0171afd73a2c", "indicator--20544d71-6d1d-4cf9-8692-700c4536377d", "indicator--c3492cac-bd1c-4567-83f8-a8441def85aa", "indicator--3782ab2c-1611-4d5a-b449-e69f8b4aaa26", "indicator--7b07f646-be9f-4070-b0b1-1d988af7a6db", "indicator--107816d6-ffd7-4bf3-bc48-7155f0366113", "indicator--3caf92e9-4f8f-424a-a362-212bd7a4bc51", "indicator--d1c931a0-b179-4062-8c49-a199ced143e1", "indicator--555e409b-bbc1-455a-95c7-a5883f71295f", "indicator--1c5c0006-a0d9-4ea7-92fc-7ac63de3738b", "indicator--07b012b5-5c33-45c5-99e6-7ddc7067b700", "indicator--54666791-91d8-443f-a74b-ae2aa583ec97", "indicator--c770a5eb-bcb0-45fe-9743-26c3b7dacd38", "indicator--6cf691ca-03e8-4828-ade5-71fd80f08286", "indicator--e6380402-1c2d-4007-b95e-b52e556ed4fd", "indicator--9d9d2f82-a077-46f7-80fa-d4b964f0827a", "indicator--750723f2-1ea1-4c2a-a7ac-1fad929e4086", "indicator--a0147ae3-73cf-48bd-9696-f4a2dfb1839d", "indicator--a7175866-d9dc-4d3a-8ce7-0fafc96f22ca", "indicator--b665110c-f168-4c28-b642-f21f928e03b3", "indicator--f7d944bf-9cb2-44f2-8f75-1224e74a06c4", "indicator--7d09454e-a3f0-4656-8643-2decccbc84b7", "indicator--123acad7-3066-4772-a43f-5afd91763638", "indicator--5916c2a6-9427-46fb-ac2e-216c19794dc0", "indicator--35fcc0d6-5e5b-465f-951b-9412e3c9c9f4", "indicator--83b0c284-33e7-4b53-93f5-d9a0bc5ceeda", "indicator--9ec89b42-90d0-46ca-93dc-9c4f498fc10d", "indicator--2ce77e79-3eca-42f9-b9a1-48d33a1b93fe", "indicator--8c5bfd9a-8e2a-4379-b84b-7879c24f4c07", "indicator--569de541-84fc-409a-9918-8670e1a8e9c4", "indicator--46eb79d5-9684-42c1-a881-bfaf394956b2", "indicator--1e361bf5-3f0b-4ef7-bcdf-6a80efc82825", "indicator--5bc71de0-f2a9-4c63-a8bb-311c3558dd28", "indicator--c28075ab-a620-40ae-a51e-33ebd41a1fcc", "indicator--ede696fd-309d-4c8c-9bf3-0bc86dcbe658", "indicator--364e745c-f126-454c-b1e6-b8c9a8e207e4", "indicator--ce5e205e-e2b7-475d-8569-d122192b5430", "indicator--32bd1c40-4525-4c16-80c2-e36c78ddb2a3", "indicator--8c7fbd8d-c02b-45d5-85e2-bd3ef0bafa42", "indicator--6e355c48-e403-4845-ab47-6e686061dce2", "indicator--ed853ab5-177d-41e1-9911-bf5adf71f65c", "indicator--2c989785-9220-4bac-ae6b-d505f407899e", "indicator--c2d00ec0-ee11-48ce-aaf9-0a90dfe5c479", "indicator--f851184e-aef1-44ff-a7fc-13d202e7d094", "indicator--f48c72c6-bb3d-466e-99ae-befbc4495f8c", "indicator--b3d3f5c8-0599-4a1a-ba71-25c781469d2a", "indicator--c38d577c-bffa-418d-bfc2-54dbfbc3a870", "indicator--071453b1-88c2-4d0b-a8d7-b35e6243f4cc", "indicator--25f73ad8-de17-4b17-8178-d9996daa6cd4", "indicator--66c704d8-d2ca-463f-add1-a24b0db6d298", "indicator--5b6a7c92-2a27-4e70-a993-32f2aa78158a", "indicator--9e80f2fe-dd27-4cfb-abab-7dfe2bac28c0", "indicator--57a27174-14ca-4453-9179-cf4c04e285ac", "indicator--41e2f396-a297-4e0d-a918-98eef09d4094", "indicator--16a4b156-daa3-4aa8-9312-7a7fda10f96b", "indicator--94cf84e3-b09d-4d0a-a630-b025e22cff0c", "indicator--7bc872dc-9d02-4189-bdd5-d25de7761462", "indicator--08b270d0-af17-49eb-9f7d-47d40f66f617", "indicator--acd07762-8e3e-45f9-829f-0533ec0177af", "indicator--aed82908-5e92-4015-9801-5fe373400f71", "indicator--26d5ecef-6d06-4c54-9e22-6ad6c66c6078", "indicator--dcd267e2-2555-4f74-adb3-c88ead26eb46", "indicator--1a822e26-774c-4aa1-8460-aceb7f7e46e5", "indicator--7df44cce-a19e-4cc0-acbf-c721f2d98cc9", "indicator--c2c90022-11f1-40bf-a3d5-2493e729f5f0", "indicator--a73ac764-788a-4112-9a80-ef6e4a0a2c2b", "indicator--f30fccf5-26b3-437b-b071-bcc4a65d499c", "indicator--22ce5662-1703-4d2a-84a0-6b1ea70353af", "indicator--7ead4ea9-9962-4536-8d8c-7c4886047ed1", "indicator--7c66d15c-a4ad-40ed-b1da-fd2a52871875", "indicator--01e91b1f-a53d-44a9-82b7-2765acf61af0", "indicator--30d55c00-26fb-4c49-b705-c85ccc73b701", "indicator--6923b812-17a0-466e-8ce8-9360ea7aa3b9", "indicator--8f0b64f3-927a-4050-afdc-0e29b959f45a", "indicator--084d90bd-c753-47cf-a19f-22ef16541b18", "indicator--e43a8d9a-0f31-4941-9483-2892de6a1901", "indicator--8698b379-12f6-4412-8c8c-26cf0064a611", "indicator--a2ee99d8-db09-43e2-a616-f9459405678e", "indicator--ebdecb85-60b6-4446-ab11-111d5bea8f68", "indicator--13ae5441-0eb9-42c0-874b-cfdb257c51aa", "indicator--c766ec93-12e0-4e6e-b13a-2f35f3455693", "indicator--4b05859c-a231-4663-af4f-3a3cf0168f9b", "indicator--38c376dd-4e58-45b9-9b3a-acb30936efc8", "indicator--470012e9-6777-46a8-b61a-9a3f5664c574", "indicator--9bd49032-7925-4afc-b889-82b70dac0b24", "indicator--f025efc1-ddc4-491c-96fe-096255b041ca", "indicator--3cd5a253-409c-4b91-ba09-559db8d9dd3a", "indicator--72f7b6b6-1bad-4f2c-8a37-efaeedef6aa9", "indicator--ce0ae77f-0c04-4fdc-9b2e-77e56a819757", "indicator--8f2db2b2-1900-4510-a2d3-6173aac4699e", "indicator--a0c21007-7e2a-4d49-9565-c64bae2837bf", "indicator--048ec40b-fd55-4591-9cf9-afe36b422994", "indicator--898d6879-f45c-4c4f-91f4-60627fc3af71", "indicator--6ef12bf4-e403-4875-8276-154612b27134", "indicator--1da80127-7971-450e-a792-56148d3eb0be", "indicator--13d0db43-279e-49a7-b624-fbc753fcc2f3", "indicator--bdf86e64-110f-4a20-aef8-96fb2fb52e68", "indicator--926fb297-c9a2-448d-86cb-7f816831beac", "indicator--7f461a0f-a813-458f-a339-4d21b23bf06d", "indicator--ca7d4dd8-56b6-4044-97da-06942ba02af8", "indicator--6bf30f9e-70a3-4388-a702-e88f37f84cb7", "indicator--6d961a76-2fa1-4949-8daf-6036448e34a3", "indicator--e1af6aa3-6873-4da8-a933-b02300e4f917", "indicator--44ee7957-db1e-4d96-9f79-e2c9629063c3", "indicator--7ce0fd08-49fe-4077-9c71-005b01aa1a9b", "indicator--427dbae8-3ac7-46a0-9f8a-d2d55a335ef9", "indicator--8eeb9230-52bb-4231-967e-82f307d7641d", "indicator--61a0ac74-dd1e-45a2-8905-85f0416a7714", "indicator--af9c7803-d234-4b67-bb24-d03ca79a3c96", "indicator--d3529df7-93c3-42e3-93b8-e501e56042d6", "indicator--ada8eef9-0d87-4bb1-bcfd-1f276c461800", "indicator--62782686-ae2c-4482-b86e-0da342b16805", "indicator--2132b5ec-7ef3-4890-ae02-8dadc892ad15", "indicator--fcdfb507-0dae-4aeb-b909-72d80c1a32e8", "indicator--08d1b4bd-f1c1-409c-91e7-43fb3436e51e", "indicator--cc027842-2c7b-4e6f-a25f-e7f17d5d001f", "indicator--d1d9fab7-9122-4695-9c42-869550095337", "indicator--103f0f8c-ad00-4bf7-9045-5b8ab4ddfd99", "indicator--a4f70128-2e6d-428b-b3eb-3adef2a502cd", "indicator--a630b5ac-8341-489f-8d22-59b99d1e7a02", "indicator--ca149806-821b-43df-a7ae-9daaab5f8d13", "indicator--8be0483c-8448-46f4-ac29-e85dfeab4c6a", "indicator--4d1443ea-f1bf-41ab-be9a-bc012ce1bd11", "indicator--63f7602f-6c0a-48b1-b314-8412a6d4b2c0", "indicator--7ee73e12-e64a-45ce-885a-5a2b9376ae5f", "indicator--9ec9470c-6722-4986-add7-121fa3788048", "indicator--ce92b82f-9672-4f2c-832f-21cd15031120", "indicator--1316ff2c-544e-43d3-b980-8fa7cfc12937", "indicator--072336f4-edda-45f8-a18d-03d305618853", "indicator--e11fab77-1710-4cf6-b906-434ddbe6ec01", "indicator--2ea82219-2e3e-49ce-9c99-7949f9e0ed25", "indicator--bd04609c-33cb-49f5-9c06-abab7682c42c", "indicator--d507f076-a085-4535-b68a-d21df925de4e", "indicator--6c20ccb8-07e0-43e4-a83d-456801779d76", "indicator--51aa9d01-67a5-4801-addb-2b698ae91c94", "indicator--94e938df-48dc-4803-843f-66b219275600", "indicator--d4b31889-4f2b-44c9-8386-fce647cad7df", "indicator--e345c3a6-e194-4aa1-bba1-2e462c7ec4a3", "indicator--19e349f3-17e7-4983-884d-0567dd4aa75d", "indicator--7356e3e9-2916-4518-a1c1-e1c444e39c3b", "indicator--7ed7bdaf-b23b-4540-a2cd-6ed204e2178d", "indicator--cf2da509-4e04-48aa-a9d3-d3602a1078e7", "indicator--298cd8e8-aeee-4397-a2c9-86bc8e7c3bb6", "indicator--7705c570-f1e0-43a6-9a2b-0c71f371d815", "indicator--caf0270e-6aa1-4598-80ba-ae28f6c4e035", "indicator--40124fcd-4699-4cd2-be01-9183040d8b8a", "indicator--e104e315-50e0-4a50-b059-28d787474af3", "indicator--390ef16c-5036-47c9-a728-6605bd8f8574", "indicator--8734b409-e88b-4888-ba60-4da471247582", "indicator--7470fe3b-4a15-4496-ac26-f26143784dd1", "indicator--44acb86d-4489-4e8b-b9dd-d74edc9ad743", "indicator--5de2b9b7-2733-4d27-bebc-e09147dacfce", "indicator--11dc5db9-812d-4c74-844b-d9072dcd3f14", "indicator--7e317b88-75bb-45c4-b69d-4973be280409", "indicator--41eb1e1a-fc70-4404-bac6-47e7fb4bb871", "indicator--3817a84b-a837-4ba0-abf4-0698a0349fec", "indicator--c16fdbac-8cd1-414d-a15c-2aaa1fcadef7", "indicator--ee5063cf-3703-4c9b-a72b-262f6323e969", "indicator--700a0ebb-1823-461c-be91-e1b88e7aad14", "indicator--79a53bab-a98d-4347-b15b-5362bcecf9e3", "indicator--fd2be193-8426-4c50-abfa-ce9e0ce63137", "indicator--e6dbe4aa-c785-46af-81ee-37dcdd7143ac", "indicator--bc6af6b0-6ccc-4d2f-a506-e0f49a3d4d23", "indicator--ad74e846-9bf7-4532-84ca-83724f09a721", "indicator--2c75ae1b-1d33-45a6-a6b3-86b415934766", "indicator--7365777e-3e5e-46f5-be5f-81ec274424fe", "indicator--083b70d8-4451-4b14-9eb4-0030e1e2e04b", "indicator--20cb1b2b-954f-455f-a03a-15dc4570717d", "indicator--4e831738-b164-4235-9143-db0c95f7165e", "indicator--8f5e04df-3086-4f45-926e-edf1ff825334", "indicator--c7f0da09-b72a-4f0c-ae33-00763d6bc68d", "indicator--8c514d7d-7da2-483e-a1e0-33bfd036c5f3", "indicator--81ff7f29-8902-4888-a6b5-39689b6383ba", "indicator--e8d3ff86-4fed-4d9b-baba-c4171bf60c25", "indicator--1bfb3b53-e5d4-4cb4-95f0-cee535da23f2", "indicator--213e5c06-a60a-4d24-86e3-7aa4c709aedf", "indicator--4add3936-93cf-4c51-b90d-8ebe1be42151", "indicator--e76e1bf4-bf28-4553-894c-47e714898651", "indicator--79c7dff6-e8ea-4949-a909-31de36c9b008", "indicator--d0cee9ef-28b0-47d5-80f2-38117cb82b4a", "indicator--3b751385-7934-490f-ab24-d3d5995fdb5c", "indicator--4fa989dc-7c31-4bbd-acc0-608beda6c9ea", "indicator--6eb70266-97bb-43b9-b947-13a284e97978", "indicator--dc6d3a4c-e740-4b18-a4b9-c160de64294e", "indicator--af494a42-aa1c-4aa7-885d-97edd1440684", "indicator--a89d5d33-40ca-47ed-ac24-a58eeb32bd54", "indicator--14667d2b-0c79-4b1b-a4a4-6dffb6f7118b", "indicator--988a3b71-0b06-4d67-b37a-ebecee0e403b", "indicator--ac588da8-be96-4e08-98ce-52ecf673094e", "indicator--bcf4d4fa-4c70-4339-bad9-fb731c5838cc", "indicator--f2f16bbd-d98d-4ff9-a31a-33ebe80621c5", "indicator--384c878f-8ca3-4d47-917f-f05bb3d6dfd2", "indicator--20e1bd28-4021-4c72-b61d-26014e70741c", "indicator--96383eeb-d865-4e9c-a767-6d8bba6a822e", "indicator--6e8c7f75-a932-491e-ab63-63f31095ffa7", "indicator--69a76d13-c095-4192-af29-1457a886ab8d", "indicator--652e0cb1-ca24-4771-809b-cf572c8e1f66", "indicator--60b9f7d1-42c3-4d8b-9957-9d7f72357a4b", "indicator--7a808727-aad2-4c41-8686-17c3e9becdd6", "indicator--72993472-9e2f-4471-b985-b6dced41b084", "indicator--95a15e05-6581-4383-a0af-e0dc14f782f6", "indicator--5f222f27-5a7b-43dd-a7de-e0d0daeee438", "indicator--fe9a1dcd-d955-4310-991f-047dd6faee35", "indicator--1c908ada-bb1a-4258-bfa0-fe8a9fb80f4a", "indicator--52a4d609-9d9c-4ea7-9a97-4b21c58909f9", "indicator--ddb09eec-2fd0-4bb3-bf10-bd8e7c550327", "indicator--17f32a2d-b603-4256-9012-f3f899d73875", "indicator--de09cc34-8f4f-444d-a0e8-bedf85223b8f", "indicator--f37262d8-26c2-4d4d-90cc-3a031229698b", "indicator--5ff068cd-0f52-4b4e-90b0-6c2f9b113db8", "indicator--30676323-af3e-4996-9a84-873fa4f0f544", "indicator--c970d6b3-dc5b-4b9a-bbd5-70268cd6539f", "indicator--72fc7914-afb2-4593-84bb-f0f607b19abf", "indicator--0094b34e-4b1c-4b3d-b3e2-337145f42f5c", "indicator--c54d4b58-e24e-43fd-9d53-7cd1fa31feb6", "indicator--3ba236a5-0352-48e9-9117-c910db485884", "indicator--2c37e1d5-66e7-488f-9802-6f04aea42ede", "indicator--82167688-f9f2-4ae5-ab1d-4d99d0162e54", "indicator--e72951a5-c0bf-4d07-a9f2-331be99d6db5", "indicator--48a2792c-3efe-45ae-873b-028753d21ce9", "indicator--879a1a8b-3329-478e-9a3f-8752b15355c6", "indicator--e51bed1c-feed-4378-8d5e-24f0cd0afabf", "indicator--83039b6d-9ce2-42b3-b40c-1ca8e9a1d4bd", "indicator--fe2d6f26-fab9-4372-b2ad-89b8f1624abf", "indicator--7e90ad06-0a5e-4e34-8918-3a76d73a1f2a", "indicator--be968277-a1cb-4f94-b463-bfd6046ab432", "indicator--7c115321-378e-4e5f-8976-c02539178b51", "indicator--fb6a7198-0316-4796-99fa-882acbce9f30", "indicator--3c077769-6817-45d6-96fd-866700f18758", "indicator--5f02daaa-fea6-437f-a8e1-c9eed67861d4", "indicator--d76a3df9-9b12-4242-80ff-5547caa46dd9", "indicator--cc030695-23d1-4a04-8388-99edc6c3e69f", "indicator--de914405-faef-4c97-a602-318fce43cbde", "indicator--29035e45-fae7-46b4-a65e-a1303d510ff8", "indicator--d0f20b05-6d53-431e-9f08-d409affc0848", "indicator--fd9d8220-9fc3-43b2-a2ca-cd4480c85e8e", "indicator--f4ff4329-0153-4d4b-805e-e36253a09e23", "indicator--3ea0596a-6736-46fb-83e8-fef63c5f3f25", "indicator--c4c45e22-0f24-40e8-860d-81b0d7d740a0", "indicator--6c631caa-2a34-460e-aee5-1c2c63ef5f1a", "indicator--d8b382ff-68f4-48f3-b54d-8a620b6ee1d7", "indicator--588cb43f-8608-4477-af2d-7eddb6567a15", "indicator--4eebb200-b747-43b2-b80a-4acb60b2bee9", "indicator--a93896c3-6d6f-41f9-86fd-45d0e17cd048", "indicator--275b5f73-0685-4b71-96ea-4b42d29e8810", "indicator--01574972-f03d-42d7-b195-cff748e00290", "indicator--b3d3605d-b83f-4e27-bb59-6c112067d1c0", "indicator--8f08a917-551a-444d-b0e6-6000cde0a13f", "indicator--14fe7417-7713-4864-ba6b-e2d50fec531e", "indicator--fd6baf4c-bd66-4a98-b313-ea4ef86a7e14", "indicator--c6847b93-84ae-4e89-b764-75f8ee8f17e3", "indicator--171da56c-875a-4bb8-a42d-73561ce07bd3", "indicator--7668f295-3369-4eb8-a594-e4d1ca802581", "indicator--4a78bddd-51e3-4153-9c62-49f9073514ab", "indicator--8e5af488-b049-44ad-a090-f2fc2edab195", "indicator--e272ef02-37bf-4684-bbfb-9c78800fcec0", "relationship--4b8499b5-c9c1-4598-91b3-a6e2684afcc6", "relationship--161677f9-888d-40e5-a521-32869955369b", "relationship--cac0921f-c335-42af-9b0a-d996ff184403", "indicator--ca0f9532-292c-440f-8b12-46a76e8e1fcd", "indicator--505c3496-f159-4ee8-a4c4-6880a0f18392", "indicator--cb3bb448-8c72-45fa-90db-3e0bf70c5327", "indicator--daeeac09-ba0b-4dbb-b9c1-1ff233a527d5", "indicator--c0a921e9-3429-4ee4-893c-102bbe1132c2", "indicator--fc8b626c-f30c-4827-92da-ff869943e3fb", "indicator--7f2295f7-2def-45e4-a942-9180b1b69c3e", "indicator--329f7283-10eb-4697-a288-b81b9e126a6a", "indicator--579464c7-b5f2-4d5b-b616-48e2ed17f9a4", "indicator--702fa37c-e221-4599-bcab-573ce52c8e34", "indicator--06aaab37-e5bb-401d-bbc4-cb1c4ebde523", "indicator--1131d132-2feb-4fc9-9511-5c8a39e9bab0", "indicator--d7d6aa69-393e-4a35-a70c-642f6e41d564", "indicator--fc9922d1-9e76-4b87-aaca-30a3e1ce3466", "indicator--933340c2-f389-4166-b886-77852efe4215", "indicator--b767ea20-b4fa-4f0c-b85c-995a66f2ef71", "indicator--0bf5a122-026d-4a88-af9e-9d40fbf37555", "indicator--9f857cc4-76b1-4081-a80a-6994cd9376f9", "indicator--7a94853b-15c9-4d0f-b71f-74c35fe08d3f", "indicator--93f7876e-01fa-4ebb-98f4-70d0535b8db8", "indicator--343f3744-5ab9-4839-894f-a571e0ee5cda", "indicator--7d49696a-8a53-4748-bf8b-fb86754a1a4b", "indicator--33768eae-9938-4f91-83d6-d2e79b518247", "indicator--6b6fb883-e95e-4612-8840-2a1b9f826080", "indicator--57d1263d-a81d-4008-98e0-908e0afb2930", "indicator--e9c4c442-d0fb-435f-a7da-be361548cfb8", "indicator--148a6d88-94d4-411d-b2a9-9e06bbdbf570", "indicator--03e0446e-5341-492f-8711-c16586554814", "indicator--b3c0be19-8fc6-41ae-a35e-d70d4316ce28", "indicator--821888b8-e588-42b1-8c80-17011ce82aef", "indicator--daefa025-791a-4bfe-bfe0-74ec0f6a2625", "indicator--42cc4aea-3fcd-4e7e-a85c-7d55cd725c7e", "indicator--3c641c86-0dfc-44a4-886b-1feb26287645", "indicator--1b4053c4-50d7-48fa-90e9-90188c24f176", "indicator--8384b198-ec7c-4945-96f2-e5a95cad033f", "indicator--5b026fb3-9e17-46e7-94d4-90d40f789b04", "indicator--550a1b0f-428e-485b-828e-12e057a0de20", "indicator--ae55f90c-0985-47ca-8d6a-016a9ce5a0a6", "indicator--e6472152-ab61-40f6-8074-12c7631d5cda", "indicator--4cc334e4-ab10-41d4-9605-7c32b1d93a01", "indicator--51534715-0236-4132-a419-ccbd54942d20", "indicator--e483a833-91cb-4cbb-ac35-f13f016f2dba", "indicator--03db8aad-38ae-4fb0-8f37-56557ec8e47a", "indicator--bbf9eca0-55a1-4823-9c9b-351c88fe91ba", "indicator--0f076c3f-d086-4d7e-85b1-a8168699fda8", "indicator--4c9f62a1-c07a-4e92-a37c-a3f27c066451", "indicator--d551fda6-27ec-48c4-8d0a-e09857fbd144", "indicator--499002af-f2d7-4c54-a025-297074b0a901", "indicator--074e5b0c-3ed1-4c49-959a-497bd09d70e5", "indicator--17cac058-5007-4fcc-99bc-48c40c464cb8", "indicator--774719e1-73c6-4712-b73f-db5882a90384", "indicator--b857ffc9-394c-4a68-b991-348ef265b09f", "indicator--765c2342-587d-4b48-b614-23e40f805b14", "indicator--2d969820-2da7-4b15-8ca1-12218475b5c4", "indicator--252609d2-4e15-4be3-a5b7-b7bba19739be", "indicator--113c4f1d-c90e-4fe9-8a4b-f0367ffcb657", "indicator--a391c34b-b632-4e10-9828-69f0996cb37d", "indicator--2e6b3974-8777-4746-8fd3-585d39b9f791", "indicator--27be7aca-18fc-43d4-9eb3-1df29cbf8db9", "indicator--7aae80e3-6993-4745-b1d1-e755a38f48b2", "indicator--f1089bdd-b187-45f2-87ef-cd1032ecd836", "indicator--0f0eaad2-399e-489d-85ce-6a1731f58f9e", "indicator--567c1af7-82b4-4751-a11a-618fff0126b8", "indicator--0563e0db-61ef-418d-9586-e2340f90ed4a", "indicator--7ed8c05e-5fe8-4107-8577-b49341dd1329", "indicator--0ae79011-806e-4b75-86c4-2fd769fc649b", "indicator--00c52e8f-bc18-4e2a-9f1e-fd77460a2f38", "indicator--1defb4d8-01c5-4bd5-af37-4d503f3eda38", "indicator--ebf0c9de-265c-4c48-969a-aadaf8281dca", "indicator--5c2e113f-16e1-4650-932e-7428a506fde9", "indicator--4a03320e-2053-4ab2-9a9e-7cfa82e80253", "indicator--1f242125-8353-4fbb-8dbb-1700164195e0", "indicator--ab7acb25-165b-4763-870e-5d86f16d856b", "indicator--0d23172c-4c91-4696-b7de-0b4fe49663e2", "indicator--a9995468-2311-4132-9efc-d40710dcf5be", "indicator--dd9dd38f-74dd-4bc1-8df0-1c2350d12a2c", "indicator--21fbc7ba-0634-476c-89d6-1f2163b9bc82", "indicator--7be25cd0-0b8d-4a83-b4b6-9a436b1c32c5", "indicator--ad55071e-99c5-4ef5-a9ff-ca76dea7ba5e", "indicator--7bdb94d9-ac77-4381-bea5-f2f47f2dedf1", "indicator--ac84593c-e77c-47ab-8188-9e80fbbc4a20", "indicator--2e1f5e02-c2bd-42ca-a797-c7e5034b936e", "indicator--98b47a5e-6a74-4414-adc7-406e59100b33", "indicator--3ac2c7eb-c10b-4019-97ff-6b1bab7a3e0b", "indicator--62291007-654f-4278-8523-71e9e2ea1163", "indicator--bed9cd75-91e4-40ab-bad7-ed8d297c0bf6", "indicator--ab597a03-d482-4894-8220-cc73bcde966e", "indicator--56a6858d-486f-4cf5-9650-a459b9e92704", "indicator--2c3a3c71-261e-4509-8cd5-6b909b92bc99", "indicator--7848c957-a119-4185-acb5-331282a7b14a", "indicator--505ff148-f11e-4591-8465-dac00c910ad4", "indicator--53917a88-aa82-4fde-b5d0-9826b8b40c16", "indicator--0dcfdf4b-d638-4803-8f06-b484fafb0a61", "indicator--8eba5a70-3b5f-41d8-bc87-53cb98f31066", "indicator--064a0808-387f-4e9a-bcdf-ed436ddf2180", "indicator--2fa46640-4d89-4f2d-82bd-5b3f7f3742c4", "indicator--f2bb2522-afe4-4240-9bc6-e321152fe36d", "indicator--92826c32-db19-44cf-915e-ed08487d8090", "indicator--c4b0df49-e7b0-47ef-91ad-8bf30f6832bc", "indicator--a2007f09-f3a8-480e-917a-72182601f3b4", "indicator--1de5e450-454c-4235-8a9b-3c74b953b2e0", "indicator--c9093caf-d33d-46f7-a3d0-5c182aaad6c1", "indicator--a2f68527-1fb4-4c07-9eec-da337382b953", "indicator--844d7581-2832-4847-83e5-f91455047c28", "indicator--2a5a7a7e-4ab8-4bb2-8102-ed7235777637", "indicator--9c5ba644-025c-404d-be16-81c9aab7789f", "indicator--71fc9ceb-6190-4ca2-bb1d-99d6b17c8c00", "indicator--a05bc00e-2879-40f9-8792-ff7102f56125", "indicator--f9a2f796-1310-410a-aa22-0ff4cc14b5ba", "indicator--5241ce3a-4d2f-4f18-a327-748ed3e832cf", "indicator--43f1872e-5a18-446d-a3a8-a411ecac6309", "indicator--18705b54-cc34-4365-912e-0da7727aed2c", "indicator--1e918195-3ea8-4c7b-9e02-6cd51908c318", "indicator--d322215d-9eae-4dd7-8799-f0d7770c2506", "indicator--15a2e5b1-7cf9-44ad-9e53-4dfa236167c7", "indicator--baf4dcc8-18e7-4774-8d1d-5abaabcd35ff", "indicator--5b914ae4-5e65-48a4-8db3-e516437a0595", "indicator--1d3ac632-4633-49d3-bf3b-79eff1dc1f0c", "indicator--353f0d36-c408-4185-9547-76b26b486b6d", "indicator--9d4ec654-1c80-4bf0-a548-166a1228074f", "indicator--116f8b3b-c098-420e-a0ab-1db10c32e5bf", "indicator--b2ac3f75-afb7-4717-bf15-fa1d792bc93b", "indicator--d6750dec-6373-45b6-aad6-fccc71ae0932", "indicator--3bc017d7-86da-4d6f-b8df-0f8955a89623", "indicator--78ce640b-a756-4546-ba5b-84db4f2a5ee0", "indicator--2b4f24fe-5d66-426e-b47e-28c4d24f72cb", "indicator--0ac673ac-388e-42a1-9e27-a71cb028e198", "indicator--f44e8cc8-cfdd-45c5-859c-237db07779fb", "indicator--bb9fa749-c0a4-47cd-8461-d072edfa4840", "indicator--85842a05-fd20-4422-90ab-a8385641a4ce", "indicator--d5385b3d-39c4-47c6-b0e4-f4290f69d891", "indicator--edc1a9e0-fb1f-416b-81f5-3e4f2714d8aa", "indicator--841ba471-e915-4f3f-9db4-7b36dbab2234", "indicator--889db58b-2874-4852-b013-85ae8c331b81", "indicator--1c1995b5-7f71-4a9f-b0ac-c8acdcd0853a", "indicator--4efe0eae-3e5a-4fb9-9716-f952968decf0", "indicator--9123ea23-90f4-454d-94eb-9403a4bf253e", "indicator--a9f57354-914c-4a3d-ae1a-32470f656a27", "indicator--0ea9ab53-7c6b-4440-80c2-8c12aba9a283", "indicator--55c21624-09de-4323-baee-e898ad86b98e", "indicator--a3aabfe1-c3b6-46cc-853f-360bf0cabef3", "indicator--9002234c-8866-45f2-bca8-161e6db0fd4c", "indicator--9cad93ea-07f5-472b-993f-28a6449f1b8b", "indicator--6fca93d1-77ae-4b1b-82a2-031897a07353", "indicator--10e84bc0-241c-423d-9873-f7bd6a199e2d", "indicator--7bd2b959-51b5-4a31-a012-50252d4803fc", "indicator--958fd933-1ec6-4a49-b340-2ce31e00c69e", "indicator--3e757ee9-5b41-4612-8872-57e6e0e51425", "indicator--9f0f08e8-3c28-4683-b6dc-2a9e22b0460a", "indicator--dc94c76c-6fa8-45b5-b12d-e581c785cfc2", "indicator--4f8fb32e-bea6-4747-ab81-9dc3d0a79c05", "indicator--f7d49cf5-7584-4ee8-abe2-07358004bc4d", "indicator--4e12beb5-a42b-490b-b9e4-d443d20d3b98", "indicator--4972144d-a6b7-4e20-b59b-1e53460ac1db", "indicator--9245d2b3-b77f-42a0-a4c0-290113c0d048", "indicator--b90b7878-e1ce-44eb-9f03-8885dc539cee", "indicator--5f1e2ff1-ef17-407d-a585-5dd6c2acdf02", "indicator--a289e1d9-a326-43a6-add7-11b41c4bebab", "indicator--8fa5ce79-180e-44ad-863b-5b04aa291818", "indicator--6e6f331d-c336-4941-962c-f572c1896bf5", "indicator--a79b8f68-7cc2-401e-ae64-3d59c4206641", "indicator--41cbffee-5444-438f-8423-a7c422dfcf1f", "indicator--4989b981-e9d5-4f39-9f8e-52b920dd9a9a", "indicator--ecd01f9a-1e1c-4dc2-bb51-fcba140b17db", "indicator--12b4b0d9-76ce-49dd-a124-a793f958d4ed", "indicator--5cb08cff-ce6b-4251-be7b-f73d0d79764e", "indicator--a9cda3e2-211b-41fa-be9f-0bc60f9af4a1", "indicator--0b36f772-6fed-4a21-8a11-afac27956f3e", "indicator--e3b80d83-426c-452a-92ac-3cfb96cd2a96", "indicator--4c58e4da-db87-4d5c-808a-b10cd402c66e", "indicator--f6ef6bab-9ebc-48fb-9570-fb1cb7904c11", "indicator--19374939-028e-4873-9400-0fc136f6f5dd", "indicator--0ad8935e-f4e7-42fd-b71c-f067713885e7", "indicator--42707ba8-62aa-422f-ae94-a61fefbd2749", "indicator--1e7030c3-6dd6-4c67-9e29-1f27ded76529", "indicator--de89664d-ea20-4fe9-829c-2507b9c6d144", "indicator--94f8b919-ec07-49f6-94ea-1e5613a79147", "indicator--4c3d8ed6-583b-4e59-b886-405960e1f44c", "indicator--72396ddd-8fb9-4d16-bf5a-ac976503d78c", "indicator--a50a5001-154b-4ab9-9d85-8f6acb5059db", "indicator--75d8ee8e-1f38-43e6-bfc5-88130b122cec", "indicator--20d48270-4490-4c1b-bd4d-bef7815d5220", "indicator--a1e2cb69-165a-4649-8d19-9cbe5557133a", "indicator--dadf66ba-66f9-498f-a94b-a0a2e33484a7", "indicator--a471ffc6-a902-43c6-88ef-6d854ab2d922", "indicator--834e2a94-de46-4de7-8b1e-5124a0c606f1", "indicator--3e4172e0-d340-4157-8cec-290ab2b1468c", "indicator--324b6a45-7f23-4966-ba16-ce95628d1fb0", "indicator--cfcd715f-7e3b-4c1a-8c01-938eb93f4c00", "indicator--4b13cf9a-26a8-452a-b3d0-431a7a988730", "indicator--44fa926f-2f9b-4a11-9274-7461433d42d4", "indicator--b20871ee-8837-4858-82be-e0b90823a71c", "indicator--17ad4c69-28ca-433e-a101-1d92ce992ddd", "indicator--fac22504-b753-4dee-b97f-9812c02770a0", "indicator--af246acc-6a1d-46f6-bde0-cf2e6c0a53ad", "indicator--b7806b23-bf7e-4852-b62b-6aa2181d464c", "indicator--d2caaa8c-9588-498e-8eae-3d3cb7ce0382", "indicator--766b93ea-f242-4e63-8244-baf23322e336", "indicator--5bbb55fd-a4d5-4874-8729-870da6a88dfd", "indicator--c1e605d3-8273-464d-93e2-c20daf670c03", "indicator--da8836e4-0c82-4bdb-b5d0-5f380a84ca48", "indicator--eecb5d6e-a8be-4953-bd0a-31b97ddb374c", "indicator--3905d50c-8f23-4628-839e-f1d6e035f3db", "indicator--d0d843bf-bb5a-4b90-9446-39c9bdb68f27", "indicator--668e4738-2c55-41ed-8ef8-21773609b331", "indicator--d148e196-9f51-45ce-9d91-7143e2aaca44", "indicator--cfb8458f-dfbd-4055-b270-c7e6c2fda619", "indicator--0546af1d-442b-4d0f-962d-9426494662ef", "indicator--1a541cbb-e745-40a5-b214-a5812ac0b98e", "indicator--c5debe8f-21c2-4672-af71-1869c70fe699", "indicator--bfd2fa61-bda4-4e66-81e5-2023675ffe40", "indicator--c569b2db-ffbe-4ba4-9b3e-df644d5cdbec", "indicator--41cb31f8-f51e-4727-bca9-0608815ca658", "indicator--41cfe97c-4e0f-4552-8a5e-5063d2caedb2", "indicator--e6417d76-120a-42f0-a486-07a47963d944", "indicator--13ca8885-e609-4a95-8f90-fa6cec12bbb4", "indicator--f3f81a00-ecb2-427b-baf8-1a6667e73d12", "indicator--8dcfb8c6-7fa6-4813-b8a8-309295f83e66", "indicator--9b165749-fb28-4015-8297-56a2fa4baede", "indicator--c1b20a32-451c-4eff-b2a2-14f46dca53b2", "indicator--47e0bd6c-f241-4e3a-8753-3cd8d097692b", "indicator--d2af094e-583f-45d0-a271-1445151e4ebc", "indicator--546cd97a-c040-4c3f-a2d0-8329e49ecc76", "indicator--2db0743d-12d1-4c61-b4d3-9da0ba896101", "indicator--657d3507-e978-4ebb-8d41-c00043cb88e7", "indicator--76f7a290-bfbc-4779-9672-6ed9511c5570", "indicator--9160c55a-9c75-48d7-962b-407ecc18cb5c", "indicator--c99d2dd8-1ff8-4e7c-9ec1-68a90c8b65cb", "indicator--d7bc6218-27fc-4b99-8563-f3a6f98d31dd", "indicator--b3dadf0d-43f0-494d-89af-ea77102a3cc7", "indicator--4010d9a6-62b9-4571-bf18-a7a30dbcf88f", "indicator--624e7a31-ff4b-454d-b4bd-adc25171dc35", "indicator--29fe6b85-749d-4ea5-9b22-f7ddd2ea3867", "indicator--daf1c848-ac12-4378-b5b6-90ff62e76af2", "indicator--3067381c-edaa-432b-8d60-6403a70ef311", "indicator--ba0179fd-fbdf-437d-a41c-cf6b98a0ba03", "indicator--19b425ea-5ebc-43a2-ae19-042487c12396", "indicator--8ea8b851-d70e-46c9-8449-1e0ea7c8f3b1", "indicator--aec77c98-c93f-4daa-8494-f2d97ed6c35d", "indicator--9ac039d5-4360-4bcc-94f9-8e5231014ff8", "indicator--1b2d1cc4-9599-4bb7-b12d-cb9452bfc3ac", "indicator--d961b8cf-b5b3-4ef0-ad3e-5b50021ffa05", "indicator--2e046a02-7369-407d-b2ff-7e6221f42ce5", "indicator--f5bd0b5f-7418-4a78-bf73-ced550f40683", "indicator--82f676db-643c-4d31-9b41-c62f74c3d919", "indicator--34dac270-0a10-40ed-a377-10773605b9ff", "indicator--b293290f-9b9a-44de-aea5-fa08774a8664", "indicator--c489c24e-9086-4d73-aad8-35bc3a988a5d", "indicator--a81225c3-40a0-401d-aff2-0af09b4f67b3", "indicator--889ee700-9419-4c09-bf2a-ab1e8d8d0150", "indicator--7ba80647-1d6e-49b3-a6c0-323fb3122447", "indicator--0affeb20-1039-4a1d-83b9-df0476f4c56c", "indicator--c6e446fc-af4a-4af4-8330-54918c554f3a", "indicator--398fde07-781f-4585-b86f-b275c2a82587", "indicator--70b817bb-f5be-4206-b4cf-0924be1dce88", "indicator--ec4af933-7c97-48e4-849a-3f70e5f6b6f6", "indicator--dae7d8d6-d401-4c1a-8d90-1040d45be189", "indicator--fd002bf2-e9f6-4b2a-961b-a4c26a08b106", "indicator--63e4bee2-9037-4ec6-981e-63b43256f834", "indicator--ec952a53-c21f-44b0-9107-e5e1375e8c9f", "indicator--956213fc-fb63-4dc3-8d10-3204de97d8f7", "indicator--1bfe525a-c7a3-466e-8e58-af8202840975", "indicator--092de6ad-4536-4ebb-b89d-e385833a55ba", "indicator--8dc4cddb-cd2b-47e8-94ef-ef00c3218c3c", "indicator--616ed128-272f-43c7-a424-e23d1ed9d1da", "indicator--5840c6a8-96dd-4118-a6cf-7f3aade75390", "indicator--252be129-2261-4989-b3cb-d0343b2b7dff", "indicator--f24f519f-0e74-4ce4-be0a-f7107bfa43a2", "indicator--cea3a446-01d7-4344-81ee-a037740d42cc", "indicator--19938167-b394-4203-91fa-6a7442107095", "indicator--2ce6680c-f81b-4a9f-9afb-15f930bafab7", "indicator--6e47c6cd-60ef-4e19-9cd1-eb711fc0087d", "indicator--d99070e3-e36e-4ae9-9044-e973228b30c2", "indicator--93d7a06e-639e-4db8-95ed-6da9e8d509dd", "indicator--3234ce88-01dc-4989-9702-dd324269c362", "indicator--1a8ef70b-e75f-4ba5-b2a3-4543421a0322", "indicator--62feecda-88b9-4da4-9c21-dc795990ae86", "indicator--bd02fdb7-7731-4b5c-aaf2-718e36260d5e", "indicator--8874b966-f1c2-426b-94c6-ffcb3744809f", "indicator--2776d45c-bf19-4cda-897a-4a4543821266", "indicator--b5af11d7-3838-4c78-b53e-26a1e3504b56", "indicator--77fbc5c5-7dac-44db-850b-a2b4a32d045a", "indicator--dbb0b185-bc89-40e1-a786-a8c9e86bc059", "indicator--e1788e05-4f50-49aa-b732-072d549047c8", "indicator--0ad85e04-7777-4bf0-b46a-e41af69df40f", "indicator--d7415bce-ef95-4e40-84b9-228dfd553f4e", "indicator--b956bc5e-990b-4e6a-9ccf-e0d19afcb466", "indicator--a258d398-b9c5-4097-8261-7d1ef8f8c8d2", "indicator--b8575c6c-89ae-4d57-967d-737eb9a5ec69", "indicator--80e4c0d6-2097-4c41-bd85-e48c931b8bfc", "indicator--ba79e23e-e8b7-409f-85ff-d34d112ba7ee", "indicator--40149f2d-4504-4109-92d3-4b6f1f2f31e8", "indicator--b5943b76-7612-4dca-983a-b47e748704eb", "indicator--dfaa8aef-26e4-4167-b3de-d4253fabcefa", "indicator--c12f4556-4e96-4dd8-80cb-041c14fff48e", "indicator--b3db7a28-e2b2-48f5-b0c5-b9b6303c0ea4", "indicator--e8826229-688f-4cb8-aec0-0f060c81bd09", "indicator--2e133d93-a86d-4026-8f8e-7623dde87764", "indicator--35ab0d42-dac8-46f3-bede-2a9dd6ffd489", "indicator--17a6dd6c-6516-4a56-a55f-70217e34642c", "indicator--fd1c8f30-b601-4eb8-bba0-fe7e77193016", "indicator--58069044-fabc-4a1b-accc-1f8674618a6c", "indicator--30cba73d-bd63-460c-9ea7-731162b65828", "indicator--5df78ea8-9e13-4ea1-a895-e196f4c005f2", "indicator--07a17620-d3ee-4e0c-a4bc-65ed900b1ba8", "indicator--dcb1bf88-157f-4f5b-9db9-24ee50838c41", "indicator--307b66b5-94e0-42ce-bcb3-84ff78e349a5", "indicator--cca601ca-0986-465b-8162-3fa5cc2dcd72", "indicator--4805b902-e6a9-4b0a-929a-6abcd329d94a", "indicator--1d90d2ff-8fd6-44bb-9092-02a5378de2ff", "indicator--5743ffd0-f4c6-44d3-9a6e-c8ddfab875cd", "indicator--e8f64ada-b06b-43a6-a0be-4791f5274d31", "indicator--6f956178-5476-4137-8e64-9a258fd68823", "indicator--cd47b590-8453-4c20-a140-a0e409ba0f83", "indicator--8177253e-d125-42a9-8190-21d8e6fce301", "indicator--6b0ae06c-ec86-42d9-affa-8466b88cffcc", "indicator--24c95996-347a-4496-a70c-18d9c2587032", "indicator--2f36138a-575a-40b0-9109-68de631bc0af", "indicator--0a9dc0a5-24cc-4ba9-b659-049a7d56d1ee", "indicator--17569247-bf33-4bbe-a017-e5eabe266e4e", "indicator--c08afadd-743d-4888-9f79-c9a389f06d10", "indicator--d26564eb-2ecb-4f6d-b3e1-8a20c0aa8f7e", "indicator--8d41406c-a7d2-4e04-818b-0e8c697a088b", "indicator--6b12fd19-6656-4d71-a114-e86811c10c32", "indicator--8269326a-7b87-45f8-80db-9b8cc3a0c721", "indicator--c7a07d72-b166-4012-8289-a5f572203893", "indicator--027047b9-a7da-421e-8be6-f80b6422c3ea", "indicator--60b01aed-f364-4933-b821-7caac593db4d", "indicator--74f73c6a-6915-4d07-a84b-9420c3e36c0a", "indicator--e5084fda-918b-4aed-ba97-6e8e1a0c52c0", "indicator--80842cd4-d53c-4386-8222-0a3edd639909", "indicator--3de2aeb4-823e-41d8-8abb-58ec8ea25ec1", "indicator--5eaf6429-b4f9-45b1-ab8e-445779423ad3", "indicator--5a83260d-518e-4b80-8f84-5b968c29db0f", "indicator--1110a57c-0666-4a04-8d89-8160c159fc85", "indicator--64c70d6a-3c41-4bd0-9eb3-d0f694a39d37", "indicator--065cd74e-3fc2-44fb-ab1f-c00445225812", "indicator--6ddb681a-6986-4182-9ddd-40083d2f5758", "indicator--0511ee76-491a-4a82-b527-98b9866f8880", "indicator--a2d7636e-6515-440c-8c52-4bd43c63e4a1", "indicator--0750aafe-d128-4416-8414-474768735840", "indicator--fb2b04c6-8e46-4201-b6a5-5eb185d93635", "indicator--fcfbe368-f65a-4c10-a6b7-7c4476fbde2c", "indicator--9a8f2ab0-1ba5-4bb9-ba2b-c2bcffb415eb", "indicator--ed1aea4a-6ff2-4cfc-87ad-31e2aa89e37a", "indicator--1ae90472-4b91-464c-ad0f-a187bb282afc", "indicator--3375cd5c-ec66-4819-b7bb-fa8b8fd82cd5", "indicator--455ba2c9-c699-4f57-b510-cb8625d77f34", "indicator--d7f41375-8265-4d99-91c1-4d24b5ac0a30", "indicator--a898859c-32f1-45a5-8f1d-a3cce07f8508", "indicator--cd60c657-8ce0-4246-8ebb-14f047694f1a", "indicator--49f6b6b0-696f-447b-9615-7343d8bf3796", "indicator--dcbeca9c-7ada-4d26-98e6-29a6beeff514", "indicator--34a70436-d8ae-4a98-967a-699801bb8622", "indicator--0088a4f8-4746-4d57-8d7a-c2c413eaeca2", "indicator--855c26d6-9682-48b4-9f47-68b7cb70f776", "indicator--1aff6839-3460-4335-8277-9f6b36580930", "indicator--c2a3471f-ff0b-4bc5-9904-e81c22fce838", "indicator--0c3ea9bc-f0a3-4df2-b22f-1c591bc0d432", "indicator--f9f7dc1c-6eac-436c-ba6e-9d15fdf79734", "indicator--4ca07b97-dbef-4426-b24c-2a3b8b39ac52", "indicator--c7d1e8ad-4388-4f36-845a-70d057d1da33", "indicator--f81d7012-3695-4373-b1e8-91ae3c473a3f", "indicator--5e293f30-7334-43bf-96ba-7510279f15b0", "indicator--a486598c-3ed1-4984-9ed4-b409742a0601", "indicator--811fda90-db2d-4e2e-ac22-f414a9638ff9", "indicator--18042159-a612-41a7-981a-2b68fad70b23", "indicator--5ba824b8-de1e-4262-ad46-8694661397de", "indicator--4420bc6b-ed6b-4d5c-9c60-d2674a2cf1f8", "indicator--afc02096-874b-4b0f-9679-e8bf00626674", "indicator--a86913e1-a096-4de2-ba85-a5ca1338abb2", "indicator--176ef8c0-5eb7-4cd2-93cf-c66cddefcb27", "indicator--e2f0956e-6a48-4a3f-981b-8faceaf59382", "indicator--4fe8bbe8-ae9e-48af-bb05-19f625273b46", "indicator--343da24c-0066-44b8-a370-9d996c0fd6fe", "indicator--48ed7154-14dd-4f27-b9d5-a2ec3721a964", "indicator--25e26f9a-cd41-4ffb-bab8-8b893b619fa1", "indicator--b02c9d20-0009-4da4-b812-c50ea6394f2b", "indicator--cc01063c-400b-4d17-b221-ac7deefd9c7d", "indicator--4cf14872-95b2-4557-b3e0-0824ff31b8e5", "indicator--49d21654-4bfc-4efc-98e6-96f7b96530a2", "indicator--2fc246d5-cf3c-4c1b-97ac-412bce25eaa3", "indicator--1f4510d9-6139-477d-9439-0ae6a3dc7df9", "indicator--fa1c2210-9cef-4044-ac63-980c4cea7114", "indicator--14018bc8-3df2-4e4a-b3f7-94d31f8a4f63", "indicator--2bb83c15-5352-4f71-894f-53c2ea91d0e2", "indicator--1f54a6e9-08be-477c-a243-d9b417465c43", "indicator--c51c78b8-cb5e-489c-8c2e-de78946259dc", "indicator--d93d9749-1c39-4eb7-a36b-a8dc5572c92f", "indicator--94022a26-f13f-4cc2-9ea4-eef8a7f88f49", "indicator--ce5f7616-0b6c-4587-a5da-139d0dad50b0", "indicator--7544f1da-0ea4-4e82-94dd-c9fd58c56cdb", "indicator--821b8a72-fef4-4426-9618-afe27974ba75", "indicator--2ad98035-87d8-4da4-bc0e-9814d210c4fe", "indicator--58fbe7f1-6080-4f51-b31a-c19186ee549a", "indicator--9a49fe7b-e66a-45cc-956d-db3bcce5cb1e", "indicator--a42566cc-1084-413f-bdbf-e48a1d8b1862", "indicator--dbb72eb3-a2df-4fa5-a3e0-56720def5187", "indicator--08cf089b-5eee-469f-a077-aa990755e50b", "indicator--9b6f9a7e-fca8-4c0e-85b9-6b704723523d", "indicator--c72d1507-bb8e-4b2c-89ab-5889f5c33bc6", "indicator--0e3e7cb0-69ab-4a5e-aec6-1d7bf396126a", "indicator--425b0b1a-fafe-40dd-ae7f-1ef78eac236c", "indicator--841d64bf-4f55-4b2b-97be-3dfa1eb7294b", "indicator--d128ed65-898f-42e9-b5ac-ed2de7ec345d", "indicator--0e837f5d-70c1-41b3-9548-3474e95cc6f3", "indicator--c541072b-09a6-4ec2-99cc-953232986788", "indicator--2080c0fa-f3cd-4259-83f8-eed9c15e3dac", "indicator--0ebb8845-4599-41fc-af8c-991415daa0d4", "indicator--7783534f-9d75-4973-94d7-87570f24221c", "indicator--71fe1829-e133-4bf9-a644-4d7e9b60cbfe", "indicator--9422948e-86f6-4e5c-bc01-666a2eece3ce", "indicator--2957a1d7-8d48-4b3b-9ce9-ade0afeb45ac", "indicator--d159075f-e702-4623-a96b-48797ff9773c", "indicator--55e50d81-3a10-42c5-a89f-96918e402ffd", "indicator--2cf4b344-3418-4013-9118-790b20aa4ec4", "indicator--ac430321-09ea-437b-a535-91a076b88274", "indicator--71bfffdd-a9f2-42cb-875d-16d672cca7ac", "indicator--3dfa4c7f-0ff8-4f1c-b6d9-f8afc23cfad4", "indicator--d3f4011d-6c87-404b-8a52-62cc9bea6015", "indicator--f14b3687-d45a-418b-bacd-8c598654201a", "indicator--4d4ba95e-dfb9-4380-ab8a-64fee9c1587a", "indicator--591e05c2-0118-4a26-bdeb-01ff9f34df45", "indicator--f87d3823-2540-4671-90be-accb7203bd7b", "indicator--3c47bb9a-32fa-49ad-938b-cf0dbf79eb2f", "indicator--f70d86f9-70ce-4b52-9fb4-b26967b2f1c1", "indicator--e8eb748c-46e0-4b15-9d54-ad734d865f44", "indicator--e6d40805-44b0-4445-af62-389c07c35cb9", "indicator--bcbc41e3-f6d8-414e-9e69-dc0ab4b4bf80", "indicator--00c769f5-8a93-4199-aa60-f1282d10e0b3", "indicator--bc55f4fb-3270-4bc6-9e7e-3814d4906d55", "indicator--c90fa3e8-9f3b-4283-a106-e9ff90b84d51", "indicator--514e6d5b-8bf0-4120-891a-3bd78d2fa6be", "indicator--8e0c690f-ec10-4fec-a87a-6ef5fbf88c2c", "indicator--c0c9239f-74ce-4482-9c33-dce763947f7a", "indicator--546b646f-ee6e-4bbb-a169-04b56cb35999", "indicator--1c34fadb-e7ab-476c-991d-ce7a2d824b50", "indicator--ef749e4d-e3dd-43a4-8566-bbfa616a77f4", "indicator--25886636-1072-4577-aeb4-e20137863144", "indicator--acc263ed-23ab-405d-ae31-d0aac9db2019", "indicator--cd2d6958-9d06-4b4b-b21f-f5b1be9d6dc5", "indicator--c3122812-d4ab-455a-b679-890858df3a40", "indicator--1ac78594-94f6-4d17-b62e-3ae2657d8633", "indicator--0348c7dd-7b81-42f5-90ec-b56a383fb761", "indicator--c64a7ad9-b6e3-4497-9845-9a4fb4ab645b", "indicator--76e444ba-3cbc-4c2d-9446-f22bea8410cc", "indicator--86dbc65d-1273-42f1-b39e-32ff3ab44707", "indicator--a94b3b12-06ab-4d7d-a2ba-a9043be2b29a", "indicator--ae83f5e9-7877-46a4-a81b-d13bde10a8a9", "indicator--bc9ba38b-3916-4831-a8e7-5e0bac844ba9", "indicator--34ffa2ee-ba66-446e-a18e-206541a56c40", "indicator--013376af-6727-4d0a-a978-134278a3aa7e", "indicator--95228fa2-9d4c-4703-a546-1f8fada3f697", "indicator--8efdb938-769c-4302-9533-0ef9bec6eed5", "indicator--ff174178-4ca0-43f2-b668-e55da47702e9", "indicator--99fc8746-c8c5-4935-afdd-0a7f15b80588", "indicator--88b17ad3-2830-4278-a4bf-9649249e4284", "indicator--e0f48bf6-d1e4-44d8-a4e0-a11ed33679ec", "indicator--914c4c39-200f-4bc2-b9d1-19dbafa2cac8", "indicator--269e3f37-45fc-4281-bd75-99eb4df9a2f3", "indicator--bd60a11e-d7bb-4648-8715-818fd9d81ca1", "indicator--2471d5d8-7f5f-4407-95a8-116a5fa33e5a", "indicator--41b59e93-ea18-4026-bf80-06a6f6d662bd", "indicator--eb3d44fd-83ca-4ba6-8614-93728bb4879f", "indicator--9eadc629-e991-4121-8567-1883d2101e07", "indicator--dbc10c1e-6c0e-438e-b27a-fd7cf7bcd084", "indicator--5ff1e902-47b9-47da-94a4-4f9ee83ba642", "indicator--c7df5692-aa38-47e6-b6dd-ca3badd428ec", "indicator--6935babb-ea50-4da3-a1ca-c8942422f28f", "indicator--18ac531d-a01f-4c8e-b262-fa01218a2a95", "indicator--ebc354ef-079f-4fbe-9229-a2db8e8292e3", "indicator--8d431560-8bc5-460b-a7ac-32e640387971", "indicator--01de35c1-d99b-4f15-86ac-14f0b52e7572", "indicator--9ca4aaea-c16b-4cde-8d91-2930e2fd229b", "indicator--e7a7991c-edc2-4b67-8ff7-fd8c2a250791", "indicator--8d93b563-2468-421c-8c28-133c6c56da43", "indicator--00075a1b-8764-4f5d-a7e5-9538612185c1", "indicator--b945b34a-9e00-41fc-bae5-c80814c20286", "indicator--bce2975d-711f-4a61-b4c9-0715975cee2a", "indicator--34329f36-ddf0-4a3f-a6b1-2080d874b8ed", "indicator--88729b02-2684-4bb0-8ec8-ed4bfb861971", "indicator--93b38e4c-3647-4e8a-b1dd-d952a676dacb", "indicator--cb799f7f-bcc1-48d2-aa8b-796d0d9cf45b", "indicator--a3457845-01dc-4c22-b448-6619bff16288", "indicator--d0084ac7-1f4c-403f-87f7-a4577eb783b7", "indicator--2f356406-1d19-4f64-85d3-a26576289352", "indicator--be90095f-88c1-4707-a5ac-a9d2b3018c94", "indicator--b6827fa2-e02d-4f42-91fa-f923e91a3568", "indicator--13101242-c8f1-4599-9ca3-e3a20bdea6ee", "indicator--81f78b87-9b04-4480-8b6a-6f2a401761d1", "indicator--656dd607-97c9-46db-b1a3-1b85ab253048", "indicator--2aa331eb-12b8-4d2a-bbc2-33ad97e8fa86", "indicator--26013c60-85fd-41f2-9c8f-9c1243e5b7e3", "indicator--88292789-b90a-4cc8-a42d-be0459bb7377", "indicator--1f30bc38-c35d-4761-9cc1-9c9c70b83f2c", "indicator--b699f566-e4bf-4895-8548-d2c73f68e2af", "indicator--9fa3451d-0b1f-4aa3-b0d7-8f435beb6863", "indicator--cfc4145e-426b-4065-b86a-ddc3e9283161", "indicator--5c0efb82-d54f-4472-a9db-e0f38021ee21", "indicator--74b9119f-f02f-4272-8fcf-574d87ea8336", "indicator--fbfc62a0-0327-4990-a7f9-6d3b90fabce7", "indicator--0c42e353-0b90-4b23-9686-ada044e908b4", "indicator--c320e51b-f56d-4cd5-bd89-35711bc9e92b", "indicator--6fcb06ce-f2b9-46b8-823d-ad1d95d98c02", "indicator--d21e323e-be0c-48d3-93e5-b1e600d32370", "indicator--9618df26-7542-4b43-a2b1-7badb820eeb5", "indicator--c8cc5dc5-10ee-4520-bb5d-b6d1908688e4", "indicator--33fc1b34-5fd2-4a19-b4f6-1ae325e78b03", "indicator--52a3cbcb-4a52-4e9a-aef5-f62ea4d212fa", "indicator--76bdb798-83f7-4a94-a55c-91c6ab2327b3", "indicator--81f54443-d926-4b12-ae0a-c49cec55db17", "indicator--1be4158a-9de5-4507-be61-623416c17ef1", "indicator--4c2de12b-f277-4fc5-8985-b184dad93f70", "indicator--e0c63bbe-7ab9-49b9-90cc-6cd04ed8959f", "indicator--8a925084-a30d-4b20-af66-8360e7ede239", "indicator--35d1f55e-0ef8-4c78-8808-a9a9ee503626", "indicator--6084f512-8a32-4739-bff7-08d466ca3d31", "indicator--b4facdd7-ca56-434c-8d27-77db050421d0", "indicator--a1d24251-a7ff-458b-b501-a7937977c5e2", "indicator--c8ccbd83-6377-4957-bd71-fe3dee1d0df2", "indicator--b67fcaaf-9607-4d47-bed0-7c41834ac5ce", "indicator--2ef2895d-f352-4292-99d2-fa7e5117e347", "indicator--a4f80820-bc1c-4423-ba5a-67aa3ef05cff", "indicator--16f66812-46ea-4ae0-b762-b06eaf677634", "indicator--c9db67d4-3123-4ff6-9e51-5582dbd6a4aa", "indicator--105ee3a1-8172-426f-9125-360a114cfb7e", "indicator--9c388b59-c89d-4028-a43f-fa6c4a87aa80", "indicator--08968989-9728-4294-9dba-da45ec95c6db", "indicator--c7da3fa3-2e7d-470d-ae9c-2d6200f290f1", "indicator--7c5459f2-4895-4100-acb7-9302f9d5fba3", "indicator--34ff6be4-f9df-44e1-b049-09bcd12c6a67", "indicator--e7e1c4dc-c14b-4284-9e4b-effe1205f5ed", "indicator--55ab5d9d-67b5-495e-b36b-d03eb998642b", "indicator--d70d125a-c9a1-410a-9229-d1925feb6ac3", "indicator--9323b011-deaa-47b2-bdbd-17b61036c08c", "indicator--5db67d79-6453-4ae8-8607-f7608a309787", "indicator--da1d4017-c5a3-4bef-b7b3-972370ab5e6c", "indicator--8fd1abd4-f322-42a2-9ad0-f55e4792cd72", "indicator--a156c2e0-56b2-473a-8dd1-c554554ab9ee", "indicator--66436dad-7e7e-4ab5-90d2-d4677bafe499", "indicator--669db1fb-71b3-476f-85b8-870907e3c2e4", "indicator--75dc9abf-d362-4543-bea9-b7da4f8091d9", "indicator--bb0f8cc6-3b36-47f8-bfff-fbbc4f950ee7", "indicator--c6a11809-f123-47e1-8cff-dd4b8c7600c8", "indicator--8862d292-b5f2-439c-896a-9153e8690b4f", "indicator--4bd1c587-9483-4d12-93b7-61c512e720c6", "indicator--7ff614c5-2a17-4fa0-86ed-ca96a4b07ed5", "indicator--3865bd06-dc81-4fb0-bd2b-bf816441fa53", "indicator--98c23d45-0afb-4199-bfa2-ab0b4da5eea4", "indicator--2df41093-04b7-49c8-b38e-953155b986d2", "indicator--b0000c0f-b87e-4505-8777-2d6dc3d4ce80", "indicator--7e32552d-61bb-4fe6-a1f4-eb73bf866295", "indicator--aa52ff6e-e68f-4f58-8227-d788311da990", "indicator--fe5117af-6ec9-4511-bc25-a67abddcb913", "indicator--f9cb0774-7a54-49b6-91cb-373504c58105", "indicator--35f93f01-334f-45eb-b771-fb2ee6384bdf", "indicator--7c97cd36-aee0-405b-b35b-bbaa5028b532", "indicator--f446da75-fb35-40ca-a0e0-7303c694c2d8", "indicator--b9dcad28-bba7-43c2-83ce-a16d0529fcf1", "indicator--377acac3-88d5-4f3c-802a-a4f95beab7bd", "indicator--28573035-f254-49b6-a2a5-eef9c1dabbfa", "indicator--3b27a8c8-447e-419d-a55c-fa9a6d946253", "indicator--7204f921-b660-4aac-95b0-a0bf522c70ce", "indicator--7d5851b5-20b5-4cd1-b9d4-bf125e6d0e9f", "indicator--d590b3f1-21f6-4730-915b-69f40c6cd898", "indicator--acd444f0-c70d-46d7-9372-e0f643300e2d", "indicator--8adfc8b9-5555-4100-a227-e8d3e6b568ec", "indicator--abfebc01-77ca-4433-8e88-21232ebadbb3", "indicator--456af535-7575-4747-b959-bc9f51a4a65e", "indicator--e0fb0427-23d5-4b3a-8870-445efba4f284", "indicator--995b5df5-61fa-4903-928e-64260e201e08", "indicator--eaa1c290-d1d9-47c4-a274-5e5f628df726", "indicator--5c02db0d-ccfa-4829-be5f-ac676d8641cb", "indicator--6e4ea500-be73-4579-aa22-c90891548d85", "indicator--7c099be2-c75f-4fb4-9174-36b6f68c73ba", "indicator--6a7f8d73-b538-4667-960f-ab4796e91c3b", "indicator--527b3c8d-73fd-4fd2-b163-ddd4d4779851", "indicator--587c4d97-90b3-4ed3-bf80-32890b0f6df4", "indicator--a5f7ab2c-d8df-4001-8580-14eca6220713", "indicator--0ae4c97f-e289-4f6a-a253-14df61f755f7", "indicator--2be40c78-c102-46ca-9832-66233b987410", "indicator--034bc6c4-2b96-442c-bd58-71d8faa79240", "indicator--4d8a59d7-9517-4588-b38f-0c7d9f1510ae", "indicator--fc6e1cbc-4f04-420c-8df2-17ab7cc16aa9", "indicator--bfb493b1-9f01-4027-a162-88250ac13d4d", "indicator--d266c3a8-36f8-4433-960e-6a82edf1a9de", "indicator--4b80ce7e-a5a7-42ea-8302-ea8bd25bc4a2", "indicator--b538873e-625e-4269-9bbf-0a59e6232952", "indicator--cc420143-2afc-444a-a4a7-11c5760f3672", "indicator--67f8d62e-b0bc-409d-a7f3-d8c61888e366", "indicator--9053373c-ff2e-478a-aa25-0b7f17bc6655", "indicator--9d7fda0d-1930-452e-8de8-bc3faa59c55f", "indicator--bc6b6449-3d15-4da5-89a5-7db8525f84ae", "indicator--4bc938e5-f2ad-430f-bcf3-90f27588d76f", "indicator--ddb5ad70-84dc-41c3-bd7d-adad7d8e3454", "indicator--1f84a782-3838-4fd6-9eb4-5ff58415df79", "indicator--b23c31b8-1193-4cfe-b1bc-a1955e9edbac", "indicator--e09f17a5-5753-4f4e-93ab-d6422b7df79f", "indicator--f47e07c5-4a9a-45c5-98c8-f6499f55880a", "indicator--3246f537-905f-4341-9a2c-a54766b1a11f", "indicator--764ff44f-a336-4091-a066-159eafab60de", "indicator--420733bf-e941-4356-a53c-cab30c8e428f", "indicator--f7e13928-d90b-430c-9320-11ab37c4c9ad", "indicator--0e5c5536-9e25-44f5-a7fa-b86fd8f2df65", "indicator--fa13a5bb-fc5e-4944-a9a8-da8d39cbd960", "indicator--687a5583-269f-41f1-ad2d-8ecfa039e948", "indicator--fc409742-c501-4cb8-8f66-35f7214f2375", "indicator--81553417-9f96-4b5e-b8da-5e346d29b145", "indicator--bc87b4d8-87c2-413e-9e1e-d69a34702fa6", "indicator--3ff5c29a-b1b0-430d-aa77-d2a72bbf021e", "indicator--5a754ce7-213d-4556-a4dc-37157cadd4a3", "indicator--cdead1f7-cf68-4c76-a8ee-e3423759241f", "indicator--9b57f88e-31a1-49f0-9be6-fade7a7f8521", "indicator--69b14cca-f1e5-4f52-9fd9-e0c499eb25eb", "indicator--71609737-f4f6-416e-a75e-515a3d5684b8", "indicator--7f49de6d-7375-4760-85bc-9d91312e27fe", "indicator--77621c57-7c8d-4e4f-a97d-57390e3b6c35", "indicator--aecb69ec-5983-4a54-b32b-cee9bd4f87a0", "indicator--b40d5f48-6b7f-48d9-b667-3ff7cf5d2d32", "indicator--2d74309e-50de-4bfe-ad8c-11ca4c839fb7", "indicator--d19a9ac6-c5d9-4a38-b3a2-f4d229d56137", "indicator--08e5683f-5b6a-4493-9004-9f15368eefe8", "indicator--c27c51a6-013e-437e-b717-83927eb60493", "indicator--f558590e-c12b-46ca-b0a4-b7ed3f8b5216", "indicator--a2aad1bf-a3d9-4787-8a88-4fdb3a7d5d27", "indicator--4f543ae2-ee9a-4a41-b15f-0eea692e55e4", "indicator--e47e82f9-2362-4e24-9176-c67159ac54a0", "indicator--28c33d06-c037-4aa8-be0f-a0e604bb1c04", "indicator--eccdbd78-3554-407d-8079-eb6efd3b0397", "indicator--33ea7bb7-9045-47fd-99e1-4186de044425", "indicator--d5860600-06f1-4bc1-a132-e962acd7364a", "indicator--50c8c624-0b92-4448-a3ab-2f437c5e8dae", "indicator--6ff13ec6-a26a-46c5-aabc-1af9ea2b66f8", "indicator--b9b9fdf6-ca81-4a79-9542-0e0a45264c69", "indicator--04c51cb6-a6d7-4f05-bc36-aa7cecd1f3f5", "indicator--b7be174c-3543-45ea-97ba-9b249411f404", "indicator--500efda0-64cd-4c12-a562-5f954dc307bf", "indicator--ace5690d-efa0-412a-b967-81712df3061a", "indicator--a073242b-219b-468c-8978-fdb1402aedb7", "indicator--aa25a217-2ad3-4efb-ae74-36a6dd893a05", "indicator--4048b138-4ad9-4edb-bc05-d8fd27c5cd9f", "indicator--389e2cef-7965-49d1-b365-a3b47329b92e", "indicator--04b2e05c-1c7e-4c6a-ae7a-229649d7bf29", "indicator--4977d5a6-47ae-4a69-93f6-f025c3d731b5", "indicator--2ba444a0-0afb-4bd5-8c68-5dfbe7dce751", "indicator--f53bbca0-6cde-4310-acba-94e1e3aa9438", "indicator--40fce0fa-8ac3-463a-a390-bc9077951a5f", "indicator--d57f5c77-293c-40df-ae8f-b2fc22a47ea5", "indicator--d58cf7ec-a683-4773-a0c5-f535f9997899", "indicator--9dae58e4-3ba2-40f1-a014-75bda9c3ab85", "indicator--b55507b7-b147-44bb-ac97-25fe8aba9b84", "indicator--ca505e4f-462e-4c8f-9a93-8de934acc5da", "indicator--f9d862c5-d2e4-49a8-833f-a057c7090647", "indicator--469cb907-c099-499e-808b-59f7d8ada5df", "indicator--ba5ababd-d179-4f5b-b059-76ed7216842e", "indicator--9696ffa9-ae53-4da2-9d57-23803306f1f5", "indicator--209b7409-72bf-4167-95a2-b04f28189634", "indicator--5384be7a-f9c2-445c-8bd3-e3229851dc78", "indicator--3be9ab6a-ba8a-4b14-a885-b01390cf2285", "indicator--993ccbb0-f50b-4219-b42b-d940656f5571", "indicator--76517790-d1a8-4634-9235-fc7a1f57f855", "indicator--448b3a84-063e-419c-bef5-f57bef05fab7", "indicator--5165c4a7-0f5b-4b2f-a90e-1d3222dcc7a1", "indicator--abe66f9b-4476-4213-8b1a-9971360fbc36", "indicator--82287960-12aa-4bf8-ac4b-a228b200e3d4", "indicator--ef225f0a-8194-4fd0-b2b2-fc06e67e27b1", "indicator--217dfe9f-a28c-409f-9e13-c254193a1473", "indicator--27892dc7-9d94-4d46-af4d-2eabe572a95d", "indicator--3ab00c3f-27ae-4f21-ab35-5a8ac20518a5", "indicator--1deb16cd-bb55-4ef2-9cea-cbb74df6841b", "indicator--60f43f78-b50f-45ba-835d-7a56412d9c0f", "indicator--d29eb8dd-a529-4eec-a7b4-acf5315473aa", "indicator--331d09e3-c574-4c66-9a9b-8d35f72fd8d7", "indicator--053ef829-339b-4b1b-b06f-057cc7b41775", "indicator--b26f9a97-83c1-41b7-84e7-8e69083c8e92", "indicator--fc4a9c17-0f0f-4f08-a783-7b27c541ee9b", "indicator--28ce9cf2-d803-4242-98f7-357c56c98d5f", "indicator--4e28dedb-a55d-4597-aa80-3e534b6499a3", "indicator--7e48bc0c-45dc-49ce-a52c-8ec0f3fd06e5", "indicator--0a3e02f0-ed43-42f7-bfe5-cf525a145ef4", "indicator--62248302-37d9-43a5-a07e-5399322d0a13", "indicator--916a78ce-3eca-4ae5-b583-4704d07438ef", "indicator--24bb46f3-0713-4615-bfb3-eb5655879476", "indicator--29666d19-c51e-4450-88b3-08459632dde5", "indicator--ddbd7ec8-6ee1-42ba-936f-d19072bf51db", "indicator--58fdafd7-8b3a-4492-a83f-ee4378254901", "indicator--b0c7be7d-b974-424c-9242-bbaac586bcd4", "indicator--0bdec5cf-734f-42ad-bbfd-7c893301d834", "indicator--8b6614e2-368c-48e3-b9fd-9d92e7c11c8e", "indicator--5dffb43c-6b09-49c6-9ee1-fd5aa190455a", "indicator--2e7e0463-5cb1-4220-b5c0-a251241a807c", "indicator--7114cd07-08c7-4f7a-a671-00afcf1ab19b", "indicator--23706d31-912e-4568-8df0-b2dd5f0a21f8", "indicator--dd1b4edf-d27a-4d62-b204-f18541353c8b", "indicator--9bf8dacc-5c78-4315-8725-05fb2cfb3d59", "indicator--aa0f42cd-a8ed-40b5-ba9a-342d182d4efa", "indicator--ebc16d78-3e98-4ebf-beac-581be6f98c5d", "indicator--53149f31-9851-4530-af77-22d1635c67cf", "indicator--1bde10e1-8ba8-40f3-9250-0404ffa19d38", "indicator--8657f53b-6f5c-433b-a5c6-14976c1ca256", "indicator--0e0912b0-79a4-47c1-85aa-193a20898190", "indicator--906f1b9f-6d8b-448e-90c1-f4fcec011e65", "indicator--28d0616a-54b9-4b2a-885a-557a6804bf32", "indicator--bc77f450-2c6c-41b0-a6ba-528c622683ba", "indicator--77bb0043-15e5-46e9-931d-c346ac7977d5", "indicator--8f90d867-47f0-44df-a124-b49cfcd12927", "indicator--bee1e664-a510-450a-816c-2c131e226371", "indicator--da76eea0-1bb8-44f9-991d-3d77e27af777", "indicator--16747e94-ee95-4e78-b28a-f3674f8d907a", "indicator--e3f3e6c2-dd07-4a5c-aa5c-68d1a1e40658", "indicator--05c8e5e1-529d-4da2-bf82-20ce31e41ae5", "indicator--e2fd43f7-15fd-436f-a012-738b6b365a9f", "indicator--9a1d87cb-54a8-4b5e-aaba-43f326462426", "indicator--b6c1aaae-ff40-472d-a539-e085a528a189", "indicator--33de5752-c32f-4422-815a-50448c9ceca0", "indicator--a1e4f705-b7db-4f68-abb8-6db1598e24b6", "indicator--129af828-b6d4-4b92-a9e5-8b65aa5fabfe", "indicator--9bb85cb9-bd2d-460e-878d-d2ec7ef19b3c", "indicator--a2e2e621-7593-4d3a-8886-8ed6eb789131", "indicator--8fbd35b8-f7c3-44a6-9796-1f7e7f4e5f15", "indicator--89a39d6a-3849-4d68-994e-88fcf1df2a7d", "indicator--67f0f0e7-2fe5-4af7-ae4c-c50113175c61", "indicator--6fbc239e-6aa0-4cdb-ba42-69befd9f9cc2", "indicator--7f87b5ee-c506-4c3f-b3c8-1ffd378a4b59", "indicator--7d0d9be1-b314-4a18-a812-394efaf36eed", "indicator--e08e5d50-9f79-4c55-bd7b-a3f9d348b288", "indicator--07cc8897-5221-44eb-92ef-f90c27cbbc31", "indicator--2cbf00a8-d9a7-412e-9466-d140d0b18e5d", "indicator--70c3c473-6290-428d-a0f0-67380ef1ff5b", "indicator--c87e571a-a88f-4c38-b2cd-d4baad656250", "relationship--9e427047-f3b4-4d35-8a16-6621d55e8987", "indicator--33f26b8c-7d7d-4e45-901e-9897b23d8531", "indicator--16b80017-2dc2-44ec-903c-9471e89131de", "indicator--4172a8ca-c84f-4a9c-8d9f-9b050e8148b1", "indicator--4ead82d7-b3c8-4a0b-9437-d8ba3adad9d9", "indicator--9c189da5-0801-49d8-bd87-175a28b780d2", "indicator--f63e4195-5ca8-47d9-87c3-cd9cbbe95ad2", "indicator--05d596b4-d70d-4775-bfaf-2e103c6272e6", "indicator--a1d6f836-6841-4641-a872-dab8b4be2eb0", "indicator--86556e93-89d9-4cfb-97da-5ec1c39db53f", "indicator--9704b846-49c8-4b45-b612-6ce2d990e8ed", "indicator--d828271b-c3d5-475b-97e3-bac25515642b", "indicator--025be138-4a39-404d-93e4-bf00be8095b9", "indicator--a1e2aafa-e262-4889-a02e-4ac89a0c8777", "indicator--40100f49-10ed-4a69-bedb-8bc9a27f7cff", "indicator--c7199858-63e3-4145-9162-959c44e907d9", "indicator--41884057-6043-4e68-ae68-691c2c00f0a5", "indicator--07c7ec07-b2f5-4aa9-8582-90024be45efd", "indicator--2ea1063a-455c-4f87-85e1-9cedbad04eb2", "indicator--0ea7150a-2b31-40b0-af53-126b56c567f3", "indicator--39033878-efeb-4b96-bea7-5d1f3e4be7ce", "indicator--445a0f7b-d7aa-4ae9-ba03-7c7dd1ab358c", "indicator--f2f28187-a338-459f-9c27-7e9e4d3ffe05", "indicator--0c9b0469-74f3-4c72-af46-ebe0859ec3db", "indicator--b46f16a9-f657-40ee-a7ce-03078c6b99ab", "indicator--b2196814-51e1-42fc-a39b-6587ad881001", "indicator--fb2da020-8c50-4e80-821e-f22b8e889cd1", "indicator--2831684b-a746-4770-a549-3c210675429c", "indicator--93e98af2-c535-4c56-a0cd-41623b1b457e", "indicator--d7a59481-ed9e-4f07-80bd-da34daa493f1", "indicator--be962c55-c344-4b1c-ab93-1d46ef47a80b", "indicator--07c40891-bbc1-4ea3-9a6f-229215d20c2c", "indicator--60d6b7ce-1397-40aa-bc36-bf791cee0165", "indicator--f8f7402c-a7b7-458f-9988-bde1d0f0104d", "indicator--523cd219-8d42-4ebf-9afc-b67cb674f48c", "indicator--8cc279f7-b8d8-4281-91a4-a70e23260690", "indicator--a1f61f8d-56d6-4dd7-ad1e-6853435e599b", "indicator--b4ff5b47-6b3f-47a7-968b-04b7188893a3", "indicator--2f0e8e1a-39ea-4c9c-a584-de82efc577df", "indicator--0252f128-3521-4170-a49b-bddb60334fd8", "indicator--3f7936d4-17fe-4d43-934c-102e4fddb58c", "indicator--ff1c60b1-f983-4125-b84c-fff09f079d66", "indicator--94b9cfae-90de-4d24-a3bf-a692b1b0112e", "indicator--43d6704c-c3ac-4980-9bbc-0c726c6cf33f", "indicator--390cb91b-86dd-4c6f-a060-fea7f7943189", "indicator--06f71099-f791-4ebb-9e75-ffd1f57f4d29", "indicator--8ea61e26-fde9-46b0-8dfe-a933cecf839b", "indicator--880dac12-406a-4c7b-9e84-b3e6bab53016", "indicator--7366e9d9-f1b8-48f5-b079-9f37273a4d76", "indicator--6559ca0a-85c8-4dfd-a600-aa027ef2887f", "indicator--707d4971-190f-4b64-98fa-42a0e10c542e", "indicator--8819ca39-8215-444a-8473-ba1922ed85da", "indicator--71202aca-e62e-4d7f-8073-043f2b75a385", "indicator--97e68bf2-5256-4705-aaae-0ad94709507d", "indicator--b80c704b-bae4-4373-8f0c-a614934663d8", "indicator--806feafa-8683-49d5-9abe-78b4d6906bd6", "indicator--1124fe0d-05bd-480f-a105-7bb8f51a9e5b", "indicator--8b1f2bff-d461-466b-ad2a-0645c8473711", "indicator--1b568542-bb18-4ce3-8068-b91ac9a86599", "indicator--9283d0ff-e686-43b7-bc94-d9623ca43061", "indicator--dd97dfcd-89eb-487f-8c8c-56d1c457f311", "indicator--6ee6f606-7635-4890-8f35-f97021db07c9", "indicator--f24e3d08-b397-4f61-a39d-c4276b86c967", "indicator--cdd68781-b2ae-48d1-b10a-9fb5ff083990", "indicator--84383003-69bf-4a4f-a8f2-106edd1a5a4a", "indicator--192cce99-e370-4e38-8bdb-422503c0c794", "indicator--cb2f371e-94c8-4f98-8c98-5bf3d3bd6f5c", "indicator--34f99f11-4755-44f5-b9e6-cc0a5dfbd601", "indicator--90fd51dc-4612-478c-9edd-2991fbc31e2d", "indicator--cac84a80-a57b-4114-8a0e-641de4067594", "indicator--bdee8804-1131-408c-8564-1abdf118cf0b", "indicator--be2b516d-daf1-431d-98c8-f80f4778b81f", "indicator--5995272d-6727-494d-8b69-061f1ed37486", "indicator--0e67649b-ae62-4714-9740-b3c0a8f5fed9", "indicator--3d2be1f7-cf8c-4679-be99-cf9cd19dae99", "indicator--7c3d9362-e7fa-4e4d-adf1-9b2d1147cbf2", "indicator--a1c73889-e77f-474c-8a06-2c69702fd9d5", "indicator--bf9be38d-3a99-4d82-b2d4-026d26a9d28d", "indicator--2e5eb326-60f1-4a63-92cd-3714e34e61ed", "indicator--80f8afe2-cfb4-476d-bdf7-2a8ad95d3e93", "indicator--e07f8987-546d-4dbf-97ca-3d2bf0fd94c7", "indicator--b9d925ff-a4a3-4d4c-ad32-e5832245c89b", "indicator--4961da34-1afa-4f0c-a862-ce4a3dd302e3", "indicator--90233711-965d-456e-98f2-d3a2d72ce7ff", "indicator--a60e6808-d7c9-4cb7-b309-5c2de6bf37ce", "indicator--a11dd652-da88-4f27-9b18-b60bb30e0d85", "indicator--ca9edf8b-e1a7-4bc1-8d93-50109e4fa89c", "indicator--01a5e2ad-4b76-460d-8fd1-c57327117e77", "indicator--a59bf4cb-4fe6-4a94-bc63-b2f4db403fe1", "indicator--89e5f8ca-136a-4792-a895-262b00be0afd", "indicator--55514283-b76b-44f4-9c4c-7d37fab87142", "indicator--39b17592-71dd-4a35-9c2e-dc9973e17a62", "indicator--85bf6a6f-e4ee-4cf4-aab1-957c5896ccc4", "indicator--c4bf3a92-8d16-4552-be1d-08e699a40511", "indicator--ef4a4476-7f4b-4b2a-a983-2e15eb02288c", "indicator--fce8ceb1-09f0-4eb3-9f55-4fbf436e658f", "indicator--55cc2f7c-a286-4824-b1a0-9198106bebbb", "indicator--09d49e4c-7d2c-4d56-b7bd-41319b70eacc", "indicator--d2cb47ae-5052-4651-89a9-f9068c5fbe32", "indicator--16458c2c-5a73-40ac-8c14-19b649116b75", "indicator--badd880b-c6a3-4872-8bab-77d0ae2a2c88", "indicator--60197518-c2c4-4d5c-9128-9ce87b0d0774", "indicator--c6c70018-5593-4f45-ba60-f30ab03a38bd", "indicator--5c99b3f2-50cb-4244-8ad4-b990cd6a9cb0", "indicator--30084f5b-d987-41be-a074-4070dde81cef", "indicator--68e65beb-770d-4582-aabf-8c0e2f4c40b9", "indicator--dce3555d-52eb-4ddb-bd47-e17ebb877583", "indicator--b118c68c-57a4-4601-9914-4e927ee41189", "indicator--503d63ae-50d5-4c07-b62f-1232c380accf", "indicator--7804dc04-d8a6-4f2a-ab6a-7eadaad6ac23", "indicator--f3410d5a-630a-4e11-8c1a-b73fa0e5f748", "indicator--a33026e7-fa63-4f45-979d-ce9b4711f7af", "indicator--4d628add-a7f8-4e22-87ed-d54d4fd73cd2", "indicator--128766fb-c26c-4521-8840-378b8edbe359", "indicator--00db9a86-0fc6-4915-93b8-95cd79cc0244", "indicator--b5abe323-d2f9-4af7-9939-a071a6e3aa19", "indicator--dae5e32b-0b02-449c-8fd6-0f42372de19b", "indicator--c974a13a-23ef-4e5a-a279-e57d1fa0f1ba", "indicator--0d0377a8-990c-4a74-897d-faccab5b63a4", "indicator--b2356353-9087-43bd-a049-a630632564e2", "indicator--e2613512-397a-4f3b-b318-259f54deb318", "indicator--13105c8b-faa8-40dd-9083-a970802fbcbe", "indicator--93fc9bb8-393f-421a-898f-76453383f31c", "indicator--2ca8103a-b4e5-44f9-821e-bc3d0dc3af06", "indicator--d0dc73fb-f659-4bba-8e23-47de99d7d02a", "indicator--acf80ffd-a326-4d9a-aab5-e9cf3605c348", "indicator--7d780e0c-eade-4873-a4ee-1a80033f377f", "indicator--9d39f1f0-77cb-4d4d-81b8-aeea05e46b10", "indicator--d3169974-2d34-4b06-9cbe-96b4159609a1", "indicator--77c77b3f-b2d5-464c-86b6-3072bbb05cad", "indicator--f5b1d1d2-ebdc-4340-9028-30ae0aa9b64a", "indicator--f6ff0179-0f19-4c58-9d2a-ebaa0507c536", "indicator--2841108a-2581-4879-aae3-de8d0c222dc6", "indicator--7ab57121-0774-472a-a764-390ebe538ae4", "indicator--4bf39edb-650a-4cb5-924d-c2cc67b77672", "indicator--e77bd140-9337-4fb0-aea7-5a0facc9bf6e", "indicator--0c58ec43-8d0a-4347-ab41-e87ad772884f", "indicator--e7ca17c4-4456-410f-8a8e-40ba0ab6365e", "indicator--f82ea29d-e2a3-4ed1-8d59-d438dd5971c4", "indicator--779efa83-09f4-4b6b-aeef-971b87a740d0", "indicator--1550418e-859b-41fe-8619-36f010ef6468", "indicator--5881f60c-4fae-4a9a-8662-0a2d620afe87", "indicator--f467e20e-fa1d-497a-999f-1bab122b8b8b", "indicator--abcd7b2b-c5b5-41fa-81cd-3efbed7aa7f8", "indicator--85e528d2-8518-454e-86cf-f874ca0343f1", "indicator--fce4a9b1-3e31-4375-89b3-003c44d70794", "indicator--679c169f-a608-480b-b470-7d1faf97bb40", "indicator--9797222b-4e40-4d88-a049-ebb0ee3256d6", "indicator--178f17a0-3f99-4784-a2f0-aa49d3bda543", "indicator--129f616b-e039-4fc3-88f7-f5a326482948", "indicator--339bc5f0-abc6-4db8-9ad6-5726545d99ec", "indicator--bdb22f49-b99c-4667-ad9a-b690fa8a7d31", "indicator--c82a4454-4d37-4d7f-9c33-b2f4963e35f3", "indicator--93d8b32d-1a21-49ad-84cd-0694def0d541", "indicator--d4531292-829c-404c-9db7-46d969b3a213", "indicator--8f224710-715a-4e46-9d51-9d0ef149d41f", "indicator--2772a81f-1f79-49e6-b286-be867aed6271", "indicator--5c09bf36-76cd-486c-9d8f-a252cda20dc4", "indicator--54c0230a-a80f-4b38-a2ab-37755ef899bc", "indicator--547d67bf-6407-4ec1-889c-9f9f6e40db8b", "indicator--0e6674ac-db93-4806-b053-950d247fa20e", "indicator--a48464cd-7731-4e86-9d1f-8be2e993ef2c", "indicator--e136f221-d0e9-45be-8236-84c12a91425b", "indicator--d568804a-32ae-4e02-886d-0857f4d74388", "indicator--d0428882-9af5-46fb-8e6b-0ca7cae93c7c", "indicator--873414d3-b745-4d5c-8872-7b3ec29f5baf", "indicator--2d8c8615-86d3-441a-a6aa-01cb24d7dd56", "indicator--659c3d55-8ef8-465b-8de5-6694f0bb22ce", "indicator--04709832-c798-4d94-b8b2-c279adcf91ab", "indicator--c4ed4449-fca3-4f3d-8785-cf2a6aac991b", "indicator--d57bed24-9b98-4de4-b318-33ce03a1aa74", "indicator--fc5b66ed-3f82-4ca1-885a-c191b28c6c0a", "indicator--510e0358-a3c3-470f-b826-901848746efa", "indicator--1b1af4db-9e2b-44a6-8afe-74a891b9624b", "indicator--3af3ea8d-10a2-4360-b0ff-4c05bf6c1b40", "indicator--ac5a7017-f3af-4108-a48d-f4b589fb4dd8", "indicator--1c142d45-1d95-40c6-86f6-aca561d2c4a6", "indicator--a07c8e65-0295-4e69-8dae-eb4e84c705c0", "indicator--e25d6dab-25f4-4fc8-8ec3-b6df643eec36", "indicator--314c8ae3-18d3-4b13-91bf-c9d4f6111e48", "indicator--98298d75-eca3-4d5b-b5de-2e30be9b456f", "indicator--567115a3-79a4-4c88-ba30-0e00f47c074e", "indicator--6c186312-cc6b-4d8e-bee1-d6a9aef82982", "indicator--521355ba-b5db-4d62-b1ee-e3501d3d1288", "indicator--2635ec2a-d1e5-43ba-88c4-8b16172b37a4", "indicator--8dfd4bdc-e5eb-4fe6-aa56-969d6a0279e7", "indicator--0a25dda8-6271-46e9-86b6-a8a64175b2cd", "indicator--6be1a1ec-3400-414b-8453-32a9d87c7a82", "indicator--23598b6f-e4e8-44be-83da-5fba12d75448", "indicator--2ac5408f-84cb-4f09-a236-0fe2a9de431b", "indicator--8acc23a3-2aa5-41e6-b611-f82a4c557998", "indicator--58c8b609-217a-4727-a2f6-33c6e8035527", "indicator--814365f8-2d0c-492a-b772-e02a8f38f7ac", "indicator--757636ff-3a7a-4dca-b5f8-b607ef2b33f0", "indicator--ab6b0c3a-56bc-4ced-81ec-23e723603fa7", "indicator--83f58d44-c2b9-4917-a209-cc527233aa55", "indicator--ee969b8d-5b3b-4af2-aed1-6a0f81369e38", "indicator--3a698cc0-22c3-40d1-997c-9a1e60013884", "indicator--86928469-2dfb-4242-bdc2-c2000145ef68", "indicator--fe9fe9bb-147d-4576-b89f-36a0d3788c92", "indicator--637df97a-126f-48b7-ae7a-07a14bcc7009", "indicator--9c415414-9cda-45c3-80bf-1d4a958eb314", "indicator--1d7b38be-c4e7-4589-b441-0fe19cd85db2", "indicator--32abae95-bf27-4030-81d6-72d365014b35", "indicator--c2c92b8a-077d-4f07-9c32-31749058c5b6", "indicator--a4f2696a-17f8-49db-9a5c-27e07b75de9a", "indicator--b7b79837-67c6-4220-adac-dd1e75ea0bc2", "indicator--a727fda5-8c6c-4301-8945-0e61f88fe9ac", "indicator--233ba8ba-1717-489e-8a15-a3ef1f9e4466", "indicator--5bb8568b-d7eb-4cb6-a1e8-acaa2503ac8b", "indicator--f2d18d86-1c7f-48a4-8a53-1914199520f4", "indicator--f1964b8b-97a8-4079-a8b2-cd68cb8db3ad", "indicator--8b1f6375-ac66-43dc-bc97-b9278815e358", "indicator--8e5ddc13-8ee6-4b10-95fa-7e879590ce44", "indicator--ba321e2b-fcca-4d35-a32a-6e132b1e86ea", "indicator--902a1a04-8e94-40b4-a5e7-b46fab64cdac", "indicator--fa1148b7-f3fd-460f-95d7-6ce20b1b2b75", "indicator--f745c130-9939-416e-b1ef-aca29a2c5e4b", "indicator--869ef8be-acba-4214-8ffe-ac76c9a6ea21", "indicator--acbd9549-fda6-4a41-b4c2-c20330ef317e", "indicator--aa3545af-c113-4de4-9e05-5f3271ae63da", "indicator--05bf6620-722f-4570-bda3-e72b9d4dba94", "indicator--5eeb1273-0813-4e57-a619-51183f2da830", "indicator--60c65e0e-c97f-4ccf-9e23-c34416e0de70", "indicator--ee358eec-b77e-449e-8ef2-3f43eac657ee", "indicator--3126bd70-ca97-4f29-acf2-375fced386e7", "indicator--568e5a79-e378-4372-bf9a-dd4134fd50f9", "indicator--3be6dfe9-9eb6-4ce2-8788-7e556f3feb1c", "indicator--284acf69-2a08-46c6-9d84-bbf5cb1f5a81", "indicator--d927a337-029e-4b43-8fbe-4575637e0ce4", "indicator--2aaa66a3-f481-4c38-b028-daecf4b31d1b", "indicator--9ba22e87-9ee8-4c0c-9304-902de62b2a95", "indicator--518098f6-7a41-4f59-a026-343aac3d5478", "indicator--4586bd1a-1003-4e42-9969-7a70ee06695f", "indicator--4b7c06db-0598-45e5-84ef-47c2f8502e7a", "indicator--f1e1195c-2f86-4ab3-987d-21448348c8bb", "indicator--d58ffa01-50dc-423d-bddd-e9fccbcda9f2", "indicator--b36ae332-472d-40eb-9c57-81f968ff8d33", "indicator--a2cc33be-a7c5-41e4-be1f-4e917400c1a9", "indicator--f6a714ac-9adc-4eb3-8e9f-e81726619193", "indicator--a0d5218f-c1c6-4014-bf53-9832c2d50a13", "indicator--bb2dc12a-3e49-447b-ac0e-f3535641c21d", "indicator--73786266-a9b6-4204-81c4-a42b7d7b2a90", "indicator--900f7df6-53e8-4424-a430-0d825f241a1e", "indicator--7a11ff1c-8233-41b0-8d54-027001e3a437", "indicator--052d8581-146e-4fa9-9ad9-27d31c1d79d3", "indicator--1c4b526b-110a-4dbf-bb04-6c18b1dd727d", "indicator--5e37e94f-1c9c-4e30-bbdc-40d9ac0642b0", "indicator--62047692-34ce-4557-b19d-88e7add21ef8", "indicator--782de1eb-a65c-45ae-8699-6374c3a289c1", "indicator--bcc21fa5-caac-41a5-bcf6-506d05725043", "indicator--62461777-66bb-42b7-b085-35855b7bd1fd", "indicator--901af7b8-bc04-444d-9523-1baa3dab8005", "indicator--c8a3ee90-4c92-430c-8c98-41dddb01d166", "indicator--52bbfe99-b4a5-4294-b020-90ad44bad131", "indicator--4b98888d-2419-4acc-94a7-7f445d96d741", "indicator--156f5476-9341-488b-9a0c-9d9bcfd545f8", "indicator--278943ba-b968-474b-865e-9254f41505e1", "indicator--b9611d17-e1fb-46b2-82de-bdf091266f0d", "indicator--a9035d20-8a04-47d0-a702-9ca1addd1c46", "indicator--1afec554-0cf9-45cc-a478-2393a7dc31f2", "indicator--018b35ec-3b3d-4505-b9eb-4cd650a0dda6", "indicator--6fe39a74-dd09-4249-85e8-af214fe9e387", "indicator--ac02464b-b726-4e87-8b8a-2a315de11e9d", "indicator--055d9f30-f501-4316-819b-98780df9be0b", "indicator--57029ad2-b367-49e4-8663-03cd1409a171", "indicator--e7c26d1b-7f8b-45b5-ad9f-feb09d759f5c", "indicator--ed06e113-55ba-48a6-b5b7-14e595070798", "indicator--cbb7c95c-1775-46e0-abce-c95fb57fe13c", "indicator--c07a367d-da5d-4ad2-997c-1d661bea63d4", "indicator--9d9f7f10-6d34-4dce-8391-30ef9973fce1", "indicator--4a67e20f-4bca-4ecd-8c44-9dfcaec445d5", "indicator--75da4302-417b-4f10-b298-3c78bb9e687c", "indicator--e2352614-ace6-451c-aa53-e0b502c21047", "indicator--893f2fbb-3825-4277-aff0-e945d46a08e9", "indicator--05c10eba-e397-4fa9-8635-897047c8cc25", "indicator--20bbbec1-99f1-4107-9d91-82b41a317a28", "indicator--e6196b19-3cd3-4922-a7a6-7415473d7b1f", "indicator--9caf931c-32de-4e99-b23e-aa430ae6ff34", "indicator--bb55f24e-d324-45d3-8cfa-39e026bbee12", "indicator--8c07c6e5-948a-46c1-9d40-e3dfd28a0e7a", "indicator--cef9b130-45bb-404b-89ec-b0d5600ecb04", "indicator--95e245cc-223a-4a51-8d8f-c49f7684d204", "indicator--b898d648-d7b0-4496-bdf1-145df733115d", "indicator--dc133361-bb1c-4b6a-91d7-2b8889f04f97", "indicator--3b1dabef-0c90-4914-ad56-eb0c2f109e7f", "indicator--4e2af528-9bba-44c7-aa1a-5b510e13782e", "indicator--9e38fad9-4744-4888-a537-dc8a696853c1", "indicator--63256f4e-7bf3-411c-9083-658b0c0e06ff", "indicator--84a34285-ff40-4d1f-8ef7-6b89f7015763", "indicator--c651e8ac-01b6-455f-9342-666093c0f4ef", "indicator--29f65465-abb5-4c61-a5b6-3ad4dfd5b277", "indicator--6a902f36-1d39-4b00-a64a-2f01e72514d8", "indicator--cefe3d11-c410-4435-b151-941fd7f2a825", "indicator--8e31d3be-8701-4349-a713-8662c5612804", "indicator--60a7e1aa-ca6f-47b4-88d9-c7ffec30feae", "indicator--7eabb3a7-536a-4d53-9cfd-c0679ea76df8", "indicator--ff987bab-a817-4724-81bd-4da23b84330e", "indicator--d36b546e-4696-4773-bb26-2653e7cb69da", "indicator--bbe21987-b04e-4b45-a510-d7159d410a73", "indicator--b97f0e96-72ad-43d1-a04d-5a4da92aba5c", "indicator--be12d884-aeec-4c17-b670-b2893e9bbe33", "indicator--a4f0a419-745b-44ef-a592-4cd1f0b6249c", "indicator--a6f36418-71bb-4216-8b90-e73fdb902f59", "indicator--dbf3efed-c857-4d2c-9f02-93a6a2513ebe", "indicator--3c6a6b19-865e-4421-95cd-e9149437047e", "indicator--a36d7ee2-afb7-4380-b378-4c11a52c6047", "indicator--5905a025-bc8c-4e28-b4fd-f85eb1eea96e", "indicator--c2044cc9-25ae-4768-a417-5e8798a06ce6", "indicator--ae80d657-6c86-4c41-b96c-a9ba16429eb0", "indicator--b51c7a9c-e2c6-4333-ba15-700e1ed18b93", "indicator--25e0dacf-e97b-44e6-ad60-2b4f43bf9e88", "indicator--f1a51aac-5746-4a22-8780-10c7d1777db7", "indicator--933c28eb-38df-4338-8b0f-a7f40b42a85d", "indicator--9f112912-f868-4bc9-ba6e-5b01a8315443", "indicator--aeaf38c4-56da-4674-9034-04890375434c", "indicator--1fa9ee8b-5e0b-4ae1-9827-39aa50972015", "indicator--8cecaeda-1242-4092-8010-f68d17535c1d", "indicator--0287cfe2-3226-421f-bf5e-bee4c42eea13", "indicator--fe42be9c-9709-4160-96cf-9d96198eb4a5", "indicator--6167a9e1-7980-4cdf-9f36-241de7c14142", "indicator--c88594ef-9d2c-4c81-b381-bc6b717600ce", "indicator--b39ca357-2512-4dbe-ac79-77410389e1fb", "indicator--914c7d4b-62ad-465a-aafb-06e3e2699506", "indicator--a4881fbc-8cd4-42de-8bc7-a7dbb74d6830", "indicator--3233d686-fa20-4955-8bbe-410ce522729e", "indicator--8e507690-cf42-4580-80b0-e1c97b70857a", "indicator--4be65a4d-55d2-4955-98b8-32bc75e8b563", "indicator--1f161fa5-7a35-423a-988b-147dbd90d57b", "indicator--bc56afe7-4639-4fb5-99a1-87de66dc04bc", "indicator--cf165f4d-6106-4c8e-bb68-a417096df6b2", "indicator--3d4af3df-7be3-47fa-bb4b-38feaa718ea6", "indicator--748e8a26-e83b-4212-b72f-d5598da7496f", "indicator--fbe12123-53a6-495a-84b2-c1933bf7cbe3", "indicator--b660d001-9515-47dc-81a8-4be93619ad30", "indicator--78fd3af9-3376-424e-b26d-6d1424156175", "indicator--8c333b2c-1647-47a6-b7cb-07260adc371f", "indicator--29123450-6612-4959-89ad-20619444a554", "indicator--4cec31a5-7667-4fdc-ad9a-2b821cc74cd2", "indicator--48996ff5-39e7-45bb-a495-133898b84530", "indicator--d087928d-62ab-48c0-9da8-c89cb909c599", "indicator--ab5865d4-9ae9-436f-92cb-0ddd0873b1e3", "indicator--9bec8548-5bc7-486c-b877-3eeed18e0254", "indicator--3042f2a8-3191-40e8-bb64-0e087a9a9700", "indicator--42718263-5ba4-4c92-bd7d-8a3cf9ce92d4", "indicator--a32dbe9b-a537-4e1a-ae45-2c466ed7b70b", "indicator--4a2fec01-90f3-4f89-95e8-40010f862a12", "indicator--8bfe05f7-1405-437b-b324-e990ccff0ef0", "indicator--a578a7c2-1772-4d2e-9bce-3351d81863a6", "indicator--84c4f969-1b40-47a9-9959-678a61fedf93", "indicator--880c0b34-86c2-4598-ab7e-bc481297cd63", "indicator--b1ce2e2a-066f-46e9-8c70-7cbd8b31d0c2", "indicator--27d9ecfc-ba32-463d-ac61-6e1ee4d204b7", "indicator--4d92ac97-c924-44b0-bc91-63c43cc9ed86", "indicator--6d2e3d19-f8ff-4644-a458-7cbcb77bfda2", "indicator--341b9c01-eb93-477c-b7df-fec049c488df", "indicator--fdcc5f72-23b2-42cf-a31d-c43cc935b321", "indicator--03480bea-8a55-47bf-aadf-de815482dd92", "indicator--8f0b9ba9-9301-403a-bbb1-f900e45d836f", "indicator--b00fdf19-b397-4125-9967-21602af483f1", "indicator--4a2027e5-ea15-418a-aa75-80a44865538a", "indicator--1bb1253f-8a22-4b16-8dae-b085e89e1091", "indicator--fb71c0bc-ead6-44c3-bbe6-59423d81582f", "indicator--182ec172-e1d2-46a9-89ec-f5206c360f31", "indicator--5a0d8587-8284-44c9-ad19-84d521ce9d04", "indicator--79a80d3c-30ef-4a53-bfde-014263a4df94", "indicator--9aa6f37a-cc37-4e90-b4b3-ed6f059661b1", "indicator--66324b85-fa51-433a-9e03-67cef7c57cfb", "indicator--673047d7-9047-40cb-b45c-999193f3d2e9", "indicator--e36ca548-c307-4db1-8333-acfa562e91a5", "indicator--7bb62a52-6a9f-45b6-a4f8-0135c43bf640", "indicator--002660ff-bd89-4eed-8a02-ad322ed908a3", "indicator--c522b23b-4322-4a31-a056-42082d86257b", "indicator--bf7824dc-4aa5-4124-85fd-1013c4cf268c", "indicator--c9bb7d61-c4d1-4a78-aaea-7f907cb94164", "indicator--d49d5e22-8351-4609-b2e1-4ac1842086ff", "indicator--c8889325-a5c6-4d91-9cdb-979d29b9369d", "indicator--154a0a47-bd4b-4811-a525-e5ae41c8a719", "indicator--1d775cc5-fd1e-44c1-a641-33e789e21766", "indicator--20d70abf-db0b-4c4e-9366-68ed508b6634", "indicator--ac530e7e-d74d-48e4-9c89-81fc37f0a80c", "indicator--24437634-8ba8-4dc1-a31f-bec3ee10fbf1", "indicator--23811ea1-8920-43be-8ddf-c6cf4eec086c", "indicator--7e6e6c46-aaba-4b3a-8e6b-05c230f0de0b", "indicator--f22eea4f-4691-4c8c-af36-49ce1eb44963", "indicator--e7f69a6f-8f11-424a-b97e-0dbd2c14ecf4", "indicator--2acdbcea-b672-444f-96ba-7471e0226b12", "indicator--d9079f33-7930-477c-a3b9-b2e1f951c205", "indicator--44ad092b-cf77-4dd3-af87-4e39f9c1a595", "indicator--742a8062-2fcb-4431-ab09-961af9be84ae", "indicator--1b867496-3552-446a-b1b3-258f144772d6", "indicator--d87bd9d7-7935-4e58-bed4-fac53f38d5c7", "indicator--bc8fab8a-8f7c-4616-bfef-1d684d3d3516", "indicator--403dec0e-75d0-4991-9671-a5c850ec7ecc", "indicator--9d6f7b97-5537-48a0-8db3-cd84b03702f7", "indicator--58ef149e-affa-4812-905f-faa453eab237", "indicator--5e18cd2a-177b-427e-b519-4fa8db712172", "indicator--5860cb96-05b6-4574-9c35-809f5bad646a", "indicator--045562f7-f4fb-4980-80de-4c33df9930b1", "indicator--e8e00ec6-0421-4c70-b824-fd10a043cea8", "indicator--65d44623-f5e4-4b2d-b09b-00e5b0c5d050", "indicator--544713cd-30de-4358-8216-904cab38b791", "indicator--f7f63730-92d7-4725-bbf3-3666f0ffdde7", "indicator--9e716e06-1da7-4796-a4f3-815091782dd9", "indicator--0062fa84-7b8b-4afb-8f99-cd8433580f1b", "indicator--53b2e41e-3a28-4a4d-8d28-65c2cc552dba", "indicator--02891943-0859-42f3-b029-eb1a3131c3b2", "indicator--5e2a9d09-f975-42e3-900e-d524e735e048", "indicator--266bc75f-e162-44a7-a22f-da31158ef612", "indicator--fe97ec7b-dedd-4fca-9d49-b2f11f20f9fe", "indicator--53d0fa3d-9c0a-411b-b482-48e094929e2b", "indicator--edcd1ee7-1905-43c9-b912-7a62a2cf0a46", "indicator--6d6280d8-2654-412f-85d7-46d9a6ed4ba9", "indicator--4fcbce16-1806-44c0-93c4-15911f2183ca", "indicator--aa849a96-86f1-445b-bc83-9df086ef4bc7", "indicator--32195ae1-24e8-4e66-b037-e78111b86533", "indicator--bc44f2bc-98b4-4b50-a9f8-01d7ac991de4", "indicator--0953ae53-2758-41cd-9004-91dc1599abf4", "indicator--8513e876-1d35-492b-b4af-61b37382a28d", "indicator--717684fb-9b7c-429f-a601-d000d76d09c6", "indicator--1ffa4649-7efe-488c-b502-3e103bf83eb6", "indicator--e5da53a1-98b5-41f8-bfc8-e77fc853f7ee", "indicator--9934cbb4-585d-4796-bdf9-0991b8feab37", "indicator--29beed55-5523-4639-832b-caa770ce4eb8", "indicator--1f9fd43a-8217-4922-8ae3-86088a585913", "indicator--1b016294-6eaa-4d87-b147-631b955140a9", "indicator--dd702a5c-677f-44c1-b3d6-ef5237d3ca04", "indicator--922bda74-76f4-4e5e-97e5-e601d9a5889f", "indicator--8d5d2df7-abbb-4d8e-9f5c-361f4fde3e48", "indicator--6f875d93-9a73-4f9a-8030-841154f7905a", "indicator--4111dcff-559d-453e-93ac-912a636ab3e7", "indicator--1fbfeca5-5f7a-45ac-94e4-e82da399690f", "indicator--7e0746b9-9973-4a2b-a0e2-6c9a088ff47e", "indicator--f42d1765-791a-424c-b341-ff7b673f82c8", "indicator--a9e0b2bf-3c80-449b-8b4a-716c87776e4b", "indicator--309846dd-a44e-44bf-818d-a1c8ad72f353", "indicator--f87b2d5e-43e9-49c6-a7a9-2967ba820de9", "indicator--b5dcfac4-07fe-4226-a6fa-cc2201bef630", "indicator--dde87d97-fa9e-4fe6-8611-242d7763616f", "indicator--62023460-381b-404e-96f3-33f0dc7c4dda", "indicator--ea5fb289-998f-4981-b2e2-89c03cb34269", "indicator--20dd2297-a791-4a75-87a9-53476fc38e45", "indicator--0e52dc5c-2e9f-4e14-b173-a91a5401b4d6", "indicator--dd648b13-6635-408f-b2a2-a130336c388a", "indicator--2d87d0ee-551b-4e72-a328-a3f14803bb66", "indicator--885d2eff-7e62-4b45-9263-530091532839", "indicator--02ca9baa-2d22-4a30-8d4b-c096ea9a8214", "indicator--3ad31729-ba7c-47c9-8400-ded804bd2e96", "indicator--4389c5bc-fd38-4e0c-9092-9aea8aa0f1c1", "indicator--08ede73d-d806-4b9d-88b8-d42c2054e96d", "indicator--bf2792e5-02e1-4c2d-bb40-5c4d97503019", "indicator--3cf94695-7a57-4367-ba81-b3ca74387f35", "indicator--c9e9ec03-0ed5-41e0-bfc9-ad4aa35ff4c7", "indicator--6308fa19-7d61-467c-ba51-e35775d797e2", "indicator--55815590-7a91-432d-b767-e4ae774e9861", "indicator--3f9b828d-86da-4410-9f23-d98f79c873f1", "indicator--6714a33b-5d5c-4b91-a545-54e06ee78310", "indicator--6d1fe4ba-7bf0-4ed6-b784-444e8c73e22a", "indicator--a9109cb0-bcbd-4797-a722-928092b12d41", "indicator--5d3d467d-0d54-42b4-8fe9-287fe27d190e", "indicator--0fbfda93-70ac-4006-ab47-f5dafc69f409", "indicator--30cfecd5-d2ed-414d-9de7-9e7e6c20ed97", "indicator--2e48986c-ceb8-421e-9335-8b067c7622da", "indicator--ebe9f2c7-e6e9-4e67-b77e-19f58302809f", "indicator--4b56fc0b-7eb6-4ca6-9eec-98c3e6ef770d", "indicator--bf48eea0-246c-41d6-a363-b9da47133251", "indicator--75675666-d2d6-4593-a451-737be6c36565", "indicator--21c48a66-f1a9-4546-bcf8-53dfe4011c48", "indicator--cedfec62-6ebd-43a7-bf52-a41245849f9e", "indicator--a417eb87-063c-4170-b953-3a04055a0840", "indicator--dbfce631-8e67-4b11-8177-f40cdcad25f4", "indicator--13fbb436-5597-4561-aa84-dce5a4906f8d", "indicator--200a9572-d2c2-4aaa-aabc-4c83a6492688", "indicator--84982542-77d8-4d0f-bb3b-852ed86163bb", "indicator--d93616c3-0fec-4d34-848b-2a6fdbcae1be", "indicator--4d6e554f-99e8-4ef9-8824-0c151c268718", "indicator--b4a5adf2-7518-40a7-b697-23eb532ab79d", "indicator--3652965f-306d-4edf-91d8-5adcf2987542", "indicator--5271b044-d09a-480a-9fbb-81d129e05823", "indicator--c8743b76-e52d-4f99-8497-9c14f476cf7f", "indicator--909c3e22-a139-4072-92d8-c10213817051", "indicator--e01fbffa-3f54-4458-887d-21de80fe8491", "indicator--c95634c2-17b4-4ad4-af2a-6e5b3446ce70", "indicator--b5ab5ab9-288f-4bd1-897b-ad22a33801a7", "indicator--797f5de1-bf11-4512-b524-7222d05569ef", "indicator--5a83dbae-f86e-43e6-883b-7a6620b9f679", "indicator--722870fb-8175-4d57-8e56-643eec8029ec", "indicator--ae89f506-fef9-47a0-9554-6f65da97dca6", "indicator--cc0851bd-43e6-4743-848a-a599b00fc9d6", "indicator--094d7ada-0e29-40f7-823c-b2a5ac4a606d", "indicator--9b3ad1c3-6fe0-457c-9fc5-1c451747574a", "indicator--76fbb112-9762-41db-855d-a8e44353aa6c", "indicator--19964a80-6a72-4995-810d-3e43b4c96969", "indicator--417be66b-368f-46f7-a31c-81d7c480be8e", "indicator--9d4c4f9a-b86c-4dc2-b179-0486fcb02aed", "indicator--53125a33-f810-4f86-a7b1-a46c3bcc9ac9", "indicator--5ae4106f-4964-41e8-a481-85c2b6767264", "indicator--728d3eb8-874a-4744-9112-29f2a6d387e9", "indicator--61e23230-0ce2-4b49-b06f-b1fad51c852d", "indicator--e4b14b88-7acf-4d2e-8451-56a62c151609", "indicator--5d48884d-bcd1-48af-90d6-6d98bb163805", "indicator--c9f49f51-fceb-4437-a8d4-4cf1c6db9c9e", "indicator--d7869848-985f-4254-b5df-197301662c3b", "indicator--6fc2d4ce-0619-4880-a237-a09f057430bd", "indicator--78687c1b-6e56-47fe-b0dc-df56975c5715", "indicator--44e9a81a-51e6-41e4-8639-6926583b0725", "indicator--110c47ba-bd6d-496d-a374-08270b90ce82", "indicator--5d39d312-69e5-4d66-99e9-80f6e30d62ed", "indicator--2645a8fd-9670-4edb-8df4-bbac2c66ac60", "indicator--cea6a69a-8518-4ece-998f-02bbafd60a1c", "indicator--2c601b9f-4c4e-48b9-b5d7-455b15363ac1", "indicator--71b5bb00-f609-4963-bf32-fd73475863cb", "indicator--354d0f8b-f9b0-4529-b502-43374d194e1c", "indicator--47500f82-9f18-4a24-96e1-b4d9c2168109", "indicator--c951a790-47c1-4279-a530-891d8b987c52", "indicator--bc11ec1d-02c0-49ac-91ab-c5969d1833ab", "indicator--bf1d3597-30c3-4aa3-a425-7d5511a8a4a6", "indicator--8b439aa2-919d-4a11-8b76-50c18b4bfd60", "indicator--6c64c35f-23d3-4fb4-a705-1288e62a8d91", "indicator--cde6b99b-e5d2-42c7-ac31-ca3dc4348220", "indicator--6f3549ee-7844-47aa-9775-20e92fc51cfb", "indicator--aab9adab-fdcb-4655-ad60-975b42379e9b", "indicator--daab30a5-509a-4055-b5dd-ae0d165aef15", "indicator--d0a14d23-9f36-482c-a841-9aecb0ed2cfb", "indicator--f78a50a9-aff0-4705-aabb-b988019218e2", "indicator--61dbcf26-b029-4639-b396-bc4e59f0bedb", "indicator--95eadbeb-ffc8-47f1-a8bf-be4e46b46ce5", "indicator--aa54eb27-cd48-4a2e-b07d-24ea00632545", "indicator--6a3a0846-3e5d-413f-9974-87a3c5ba435e", "indicator--17e3812e-a817-4f4a-9358-89ed89ff2410", "indicator--ffc700f3-f6af-472d-bfbb-11222b9534c3", "indicator--705a4d5a-fa68-48d3-ac11-e6799ae5dea6", "indicator--400ff906-c8e5-4090-b0b9-9a9fb2d52c32", "indicator--196cbef7-8d7d-4243-892e-ac39d85ebdec", "indicator--f6dade41-f7ea-4078-8127-efa37a598be3", "indicator--7f9af639-c14d-4257-81aa-63118076c13e", "indicator--f1ea93c8-3aa6-44b9-8b75-c734e1e8beaa", "indicator--1ffade33-adac-4317-9750-dc880c9de2a5", "indicator--62bf4be1-42de-45ef-aefe-8807d9751594", "indicator--c672a90e-cc9a-46ec-8f84-d3df4d7cd17f", "indicator--d7b96f57-3714-48be-affe-5f2a010105bd", "indicator--0eb86c61-d3d1-443d-9694-0189b2998cda", "indicator--dcd4dbdb-e18a-4fa4-b916-4be1238ab25e", "indicator--400e9d71-6758-4e03-8591-c6cac4141fa1", "indicator--1b79415b-dd1d-4a6b-a326-bffbe1d44b91", "indicator--752ebecb-a92c-41a6-810a-353fe035d825", "indicator--125315da-84a6-4d6c-bf11-b62cf8aa4802", "indicator--b5bf07b7-7161-420b-8d53-350e6ddfe638", "indicator--6e454bc4-42ec-446b-87d3-154817fd0027", "indicator--06e41c6d-b607-4a9c-9e6e-f48040a8d61b", "indicator--9204316f-82ed-4fa6-a752-ac5051b268d6", "indicator--c9cd58fe-737c-4b0d-a2b1-09c6abe2362c", "indicator--13597d14-00e6-42a7-93e4-902aac90489f", "indicator--d9417f82-b674-48b5-80c1-737776d7056f", "indicator--5014f1e9-e6a2-4024-bf76-0f898fbd033d", "indicator--d76aec92-4355-4733-bf50-bc02422d5570", "indicator--59f900cb-819c-4c81-9926-1b44f1896886", "indicator--93b89031-40aa-4ddb-bdd0-5d3eb9ad3e7d", "indicator--52905c71-d667-4be6-ba6e-cc3c9e3ccd0c", "indicator--756f7aed-be0e-4355-a57c-7a207858af0e", "indicator--02cb0ab2-f7f6-4a19-8a79-d9cd530199cc", "indicator--b118a297-33f3-4a28-9e4f-354a682b1062", "indicator--183497fc-90f0-4190-94ff-6a639827f0fe", "indicator--1f58dec0-13db-4ae7-9bd2-7a5d1727d148", "indicator--cfd17de3-e9ab-49a0-adae-a18d1b069d06", "indicator--0288146c-0e36-4a5b-a3e6-2759db1767ad", "indicator--8b5c6806-e6f7-4e32-81a5-556989943606", "indicator--586fcd14-7d2a-4553-be5a-a4e109fb4ad6", "indicator--a20c68b1-d086-48aa-b1fb-e0548e6a67c2", "indicator--ff402e92-1515-4b17-8062-d26ad70b37d5", "indicator--a479eed6-36d5-4006-857c-b6d5850193f8", "indicator--7ae210df-4088-4fc1-aba8-6350ac3a1f30", "indicator--ac19e807-f3ea-47f1-9c49-29e6dad35350", "indicator--2dd41f4b-0e83-4255-8429-bb8643409633", "indicator--f8316512-3b99-4a8a-afd3-b904fa73c72a", "indicator--67078610-ea41-4bd0-8bbb-515fa67a6a78", "indicator--c371bcb8-b826-4c4e-8a9a-ec2547c691f3", "indicator--00259b9f-0b9d-496d-bf84-b20a5ed6ed14", "indicator--71666a9e-f4c1-4844-ab4c-54fb42cc2ca5", "indicator--b1d370c6-5bf2-4312-b551-924e7334bafd", "indicator--bf4f37e9-471a-488d-805f-306ed723ae9b", "indicator--1ea19d91-0745-4a34-8d3b-9426802b82b7", "indicator--62c07655-a548-497e-a040-cc2c4d8bfa49", "indicator--a1176337-7b33-439e-ad69-60fe4e91f89d", "indicator--a3f2a0b0-ba03-45c4-a4d2-3c2106303e47", "indicator--e55dfa43-92d8-412a-8f37-5fb85ceed348", "indicator--86b300d0-327d-4e9c-a333-a97ffbe689f2", "indicator--ace19b29-6789-417b-aebb-7f7dd3db8a75", "indicator--874a7005-4b71-4c1a-9aec-3913fbfd49be", "indicator--ea22d6e6-67a1-46fc-9fea-548876b6e630", "indicator--2ae134db-7391-4b62-87db-0ceb06439d6e", "indicator--20ef8b16-e78b-4105-984e-d40f7a54e625", "indicator--f207455a-78e8-410b-af77-dea2f7c9fd9f", "indicator--8889dc3e-a0a9-4f25-a333-3c21252dc61e", "indicator--6403ac0b-bf9d-4019-8448-706fee3e5406", "indicator--2db782fe-e752-47ab-ba24-c681af05d2bb", "indicator--3f43ef24-889a-48f5-8dc5-c6465d2d6bf9", "indicator--5e67d211-cb64-416d-a247-1d9642c50740", "indicator--980d29d5-1778-4436-b02c-5ac92826cf60", "indicator--43d30778-a326-4cab-aaa0-0a5f69c20271", "indicator--d56c9b8e-ce64-4c43-b62b-86ce9545ee5e", "indicator--a9dc9105-6ddf-4aa6-9bce-b8d9939a2010", "indicator--c993d901-a185-423d-a594-8e35ce425e55", "indicator--a8388409-69a8-4399-a42f-c8b6198fbdd6", "indicator--9ca29850-0245-40bc-bfbc-6c13731fd931", "indicator--6b7b41f9-f656-4adc-b18d-d5dfc9b392c9", "indicator--84da2605-fe7c-414a-9afc-9366164a1222", "indicator--704b8feb-e28b-49aa-bcce-b07f995d735f", "indicator--139ccab3-1c6f-41b8-b3d1-e9d6dd5b0f6d", "indicator--f1fb4bbb-6edc-48f0-98ea-6a2949f7ab9c", "indicator--7ac37308-5201-43b5-8cd6-d0bae6c6b030", "indicator--15e07c08-ba63-4fb5-9d7c-1fa92d2c7f66", "indicator--62704d0d-3774-4c0d-b564-6b73df51c98d", "indicator--d8905925-92ab-48f1-b0b7-095aa100a2dc", "indicator--43ee1f49-4f97-4581-9cc9-42d52d7bd6c2", "indicator--637ac878-a7d0-46f6-aca2-b63ca124b711", "indicator--d169a320-6832-4609-a7ff-d774ba7d0edb", "indicator--9cabb29d-41eb-4df3-87ac-1d212f7556c2", "indicator--29cecb17-16d2-4a0c-96b1-fa1cd283fca4", "indicator--685161a0-1c84-4622-a975-123b017d4f29", "indicator--347a3fde-2b54-4554-a1d2-4a3e2c734cfd", "indicator--59d11cf5-5fcb-4d66-ae3f-d93a90e6adfb", "indicator--44f1f385-626f-4f91-b945-2f7d336f5ec6", "indicator--81c4bcc5-2363-4a18-a19d-78ae926921ff", "indicator--455393a0-1d63-4db2-89a2-08c6325f4d94", "indicator--18e59ecf-645e-466f-adb7-a9263c51080c", "indicator--352ea5c0-7a84-434e-8a73-bba6a8736d87", "indicator--c90e6c76-bb20-4257-81da-a74253fa86ea", "indicator--dadcb14e-88bf-4024-80c6-5245c34c3f2f", "indicator--fab56d40-1c61-44ee-b262-a2544ca65c65", "indicator--a39bfdae-730e-4fdb-ad6c-ddde0a9e06da", "indicator--085c98cb-047e-49be-9a1e-5cbfc2ead72e", "indicator--74b1bffa-41be-4b22-a392-cf99f304925e", "indicator--997f1f4e-c9b7-4437-b908-7d1ac6f54170", "indicator--56858366-b41d-4275-9b3a-f521fc9b466d", "indicator--bbb64a94-775d-4a7d-a96e-8612b14a3900", "indicator--5c933a61-f3fd-4682-af3f-737d2f15a262", "indicator--48815b58-1b80-41bd-ac4d-bb17c0e1e350", "indicator--ed34a531-995d-4d05-842c-ae239b93072e", "indicator--b0082125-e3e0-4d71-aaee-4fc11c620013", "indicator--b03c614e-a312-4649-a1c4-ba4fa362318a", "indicator--86c0b2fd-dd16-4da2-b9b8-0e010e652283", "indicator--7800d7e0-87f3-4fc6-9a93-0c21f077565d", "indicator--ab8d8e33-40d7-4575-8a6c-f434b010f3fc", "indicator--5ff8371d-ab6a-4ac5-9f61-0080b664f4a1", "indicator--5ca0942d-75ab-44f8-8c19-21ced6a126eb", "indicator--5541482a-e857-433c-b850-512cfd26a6a4", "indicator--923c0d99-5972-4a2e-9e3e-7bcd5af8399e", "indicator--06cca7c5-5bfb-4093-8178-bcf4f4138761", "indicator--bddae882-a477-4208-8ef1-87d827ade9ef", "indicator--41cdf602-c46d-4132-b420-6042dd245910", "indicator--72c30529-7f4e-4d52-99a4-a4df292eeaec", "indicator--2dc81e6a-ee12-41a9-9c0c-bffcaf2f1d79", "indicator--76d6180d-1a83-498c-aea4-4ea03b74755c", "indicator--5a2e6966-6720-4d42-8f59-0b0bc27a4a15", "indicator--6cdc9493-5e94-4326-a14f-53cdb4afbdcd", "indicator--d5d1fa86-a686-43cc-a5d9-d1fec197af4b", "indicator--1e470ca4-9bff-4730-a77f-7906a75646e1", "indicator--612c3fb2-d8a2-4484-90eb-dab799f62095", "indicator--977481b7-0a5d-4196-92f1-d4c9aada4515", "indicator--ca49c4b6-7e75-4415-827c-2d9acfb7855c", "indicator--7b674fdd-afd6-4a51-bc70-a2ce92380139", "indicator--7dfaf756-d923-4ae6-ad1e-ec3f20af957d", "indicator--d75bb494-3279-4750-a7d6-902f0bfd30e8", "indicator--6e14aef0-1adc-4d6b-b9a8-1e8cd227a45c", "indicator--c6dca9d0-a5d3-4341-a275-5c2714c328d8", "indicator--61d314c9-7809-4753-b9b1-7c759ad2a210", "indicator--dec6db7e-539a-47cb-8863-fe0bb5523374", "indicator--0bf06584-83b6-478a-8416-9ec8dd5a56a1", "indicator--f34d7624-88c9-42db-8466-b411bfcf0130", "indicator--3954175f-2cce-46e6-8e96-22db949ade13", "indicator--709bddea-9f22-426d-9afc-709baa75d426", "indicator--05f0741e-e10a-4124-b84f-2225ff24f64f", "indicator--6efa4182-e72d-4340-9a14-fba7ee5d8c23", "indicator--1f0d9f02-191f-443c-b1fd-e0907ec3edda", "indicator--2ba3b597-9bf8-4172-8f86-ba5f8b80d996", "indicator--00739e0d-8105-4002-a555-7d5969966b66", "indicator--1a610c81-8bd6-4d77-859c-22151092303a", "indicator--f5c7a271-d5b0-496e-a9b4-472e55fb9bbd", "indicator--e08262f5-f112-4873-822e-ec2233ebd701", "indicator--19939286-b78d-4ffa-a751-26e1871d0730", "indicator--a66c09dd-cb85-4cd1-bd1d-456c7db376df", "indicator--c89a9f75-25fd-4f7b-accd-495cf3f48615", "indicator--8f202a55-3a89-48e4-8fe9-20faa14e58a1", "indicator--35ea90b1-e63c-4c91-a871-529eb71b82fe", "indicator--da423672-a267-4670-bf38-0c17fa831b4d", "indicator--79edabf2-9e69-4bb6-93c8-34a394574227", "indicator--331ab90e-a56e-4608-90e0-0e7452be170d", "indicator--0876cb3a-e97d-41e7-a254-8464a118aa46", "indicator--143c7d44-ca14-4d01-b42d-95ff5b7e6650", "indicator--399107b0-732b-4581-8b72-153f19f2eca3", "indicator--11251990-03bb-4bb4-bc3c-65cd6f24735b", "indicator--7e73d03e-9949-4236-bc27-bcdcccb4bb82", "indicator--63d226c8-b2a1-4670-b52f-23ce5faddfad", "indicator--068a29ad-b591-415f-a174-2513e3fe952c", "indicator--aaabdac8-342a-4a49-a28f-b1dcf4b91048", "indicator--0abacb0b-b990-40e2-b617-b865ea2713a8", "indicator--616c013e-e5ba-4890-883b-cc71f439a964", "indicator--5caaa5a9-8139-4e2f-9e03-f58bf165d2c7", "indicator--da6de07a-ea79-4cb1-856b-dd3ef2fa567a", "indicator--bba6108d-e8e5-481b-9341-801b9c880d5c", "indicator--44061600-591f-4689-a34e-59cf7dc6b24f", "indicator--d681fb75-41cf-4321-9e78-e92932cf1530", "indicator--ec58cc9b-741a-4edb-bc4d-f5e7973b2ff8", "indicator--db0d77e6-8c13-4ad7-94c5-231e77fcb648", "indicator--7824bb10-6ebf-4561-91bb-b4bca18626c2", "indicator--5cabbaee-de68-437e-9660-eb2b393f5c96", "indicator--f7b2311f-3e6e-4b11-9b31-267a64a9ad22", "indicator--6e56fee7-f013-4eef-849a-56b34216edc7", "indicator--30fe5ba0-6dbb-462f-8fb4-9becfb024389", "indicator--91e3fdcd-9306-4f72-a7d5-be31a4897183", "indicator--d9fdd20e-2b54-461d-8cc1-c24fc96805a0", "indicator--5106a8e7-72a5-4ebf-b66a-4ec9f7f5d193", "indicator--364ecd37-6037-4f3f-8740-ee7e4d522ba7", "indicator--f5e19ab0-1b8a-4215-9cc1-36ec46932fa5", "indicator--b2659e67-d959-4f4f-9515-97ebd28b279f", "indicator--e4f6c3d4-227a-4c2f-8f5f-544f36879202", "indicator--5b0678ed-7394-46c8-8add-4120ef483bda", "indicator--0fd9c59e-2cd6-4835-90f7-2a44069df6dc", "indicator--83fd443a-5ccd-472e-8cd5-9d3b055cfa7b", "indicator--99527a6e-f213-48c5-a699-05fcf8ab627e", "indicator--8f4567bd-6bd0-40c8-bb2b-075575e058f8", "indicator--df7232c5-2cd8-4924-9192-381f6f742f58", "indicator--fa4c9a53-c989-4324-be72-e24733e2f8f4", "indicator--8bc49263-fe00-428c-8933-455bbba1dee3", "indicator--31cb3487-5fc8-45a7-a0c7-db107da6e38d", "indicator--94baab7c-9166-4749-9682-45c55d45606e", "indicator--56f2c440-9778-4f45-ad3e-33c2c0cb9fa6", "indicator--1c368318-406d-423f-acba-d27e200f6aa5", "indicator--52ef0e77-19f7-4309-84b2-ff6f9967a69d", "indicator--a4e34ea4-8c1f-4502-8c61-d47ca33ed984", "indicator--188df2d2-1680-4d38-bccd-b206d48d9a4c", "indicator--8dec7d05-0729-4d9d-b6dd-fe1cb7524555", "indicator--0ee7ac90-6ceb-458e-adf0-cc894cc047f3", "indicator--0b6c539e-5f08-4851-8326-14e2d253023e", "indicator--744195ae-7f66-4dba-b85c-8971e85d7771", "indicator--d9450616-6f31-473d-96e0-f28c696ad6b9", "indicator--d0e798e8-a50e-4f79-a026-693d4bbd793c", "indicator--7149f30e-b1bd-4926-8fe1-476c35f70157", "indicator--2b9cacb4-5dbd-4860-9e7b-809d84559003", "indicator--2dd7cc4e-5367-4e41-abd7-7ed95c508e57", "indicator--f15db485-553b-4339-93cc-8dab30c9b401", "indicator--19c243ec-8bfe-4000-9068-d95e4c0e5f48", "indicator--4e103d94-c832-4977-b748-504037c69c16", "indicator--92470d61-b9c4-463b-8392-41abe378438a", "indicator--711f270e-2861-46b2-87eb-cdbc1d6a4df9", "indicator--45711e5d-f714-4acb-8257-23e6cca1a8e9", "indicator--9fbc850c-ada6-4299-b2a5-bee4de4e7a8d", "indicator--bf4e8db0-e84f-44bf-b042-5fed810f07ab", "indicator--a72887d7-d23f-43a0-952e-32bad749d742", "indicator--120ac067-b2a2-47de-8faa-4e6cb833e0f8", "indicator--d0ea1dc8-a876-40d8-a76b-5f365d13c9b6", "indicator--7e750790-b435-4a32-8428-75ee6f307d02", "indicator--7ed66e10-f5c5-4d30-9f05-103e09fa48c5", "indicator--631267fd-80e2-4001-b772-67946b446d73", "indicator--dcd2ab61-ad2f-4444-896a-eeb3c07f9f59", "indicator--d456c31f-4d74-4778-b5c8-1bc871cd9297", "indicator--b2c9a264-90d8-43f9-9181-ca69804d5a64", "indicator--1aaf6c6e-8207-47ed-bd80-2a750bb09ecd", "indicator--cf8774ce-bf7e-4513-98a5-423caf09d08e", "indicator--2cb84955-b42d-4822-8b35-e0a1892fd4f7", "indicator--6f0790ad-8d6f-4d14-b1ab-680625dce035", "indicator--2d8a431b-0891-48a5-a2d3-4ad8ec58029f", "indicator--c6d3abee-818b-4370-95d8-d6d95aa291dd", "indicator--3b1be681-a03e-4651-bf45-636f8f352ffd", "indicator--caab1aea-27ed-499f-9d5d-971f83a59c2f", "indicator--422d8b99-3ec9-47ed-b8ea-994ccec3b4b1", "indicator--27213dcc-cd96-477e-bffb-73016baf8bcb", "indicator--2fbc0bec-c6b9-416f-8d24-4f2aa1e2113e", "indicator--8c3f0d99-2bf8-4c58-91db-407802d8caf5", "indicator--b4eef8b5-2b31-4035-bef9-e3f04af082f8", "indicator--8a21d4c5-db97-4d0d-b427-5b49de3f3a75", "indicator--80defc47-f5d5-4a8f-9507-fd09bb568c0d", "indicator--39791c5f-6461-4008-a768-8d547b711af4", "indicator--ec572c6c-26e6-4af2-99f9-ba4f0bf93f0c", "indicator--7e96f67a-8469-45e0-8114-92bfe93d4558", "indicator--849be1f1-53a5-4813-985c-1b47133cf151", "indicator--21e746df-d050-44fd-91ac-117280674b2f", "indicator--4191c739-123f-4a91-b319-16f7f8c2ae7c", "indicator--28564ec3-7b17-4044-984d-399e550c7110", "indicator--e58fcd9b-b0ee-442a-8a73-3a708d78bf2b", "indicator--953526d4-040c-470b-b696-5924d03cba22", "indicator--5b5a35b3-9fad-4b4c-ba1b-b64519967ad4", "indicator--e7e1bc1b-3381-411b-aadb-78ccf6837f0f", "indicator--60ce3f48-5bf2-4e08-8afb-2e1542df2aa0", "indicator--46742b5d-3504-4288-9fe5-596c999432a8", "indicator--fde7cf25-71c1-4f3a-837f-0f36b109e413", "indicator--a3272c3e-3f16-4a5e-b73b-dd5fe561df92", "indicator--538c7822-1113-42f0-91d8-5b18bb59049f", "indicator--fa1de787-7683-4df1-ab55-8718a6531601", "indicator--c45afd71-076c-4bee-b59b-a3ff9e34334c", "indicator--70967632-553b-4566-9cc2-1e4b526edec2", "indicator--61293b9f-b89a-496d-ac2f-3fcd5c1e613b", "indicator--60624236-2003-4073-8b93-d0191bf1e9e1", "indicator--c751e872-d10d-423f-9a8c-21dbb72ba2fe", "indicator--ff932755-9f70-4a74-b241-3ac3284ac6dc", "indicator--cc6cc617-853c-4fce-b71d-4302c709823e", "indicator--81ce7e5f-2c99-406a-8fce-db3105c1e4f1", "indicator--40e472c4-c25a-47cb-a099-582f1321355f", "indicator--fc7533b2-8a09-40ee-8dc5-9a41d6586e18", "indicator--2cee1d44-3449-494a-929d-2caca5ee5a94", "indicator--f366f14c-1cad-4cad-933e-b6df4893898d", "indicator--dfa4911c-5189-4052-88e2-d1b641d99ce7", "indicator--150ea138-49ae-4a1a-a4f6-c51774a852b0", "indicator--1124d931-6070-4507-82a6-de82ba272f2a", "indicator--1abdc78c-7069-4f6b-889f-0881fb78aa6d", "indicator--951de68e-28fe-4617-8cbe-8b869d6a8683", "indicator--3200f981-50d6-459f-8bf3-88ec652751b0", "indicator--36e0ced6-5834-49ff-9dfa-309a1d1ef7dc", "indicator--05e07748-53bc-44af-ac8e-708ded92631e", "indicator--27afd8e6-441d-4a95-9a69-b00db6c2602c", "indicator--480b9d75-68cc-4097-ab73-ecca2a5e40ca", "indicator--89945762-9462-447f-898a-44e740fd2876", "indicator--5880866a-e34d-46d7-a509-737052ca6bcb", "indicator--1cb0d644-e625-4f5a-92e2-ca8960340722", "indicator--df3e25f4-900a-49c5-af07-ac3530c9915a", "indicator--3c74b5b1-2f61-4f63-b789-6a7ed201fa27", "indicator--55e64fbf-f76b-40d8-92b5-8d6e06c4cd03", "indicator--93a41ec1-ada7-400b-8768-8bf78c4e02a3", "indicator--ee4df8be-5466-445f-a4de-121e44aea996", "indicator--4db3bb2b-a19b-4776-a12f-7f85e2907510", "indicator--c8be48b9-661f-4089-b02c-34e0647cdbb7", "indicator--f3056238-514a-4b26-b096-c3a710ba61e5", "indicator--868b05a4-6b82-4515-8df8-9192343129d7", "indicator--f741b5aa-c543-4add-b064-b3413eec3484", "indicator--89854fd9-b4f0-439a-bdea-b8b20b0a1fc5", "indicator--759caeb0-2149-4469-b8f7-c41e41596c30", "indicator--9493509b-9c33-4e95-8f72-b44e88ce3f8f", "indicator--2328d7e9-ae98-4e6e-aca9-6960a7d3e73c", "indicator--13a59f37-5346-4083-b965-1a0985930d06", "indicator--7876d28f-dfd5-4a6a-974e-8b4647ba8233", "indicator--f37df105-a2a6-4489-8434-2998ba4cee46", "indicator--2c120d8e-a36b-41a1-801b-6a9cabd14f48", "indicator--21425a1a-8e5a-4438-b527-5607aa3a73f4", "indicator--32741ad3-4933-42c3-a583-d68b50933370", "indicator--cb803748-1bca-4f94-aa3d-9c70562f5a9c", "indicator--70a4572e-ba4c-49b8-ae4e-3193fc44c7a3", "indicator--c7568b2e-0548-4006-bce1-a3c1bdc4badf", "indicator--89bb053a-dc7a-47bc-acf1-cec7b80b2189", "indicator--74083945-6ba0-4091-88d2-2d7bcf1b9a66", "indicator--fda2ed03-435e-4664-ae0c-5ff34ec82103", "indicator--5ec0a55c-ff96-4954-8ff4-f624ffb23ef2", "indicator--ff0fec44-d8be-4a96-b66b-86d01cebc08a", "indicator--4b02d859-23b7-42a0-9923-18280cf1087c", "indicator--d21218c0-d102-4c06-8bbf-4d8685dce85f", "indicator--c7b5e777-1771-4179-b80b-c01a3ea5a1f4", "indicator--b63f24e8-0fb7-4c1a-9d02-a14e0c5e1066", "indicator--38d77d9e-0ea1-4a0d-acc2-2591a0b435d7", "indicator--fe10dc8f-0276-49df-b72e-df1ab6d80545", "indicator--c574c74f-e8c9-45cb-b4f3-27aa91b53985", "indicator--11c4470d-1ee9-477e-ac4d-437d5e74c586", "indicator--66ffd450-89eb-4e0d-bed5-f8d6cd1d579d", "indicator--4704c2e7-a803-4cda-a09d-bb739fc14c7a", "indicator--f11f5b18-c26f-447e-89e5-ce268b4e28b3", "indicator--9d4e046d-ffbf-4d76-910b-f75855f80695", "indicator--8de103c1-3e9a-464d-82cb-1f8daa7ba35d", "indicator--8aeaeaa4-7c6b-4af0-b968-8742034f058c", "indicator--8635fbad-142f-429a-b77a-d77b12eeb051", "indicator--320ff3e9-a1ec-4fcd-8f2f-e89288da8765", "indicator--e09f31b1-ca04-415d-be01-2ec0815e5db4", "indicator--7a36d0c4-6bcc-4185-98a5-e3144a8cbdad", "indicator--49ef04ba-c791-41c0-9179-161582ce739d", "indicator--33b60044-16f6-46b1-8674-1ac4ee1e776a", "indicator--f5889ed3-35c2-48c0-90e4-65cf727590c8", "indicator--b87b401b-6a14-48aa-92e1-c658c4d515ec", "indicator--519e5664-a23d-47fb-883d-da67eab7524d", "indicator--e17dcbbc-ea50-4da0-9d64-b24f4f342e23", "indicator--52c92529-489a-467a-9606-1ec1f63e7cc9", "indicator--881e2da6-74f9-484d-8d72-268b71d9cc8d", "indicator--a1a50b4d-dc44-4b0b-8489-9f17bc583736", "indicator--7c598cae-71cc-4f40-bb41-e0f770e46ca5", "indicator--04d97518-0cdc-4f79-8c7a-3a6be1bddfbc", "indicator--166a3ff4-7f47-487e-80ee-e13252ee16a2", "indicator--4b33fdc5-fb4a-4a69-a49c-5d3a96a58d72", "indicator--fcc7fe08-4ec7-4664-b784-465d9f4a5cf7", "indicator--3157429d-2dce-4772-ae16-e7c5133ce815", "indicator--b780c575-e372-4019-ab6a-18f3ff1a5724", "indicator--7481e931-6b3d-4b75-9a66-d3a4e70769d4", "indicator--8b9b2a64-2ac4-4cd6-ad5d-58afe3c24e1f", "indicator--2ea3c315-dbfd-4541-9859-61157577c84e", "indicator--46c4b8d3-8b5c-457b-8076-e15aeea73085", "indicator--235b530a-c7e6-4290-95ed-3cc5a09e47f3", "indicator--0a363bed-66b4-4293-bbb5-326c838ea7f6", "indicator--a7884b4e-fb18-4d53-9926-a55667d2e12f", "indicator--1faa4d46-7a30-43e9-b5f3-bd06090482f6", "indicator--903551d1-cf1a-49b9-9a0d-b25d4418c424", "indicator--5e1c3403-60f9-4221-92b3-cd570d08c897", "indicator--5d6f4689-004b-4a66-93e1-5feb93a72e20", "indicator--90f00e44-fefb-4c44-8374-ea5b0639d71e", "indicator--47fc0115-37fb-403f-b2c5-4e1038990531", "indicator--a16216c2-1ceb-45f7-a630-140f21c68d15", "indicator--cc6f599b-8959-4209-b879-c79f2e79bfec", "indicator--b6dedcc1-52c8-4050-929d-2a95fbe8d15a", "indicator--2424d436-8e19-40b1-9d1e-c91ed0d15bc3", "indicator--a769a773-f1db-4f36-a3ee-e3209597495d", "indicator--9e1d2502-25e5-4e74-abe2-dfcf08dce932", "indicator--f830b9ca-393e-4dd8-acdc-b8446a53cf77", "indicator--81c9e2be-d2de-4894-8725-2fc569d76150", "indicator--f2402db7-7eb1-4c8e-ae6c-b60a0961d08b", "indicator--dc6a95fe-b2da-48c3-bfe8-a0726c6a2112", "indicator--32a5c83c-1135-4e1c-be73-5d498f9db2ee", "indicator--ce98f253-de2f-4afb-9fa0-b029909c0975", "indicator--a24604a9-d31f-4838-8222-bd90068dec68", "indicator--79dfd0e0-2588-4ed1-8d31-a6f0f6ab05ac", "indicator--4140dc68-f6c5-47fd-b36c-8887b9c45cb2", "indicator--c2895a16-ffd7-4cf5-871d-449eed4ed994", "indicator--5f114547-53d8-474e-b211-77449c73138c", "indicator--ca3a328e-20dd-449a-bed8-8da7bff616f6", "indicator--ffe71038-f92e-4bbe-866c-a19c0cd1b122", "indicator--4a90b095-2988-45e1-b89d-e77779f7c859", "indicator--ecd72fc8-4708-446e-b9a0-2382c693a9f8", "indicator--dde0d8b8-6f90-4504-a2e5-b8eae8c84145", "indicator--6dd90bbc-f82e-4809-b549-cdc983940274", "indicator--7203710c-0d0c-4e01-8b8f-b678ec3d89d0", "indicator--3c3a4113-984c-4ff9-a9d0-5d6676d51ae3", "indicator--c13d9bed-12b0-4adc-a83e-39da8443ca8a", "indicator--0363721f-b891-4015-89ac-c0f2bac9be57", "indicator--71299134-be99-427e-9e11-475bf9eb02f0", "indicator--af44736a-f8b2-45d2-91e1-84a119be8eef", "indicator--0dfee3a0-0019-4a2d-8b15-386f638baa9b", "indicator--8c0665da-6b37-49ae-88e6-b821e9edb3be", "indicator--63a36cdd-d219-4f39-a522-dc2812c50864", "indicator--4c8fdc3c-ba67-40dd-92a4-997fbbaef609", "indicator--b2be0c07-4f77-4426-9f94-7cbac44d1173", "indicator--a2e70b25-6901-4168-a60f-783dbcb9ffe0", "indicator--0a250323-761a-4a29-ab97-a7370777995f", "indicator--a02725a8-a0ca-454d-a76a-9f795c578e4d", "indicator--82e8e9c6-78ec-4814-b22c-92a453538f01", "indicator--bdc2dec1-3b64-413c-a946-dd194e580278", "indicator--bfa9c147-f9d2-4f8f-bfaf-a0e78808fb0a", "indicator--80e95b61-5d03-4654-a561-221e5b285879", "indicator--e8f449b3-ce3f-4cee-90be-aabf60ea36fd", "indicator--51d49ae1-bb98-45c7-a71b-d780d05866c1", "indicator--9ac98382-5b1a-4fc8-9359-fca94ee544a6", "indicator--2245bec1-ca70-4e1d-9536-50eece3114a3", "indicator--4ee7141a-16cc-4133-88ac-fcd132755e7c", "indicator--d57a4c6f-f7ea-423b-8d65-444104f6c2e2", "indicator--88532e73-fd40-4608-8425-023238b9efb2", "indicator--98a9c3b7-f579-4d7b-85eb-0f1b20ddf988", "indicator--97b87e28-9598-474e-94ab-b1abfb4e4aeb", "indicator--a4ec3ee4-a63f-4793-b89b-bff4e1d97178", "indicator--714b93fd-32f2-4911-af33-898e5b1dfbb9", "indicator--5d9d7dff-ab11-4dd8-b054-e586327a3ae1", "indicator--c39b7252-5006-470b-a2fc-d50d84fab00e", "indicator--1971828b-74fb-4b00-8e21-96a164be4a77", "indicator--f9b7488d-e45a-42aa-a022-f65897daa021", "indicator--e78fba46-8ecb-42b0-9682-8c645d2fac7f", "indicator--b44c8424-6476-4d0f-a2bd-a745a78bff1c", "indicator--64b7e82f-e632-4b1a-bf7e-5675e04f48f7", "indicator--abf839e2-e7a3-431d-8d02-98ffa45aa721", "indicator--1256f4ed-c6a4-4dbd-ac93-fc2524dfd6e4", "indicator--b3b86ec6-21a6-4dd5-8135-8c406c0eaada", "indicator--7a1ac5f3-e7e4-46e7-99c2-f6d69d5e90ad", "indicator--157d1991-a62b-4db8-b21a-d72fe43a58c7", "indicator--c85ad375-5871-491a-8580-fb691cbc0280", "indicator--a981bcc1-3979-42fa-8c2d-7ebd4782900d", "indicator--b505e1a2-3660-4caa-b160-2693f81acc0a", "indicator--30897747-19d3-4d1c-9436-24b86bbcde9e", "indicator--809dd58a-8ab0-45cc-8898-e426be3b4f3f", "indicator--71cb4d4b-7405-4dbd-ba13-a1cbc8ce4e7a", "indicator--78641046-450f-4ec4-8cc6-1c415dfa29f6", "indicator--dfc9f9ba-56c2-4da3-9504-2df1863d3f10", "indicator--928c8b7d-58eb-454e-bf05-890b8a15e1be", "indicator--00caa5c3-cf48-4da8-ba38-a5cbf5244f91", "indicator--df89542f-5602-4260-9415-643577008694", "indicator--6d28b5a0-fb07-4416-af9a-0dc3042c8357", "indicator--b49e14c5-66c7-4a78-abbb-8c5d584d56ed", "indicator--6e513eb0-7126-4328-9d51-103d7240b67e", "indicator--e09dc0fc-f46e-47ba-8808-e1bd5e6730d5", "indicator--fcd673dc-575c-4822-8f17-cc74391c2bfb", "indicator--b3234bbc-fa88-43d8-b936-6690693a5aad", "indicator--ce829e14-147c-4c24-93b0-c2669e0b46a4", "indicator--fc094e0f-4e7b-404c-9d71-b28731893df6", "indicator--d9c263b7-fdc7-4d4a-a4f0-d526201455d8", "indicator--a37f33f6-be57-439c-bb47-148239ee341c", "indicator--7e06b61c-d8c8-4424-9c9d-0a5a009bb6da", "indicator--7032147c-a570-4bb5-971a-f8ad3ff7783a", "indicator--0ae7e4fd-2aaf-4351-b2cc-f369d7b1b9f8", "indicator--1bf7beee-db26-4bf9-bea3-fcf1913143b7", "indicator--dfff1c54-1e51-47f9-8894-ed1ba78abaef", "indicator--e0e6fc29-05e9-40d2-b565-d4d3729f7c31", "indicator--72240df2-bcb7-4d4e-86e7-556ab942f68a", "indicator--4a0f5aea-21b5-43e9-b55e-591c6e945b75", "indicator--4901e4a5-140f-4fef-a22b-f581ec6a0c4a", "indicator--669c7b03-47a0-4e7f-a194-72474f8a3599", "indicator--7db91262-09eb-4a05-b8bf-2e58a1c7ada9", "indicator--4aa4a63c-3394-4c93-865b-3a94dc5a644e", "indicator--e1190765-22a7-45ce-9969-4caaad7d79db", "indicator--e9676af6-34ab-4069-9188-25abcfe0dc24", "indicator--9112e636-e968-459d-a920-42a87ab65ff2", "indicator--a8c676a7-bc44-4822-aad2-6b7413356c37", "indicator--19187989-1a22-49a4-86b0-0d206ee1d171", "indicator--0df545b2-8bbc-4189-8326-4ed9c607a73a", "indicator--c52a5ff5-74cb-46f7-813f-206aab9d6ae2", "indicator--c5756a59-76e2-4ec7-b8aa-7fe205aa6542", "indicator--0b39bbfa-f7f1-4392-b8f0-37a8b2350e4b", "indicator--963e7ff9-e6b8-42ea-9e54-883a19a49745", "indicator--6d48b9ee-f4fe-40bd-ab24-af6d40f258f5", "indicator--bc8d3e8b-bebb-4441-a4a5-711503b21501", "indicator--af0f1b35-4eff-4966-930f-03a86c3de6df", "indicator--3b5b7a8b-20dc-4965-a38a-513702e7ede5", "indicator--8bdf43bf-7cb6-4ff6-81a1-33b2573dded5", "indicator--e96ecd4f-a23f-4bdc-8340-2ca37ce6cdb2", "indicator--ed6105ae-d107-4e75-9255-254c62083029", "indicator--003cc25d-7844-477d-a2d8-353e59da5b76", "indicator--39b21e5e-22a9-4d38-a7e2-a8881d29ba50", "indicator--8b50f861-cab3-47cb-b2dc-6e93e945ea91", "indicator--d18715ba-d663-4341-9193-c8da923c4eb6", "indicator--261ab93e-9eca-4ca8-aafb-7e6b135d9f7d", "indicator--c947f743-874d-4d0b-a257-2a139e14fd18", "indicator--53ecb8cf-a85d-4649-b9fc-f55c5d065753", "indicator--bab39062-b5e2-421d-86d1-e2372e96c77c", "indicator--8c276872-7d21-45c9-87d4-97965217a15f", "indicator--816c5922-fa69-407c-8dd7-e0476ee23d13", "indicator--bf65be16-74b8-4396-8e85-50006b3f6061", "indicator--1c653ce1-0618-468b-84f1-9d2b37a83730", "indicator--0ec8a2d8-9730-4b5e-9ecb-9114001f4606", "indicator--3b6dd480-3358-40ad-91f9-be9c8644ac3b", "indicator--12f84cab-08ea-4b3e-9eb9-2f601f60697c", "indicator--419df18c-d58e-4964-a093-908bb27b74ad", "indicator--b585188d-ef22-485b-a208-daab885f906d", "indicator--463a7b2d-0a3e-46c9-bf4b-42302edeb04b", "indicator--7f969e50-7138-4ea3-82f8-43ff659e7f44", "indicator--2bd99a67-48a0-42bf-af08-f41de03fc4e7", "indicator--7b81cc3e-22b7-46a5-a5fb-539ba0530fb0", "indicator--517a5b22-8bb4-4c2e-bb77-2d819c6453b6", "indicator--9a992274-5fee-4c76-9302-b3144747bee4", "indicator--459bd539-aed9-4c99-b213-9bc584c98e35", "indicator--723987b9-602a-4cf7-8368-21d6cf60977c", "indicator--24317af5-612b-4ca1-89af-677d9605a3c5", "indicator--6932b952-ab22-4714-ad77-ad7ae60051ed", "indicator--9a893e6d-ef8d-4d38-a3fd-4c4ef2b9115b", "indicator--7fac6087-7fa5-4993-8325-1e6c690baa93", "indicator--a9600be2-1f6a-4bc1-a0e1-e15ccb5d5cc1", "indicator--81760ebc-2444-447e-bf70-a84ac63a0671", "indicator--182c251d-3395-4c33-94b4-b5565d3b7417", "indicator--712cf886-0ebd-4956-9ac2-d12384652d6e", "indicator--665b0655-15fc-4846-b832-377fa9698084", "indicator--cd287240-9a53-44df-a28d-be1d4180113c", "indicator--4611690a-63be-4335-b6b5-cf658b488d2e", "indicator--75fad405-9f67-47a6-95a8-2c1419310246", "indicator--6335bef9-857a-4607-8a80-b9f4efa6c0d8", "indicator--247a9489-e6d4-4ead-9677-ec12085cf239", "indicator--1ac9d4d2-57e9-4998-8fce-a9049bcbc80f", "indicator--68d2666a-8409-4a1f-b736-25e123427fea", "indicator--65051f30-2b4d-4c25-8451-4f8dfe8907f3", "indicator--5bde2d1e-3c04-4e58-97c1-a32db7773f7c", "indicator--38785fa8-56aa-4c9e-91db-431a5b55d066", "indicator--ce0c9c44-d65b-4af9-829c-29cc58b2a38d", "indicator--21426728-7c0b-4b35-ad6b-bfbb87d8ad44", "indicator--47579d14-4fd9-48c3-b51e-e3919c4b23da", "indicator--4b8f74df-0b1d-4643-8527-e3faff9d4940", "indicator--1e58d930-ecf4-458e-b986-1f6e7df006be", "indicator--dc20d87c-3384-47bb-b97a-1cb245309b08", "indicator--32b30175-d9c6-403e-aec0-c7c5cc5b7f26", "indicator--b44d1956-3783-4e3d-9c91-c21a52ca54cc", "indicator--424f1257-918f-4ff3-8610-844e84515160", "indicator--01f237ef-f4ab-4c8f-9a59-de24178b2d5c", "indicator--760d64a5-abd0-4a19-ae1a-85e4909d9f9a", "indicator--8bde6398-ee8b-4f2f-b31c-a2c84b1e752a", "relationship--868bf992-5e9b-4a6d-ba1e-64d5ff7fbab0", "indicator--5c6b6f13-e65b-4ade-b01d-952fafc3a1eb", "indicator--730b236f-0ebd-4ffd-b63a-968ffd017d6b", "indicator--77a58e34-24a9-429c-bd9e-12a417d35850", "indicator--f783e63b-0a00-4c6b-bcc2-556d3c34f9fc", "indicator--3afdadf3-4aa1-4595-ab32-9dde26f77752", "indicator--e2eaf330-b4e2-4b9e-bc71-4519c17c7734", "indicator--d7f765e7-7793-4f3b-a7c4-20dc5908a985", "indicator--a48545e2-d4b9-49e9-8083-5754829bd4af", "indicator--64a69e46-c3a1-4b6a-b14a-01ba2fcde43e", "indicator--bea23e91-985a-413e-a4ba-f752db02b441", "indicator--2f1013d5-3dc4-4c4c-9c68-5d5161034e07", "indicator--33841743-f6fc-4bfe-98b8-f1e68f802d02", "indicator--430645f5-660b-4be7-9173-c5b7d853f57a", "indicator--a8925f27-b094-4ba9-8cab-06db017daa89", "indicator--3f58e18d-155d-483f-9963-b64c0098adcf", "indicator--56399d06-6421-4c9c-aac5-b6bf9d22e1b1", "indicator--a4655cd3-da1f-4a89-9a1c-73fbccc653dc", "indicator--b2d145a3-c9ba-4853-af5b-408a38e0141a", "indicator--79c8af1c-8542-4759-b9bf-9f5b6f028f62", "indicator--f567eeb8-ec5e-4f24-b78d-d6fa7f63e113", "indicator--05939be7-3efb-461d-a5d5-fdc9d975dff5", "indicator--a6fec10b-8a4a-42b8-81e4-9295f1d764e5", "indicator--00d6211e-916e-4917-9915-b6acbdced596", "indicator--2f6af416-2c94-4627-affd-b2c08d04c7ca", "indicator--449b03b6-edd6-47cc-83eb-1780e7a78ab0", "indicator--4a566521-8d93-4897-8a7c-3f73c6df0196", "indicator--7ff8d435-8e1d-4742-88da-27f412068e16", "indicator--56020710-9235-4111-a379-25fb5dd663cc", "indicator--7c4ca7bf-881c-42d7-918f-e369b087b202", "indicator--8b2027b4-23b4-437a-8691-6515bf4bb2d3", "indicator--670c910f-917b-4868-ba55-bb59459978bf", "indicator--934d6dbd-8ccb-48b3-b15a-ae096a30c642", "indicator--1deba3c5-32f9-4111-8e37-7ae0f21f7ecf", "indicator--894a02c2-5493-4ce3-9838-4bba65048dce", "indicator--86821754-6721-4071-aefa-64d5c080eb31", "indicator--92ab82dd-b1cb-4b8b-b63a-831bae04215c", "indicator--1d9e6825-d95f-45d6-9803-1af2bdbe44ce", "indicator--f1b43548-4d00-436f-ab42-6e3f97557816", "indicator--78ac430a-6de3-4474-80a8-8578e4607fd6", "indicator--20c2654a-460e-4636-a0d5-daa4fc587c05", "indicator--ea16d456-b25d-4dff-b7c8-179bd0886814", "indicator--7b5e6cbd-7f00-46f3-a527-7ab44bc3e159", "indicator--fc8eb9fd-060f-4200-859f-52a87e284127", "indicator--3b0a374f-7715-437d-9c0b-a86ebb86e6ff", "indicator--f13f07e9-b382-4b88-9865-fec41e8c3be6", "indicator--561dbee3-6e97-4bff-97ea-5a35905b3b93", "indicator--7e92a927-397a-41d6-9d2f-039ef6660014", "indicator--01de78e0-aa84-4f96-892e-4ee923017bf0", "indicator--60a3e50e-4aa9-4d78-a46c-19039ab88557", "indicator--a40dff9e-0fdc-4da4-b90f-8c5e8d8bf160", "indicator--03e37d35-e7ba-4a2e-968b-9bf8497b28e5", "indicator--a889f46d-4459-4290-b1e6-d4de85192f0d", "indicator--3f0ce616-97f5-4012-92a9-b7efd16fa593", "indicator--f1f7820a-0b93-4414-b447-2e4fe5e5fb23", "indicator--e9717c48-b859-4284-b35e-6a5bca21ae97", "indicator--1bb66f5c-3ec9-478c-b8c1-2ccd76118f29", "indicator--ad3b95ab-f6a9-4d9a-af06-afa6fefed1fa", "indicator--60bab0f2-d561-45b6-b4aa-37e1049b1210", "indicator--9e9892da-dbc8-4db5-992b-fe666dfcee6c", "indicator--53154471-c0fa-4b33-9c1b-bda7c7a3cfb6", "indicator--a662b979-f69c-46ed-b3a2-7f07cb345376", "indicator--4e632feb-73d7-44d9-8491-31251a6bcc17", "indicator--6521ec94-e9ea-446d-886b-10c1f40f17f4", "indicator--d9fd01ab-e45e-4512-934b-00e1cdfbb7e3", "indicator--38da739b-e34e-4f13-83bd-4a4ba9b66bc6", "indicator--8db4ef29-8d0f-4a77-85c4-5d399bfd55d4", "indicator--820c25bd-f534-47ad-9c41-309037200198", "indicator--0cf88e6b-8a1a-4a20-8a3f-752f5b9e86d0", "indicator--d4611970-8356-4bcd-beda-0bcd9e328779", "indicator--67616bd8-9b87-4b86-bc39-75c94453389f", "indicator--136719b2-51cf-4279-92d4-1cc9779debb1", "indicator--b354c2a2-08d4-4615-8962-99f7ac464ed3", "indicator--5fe88bd5-8d2a-443a-903a-c1d88c2fdf0a", "indicator--91ebee19-1752-47f1-bdbe-4eefc41080ff", "indicator--121609cf-c2c5-4aa4-9a94-d551add304e0", "indicator--ad423be7-167a-435d-b7e2-3c27df0b129a", "indicator--e1187ec2-c767-4cd7-a1ab-b613e61202a0", "indicator--b69cb49e-c03a-4658-86bb-c8474ba67eb3", "indicator--030e24ce-2e1b-47f0-a201-59a3d55ffde1", "indicator--1bae8e01-de4f-48c0-b433-6e72fd232a97", "indicator--47362136-0e9b-4e29-b1fd-799ae24a2613", "indicator--c7ff4ff0-21d6-4927-be1e-ccad182efd5a", "indicator--dba6f5eb-0c0d-4aed-9e43-1899f560e450", "indicator--ae1c845c-e628-4326-b2d2-cc696bfc1d3a", "indicator--420dd294-2580-4922-b2ce-f57ad76fe3f9", "indicator--e56086ab-4d51-4dd5-b453-1899a2d85441", "indicator--90979a12-07ad-4755-9d96-d2066d6f9ff8", "indicator--6e3b3911-b664-4741-b731-8811af57d457", "indicator--cbf7ade7-6c37-4bcb-b561-d43271076b36", "indicator--62388ece-27ba-4d5f-be70-93611f5a7692", "indicator--80b1929c-d51a-4e23-9d0c-524ff96d299d", "indicator--0b28bd41-68e9-437a-ba27-41e71dd77ead", "indicator--6308626b-9093-42e0-93c6-a0b700483393", "indicator--437230ac-bf77-426c-8e4d-e4400323490f", "indicator--54c2ab33-9168-4a3a-b064-9b9141214cf7", "indicator--61d33611-ce9d-41ba-aefb-2c6ab20c16f5", "indicator--80e9a759-9602-4f6f-b9a0-619b7991d6fc", "indicator--81ca5cb0-71a9-4296-abb5-e0361927fa73", "indicator--acd274bc-c497-47f4-a188-39de2741571b", "indicator--3b998f07-1562-4a52-89be-afc53716c930", "indicator--10996eeb-eb10-4b59-a08e-92740709013d", "indicator--409eacda-75b0-4650-aace-e60ab927ed7f", "indicator--7a551808-7e9d-4bf2-8816-8bb2095b6a5a", "indicator--43d1b820-731f-443a-8441-569999a21f37", "indicator--16f01c9d-2704-49ab-a51e-23edf96f79d3", "indicator--8e946ac7-f700-40e6-a43d-5f8f9b308cc2", "indicator--1d3c5016-7a7d-4b44-88d1-e053c4e0e05f", "indicator--572c2a2d-74a5-4a1f-96b1-d97ddb6ae17f", "indicator--2d870b9a-885b-4aa8-be2f-e599798a026d", "indicator--74a89612-06b5-41a0-a835-1c8e693acbbf", "indicator--4f894e73-703d-4b88-8da4-011ae2a15115", "indicator--f0d90fa4-1baf-45f0-8893-bc65ddb4814b", "indicator--fb5a0aa7-5492-4128-9ee5-7703fef58a4e", "indicator--7ac44b92-bb55-4e09-a94d-5a6f69cd3336", "indicator--3808b84d-14bd-493d-bec1-f94588deaf10", "indicator--25b8a21f-09bd-48cb-9f46-9af2b2ccc5bd", "indicator--bf6d0984-fb69-49bf-91d0-bf76aa4e2373", "indicator--0083b47e-4333-46a2-bb00-d5c55f8e2649", "indicator--ad808fd5-694e-4dba-9c04-16b860cf8c72", "indicator--8c66a062-654d-4fa8-bc3e-cc1f0b79e410", "indicator--8e2064e6-6811-4094-84db-2798e3aa1041", "indicator--6b7331a6-59f0-4ef4-9b80-1cbcf3c6ad5a", "indicator--f0029908-9ff4-4352-b40a-b70d77fac709", "indicator--8acfee0d-66ed-4b3a-8d5e-fbbf6ef91397", "indicator--40f09f99-a418-4263-bd5c-0a4033f4461d", "indicator--029de962-77ba-484b-a6dd-242e2efe9261", "indicator--ec6da4c7-3fe8-431a-8dfe-ddd50f7fd4da", "indicator--142ba771-ffbc-4480-b803-5840f65e8067", "indicator--c82c6520-033f-4aac-9625-dedbc5b024af", "indicator--aeb4dac7-7f61-4426-ad54-cdd9f32f5a89", "indicator--9af71a24-acd5-4829-b38e-05462c9b07be", "indicator--dbb8ecd5-121b-4005-a02a-89da8fa266c4", "indicator--2aebbec8-26c3-464c-a918-b65108677d7e", "indicator--52e10712-803f-4c9c-9f3e-b4de7c1b7ad6", "indicator--999eb537-5410-4978-b258-62d78bd7f3b4", "indicator--8f3c5822-d776-4380-8558-975be94da69f", "indicator--465f891c-2b2a-4043-b0b8-688f9e7ee857", "indicator--3b98eb85-f257-469d-9663-32421a766a66", "indicator--e2610861-a4b8-4c01-8b5e-726387d89cf0", "indicator--8659241f-f0aa-42ba-9829-5fd55a699513", "indicator--93b76297-c134-49ad-b6d2-7f4a4c935bbd", "indicator--4ef11243-e2d4-46b1-b8c0-7a46bd3a273b", "indicator--2841be9c-dad5-4cfe-84a5-6bcf5492f7e7", "indicator--49519489-b51e-4248-afdd-c3f0091a706c", "indicator--9389977a-5025-4ca1-a750-ec8bfc29015b", "indicator--a30b22d4-61c4-4130-8eb6-d3e69c27d80d", "indicator--2f4af5bd-c310-49ab-a3cd-e6a0c8e9068a", "indicator--150e27fb-7813-4eed-94ed-ae7d0b079a5c", "indicator--34179d04-42da-4113-a6b5-019606bef673", "indicator--6e2b8c31-1b75-4ee0-9c33-2337381ae57e", "indicator--a07ecd73-a597-4d8b-ae24-e6172c3543d6", "indicator--3fa91edb-8898-4df6-b98f-a22cd16db041", "indicator--e1dcc44f-2143-49fb-9cf2-1336575b6c93", "indicator--64d91613-d025-4074-887f-4d3d67670107", "indicator--7f50f994-3eaf-4be2-9764-f3dd94f1ef81", "indicator--4ecbd687-de17-41dc-9f23-95b079f331bb", "indicator--3335a4f9-0e26-4ff9-8b35-cd78eb2cb68a", "indicator--b2f06343-8868-4025-ad82-ab3932d357b3", "indicator--25858c24-e59a-48cb-bfe2-b93d85490d65", "indicator--5c5ae756-0f8a-4700-b0f4-0cebbbab8b11", "indicator--2a990999-dced-4377-9316-88a4aeb20762", "indicator--3630d4de-7a03-4d15-a147-245fa722f8d3", "indicator--8d203e93-3857-4f8a-bcb7-9c3a4155e7e9", "indicator--d885d7cf-60c2-413c-be1c-3a46df6b95c1", "indicator--7cc8d34e-e36c-4af7-a256-9a9409e37d16", "indicator--12425c75-ca4e-4939-9401-b68a0b39d9c5", "indicator--c368b78b-975e-4b93-b3cd-006b41953733", "indicator--b9a29ade-cd9f-49c3-8d0c-e403860560bc", "indicator--c4dc26d5-0b10-4757-b997-71162cbc03cd", "indicator--f6c780cf-09b7-4b65-84f7-13e1df841865", "indicator--5744bfca-bfd9-456c-9012-47dfc201479e", "indicator--d3e529fe-8f48-4a63-9e2d-074fa7337485", "indicator--59abd04b-a3f4-4626-ac17-74fd257c101a", "indicator--e84656db-f90a-4e80-9486-20b54f48a751", "indicator--975e9c63-4d47-46ab-82f0-0d057eb26d34", "indicator--560cb89e-1066-4cd0-9218-33f3869b8017", "indicator--bae14fb1-5aa7-4fb8-b201-2f4eecafabd7", "indicator--fdf24a4f-2d62-4b68-a907-6d4d09cb2af1", "indicator--f334160c-97db-4bdf-b338-1733610bde55", "indicator--99d6bf81-ae41-4c65-b595-a057346161b3", "indicator--f53388a3-2dd0-4c00-9018-9a18bdd67edb", "indicator--ffc0517d-5696-4442-9a32-9af115d8190a", "indicator--74420016-67f5-455f-8dc9-e7c6861fc728", "indicator--89130451-b189-466e-a121-911749475b5a", "indicator--f17f32ec-66ad-41ef-b3c7-f987fde76904", "indicator--7d77bf7c-8ca2-4ff9-b822-53717e37a029", "indicator--55777f67-0672-4c98-ada3-4326e991f520", "indicator--582d583b-c125-419b-a0c5-e742c8c669b2", "indicator--2a5cdfc3-8a11-4ba0-a244-627444a0f8a7", "indicator--2ac6e4e6-a07e-417d-b882-821391045c44", "indicator--64723c4d-2e90-486d-bf78-569e7b08d51c", "indicator--75923657-9dbd-4665-8de1-5072e8615390", "indicator--fe858cd0-3087-4859-b3f1-0b2ead82579e", "indicator--b835dc08-060e-477c-806a-1ac1b0f364fe", "indicator--24b3a0de-35a2-47ff-aaa4-13d8c09f5f31", "indicator--416fbfbb-811e-4241-bd4a-fe2c04b4a288", "indicator--993089f1-a638-4021-a1a9-9346bc80a1f9", "indicator--39e42ff9-f5e1-4c50-8146-33afb890de76", "indicator--a26182dc-bd36-4bfe-b599-d3cd4a2708f6", "indicator--d6b17d7d-ff77-48b7-88b0-69a0203fbddd", "indicator--506e01fd-ddcb-4aa3-ab09-123ea693c186", "indicator--2bea877a-6423-464c-98be-8b3d96c89a06", "indicator--c91b7d03-82dd-42c7-ad2f-5f0a1eeb36b8", "indicator--7099da43-2e6c-4a00-9d41-cfad3d991959", "indicator--37cd08e0-9277-4bd7-97f0-efc17ef47082", "indicator--37187018-af2c-4835-8e5e-f5482374e067", "indicator--c0d362d7-3611-4413-b3d1-3e6c5a7e3ff0", "indicator--c21c1a44-6af7-4c67-bfe4-0b8c9dc81319", "indicator--412481ed-5762-4d8c-b0cf-e047ba094a52", "indicator--3d1531f0-95bf-4dd7-8682-ffd96953c84e", "indicator--f60bd9a2-0af7-4098-a622-dcbf2febe26b", "indicator--cfa59ef0-5111-4e75-a647-785737c17cac", "indicator--0a5ae67f-6e40-4a62-a1e4-5caf181ab1a7", "indicator--defd535a-9218-4470-9cf9-b84d77f8ecf0", "indicator--0cdd0810-6444-4fe2-8174-04cad9ee4f71", "indicator--6889281f-ed35-4845-9b5f-26979c4289ab", "indicator--b8c49a1d-d602-44eb-9360-71dac5090d28", "indicator--23f8cc61-4c49-4907-bcfb-f62dbe8c6e53", "indicator--53334cf2-bce4-4eb7-8963-8dbf68e35bfc", "indicator--cf6ce498-0937-47fe-aab3-556883252dba", "indicator--29771100-f0e0-4708-9fb5-ba7d88fb7c3d", "indicator--6ee6c42b-7381-4428-8d42-6311de187a3c", "indicator--778ef9bc-72a0-4eb4-bbf5-0357557767e2", "indicator--4aa52481-5fbf-49b9-b983-b05fc35530f8", "indicator--8abc74c3-9f61-4431-a8d6-62206acfb206", "indicator--17ec82bc-c8df-4eaa-853c-ba9ddc90485d", "indicator--11efdbf6-afb9-4657-aa12-04374716d78a", "indicator--065dfe60-f1fe-4a8d-a297-1be7aedc15a6", "indicator--4280dec5-8197-4638-9629-25f5d0aabab2", "indicator--7e9ef0a4-0a08-4503-ae95-bae0a9ab806f", "indicator--475f5944-21b4-4319-bcd2-62172e09b1f8", "indicator--fb75dfe2-eb39-4123-ba70-589cbc194d4d", "indicator--e594724b-b8dd-4c84-8ccf-5764c2585f65", "indicator--b7eb5536-69ac-46f7-94bc-e88aee815ac6", "indicator--63f95639-3a44-494d-929e-acbb7b5680f2", "indicator--c63a112c-c509-46bb-9769-33e103d2fbc6", "indicator--3e91b3af-1392-4e4b-bd62-9157064d6bd5", "indicator--8b99ab32-b2a0-4323-9c3b-7efef5794f51", "indicator--6ea1f8d1-df68-41d6-b095-7a7480b1b440", "indicator--9679fff7-5131-41d9-a6d3-01fed363ec17", "indicator--037c81f3-a5b5-4ea6-93df-1b42a1241252", "indicator--993e6f61-59d7-4a60-b9c3-1bd5d04db18e", "indicator--a0bdfc18-11bc-4e4a-a9ab-fcb1735c9f09", "indicator--827bd085-ee1e-4682-a2f4-e63de33d952f", "indicator--8a9c83f5-5e1f-4dad-93c4-60a00c2a1e49", "indicator--b7f8ed12-5305-46d1-bfa0-3fa5931809c1", "indicator--bf3bfb60-3669-40bd-948b-a9c4d7726f51", "indicator--e688455f-6e03-47de-834a-cf85a038feaa", "indicator--a7526c96-4f51-478f-b9fe-6098a8770415", "indicator--7c31291b-efb7-4e85-afbe-30d4f9c4c80c", "indicator--a61c555f-12ad-4ccd-aa4e-9298aa1c66eb", "indicator--46540003-ead9-4bc9-8d21-df9df9912ce5", "indicator--5f22c0c7-c711-4e52-9434-158a3d373726", "indicator--0976843c-9352-4f5f-91f4-6ca8711cf5aa", "indicator--62ec0c96-80b9-46d6-a4c0-3c6641d2433b", "indicator--b0ff11a9-40a8-4aaa-a011-28c0bce325a8", "indicator--51d39011-f4dd-43ed-a14d-647702a7cf63", "indicator--390d283f-4437-4a68-a0f9-44f8a1eb62c6", "indicator--52d980e1-e4f8-417e-85ad-0eb5a7494fa9", "indicator--6656bb65-12e3-42c4-a2b3-7d37dbea4109", "indicator--db4ab13c-75ea-49a1-99c0-98b3f6af95a9", "indicator--34023d05-05e8-4725-b28e-05eef1e4cb06", "indicator--a4dd6849-5043-4306-af6f-02ec3b182e6c", "indicator--2d8d0e2a-ad40-446b-be40-ef52874815be", "indicator--ad5d587e-4f87-4141-a7f4-d6cdaf3c04c4", "indicator--de5f318d-787a-428f-a8d5-0fc9d7b8f6c6", "indicator--a9893c47-d63c-4c38-bdf4-19401e4a4424", "indicator--b9dbb509-ec64-4756-8e5c-35a15556a41e", "indicator--2638063d-7801-4aa7-8186-1b570b68cdb9", "indicator--c24054b2-d597-4b96-b7b3-fd11dc2446dd", "indicator--8c3f28af-4ee7-4be5-b0f4-aae280339385", "indicator--901ef543-1cd6-4c61-a897-35f9022b1b2c", "indicator--5f21b0b9-eb41-45fd-ab78-489810e64963", "indicator--e68d1f75-a7ac-47e2-b22d-d37ed17c250f", "indicator--6425f7d5-44a4-4a51-8225-f9cecc4d6f86", "indicator--d2e47aad-d072-402b-b1d6-b9310b5ab002", "indicator--e7614722-9273-4016-816f-7f77dc72a429", "indicator--dccfd99d-110d-446d-98aa-0d7f2476c5b7", "indicator--fef49024-4fa2-4451-9f2a-f608f263f1c1", "indicator--2d1bbccf-2223-4fa4-bc1c-ec9b2df6c941", "indicator--0d083717-8ad5-40af-9412-038b952919f5", "indicator--071838b8-a092-486c-98ab-d629cb5d8b89", "indicator--23fbc6e3-0050-4442-b772-ac4754f83625", "indicator--c5d4805f-98b7-4ed2-808d-c90daab56246", "indicator--dfda785b-6794-4d29-a9df-37048b7bd23f", "indicator--4b8023c8-2550-438c-8451-96c0bc325d4b", "indicator--fcc5d938-7a57-485b-83c1-fbaccb14dd4a", "indicator--993cba80-171d-433c-852d-700fd52d744b", "indicator--d7cf2fc7-d7ee-42aa-9082-154b10c71263", "indicator--7213d106-b287-4be4-88f0-8d2681c8d7fa", "indicator--6f553916-be3f-4a7e-8b4e-ebffe0f9da69", "indicator--89b535c4-5504-4aa3-8907-516668207f0e", "indicator--141537f1-e051-432d-a4eb-22691056f36e", "indicator--5d9a0e81-f38d-4b84-8f10-e43fe810fe22", "indicator--8cc4463f-9491-4159-ab9b-eb115fffa043", "indicator--5dbf9306-dceb-4d0c-865f-b3ce5cbbce5e", "indicator--de5bc878-09f1-42da-bcda-4bb33a7aad76", "indicator--90de9fc3-6e1d-4cb0-a16f-0305dea7fcf4", "indicator--8d904719-0418-4295-b5dd-c33a9c44f6e0", "indicator--2c6f3d6e-6a50-45f7-adce-603bbf385567", "indicator--987f88be-8946-47c5-af05-62a44357941c", "indicator--94fd799e-99ab-472e-adf7-41ee36bd3bde", "indicator--b9780e3f-3c26-4967-85f0-6bb12a89f4d0", "indicator--99321419-48c8-4dc3-8b1c-042968d0ceab", "indicator--b2b4520f-4fda-4354-b1bd-13688aff22be", "indicator--004d79c3-69e2-4b26-8d27-98ee8148dbf4", "indicator--f9b768b2-0e08-45f3-bb9c-4ca28fa8c872", "indicator--60de55b2-5a1c-4873-89ea-937146977f4b", "indicator--f563fed1-ac00-4d7b-b79b-eb88365c7c5a", "indicator--b5fd74f1-2901-4a6e-a2d4-d8b8c890ea9b", "indicator--b640cc0c-dee4-4df2-8569-87f02d21cff9", "indicator--5ba491c0-38ed-4c4e-a275-f4a9861d5e80", "indicator--bac021b4-bc0c-4211-aafa-fb8f505881c0", "indicator--c8dcd6ac-5e32-46cb-8f23-b80a75a1e5d2", "indicator--d10d8f99-90a9-4fa0-ab78-6b43af2f61ac", "indicator--cfd2164f-c9e4-426e-986f-e64ba29aa33a", "indicator--e9e53660-c510-4f2a-88f5-b56a4eea4869", "indicator--274b51a1-a0d5-43f9-b7f3-89d7a1fee2b8", "indicator--fbbb8b1e-1598-40aa-b127-c44d94b86737", "indicator--ed798022-0dee-4705-8c97-607a05a1e442", "indicator--745c4863-95b3-4a6e-9440-c8c7d5663d9a", "indicator--fca357a3-357b-4ceb-a87a-0cfbef04cf9f", "indicator--1ce56c85-0f4a-4e44-859b-c620fdd71e82", "indicator--1b66584a-95f8-439a-b7f1-b8a776f08bbb", "indicator--1d630e9b-7f5a-422f-9a8a-f8a7d3caed0c", "indicator--ebf535a7-4312-465c-996c-687b3977a7f2", "indicator--154a3396-7ed0-435c-a901-80772be3ca9c", "indicator--6e977ed6-669a-4b26-b936-305ceeb19156", "indicator--d81f64fe-a197-4d92-a34c-b3aba78b3f08", "indicator--d023ff45-728a-43ac-8246-72c526b25ff7", "indicator--dd46d203-b741-4714-8c4a-6c6afdc64ce0", "indicator--396da883-c4c6-4299-b0a7-8f6ea7bc24aa", "indicator--7723f0f7-0e02-4176-9df3-2a7e7e41cdd3", "indicator--1e4a704d-c780-4747-95d5-cfe84a079ab8", "indicator--08ecf25a-d916-42e9-9a98-ef4f9c6576e1", "indicator--e44c7f8b-28cf-4b91-ac74-9da14bbc28c2", "indicator--4d36394d-7cd0-493c-bc0e-6d4fa1fb0eec", "indicator--6336f07d-e91f-460f-bce1-5ffc1d3d0cc0", "indicator--8eb50aa2-9d54-4b63-86ac-4dc213049ba8", "indicator--0f404071-afcd-462d-a294-94e65e62b8a3", "indicator--6b8b4038-0e8b-45f1-b4e9-15b3269830a8", "indicator--6f07433d-f35a-47bf-9680-1466393fc493", "indicator--0ff4e13d-0272-4508-b767-561697c82812", "indicator--5d402098-b648-48f6-a115-eaab5a1e9215", "indicator--f0cd00b3-d748-4c16-8ddf-9929c50d3db9", "indicator--2efaa09b-8a7d-4337-b020-6af727c0602c", "indicator--f2975353-b8ca-46f2-a251-03a3951cef2b", "indicator--1f421c82-1e3d-4381-b2b4-e4aa0708024f", "indicator--5b2a7cd2-cec6-43b4-886f-a059c972daa1", "indicator--fbcc0772-fc8a-49f6-b490-507b217cf8b6", "indicator--f3751e49-913a-4c5c-b5bb-5a5ac42c2f54", "indicator--60582ee1-e13e-4777-8e2b-fe3e9a087329", "indicator--10eaa980-bb18-4fcf-81f9-422496ee2109", "indicator--66a1ad7e-027a-4263-9e2b-296858efc598", "indicator--9d8e8088-2b48-47f1-b609-4131bbcb84ab", "indicator--01731242-ea7d-4f2d-80c6-175512082ecb", "indicator--01d98d1d-3dc2-442f-8fc2-98a10f671b63", "indicator--78d66ab9-2fb6-42e3-b812-4ef88bf2e201", "indicator--2eac6a5b-8941-4ddd-bbff-bdec220b9b55", "indicator--bc56ffb0-5401-42ec-aa21-6a2b4b3a339c", "indicator--7e150715-f2ad-44a0-b9d5-190bfa230419", "indicator--2ca50431-5e71-48f5-95a0-080602406855", "indicator--0995912d-3e94-4cdb-9b07-3741b367a0b5", "indicator--e374b9a5-bb48-4a59-86f6-a56785064c67", "indicator--110c305a-3504-4d3b-a0cf-510cd516300a", "indicator--2be2dc19-bb60-4c52-add2-9965eeb74672", "indicator--74a0b090-fcba-430d-bf40-1cb194f28a08", "indicator--6c7a4f73-fbce-4e7b-aa03-3cfbf7b8abad", "indicator--60d410fa-884e-473c-9fa1-7e2eca815548", "indicator--4a9cdf33-b85e-4bde-8b06-417ffa047c8b", "indicator--1a67b72a-83bc-4e1f-84c1-e1637690157b", "indicator--ae893404-9d92-4ea9-9823-a745cb858c1f", "indicator--c83e7771-d59a-4d54-9966-78ec3fbd50fe", "indicator--4f908ee8-9463-4f71-b8c9-085d3d1a29bf", "indicator--1853bddc-5dcf-41f9-b1c8-218ffd8adc62", "indicator--482ffd9c-d7d9-4add-bc24-f9054bb7abe0", "indicator--53f96264-d689-4714-9012-c6c8825e51f6", "indicator--52a889ce-a619-402c-9e8c-44903d4f5e56", "indicator--aec32070-4dec-4c17-bfee-47627305cbc3", "indicator--82b6e376-ecb4-4d36-a95d-753478d54a53", "indicator--41c2a886-4253-46b7-b538-a77e554df4b6", "indicator--0d676e5b-cd03-4db1-81c3-e083eb4818ff", "indicator--b0050d0c-c22e-45b4-81c5-151837862e99", "indicator--d2dd8113-34e8-442b-bb8f-2712abd0780f", "indicator--f9329463-20ff-448e-9aed-ae439694eeae", "indicator--9816579b-b045-4296-ae65-608d13ec8043", "indicator--a27806b0-6b53-4f3d-9055-8cc3c8b138a1", "indicator--813e7f5a-c385-4321-9eba-d773e55f9052", "indicator--a0ec3dae-a966-4d1c-a286-bdb528e59d9a", "indicator--b2af4e82-2e43-4b70-8da2-10cfc216ce99", "indicator--76efc140-470c-4a88-9ba7-ebbaacba98c9", "indicator--243377d0-bbcf-4617-82d8-9091435b4b42", "indicator--2c485a71-0b16-4f89-a65c-33a8764f24c5", "indicator--84a33bd6-d8eb-4e56-8b0f-371f3fb085e5", "indicator--c8777e6d-e121-4edc-b631-b62f64563934", "indicator--3c90649a-8c73-47ca-9299-964813d07d5b", "indicator--6b3596a5-7472-409b-8969-d75a7eadcf99", "indicator--1f4c040d-dd00-4b26-8a5d-8b80b72d1afc", "indicator--59c87a27-6118-45ea-8121-928c6c8c3d98", "indicator--526f1ecb-cf01-4a67-abd5-195d8434880c", "indicator--99589f42-862b-48f6-86d0-5c6cd4ad902b", "indicator--7c0ef036-e53c-4eac-b404-b8c919686a4a", "indicator--907baa4c-0879-47ca-9f1f-ea13d488187f", "indicator--0893363c-4f73-41ee-a0f6-a8f0a4477e2e", "indicator--72ff9529-034c-4da2-8b8f-5f2cd282752d", "indicator--c795c3cc-edb4-4f58-9580-055633f4f84e", "indicator--a42fd648-1870-40d8-ad4d-6bafb1ac3eac", "indicator--11f2b53a-fe51-4315-a89e-3540efb7f03c", "indicator--621c7da9-a2f8-4bb2-8bbc-d64a2fb60763", "indicator--78be3e6d-49f3-48b2-a467-e4bdcff7afcf", "indicator--d8b5f27a-04cb-42bb-bcba-83d52292666c", "indicator--bdaac1a2-dac8-4f25-9ea5-17370abe0db3", "indicator--383bcf01-8bea-4185-8a86-410766410dda", "indicator--c21b2ea0-0ffb-4e8e-bf04-28c7ff23cefd", "indicator--701dd3c7-c68a-42b3-9467-bcb383312cc8", "indicator--24478d95-2356-42f7-8cbc-244b04bd2886", "indicator--b257bb28-97c3-4da1-9cc4-58b7ea8da951", "indicator--9f7314db-a963-478c-bab6-a651a95af34e", "indicator--925235d0-8b0a-4f4b-aa7f-3bf8785f3301", "indicator--f8d24304-d5d3-4230-8951-88f7cc4f88b9", "indicator--e458a500-a513-4200-bdb0-0792975484be", "indicator--01d49810-f299-41d2-a68f-59f87ffc7fce", "indicator--bfe49d9a-350e-4177-becc-4058aaa8ba1b", "indicator--3dc95683-3e28-49d1-883c-ff922bc0f17d", "indicator--df3d25ff-909e-4297-b2a4-7f6a802ec068", "indicator--d0468765-cc24-4551-95a1-92aedbc73a9e", "indicator--f264d15b-dbdb-4cbb-a6f4-9c987d49f7ea", "indicator--30af9805-6276-4c5b-b144-d7dfe81158c3", "indicator--2beed446-b3b4-4710-81ae-ab114611ec08", "indicator--bad10a35-0044-4c5f-9b3b-7b5fedab9901", "indicator--8708a073-36b1-4325-89f2-9cd11c98517e", "indicator--e5bf2db9-3695-45e9-90b4-3a91d4360395", "indicator--ca3de838-bbec-4127-b9a8-d3198f86b5a2", "indicator--f8331fc2-850d-4cd3-ac50-b14108881e7e", "indicator--c453d121-ba60-4be1-bd6f-db92d52e6d84", "indicator--2dc71d74-3a69-4fc8-a25f-2bb404db273d", "indicator--41af6d61-a9f0-415e-8d3d-0cde1db4a5bd", "indicator--d10dc437-fb6b-4c81-a51f-af0d0197efd0", "indicator--def74684-e6c9-4c0c-b031-b8780bcb5dc0", "indicator--871d116f-49ce-4d7e-bd10-e3c2d220fe0e", "indicator--03d73741-a739-47d8-af8a-a7e9d7c9d3de", "indicator--4ae3eadc-f033-4125-94be-461a6f356f81", "indicator--ef1b4fd0-40df-4c20-8e75-679b37748138", "indicator--106ce2d2-793c-4a1d-a9a6-aadd2a5d9f80", "indicator--46cbef57-7ff0-4a8c-8710-7fd20e4c0918", "indicator--e117467a-139e-4372-8450-a145d2792573", "indicator--c0749a13-110d-4389-a17a-788d282c10db", "indicator--96affa0c-b7ff-45bb-b906-08c9bf524e1c", "indicator--b82851a6-8047-4a44-aff4-88a63aed376a", "indicator--d55902a8-13c8-497c-a43f-b0cc35a06009", "indicator--3654eb2c-eb89-49ce-a770-e3ee22a4256b", "indicator--577b29d8-897b-42d2-afd7-1ee53a45bee9", "indicator--dfa5e412-89b0-41c6-8994-91f8600186fb", "indicator--b08aad5e-1f42-4f4c-98df-a55fa6b742da", "indicator--f97f9bd4-ba8f-4e57-a664-16ade537344c", "indicator--4e275a86-427d-448c-9897-6a60883447f7", "indicator--c4c82f78-d811-4684-bc58-636bd3967730", "indicator--9832af61-1613-42c3-8054-108ebf1743ec", "indicator--910c5902-44a7-4253-b582-b596fa01f669", "indicator--a3fe0ca3-dfe4-45b1-bdf4-5a6b6de17e9c", "indicator--02a15451-af21-4b82-aa35-f5ccbaf0f8dd", "indicator--79cfdd83-a8a3-44db-90cf-fa8151db0de8", "indicator--ea991bad-3919-43a1-8980-3ffd74420e2a", "indicator--7b8d063a-1a5b-4ca9-a003-24e5282f0085", "indicator--c81ec93b-3065-4412-891c-3c84f895f3dc", "indicator--66f4d1a9-e633-4b23-95b7-97c6fb7df45e", "indicator--873a7605-faa2-4b95-bf24-ff1e06442d9b", "indicator--a2ca6274-11dd-4781-93c6-468e30e85396", "indicator--800f56d8-b60c-4f98-a1b3-9b6a489587fd", "indicator--063148fa-0621-4719-a979-f644ee62c960", "indicator--20e016a3-d116-4d0d-baff-f8e618cfdc9c", "indicator--8e9bc578-2618-43da-8264-47e60c3eebe5", "indicator--07786aed-cc71-4ad5-a837-7a9307a9ae51", "indicator--1d174467-ddf4-4b85-a6d4-b2a5f50dd7ae", "indicator--15a023d2-4f06-4359-8986-36fd3cf4a912", "indicator--f0a5f67a-107e-4851-95f8-4bb7c815019f", "indicator--43c23750-d094-4d6b-aa31-f54b88473fdc", "indicator--f1fbf793-8646-402b-851f-c1383475a33f", "indicator--aab89c18-4105-4cdd-881b-e7cad892c452", "indicator--b3697f9d-71ad-4bd9-8711-ab0e5f7d8be3", "indicator--db9a9046-68b5-4eee-b786-cf2f2da1d64e", "indicator--129fd37d-8491-43a6-8c24-fcf1db61f651", "indicator--1d42dd45-c9b3-46d9-abbe-b2bebe2f18b5", "indicator--25a72c64-863b-4637-8e9a-0d39520c975d", "indicator--b83ecf55-5e9a-43c5-a8e9-65126178e1b2", "indicator--cc899704-b559-4886-81bd-d722ad8ffbf1", "indicator--4d1b9f21-8968-4e42-ad94-2830e82f9030", "indicator--1924c3c4-c3fc-45ab-b3d8-9f88c140953c", "indicator--bb685999-8613-4bd0-8a3c-ba66bf23906f", "indicator--f190a8a3-e62f-43b1-be71-0bb42467d39c", "indicator--40c53015-0e5e-46b6-82fb-c7b2f9858b54", "indicator--16e54ec9-25bc-4e77-b3d7-2528d076857d", "indicator--8671fe9f-0e42-4ba2-924c-6c875f1f8afd", "indicator--4d637c7b-05b0-4c4f-abfb-e4dca82e0f75", "indicator--e5630781-c678-4a9e-80ef-db885333893b", "indicator--2d07de41-4dae-4adc-aa67-57fa428299b4", "indicator--83822863-92ff-4567-bdb0-32478dae3159", "indicator--626cd491-15b4-4731-835d-4e26bd003e0e", "indicator--7ebdf7e9-5d83-49a0-93b5-ea09462f56d7", "indicator--a694d36c-09b5-4b8b-a1f4-0c8802999ba0", "indicator--3aa4c811-d45c-4160-8450-68d8913383a6", "indicator--13b1091a-d04f-43a9-a3d1-fe05412f9527", "indicator--a6829b38-f336-4037-965a-15537144a12f", "indicator--5decdc5e-0a36-4f3e-8203-e80414d8b3ed", "indicator--2d855e4f-8b37-456a-ac77-f0d184223e51", "indicator--97f46f18-c7ed-436b-8915-e6bfa0204e0b", "indicator--4c865d41-8050-4eac-9c9c-f8651949cdc1", "indicator--7dc87a0e-ecb6-4a00-bab3-e212eb3df4b0", "indicator--c6be0afe-f201-4838-a5a8-001a03755c75", "indicator--583d49bb-cdbd-45b5-a0e2-d2ae3b2af60d", "indicator--b0c134d9-703f-4c87-ab9f-78eb8ad429c2", "indicator--927a99d6-563a-41ef-869a-5149a41295d9", "indicator--3d7e918c-93de-42b8-9a79-45e390dcf593", "indicator--20ce970c-9790-45f8-8a85-31dbc6d994d7", "indicator--3cad3301-b9ea-4472-8388-b6b241bc8f13", "indicator--e88b2279-e455-49c1-9a74-5108e86caabd", "indicator--2137f0c5-84cd-4223-9c95-28fca8333ab5", "indicator--8b792a83-0aee-451f-b73b-153bccfd6143", "indicator--d0f53da0-0b3d-416e-a9ec-5252676ac71a", "indicator--bfbc53a9-450a-4d94-8acc-fdf38df08a66", "indicator--a46f1add-f73c-487b-bc9c-fe258b02c36d", "indicator--bed09250-73f3-41e6-bf63-e0c6eb32d83f", "indicator--8f49b886-d4da-414b-ba51-167415ca3cdb", "indicator--a8ba0ad5-ca07-4df3-b561-c12b95b7fc8b", "indicator--aa829a71-7a44-45f2-a26a-c9dc27c13305", "indicator--b07831ee-659f-4192-9df9-685185f30718", "indicator--58a6753c-3813-4671-a89c-36b6979fab98", "indicator--7f6da400-1e1a-4c48-8486-a2737851e360", "indicator--0f6b4899-cdda-48cb-a50c-8ea78bdb169d", "indicator--96440f8e-2017-4c47-a52d-e2c38acf58d0", "indicator--8ac4f865-4ba3-4b7f-8567-fe371332aaee", "indicator--7a91c306-d361-4726-a3d0-8d8a1bb3b17b", "indicator--6c7010fe-4eb7-4881-97da-253a797fcf32", "indicator--c155893e-93ff-429a-a875-b00962a5f4a6", "indicator--60f5e884-dfce-4081-b7b1-d316e29a4c58", "indicator--13349f76-568d-4815-9fa3-892a424e4528", "indicator--a2a186c0-4b6d-4389-8f7b-d0e9bd79ecd3", "indicator--3031a8c2-7858-45a7-b29a-2a734fa97622", "indicator--94468e1a-4899-40a3-beba-13bdddef63a8", "indicator--403ffe9b-793c-4b29-8879-ded9e8b50934", "indicator--bc007c30-8746-41c6-8f44-07ff96453795", "indicator--3cd1b1dc-7f17-44f2-ba8e-1796dbae80b8", "indicator--9ea395c7-a6bc-457e-9023-b9d27ed6bef5", "indicator--32e07bb9-4fc6-4fa7-8d5f-ab4f9c44541e", "indicator--c12b71f8-dc0c-4439-8def-8fb8aa0cf455", "indicator--b0bf1954-7841-4e70-8b09-5fb55813e89c", "indicator--6c519e3d-247a-4f1b-869b-6de6789726a8", "indicator--92c38978-6294-4f77-9eec-4b693cbba408", "indicator--ba393428-c93d-4e2f-b24c-f8968f979baf", "indicator--5c7ef12f-7f84-4638-8c90-3a96a5af2c1f", "indicator--5617d937-23b7-4ef6-98c7-ba86f512b636", "indicator--e955314c-4e6c-453e-9a22-fa189e6daa88", "indicator--c261252d-e444-4a8f-b8e6-e08e0c588f32", "indicator--c3139d61-aebe-4988-a2b1-5d8d524b2fdf", "indicator--17d71701-6616-470b-995e-a1240657b30e", "indicator--f95765a4-bf42-4fad-aa33-c1a4b1c7ad4f", "indicator--11112f53-6187-4d59-9574-7a399a3cdde7", "indicator--dca99265-8e48-4b1f-8fb3-2caf6fd94cae", "indicator--c4073b9d-a916-4f5d-bb89-3d4ed1e7c75b", "indicator--8f6b8d10-85e0-4970-b1cd-23f9d55517f8", "indicator--547ce716-97bf-45ed-b8a0-4556a43bfd92", "indicator--3b044904-53a9-40be-981e-ae4f9a5a7c0b", "indicator--9440e868-d6fc-4c69-9282-925559850abc", "indicator--bf1db65a-66e9-4d43-b8d1-703900fe7f79", "indicator--8daaa3a0-4e34-45f3-a19e-0515a08a8729", "indicator--7481b8d8-213a-4127-a01a-8edced3d6757", "indicator--c9b4d5e6-6f8a-42ed-82a6-1be1653b9388", "indicator--88169c00-078c-41e7-8735-4316f50d2dc5", "indicator--53fbc980-f9d4-4e11-8d8c-bad4d6b04887", "indicator--bd364fd1-6049-46e7-af63-b5eb4b6ad478", "indicator--0e0e8ec0-fa24-42c2-a157-fb8ddab80566", "indicator--68be3ec9-5363-48d9-b407-92d06ce76c4e", "indicator--662cd7bd-a440-460c-ba63-557fb75aa5f1", "indicator--88c22300-6089-42b4-85fb-ca74274017bc", "indicator--6c6ee4b3-4151-4f28-b1c2-9ca62618ac42", "indicator--1a1241b6-26ca-4cdd-ae30-47f400be494f", "indicator--82eaaa89-49b4-494a-893c-ecd566ebfb41", "indicator--fa832333-e326-4c00-bb51-d0a1f0b08756", "indicator--aef6e5cd-ffb6-4de5-a369-baf7689cd24f", "indicator--1fdecbd3-ee26-4c2f-adcd-84baa1e38a3a", "indicator--ec78a1be-579a-468a-a672-7692e415c37b", "indicator--53ee6b9f-e07d-48e3-bc8e-81ad8f6c0285", "indicator--5aa826e7-8804-47e0-bcd3-5b63fbf7243f", "indicator--47041caf-41e4-40a7-b825-973b111564a1", "indicator--481ddbd0-5605-4272-a820-82ffccbc4ba7", "indicator--d1772616-b67c-44ba-b3e0-c346a658327b", "indicator--3457d827-2579-49e2-aae6-d50e50fd3ded", "indicator--e1788779-3e51-4c13-9bdb-bc2ba6e2295b", "indicator--b774ef60-b8de-4cee-b9a8-729448a987de", "indicator--46511059-0406-45e3-8719-3e794e7acbbf", "indicator--97117bd7-1f75-426f-9b3f-606024f46aa0", "indicator--2e4d7f67-58a4-48a7-9db4-8e9dda71411c", "indicator--809ca075-7935-41e8-ad5a-4dadad20048c", "indicator--b2033679-73a8-4e7c-9baf-2bfd5dc2bff0", "indicator--68517656-684c-419a-b667-bb6bbaf1e6bf", "indicator--772c645d-d6eb-4783-8950-2b45d2045144", "indicator--630a9b14-30f3-4cdf-9c34-34089639fdda", "indicator--55df2a8b-24e3-4545-9d6f-7c93afde47aa", "indicator--d9c093d4-acd8-4477-87ef-e27bb0877876", "indicator--691166b2-347d-49df-920b-65db868bfb72", "indicator--4e6583a0-37f7-4c14-b2ed-d365ae5362e0", "indicator--96038477-b9d0-4751-a8b5-8f1132f50e75", "indicator--a08683d2-2407-4fed-816d-1068b7c24d29", "indicator--9f9fd4c6-ef2a-4cb4-a457-994b06e8f148", "indicator--0da4d10d-719b-4712-b4fa-9c19dd3151ad", "indicator--7d9460f2-22fd-4fa5-836f-203b1fdf9ac1", "indicator--763a9102-44e9-4b08-bf3c-6aa7f4ff0233", "indicator--294353a8-1b76-49f5-9785-33a34d150e4e", "indicator--d6538817-f312-4f7c-a04f-53f37be8df42", "indicator--c04552fd-b622-405d-9dfc-26851d83c8a4", "indicator--c2795d12-a8e0-435e-bbb1-3ef6bfcfaee0", "indicator--2813a9fe-e3e3-49f5-9ad4-eba778495282", "indicator--b878d7b5-a125-47c4-9d79-3f94d19ced87", "indicator--aaca6825-6e1b-4232-ba4a-e0196b71f284", "indicator--c2175320-8161-4792-b206-a3b0ed4cd174", "indicator--1ad69849-af56-4a97-af76-cf6aa1a77049", "indicator--68ece851-01e8-4229-9cd8-822789600201", "indicator--b9d641e9-465c-4968-843e-542c9d67e381", "indicator--0ebcbd89-e560-4edf-938e-1789739aeda0", "indicator--32b30272-5f9d-4d63-af53-2874cce0c98f", "indicator--4c8bbd64-a12a-4675-a312-d05d16ef8712", "indicator--af7ac6dc-ec35-4823-964c-8295e3e66521", "indicator--7f792f25-c1be-41d2-8bd9-6cf95244025a", "indicator--5ccdd23a-74eb-4953-8339-0dbe85bebb82", "indicator--2278af39-73a7-4ef5-8ac9-b1754c5367f0", "indicator--d1733d4f-0c3a-4df3-8890-db625f1e486a", "indicator--33979633-a956-4b32-9f07-75ced996990b", "indicator--99e359d6-927d-4fdc-9406-d0166a4a4435", "indicator--3d5ea905-54e6-4dbb-a2d3-e5e3a7d9595e", "indicator--37df1bd8-66e1-4147-982b-074972913783", "indicator--0564b044-6c62-45da-b085-e7e05abf5377", "indicator--19862f31-8d1c-4638-b471-272344cfa58f", "indicator--dfb42dde-e52d-498f-aa7f-470b8a7b5d47", "indicator--ebffedb1-ba4a-44a2-912a-8900bc2b4306", "indicator--ec9a78d2-8dad-497d-bc72-8f0ab70baae3", "indicator--41281172-7455-4cd0-8fbd-27921cc5c7f9", "indicator--c2245669-6a88-4f5f-88e7-9f4499aa0233", "indicator--df53b393-52f9-4fea-90df-ac6b3e341db4", "indicator--d1535ed6-4b3c-4808-a645-192c214c1cc1", "indicator--d8c2b740-1164-45ee-8618-db68c6a2da99", "indicator--b04d4937-1de4-4cd3-b0fa-0bd1d52f63c2", "indicator--60adba8f-90ac-47c9-8d3f-d43706c48d6b", "indicator--523c5b92-1493-4b42-ab71-81c28f1611c5", "indicator--26087c0e-ed3d-4fed-8ba0-1773532d1b77", "indicator--c4f66419-58c4-446d-b08d-9b63a184425f", "indicator--86eadfaa-096b-4aa3-8022-9903bb215b9f", "indicator--039706a2-7b6b-473b-af2e-d31ff90f1a24", "indicator--d7f33bd7-f375-4f69-8825-f3c900fb67f2", "indicator--5ef9d099-a56a-44c7-83b9-4cc04ca4fea1", "indicator--ae11aebc-1d40-4776-9670-5e5d345959e0", "indicator--cd646b7a-371c-4ac3-8211-59e431aa59cf", "indicator--1ff0fec8-0024-45ba-bd35-be7cc74ee7a9", "indicator--e2773c55-d7fc-4d30-bb9a-46f2e0b5033c", "indicator--d066c055-6894-4981-b0c3-8f909bfda2a2", "indicator--a5834678-0519-4fdc-a6f4-618a21481711", "indicator--10dfccfe-fcf8-425a-9b2b-a2f91d6ed47a", "indicator--61368bd4-5620-4477-a487-4683a863b8cb", "indicator--79f19f19-88c6-4ca2-83c5-63f2df1c536d", "indicator--9d984b4e-16c8-46f9-969c-09381b3e1383", "indicator--74d7e8f5-0e5c-4df1-bb15-0f739368f270", "indicator--87c93544-87d6-4925-9f7a-ac2550bae925", "indicator--83595614-77a7-4646-bef4-56cd3af08d4f", "indicator--1e6a52e7-0dc0-4ba0-950f-66fb7011c279", "indicator--397d9e55-040a-4163-8dea-004df0970218", "indicator--0d3e25bf-9b52-4668-8cd7-63a6f1308f3b", "indicator--12caa140-76ef-4766-aed3-456ecd89840d", "indicator--d9ffad8e-249f-440c-86f6-9744c5db7e0c", "indicator--265a5602-8690-4253-b19e-c8f8243340e6", "indicator--f232fe0d-3564-4fd1-8881-da5b01b4a439", "indicator--a6d8b70e-6c17-414a-9aa1-e05109cbe2d4", "indicator--9a44da57-8134-4faa-be49-c1f79e6890d6", "indicator--f9c2ac27-bce0-4c54-bdef-9199714d38b3", "indicator--604ffb4b-2e85-4435-910b-8d1874413973", "indicator--1dc67316-5ddc-430e-9e7b-6b6c4dbd95ff", "indicator--deea11b9-cb40-492f-8b19-180fb5c97cd3", "indicator--e9626010-048c-4e74-aab9-2a52dde43f1a", "indicator--38ef555f-397d-4513-a365-433a50b727cf", "indicator--851a083b-8e81-424b-b816-355d2a326a88", "indicator--db7a06b9-2c47-47ae-82a4-a7f385a6a44c", "indicator--42f98cd0-a99a-49a3-be7a-7c11c71d37b3", "indicator--5bc19712-ebfc-420e-ba39-c36442eeb321", "indicator--a9239bd3-5797-427d-b4b4-0d43e5c9b68c", "indicator--d653ed64-f0dc-431c-b921-4402c35b316d", "indicator--8f1c5b79-b120-4998-b524-5b46acf99bad", "indicator--ad2f7748-bfe0-4d17-9ed8-1e85d88b981c", "indicator--9d57f17e-1c90-4125-a0b6-b797e9368d83", "indicator--39579f46-de23-410b-9795-78a8b4585926", "indicator--edef05e5-905b-4037-b7b4-736b682e301c", "indicator--2d1e4a39-8cc4-441d-a657-ce10d5023d06", "indicator--08259148-15dd-469f-aa23-590f3da10b0a", "indicator--b7d86d08-315c-4f98-ae04-c42cb892f825", "indicator--9d56d9ef-7992-4e1c-a909-8420d5fc70ef", "indicator--859fcb73-dba8-4cc0-8d89-9e3cb371093b", "indicator--01a71e04-8e93-44a1-a57e-dc4096ae11c3", "indicator--905cd4d2-2729-46ac-9184-2d79db9d9fa0", "indicator--7ae17577-1381-4dfc-9303-516f66e92e38", "indicator--b7cf80d8-b245-4c09-95d6-199c2920a617", "indicator--da8c503e-dd8a-4520-b071-edf9e1fe90f7", "indicator--0c247f34-5783-47ee-9bad-363253566b35", "indicator--dfac7895-12de-403a-996c-f55de25ec188", "indicator--073dadaf-8842-4d8d-a7f9-7a8cdf559308", "indicator--df6cf794-9d31-4028-b3b0-a84b70cf9df8", "indicator--bc663565-61f8-40cc-beb7-7f1709c50376", "indicator--37ad3296-d21b-42fa-ba78-900811061ea5", "indicator--be88645f-bf65-4b55-b912-ba245dd7cbdb", "indicator--ac4e8b6a-a478-41f2-869a-2c1f1f05947c", "indicator--dae797ba-9446-44f8-b196-3dd973e6ff70", "indicator--f7eee86e-22b6-43ae-994f-470509970865", "indicator--bfcefa11-c854-4aa6-9113-20e4fe9484aa", "indicator--8250c368-5d78-439a-910d-18025f05e720", "indicator--0765b803-32e1-4406-aa46-9517940af1c9", "indicator--62c1fd42-cabf-4320-97a1-70a2657d91ac", "indicator--36500042-bff8-41a7-bf0b-13dcd194b827", "indicator--7a399401-096f-4ca1-b9f1-f9a3e1c89682", "indicator--69e5b327-cef1-4fb7-935b-6f374cc9ab57", "indicator--58ea2953-fc5b-4cf9-9c66-87126f40ba6b", "indicator--af391333-1ba5-4293-8dbb-2010b844e6a1", "indicator--86bef453-aab4-4879-9373-7f30d344ecf8", "indicator--74cac336-e141-48a7-a636-8c81a74b95f6", "indicator--f9c4aea3-dd1f-437e-a15b-be3b95b226d9", "indicator--fc1fa640-8797-4e2e-9571-641016a4daa7", "indicator--657019bb-6f1e-45e7-8d45-7c07624d6073", "indicator--52e97144-f81e-48ea-955e-992d260c276d", "indicator--19705ccd-c7d1-4c04-8b46-f8b19fc6d86a", "indicator--4ab871b0-9cf7-4810-90a4-8bcdb5705577", "indicator--058c76ae-2a0e-43b5-a2e4-fbbe14a9ba67", "indicator--f5133c2f-47c8-4f18-838e-44527941334b", "indicator--670c3d35-5fa8-48d3-87f0-b8f27a52fa1f", "indicator--9e3bd5a3-4a8a-41b0-96f1-2413cfb4bb32", "indicator--912b37ec-4ce4-440b-8be5-73c2a2f4f890", "indicator--42b3567b-7615-403c-b578-b4c75282ca02", "indicator--33842069-b80e-4be0-81c3-5268d56fdb80", "indicator--38215100-9ec3-4ff5-9e06-d92755d42122", "indicator--bc288a38-b75a-443a-af89-86e38d361787", "indicator--1979fb41-1136-4e35-aef6-b3afe9cfc38c", "indicator--61171d61-c52b-4f50-8016-d5959f9a7f2a", "indicator--ad5886bb-4695-4472-9125-e4b415d1e5e1", "indicator--d7fbfe62-adb1-46f4-a8f7-24ab48738b6f", "indicator--c4e87945-2e8c-4f52-b3c3-7d0f4af18979", "indicator--27f043d8-4680-4f12-9919-7c04bd932b89", "indicator--c7818e3c-d861-4639-af79-b0c237f2b542", "indicator--fbeb1130-3bd4-42df-b733-4e0339b52248", "indicator--7efa9a8e-ba0d-4f0c-9db0-dc575684cb92", "indicator--9bf93357-9299-447a-9258-c29a5ef65400", "indicator--cc905939-84bc-437c-8cab-49e3ac12d604", "indicator--198d5ac5-a8d7-4da8-b37f-31484f54b026", "indicator--e8d55a6f-2c82-479e-88e4-588b41efa985", "indicator--babfeb5b-0e89-447c-8cee-9b52112354ee", "indicator--1b7f1160-6066-483e-a58b-2a05b1b48fdd", "indicator--55e8ef03-ce90-4f8a-ab39-ab583e62b23b", "indicator--54a0e3d4-6aa0-4667-b4de-569208839ac5", "indicator--bebabcbd-092b-43f4-87ef-63a0ab5edc2c", "indicator--b422d2d0-cb82-42b7-af5b-3139289788f4", "indicator--cf5ff320-ee43-4376-8b08-0f922d8877c5", "indicator--1b0a4794-fcb9-4bb9-add3-d232f562daba", "indicator--2f01a804-fabb-4388-bbf3-26b8a70e93b1", "indicator--201df878-32d5-4114-b3ea-347dec872e18", "indicator--720caf65-bfc3-4d67-8a10-0e2c7d410857", "indicator--328f49be-693e-4fcb-bf13-734e7f87475c", "indicator--01d11bd3-d154-4390-8e07-bfa55361bd16", "indicator--a915c896-dcb8-4187-a779-c8ea5a795b62", "indicator--befe0e6f-7cf3-41d6-927a-f0a7b87e2362", "indicator--63b41c9a-c45a-47a6-9310-05a9e92fcfa9", "indicator--b00a70c6-bef6-4120-b87d-7f7df66fc782", "indicator--1e904a8b-092b-4aa7-840a-d2dd8f37a5cb", "indicator--10e98507-0453-45a3-90f3-7ceb2d95dd5a", "indicator--9f0d5bdd-d857-482a-8201-2ce542c5f4e1", "indicator--526c7a54-9bc6-4f93-be90-d30b0e076d93", "indicator--1c56b418-0b53-499d-9ae1-bd227f3d0951", "indicator--89a93c67-44d0-4e05-8f3f-fe8064befef3", "indicator--aea245e8-a2a7-43fd-9366-d6c9b09f9167", "indicator--bd2969e3-3d43-4f57-888c-616f5c19e30c", "indicator--5fbebec0-7314-4f42-9005-cb53a97dbadf", "indicator--517ecf91-7e4d-40c5-86b6-944ea6f91934", "indicator--24b33086-b156-4cf9-96e9-dc8d33795f13", "indicator--2bc6e96c-3596-43c5-83eb-6dc561f0ab36", "indicator--6a9a8ee1-435d-421a-8542-64e60f066a3d", "indicator--2b1c3af6-7c98-4e79-9ce5-d76ce4675b74", "indicator--fb65d9cb-498f-4b4e-b396-883efdb1518b", "indicator--b7dc4c37-be0f-4df3-b0c2-7772ae6196c6", "indicator--64c4228a-a164-4413-a750-c2ee4ea443d6", "indicator--ca4c4b71-1bf2-43a9-abb9-0bfb2628dc80", "indicator--5d331a14-17be-417d-ab6c-2742c93d5e2f", "indicator--ee87cbf5-90b5-4533-8619-655dd8b5a501", "indicator--daebe64d-25e4-47c6-b793-2c8bee7c6734", "indicator--bfff8070-f2a4-4d78-a3c5-c278f96c9711", "indicator--afbabe7d-31e9-4bba-b774-7ee76666e5c4", "indicator--ca26252c-22ae-415e-a1e6-96429a7795ec", "indicator--d974228f-5f15-41f0-93b0-50313aabb8e0", "indicator--a330e6ca-57eb-4789-8697-a7020c8bdd24", "indicator--7d30a3dd-1b43-48d2-ad4d-00d713c03b66", "indicator--47b69162-029a-4c86-9baa-bbb9a812b82e", "indicator--e33691a2-bbeb-4c80-bf9e-8d80152a0a0a", "indicator--ef2bf024-bfbf-437c-993b-deb489fd0797", "indicator--7ea9710c-6d2a-4c58-ac16-a6ff1ff2fa26", "indicator--e719481e-d084-43d2-9196-f6f624fbfb65", "indicator--035b7ed1-a993-4239-a726-4112502ae77f", "indicator--ebff3bb2-759a-4c27-a727-1bf805c893fe", "indicator--36a4e39c-d6ec-4047-b4c8-d80665df08e9", "indicator--6dfa9baa-a0ab-4b1a-ab6c-81d831460f61", "indicator--99abeb91-4cda-4f7d-a86e-f35c1a39b678", "indicator--7c3907b7-63dd-4fc1-8ad4-b438661b6c0a", "indicator--96458e73-28a3-451c-8213-dc09473b4fad", "indicator--50419b97-333d-4b20-ad87-00af90e46147", "indicator--edacf8b9-9cb1-4cb8-a382-8f7c00e0581c", "indicator--8f5a1f6c-6ade-48c0-9600-714faedd1d39", "indicator--4392ca9b-91be-443b-8d1c-649a7852dbd4", "indicator--245a6043-2310-43d4-835d-f314d356b54b", "indicator--c0cb6c84-b0f6-4013-94d0-71bf715dd345", "indicator--2fdd789d-9cf3-404a-9ea3-8dff80605e60", "indicator--a137be0f-8df6-4987-bf00-8510110cdd91", "indicator--4e5dbf1a-cf03-4c81-b40a-42ad967eb1e0", "indicator--7ae1a40e-55f0-40d0-af7e-7a1004278d44", "indicator--2add9301-2ab6-44cd-b6d9-22ab9a778b29", "indicator--7d0df660-c991-487d-956e-4f4400f31005", "indicator--a005c5f5-78b6-4448-8b6d-725f0cfd0d57", "indicator--f44decc8-a808-4e59-a088-c90672b62ffb", "indicator--0b0f386f-5727-4add-b88f-182f31c0e397", "indicator--631c98a7-c749-4d93-8b7a-eb229f5003bc", "indicator--85607c06-477e-4e97-b472-9b32bd1f4785", "indicator--61d84521-baf4-4a60-81e4-2461ad50267d", "indicator--7f25a258-c1ea-4fad-b61f-c6e1576ef6c6", "indicator--ccc0e756-3f5f-4d3e-a9fe-bde50a920e33", "indicator--6c6bbd86-61d8-4c14-9774-a05ee8b9469e", "indicator--09ecf7b6-d190-4dfa-8451-0d74e09eb0ea", "indicator--91d73591-9108-4926-a715-46722525d64b", "indicator--b9aefd10-e432-4eb2-915f-4d4d2e4f9bfd", "indicator--9bbef9dc-0aaa-455b-9304-b75260bc1b50", "indicator--5acca86f-37f8-45d0-a921-e07d03b77d01", "indicator--f548029a-42ba-4b00-a925-f306eecc6590", "indicator--d611d9f8-d818-41b0-8dea-2a57ab739727", "indicator--08a3fadc-126e-4593-9e1b-dee0cb84d5a0", "indicator--07cf338c-e25b-4581-a111-e2659c36cac6", "indicator--7464df08-e21c-4dce-a6b3-bb2fe45b6309", "indicator--2394b982-fb23-4130-804b-642fb3d35109", "indicator--26078ff1-bb63-4a4c-b648-a7fcbc76d84f", "indicator--62786ccf-a273-4a9f-ac87-699b572f49d3", "indicator--27b2ce6c-5653-4c8b-b167-977da15b86af", "indicator--3d722f6f-f82b-48c7-8c94-2438dd640b50", "indicator--54dc4271-75a8-428c-994f-8463d2edcc51", "indicator--365db47e-3fbe-414d-b881-08f3659cf85a", "indicator--9d46f025-2b74-457d-9c5f-d73a3e8d617d", "indicator--b55144f9-b778-45fc-8333-128701a156dd", "indicator--e86a7a68-8259-46fa-8102-01a9392be620", "indicator--7ee45cbe-faa4-4a67-b157-56e6bcfef98d", "indicator--9e83afd8-8b3c-4281-86c5-2d58ed2d0d6b", "indicator--07a241fb-b57e-4f06-89a0-610066d41cdf", "indicator--e04c8cbf-62ea-4e58-9a1c-f0576e70624e", "indicator--1a1c0ac7-6592-482e-b2fe-c92298bb1a05", "indicator--59152484-ce5d-4fe9-b64f-8d0e3384e7ff", "indicator--92cabe46-e6a8-431c-9703-deae49833484", "indicator--f2bc843b-2b33-4240-b739-e05d6206bfe0", "indicator--04f1af46-8e6e-4be0-ab4c-1a3662393b37", "indicator--fe998354-a6c5-485a-a561-ea9528b8a765", "indicator--5e744555-0f69-4a18-a44e-837ccc9e3590", "indicator--c5902e2c-0269-4f5c-9a9b-5bfd29085b10", "indicator--f0a80bb5-468d-4f03-a93d-a96def9000fb", "indicator--c7639fa5-b305-4f75-961f-4394d0b38382", "indicator--1e313d6b-4f58-4a4e-af4a-5628ec1698e3", "indicator--58be27ed-14bd-4e6a-963c-69ab88b00f2d", "indicator--a2ecc0d6-2204-4b59-9bc9-03fab187dc04", "indicator--96fb253c-afd0-419c-90c5-c2b5cdd04e3f", "indicator--2908cf57-fffe-4952-a9cc-d14003e5ca2f", "indicator--709dd53d-a825-461e-9ced-47f87d63b712", "indicator--6bd73b46-03c0-4f55-9d18-adf635531f45", "indicator--342a57d3-b6fd-466e-8878-cd1c31349162", "indicator--26074f7b-48fc-43de-bfd0-e22f6db10e0c", "indicator--104a24b7-9c2b-4805-b7c4-04ae420587de", "indicator--3bd41315-8914-4969-b353-8a2e54dffa8b", "indicator--3d7157c9-200c-489d-9622-887b485f9b3c", "indicator--722b156f-dbd5-4661-94c6-9906181904e2", "indicator--a9f7a32c-1f3e-4def-8708-58ece88e6336", "indicator--6e0a4c89-2dbb-4981-a545-bad7b02c242b", "indicator--47f356dd-6600-43ee-b824-6e4217a8da40", "indicator--e1d54b16-09b2-4ce5-8b65-5318276b98df", "indicator--04b2805e-114c-4634-ba99-a22a0a2b9fa7", "indicator--f4c6c160-5bfd-40c4-9778-a18d625b3459", "indicator--df115206-f1de-4525-bb3b-e9f2562c9e41", "indicator--e8b27838-7338-481e-a21d-f2d6972b857a", "indicator--46025911-c389-491a-8c57-61ddc74847cc", "indicator--5b020b04-dcf1-41d9-9a67-4b9f570fffc8", "indicator--b2af5bd1-c962-4f55-b535-43f38301a9c7", "indicator--6147a9b2-6e45-4065-8d05-fb42ec515326", "indicator--9339aee9-a9ad-47d3-bb93-6cb2fe97d80c", "indicator--59f0c49e-6631-454e-bc70-c3ff9f234435", "indicator--5bda5fa6-7dd4-4832-853d-bfae79ac2839", "indicator--782ee98e-1b2f-4ffb-a6c5-66d848faf890", "indicator--a82f08bc-7e97-497c-a44f-024fe8b87a17", "indicator--d6c90170-dcd0-4d3e-b161-387087f0f078", "indicator--d6a5c6b1-6c04-4a17-8de4-b1bea4897865", "indicator--a97f3208-f3d2-42e6-a1e9-1341a3ab40aa", "indicator--b57e3802-51c5-4460-9e60-6afff9a3f93d", "indicator--7abf98e9-d433-4af8-b8b9-ac79878d186c", "indicator--d2046cfd-fafb-441f-aae4-e9ed58d6f510", "indicator--d7a7a103-a4e8-4f78-8f75-71b5c2b1a62c", "indicator--2de6f3ec-d000-47a9-9196-b69f68f84bc3", "indicator--968714fd-8d89-4b82-8e5e-0fe12ffb4e45", "indicator--f79c32c0-26c2-4c39-b19d-b3ce43b2e852", "indicator--44db7dd2-ea95-4331-aa43-d1847504ddae", "indicator--7d711199-62c6-42f9-a8e6-5df0cc685e5d", "indicator--60176784-1968-4a6e-a1d7-8522c6d3927a", "indicator--c77c0d73-a1ef-4029-bf9b-3b151d680c9a", "indicator--20ad1076-dcfb-48a4-8dcd-eb537ba41f5e", "indicator--9aa24bf8-0e86-4898-9af4-e72ebaaacb6f", "indicator--888624e4-3019-4b6f-a058-a72a9e9fb79e", "indicator--dc21940e-ebb2-47e9-a69d-26cea368c267", "indicator--93b5715c-94e8-49e6-8b83-85dc8ec5e651", "indicator--02d97c29-e9eb-4d45-9d0b-ce4095720e29", "indicator--cb7da289-deda-4171-a0b0-bf3f152e9226", "indicator--ca230141-3280-4272-8f16-d23f121bc126", "indicator--a8d5e9e9-c5a3-4a7c-b348-7af602262c70", "indicator--757c09f7-9fcd-4e91-a5bb-379e8163a274", "indicator--eee58de1-893a-4499-85f2-5c15a6837e31", "indicator--51531fdb-a806-4847-80a5-98b788c49b4e", "indicator--83256467-6795-4c7a-88d4-8576ee9bd7ec", "indicator--e5a7a656-bb76-48a1-9caa-1738734d7711", "indicator--ee42cdfb-388a-4797-b2d5-26cdb1a69265", "indicator--e75c33d7-ab68-40f0-9078-4ab47b214c67", "indicator--9d495a93-a68b-42fd-afc8-b9b691881864", "indicator--653f3145-2065-46d0-894c-aed4dd1c58e1", "indicator--7833e718-b81e-460b-9954-98bfa29dd499", "indicator--ed032b14-0b15-4b49-a755-bf6b59ef3ab8", "indicator--45c5a777-c3a4-4095-b500-42a1c713ef92", "indicator--cca028bc-e882-4050-849e-45c204cde5fd", "indicator--2e80d0d4-8d15-4993-bba3-25af4e801a47", "indicator--a6814a84-7b8d-4d77-ba8b-e4bb315890cf", "indicator--b598094a-18de-4e88-88ae-b5c764b1c692", "indicator--4d910992-76cf-492a-be01-0b99028e0eb5", "indicator--f6701221-3484-4a4f-8f5d-9b690d0f95bb", "indicator--9e24116d-0651-47be-bac0-60f69537216d", "indicator--bb21b193-b15b-4af6-8c8e-22118561141c", "indicator--dc3a56a6-d682-4ba3-ae1c-0b59746be4c1", "indicator--8a7c2d2f-ac26-4924-a4fa-91102e2b64ac", "indicator--9e451305-ba6d-4302-8a26-111e3b4d13aa", "indicator--4c5acff2-be0d-4c1e-8505-b0ad2b74187a", "indicator--87dabd19-df6f-4805-8a97-a9573c38cdd9", "indicator--78f2d1e9-7303-4079-9709-f75d65f79eca", "indicator--ad535c63-d240-4fd8-8204-1f5af9bfda52", "indicator--8e97afd2-d4c9-4b06-8635-ac6d5f7b07c7", "indicator--460ebff5-1277-4549-8da4-aff7ac02f4d2", "indicator--a54cc870-1209-48a1-b09c-b2abca296c03", "indicator--43e48e75-e736-439e-a70b-6c2ed510680a", "indicator--a74cd323-8e98-4279-a46a-5f349ad678d9", "indicator--1539c537-a135-4058-a348-ed686289349f", "indicator--ef2aa761-ddf1-47b7-bea2-bf16a20e7b42", "indicator--45964749-6acf-421a-8b56-a151c54dd48e", "indicator--d814469d-8447-41ff-9a14-280b267120c3", "indicator--9af47a06-6aac-42ab-8016-5b4daae5bb95", "indicator--9f748f3b-8cfa-427f-b294-5b73dc601a12", "indicator--6241390b-ce6c-4267-b712-dfb67c7de388", "indicator--a3b3d557-9b43-4d6a-81b2-ceab9a5d833e", "indicator--a25b77a5-f15c-44bd-a028-dd21811cfb1f", "indicator--2037f8af-4d02-4f02-bfab-a4c44f3ec582", "indicator--93962aca-5362-4c38-957b-e4a22fdb18bf", "indicator--6ea102c4-f5ff-4d3f-99ca-35b49dd71491", "indicator--b96f517e-d887-4008-8fd2-85fa6b75bbf9", "indicator--f4d30c91-6a3b-4d91-8555-344a920802a7", "indicator--26c58c48-a729-4585-a218-a0da17fe0b5e", "indicator--7d715f7f-f934-4621-9c05-3f35990dadd0", "indicator--61a1d27a-d692-481f-bc29-1993d060f377", "indicator--d137ac4a-ebf3-45ef-92ea-880b97dbc561", "indicator--2154dfbb-5aa8-4537-8cc4-6c36cd2d4cac", "indicator--7b22783e-375c-4ae5-b291-5ae60377df1f", "indicator--20115c71-a68a-4719-a0fa-7fd9142ef127", "indicator--0583d557-4ab0-4307-aaeb-d933995d71e9", "indicator--032d1506-1c7d-4b5d-8e1d-ad298089742f", "indicator--85450254-1946-413a-9d76-b11e8417a7f3", "indicator--cd0717f1-0962-49ee-b0ba-c7be94655ae4", "indicator--5f2a4030-0a76-4459-954d-05d038eaff55", "indicator--06ccf7d8-88bf-43d7-acc0-94929cf4084a", "indicator--99694ab7-b7ed-41f5-9cf0-76a26a179db9", "indicator--1597e54f-f04e-409b-ab3e-93bf1d71f443", "indicator--a6d82baf-cb50-422b-b14b-81273e391a9c", "indicator--33e80590-dc4e-4a50-9e71-2417a3860e48", "indicator--77c8b66e-8587-46e9-bbc4-0f9ebdde8534", "indicator--9bb8aab6-736f-44c9-a79b-7177126ed579", "indicator--be340c8e-d6a3-4bd2-825e-c384d848dcfc", "indicator--513c1bdf-691b-4ea3-8f67-cf8e557d144d", "indicator--eb3cad6f-88df-414b-af29-c04f3b206b7e", "indicator--33a55779-e86f-432f-994c-dac7681a3868", "indicator--6509c2ce-3e1e-4df6-882f-253e0cbd21a9", "indicator--54d164e5-7bd9-44ee-8f7f-79ab63e506c5", "indicator--83615040-d27f-4dff-8a9b-e6216dfae290", "indicator--68408f2f-ab02-4e9a-a39a-59ae2a6ea3ad", "indicator--100752b2-590b-49c1-9a14-ebdfe39568d1", "indicator--b6c30947-65a8-4e48-9681-0d62490f3008", "indicator--1d4a043e-f5ce-4d13-a851-15526ed1dc2c", "indicator--9d209a4f-b03c-4d5f-a27c-16ad242b05b8", "indicator--ca879f52-535b-4cfb-928b-cc7edc25e9b2", "indicator--85ceff01-da58-413f-9e4b-728f6ba70abf", "indicator--f2f06874-961f-4c63-8a4a-93d12c24f766", "indicator--38725a31-62a1-4000-94a5-df50c6e74a14", "indicator--320833a7-323b-4fb7-afc0-622527b53f5b", "indicator--0b3811e5-7afd-4b14-8d7d-6b17ece91266", "indicator--60b25c37-abd7-4dda-ac83-ba05229ac722", "indicator--f814308a-e5d9-43e7-a277-b6b5c39e792c", "indicator--c03a15ad-f832-49ec-80df-84236601d22b", "indicator--ea5572d7-bfd0-4faf-ba97-850ec955106c", "indicator--01204026-e1d6-4ce6-ae38-b2b2937c3cda", "indicator--58250eba-00f3-4a58-b9ad-520a14b4a55f", "indicator--e581da65-be77-457e-91fa-c4146b22ea9f", "indicator--9f0f2aca-8cc8-4240-95dd-f801f50e6c76", "indicator--16c0a494-322f-4889-a98d-f7fad2c01b84", "indicator--55a34476-491a-45c5-85a0-47a311b55443", "indicator--da7ad4cd-dc86-42e7-9ba6-499ca5c3999f", "indicator--66a147df-7bb5-4535-9e35-cba4aca86f68", "indicator--9673386b-e0b9-4be5-8599-a16090e041a3", "indicator--291cc04d-076b-4e2e-8fb6-78a8b1688833", "indicator--bbf9a3ea-9b54-43e6-a912-f8943e9ca4f8", "indicator--e12ba2b0-2f61-4ab9-a52c-50e93e6e01b9", "indicator--e4cd13be-b35e-4f39-8775-582859997228", "indicator--b11481df-3879-4abb-895d-869d66ae0ab8", "indicator--eb9aa33d-996a-4f20-9af7-a94e19524bea", "indicator--6b4c5ca9-8d10-4760-afd0-d71cfbfae5fe", "indicator--cfdc3c17-5377-47e0-9c0c-cdd4c737f0ae", "indicator--6a0d7c7d-61e5-42df-8a2f-fd87382b2a60", "indicator--10cd6c5d-9060-4a89-84c3-404164be5ecf", "indicator--f8bda88a-164d-4281-a030-767c6e2e23d0", "indicator--1a5679ce-6256-4e35-bcbe-d06501d4c8b1", "indicator--2aa68d7a-c3e5-43bd-874f-ebad866052b3", "indicator--a8ce6298-5d3a-4386-b833-d9b56bc7d0b0", "indicator--598a27f8-e2bf-4d05-b7ef-e70b8c99e5e9", "indicator--c9666c56-f80b-4b22-8052-7fbcedd8d7bc", "indicator--9ae1bfad-591a-40ef-9a09-c43ea5009d4a", "indicator--b9c72a48-87ac-48ac-816c-dd805c42b056", "indicator--40fe059f-beb8-4d57-b539-30c84ab00475", "indicator--498f98a1-e46a-4a8b-9812-2636cb074b6a", "indicator--91276539-7752-4c1b-b867-89399a76f56a", "indicator--c511b7e4-e6f0-4f6b-a8d3-1202721a23e5", "indicator--884711dd-4e72-4d35-b1d5-cd88f856ff10", "indicator--4352c014-dcd8-4e20-abc4-c9e63837a0f8", "indicator--01d6a65e-cac3-4ed9-ab3f-a984e5a04880", "indicator--b647e5fd-e62c-4e2b-8aee-e181e5d1092c", "indicator--9365a3af-07fa-4ad0-98e6-b45d79f6d51c", "indicator--18086114-b169-4798-9233-dc329a63633f", "indicator--ac9defec-2f1c-4531-af27-3d228a6b0352", "indicator--70c15a54-1f42-43dc-aa64-cc26910f2fea", "indicator--899d372e-88cf-4a4b-aed7-b65cf4deec18", "indicator--4b043fb1-0efb-43b5-9756-f8430a5dbcb1", "indicator--c2178c07-85c7-4273-85bb-b3022ce240b3", "indicator--4d517195-7ad1-40e1-99b9-d276ea57a30a", "indicator--51eb6a74-2e38-4161-9e7d-2e9aab18b23b", "indicator--1d106c6e-a276-4430-a8ce-ff197898b9b6", "indicator--d9bad804-3f4b-44bb-b495-e8ca8f6b8382", "indicator--e3058515-1238-4d91-806a-2d3706412ecc", "indicator--e85eb824-f711-4367-9286-8026d216fc9f", "indicator--f0ef5260-23f3-478f-a83b-3b67ec53709c", "indicator--ec94e2a5-6a4b-4e4e-9a55-7cdc1d0a8d48", "indicator--12ddddc4-9450-4f7d-9b49-f895d04d48d4", "indicator--72796e89-bfa8-44cf-add7-9e6595515ac1", "indicator--78db589f-e79e-487e-b7b2-3a528641be8d", "indicator--8b11aed7-9820-4bb6-ab45-236bbbbe5697", "indicator--57d137a3-5990-4f66-8d1d-98ab3aad2bde", "indicator--4fca31c8-e802-4963-a419-21b215510bfc", "indicator--faa0f12e-0ce3-49e3-93f9-0b45f42d5e54", "indicator--233f73f7-2823-4035-92af-beb081f9c058", "indicator--10529f5c-c678-49f4-80df-402d23a5c43c", "indicator--73dc0625-1816-4283-aeba-38728a586928", "indicator--dd8504b1-f2af-4ab3-b1bb-46a2bf0fe9fd", "indicator--7f25c4e3-3252-4732-8520-952c6473b542", "indicator--62f7377e-dbe3-4465-9cf3-176a180efad5", "indicator--62605c8f-b88c-440c-94ad-defd0f4a9334", "indicator--57519a6e-044d-4ef3-b15b-9b445b0f843d", "indicator--48199cad-07f3-410e-b754-ba643c81e0c8", "indicator--5848d4cf-5dab-4fe6-9c1f-eddd61b93786", "indicator--3764fcd1-0f1e-4323-b532-92024ec77d89", "indicator--5af328c0-bcd5-4a06-ab69-08a19bdb177f", "indicator--c4cabf24-1c56-42e7-8642-4cba5a17d7d2", "indicator--3d50fe71-6c9f-4c41-9eb0-8deb7d4dec8c", "indicator--f2eb4937-bcc3-4bf6-8ef4-c1584837a748", "indicator--4d697e52-1806-4a24-993f-d8d839045bbf", "indicator--ade72719-0d2d-49ea-9545-a4aec523b1c1", "indicator--69d2e52b-69b2-4900-b6df-d441c408630b", "indicator--9d2e5368-ede3-41ae-b463-7b572902b80c", "indicator--298b0f1b-bc85-493b-8d3e-e2b05f05074b", "indicator--b53108a6-0c42-4f03-862f-3526eaee717e", "indicator--2d2e49f5-d261-4d6a-ad95-2b2d06b7514d", "indicator--454820fc-5980-4493-819a-28f6a7d8f7f7", "indicator--8835d28c-ba9b-413c-a1c8-e050860a2ca9", "indicator--e8ab84a6-624b-4938-af95-9866d1921db8", "indicator--a32197a5-2d1e-471c-818a-20b93857e408", "indicator--8bfbe1f4-2adf-4138-a287-5906ed7aa6f7", "indicator--4292cfc7-30d6-4530-afed-d317f569ab48", "indicator--f7903639-7888-434a-a7f6-cc7550d5b99c", "indicator--ebb893ec-5b03-413c-a869-bc3499bc4299", "indicator--64ff3fb5-28e8-4f36-8492-a3201b23d439", "indicator--d5ac69d6-124d-4585-ae47-89191cf87e5b", "indicator--8f392a53-b6ef-4ab4-9f97-5c4ff69feed3", "indicator--5dfbcb3a-4251-4dae-ac46-8daf03ad4c7f", "indicator--062cfaa3-644b-4323-84c5-e1fc114de69a", "indicator--e9df9dd5-89e5-45dc-8ea5-8d8af23b9750", "indicator--fee7a9f6-f9e4-4837-aa11-e0814cfe0ae6", "indicator--6d6a6a38-5e56-44b3-aa35-c6b03b799f94", "indicator--0e3f2d7e-b7fc-4034-addb-2dc233a772ce", "indicator--e7b3aca3-4f43-433e-bba9-393ec7d9846a", "indicator--625761cf-4e83-4a14-ba04-5f2e84b6b8db", "indicator--0c7123ec-d66e-47a6-a03f-e8ff6d8b89d9", "indicator--a17263a6-149c-477e-b7cf-77cd725dd758", "indicator--3d50bf9c-ee59-4c30-8ec0-e913033471a4", "indicator--9138c028-1aac-439f-98b1-4f3aad1452b9", "indicator--f0354aca-15f4-4f46-a2d0-8c7d2fc4201e", "indicator--74e32454-d3da-4ec6-8d4e-55b86f9fb197", "indicator--eebb6ec3-afdf-466b-92e9-9304069ec842", "indicator--d3643516-3b3b-411b-a626-560f964c32a9", "indicator--9beb04b1-a99a-45b4-b011-7b8f3f522a28", "indicator--65ba1142-5261-4887-971d-66be5cc54702", "indicator--a732dfb9-d7b8-4ff4-b6cb-cf967948826e", "indicator--1ed45e0e-d941-42ee-84fa-aec176c65654", "indicator--efc49d56-e922-47f9-afb6-edf4028f946e", "indicator--f7b2c3ac-e1ae-470e-b4e4-cc9ed174beb8", "indicator--736078e1-a751-49da-ae03-672c24ceb616", "indicator--0e81d1a3-d4ca-43db-85fb-ccd375102faf", "indicator--5a717549-a6b8-46f3-b284-b7c411ca57dc", "indicator--fb48ef40-0e49-4fe8-881a-0cf2e5c7a102", "indicator--83abee1b-d004-4154-bcfa-0d4bc47fc155", "indicator--a7708700-39ac-442d-ad15-280ae8b72e15", "indicator--33a85488-84d7-48be-bd14-f0bf433025b2", "indicator--2896f294-79bb-4db4-b1e4-9f09c77e6153", "indicator--9963a9ea-b6d2-44ec-8fa6-c0adbca5b3c5", "indicator--2fd03a87-451a-49d0-9510-5ae6b9c5b253", "indicator--11988266-5b5f-445c-b572-c1266d41fd6c", "indicator--dfab0b9e-5b17-4b92-a97f-a0feab42d2c1", "indicator--b825f04d-e473-4231-8912-c313bd9826f5", "indicator--66a706b1-c7b5-4311-96d6-eb7dde35b026", "indicator--8867d0a5-e771-4b99-a273-b8bfce94d1c4", "indicator--aa1f1826-cf91-4236-ab51-ba2f921f0d94", "indicator--9b616ae5-f5b5-4282-9ae7-ac297aa11a3b", "indicator--bf678c9b-870e-4ee5-8d88-f1c3a616c900", "indicator--335db849-c15b-4fe7-9855-2cfa2a71996f", "indicator--5193b9c4-17f7-4ee4-89d5-a5e85951345c", "indicator--76a04295-0562-45bc-b0bf-b867f88a26d2", "indicator--824aea95-5d54-45ea-97ca-0ae75fd9cb51", "indicator--76ea7909-03db-4053-8fec-380ce7799782", "indicator--0f801a4e-a6a4-40a7-8d88-5eb14c9a9a9e", "indicator--5df47a80-376c-4e68-8606-4631cdf7f49b", "indicator--4f611db9-92b8-44b3-bd6a-75de44f8dffc", "indicator--11483ea1-4e80-4457-b6ad-e0b0a6daf35d", "indicator--793c8d5c-6113-4cb1-b2c6-314b2fb19be4", "indicator--0e70ed1c-6794-4f3c-9a91-894b93962298", "indicator--813a2cf5-55c5-4497-aea1-ae85b8c51f55", "indicator--1bab8f8c-cf76-4281-8e99-a86c99fe5ede", "indicator--5ee844ae-f396-492f-82b8-44e397bf375d", "indicator--8f0a691b-8404-420f-be51-4b29fed3b784", "indicator--06bdfb7c-330c-448c-8ed5-779fddf8fa46", "indicator--a07ce4da-55ac-4073-9010-421161a4bb89", "indicator--4cb97bc5-b164-45c6-813b-81030e93b236", "indicator--b1f1245a-3408-416f-868f-3a3f3a257431", "indicator--54ff331b-8157-450c-ba3e-eaff0ddd8fe8", "indicator--8b3bbbab-9aea-42bd-85e8-6e8eb8124f6d", "indicator--bcd4fa74-69a7-4b76-ab2f-4d3dba1284a5", "indicator--da6ce57c-265c-4b1d-8d04-fc5fadf97fed", "indicator--ed83b4ff-3153-4b33-b817-40f21bcb746b", "indicator--87e18e12-cab5-4a2b-8176-5e2419a0260a", "indicator--1d865968-2f25-4b13-97e8-9ab112eeaae5", "indicator--45afd6b3-e975-45f3-9148-ab4de9126e6a", "indicator--c933e7b9-ba56-4938-95ba-8e72989dc4e8", "indicator--42541097-5c14-4ab6-aea1-50c0099632ca", "indicator--0dcb9460-b8c0-40b0-a3ee-24cfef66a470", "indicator--09e92df5-2dd1-49a0-83f3-65d5342a77b4", "indicator--1c1f0d59-d9f3-461e-8b3d-b0d7bb1b75b4", "indicator--25db1c01-14c0-4ffb-b47d-bb4f618773ae", "indicator--8e91eb90-0cd5-436e-8d05-6777d0b79aa3", "indicator--623faa45-3c95-4135-b415-4206ca7bb29b", "indicator--9b46d407-bbba-4626-a6cf-07d7cec55c82", "indicator--56e15720-e0a9-48bd-ba44-09263c198a20", "indicator--52f94dee-64e3-40fc-b8f1-56d3e1886a1b", "indicator--cda08397-3ece-4d96-87ee-5c2714b8c8f1", "indicator--41ac3f84-0cf2-4e78-aa65-06b306fd48a1", "indicator--9f3cfe23-a95e-49a9-8f1f-3db54ac36d22", "indicator--48ee0018-b092-4a19-b6a1-4ef2fcca8d54", "indicator--855b3621-c656-42ae-82f5-7310ce021e61", "indicator--a9765098-4523-4260-bd18-d472fac2b624", "indicator--eb89af85-4269-40be-b7e5-d6c86125d59d", "indicator--78d8e300-5dea-4b13-8a2c-4f1bc5a4e505", "indicator--6bbf8552-31f1-44c6-bb91-2b2249a8f75b", "indicator--b04c1c30-0230-4cfd-a74e-a87f73e42b2f", "indicator--5c878a10-3ed3-45e4-8ceb-8e3eeeb198ef", "indicator--f83d76b8-89f1-4d62-b15b-4046ef2a94fa", "indicator--6181c4f6-2166-4777-9a9d-e120509f8d8b", "indicator--f5db36b0-513e-464c-96af-30d858925519", "indicator--813650f2-14c3-46f5-9422-c188f4c6afcd", "indicator--e5de02bb-868d-40b3-b712-59fd89572f6a", "indicator--347f58f6-1cca-4622-93c4-4479b9a7be40", "indicator--1b93e812-9b49-48bd-b32b-c859a30a6805", "indicator--62815eb1-b9f8-4318-97fd-33da77c76d75", "indicator--42a80d27-3b9b-4fa6-a30d-a83d05ee8b14", "indicator--88e53547-276d-4da8-b37d-fc571160e87d", "indicator--602cfe4b-ca98-477f-85bd-c3f68f1af710", "indicator--d7892fc5-a03a-48cb-8bc1-f9cf0b5620d8", "indicator--a53cb2a7-0ce1-4f2d-933e-9be1d4dc9b3b", "indicator--094a1aed-8492-4f39-9dd5-bdc279217385", "indicator--b72a5180-2e9f-4dee-a904-20fd661aea8e", "indicator--0da79b3b-d36e-4438-a439-8b7487ab8bac", "indicator--7012ecda-d843-4ed9-9135-ab03c3aaa9d7", "indicator--a733efcd-791e-49ce-9e70-d9d497d34ce3", "indicator--ef4322f1-b611-46a3-9b5a-4a337261b8b7", "indicator--2d0136a5-9c26-4914-8744-7837834822dd", "indicator--2ae55c72-5f2c-485d-ad32-292c96b0dd36", "indicator--ea3e96d3-b56f-4edf-8812-c51251d3a4f2", "indicator--048875c2-e02c-4821-af7c-3443b6cb550e", "indicator--d3b742a7-92e9-40bd-9ed7-6bc80ba33364", "indicator--86c141dd-87ce-40c8-9798-9f7ce18574f1", "indicator--7ccfdc71-ea9a-4229-a271-3e91f58b8995", "indicator--5a096e8d-6817-4465-83c8-0bf71a31ac8c", "indicator--35b38c68-7306-4f6d-9088-48dcbbd3107a", "indicator--9981eb1c-8950-4c22-8150-1673b67121bd", "indicator--8b78bd89-369b-4bce-b420-e155e96d9d0c", "indicator--0bd5b873-21c8-4477-b332-17637bd95043", "indicator--f61621ec-f998-4ac8-975b-4c5c8a9c1505", "indicator--e7ee996a-a200-4185-bc7f-10b5cb9ef182", "indicator--2fe377d8-e0b7-48cc-93b9-425634b0320e", "indicator--c2cbbf2c-64b4-4924-89f0-23ae52b4f0da", "indicator--8cdc895c-af5b-42f8-b6cc-effb67f1a364", "indicator--9d5072f2-3438-4443-b699-ea6aa8d96792", "indicator--69c40288-634f-455f-bcbd-591e2027207f", "indicator--5ba3f532-7e68-46c2-9697-eac76e0db6ed", "indicator--33ed17b7-ec68-42fb-b30d-02bded0bea76", "indicator--8261ebf3-65bf-4d36-8d01-db54a8d3c6a4", "indicator--807ae1bd-0244-4a42-8ea5-dba67cc87c42", "indicator--03254029-b75e-4558-b410-17ba8edf768b", "indicator--9b4034cc-280a-41d9-a368-7c16bcaf1edd", "indicator--676287cd-6f05-4aac-af4b-974184993b75", "indicator--05292016-428d-4a39-9d55-9410d043aa1e", "indicator--58e46ce5-bbf1-477e-8c73-85e4ba3df4f6", "indicator--097e851e-bd8c-4b0e-a670-7885782acfee", "indicator--6216d40a-9cd1-43b4-bc3c-c6510d186d44", "indicator--1b934a41-b9b3-485a-b8f4-e17200861bd7", "indicator--6f367ed7-18da-41d9-9be4-39e2d0a11d3f", "indicator--89c17ea6-60d0-4200-92bb-3400d5586629", "indicator--34ead052-4027-4540-a542-4b367b2e76a0", "indicator--d039e1c2-e686-4120-8b2d-95f38fb9f016", "indicator--51abcccf-8e2a-40e4-846c-353884f5494e", "indicator--0eb037dd-1500-4e58-80b7-a3cc752e64ab", "indicator--98bb3c5f-b672-4a20-b6c5-9bf1af48788b", "indicator--4ba5ffd4-5ab5-4f9a-8acc-c4d7036030ba", "indicator--8404ba4a-deba-41f3-bd5f-e26d0363d3ba", "indicator--61853932-d3ba-401a-bfec-924e1b0b8be0", "indicator--874b4e8e-f331-4b96-9052-5a8cf745ae30", "indicator--2d3da073-e80a-4af9-b8b4-71fbbde6efec", "indicator--a2266e27-c972-4328-9a41-718a05e5dce1", "indicator--d1aa20ba-2a90-4c40-b60e-4a142128c437", "indicator--a1598112-69c6-489f-91d9-d7ea0c8c28f9", "indicator--0dba57b6-cb81-4f37-a8c1-5dca1ad5029d", "indicator--87de1f75-e477-4fdb-b5b9-dae133ed6d31", "indicator--b9ff5e96-d2ea-43b8-b98d-82263c1d105c", "indicator--ed8b1b8f-6d31-4554-aac7-6bc8244476f1", "indicator--b1c93029-245f-4636-a1d0-b581b07e61df", "indicator--36494962-4d9e-4587-9ee0-39519671adfd", "indicator--e688c1e7-768e-4e8d-a1ef-f01247a9bc19", "indicator--c2b0cd9f-643c-4654-aef9-4979fa3b97f8", "indicator--cc653504-583b-43ea-ada1-c31a5886be93", "indicator--98978337-6c4a-4677-badf-2f435ee0459b", "indicator--cba75fb2-cf77-45d2-942b-0554b7b9359e", "indicator--5e8a8494-deed-4a7e-adb3-08eab858313f", "indicator--a83e7568-824a-4d80-ae00-85ecb23c2103", "indicator--f76a52e7-5746-4084-bf56-a7d7aec55f75", "indicator--1d7cc9d5-b0fc-4234-a774-4691c6fe92ba", "indicator--aa138cbf-4f2d-467f-813b-594d4775ce04", "indicator--ce3a7216-e2e7-41fb-a321-ae27893c7bc2", "indicator--49fcb54b-26e9-49c6-88b3-4a9b799373f3", "indicator--e33c41d1-4269-4351-8e93-60d8f5dc1041", "indicator--c259d6fa-abb7-421e-a80e-d7b505b0c177", "indicator--aceba1c5-2859-481a-b878-d4fcc216ed12", "indicator--98d1f67d-e9ef-49d9-83b3-7a62bdef07f0", "indicator--de3150e6-0857-4181-8832-c198d08002d1", "indicator--25a594ac-3c49-4ace-a168-d4183033da26", "indicator--1f0f2965-3de6-478f-81f3-a4bf5a5edf31", "indicator--c62ca6e3-88a5-43c2-903a-2781ab03685d", "indicator--4a2f0fad-8598-4ee9-835f-3963b2c6477a", "indicator--4fd3405f-c8f0-4e08-a76e-81a5db09cfc7", "indicator--7dd5ccbc-be00-4134-995f-821c7529179d", "indicator--11cd4be4-fb10-48fd-a514-4c38395f4111", "indicator--08ad8e95-baf9-4195-9998-446183cedb85", "indicator--41f219c4-b0d5-4da4-8971-91f2aec7eef3", "indicator--bfae05d7-6cfc-45e9-95ac-46a394c95c5b", "indicator--9b26b856-4187-48ca-9c1d-5460fc4c6601", "indicator--34bb9f58-b4dc-4224-9475-8bcad9617a73", "indicator--9d7caac8-13a7-490e-b8f4-2ad2e809f5b5", "indicator--9e0c0d73-5965-4741-9199-88a9bb7ae9cd", "indicator--206b5d75-3e24-4965-b470-3b809a984792", "indicator--d2b60aa0-03cd-4768-9a0f-80acf749b52f", "indicator--6660fc6f-d65d-412b-88f0-42f1fcbb08da", "indicator--747c144e-f279-477f-b1cf-880fd6e05a78", "indicator--31cd00be-7802-403c-9496-0a02efeaffe5", "indicator--42206c7a-307c-486e-9acd-35bba0981655", "indicator--ff2a851a-23a8-4bf2-88ba-0c04eed56877", "indicator--6df396cb-dc55-48eb-8695-713f4606f1e1", "indicator--15697771-e09b-44c4-89b2-f14fadc81928", "indicator--f82d1aa6-834a-4c53-851b-11f8fc762384", "indicator--9fa31e5d-a416-451b-b8a8-f47d407d6a2b", "indicator--0b28db55-f9b8-410c-8a15-0026c105e9bf", "indicator--ba2a320a-779c-402b-a490-9976e73853c3", "indicator--2cbe8508-eacb-47ae-bdae-ca4e435ce4e8", "indicator--dc31dda5-a1e1-4f6b-8379-566185f40004", "indicator--f2bef595-f369-4489-9823-2dcfb0e0e566", "indicator--683f3b08-9d4c-455b-9b74-d5fb49532253", "indicator--b2efde0a-12b8-4b88-b5ca-1b5c04d5b92c", "indicator--91dd2de0-0b72-42a5-bdfa-1c49fb59eb17", "indicator--112a7c56-f7c6-49af-ae92-41ffd1a9d096", "indicator--3116a9ec-cda3-4227-b766-58000aab05fa", "indicator--617ae18c-b552-4238-ad42-4787bd130fc7", "indicator--59fbf175-e20a-4bbc-a0eb-fd6d6de37700", "indicator--6351205d-a39c-4f26-ba28-2ada020ef6ce", "indicator--6f12a94f-11a5-4c21-a032-f942b71bde65", "indicator--e40aa72b-b6fd-40da-a48b-3c9f96c220bc", "indicator--311fb938-8413-485a-a996-65bb8f75d66d", "indicator--e83f90d6-4884-4bca-9630-ae1de3483a48", "indicator--5fc92aad-22c3-43e7-a8da-957933c76f6e", "indicator--10960464-9608-42b1-9a49-06e8915ae55e", "indicator--b87b2da8-c802-4e7d-a887-389f589c190d", "indicator--2dfa2648-1f98-4224-acbf-c653c01491ec", "indicator--8186ec00-6b23-4855-9200-ba541867a054", "indicator--5ec7b93c-8c4f-4e25-90b9-89a58da951e9", "indicator--8e17226b-02eb-40de-a693-1eb848414c81", "indicator--d612b94c-9b34-4d68-b06d-9d850eb0cb63", "indicator--1061228a-44d3-4bd1-b68a-fa7a92f92fbb", "indicator--8df9fb00-1e60-4215-ba93-8c48588587e9", "indicator--e9554e80-3f21-4763-a875-2e2341d7e6fa", "indicator--7676993c-32fd-4a12-8f63-53015d60a730", "indicator--09b239bd-ba4a-40e8-a1e5-954af9e30d6f", "indicator--bf974f64-59d4-4e6f-98c2-e64e3aed54c5", "indicator--807d4c1a-206b-498d-8315-ffc3e2e198ef", "indicator--4eb3ad1d-799a-4aea-af1b-10587ad1ffe8", "indicator--48dacb16-96c3-4e0a-974f-3e142f65f2c3", "indicator--35e05c47-f0f9-482c-8aeb-01569f143584", "indicator--6214abe6-50da-44e0-bb73-0c39241b9ee7", "indicator--3111f093-f575-493a-b4f4-75935e13a8f2", "indicator--859e163a-660c-48a3-970c-79d37782bddc", "indicator--2f8f996f-d70a-4407-91c0-2fd42770afa1", "indicator--d76e842f-950c-44b5-b57c-6d78250ad180", "indicator--d8d781e1-132f-4b0e-b9f5-66571821364c", "indicator--80131e32-a1e9-4fce-a572-836e4b2ae8f2", "indicator--12fa6147-302a-435d-a214-83ca6c5c9022", "indicator--4ba7a2fe-0808-4cae-acd9-3a91bfdd6929", "indicator--2b57d709-5343-44b8-8380-c61a90404adb", "indicator--273f0fbc-7501-4e2c-b1dd-77e3f0bbeab6", "indicator--7bb72957-9ccb-479e-9350-88f106f8af84", "indicator--e2faf753-45b4-4bf7-9ff1-359ce4718794", "indicator--e20df63c-0d08-4e45-9458-6c8ac22d706f", "indicator--eccb9f94-3cc3-4ca4-8334-9082280f39b5", "indicator--9dd1a4fe-5da7-49fd-8f9d-a86f6a9809c2", "indicator--3e212173-5eb9-4959-b805-b3f3af32b225", "indicator--30b8998a-8b70-4ec5-a2c2-89e50312dd68", "indicator--23151f67-3d6c-4d9f-ac0b-2a9ceb9cdf79", "indicator--d990bec4-dd3e-4f25-8a87-b54061aa54fc", "indicator--93524934-0b1f-452e-be17-3252bf81f739", "indicator--91659595-1937-4a93-800e-ce8e8c66d38a", "indicator--3b5a0467-a501-419a-bfcf-b745960bac3e", "indicator--409fc7ac-9e70-46c2-9c07-3e0af3303cc4", "indicator--df1150eb-1414-4d21-ac86-a2f11ed5d849", "indicator--08f69e22-b3c4-4c8a-84b0-252067de06ae", "indicator--29c01fa8-eda4-4667-8444-496498312297", "indicator--c7ba6093-53ef-460e-9695-14fec0bf8283", "indicator--4f6b34f9-2047-4661-9b24-175c4b4e6f81", "indicator--91a86705-3205-475a-8539-0b4da768b223", "indicator--a0cb7e01-b077-4814-9711-0ba37f2ae809", "indicator--c56c8144-0e1d-419d-826b-ed84f6f3b46c", "indicator--14c22103-c9e7-41c8-b50e-6682db520211", "indicator--439db0b5-63ec-4382-99da-e726f2a5f085", "indicator--00aff5e8-3f09-4581-b41c-bc69f5609abf", "indicator--7d2bdd4c-d6e0-4cec-8c7e-085cff0bf162", "indicator--a31f051f-97a7-476e-838b-9821999f2d6f", "indicator--dbbf1f36-822b-4429-ac34-682c1182f31f", "indicator--3939dce0-7bcd-48c5-b1e9-67a452c2d288", "indicator--e73510a9-ca41-400d-be69-44f03c9b92ec", "indicator--d7503f4d-40f7-4b8b-a2a4-675a2110a4ab", "indicator--30eec24b-ced8-4023-b373-e30423a0abf9", "indicator--d1bc2489-7df4-46f3-aa32-d7186bc17bf9", "indicator--4675927c-999b-41ec-9a9c-6a40acb768a7", "indicator--b994d62d-3c7f-4a4d-94c7-3f2fed4cf03f", "indicator--df99afed-922a-454c-b34c-c0e3ee61988a", "indicator--75e1119f-0cc7-47bf-bac2-8f1d9a73a793", "indicator--b0428f70-c205-4e8f-8bac-a666057563cf", "indicator--a015bbc4-ee72-435c-a39b-00ff18ae1b96", "indicator--2095a23f-e70d-4f22-9b83-9b8de35f8386", "indicator--db6b75bf-1396-4c75-af28-0d2be0120bf4", "indicator--db44693d-1320-4f48-93c7-06fb2c1f960f", "indicator--c60c2d03-8da9-4552-b1e4-d5aafd4b824f", "indicator--54af4ac8-5275-448b-b6fb-ae6bdd09a4b5", "indicator--8f21eafd-0e7d-4566-a4ea-fcbcdd90b6e1", "indicator--f862cb64-8a6c-4507-8dae-4e051dfc9113", "indicator--4640e5e6-9d2a-4c58-b343-651e87d296e2", "indicator--c33f0034-e746-4e19-b451-014e793feb87", "indicator--86ed6542-af8a-48f7-8c69-72ad18cbe5f5", "indicator--9c85a0c0-b876-4cf8-abde-2de71db2f6a3", "indicator--f2ade97b-cac4-4cf8-9365-884dfef9e3dd", "indicator--9a636055-a811-41a7-aaa8-458d100cb1aa", "indicator--bb942ec7-03cf-4f99-8b17-8f4f5da581fd", "indicator--9213a104-9ede-4717-9be8-3cf6fd1b1870", "indicator--a67e2808-2f29-4578-a6f7-e29043404c3f", "indicator--005b8a54-1d41-4bda-b628-eee40d830024", "indicator--fbb895dd-0be1-4e9f-affb-6813a2af5ac2", "indicator--70c47431-3467-4b4c-9a25-11ca5baf9d6d", "indicator--9ae0ff0a-e741-499c-b96e-e5979a75fc19", "indicator--2e34d7ed-405f-4ad4-aa1a-4ffa4159d51a", "indicator--a5ba2396-6c4c-414c-99da-ecf3ba73e3e5", "indicator--adb87867-347b-43a5-b7a8-c8738c479ef4", "indicator--7ef74668-5fd0-4dad-a03e-05961500b5da", "indicator--ea84b80b-050d-4f9e-9f15-08c0ad5a3a23", "indicator--86c9dd77-a6a6-4c9a-8648-1729b38575ad", "indicator--d1a52d0e-b8f7-4001-a7f8-bf34ba44cbce", "indicator--c3f8358b-376b-45dc-a519-13479de80f6c", "indicator--806f7efb-0584-4c14-82a4-9eb115748f32", "indicator--67696e98-f434-4806-bed7-336c2939c07b", "indicator--7bd1ee31-1e2a-47e2-a05f-ec306cb61ce0", "indicator--1f4fb7fc-5174-4b9c-bbf3-e307835b0edd", "indicator--5f358526-3416-4370-ab2a-b66ba7842df2", "indicator--3e5d8b48-2384-4b3f-acd1-c7fc6419807c", "indicator--7f97afce-76ab-473b-9f88-48e6e8cc636c", "indicator--9adf29ab-0fb1-42ef-8fd8-2d0a411c87db", "indicator--521756ce-c6a3-4990-98e1-1d02b31198e2", "indicator--cf6326e1-f1c6-4a96-8524-d137cfd3f77b", "indicator--dad2761e-6d5a-4dbc-9b57-34932d2b9069", "indicator--2d442053-e268-488f-8c6a-3277d1b71a55", "indicator--8a425105-448d-4e90-aece-682126686478", "indicator--6dfeb977-eb64-4569-a482-a2ee6d03e79d", "indicator--0039cc53-4b51-4ede-8b10-f8b85b594f7f", "indicator--6efe8734-b930-4f67-9ee1-79b1dd832beb", "indicator--d4345451-d97e-4378-abe9-b602174d6c9f", "indicator--2f774574-c51d-412d-9c22-74d1d3b55cc4", "indicator--c4c54d06-6472-4b7f-b5ec-7f2f80a2b5de", "indicator--270937df-e35c-4929-b78d-959058797d89", "indicator--1cf4d354-5f63-45da-bcc0-ccbd0ee528ec", "indicator--9d60b95b-4679-4dc5-980c-545d312ceff3", "indicator--080d9c6a-4512-461d-91a4-d480d5850180", "indicator--56e2e9fe-6961-4bcb-861c-a9861571ea88", "indicator--cd285ba7-7645-4192-9010-bda9310b3801", "indicator--5f3cea5e-8d6e-4457-8e9f-b823ee819ce3", "indicator--027ce95b-5cf7-4f39-a89f-329cd9507ad5", "indicator--347006ae-a494-4c86-ad91-6f64321b83f2", "indicator--3fbfa266-7f1f-43fa-a3ba-31a275500ee0", "indicator--851cebe9-b896-434d-a454-d46c70730d08", "indicator--f0797f55-8ec9-46c5-a676-b3dbdf1c9a38", "indicator--1ca235b0-4519-432b-89f5-728d533dcfd2", "indicator--7237c457-80a7-48b8-b4bb-7c3119913cd9", "indicator--42623d34-78eb-403b-b801-bc8c59ac2563", "indicator--f103e2c1-6517-4450-94cc-0a3498650eb4", "indicator--18773e29-d378-4003-b5e0-11c812e2788b", "indicator--ac4d1f86-342c-423b-bba1-74789dad8af0", "indicator--a0480e5a-be4a-45ed-941a-ce7432c3e86a", "indicator--a3c6503b-b986-4df5-a2e7-bec4338f7fa3", "indicator--043c3582-cb41-49ee-a278-e5a57203fa81", "indicator--34a74b24-dd3d-4a21-bef5-8edc1b4e33ad", "indicator--bb6f9614-1ace-4192-9555-db17378a58dc", "indicator--26cd5cdb-9ccc-46d0-bd4e-b9e3a2b2dd64", "indicator--a4148638-efb2-4d3f-9631-1e5abbfff65b", "indicator--a0c967b2-219c-4624-bccb-6288f6786896", "indicator--a391ad38-f218-4c9f-be87-bc75cb0a212f", "indicator--8fcd54d6-99b7-4fc7-96a0-881b441648a0", "indicator--d49f0e56-df34-4125-8e94-ff6ea5d2edee", "indicator--2c333c27-38ae-435f-9a8b-881c4febe175", "indicator--a6bb3fa4-992c-4e95-93c8-4144463c578e", "indicator--e7ff2e06-0024-4f12-91f0-47cc669e80fc", "indicator--ab5bd015-d82c-4eb4-a79c-a4356ea565bd", "indicator--b9f2e1e9-01c8-4d54-817f-95f145962c72", "indicator--4c45998e-a908-49c9-b20a-5633274cfa12", "indicator--8b5adbf2-22d8-4afe-a484-f7249951ba1a", "indicator--aa38c214-9c40-464a-a369-1eb7efedd537", "indicator--cc7067f8-2193-4c63-962f-25b9b954c66b", "indicator--95788535-8391-42d4-a450-539acb321634", "indicator--d0f525fc-dce2-45ec-8d65-f03541679e44", "indicator--727506f6-203f-4615-9422-4b342ab8414a", "indicator--fe09f48a-4f22-4616-b698-56308a0a242e", "indicator--de2c8cbe-d9b7-426d-9152-3975c96c5a78", "indicator--da26bce3-2566-4aa5-85ba-98a48a245a01", "indicator--24746ee0-c917-4351-b257-d38d1e76fecc", "indicator--bce26baf-d595-4aa7-b7e0-cb205287724d", "indicator--7a6ae2c2-83b1-4712-8fe8-df25ca9075f0", "indicator--1df88f5e-a97e-42bd-b367-5977508f3b46", "indicator--e0f1dc35-05fc-41ed-93d8-b88d3cb43d38", "indicator--148c02a9-d196-406c-87b2-0f3cf95e56fb", "indicator--fbed6439-fb56-4fa1-9363-c8e0881c62e3", "indicator--41ef75fa-a5e3-4e40-aaa1-5c4500c4fcae", "indicator--4007a268-c11f-4747-885f-cb99cffeede4", "indicator--bc79969e-26ee-4163-9f8a-d34434c65b90", "indicator--6bba87cc-38a6-4de3-8e3d-c0c03e693996", "indicator--ddaae9a6-467e-472a-9170-eb3f50f6e746", "indicator--f03b63a9-f024-4c24-a3b8-452c316daf7c", "indicator--e3710855-1cd7-4e4d-884a-b0e372fd7d74", "indicator--2fff97f1-0ac0-4a30-b067-a0305cfa1b3a", "indicator--7e0e7fbf-e834-4ddf-bcf3-63574e8e36d5", "indicator--7f97b029-d0b2-4699-9054-16930c2bb602", "indicator--a1e9ddec-eb62-4fc8-8f70-b6f52c632486", "indicator--dd3d105d-829e-493d-b72b-c7112185f519", "indicator--fd24e981-33a9-4da8-9f75-a6cd0547245c", "indicator--b41e8050-f076-41e0-9129-f644c1904c92", "indicator--9fd878a5-3573-4dfe-980c-19c4d895f599", "indicator--779c2cc8-5916-4de6-9044-65fc67c5ac99", "indicator--7bac7e08-2d36-4119-993b-8152eb954b5c", "indicator--768dbfe0-9aa1-45b1-b95c-d80c9075bb62", "indicator--5f0e2914-e399-4930-b82b-5f85da6a8abd", "indicator--bbf13d68-953e-4af7-8c41-f9c0587aed81", "indicator--4b0e40b6-00cd-416e-aa6f-c8ec948ef060", "indicator--b910dc3d-1182-4373-b606-fff4d15378b8", "indicator--eec0f8e0-caa2-4424-80ce-94f51b3ae39d", "indicator--480ff1b8-3926-4a48-a8a7-74931e6ebf8a", "indicator--211ce29c-aa58-4540-83d3-45252b438e67", "indicator--a6f7dba7-21b0-4f24-b852-8c65a1c2d7e2", "indicator--f27c0022-1541-4225-9e80-6e4b11b88605", "indicator--f7bdb97c-a29a-4c3c-9235-2b21c4ca2004", "indicator--bcabec61-f698-4624-a908-5d6ad34895eb", "indicator--8adc1f85-f5d7-4e18-8409-01f04bff8608", "indicator--4a26e724-db33-4c55-ba9f-da095d824192", "indicator--66b28355-765e-4d03-8411-f4e03ee27e0e", "indicator--8ef8084e-fcef-44ac-8ed8-dcd2240376f4", "indicator--f0e5e094-0845-4f4b-bcbf-a586d0b6b91b", "indicator--995281de-1c09-4fe1-baea-87aaa1841a6b", "indicator--c07c0e1a-29b1-4d8f-8f01-3660645609c0", "indicator--430e5bd1-eb2f-4296-bca7-375ef3900a61", "indicator--bc121f96-9f1c-4959-ae87-2556d482b33b", "indicator--ebc7e49f-ae11-4182-841d-d117307c6269", "indicator--6541191f-92c7-47db-95d1-60e65887746d", "indicator--c59e7b64-7e10-411b-b300-d6f81f0ed2a2", "indicator--6768333d-aa0b-4179-b72a-a852d5b380dd", "indicator--3e75167e-1c2b-4a7c-90fc-af39716e45a9", "indicator--0af010f8-7244-497f-89fa-26e9d84375b9", "indicator--7d7da2fa-3b1d-4abd-9bdf-29b93de47667", "indicator--71bb8767-9b85-4a84-8894-9aaf506a9723", "indicator--ef6311e3-462e-490f-9f90-865f59e29198", "indicator--7c401c94-aa10-45f1-aa2e-40510ca2b1e8", "indicator--f415fdd3-72b9-451d-8062-033240873a2e", "indicator--58267822-1563-453b-9e2e-b755016a3dee", "indicator--86f0af0c-e6b4-463f-bb2a-2ddeabe390a2", "indicator--ab8ae8e9-9249-48c3-895a-0e181e074a75", "indicator--21a95439-7764-4e9a-8b73-0f722223c22a", "indicator--de85f3c3-109b-4de2-89c7-88f1f3aa4d2d", "indicator--9e126abb-c540-4974-a37d-77eb36922952", "indicator--15847283-0e24-47fa-a6ef-224211d0e110", "indicator--98b1230a-ac62-4b06-b868-f000fbe34124", "indicator--11931fad-fdb1-4d44-95f9-1222880ab513", "indicator--1aacc7f0-65f1-4b9b-8d3e-95823a04859f", "indicator--2cf5bd46-72a7-4cbd-a016-61fdd2c955bf", "indicator--ee58654d-61c4-495d-9bb5-4d7bbfa91bdf", "indicator--bf85e030-c2d8-4357-b9ec-96d75492c111", "indicator--b0cd24e2-882d-43cd-9628-615e2aacb19f", "indicator--e2cd2f02-ced4-400a-9720-4bfac32b4749", "indicator--ed449133-3406-448c-8329-f69f87c2cbe1", "indicator--fb8f22e7-9601-412d-b100-aaf14cc64cf6", "indicator--e41dd076-dc57-4c8e-bf49-bf69ad983f93", "indicator--7230fdf8-8e63-465e-bac8-0e75598a1863", "indicator--847342a8-5e2d-4fb6-b8ef-5a93cbdb8aa3", "indicator--624d7308-a3cc-467b-8947-6c4767af1edc", "indicator--a797eaaa-ff02-4399-85e5-ba3178577f17", "indicator--20125ccd-457d-41c5-abee-0e8dc0cae80a", "indicator--42a70520-92d5-4c60-b0d5-104f15b2bebb", "indicator--e3f66791-cafe-4d44-95f3-578bb244cfd0", "indicator--f79df7ea-04c5-42f0-9d02-f60d87098cf1", "indicator--819838cb-e9c6-43c9-b4e5-22ee529f6dd6", "indicator--174f81b9-5af9-49d4-b808-307873560f93", "indicator--6020109f-24b2-4a4c-ab4d-ddb0f16a0408", "indicator--2179286a-bd34-4dcb-8a61-9fb0e90f11e7", "indicator--b0d77dc7-75c3-4111-917b-725d27ab1f71", "indicator--8cb6fcfa-8a45-4c67-abc0-94b474504ccc", "indicator--14ed5bbe-00ee-450d-add9-7cdaec37d5c4", "indicator--f1ea81a3-1ce3-47d0-922d-7ef2effccbcd", "indicator--31253dfb-1a6a-4fa2-999d-365633646c06", "indicator--28015a19-594b-4bce-8c4e-1798a0a2b0a4", "indicator--7c70321d-b0c2-447a-b32c-9a90c948a6b7", "indicator--7efb101b-93d7-4104-80f5-c1597c95dbde", "indicator--83882471-73e5-4df6-a9f9-245f69277f7b", "indicator--cc5732bb-1bc3-495e-991c-dccf7cbce03f", "indicator--5454a5cb-03e5-4c79-a5af-6c808f01a81c", "indicator--ef5a0ec0-647e-4466-826e-0a63db97449c", "indicator--51cf2b13-b701-4590-a918-a1fe7cdb6076", "indicator--210def63-502d-4cf9-be08-ad62f396355c", "indicator--0600ea32-a25c-46ea-b5b7-7074990fd437", "indicator--cc7b2b18-7594-4d6b-a3d3-d772e223d7f1", "indicator--af1c6956-1a99-4976-9baa-c758ab50801c", "indicator--f0ff6707-37b6-4f4d-a78c-d4af36cae473", "indicator--2f44b8ff-9726-4866-b451-35afc4352d2c", "indicator--b7b03b05-9025-4015-b7db-b0d4c851e54c", "indicator--2dd22b0b-bbda-47b9-bc8f-806b31833b7a", "indicator--ed99172a-2363-4623-85f5-b2363287da60", "indicator--21f21f57-1221-406e-9eae-6b871e98a84d", "indicator--f2fd0833-607b-4dca-b2b3-eba500ea534f", "indicator--ecbc4422-890a-4384-aab6-1a852a6ce006", "indicator--fcedcca6-4ade-4bed-bfb5-bd4cf74198f9", "indicator--fae2dcf1-ed13-4430-aef7-36f0d93b80cb", "indicator--0cc68b01-e289-4e24-ad78-558b0e777aa1", "indicator--7bb038a0-2d8c-4035-a238-5005e635b2b5", "indicator--e27ea5de-60ac-4398-a8a2-524b9b397fa2", "indicator--421e10ac-0f80-4ace-82e6-c2d816af9dab", "indicator--1d5bf1b8-f151-46d2-9ca2-766ef4cfd007", "indicator--154178ee-e877-4b7d-86d6-cd3083f03c8f", "indicator--a8bcdb80-6052-49a0-bda2-a442eab3bc63", "indicator--38cd4519-f8c4-48aa-97a0-f45c9eb27c5c", "indicator--6ddfd376-8f21-4a16-b7e1-704ae9de5281", "indicator--b16e4e30-bb0a-4195-b63f-28cae521170a", "indicator--6b8a8c52-ecdd-4c3a-9252-ce6ae9134232", "indicator--db7416d7-826b-420e-b503-cf7e5b98a267", "indicator--aba7dc45-3298-4178-9542-a46be6f3ab6e", "indicator--b7fba97b-a5a5-4451-b3a3-bf92590599b6", "indicator--b2762691-9174-4822-95cb-b105d3542562", "indicator--f54faa44-b120-4599-9f9a-ae1e9a1f9281", "indicator--7e031002-1971-4347-87f8-e22f5b779bf1", "indicator--f0ef9688-38ad-4581-b93c-8385118daed9", "indicator--c55fe9db-80ac-44d5-8b4c-8a96f669b505", "indicator--ccfa03cc-f89e-45e3-af53-1267ec250a00", "indicator--58cbc39c-bf85-4e01-a2e9-00559fea3151", "indicator--b61244e9-72a1-41bf-891c-8ba8f70bbd02", "indicator--10b82f13-6e2c-44a3-a0ef-7a820cfdf2c6", "indicator--d5c9eefb-271f-4f69-8c01-535377cabf21", "indicator--7a967498-8a41-49e8-b4cf-1162ecbf9c1e", "indicator--d3c7adf4-0483-4d61-a437-c6f3bc31c323", "indicator--6b25156f-10a3-4107-b1f4-8c4947182e83", "indicator--eac2f4a9-601a-4eda-8ab4-873ccb242599", "indicator--d3424c0b-739a-413f-8778-3c883a3344ca", "indicator--fcbdd551-2369-4e19-aae9-5eca5a317891", "indicator--f65c3c46-3af0-461e-aafc-3f494d154bbe", "indicator--17d9c2da-d789-46fa-968b-34c4b5122bcd", "indicator--14d31889-69d3-4a10-94ed-f5f286855e80", "indicator--09d6cbf2-63c4-43b3-af83-93234bda6105", "indicator--11c939aa-fefc-4121-9856-4daefedaeea8", "indicator--e3153988-0fa1-4a57-8a44-cf97f4884273", "indicator--db95e7a0-f860-4709-a384-d624f7c37cac", "indicator--c856e3f8-032c-4c8f-bb40-1eab07a6b0a0", "indicator--f330ddfa-f550-4eaa-849c-7d450d0c9974", "indicator--b5a12c1e-1990-4474-8d12-075509d98712", "indicator--6e4a5552-572b-491e-9171-f2631bbc5353", "indicator--41ae6252-1933-4e10-95eb-5372ca86e96f", "indicator--5c733048-3902-4fcd-8e8e-dcf8665bb248", "indicator--f2f8e377-e0ec-4988-bf91-9f86fa7e8b30", "indicator--b269a296-a20d-4671-9807-29847c16e574", "indicator--0d29e886-cd77-45a1-8027-8a1352eedcba", "indicator--1796532d-5723-436c-bd6b-0a3a2ae54815", "indicator--513525aa-f0d4-499a-8241-bbb56e234bf9", "indicator--e22835f2-8227-43ae-afc2-8450e06f4788", "indicator--1bb448e1-cc2f-4a02-9b1f-51854cfb1efc", "indicator--ce014bae-434e-4a8f-a484-b91d5cebd3d7", "indicator--f2bfad12-790c-46fd-b2c0-087298f71f4a", "indicator--08d53e71-1af6-456f-8c50-c83980c9cbeb", "indicator--4b65622b-5120-4117-ab41-20a3337d17ff", "indicator--9ebceeb5-4f70-4370-8de0-8fcdc0b5b7a6", "indicator--21a3b4fb-8783-43ab-af8f-fb19c3792d19", "indicator--1bbbb78b-9ca6-41b5-bbff-2fc952050d11", "indicator--8bcdb429-57d9-4f78-ba76-a97a32e48ef8", "indicator--bae58c83-9705-49d7-ae07-45498cc4a695", "indicator--ae7ffcd4-fbaa-4432-918a-cd0d11b9265f", "indicator--c19ada2f-f0a8-4a9d-a3b4-e99831c29cc9", "indicator--3050e1aa-d50f-4523-b798-acb60df91155", "indicator--1c9fbb50-0cc3-4a13-80cb-d713a018b159", "indicator--f7323ab1-9f89-466d-95e7-d5c187466c74", "indicator--2ee33cf2-957c-4ec7-a7e3-78fd25e4a729", "indicator--0a141f08-5022-4d4a-9505-92793f0f53a8", "indicator--ecd17cf8-63ee-4e68-84fc-2992c895993d", "indicator--5681253c-2dcf-4fa0-937b-12df3995ad27", "indicator--04763194-d971-472d-adc8-ff79cbbebf0a", "indicator--ace38ebe-3f86-4361-a72e-808376d955ce", "indicator--e0e260a5-a5f2-47f0-932d-374dfdbf5639", "indicator--c61e9cd8-a651-442f-930a-a53f22fd9812", "indicator--af4cea61-8141-4ec9-94c3-72aaee27a000", "indicator--252968bb-fcb1-4501-9201-fa35aeb233e0", "indicator--3411561a-9ee0-4337-a276-a20a204fa643", "indicator--a07da248-3063-4a5d-bc1a-4c2f25935a0c", "indicator--f305dfbd-a9fd-41c2-aa1b-251fa3b8e899", "indicator--ac350820-4ad8-4ad6-bf24-9f954dcc863a", "indicator--092de35c-59b5-4a4f-bb0a-595d3debfe1e", "indicator--ec438df1-5505-41dc-b08c-740be22dc6fe", "indicator--daf81302-0c04-4bdf-8414-d78da4786915", "indicator--bb2d33be-69b1-44f1-8e17-5c41c774e24b", "indicator--543c7dbb-a816-4d84-8c3e-76e84a97d3e6", "indicator--e10a5f13-eba7-4f80-8497-9ca6e1c0b648", "indicator--1e73d697-9125-4f61-b923-538ca0f88452", "indicator--97e1aa8d-af62-42e8-9885-2b9fed5d22fe", "indicator--3c07501e-bd98-41a4-8e42-9eaa99207a01", "indicator--6511c133-1521-4c32-b001-9b3b0c00989b", "indicator--dca821e4-fde8-492d-ba96-535a16312b14", "indicator--c4193797-4d44-4a8f-8502-c116048b4285", "indicator--e1b03975-3745-4d8a-a179-dc82faed1ea6", "indicator--a66b0a2f-a478-4472-bad0-645ce79f1257", "indicator--7dea320d-89cc-4a09-9723-865da2795fd2", "indicator--0fb5936d-7b33-4d05-adcd-4f8352ca4bcb", "indicator--67e702ce-b40f-4df9-b77e-9bd812b8d6a0", "indicator--02ac7101-4a9c-4cfb-b93c-bf68448c2a74", "indicator--96ce9e9f-d0f4-451b-8fcb-b39369f2aba5", "indicator--0c145fe9-d14e-45de-a20c-29bf524b733b", "indicator--556fff85-9e88-48f1-9b8c-9c97bdabe8e7", "indicator--d59a9c0a-f6bc-4d48-a813-9494d1d6588a", "indicator--68fc49d7-8901-4ab8-94bf-66f23307e2b6", "indicator--ad6ecba7-90cb-44be-8734-9339c7c1f16c", "indicator--e69912c1-a7cb-4161-b89e-48928359749b", "indicator--24460157-cf25-4931-aa0e-31a01e78873a", "indicator--cf13f10b-5ca9-4be0-8a68-37e8afc7b161", "indicator--328e6349-3a1d-43db-ab02-982599c766f8", "indicator--dcb3bd7e-734a-483f-9b89-54156decc61c", "indicator--921f91fb-e167-4a2e-8532-a728ba762a75", "indicator--05c2965b-724c-4085-bcdc-d5f3f6802a34", "indicator--1389defa-aef5-48ea-88a1-b26ea02900b2", "indicator--865fd6d8-aae7-47eb-b9f7-8cb765c4252d", "indicator--598022f4-861a-411b-a3a5-9df4980fb028", "indicator--10778890-6058-4c15-88a6-cac968828971", "indicator--724835e2-d49d-436f-8585-0b13b95b5c1f", "indicator--3557c929-5a9f-4d09-bb89-e8cc0771e951", "indicator--7ca78653-f1cf-4217-b1ae-566b640b41a7", "indicator--f41f1659-fdea-4c7f-9f6b-b7ab01771936", "indicator--bb6224b3-3749-49e4-9068-cdeff57f5823", "indicator--67963ae1-3c37-4ca4-9545-2e506d4b0495", "indicator--e8a3d4c7-f74b-45a9-900c-2ab3d8de77be", "indicator--d0b15fff-a5ed-4d73-a4b9-7d8799728ced", "indicator--e7b30859-d452-436d-872a-7911d629ce7b", "indicator--7138729f-0e33-4274-99cd-e4bf797be98e", "indicator--bc885fb0-6ec5-46d0-bcd4-3226da56cbeb", "indicator--2f6e0aa6-27ed-4a7e-bcaf-0dea085fd103", "indicator--8910d4bb-0c5a-49b8-9b83-f11c691d2891", "indicator--7633a6b6-5b37-4957-9077-0cec789ccd78", "indicator--5e72c5fc-9a0a-4234-a81e-d33fce6f0e74", "indicator--24a3df33-26eb-4bc0-8258-7e082348eee9", "indicator--4c304c9f-25d4-45ca-85ab-88229a3f99d4", "indicator--7b08f780-2a6d-43c1-9e04-586d0c9750c9", "indicator--69650c53-7f25-4aa4-839d-734bac9161bd", "indicator--c9df19b8-76b1-440b-816c-e3fe71b4340b", "indicator--d8d38447-6b80-4b77-a675-b6f0d7a79f01", "indicator--1f7636d0-94b6-4fc0-b04e-3e1661e2f70c", "indicator--6c37a6d5-c661-43d3-907f-be3d95ab39aa", "indicator--e589e8c2-819e-46d8-9e09-b3419e8c8447", "indicator--b9592073-c24a-4999-ad33-b9c1d5ad78bf", "indicator--32827e43-ab4d-423b-b198-4f33a02c7f53", "indicator--e2bcab0e-97dd-490e-846c-ff3c4b1a8f5a", "indicator--100af4fb-2d13-4832-8808-83b51dd6376c", "indicator--f8536307-e9d3-4162-aa9f-4c87b3466155", "indicator--ead5d989-3ee3-4525-aae6-a536f72b1964", "indicator--0b111244-173f-4ad3-9dbf-b9bb72baa3fe", "indicator--4dffa878-8959-4151-99e2-0be2d553abd9", "indicator--ae341977-c860-4ab0-a8d4-6ffff6e16597", "indicator--4f41dc25-da26-449f-9c27-265fa3a558b6", "indicator--bb452f15-07be-4fa5-a07b-da252a0db58f", "indicator--64baf83f-e029-43e8-b16a-cd6aab29b5f1", "indicator--42c3d047-afb6-415d-b199-d6f448589ab7", "indicator--953e8ad5-beb1-4892-84b8-c394a5f9f001", "indicator--7b5a82e7-b493-477c-9473-83050d896f02", "indicator--3c4f6f71-6d41-45e9-a06a-20177beb2dc1", "indicator--35d545e5-7ad6-4c4f-bb2f-48fde46030f5", "indicator--b4dfe933-dee8-4361-90f6-28b269738aab", "indicator--d7991088-08d4-4b12-8b12-2e7c47ffb9f7", "indicator--5d0f8200-9d65-4a0a-81c3-537e54070498", "indicator--54d47839-e84b-48a4-89e5-b602684f7fbe", "indicator--49f5df81-5f04-4773-a70e-5e33af00b843", "indicator--3469f034-280c-4d30-acbe-f18eae52b5f2", "indicator--95cdeb30-4673-4cb4-b503-34a88b176213", "indicator--710f7c79-15b9-4713-a679-5875c6d03b69", "indicator--182dacff-47ec-4473-99d0-1b1033087ae1", "indicator--a253ca5f-d010-490c-99fc-bebda936112a", "indicator--51a3e680-8a28-417a-b60d-e20a272f36e7", "indicator--4afd7ba2-7259-4efc-999e-3d0031e682a2", "indicator--c3e4043e-b8c2-42ec-b8de-e7b7072bb373", "indicator--93aa4606-b950-4bfe-b37c-ac79277d7cf9", "indicator--644c35f6-1a7f-409a-adc0-b73450272409", "indicator--b621fe75-dc96-4f78-aa15-20f4abaddbab", "indicator--2bff2ab6-0281-42c0-89b8-c134d52af914", "indicator--002ba936-e4b8-4a02-baa0-886ed5262006", "indicator--497d647d-ab11-4d8d-a3a0-dffa654881d2", "indicator--fa7e8bf3-7999-43e9-8b73-d341dcc41236", "indicator--7f447c07-3286-47b1-904c-bccf3cfef6e3", "indicator--eb1498b7-f08c-496a-a4fe-a3b8717e93f2", "indicator--11013176-0117-4c96-9bb8-fe58ff4b78c7", "indicator--1ae62625-863e-48d3-9f5d-db2d1b8a384a", "indicator--8e5fd293-93b7-4f5b-a7ce-663c5c04cf66", "indicator--2825778e-d7e3-48c8-88c4-d6fe958719e0", "indicator--b2812472-95f0-476a-be55-5542e996503a", "indicator--69f5c6e0-5db6-486e-8d0c-059c0679af73", "indicator--f0eb16ba-f886-412e-9826-b6e338b89938", "indicator--37c485c3-b199-4b7d-ba4b-f338b01465a6", "indicator--1cce5dd2-d811-4b58-92b3-70fa1adc8166", "indicator--803ec93c-a8cf-4674-87c1-829b89f1564e", "indicator--b256f788-e491-4534-ab62-9209491b4865", "indicator--b35c4933-ae21-442f-a6a6-df1cf51e780f", "indicator--4fd2e591-4b52-475a-86af-1e8fe112d49e", "indicator--fc8da723-0f49-4033-87af-dc311d756cb6", "indicator--83cb8cdf-e233-464c-9619-412519cfa79a", "indicator--29b2b1ce-211c-411d-94ba-5f28ff314c45", "indicator--8bc66bd3-bb1e-466e-a9f0-ce00b3a72ecf", "indicator--032fc1d7-62cc-42b5-8b38-a7c4f573d1b8", "indicator--67d8dc0f-d0c1-43ba-abda-026f94656fde", "indicator--31273e99-8843-480e-a71e-3eb291d961a9", "indicator--778b6d20-2578-4608-a9e6-7d5050c7a33f", "indicator--9b9d7a4b-09e7-4e63-8d06-daf596f8dd36", "indicator--b7c14427-f36a-4044-b39d-f36eae677776", "indicator--31e51a3e-5ecc-44f4-9194-da7a1f52013c", "indicator--3865d068-19e5-4fb6-8eda-249e3daaf271", "indicator--b81931e8-9fd9-4f40-ab66-718668f104a7", "indicator--e50e6bc8-c109-4531-93f6-c85a4700911d", "indicator--e22e4779-4366-4d48-b8e2-418bf9f6bb2f", "indicator--5983b1c2-d43a-45cc-a3aa-2d51faf62f1a", "indicator--c464ecaa-6eff-4774-8846-a6effa67df30", "indicator--cc3caa69-d4dd-4226-aa60-d9e1001d6171", "indicator--e44b88f1-6a1d-4d65-82a3-1f8c3af18398", "indicator--fb8f5550-4f4a-4348-9133-ef0fed620011", "indicator--eff8ad5e-c1fb-4cf0-9ce8-cdce87f115d8", "indicator--aed6012c-347d-4ba6-af89-0d04e521073b", "indicator--d431a01e-95ce-4f7c-8034-cf02a0da2325", "indicator--c1bf50e7-44c3-4012-aa02-aa9105822361", "indicator--8eeee390-7f3f-4482-8372-2c0546f06145", "indicator--47a6dc61-dc83-4c65-b127-a9cb1795b2fd", "indicator--6e39f602-5ed6-431f-bd7b-0b85bf7c0491", "indicator--e3cf0b93-63b0-49a1-9c54-c34c9494dbc0", "indicator--ec69e36f-3ed5-43c6-ad3f-35124ec3badc", "indicator--2af8c637-b697-4484-a44e-841393e038e3", "indicator--96369460-695a-4e90-a121-6c9a105a599b", "indicator--b91644da-722b-42ab-9ba7-9da31c953f6f", "indicator--00939854-99d3-44b9-b8e8-249a568dd1d4", "indicator--8ca43d41-70ff-4da9-bf28-4e693e8da3db", "indicator--58aa1097-dd2f-40e5-83ed-b34039bfd839", "indicator--d4d8a19d-c374-446c-9b75-4d50fe0875fd", "indicator--d06bc036-202e-4e52-81d3-fe7e2adfba35", "indicator--b15d5796-6e69-4c6d-911e-bbc6e5a5c63a", "indicator--c9533e9a-bf72-4a30-b19e-04de28c88ced", "indicator--6c0a9452-f1b0-4f81-b3c3-3d0be753bd0e", "indicator--073ba7f7-ab04-4855-8fd0-492d25781546", "indicator--b73a9d0b-d867-463b-9113-99e06bff2086", "indicator--d14de327-3745-439b-b101-15f6937d4e1e", "indicator--139e43a6-31c9-4378-9d64-f1d39dff23d4", "indicator--22181a6b-02f7-428a-aa1f-502b54c8cf6f", "indicator--45a6a9e1-1144-413e-8e3d-3a8bd8a4c70c", "indicator--9c471517-fd1e-46c6-871e-0429f890bb4f", "indicator--a3faffda-6462-4b37-bec9-f80fca412d1a", "indicator--b325390b-8a47-4372-9ca5-4102b1d1a766", "indicator--e3f0159d-3821-4a53-ae89-389e0eba5d3c", "indicator--48f20020-3638-462e-b843-c3e9e15b1a53", "indicator--e80b6ba4-08ce-4a93-8c59-7f9e08ec8444", "indicator--568c847a-d60d-4af8-aac9-7f51d865beff", "indicator--421f67fc-3e20-4c25-8ef3-01cb1a132791", "indicator--175f1c75-c2f3-4deb-b128-9a1c4421c9d0", "indicator--1504cd9a-a716-4291-ae0b-3c7717347db5", "indicator--fca0e848-e240-46c5-8be2-0944678b994c", "indicator--7f5dce4b-0d65-4ba0-b6a6-5871e926cdb6", "indicator--30453dc8-a335-4eba-adef-bca9420b2ff1", "indicator--850caf08-65d1-45b0-b0eb-eb873ec075ab", "indicator--9d4e9c12-8498-40ed-b690-f321790b3144", "indicator--400b6392-4036-4403-9bfe-aac559dde83d", "indicator--5ee70ca4-2658-4ad6-bc63-8b0bef5cffb6", "indicator--0fed8c3e-fec6-4a8b-be5f-84e929e37ae4", "indicator--9d0ff04a-dbf3-474a-891c-86e8e1155835", "indicator--93f2aef2-fdad-49e5-8489-5c65ca473f8b", "indicator--a465f5fd-be16-47e6-9ccb-bcf440e22b17", "indicator--1cdcaf7a-95eb-4f47-8387-6d512c57041c", "indicator--e6bc8f3e-0d37-42ff-b4b2-ca04629693c7", "indicator--0304e037-8e0f-48bd-b19b-de5395673dec", "indicator--ed02b27c-f352-4c5f-aaee-990d9e2cd8a4", "indicator--5024af01-f74d-45d8-9769-b9a522b15abd", "indicator--dbf65185-2ca8-4a3a-a9e4-a04479aeb9d0", "indicator--57434f52-0cd2-43f5-a55e-27ab7f8188c1", "indicator--b396d7a4-8f8b-489d-a1e7-10938c11482f", "indicator--bfb59be7-2bab-4937-9bf4-8903489566b7", "indicator--1057854d-b889-4a0f-944e-f76194e97998", "indicator--70eb9967-ff19-4865-bf79-edae819fb4ed", "indicator--616de5ce-6881-4dd8-b540-a3ddc6ef7378", "indicator--30b8e543-164b-40e5-a050-fbf56f5decc1", "indicator--61e861f7-bf05-4bee-b965-5ff7fa5977ea", "indicator--dfcec597-8387-4961-bb12-2041a9eaf1b0", "indicator--efd6bb5d-c824-4569-994a-2ce7fc024907", "indicator--1e302ef9-18b0-457e-8a09-0a5b6ae1ceff", "indicator--4994ac25-3caa-4c7f-a888-dccfcba5d003", "indicator--6ae859db-f482-49e1-bfc9-a9e2426226c9", "indicator--3d44533f-f05e-479f-bb34-a1616a275412", "indicator--93f017a5-39b6-4dc5-a5f7-c162a5e4c8a8", "indicator--ba14b098-bb89-4cda-8c89-7329de613a9e", "indicator--8d1141ba-3978-420b-a544-80d206d63ce5", "indicator--6fa4eeaf-e189-4ac7-839d-fdb6122a2646", "indicator--bc0213ae-17af-4f36-b3d7-d3c9be74df05", "indicator--ba81b1f1-ff40-4491-932e-0357dd6a12fd", "indicator--8582ed40-3a51-4365-8852-29739386a8a4", "indicator--cddf0c6e-a2ff-40e5-bf7d-b1b7209725d1", "indicator--7eb2f948-02e2-4b9b-9e67-6111784ae484", "indicator--e919da05-d5d5-4d40-9f87-a0eca50f2568", "indicator--b069c4b0-2344-4e24-8f59-790430255b94", "indicator--c936ca38-8eb7-413a-8d05-73e4b560342f", "indicator--c980f7ed-4042-4aac-bfd8-e2ec8b29b84e", "indicator--af96e595-1ffb-4b8b-951f-754ea22555a5", "indicator--2cc89f9a-355d-4a31-a4a7-2f1b6bf48801", "indicator--9e8b048d-89ac-4b00-955f-fb230f6c0a90", "indicator--aa441b06-0801-470d-b109-ea5ebb1f5f87", "indicator--333ee321-4ddf-4ba8-b701-67b48ce69bc7", "indicator--1195e1ec-2caf-428a-9e72-264296eeadae", "indicator--d4de0ea8-9bda-4a07-8962-b58d213e7224", "indicator--6b2443d4-f910-4d11-bf59-dadea77838d3", "indicator--d5776294-dcad-4f59-aaef-ef416f36664e", "indicator--b10156fa-7acb-4054-b83a-e818bbe5e1b9", "indicator--60145414-3e96-4d8d-a1f3-060ef3a32e69", "indicator--e92d731b-8722-466b-b838-443fa9b4dd90", "indicator--7a59c246-21bb-4c78-ace3-20c1316959f4", "indicator--d7375613-e084-4268-b712-541cf76bfd1e", "indicator--e25f4995-e741-421c-b81f-c19a4a6cacd9", "indicator--14152762-5560-4e31-b579-4d3b84fe169f", "indicator--09a4f320-f2f8-4191-9f34-c7dd4061bdb0", "indicator--b5ca4513-18ca-4a40-8521-131139ef2535", "indicator--0945bd65-a50f-491d-9f49-8056abd11738", "indicator--032f6d21-ff2f-498f-bcfc-9267599bbb1e", "indicator--720356b0-2e65-4e92-8599-200bbaaa6301", "indicator--1637e0fe-fe1d-4fca-8b5e-0fe44f03229b", "indicator--495cb864-64db-416d-ab54-11f7503e4196", "indicator--b3765c67-b683-4d0d-a410-c4682f325523", "indicator--c00b5165-3655-41fb-a476-18c912aadc71", "indicator--00b7c737-3217-4119-b832-62f5268ca15f", "indicator--f932a18e-2f10-43c5-92d1-68e514d3960f", "indicator--1caef9d6-588a-45ff-897b-cc1a0813b79d", "indicator--fb6c617e-5ebf-40ff-89b4-5de894d662b3", "indicator--b77d0b6b-5cea-4483-a3ec-2be406ded449", "indicator--55d08254-9c57-4f52-a037-8a441ef0db77", "indicator--09624c89-d34a-46a0-a8d5-16d0a9c04f7e", "indicator--f702abd1-8099-41ac-9d0e-35e6b435c6a9", "indicator--ac2eb0a2-4f0e-4f04-b248-7ecbeb8bbf41", "indicator--669d6126-11ab-45f4-bfcc-51ec122396cb", "indicator--92b8ef20-8e5d-44ee-9a42-53b15f2c7735", "indicator--e88f2658-34c0-427c-8fac-18b22f5c2af0", "indicator--bfebe550-6c71-48fb-b96e-e1a19e7abe08", "indicator--2331de33-799a-4dc9-97ff-6e44948b4224", "indicator--c889fd24-c32a-4ea4-9ae3-e4bfd62c44dc", "indicator--a11fca20-b85e-4905-9553-5bb8156c1bc6", "indicator--52091089-ab2b-4bea-8490-881d381351e2", "indicator--517432bf-67dd-481d-9765-69aa0c37d06c", "indicator--7f457259-826e-46f3-9f0a-3316a6b191dc", "indicator--1c7837ee-2e26-4e51-8262-51854f93ca90", "indicator--5e36e7d6-f104-479c-8a54-eb387c92c2fd", "indicator--b2ed1d76-82d3-48e0-bb99-358317d935ce", "indicator--7ed159d0-a7c0-445c-a43e-802cd2622151", "indicator--e31a40ec-0bca-46cf-b4ec-abf36f34c968", "indicator--1c6f7080-619d-4e18-b29b-c5d1a5c1c67a", "indicator--d9b766ca-5f34-4ebb-b848-3efec88444bd", "indicator--baea076d-fc75-432f-8a29-90cd2a3b3828", "indicator--e029a7fc-f2ad-4db6-bc35-b7d8856d8120", "indicator--a54e53e1-4fe8-4f2a-b6c4-68b5bc3d2eeb", "indicator--0ec9a7d8-f179-49bd-966c-ea68d465a3d8", "indicator--fe24c06b-ec9b-461c-9f74-73beca094827", "indicator--18f9e6b3-003a-409e-9905-45ffcfe60d25", "indicator--b64f2368-43a4-4161-9d55-8b0f415db4de", "indicator--871028d5-99c0-44ca-969b-84d9b2760ca7", "indicator--5804f3f5-4db0-44dc-94c4-6449b84e45ab", "indicator--3f2e0cf3-8572-4a18-a0ad-1ec9c1dda340", "indicator--d6423e88-7287-4d77-9101-77ff6fdbb144", "indicator--38feea11-aea9-4c4e-8914-12e0204acf77", "indicator--807dff50-ecaa-4f83-b404-6e66fc1a8654", "indicator--5b7b80b1-95ec-46f2-9561-5c8f2a4836ac", "indicator--bd081702-973e-4aaf-8a93-4b6675102f4f", "indicator--a60a5770-4e0d-4269-9c86-5bf0bd043b3e", "indicator--42bfbd69-a050-40af-b1ec-b39802026d59", "indicator--8c6729d7-407f-4e9b-a56c-7c8c1cc7cfc1", "indicator--cfbfb45b-fb49-49a0-a4b4-04a60723c1e0", "indicator--765ba8dd-4243-41d2-adce-1f8d3fd93e1f", "indicator--3d35a925-c3d4-430d-882b-109f82bed08c", "indicator--58bfee1f-fb0b-4558-aad0-b95525b53c9f", "indicator--4e05f171-8fa3-4528-8b16-bd04b9d23319", "indicator--e7497c9d-c704-4107-b376-01ee89ebea0f", "indicator--5f5391b0-bea7-40ca-a2db-0f2dfb3278ba", "indicator--86127da2-f96f-45c3-bb7c-db461e129876", "indicator--8d8412a2-5ebe-474d-8fd7-a0984d164c43", "indicator--d989f5f2-1314-497c-8d02-4874ba5e32f5", "indicator--9e11c5f7-d744-4aab-bc68-ccb8691d046a", "indicator--9b961806-03b5-4615-baec-86f2e1c2e67e", "indicator--ce35bacc-e867-44a0-b08b-985f366f5376", "indicator--c3bcc500-bde5-492c-9789-991345882a62", "indicator--d7d55c79-f6db-414c-a925-d7713c4367ef", "indicator--d78c345d-f340-405d-a0d6-2a3ac679dcc4", "indicator--4fe7b320-9865-49ef-a141-aff8c12a76a5", "indicator--fd415e73-a78d-4a8d-b634-2c477487fdac", "indicator--66c8e870-3218-43da-a712-043439c9271e", "indicator--f145befb-cfe5-4771-8caf-b99176b5c2e8", "indicator--11b7cd3b-31ff-4aab-9743-c0ef5fcb7698", "indicator--c6996604-1da2-4ace-bb75-b734653b4677", "indicator--29f58c69-bc4b-4bed-bfe2-dacf3e295efa", "indicator--b0ba2f80-ed67-4f87-95a1-2f537944b4f8", "indicator--95483620-7791-438b-a261-43afb4d6a3f8", "indicator--8d12c509-3b9f-4d31-a711-7e9a96c7886e", "indicator--d94f099a-ed9f-4329-816d-6432b08f8b71", "indicator--9aed2c8c-19ea-4993-80d8-1a11d1fcd210", "indicator--bedeef4b-ae93-464f-aa17-37e60dda5c67", "indicator--e25b6d1a-5280-4ab1-bd1a-7911804a2c63", "indicator--210ea03a-246f-4047-8cee-937d0cc435af", "indicator--c8695f42-1325-4202-a53b-fe3a60e1beed", "indicator--98e3e9b4-55d1-4c1e-ad62-675ab2a30a46", "indicator--33b3b3fc-ff8b-4676-a562-7b46120200c0", "indicator--22f1b3ec-b1ef-43a2-95db-00a6242c75a7", "indicator--1709d202-2b6b-4751-999a-a4e02e60bc7f", "indicator--279f3555-382b-44c1-933d-05b9e9996e53", "indicator--3d6f63ad-585c-4f4b-852b-88fc33ee7d2c", "indicator--0b070bbb-a9c1-424b-8a18-b806c8c328e3", "indicator--458725c3-f0df-429e-9b7f-e68357ff1610", "indicator--365f412c-7067-42b7-b942-e7dc28df3c37", "indicator--2eaa0930-293d-4da7-bf3f-ce947a5e0517", "indicator--92e66a95-bff4-43c7-a6df-4e1569e70a6d", "indicator--c03ce5d5-93a3-4b4a-ae4a-1cf12edd6939", "indicator--26e4c003-fbba-48d9-9cdf-555a067bc877", "indicator--e8276425-bee5-417b-8000-04f4a7001b8f", "indicator--502a1dd5-eb22-4eef-9f19-45010756f4a3", "indicator--652eb72a-24f8-491b-ae49-8dbd67e24350", "indicator--9e900d8f-f9e8-47fa-bf96-c4a24eb7a59d", "indicator--9a1b94fb-687f-44ec-95b0-31826b75c73a", "indicator--6eb40bc0-99a2-45d1-986d-19531b3acbc5", "indicator--6cc1b370-1c9f-4ab6-90b2-fd10a1b0c02a", "indicator--51b31ff6-fa1e-49ba-bc41-3180ff3e0f9c", "indicator--362ef07e-6eed-4ea3-b1a7-6babc99cd2bb", "indicator--275ef815-6f2a-48ef-9832-0da001c14b5e", "indicator--f806ca51-c1ce-4c13-987f-ba92b0795035", "indicator--dfd3383c-c535-4b2b-b8b0-fc9a3a5787d5", "indicator--aeb69cc7-b714-4248-b1bc-c8f229831cd4", "indicator--3aef2f41-ae14-455c-9d67-cd52bd5b01fb", "indicator--69129a43-b45f-4869-b583-f5b6eba0428f", "indicator--de471213-e6db-4177-afc9-3137002b207f", "indicator--2350b73a-8bc0-49eb-9b3d-a9d72aa036cf", "indicator--d6f6c240-f8e0-410a-ba2b-8905b1e785f4", "indicator--c7ac2ea2-4bfb-4025-8925-96a575d2af75", "indicator--d578bf3b-e12a-4926-a0cf-47484e618af6", "indicator--963e6e33-be6f-4e74-901a-7aabb6e0185d", "indicator--4b205aec-95cb-4a13-ad0b-acfa90b24a70", "indicator--0d484f75-a1fd-4fef-96fb-cefe8eacf782", "indicator--934f69a1-245c-4497-b027-2858404d2075", "indicator--476ee07a-3d4f-4442-94db-4090c2b5b80c", "indicator--62b8f7ae-e320-428b-93c8-c44777927b9e", "indicator--65bf92a9-284a-49ce-a746-80dd0aa504ff", "indicator--709a36f9-8225-46f2-bdd8-8a88ce064999", "indicator--ecae8c85-883c-43e3-8d12-a1b39d1e6420", "indicator--6f28ef6d-35e8-4ad5-834d-b44d6a506b63", "indicator--f19053f1-0942-47fa-b2ac-f445a1e75e38", "indicator--2a6d33a0-4fdb-4ed7-8051-cb231fe7371f", "indicator--3b8e5ffd-dc4d-4331-84c0-cda1c22b805f", "indicator--aaec1996-e2f3-42de-8939-f22f2dc401e1", "indicator--93c617dc-85d8-4738-beba-997fe01b39f2", "indicator--c3d6f84f-8bf4-44c8-b92d-554a7bf523f0", "indicator--42c923f7-9cf9-4471-9d85-7797474013a3", "indicator--af625ed5-9539-4405-8d95-d907fcc8f93c", "indicator--eaf6d4c7-3e3d-4e17-a752-c67057f5ddf5", "indicator--7f3fd49d-6a0f-4fb1-a762-17f25dc4f03f", "indicator--33be4112-87cd-4f64-b7a0-17aa22f0df28", "indicator--093ebbd7-cea7-4b9a-8b89-efa36e09c81f", "indicator--65357923-bb4b-4121-8a3e-a588787ee882", "indicator--982fddce-6f8e-4b4f-8b29-bec0d9a18c82", "indicator--881f0faf-c172-4246-b19c-ebb1e74ac503", "indicator--86460065-5691-4a94-8b84-ba94cd43e059", "indicator--fc44e5f9-af91-4625-925a-8996029c1eed", "indicator--95a19eff-b403-42ad-96de-509e770d0dc4", "indicator--265efc12-899d-43c8-98f7-d9543dc0695d", "indicator--4f8be205-8d53-4359-afdd-07916145bbb6", "indicator--6e2abe79-3878-47f4-aad2-6eeb7ed80413", "indicator--c9a7bdb8-ba43-4e8f-a9b8-e67538e976ff", "indicator--267f8661-9e4e-4db9-a688-1039ecd5dd28", "indicator--f57b0eee-cd84-439c-bdd3-e8b33d447de8", "indicator--5bcc3366-0907-4e54-800f-a0441f8ca405", "indicator--90d5369b-e5fe-4ff1-9ffc-77f073d7885b", "indicator--00e54de2-3ef9-4f24-b145-9b9f38351bcd", "indicator--70492959-64a7-40ce-be12-a75bd943d3df", "indicator--a522dc68-4370-4d2a-a1c0-c79b8e1dc227", "indicator--455e7014-1863-4963-8a4b-682460eac3c7", "indicator--a688d032-6a18-4a47-8d56-b7d4e59d0595", "indicator--8cc91fbb-c8fa-49ce-b444-1277c519043c", "indicator--58720d7a-115c-4c9e-a5e5-282c95b089cf", "indicator--1251f478-9ead-405b-88d0-073812e28ee7", "indicator--a89b8b65-0347-42f8-9454-ff52827accc7", "indicator--cce0c862-72b3-4dde-8c65-2e9084c6cb25", "indicator--3b5e0140-8596-45e6-ad1a-75b8bfca13c7", "indicator--9f46414d-da33-46a2-b36d-deceedd7a792", "indicator--653b8ec2-23a8-4280-b99d-529899454109", "indicator--b0355704-ad76-467b-95f7-638c710e1e02", "indicator--c5fc73cb-e457-4bec-b781-23e5649e46d8", "indicator--cfb39482-1a1b-4cf9-b869-531e4bcf6c88", "indicator--9349cbfc-ab0b-4919-ae7a-f0142d12c5f9", "indicator--dc469b0a-055d-420c-9c76-ec62709588b3", "indicator--260af825-684c-4b0d-9dfa-75a67a89f7df", "indicator--52bebae8-d0c3-4c72-a16d-0771f99b430d", "indicator--8e48c7b6-87c2-4b5b-872f-d5f3839ae5b7", "indicator--9dd516e9-87f3-40bc-8345-253c5945975b", "indicator--cc65c0b4-ee1a-4c83-b5d7-84bf5099b17e", "indicator--3d35cb74-43a6-4871-a9ae-901d57386d86", "indicator--e8bc81c0-81d7-4199-a747-99d908c481c5", "indicator--4c9b2cb0-fa9b-4a29-8372-c58732521b60", "indicator--aeca78a3-55e3-4a9a-9961-26a268113767", "indicator--26682129-ac9a-43cd-8080-4e5db13f22e0", "indicator--7b021571-5981-4d10-a6c8-77f82f956d81", "indicator--97fef8c7-1374-449a-86f8-d9c90966b8bb", "indicator--c20fb60a-c223-4202-82ad-c25d9c62a132", "indicator--3d1bc048-bbd9-4e9b-a20c-296c0b3d7683", "indicator--509c5445-e460-47ad-80fe-3ceb237fd00d", "indicator--a7e7501c-fc4f-4fd5-bdc9-dfa7bf9619c7", "indicator--9711bc91-b2cc-495d-bd89-fb826eb44c54", "indicator--589f3811-97d0-4b6d-b9db-4ecd1d9d6b12", "indicator--f55e700c-237b-4086-9c53-2a1572a0b758", "indicator--a9ecc303-9f1f-4d87-8716-fd1833e4c2ac", "indicator--758228e2-32b2-4734-9eae-cb6c3811ab45", "indicator--1ca3382d-5233-49c0-860e-e7d5d6ab82d6", "indicator--0e44f221-a01d-4b8a-aee6-9bd07a1a5c47", "indicator--88d047d7-558e-40fa-bfe7-95680bf5e032", "indicator--80b5ce15-59ee-412d-806f-5fcd4d7c81fc", "indicator--d5ba7821-a850-4155-9afe-24cd902310ee", "indicator--e34b85ee-7897-42be-a64d-e493ec6038b7", "indicator--a66ff0d0-bba8-49ba-b3d0-62416cf481c1", "indicator--9d65374c-46bb-4fae-adc6-2839af53fe22", "indicator--a82c714c-192a-437c-83a8-dfce5d37338d", "indicator--7123e784-21bc-4491-af47-ffb0e56cc597", "indicator--4567925b-bdaf-42b3-acf6-e4b16657bb63", "indicator--5a3dc421-1180-4582-b22c-5e23feb50b0c", "indicator--e1269a3d-3b4e-4890-bcf8-24c85c9dcf64", "indicator--974fa4a3-0d07-4c3b-85e3-980c207067f9", "indicator--40487e60-5907-4342-a4f6-dc767d7c4d8b", "indicator--79d09006-1806-48d0-8282-6065e6105f66", "indicator--39605fad-f887-4d6b-a861-5d7cbe02794b", "indicator--fa6baa27-805a-4d51-9375-6816456756da", "indicator--74133e86-9dcb-49c8-a7cf-0a9a6acfa327", "indicator--88b3139b-56e8-4bdb-8d02-c380b53d8230", "indicator--d3f8237d-9cd5-40bf-bb06-76b8272ad110", "indicator--d6721a6a-6f45-409f-b169-5f81ef1250cc", "indicator--de1aa3f2-ad3f-4ab9-841d-d89a6d5c680c", "indicator--e00a0857-3ca2-4918-b388-d063098598f3", "indicator--2b8727b1-e28f-40ac-adec-a3651b3cbc45", "indicator--f4085920-3ff8-454c-8e9c-eab5dc24aff3", "indicator--3fbd49a7-f134-430d-a964-f8ad3d8c973d", "indicator--d5165611-40f4-4b48-a10b-cb97fadc7b5c", "indicator--a10e6ef5-b39d-4db2-af5c-87d5a9129fac", "indicator--8e411607-5963-4230-97c7-da966809eda1", "indicator--74a13991-fafe-4481-8557-9ef08aa50082", "indicator--8813b020-5171-4d83-8bd6-6acca9f624cf", "indicator--a6afe6c3-a3c1-430e-84e1-352314778c34", "indicator--34a02e65-450a-477e-8139-1c4e7f461154", "indicator--bd74e86b-a336-4407-9a83-627c60eab9b3", "indicator--52c27953-e412-40b9-943d-9b159b52e423", "indicator--191e024d-a097-40d9-be0c-765c09773c12", "indicator--ef37a110-2850-46c1-9902-ee16645bd742", "indicator--26d399ef-2b02-4e6c-8155-f151afddd20d", "indicator--fba24024-f70d-44c5-9866-2f68700fae74", "indicator--446f5c25-d452-4104-be70-ab2f99a80531", "indicator--3fb38453-8c3c-404c-928c-bed096ee32aa", "indicator--a23844fa-8087-40e8-ae56-cbc85d44183a", "indicator--f28e41ea-f95e-4c15-8adf-8401e340d53a", "indicator--b070d80b-ffda-4a1b-83a9-39010d5a07e9", "indicator--6b1fb959-861e-40ad-a816-09e03205b90e", "indicator--fd5703de-72a1-4fb4-a22c-023733defc2b", "indicator--636e26e1-6736-429c-ac77-1a512c808509", "indicator--17218b1b-2c6b-4aef-a99b-1d65292d2dfd", "indicator--8f3af078-1f34-4e93-a170-81f1c21ad41d", "indicator--352f7ae4-abbc-44b3-83bc-34eb6df7c892", "indicator--83dc947f-016e-42e9-a145-5fcd8cbc000a", "indicator--7a67ddcf-8138-4f59-b930-d584c611e922", "indicator--bea47ea2-8bd7-4b01-ab11-70927733a417", "indicator--5e01b064-bb79-40fb-a4ab-667aba37d355", "indicator--ed30cffd-5574-49b2-83ce-aa01591f9b51", "indicator--57c61a4b-b591-4518-bba6-24acf151d8c5", "indicator--251d3357-4a18-41cb-adb3-5f805c1bd539", "indicator--10c82301-520a-44e9-81ee-f84d2fae47af", "indicator--161ee400-4874-4f26-b718-d4a50c6cf616", "indicator--0f0e1d97-be80-4237-a854-eac34419d966", "indicator--281889ec-8320-48a9-b730-a76fa4ddbfd5", "indicator--d178e3a3-12b5-49da-b8a9-2734694b2439", "indicator--163b7d82-a59a-4951-861e-e862a57c120b", "indicator--30118947-2c6c-4032-9b6e-deec44aaa2d9", "indicator--fad67a75-a7f2-4bde-98e9-f5069449c5c9", "indicator--c2c349c9-5cec-4453-bb41-f4e848211eb7", "indicator--d1ba5c1b-c09c-43ef-a134-f3e88fa56ffe", "indicator--c14d41af-3577-45c2-a6c3-af554de40c72", "indicator--6b9ee597-325a-4af4-b803-bda8b80d25c1", "indicator--2ddb0613-e3e3-4999-830d-393c2b4884ce", "indicator--8c8a4b1d-2f6e-4432-8f64-761bd2fc9591", "indicator--01779195-9f7c-49dc-b001-b4273ec1117d", "indicator--074420f0-7277-4147-b21a-1d8c71d922e0", "indicator--53082518-3aa5-46ee-9a1c-029280bd1c4d", "indicator--a2d9ead3-072b-47fd-b4df-bd21a66118fa", "indicator--2dadd335-a3f5-441d-b10b-ba7cc0b48850", "indicator--867f4b33-a342-4ef1-ba4d-575812fb9695", "indicator--382321f0-5d09-4478-a8fc-dd3c2b0e7ccf", "indicator--b94dfaaf-87e4-4e89-a6a5-7f083b12ab25", "indicator--5d4b8350-4ef3-4c7b-9ad3-14cd6daec547", "indicator--71a64f39-7e30-4ad0-a7f8-b02ca7fe9beb", "indicator--35e44e7e-3021-483b-a9f2-db2576f918dd", "indicator--1ba1258d-e4fb-4d1b-9738-7a6597e84f5f", "indicator--a7364db4-1dca-4674-a1af-58a346d54de5", "indicator--3b432c9f-5c50-42df-a1c3-e024d5513fc2", "indicator--feb1e0db-d1b6-4ffb-bb1c-689804e2cb41", "indicator--33cfc0e8-7c0d-4c9d-9f03-0ac03e16a5a0", "indicator--e2bb6616-986b-4ed1-b549-09d3c259ad71", "indicator--b0ee88f9-2d01-4623-8064-70ae1d70b0b9", "indicator--0cd561bf-4de8-4bc2-a9b3-dd59377316db", "indicator--516b2abe-a1b7-4eed-babd-9897603b3f75", "indicator--48e8da77-0f37-4575-968b-8ee024f86d63", "indicator--91009cce-cf0b-40cf-a398-12df85577e1d", "indicator--17b47d76-c948-427f-9646-429ed1847354", "indicator--76ca926d-08c9-4224-bf29-3b4ccd0ee803", "indicator--28496fb6-d028-419b-8cf1-61c938c8f41b", "indicator--5c3f1ed1-3ab5-466d-99ff-ea3739c0dfe6", "indicator--1948af74-438e-45c6-9262-d3fad0e83811", "indicator--66851d01-91f4-4600-a477-5d69d72fc188", "indicator--8e756bd1-d125-40f1-8686-6d51f975a329", "indicator--0c529c73-212a-4c50-9cc6-1bbc18bcbfeb", "indicator--8738eb93-13d3-4deb-b626-488554073d21", "indicator--d55fbfb9-3e66-4ac1-a0a0-5446006b7258", "indicator--8f5ab87a-3886-4c3d-8608-cfe59412486e", "indicator--d61be938-bff4-4c20-9992-610d854b06ac", "indicator--17f5bd53-4112-466f-b1de-5a5682c18ef5", "indicator--6e758a61-9f8f-49dd-83a4-8d3d61e81e62", "indicator--b3661cc3-814d-4bf4-b704-2062722676cb", "indicator--7b56c9f6-0b0a-4a5c-8541-dd0e360769a6", "indicator--e75fe72a-da57-4572-b9d9-4271503891e5", "indicator--48f8069e-4a86-4e94-ad11-3317e27664ac", "indicator--6f5448ec-cc65-43dd-9f8f-7260cab29611", "indicator--ce41183d-5917-4917-9e9e-e8df5b353354", "indicator--16515276-a540-48f7-906d-0d55238cc918", "indicator--cfd62daf-12aa-43dd-9d11-a72d27f2f3e4", "indicator--b37d002e-cb3b-416e-aa73-a082259d8f16", "indicator--c2c1fc8e-4492-454b-8e65-b97c5fc736b6", "indicator--5bd1c5a8-2b7c-4d62-b26a-9ea6918be5fc", "indicator--0ebdf9d8-a653-482e-89f2-ebb01ac0f34f", "indicator--242a297d-b7d4-49dc-9f26-c3dfdd5873ca", "indicator--15290fde-7bfd-4db2-9c2b-ff0ee2c0af41", "indicator--38610ffe-8a24-483c-8970-8bdd1898ab70", "indicator--b560e9e3-3656-45e4-9eda-984367afe747", "indicator--7b1d5439-a4bf-4cb2-b48b-212ed76e2aeb", "indicator--458a130d-963f-4b4c-9f15-69a97af1246a", "indicator--9e53db0b-807b-47df-8bfa-1b1c3caaa47c", "indicator--4addf624-9d87-404c-b4a2-e8be01da60a7", "indicator--d45a195d-af49-4a25-bb65-c6da87b8ec71", "indicator--88d78693-0516-4339-a457-480bf7bc8362", "indicator--10a40de2-be06-4d76-a991-dde083da51fc", "indicator--0bd85edd-e02d-4fd0-bbb8-39ddacc7bac7", "indicator--27b08259-7cdb-43b2-94f2-415f1c1234b3", "indicator--11c69e1b-0875-46a9-8cbc-f58bec058e4c", "indicator--6a6ce87c-eac1-462e-839d-4aa8c7f85474", "indicator--7cf4276a-802e-4c49-9b11-760a257acf57", "indicator--1701d256-558d-4eab-a944-a7e17bbd8160", "indicator--36999f4e-aab6-48c7-a7f6-80ac16ad23a7", "indicator--c7f4ee88-75a1-4e5d-bb5c-624dcbcd8c3e", "indicator--26813b5e-a539-43c8-9afb-4269aa178731", "indicator--ff3fa885-0a88-4007-a6b2-249e95f9a682", "indicator--850d6214-ebda-4bed-8e19-1a9da8ba5c9c", "indicator--f63282f9-24b8-4d01-be10-9ead81b8a448", "indicator--d8b6318a-eb68-4b96-84b8-82eae390fe0f", "indicator--10674195-b5a2-4afd-a818-1e43a2fdcc24", "indicator--168fba3d-193a-4870-ba4a-fecce4df7135", "indicator--1aee2190-07b1-4a28-b183-d137006f5a3f", "indicator--519cbfc2-7944-43e3-8ffd-81400ca21a23", "indicator--cc821037-243a-4286-91fe-b71a1f839b1a", "indicator--4cb9be70-c2da-4e0a-b619-ff761e54236e", "indicator--f8356fc4-ce4c-497f-895b-bf4c01468e2c", "indicator--317afa55-6dc4-4bda-a3ae-1cd268e982ea", "indicator--0e6ba7bb-2989-41ae-87db-208b969ab19b", "indicator--d49263a7-03ff-4b06-9165-5b72601c6bbd", "indicator--42931042-15bc-47e6-aa1c-a32087b133e9", "indicator--778ed651-42d4-467b-9c56-c22d9e52850e", "indicator--faa901d5-1d2b-4131-9e79-7f49f7837058", "indicator--48f28c8d-42cb-4b1b-bbd4-9c0aa6b8b070", "indicator--e1328953-3274-4888-8016-5518a4382fa8", "indicator--5f73fda5-a581-4c99-9be8-8114eb364526", "indicator--4a02f8ec-c3b6-4b4f-a968-f18e254734f6", "indicator--47ce406a-395d-4842-9ef9-076ec60a5e71", "indicator--cfe209ef-98ec-42d5-b804-e5277c6df7fa", "indicator--0b9f25eb-b33d-4cdd-a22c-e5ea224f5b53", "indicator--a3739a99-2f8b-48ad-ad8f-d70ba79f5b7a", "indicator--827b18de-308e-40c7-bb9b-22b238e7d468", "indicator--61358be3-c405-42ee-ae02-058581c04e44", "indicator--328ebc20-14dd-4ac5-8e63-afda9acc66d0", "indicator--6a6e2279-7b7c-43bd-9db1-2a453c4e5535", "indicator--d7bba8e8-9f2c-41dd-a946-ba3ec8d4b8f7", "indicator--1f2d17b3-a5ec-4ffa-998c-42bfc93704f1", "indicator--9e0938e2-ef91-4190-b9bd-9ddf3b4a09d8", "indicator--12847437-0612-4791-a0b8-91272258bca2", "indicator--b1a85d9f-5e49-4073-a7cd-2f8b658c7248", "indicator--82659594-0893-40bc-83ad-90b7b8d3ac7a", "indicator--2161fb77-54f9-416b-901e-afbe318e0957", "indicator--b65836d9-0e40-4d3d-bceb-04fba6dd8396", "indicator--c13ed9ca-a20d-4fdc-8816-5288e5c9db02", "indicator--36469c3b-1a75-4b33-8903-c72d41e4be1a", "indicator--13ab9d04-0b58-4057-b77d-d4f919e438c4", "indicator--e651b57c-d916-4682-9049-dffaa33171df", "indicator--c9b70aaa-9146-478e-afa2-9953f075449b", "indicator--63c21a23-4388-46e5-a41e-fce616423177", "indicator--835e3f08-48f8-4d0d-b676-1b18f14c9a09", "indicator--816377e4-4694-4009-83a7-c1a6f0fa7a17", "indicator--1b34417e-41fd-468b-a83c-670a00db7a62", "indicator--85082373-ca11-432b-b247-e3be41584902", "indicator--431ea978-cba5-4ac7-afb4-38c7b2ea4f5b", "indicator--3f26d047-18b9-43f7-a12b-89f2fe5e8588", "indicator--b2fbdf6f-84af-4874-b82c-351795c4000d", "indicator--588f16dd-39bc-417b-ae0f-438cb3993025", "indicator--96baed01-0fcb-4ac1-8982-442224ecb96d", "indicator--6c57e0b6-89db-4941-99a6-83cd0baabf06", "indicator--3bd79a8a-df1f-4673-a92a-cd1cfe3d040f", "indicator--379b6da7-2c55-4106-ba64-8a1a417c12ca", "indicator--0b8f9e19-328a-4f09-826a-13e4a609c9c0", "indicator--6ec66e32-42be-4c09-9e3e-aacb5e35746f", "indicator--e6620514-e63a-42e5-b4ff-22460c465386", "indicator--d2014ac0-1dd1-4e02-b2fd-7bf950431232", "indicator--cb3f1b47-b209-4dc6-abd5-ea8e7e1007c6", "indicator--73d89a8e-9f94-4eb5-ad85-3cb916427758", "indicator--eddafa96-1fc7-4e5d-8936-e48fbbe28edd", "indicator--cd8b1770-2c39-4e21-8002-88823cfbddf9", "indicator--8a58526a-9b24-46f6-be2d-f0a8e623ca18", "indicator--df2370a5-f561-43bd-9916-bd3f579d7340", "indicator--300881ae-c110-464c-9e58-df44bb2203a1", "indicator--21b25a72-3f8a-4eca-a3ee-6537b109fdc2", "indicator--85117e0f-26b0-4a6a-a872-b6503b16cbce", "indicator--dcbdf024-ef78-405c-a9d2-a6dd875d0e6d", "indicator--6270f0b4-df0a-4f0c-b2dc-cc21d471a1dc", "indicator--0d4d79a4-cd96-47f2-9c02-1aa9ae4712db", "indicator--10224eb4-c0e2-402a-9d45-8c5f66cf3381", "indicator--094cd362-edb1-45e0-beae-1523f1349cb1", "indicator--a01fa3f4-97f1-44df-9b44-17a7c8769173", "indicator--aeeeeb42-7219-40fd-bdcd-e4fe56f12d2a", "indicator--a19cd994-caa9-40cb-a44d-9d513091799c", "indicator--2b601224-d454-4e7b-b520-4b4a273554ab", "indicator--e061c7cb-2dcf-4891-9045-4975456731b2", "indicator--8c4b0965-5801-4a2b-a260-47643b35768b", "indicator--4f2143d9-53c7-4ce4-9e30-87a633ef8cf8", "indicator--c4c53b65-93fd-4c22-b62c-bf59ac82def4", "indicator--ca0d9fae-111d-4b23-9f22-cfba2885c222", "indicator--14eec826-3bac-4760-bd7e-6401953b82b9", "indicator--44d3b008-274f-4b97-a50d-ad119f647a7d", "indicator--13d88c16-cf26-42ca-a5c0-a4fab821356e", "indicator--5e99b8f2-aaae-49fe-b712-e5f9971bf8ed", "indicator--455ed697-8f4c-439c-8716-88ea923ed64b", "indicator--c35a2b76-cd01-4b6c-80aa-5400f0bf07f2", "indicator--0a283355-cad0-4877-a0dd-5d4f47b66eb1", "indicator--d7d16b9c-53a2-491b-ab6f-1f876bb27f15", "indicator--ab053ea8-bc5c-4fc3-8cb3-4449094b2afb", "indicator--ab543da2-8c72-4b8c-9b78-6047e9c45125", "indicator--c473037a-47c3-4d9b-b8f7-c047673208bb", "indicator--84f2d311-292f-46a4-b3d9-62c5e974ff7c", "indicator--c492587a-97c2-45bd-a19a-95469fbddd43", "indicator--c2b0367d-626b-4a00-b492-f7d23749ed59", "indicator--db744ad5-0cd1-4d53-beac-c86edb411cb7", "indicator--c3f1d557-fd10-49a6-b12a-2cfddc90030c", "indicator--9af33bed-499a-4de8-89cf-15bd2c8ef61d", "indicator--cb3ef5df-5071-4e04-8369-5300a8046289", "indicator--6689e14c-8718-4330-b114-4d6e909924a7", "indicator--370e4f9c-bcac-4934-95ff-d11d7730c618", "indicator--236ae05d-6656-4dd1-9478-ad788dba65f1", "indicator--770cb876-1e07-48b9-a82d-ed10d0d60780", "indicator--119553b5-aed6-4a2e-a37c-7ed0b2c126f5", "indicator--81ef75d8-96ad-42d5-99da-4208bba1cb65", "indicator--91ecde23-1c73-4c76-bdaa-15f5ea467f02", "indicator--844b26c3-00d4-495f-a381-1d89eaa04556", "indicator--9032c6fd-e6ea-4ec5-81d2-976a92d56d6e", "indicator--75985efc-400d-4742-9a96-784bc823eb1c", "indicator--6b9e2222-d5a5-4e2d-86f2-eda55559d741", "indicator--7ddecf2e-22f6-4f2d-8cbc-fcce64ee7b99", "indicator--ed651b90-54b9-4078-b9c3-a525fa940285", "indicator--e8825fe5-e72a-4aae-abe1-c4fd9293003a", "indicator--5e144e8c-2952-4262-af8a-4df827ef963c", "indicator--aba45cbc-7553-4645-aaab-6ffec6390e00", "indicator--d7cbf731-3c21-4c60-9496-f9a2b4fa66d6", "indicator--b51d7b07-24ef-4290-8243-a0957d9783b7", "indicator--c07649a1-bacd-48ca-90e8-ce85e292bb11", "indicator--bda82836-b17d-4264-ac46-d8778ac4e4b6", "indicator--cca75173-4ab2-45e4-8d83-617ce41aa879", "indicator--7d2befeb-9e16-4fb5-86cd-4dc50e5c4f11", "indicator--d1477181-e028-4678-a2f5-8a1e3af24c1f", "indicator--9c7b152b-f9f8-4a7f-a349-bdc49451e71e", "indicator--7bac9a40-1f03-4f84-8105-951a36e28cc7", "indicator--40adf280-28bd-4cb4-ad21-8a96f3a2c3d8", "indicator--d130e746-f838-4edb-89ac-d8456bb44caa", "indicator--fbab49d5-2dde-45b0-9174-53ecc95d08cb", "indicator--d32c2a6a-48d8-4153-a552-c2ebf95cb59a", "indicator--cceb1be5-3488-43bb-9bd4-8f0c5e9da23d", "indicator--f36a2c30-63af-4bef-b953-b64c7bdc2f15", "indicator--fe068912-a438-4fe0-91ab-9484a5a34bfe", "indicator--d676c7ea-0dd5-4ecf-9022-6da14f18a3c7", "indicator--165530cc-594d-4165-a710-7544f6c116eb", "indicator--b6e42c2c-ba7d-4231-ab4c-0160b696c904", "indicator--be74f4c9-e53e-4848-9220-ba6126085918", "indicator--ea0ac61c-9c6b-4017-a409-2c1caff73c80", "indicator--0251ad7f-12cc-4680-a690-a455e70eb473", "indicator--3f859acf-dc88-40fe-9613-959d53a8bd69", "indicator--e7c57d8d-4e4c-437d-ba18-50b12bed1211", "indicator--d23de2b9-157a-4eb4-877f-0e68678b8bd2", "indicator--d2b606a4-a3a6-4f6f-ab4f-2e83a9c2ff6b", "indicator--a89b261f-bd78-42b9-bdbc-555b5c8c210d", "indicator--50411574-1bd3-4385-bb02-ef1af3bb1584", "indicator--f9b5cd99-fe25-40f1-830d-8078427e006c", "indicator--20d97653-ddca-465f-bf6c-c1a119e9adb3", "indicator--db2599d6-0026-4450-8cb1-b91e4460224d", "indicator--c323f632-1dd9-4415-a6da-e0f472ce34d8", "indicator--332b7253-ac05-4997-8c0a-1d160b00583f", "indicator--66313665-2dbf-4292-8c26-e6f9e44789a7", "indicator--75a6dd44-017a-4c0f-ab46-2886c3f16e70", "indicator--65cfefad-d390-47b6-93f9-29e8af0440ea", "indicator--bd869aee-36ee-4324-b8eb-1646ee2abc19", "indicator--731389b7-e173-48f0-a4f3-e4812c93d91a", "indicator--437991d6-73a1-4099-a5b5-0f4381980a99", "indicator--945cb78d-dcda-4ac9-973d-9f30de338748", "indicator--8b564b10-7123-405d-8275-8b6bf435eef9", "indicator--280eaa4b-0327-4eff-a9bf-02f16f65dce4", "indicator--a42dface-208f-4dbb-84a1-259cb28e2523", "indicator--070b9b86-402b-41a1-898d-7113785e9789", "indicator--a3666fe9-7d12-4038-a83b-081fff535cab", "indicator--d6d7e1a9-abce-4a54-8ef6-2d98201b2d83", "indicator--a5fa49e1-c29d-4566-9a06-d605ac904498", "indicator--36c687b3-2437-4f05-9d5c-fe70d6c09745", "indicator--eb094d4d-abfb-4a52-9dd1-db9fa2215e7f", "indicator--052d62ff-b47f-4374-9d4f-b986b05c2c81", "indicator--57bb34a2-d03d-4d2b-9dcb-ed69cdd63174", "indicator--95d1eace-f769-4e96-9cad-838500e84e03", "indicator--13f8b98d-8160-409b-9aab-76c2248dac87", "indicator--3046a0b9-fcf9-4312-a99b-4cf362c21243", "indicator--9b1df89d-e425-43b9-bb27-69e42d568051", "indicator--8a726fb3-68e4-47cd-8afd-a70ff637ce00", "indicator--e8812a79-2c82-46ea-a447-1248692788cb", "indicator--7abf8ebd-2d9e-4c69-b211-249258549586", "indicator--e95833b3-1fbd-4a40-83e9-e95c33428bcf", "indicator--b8e60937-15d3-4682-8114-0121c4797d52", "indicator--e35f2e54-536a-40cc-832a-8697875b363a", "indicator--842a15fd-c68c-4011-972e-acaefd7ca327", "indicator--a32719c2-b9de-4b80-aed6-da0090529547", "indicator--8cc6421b-e2cb-497c-a7ae-c7295b9cb1cf", "indicator--bc986160-c88b-4316-9a21-27878744006d", "indicator--88eac1e6-d40f-4d8e-b3a1-16670200f24d", "indicator--89304b4c-49c9-4157-acb3-1c66138e7dc2", "indicator--d32934f9-2757-4e89-af90-71f8fa236e05", "indicator--1dc5a636-f284-4f9f-93b5-ee589789ec55", "indicator--e2f50014-6a16-4748-a16e-7c748664c436", "indicator--4762b169-c309-4312-bb35-0885d4e9cf78", "indicator--0479539f-eada-4806-8f79-3782c15f94aa", "indicator--34423330-6150-475b-a677-d4ed9c71e521", "indicator--43f5cdb0-ba52-4e1a-ac3e-bd8c4da5760f", "indicator--8f4ed9f9-e506-49c1-9d1e-cf1505d44c79", "indicator--b8a53c91-4071-42bc-b2bf-35c0f346233c", "indicator--e6d77f7e-71ed-4711-9c67-81cd0348d622", "indicator--691718e2-86fb-4db2-871f-819ffd5572f9", "indicator--49892c9a-8e01-49be-838e-eb08d1910290", "indicator--37d1629e-1cb5-489b-b186-2ce5b24c44f3", "indicator--66b9955e-59df-41d8-97b7-9d50237432ef", "indicator--5694a518-59c5-4939-ab94-e180ebbca60d", "indicator--be085b6d-eb68-4b86-b2bd-b581240423ab", "indicator--3ed50936-6ef0-41bb-b7bd-581e93da3d4e", "indicator--8d12981c-db7b-4fa3-937f-c5f8bedc8bea", "indicator--ef03a107-4af5-4c15-92a7-165a50a916ef", "indicator--a2c58ac5-0d7c-4176-9eae-1ec8e4335c6a", "indicator--400bc8e8-cbcf-47e2-89ef-111846ac584a", "indicator--29d8e5f7-56f8-4776-8e00-5b65e912f59e", "indicator--a7c06152-c6b5-4c77-9e65-020043a96a98", "indicator--a6926f97-a3a3-4697-a4a9-d59e1ca20a10", "indicator--28689584-14f8-4365-a3ac-d6e070cb7955", "indicator--f394f116-e1ce-4351-8041-1577cd6929db", "indicator--a4c115e3-6d13-4547-be64-06e64c3683e0", "indicator--474c9a92-6567-4ae2-bfed-fa30f650fc71", "indicator--949f3ef7-e3a4-49c5-ac60-6bb92e59c1e9", "indicator--32353e24-4147-4c96-98da-4cddc153e55d", "indicator--5757de8b-2086-42b1-91de-85e907fa28a6", "indicator--aa51f3f3-6674-4a04-99e9-a73a0c95a072", "indicator--d36f4391-48ed-4b6c-bd5a-ccb9a3f6600a", "indicator--e44e0d72-bf74-4f61-a8c6-0a9f196c2cf9", "indicator--2aeeefa3-bd88-4b49-aaf2-e7fd83838cb8", "indicator--1c3f28f1-412a-4ef1-8ecb-46d3f889ffdf", "indicator--6d7deefb-b149-4afc-ad94-32f4290a0f9c", "indicator--d47bb12e-bc06-4882-9109-6f2532d6852a", "indicator--acad9c06-99e3-4d02-9fd8-e02fa7f4b194", "indicator--e87b0f2d-6fdd-4d65-b0ff-32714e24a551", "indicator--7c184bdd-6505-4f4f-9bc3-bcfa69d57470", "indicator--935fe32c-4444-4164-89e6-b925f362e7e0", "indicator--bb141ef3-7c0b-4efe-beb7-437471036f65", "indicator--f3bbbdb1-4465-472e-ab7b-ce7015da0b40", "indicator--7492f51b-a498-43b8-8994-b580d706b7fb", "indicator--eb5240f4-0e34-4336-b8e9-a264cb8954d7", "indicator--d6e6b385-5405-4991-a08a-f77d7c39b740", "indicator--0b55b595-d48e-4700-a432-bda4c79f5df4", "indicator--df851a36-4868-47d2-9e59-6e6fb278736b", "indicator--16be9300-bc94-427b-8171-557e09d02657", "indicator--85105d18-ae06-41a4-90cc-3a8018e4f9bd", "indicator--a6e71718-d9ef-41a6-99ab-a6d8383cf0db", "indicator--0deb962a-5d09-44f5-9690-a0fbd7f83ba8", "indicator--cc962dae-2e96-4c1f-96b7-59a51bcd2e0d", "indicator--658fe5fa-6a8c-4f37-8748-1129cd60bbeb", "indicator--e39cd282-e598-49ab-ae6b-5e938e14d24c", "indicator--cf02bfd9-2b13-4061-ab34-fa609cf9f2d8", "indicator--a8b78af5-d491-4b9b-bea5-d6b105ddbd1c", "indicator--1f5934e9-8e8d-433a-81f5-1fdb7e17460d", "indicator--577124e6-508d-43c3-872c-17b16feeafca", "indicator--4bfa8b91-c285-4d2b-8bb1-ce2fbe2c609a", "indicator--cfeb5081-2c2f-4451-889a-6aa39d4f94ac", "indicator--d05d493a-71f6-4a1d-9e3f-dee621914f39", "indicator--a3ed2f56-e7f5-4d05-b5fc-89163c63acbd", "indicator--e822b8e8-3caf-45ee-9fa4-f11edc3a2a32", "indicator--86094cbc-fff1-42ef-a501-1640192348e6", "indicator--22c489c7-3f8b-4dde-bb80-31c3c5840f1f", "indicator--a954246f-9d9f-42d1-8bfe-8954e9f66398", "indicator--285c8bfc-3b92-43f6-abba-aabf6b333904", "indicator--4320d190-dc26-4a22-8f82-e6eca84c0d57", "indicator--ef34204e-2abc-431e-af37-9b8013f11d3c", "indicator--4d6003d6-9c1f-4fbd-9695-dde25b3a0f7d", "indicator--d2946fa3-3150-4fbe-9899-447e9570713d", "indicator--3627e08a-6ecd-45d2-8974-10b13a924dbe", "indicator--c49fe18e-2580-4959-b74a-4ed94aa14b17", "indicator--9b328054-609c-4c51-97ba-bf755695964c", "indicator--b724f51d-1916-4bfe-a7b3-300fbed53e5f", "indicator--456baef9-5498-44c4-9489-9b17992f8abc", "indicator--97cb5b8a-704a-4353-91a0-ad2e4dec7901", "indicator--7d870bf9-8a35-4d95-8071-0433dd55a391", "indicator--6fa20f75-3fe4-486f-84d5-9edcc85f1430", "indicator--22b7eabd-8451-4cf4-adcd-fb706ea27f24", "indicator--5d2e7b21-9698-4355-badc-74116e353f88", "indicator--6a782b90-282e-4922-8885-481b3d63ea4d", "indicator--709dbebb-4965-4193-90f8-1cb44db4bbbb", "indicator--42f98d54-40a1-45d9-b4c4-de5e1c58505e", "indicator--5640d293-78e0-4bfd-8516-eaf52ff786cb", "indicator--c2e0f47a-5003-4783-8afe-d3da25aac2b4", "indicator--140aa22d-32d5-4813-811b-2122cbfef08b", "indicator--4a5a589f-792a-4c7d-a432-094ea7f18ac2", "indicator--594396cc-7d8a-43c2-b932-30fcbe2ee679", "indicator--cd6c675c-ce1a-45c5-b00b-8672c1b72170", "indicator--00fa620c-9cdc-4a60-b0c7-0cd71b305263", "indicator--89fee55b-eac3-4d8a-b94f-b188225b2a7b", "indicator--5483d4de-d01f-445b-8daa-ca594d1f36b2", "indicator--67475d19-8eac-4437-b228-398d76164c57", "indicator--389f5a27-3aae-4c14-9987-ef99c6532ea9", "indicator--adedcaf9-840a-4d89-aaed-504ab69dc2a6", "indicator--30ccfbce-2454-4ee7-8332-9f2dc5c46c5b", "indicator--a6375007-baca-4b65-beda-f008795bebdf", "indicator--69891d23-fe29-4718-9f54-2685ddbd8a95", "indicator--3fdd9537-13bf-454b-a4e7-5f6d2146ea92", "indicator--45faff4f-2afa-454a-8254-41cf8e70df32", "indicator--4f9807d2-d31e-49da-9776-2797fb840642", "indicator--b9313e70-6846-4065-a0ee-e76c04cb2ddc", "indicator--1369c4bf-fa88-4006-a4b9-d50a86112475", "indicator--e20c984f-f1ae-43ff-89a2-e5b0c4cbddbf", "indicator--5e483b3c-6c8e-491f-925a-f8ffa39f0941", "indicator--a244f730-be7a-4976-8b40-49bf35cf51bf", "indicator--da23b866-6f95-47c1-9223-c65ba445e84e", "indicator--157e7855-9aef-4d49-9b76-013253e279f5", "indicator--94e1c1de-f39c-49a4-9072-d5cf0eaa1822", "indicator--94b83583-ab6c-4ab9-b245-6fdae7331255", "indicator--e9a4e0d8-e8eb-4515-a3fe-8498e8c00ca4", "indicator--b9b1bc68-d7dd-4879-b2cd-036e3452633b", "indicator--a7189059-437a-4b66-962c-bfbd9f029ae1", "indicator--ce9c19db-9fd9-4f2f-bd15-717f4b1a78ab", "indicator--49b9caae-8987-4994-9e9f-84e3a5138c3d", "indicator--d16b1f36-28ee-4eeb-8238-8aeea2b3aada", "indicator--3e999253-4b02-4de6-b066-a469c15a5b48", "indicator--5a904986-ba21-423f-bca0-4502affc5c8a", "indicator--66a1a79e-4095-48f1-a40b-1a06ae00acd0", "indicator--7433f231-6ed6-42bf-9d97-bb051209255e", "indicator--60f8ebd7-8f9f-43db-8402-b9e70869f238", "indicator--16cada4c-5e1f-4be7-a19a-e9d48c75258a", "indicator--c30a6c0d-bbb5-40a5-b093-baa4d0ff0365", "indicator--930db01e-7816-4040-8fe7-6005cb866589", "indicator--1c1997de-fc71-4eae-9a02-529161234f51", "indicator--d7120cf8-66ba-4519-a806-ec859543e58a", "indicator--30519849-22b5-4b35-9070-815a228aa6de", "indicator--509ca33b-c415-4c89-b5a7-1434435d9fe1", "indicator--ef753e7a-0bfc-49f1-8264-45782693f3c5", "indicator--9dafa52c-8430-4777-984a-8da86b525151", "indicator--1101e39f-6fdb-4909-b745-40df3edca55f", "indicator--03e3c2e7-5024-4b9b-b8fd-b3c4b4dd3f60", "indicator--157202c3-1d4f-48ba-86ec-d40e962807b1", "indicator--3fec856b-0c07-48cf-9db8-842dd8ef60f1", "indicator--32f10ae5-38c5-479e-8df7-66d9a1e0930e", "indicator--066cf4ce-ef49-4170-982f-797f2a0dc2a4", "indicator--b202a9dc-0e76-4420-83e9-7f9c1ab547ed", "indicator--7a340647-287b-498b-a96c-7e6821853e6a", "indicator--20fd8801-b3a8-42d3-9f09-072cb1a37364", "indicator--25760874-5562-4c3d-9199-fbc92ad01c8f", "indicator--027e785f-22c3-4f66-899e-96da95380598", "indicator--ed3f2798-3bfe-4547-8215-fd334b09d4e4", "indicator--43294f73-232d-4d2b-a7ef-e70a5a0f42d9", "indicator--d6280fa6-70d4-498b-9e82-4157ddc603f9", "indicator--3d0c0362-3110-4ebf-81c0-2054274c4c10", "indicator--d9748bed-fc4d-4adb-bc65-20d64d0ace7c", "indicator--dac9ea0f-7ada-4ec5-9ff0-b2ad13142526", "indicator--533dccfe-1732-4b86-a81a-10347b3995fa", "indicator--7f9920ad-d591-46bd-8443-71f0a0f34c22", "indicator--9c22217f-4d50-48e2-bc15-d2dbe1969fd9", "indicator--269ff4a6-c569-4713-9f59-4639c217e07e", "indicator--30f7becd-b526-4337-ba1c-a78dd5ff6b6a", "indicator--62d7712c-1026-40a9-8df3-1fa9cdc01f05", "indicator--b8c53648-f8ee-4a2b-ae2f-acb5baf0ead3", "indicator--dff0e6f3-f3a8-4415-beee-cd92d1895996", "indicator--eafb4279-e296-419b-b058-a8bdd681c2d3", "indicator--8fd0c55d-574d-4c44-9f24-bcde91a9d507", "indicator--a0cbe8cf-6b45-47fc-b1e4-ff46adde10cc", "indicator--933e3684-afd0-4192-b479-cf1757759868", "indicator--4c7c281c-a857-4e44-8a8d-347fea77fd45", "indicator--f145aa67-a3e6-4053-ad79-ed41e2a6e876", "indicator--f4c6f781-f781-409d-afa4-e8f24c7e5efc", "indicator--86a809a0-0ef6-484e-9d3b-34f2f3b01a06", "indicator--15a946fe-d76a-47a3-8ec8-b921f2ce110d", "indicator--1ee288d8-b12f-4de0-9846-5d6522c1a86f", "indicator--c0b9e048-3245-4f75-8bf0-75ce92c1264a", "indicator--eb72e7cf-ed4d-410b-a161-640f1cc249b0", "indicator--93642ee6-05d0-4ced-bbfe-80e3fcdd8b28", "indicator--f58ec6b4-ffc7-4b3c-a542-d4665eb49fef", "indicator--3c61c1ce-5d4a-440a-8dcb-dc06a45a31c8", "indicator--cbd6f673-147a-4d8d-aa11-50d86955440b", "indicator--6fc5f501-e25c-4989-95ab-9a5269a71ac6", "indicator--bbe190a3-8fea-461c-bb01-c286b23aaa50", "indicator--80b7e2b9-a730-44bb-a970-a522a6de5164", "indicator--3aa566e4-314e-4dca-ad5f-705e3c90de9f", "indicator--8b2e985a-f7ae-4c4f-8957-5b0d6a7e8e15", "indicator--277c1413-9239-4417-b774-3ac0064aba42", "indicator--aa7cf5a5-3ac2-480b-a89d-9dac48843512", "indicator--7a178a5f-321e-4b34-b024-8724d115b342", "indicator--680b3dec-a164-4827-b5da-9679c39bafae", "indicator--6384e76e-4692-4517-b943-2d063c3f69e9", "indicator--8add73fe-68c9-478e-8d1b-d9c7eec49243", "indicator--ab866910-c43f-46f2-a83a-ff4c0c1e1e85", "indicator--34401c61-2f16-482b-a8b6-e6a23fb0cd2d", "indicator--780ce061-c030-47b4-865e-92415afb1953", "indicator--3985b6fc-5ea0-47a7-b897-c2e90811764f", "indicator--6018671d-505c-4c94-9e49-97f25053f711", "indicator--1f096332-9b0a-491c-b85b-b8eb4a0aa407", "indicator--a0826c27-f21a-4b11-9ae2-1f717dbbd6e8", "indicator--02a436a0-0079-42f5-9902-2bfae95a5dab", "indicator--70f7adde-aac4-46c1-9830-5302d6e3177f", "indicator--bc01c70f-d5b8-4fa2-b131-5f1705f4f91c", "indicator--d06651f2-805b-4fae-9cab-8d0ac7debe1b", "indicator--e3f86c32-5369-4d62-88e3-ade1b00c1248", "indicator--0f729b41-f05b-4be9-83e3-2751ca2fe8fd", "indicator--9e0456b3-b46e-464f-a74e-aa03e48c7aec", "indicator--68353934-46b8-48d5-be27-85079eb5752d", "indicator--89fe447e-fbeb-4ea4-a47d-dc1c6be0d175", "indicator--9bb9b22a-9e4c-47c5-8ffb-edbaadab7f74", "indicator--3e96160f-b315-490b-96ea-c06ce88d2e52", "indicator--faa8a620-bfb9-4a53-a67d-dffa66951662", "indicator--e22f5243-ac38-4484-b479-cc32afa94fe3", "indicator--0aa07af1-d686-4c62-b94f-80cea37f3113", "indicator--85e4172a-26de-4d79-88c4-0c2412dffb42", "indicator--4d37b116-8f4b-4003-8664-65be89f1e967", "indicator--4668d01a-648a-4a27-81d4-893253137939", "indicator--1819e47c-a307-423a-9845-2af7f4f1aa15", "indicator--615f893e-e4af-46dd-ac6e-9fe1cb4eca12", "indicator--af9fe755-ed1c-4b30-a644-8503880ceadc", "indicator--b944ab50-600c-4949-84c1-87a9c12c8769", "indicator--91f19343-4cd7-4520-8a0b-591d75924004", "indicator--1c4135df-b825-4552-bc29-aa28c781222d", "indicator--5f9f4310-8392-46fa-9a88-a89b80442bd6", "indicator--58358401-e403-4bec-a509-fec5a51415c8", "indicator--4c82ff60-8eab-4959-af4a-0358b3efaa78", "indicator--49a1d934-3e2c-49d0-9e6f-8736a898de74", "indicator--a63bc02a-2249-45dd-83ed-0f885859b69e", "indicator--a8a19a03-47b8-4b2a-b988-f170f8fb3093", "indicator--20af483d-d11d-4287-8676-fe0f541f8133", "indicator--d1f02371-20a6-4305-a739-a51c90a5c420", "indicator--dddbba66-680d-4a29-adcd-bff691f1f6f7", "indicator--7da7c4bd-7f37-4d9f-9ace-b3254e2473c6", "indicator--b7d0b0d1-89a7-4f3d-8e1d-99a8ec1af009", "indicator--97d4b83a-5074-41c8-93e6-69b36ac32157", "indicator--ca876a2b-1b71-4045-aa28-ca35492183c7", "indicator--8a07c4ee-e802-496b-b834-1ad0763ca6b2", "indicator--a979e546-2b53-4ef1-878e-5bb91a8ca14a", "indicator--6ef00bab-c218-469d-8753-f45397fd17e6", "indicator--8cbb25e3-0e4f-46a8-948d-e06c2e1bbff7", "indicator--e6709998-1291-4b58-952f-aeaec9dbb73c", "indicator--04965d84-2551-4d6f-a83d-4db1cc2c6cd4", "indicator--2f3150f4-4491-4186-8cf4-1a090be3d230", "indicator--db41b25b-f42a-4fa5-9d84-d4d987149cd5", "indicator--68664033-ac2e-4ded-b454-9777d982e8a1", "indicator--0197425b-3df3-4d94-93b3-f783cc0e7910", "indicator--5cb8031b-4289-40a6-8dbe-efad2f826a97", "indicator--4d06f590-a747-4e17-b082-fac159fe45e1", "indicator--b461f9ec-6e97-4f6e-86ca-fdb8278e3016", "indicator--963b1b4b-7bfa-4940-bd0d-64ced3a27435", "indicator--7cb1f70e-7ce7-484b-9942-f836fa55a60e", "indicator--8de0d1d5-caa8-4b6a-9487-f3ebce7cff12", "indicator--dd530d0a-1c47-4c20-8890-d8ff375b846d", "indicator--a6d920c2-29aa-4af8-8cdb-881ac887da52", "indicator--6fb9db4a-a3aa-4917-9452-31719bb34944", "indicator--e7f11efa-24c6-482e-bf82-c399912b7f83", "indicator--d81ce88f-668f-4c3f-88fb-79f7134b9e0c", "indicator--3fc05e43-f796-4d50-837b-8e844d8e1f2b", "indicator--ba67d7d2-5605-43ed-ac75-3a4f770a699e", "indicator--dcefcec2-dd6c-4fe2-88e7-b9f2317766c6", "indicator--c40dda4b-6a3d-4e5f-b4ff-3a8666911122", "indicator--39a914a2-a0ef-4404-995e-255ffee25b3f", "indicator--ecab68c0-a74a-4107-a1e5-d4f59657c803", "indicator--2dab65bd-0a76-4e20-b96a-6a5757f2e4f3", "indicator--2b1e0239-5fe7-4685-af09-0c44874aa492", "indicator--0400d1b6-881a-49b4-b255-81cb01175df8", "indicator--20f85820-d6d3-4b4b-b6ac-887ce2c80716", "indicator--fe528d26-1c2a-4759-9bb3-fe81186f7668", "indicator--062f4ca1-6091-4352-95db-8bb416b5c4d6", "indicator--540a1e39-87cd-49b1-90b3-f455da12defa", "indicator--d8000569-e113-43ac-a0f1-1944691e9b0c", "indicator--df2c7d82-c26c-4268-bf55-a983244957ad", "indicator--274aed65-1876-45ee-9bdf-6bcbf576a86f", "indicator--72647c9d-0ec2-471f-8f30-373fd642a819", "indicator--6fd78733-658e-4aa8-be02-4dc6e72ca62e", "indicator--504d7bbc-16e0-41e0-bc41-8d5292311082", "indicator--472a4b7f-3188-42f7-8a5b-1626fe10a7c7", "indicator--3ad2ea28-580e-4180-b043-3dec00f52fa3", "indicator--4dd6bc50-b683-44f4-9a47-9899803c49e0", "indicator--737c96a4-05c1-48c2-9f1f-1c41f09ffb48", "indicator--1f403580-1786-4164-9800-bbe3e1d89965", "indicator--df141132-7462-4dfe-95b3-e4cb83bc3065", "indicator--621119ac-b3d0-48d1-af94-4dbcf8b70222", "indicator--c8ebc29b-a0a6-4625-ba7f-96a100b7b324", "indicator--a1d950ee-af32-4909-b645-d283a6fcfc41", "indicator--ab4c14d6-d9ae-4d32-9708-1e54f504554e", "indicator--8ac187a6-734a-4366-88d3-36cf2777c419", "indicator--ebda8893-82f7-43fe-8677-1dccdab7e2ab", "indicator--db8f9535-4622-4074-8826-33bc253f1b02", "indicator--38b68e9d-a5b8-4400-9245-9807406a820f", "indicator--944c0ca1-4c34-463c-a062-3df84d713e05", "indicator--9116edc0-1de6-4756-94c8-7fae58119200", "indicator--61658d44-5376-476e-bb6d-b819ce5ef860", "indicator--c15d41b6-8d71-4a9c-bf43-83ae407b4557", "indicator--93f78802-1386-4b8c-9d48-f035253280d6", "indicator--1a7d81b7-3900-401b-a069-3775cc748d1b", "indicator--b66166a5-36ba-4255-9bef-3556e1ac8ac1", "indicator--07ca5319-fc31-44df-88ea-2d23e8377bbe", "indicator--7acfefba-9604-4fbb-ae5d-acb3ec5fd698", "indicator--063519ef-69bc-4a06-b50a-f883782e82b7", "indicator--be765ea5-e85e-4fcd-877d-9bfa568f694c", "indicator--41c78a1e-ba3a-4ea1-8a65-d241abf509aa", "indicator--aa2c1a52-4a4f-4b68-856b-350f753b48ee", "indicator--21d99905-c407-45b6-9123-78f306e474b8", "indicator--35b68339-9490-45e3-b3d2-0c6b048ca185", "indicator--56ad128f-c003-46df-8e80-7fa5237ee238", "indicator--f9b31f01-7dfb-489a-89a6-8664a6fbcf71", "indicator--b4fb9669-c277-42ea-aec3-2c3b48512077", "indicator--42e56998-edb2-4dbe-a3cc-890cff1da1f9", "indicator--8ebd628b-fbc7-49fa-b49d-236c8ceed063", "indicator--063eede3-48b4-41cf-88d4-3d9914747c56", "indicator--8d4ec864-6f31-4cdd-addf-bd0c16786275", "indicator--9c76763d-8143-42ce-a68d-aa414ab134c7", "indicator--9242a08f-215e-4eaa-9f5b-1b50678b5071", "indicator--71ec5434-a598-4f6e-a80e-f2460d8e655e", "indicator--c22c1854-016d-49b7-83d0-28dd4af294ad", "indicator--1168cd18-d054-4826-9566-c05a301da04f", "indicator--aec42f0e-0733-4ff0-bb0e-d72a271e5272", "indicator--0f4928ed-396a-4c7c-919a-4064332df41b", "indicator--ff568a83-d2d8-4b39-854c-de7c2e84e9f4", "indicator--c5a3a82c-e2ea-453e-819e-d9790e4cae4f", "indicator--e44bcd21-a461-4df8-b71d-824823533e34", "indicator--ad2d2054-cc86-415c-9206-5721a08365e8", "indicator--2f6a25ed-f638-428d-a46c-ecdfb978771d", "indicator--21bf37ca-32ce-447e-8a2f-b6059ebd9662", "indicator--0710fb7a-351d-4801-b1d5-449b7d17d0c0", "indicator--8b3fde3f-0f71-4636-8c86-84a14d21e5b6", "indicator--92dae7f5-c291-49e5-b986-b3cceda6d539", "indicator--b4c96f7a-8ee1-40a4-8e26-3bc50168a9b7", "indicator--d219f16a-ccb7-4b52-98e9-5393fb94ed31", "indicator--e80abeb5-158e-47e6-8385-653bba92000c", "indicator--44727e73-e96c-4f0f-aae7-ab6ec2681dec", "indicator--8440b68f-413c-4255-8332-908340791a54", "indicator--80581b1f-1cb8-496c-9e01-786243b0e912", "indicator--679579dd-8dcc-45b8-b1e3-e53c297be348", "indicator--bf66895c-cebf-4194-91c4-9480ea3a9b20", "indicator--d8c452b6-afd1-48be-b443-d0cf5d548b8c", "indicator--4c427d4c-533e-4a39-9e82-f309c3502f37", "indicator--7b8cec1a-b807-4637-97d6-015dc72fbec5", "indicator--7d557e01-1ba5-48b5-86f3-81a424caa9ce", "indicator--d8007430-3777-4904-8ff9-f4fc9aefb8ff", "indicator--fe0618f0-fdeb-4509-acc1-b2a5902706c8", "indicator--37d28d74-85d6-4e2b-bc7c-11cd17ad59b6", "indicator--0516675d-542d-4558-bd40-4d2279c55119", "indicator--3e6ea525-0ad6-40c8-a36b-cca3f2045f9f", "indicator--14f0ac4c-4da6-4914-b613-e7cc04541427", "indicator--c2d0bc93-c6a6-455f-aa61-ff24598892c7", "indicator--c07af8e2-6579-43c6-a6ef-6554ea2994a6", "indicator--91335793-f784-42b7-8c10-d26ba4a52d13", "indicator--adbab5e4-8ddf-40fe-adaf-1387146b51f8", "indicator--a6f4fe74-33dd-4d42-9c6e-2d26c85d2999", "indicator--7bd8ebf9-0945-4929-a089-a6265a0d5ab6", "indicator--e28f9642-5d4e-4b96-9251-291a98de52b3", "indicator--a31e2b76-1ef3-4a5f-9094-5bb79a368569", "indicator--0559108f-947b-4805-bc9d-822af80a6244", "indicator--e7b9e0ff-709a-4ee1-b783-0fdd2cfd48b3", "indicator--b555fec0-2eac-49de-956b-7b715101613f", "indicator--d764115d-2681-4b31-a79e-4e694703cd95", "indicator--ae5c354e-70a6-457c-92cb-2a533c07d911", "indicator--00e3dfd1-a138-4b14-8f80-ec7493dd06dd", "indicator--1b1c3fb0-6449-45e7-a14a-0247e3c7af8b", "indicator--4c1a2f75-2e2f-4cfd-9a16-e98092d6e462", "indicator--fdb6a36a-f994-4581-99f8-3a7cbeddbd94", "indicator--b9bf12fe-22d6-4981-956c-9878feafd613", "indicator--a18dac20-5409-4b82-b36a-2a1ab1dd10dd", "indicator--3c7b92fc-a168-401c-a190-f6e4aa8a1e71", "indicator--36a2d4b9-3330-4434-a02b-d5b8233616ff", "indicator--14596c19-d295-4407-8c13-31a2fbe73a85", "indicator--67ae2821-dfd9-44c0-999a-d06474d1c25b", "indicator--9ab11ec0-52cf-404c-b6bd-68ffd09b6f5b", "indicator--cbaacd08-ef77-45c7-b7aa-0e6fb94c57ed", "indicator--24d162ae-5289-4055-aac1-aca4fc8d3236", "indicator--48f3a828-e101-4777-b587-b41de07cbe2f", "indicator--fcb568fd-ab81-4b86-a2b3-8ebd8df2c27e", "indicator--d701ffe4-b867-4d98-b3a3-fc76f076eb10", "indicator--2ee47285-797f-48de-b50f-244ede431c94", "indicator--a6eea521-01fc-4eff-9a35-e6ae56461711", "indicator--75b6a717-acb3-4cd5-a229-a6cc26f84b2a", "indicator--d9f7385f-e926-4bbd-a1a3-2f11ba2a9da3", "indicator--430bdecb-29b3-42b3-b6f8-33f634901db9", "indicator--8a75e9c1-ab22-4b5a-b24c-e616cb98167c", "indicator--f1243cab-8a24-4cf2-a5c3-49d866d7aadf", "indicator--9abfcbba-add1-4603-b58f-e6d5e2a4109e", "indicator--3b3056c7-ff60-499d-ab43-e3a248831ead", "indicator--02f93931-723e-447e-9ee1-0f1edd6c7b82", "indicator--c7bede41-e7a1-4456-8b6a-7d8bf8e86d7c", "indicator--a426e807-6d7b-4d19-aaeb-485643bae8ac", "indicator--e5d57be6-e4b6-4aaf-8ae4-3ee77dbf0e45", "indicator--43c9f491-68f8-45ab-922f-d5f70e58f2a2", "indicator--29820acc-e268-463d-8f4c-ac219d7f9462", "indicator--b84c1d33-1cf4-43df-a608-044c5dd40fb4", "indicator--f569d7f7-d8aa-428c-9c18-df123513b3e3", "indicator--563782a3-b7cd-4e07-b3eb-a235289dbff1", "indicator--cf7dcc4e-7564-4866-98f2-70b4c32948d3", "indicator--9d460bae-076d-4156-9c43-fbc436015ba0", "indicator--5b427584-17f1-46dc-b6e8-84bf3dce8089", "sighting--40888e1b-64df-443b-875b-b4e477482ca3", "sighting--71399b55-7d7b-44a4-b3a1-9bb2dc0851a1", "sighting--60ec24cd-cbd8-4885-a45d-ad815f27ac95", "sighting--0c6a47eb-f1e8-41ad-a28b-9f35c2f86767", "sighting--283e1bb3-a39f-437d-8526-e229edef53a3", "sighting--2882c088-92dd-40b8-b251-348d7e0b2adc", "sighting--1a06891e-ac50-4bfa-bfc1-360d4dcbeb48", "sighting--f2baf3e4-fa28-4c8e-88f8-5aa072aca087", "sighting--9da317a0-615b-4e3c-b70f-6784990aaafd", "sighting--23037d22-62c6-42a4-aa9b-5a199afaf366", "sighting--8ccc0f63-9694-4c51-a971-0c98d742b96d", "sighting--e61f0186-1f1e-4cd6-a01a-95131c48fba4", "sighting--b9cd23a6-0117-42a7-a269-4b1935c540e3", "sighting--e8f885a4-08b2-4cd7-9144-0afdaff03582", "sighting--9e49f378-a9ff-45d1-98b8-3272f385d96b", "sighting--c4d2dfa9-ece7-4d49-b2f2-c26dc7b81a2b", "sighting--a8060ce4-f687-459e-988a-c6439f4ab28a", "sighting--29ad5972-8b3d-4ec6-949e-d657395c37ee", "sighting--49bcd4fa-a3ea-4603-8d53-b310d868cbac", "sighting--689db965-4a33-43a4-9f33-d267dcccd814", "sighting--ad658014-5231-4c89-a64f-4bfd065d1087", "sighting--9e28257c-b085-4391-9121-fb9c8f14dfd2", "sighting--4f47b5d3-bb70-46d6-809e-cd8c7e9ebc4f", "sighting--a306dbea-2285-414f-96cc-2b0497beae44", "sighting--99153f1c-0885-47b0-b1c6-4b5f501188da", "sighting--78983cf8-f376-4b30-8deb-b353b49344fe", "sighting--36693eb1-f2c4-406d-8383-d6206fd54aa7", "sighting--7bafbbeb-28ae-4626-b130-db7bf7d08390", "sighting--4f8a7fae-075d-49d4-8387-5e445ae9702a", "sighting--d81dd002-e04f-47b7-bc44-6ccc2625d2e7", "sighting--35839b8b-813b-476b-8fc9-ca5f13f53df0", "sighting--91075f47-53aa-424d-a216-8e525763f11c", "sighting--b561575e-214c-40f8-9c36-17a6382942e3", "sighting--cf285c55-5a95-4cdd-aae6-822f1ebee483", "sighting--2b98ec65-4042-490c-b3bf-1f03832d5688", "sighting--017fcba3-f110-434c-a421-f930638c164a", "sighting--61b17405-3692-4b76-9951-73f020b88dce", "sighting--58814ae1-8bc7-4f04-9435-94667d89a16a", "sighting--1be9ce82-ed2c-4815-b9e2-9ced7b208b8d", "sighting--b52d9485-bc28-40e4-9a7d-e3d2559ba510", "sighting--cb3f4213-3b6b-4720-9d54-c0ae8f02c11a", "sighting--af1f43a2-fe69-49ad-ad9b-dc5e8ac4e4c5", "sighting--32cf520b-5d5b-47a7-b37c-12d00ce90975", "sighting--43e57bee-61aa-4da8-9082-af2a5104bd84", "sighting--4a1be6cc-10b9-4ef9-8647-151a1489fea1", "sighting--98d495ed-79f3-439c-bf11-472268f1ef8d", "sighting--ec9ba4c9-746e-4919-b82f-a1d0f013e0fc", "sighting--eb8c8263-ae9e-42f9-afce-a4fea8aa7735", "sighting--98ae0f85-0bee-4bca-88b2-fc0cc1afa984", "sighting--3cb90feb-b1a3-4fdf-98b5-a7ad87402e37", "sighting--d6564dbf-3b35-4145-b404-c9c231311e58", "sighting--922a733f-3ea5-4905-a8bf-5adcc8d3e868", "sighting--bc98bff2-6622-4d61-be45-33eee8d4c7cf", "sighting--e9f06299-03b5-49b1-8571-80277bcba751", "sighting--d4671b47-5847-4a10-b019-94409086c368", "sighting--94aa6de0-b3ec-467b-aacc-663c6c0ce082", "sighting--90d5976f-04c1-457d-a352-af64fc2a7565", "sighting--32e1e70e-c3cf-4b30-bf89-bf29ca2432dc", "sighting--3b15bab5-a8bd-4a64-97fe-588067838b5d", "sighting--7160d957-03a0-4692-8316-7e4ad02c77ca", "sighting--58c035d0-24e4-4cea-830b-e07faec8043b", "sighting--4d20aa28-3299-4e3c-b013-66e539c30147", "sighting--fca18761-2656-44c1-b5a0-072b635b7a4c", "sighting--1ec994b0-c615-448c-9859-3a37498b8110", "sighting--d80791e3-eeff-4fed-be52-3e74b3622651", "sighting--0bfaf72d-a486-4014-8317-a0cb9a0b0f1f", "sighting--c90cb89d-1ec4-416f-b76d-58ffbc2a8189", "sighting--931e68d8-a522-4c57-8276-06b13ad76a95", "sighting--cd4b58ca-9fca-46be-98c7-2a2037b65602", "sighting--3ee1d4af-4ec5-4230-b9fe-85d026b73621", "sighting--04e2ffab-bd91-4197-b612-d072e4a37241", "sighting--214526dc-c09c-4107-9018-9ef9b1ee774c", "sighting--7770d972-baee-4c18-b3b9-076845eb2e7f", "sighting--5681c0b9-c5e4-4a17-9dc1-4b01670b8a92", "sighting--eb3ef848-f6ed-4194-99e1-40a29792f63f", "sighting--2636ffaf-b62d-407b-92f9-30d0d493c421", "sighting--d3275c52-d407-4500-bedf-24af58c44379", "sighting--569ce708-a02d-4a7d-bea6-8c9a87d0d117", "sighting--8a541171-fa5f-42b9-94ac-a30d35978437", "sighting--902d033d-bfcf-4de9-bfda-385ab003a576", "sighting--d4d04049-2740-4c72-9132-b5f35241cd9a", "sighting--699a60ad-bc18-40d5-9bb2-aff650799a1e", "sighting--39788e03-f201-44bb-85c3-3e135949511c", "sighting--fc76c5e6-cd33-473f-b946-ae483fd15dce", "sighting--11f278de-cca6-4a5d-89d2-cf673a925017", "sighting--4fc8f09b-a986-4dc5-affb-92394dc7ebdf", "sighting--68ccf686-879f-4283-965e-04162b337d1b", "sighting--8f3fa833-cb39-43df-a699-282ea31da999", "sighting--9897d2ff-ef04-4249-9adf-18c5d60beb17", "sighting--2171f87e-fdba-46d9-9181-07c36c591378", "sighting--0ee3be78-c55f-46f2-adb8-3812250430ee", "sighting--9d149816-74dd-493f-b127-074b8b974bbc", "sighting--1dff7126-462f-4bfd-aee3-f4cd3595a0e6", "sighting--4f267e44-4e1d-4391-a6bf-daf4c016bbf4", "sighting--a21ba247-d4e9-47c2-90b6-e5a3985233a8", "sighting--0096b052-380b-494e-8307-f02a7661a057", "sighting--80939968-46e1-4152-97b4-8ba2b4603284", "sighting--95c44c63-40d4-404b-a1a6-4d3197f6a040", "sighting--7dcc52c8-b756-458e-9c72-a7f1e4effc48", "sighting--d90b31b7-ed3c-459b-8868-881e06c79c31", "sighting--30b7403d-af45-41cf-baa6-e7dab41bdad0", "sighting--d4af27b7-8daa-4e52-8c81-b174ccfa74ea", "sighting--5e114dae-a4f6-434a-b809-492382ebf329", "sighting--1e024cc6-0451-4dc1-9587-80e8ff8e748c", "sighting--2a252aca-09eb-4d9a-8481-0dcecfb3a29e", "sighting--2ce326bb-9f0c-459c-8094-1b9fe4c9182e", "sighting--3c8193e9-6951-4806-a30a-4010f34f492c", "sighting--1c45f879-840e-49a8-94e0-61d3e2094f66", "sighting--915a75cd-5dcc-46f2-8a1b-0d2f3f27ca05", "sighting--c369bb87-d4ad-4802-9f29-324898eebb9c", "sighting--a0b06bab-16ce-48b2-851a-ca19ce83a4de", "sighting--c7c836d7-2a9c-4afe-b598-505cff060f8c", "sighting--473f701b-2974-4894-9b97-34553c2571e9", "sighting--793218e3-0cff-402e-b68a-336af652cbb4", "sighting--f68663c9-d91d-4fb2-862f-e3e0012bb4cc", "sighting--83c82753-ab80-4501-8521-b375937b4904", "sighting--1552b798-1a9b-45b6-980b-90689b7e77af", "sighting--21f62eeb-b0f6-4b80-b886-f68125bdb4a3", "sighting--d2f3d9ec-8f38-45cc-968c-cea7cf446713", "sighting--ad63aaf8-ca82-4ac3-b489-08085e06bba6", "sighting--59395fb4-0916-4dab-9f1e-08e8061d17ec", "sighting--648f2db1-5c9c-4eaf-bdc5-1292e53b2604", "sighting--1e75f2f2-ac8c-4574-9daa-eec98ed0b046", "sighting--fe4a4a62-a664-43df-81ec-8b3556e6f997", "sighting--67bab58b-6cf0-4ad5-986b-50cc3e0bdbc7", "sighting--306ad37b-6c21-403e-9827-5b061e2c85d4", "sighting--ab79f6c9-40dc-4e03-9185-2618588eecf3", "sighting--1e9cbd76-1d28-4e99-a555-8c08ddb1787c", "sighting--3d13c28d-28e4-445a-a5e5-d4f44e4680ff", "sighting--1374b9c9-cc96-4ba5-b801-e74ad047444b", "sighting--27502857-6bff-435a-bfab-e364b5de1ab6", "sighting--30b56ce9-3ca6-42ba-a861-80994e5eecff", "sighting--4fe40f32-045a-48da-b701-270dca1704ed", "sighting--376de0a6-377e-4fde-aab3-b6e05a2a2c9e", "sighting--19f004bb-0d01-474a-b9bb-a3da6862bd7b", "sighting--e32c495d-1011-4830-a460-2aba84389ccd", "sighting--d2114cb6-f311-4d7b-9dce-8792ec8e2667", "sighting--627eec62-e543-4184-b8f1-7aaec9fc59c6", "sighting--dbcd55aa-c57e-4df6-9a73-f3851ba8dbb5", "sighting--97279583-a2fd-44b0-a004-2f90f8c46d68", "sighting--0d791e2a-7bd6-4312-9bac-0f83956120b3", "sighting--1886370f-4b5b-4b94-829d-91c1df4bd904", "sighting--2cf6f8a4-ae14-435c-8da4-0c14d10a2dd9", "sighting--d117ccf6-ccac-4036-9574-1a2208f3b1d7", "sighting--83a104cc-53a1-4560-bdb0-febf4b45a65d", "sighting--b965cffb-1f0f-4ef9-8e1c-60a819484b8c", "sighting--8ae94b1a-2ee0-490d-98b5-1c6ff1b04561", "sighting--4aa3f47c-25d1-4c6a-8130-6b8a545d829a", "sighting--641d0a82-b251-4539-a2ab-04a7c39309eb", "sighting--655edca8-e54c-44fe-a942-95bcc991df6a", "sighting--b05d4f3e-e568-40b1-9f24-51c79ce39c77", "sighting--612a0033-696e-48ab-b2f6-32e16b7848b7", "sighting--0b0d83c9-f155-44f7-a405-fdc2d371c5f2", "sighting--e55cd373-e94b-4d64-94ce-69ab199f4062", "sighting--519a0cd9-4b71-4d80-a07e-3492b5516f51", "sighting--427990b1-efe1-4bf9-bf58-eff0d27bc54f", "sighting--79e2c163-6e07-4271-ac60-f2b1f0286dbc", "sighting--54bc3fca-60ad-4bb4-8082-2c17ef8bd3dc", "sighting--541d5bb4-1b96-4661-9429-e3557d8b0b02", "sighting--7ba1cd49-e90b-4de9-894f-01a92abd4b4e", "sighting--b3b456b9-acd4-4288-b341-765754131369", "sighting--173c7623-9ebc-4769-8fc9-f49dbfab9858", "sighting--dc57c584-8899-45a7-848f-8f08f8feefce", "sighting--57c704b1-e448-4dac-b5ff-732896ea2f42", "sighting--96f035e1-598c-4649-9fe1-f4709abe4491", "sighting--33f0df89-ae4f-4f54-ac88-f1887e72cf38", "sighting--22914c0b-a56d-45fa-b517-44f23fa22845", "sighting--00c8fe3e-99d6-48d3-8747-06428b7586da", "sighting--022351e9-4db8-4b73-9e66-17ab2a5fab8d", "sighting--2f1e9aff-fec0-4bd9-8962-020c13b1d487", "sighting--045a1d8b-6639-4e9e-80d6-df4c6817fa84", "sighting--2bd3da0a-c550-4b9d-a350-e43d199082c6", "sighting--3f8aa30a-c57c-482d-8ed9-18a8a70bb344", "sighting--0322c3c0-2a2a-4de1-ad6c-03982e768dca", "sighting--7163cd33-c865-4ac2-9b62-97cc91a88d66", "sighting--709b0c10-4c02-49b9-80d9-2992d704657d", "sighting--9b53d544-6aa1-4543-8e81-eddd4fa75841", "sighting--ce3e2e9e-53a0-49b7-9a76-0070705aae07", "sighting--5e50280c-29e9-442b-bac3-6a10a5463ca7", "sighting--10c67598-8009-4c6b-8522-f5ec2df61f65", "sighting--00f46c73-92cb-41c0-a991-47a9ab839570", "sighting--796793bd-12b6-4a40-ad63-ae6c1d0f0e0b", "sighting--9d40773f-235d-46f2-aa3a-6cda5076e435", "sighting--5caeab39-7c5f-470b-8890-1758214a130e", "sighting--ca17381b-57e5-4c6e-b72e-50a583d8d9fb", "sighting--0e0bc0f7-d7cc-4dac-aa17-688c4d806548", "sighting--abf9c60f-8096-4bae-a827-196a0ce526a9", "sighting--50989884-5c36-4f2a-87dc-fd668c99cf28", "sighting--85cc1a64-f6b5-4bf9-afdd-e743b44c2a8f", "sighting--f95f7467-9ded-4933-8418-a200f936b9bd", "sighting--0e9115b4-f6a2-488a-a748-bec161bf4bcf", "sighting--12f40639-0efb-4ff4-8b38-66f67e46801a", "sighting--34bad2f0-d318-49c9-af14-77ed50cc1107", "sighting--ff03ac1f-c0e3-465a-8668-569e41e564b5", "sighting--c4a5740d-40f7-47fe-8d61-5840772d6a82", "sighting--f574fb0c-6a4e-4254-9086-a8aa4ab49df9", "sighting--3f64e24f-f228-4ebf-bda0-17c46275a48e", "sighting--9d5022ae-5e8b-4283-a6cc-58d136f90584", "sighting--e82a24ec-83a1-4a40-b70c-f9e04253e11d", "sighting--ab4d8176-c98d-454f-bec0-b5efa41ac932", "sighting--0c2b3f19-da7f-4384-9e75-c7e666239133", "sighting--1fec37a9-1b7e-411d-8891-7dfbcac4395f", "sighting--3b478b2f-3cb5-4132-b848-3f2a21ed4e33", "sighting--39fd5aa9-942e-4a0b-be0e-6c29ab7f2926", "sighting--41d12551-1476-4f7d-aa05-be8b3bb3c1e7", "sighting--b7ed168f-b0ec-4fcf-8344-ca6c86985f18", "sighting--9b9e873c-1a0e-4f7f-8408-36e2508dc848", "sighting--4125f9f4-b129-461a-a2f8-02a0a5f2831a", "sighting--6ae6627c-7715-4b64-8735-158fcc1824f7", "sighting--7a8c1fe6-2328-4e9e-9326-01536ce3f511", "sighting--5c77e4d9-de33-4113-8668-7bc6eb36ccd5", "sighting--84a55d06-c83f-401b-b3dc-e074fe672f62", "sighting--c28e6e36-9d53-4741-ac72-f46cc3296def", "sighting--50a2c2d4-9947-4a76-8db6-11d28cb0c536", "sighting--e03d804d-8d4c-4572-91f2-1c33e0231413", "sighting--c38731ed-3b4a-462c-9d68-d01689fa69d3", "sighting--c81cd5ec-8dd9-48b5-895a-c26d0215d97a", "sighting--6a164a53-ba27-4049-89ac-5f3e68bcd89d", "sighting--b765dc94-6b72-4a2f-97bd-b5f48a970113", "sighting--52fd2af2-74de-4eb7-8bce-c6487b03af2b", "sighting--1ea92e81-3a98-4681-bb7e-60da589d516e", "sighting--8e7491ba-907b-421f-a2ad-b29d06bb3684", "sighting--c7e8fd30-9cb8-44e5-a1c3-f1ec5b403a96", "sighting--43b7e534-0a0a-4c97-bd7f-362c1e12d5f6", "sighting--d0bec0ca-2835-4e63-a5ce-a04eea097dd6", "sighting--dee24bd6-2c56-4bc6-a8ad-35ba5d3fe506", "sighting--07d96801-437d-4022-ab14-0577e3e9bb76", "sighting--2064ec43-d862-428b-86fa-af27ba17d9ae", "sighting--24294853-51c7-46b8-b423-86f594ebb2e3", "sighting--6b83d45d-2acd-4fe8-a88d-d49125568ee5", "sighting--220ee808-129d-467b-ab50-eaecb0c005c1", "sighting--089a39aa-41cf-4dff-9ea5-f779c653f62a", "sighting--9cb884e5-6bd7-4b88-b153-d4b359f0c537", "sighting--d4a8552f-a21e-4c4e-a52d-b8774f2fc492", "sighting--68237ee2-7da2-4f45-80f2-b1282985e27a", "sighting--6d9468ac-a7ec-4702-9661-7f732f027cac", "sighting--3baa032c-66b6-45d8-933a-e2211ff19f3d", "sighting--9bce1735-6bc8-425e-b16b-12e030988767", "sighting--746c7f30-078c-4cf8-9c60-e12ddd74c2ed", "sighting--b48a2b8d-0246-49e6-8024-61988e5b73c6", "sighting--498f6202-3863-47e6-9c44-efb89a72cf8e", "sighting--0302571b-8dc6-4a60-8da1-49d3c803353c", "sighting--764e3b8a-8ebe-4754-9492-37de66e45352", "sighting--d7736950-53f2-46b1-ab76-0092cda5238c", "sighting--81c64e55-4f10-46eb-b73e-f020579c1a0c", "sighting--c0a51837-414e-4a13-bcb7-1f217aa3956b", "sighting--a81dc7cd-583b-436e-917f-72a02cc4ca00", "sighting--6cb22c96-4ae2-43bc-9fd9-2da68a7d7d3c", "sighting--2e227b1a-afac-43bb-8be2-3deac49ee43b", "sighting--e2a6571f-c638-4da6-a76c-93ae6f9609f4", "sighting--7d55857f-db06-4d5e-9853-7fc6f9f0533d", "sighting--1f2c6d19-6274-42f6-af6d-db3139201f68", "sighting--e515ddac-4ec3-4c81-b653-417ed682daea", "sighting--64a763f2-429c-4b24-9b1b-a19e070c2d20", "sighting--08c2285d-3b89-46a0-b8ae-e1cd35caefef", "sighting--d9e2c563-f16d-4af6-b60b-8bd716ee7a56", "sighting--3fab4e8d-6fbc-4d90-8658-de401079627e", "sighting--ef9eb72d-64b2-416b-9ec2-de8258113a1b", "sighting--2e807114-0868-429c-bdd5-24052df8e481", "sighting--cd8cf8f3-1167-4a88-8e75-4641a1264025", "sighting--0c215f78-6bd8-4af5-9ee9-d760e7cf88fd", "sighting--12f11d48-f24e-48af-82e0-71c8d46da15f", "sighting--46e9ff10-bbae-4676-a3e0-e42824d46bdb", "sighting--2bcb5c91-95d5-4bb7-b74a-2ea806b5244b", "sighting--be852fd9-0e98-4975-abdf-00078b2f119d", "sighting--8b6c9490-c86d-411a-b0f2-cc7bf92157e9", "sighting--87bd3f04-1a82-460c-83f1-c40ce9621594", "sighting--e5de6377-bc39-4998-b0c1-e91994696cd8", "sighting--fbd0f73c-b20d-4a9c-9ef2-d12c21c3f772", "sighting--55368bcd-1051-4776-a2ae-46fe9c65d66e", "sighting--532f3b45-1545-4077-b5fd-698b0074ad8b", "sighting--3910e730-3361-4a9d-95d0-dad02b652cab", "sighting--51756278-437d-4493-a6e1-2b24ce3c7683", "sighting--6b1ad2f6-0340-479b-a194-097f3c261bdf", "sighting--3471526f-7e9f-47f3-99e8-136749ea1f2a", "sighting--b8b88ac2-d165-4584-8b60-6d077592a389", "sighting--ed6edf12-749b-4415-a369-303c6ac7f9f1", "sighting--818cc410-5ea9-46b6-9777-a3e1864faeca", "sighting--cccf549b-04bb-465e-b2c5-d93eba5af9f1", "sighting--a22014dd-946a-4b2d-b195-4b455e64a3a4", "sighting--4986c32e-3ab7-4a04-90a0-47867d2e14d0", "sighting--3ddde932-31a6-443d-b103-97dd67383de3", "sighting--280baddb-4087-4a4e-a286-78dac2d4d267", "sighting--b3a91ef8-b035-4a38-8411-64a5470015b7", "sighting--c07dbaea-bfe0-4d3a-97a3-0b12b0836a4e", "sighting--d48c1b2b-ac2f-468b-8b2f-d2a672fe75b3", "sighting--183b05bb-df4f-4487-90fe-8793907de018", "sighting--2d49e656-0e33-4645-91ab-b05ca45cf9e0", "sighting--73db7daf-4c8d-49d8-ab80-2e35e335a184", "sighting--29d77e8e-10d7-480d-9342-6d601b723a1b", "sighting--4adc5958-6db8-43d2-ac15-42dbc9487796", "sighting--e183d63c-c6dd-49b1-b95a-0357c6b7221e", "sighting--07c9a393-b726-4564-88a5-8945f67aad3b", "sighting--1fe782fd-70ef-4aa5-af01-bdcd4b1409bc", "sighting--0af842aa-4b81-4a9a-bb60-e744383196e3", "sighting--7920e2c9-98f1-4ce6-b8e4-bc0d97aac395", "sighting--8e56ff62-eadb-4bc9-a55a-1e3fbeed0d40", "sighting--bdcc57e7-b83d-4f2b-862d-a2bd62ccee00", "sighting--f3de8a34-5143-4ad9-a297-5cc7b37a66ef", "sighting--69f99866-25f1-45aa-9795-10f5b1c93e31", "sighting--b7612570-b004-4288-8337-702d8d2f9c65", "sighting--118ef578-ccab-4d47-b047-2e17ee56c447", "sighting--40ea11a2-cc5f-41ac-a00a-87cb43d864ab", "sighting--24558805-0bf2-4602-816e-56f91dbbcb97", "sighting--7f91aba1-c835-430c-851c-581ba422e6d6", "sighting--8bde20f1-cc02-423f-bb7e-0eeeaf55511c", "sighting--bbc0d3fa-53cf-4b71-9377-83e4fae10f0a", "sighting--62d22360-3fc0-47f9-bf5e-2353d32c148d", "sighting--2592ef64-372f-4bf7-aa91-006dca5bce82", "sighting--4f91d991-129e-4563-9c9f-0563eb780db3", "sighting--28718930-7f68-4fd1-878a-b9320fc29b49", "sighting--abae780f-ae52-4975-b4f4-f4a520ee5f37", "sighting--48072590-d5ab-408f-8335-18fc2ee3025f", "sighting--77e01c91-b319-4e98-9f75-6b57a39e0586", "sighting--fe1b4e6d-a981-4e1f-80a0-ed2733964ad2", "sighting--da7eb586-4977-47be-b8c0-363157619502", "sighting--e4f58123-fe2e-4d34-8546-f60a53e29319", "sighting--5ff15af7-f8f0-4542-945a-35ed04248b1d", "sighting--48ad19f1-b450-408e-9090-cddd48c48728", "sighting--3b239e86-9586-4bef-9dd1-829c3a0821fd", "sighting--2d3e66d5-de86-4b79-8e35-6e848e28f87e", "sighting--be0b7eb9-6041-4658-8d86-785a23d1e941", "sighting--cce7dbc5-7f7b-4119-a543-d27dd1e3c823", "sighting--d786cba8-8b69-422a-b867-bc77cd7756f6", "sighting--0b0d3b2e-26f9-4e58-96e9-3c79f51b994b", "sighting--aeb64fb2-493f-46e4-9433-515b337ab0eb", "sighting--06fdb445-2869-4241-9691-bf8109d08906", "sighting--4e7947f9-0311-4042-a0fa-5f4f82ac5ab2", "sighting--75bef770-1d8e-4ae6-889a-edb7023b8d13", "sighting--e480eb51-6117-4753-9666-6f2a29038cfe", "sighting--49f5fcf1-94a7-407c-83e1-f210e6f3a496", "sighting--fb0ede9a-2e8e-4415-83aa-8fd8005b2421", "sighting--c236e680-0d39-477f-adb1-538a9e8442d7", "sighting--9d8145ed-a69f-44d4-b2cc-e1f15ab09ad1", "sighting--d269bff8-4ee7-4559-9c3b-4c9bbccf8c85", "sighting--e17dddd6-882a-4a29-bae9-cb786f567974", "sighting--9259128d-ccca-4bb8-a5dd-1964e59a5ff1", "sighting--8ed76016-7875-41fa-8ef6-3b4b99f59500", "sighting--47bcaa72-279d-435d-bb3e-a74f523e0b73", "sighting--4c0f9999-e377-4ad9-a96f-88a7993fa8da", "sighting--1e472160-3258-4e47-a4bd-90e1260462e9", "sighting--998c769e-b21c-4d97-8fc4-6e37cde6ac53", "sighting--0f819082-f12d-4acc-8790-d72e90c8f2ca", "sighting--89844e64-bece-42b8-be0b-61233f8b6125", "sighting--6bcab2ae-33da-4c29-b73d-3cd9f122acf7", "sighting--c8df181d-4aa5-470d-84e7-dea7f6182b0c", "sighting--73fe96f5-dc2c-40ee-b9b7-3ec316f24686", "sighting--c3fdc17b-29af-4ddb-8713-5c7d4a633500", "sighting--1dfabccb-a1c9-48ee-b347-e476f310ebd0", "sighting--3c5cfa1b-3f3d-442a-b357-3f515eabc210", "sighting--8a5f448a-2b7e-41fa-ba13-d5a18ced4110", "sighting--87077bfa-0554-4c65-8b49-4eb8dd5d757c", "sighting--766e3c5b-eba2-41f1-8d03-99d66fecf4c6", "sighting--c6f6031d-85aa-4144-ba4b-827ba60830a4", "sighting--74745dbe-e9f4-4d86-ae70-90891e5b3c51", "sighting--93652235-eccb-4966-83e5-106de5da62c1", "sighting--b8a43a2c-f8dc-4f46-b787-c6c3bd0d0bfc", "sighting--16b4e485-7ef1-4743-a7fa-1755ca1bae4d", "sighting--a6261dba-a37f-4325-8897-c8e009f29a0d", "sighting--68e1e6bc-71af-404f-9443-d53d70e86d8d", "sighting--cbc3453a-eec1-4168-b091-a051d8a5e9c3", "sighting--65498ca6-4368-480e-aa2a-f8703d67a247", "sighting--77fc9a98-a0be-4033-b377-5744d54884d4", "sighting--d51453e7-c185-4f4a-8eda-5a48c06851b5", "sighting--c10675df-93cd-4294-b8e9-9b8343a1ce54", "sighting--da66bcc2-3eed-4957-b278-fdaacf38b143", "sighting--159bb185-24ef-4d92-8f2a-70318a169dae", "sighting--4e5ee014-0ae3-4cf2-ac38-955e20a866f6", "sighting--d3d046f0-e46f-4aaf-9a24-0b89545e8549", "sighting--768daaf3-d97a-41d4-9e9c-21270583eca9", "sighting--195db8a4-cd56-4204-8f2f-7d6b9255e8b6", "sighting--cb517d44-1b5a-44f2-9af4-868da8b95f1a", "sighting--7ba66d90-250f-432f-bfc8-f7c2e59d84d1", "sighting--3cbf6294-2a1c-4c15-9547-4c6a1b3afe60", "sighting--a19b4314-caea-4994-8667-ca18dc202439", "sighting--3e4a7047-1668-4e69-b95f-66325bcde1f2", "sighting--7fc4729e-b838-43b2-b430-58b17abb4254", "sighting--2da06ab6-909b-483b-8d8c-7fb9f569aa10", "sighting--a0c36055-6a7e-4026-adb9-3a476c2483d9", "sighting--a9109bf8-65c5-4a77-ac8c-70ccdc357e00", "sighting--36a9fd51-8276-4d05-ba23-ae7e0a6ed7ae", "sighting--1a6676a8-24ec-49bf-9227-8706493f67cf", "sighting--6c7dcfb2-c0e2-45b1-9113-ba18a9e68274", "sighting--17e8c597-6e54-41f2-9dad-4791529028f0", "sighting--714a4120-3ac8-472f-9691-2319d9bc9bdc", "sighting--94c106ef-ad6b-4679-9b29-adcc2ef0888e", "sighting--8781887f-a392-4030-8535-17d09908d7ea", "sighting--aa770b09-025b-462a-ab36-1c1a806ee329", "sighting--1db846a1-3561-4d2f-a60b-d3fbadccc058", "sighting--a92df9f8-10e6-42b4-bdde-ab8439ab000e", "sighting--1214e1e1-9595-435d-8bae-ff91955099ff", "sighting--82e2c6a7-4d08-48e6-9947-3238c1d9906d", "sighting--91f980a2-9829-460a-8666-b43b6f0b3a05", "sighting--0cc15b77-d231-4001-8f40-56a431fb60f5", "sighting--baa3cf0d-1012-43fa-b1fb-a59e77c9a0f2", "sighting--d329cb80-0914-44b0-b223-946546639344", "sighting--8fdb326c-4094-4d6f-90b5-5f498b5e2db1", "sighting--b03ee4ea-68fe-4e93-a092-dba61d24b856", "sighting--7079cefe-a5d1-41c4-a179-435780487fa9", "sighting--dc76f607-436b-4fe7-ba57-de10b7ad4b65", "sighting--785ab96b-9204-4eb9-ba6e-b61bb4f3ead6", "sighting--ada05d04-cddb-4fe6-b60d-a64b42f0499b", "sighting--d7dcaf86-e041-445d-9372-7c5fa05dba66", "sighting--35de9a36-44f4-48d9-a2f4-708e276782c8", "sighting--9a093a23-b84b-4f6b-b731-d1c39eb55185", "sighting--28366d9a-afab-415c-87d0-02ccd5ab14c8", "sighting--620aae2b-9df7-4528-8014-5af337bce59a", "sighting--8b3ec87c-c821-4d08-ab62-50fc3e64e864", "sighting--e686d323-69fe-41f7-9d68-c051bd1fcc1c", "sighting--0f8d793c-febf-406b-910c-8924003750d4", "sighting--b74a2330-13f4-45cd-b6f4-861f6d32721a", "sighting--df01fd29-a5ab-463e-95d3-9abe8b62353d", "sighting--7ccc8430-c7fc-415c-9c88-463b13dd39fb", "sighting--378105f9-d60a-48d7-af73-e5c1947114d1", "sighting--33125c2d-3816-42a2-861d-e18391c00a5a", "sighting--cd54bfa6-8c0a-4efc-b1e5-0d9cc2349619", "sighting--18216599-ed63-4e47-b5fa-9d8cb57be7a4", "sighting--b310d393-6799-437a-9752-da82ae6b5473", "sighting--3e23f81b-286e-45f7-aa75-bbe70c4e8701", "sighting--18228977-e1e0-4054-b7d5-a66e81a68e06", "sighting--79f629e3-1b05-49f9-9e29-89d5fde8d96a", "sighting--08777677-cfa0-48c5-88b4-56176a140f06", "sighting--9f412b50-751d-4c15-8400-843cb7265a7f", "sighting--4b84184b-5646-4a5c-989d-1aa7a1590223", "sighting--9793b538-cc6f-4476-a14d-de0c2adafa8e", "sighting--f8c3663d-8087-447d-b522-e574d4482fbf", "sighting--06e85d8b-f43a-41b7-8035-b7953b7e8558", "sighting--2d4eabd9-7dd6-425e-be37-844e8c6ccd84", "sighting--5869f6e7-5b84-4974-87c7-cd39438c3721", "sighting--2e2ca87b-643e-4d25-9850-ba47299bab10", "sighting--ec443c80-2d10-4c10-a582-0ba0da3482f6", "sighting--0e250d67-e04d-432b-a538-56418af5513d", "sighting--b37d622d-301e-45be-b937-7fade9a373e9", "sighting--ac7a33d1-b168-4fd0-bc71-d5f22f0c6fab", "sighting--29f3ec69-f090-46bd-9f1d-52364f7286f4", "sighting--c9c07f5f-0409-4980-afb0-442e2803efca", "sighting--92da3da3-fb36-4e65-8ab6-e4f2f368af8c", "sighting--3b92980e-da33-4e4e-8716-6c14a9ae448b", "sighting--83c2fdd6-2ce7-451b-89e8-b003a6cc3630", "sighting--4c35334f-6cfa-4e4a-a441-4b3846914e52", "sighting--210a2718-d2b7-4eaf-ad19-ba02fb3de9cd", "sighting--02377a1e-dbe9-45b0-8441-3e2e4c88e8cd", "sighting--bdbd3e99-fcee-4898-8806-eabbbb36ae57", "sighting--2859402a-1941-4651-9b15-9ad550081a43", "sighting--ba7520ab-33d6-49ac-823e-7a508b036b9b", "sighting--86340920-9ddf-40ab-8fb8-e1aacb308690", "sighting--88d562b1-a359-4c03-a880-2d5eb12b791d", "sighting--0d377bd1-a1d3-4b52-8bb6-ef433840447d", "sighting--45527fbe-3c00-4418-9705-0b37cca04dfd", "sighting--027b76bd-398c-4e4c-9612-76be2811ca3d", "sighting--f1d3b7ce-198a-463a-84bc-4da7c32a24d7", "sighting--984d8a0b-da2a-43a5-adad-7d318e50e892", "sighting--408b2225-439e-484e-86a7-ef0e842234d6", "sighting--01f084c4-50be-49a8-9c49-86fbfbba6a16", "sighting--4d7b111e-9e7b-4147-83ed-48f3afffcc2b", "sighting--67744916-72d6-428c-8fdf-472a2b4a809f", "sighting--26f86c2b-c653-4ba6-9e4f-1adde07c23ab", "sighting--b05c8960-3ec1-4b79-98b9-cc5a0250e526", "sighting--3371d9d9-6ba1-449a-9fb0-ee3689548291", "sighting--999f6a4a-48ac-4084-8b8e-5cd28b7146e8", "sighting--aece5838-bfe7-4954-bdc7-5b25062bf554", "sighting--09048f69-1fe1-4e7f-bb07-7c1755ef5d09", "sighting--3b2d7a87-369a-498b-ac12-f363072b2253", "sighting--58c60b81-f062-48ff-8f2a-fd2d04649f35", "sighting--31a573d2-ced8-488a-9212-7befa31c754f", "sighting--bc3fd8c5-2500-458f-95b9-51431ba26558", "sighting--2237766d-b792-466d-957e-5dbf57b54b7b", "sighting--8437b5c0-f66a-4e86-b432-c7abed8f8017", "sighting--910bf20d-2516-4d47-9493-22814850c576", "sighting--4dbe7ba9-a5b5-443d-997c-85aa3e9c2154", "sighting--d94530e2-c2f5-491f-b30b-c3ebe4665561", "sighting--5d33fc06-08ae-4f2f-a8ce-26afde20c234", "sighting--f552a80c-a81b-4286-83f7-6f5736f8619e", "sighting--b1729f3e-4169-4827-b5d0-f78430ba5e2d", "sighting--107d65e3-fddd-463c-91e6-7bdf2de65f3f", "sighting--4ff2851e-d1c8-4097-b7a9-0a3754fa8326", "sighting--3c7c9d16-351e-4d04-9420-f0a4022fb28d", "sighting--8b4021ee-8772-4fb6-b957-a12a415c1938", "sighting--1f83c16a-787e-4966-9a11-b411f014db15", "sighting--476154be-64d5-4cb5-afa5-30903e2fd1fd", "sighting--aedb0470-0995-4db3-a470-4f479b95194f", "sighting--c7045b07-7b44-4376-bae2-67177e87640b", "sighting--9a37ade2-c158-4c79-9d2d-91f6f4008ca1", "sighting--b90de88e-007b-4720-bd93-70c8c2d3ffb6", "sighting--24857fc9-aad9-4110-8c91-6b2f28194037", "sighting--f3a68989-00a1-4830-b69a-5b51ac2d7cc5", "sighting--4009693c-30b5-43af-8423-ffc3b84cd6f1", "sighting--e7545bf9-8996-4d6f-be85-31cad24c7047", "sighting--f0772fc9-f7b1-4965-9733-5b146d63b0c6", "sighting--b3fa6ec7-a023-4c1a-8fcb-f71f7ca9607a", "sighting--81141f18-efbd-4448-a331-d85628556fb7", "sighting--df51aa8a-377a-4691-be86-1ee2ff9fac2e", "sighting--f745b2c9-fe21-443e-a3d4-1a91a5066140", "sighting--9e97b685-bbd4-46bd-be73-2c36b429406d", "sighting--ea16b348-221a-4ee9-bffb-27e213cd3adf", "sighting--823df13d-03f6-4eab-b89b-dca73a18a147", "sighting--75511009-2519-4c4b-84b2-598a5cb402bc", "sighting--336535fd-7203-4cc2-9a21-c9ad970a9290", "sighting--0a776fbb-33a2-45aa-816a-aaa1019eaf6c", "sighting--f571fc28-2101-4b9d-8653-28ae8bc285fc", "sighting--ae2f3d91-cf09-4ab8-8801-0ef85f11e348", "sighting--3f3eb51e-06ea-46e2-942b-1203ea4bc4fd", "sighting--8673ce0e-75ce-4760-a8db-26149f785f69", "sighting--aeb39977-cc0f-434b-b8aa-324b2ec8b042", "sighting--e6adb4ee-41f0-4efb-9274-4b4da308f144", "sighting--29a0c6e0-c04f-48a1-9564-17fba66e17a6", "sighting--db6d0f91-d5eb-4d0b-a8b7-7ecfe1d5c0fd", "sighting--f6ab5364-9ee9-4ed3-8977-2d12e3d96d93", "sighting--5d1564a3-a000-4958-b6d0-31191fd75d6d", "sighting--9751c147-c422-42e7-a583-15b97d732d11", "sighting--422c3e8b-9948-4e47-8399-4d7f691e1816", "sighting--299ee869-f8c6-4737-b832-b70c650d1f43", "sighting--bf199158-d054-4c93-bc7d-17831ca47fb8", "sighting--bf1d08f4-1c3d-4449-aff6-9f66a37fd3f3", "sighting--9627dd1b-4cee-49fc-8c65-5f7641119438", "sighting--5a1c3404-3ba1-42e2-81a5-4d12b7922f74", "sighting--48139c9f-a33b-485a-b243-82e18ecdcdd7", "sighting--b71fc623-5dce-4eea-b340-6758d672a0b7", "sighting--a07fa734-0cfb-446c-beb0-da1a8b34e9ba", "sighting--5d69350b-4515-482d-824a-6307befa5ee7", "sighting--ad85be38-bcdc-499e-b481-78960e439e87", "sighting--b4dad419-d428-4ea3-9b5a-c4c5047be8c7", "sighting--91b85b83-1833-46f5-8d40-536664ad5240", "sighting--90f2def2-3c3e-49f0-b396-df8264bef918", "sighting--eb957b23-3bf5-42f0-b5ca-68cde4021f68", "sighting--fadc767d-49eb-4ab8-9557-d1cd315fde28", "sighting--640d625e-29e8-47ac-9b9d-1e8b3bf73b37", "sighting--c3854c01-f615-4871-aaf9-92752694ddbb", "sighting--70e9213c-a988-4139-a874-d08d3a7180d9", "sighting--ce5ae661-42e3-43ed-b5c3-fb8e154c5338", "sighting--b472a841-5df2-40d8-87ae-bc05d482500d", "sighting--e6237bd8-5462-46d5-8484-cdbf5c0dcd9d", "sighting--dd8956f0-2858-433a-8104-e93cb18a45bb", "sighting--24ef8cdc-4183-436b-a4b4-3982c8d70a1a", "sighting--976c02d8-df30-4c5c-a8ec-f5d21ede4c33", "sighting--bc6a6a37-3b7a-4dff-8368-735083f3e25c", "sighting--0639a155-2b97-412f-a1c8-448cc7b74c4b", "sighting--c463afe7-e68c-40a5-b47e-8bcc848ccea3", "sighting--8f4f3a0e-9437-46ac-b7bb-ae3565924970", "sighting--cfb564a9-570b-4638-a4d6-30510079e84a", "sighting--0b98d87b-48ec-4ca3-93cd-d56812967c73", "sighting--80613c6f-f4ae-49b3-8120-d58eb2f8b027", "sighting--cad761ec-e6ed-4ca6-9cdb-fce48aa04207", "sighting--5cfa84c6-69ed-4f88-a69c-d8657db748cb", "sighting--d1720470-6cb7-4099-abe0-556ff1f96e43", "sighting--37720547-2945-43e3-a2b2-4f2933549878", "sighting--28eb7c03-7f3d-4c9c-ae31-e745acc9c6b7", "sighting--a69cdf0c-760e-45a1-a61e-8c4db653ae34", "sighting--7a7c0d91-2068-4cdb-af15-1410620caab0", "sighting--acc3078c-912b-43ea-972f-bb5be3bc9e31", "sighting--9c97b7c0-2eab-4d01-b537-0bc62dffc7db", "sighting--676d62d8-0636-436d-8867-71797e688f4f", "sighting--5bf57e35-ff28-4054-9cd8-f8439f646ef0", "sighting--70b3b934-137c-4495-bce1-413b6c732aac", "sighting--dc5aa848-4a66-4974-9c94-54d0be30fcf2", "sighting--96e6d0c4-84cc-4ec0-a265-5dbaaf99d9f4", "sighting--7e59bd17-3fc4-4f92-a607-ce5eb2193f93", "sighting--f20c19c1-17e8-4f31-90a6-45faf69d96c5", "sighting--762d42fb-0305-47eb-b030-644d753800c3", "sighting--5d58ac8a-5d99-4045-afcb-7a2785d15bc8", "sighting--06d97c50-3669-4241-83d1-087e66e4dd54", "sighting--09936c8a-bae6-4798-bea2-f121f1780b97", "sighting--fece5841-ff72-422e-9a3c-03958d2d5f09", "sighting--724a1317-431b-4937-be8c-9c49c3c94080", "sighting--4a96d353-0b55-4c3a-9ceb-377c19ec29c2", "sighting--abff5ed1-c880-457b-97a5-91006174757e", "sighting--db6c86ee-d768-4ee9-9c25-8bff28c36f05", "sighting--a650f2d3-39a4-4293-a71e-ae1921005e74", "sighting--47f63f94-e9ae-4f18-830c-017865365cde", "sighting--78a722fd-36ae-4412-b2e0-c215cdb86d19", "sighting--4b462603-4df5-45fe-9c7e-49294fab0189", "sighting--04ac6f5b-c1ad-427c-93cd-330e43188426", "sighting--6d6afd46-dc62-464c-9ed6-2c2b51216863", "sighting--5e41577e-807c-4a0c-92bc-2c82f5eb7d7a", "sighting--04764ab8-e103-4d91-907d-3de0917f4b63", "sighting--e3ccfa0a-2a17-4beb-ac63-9541a8c45324", "sighting--e7a51e1a-9f47-433a-9b66-7085c98b5f91", "sighting--89152fb4-cf45-400c-9cb9-9955ab757365", "sighting--ffb1b4f3-91ba-4b80-84b2-3b3440e6ecd3", "sighting--1efba006-324f-4d94-9bbf-d3c6f7b83647", "sighting--019f413b-0a7d-46d1-a615-bb6ebd1b20c7", "sighting--9c267b30-9fba-43e3-8631-bd04c58c8b12", "sighting--6f172a28-c4be-4665-8b37-502fa0936afa", "sighting--4ef88c1c-0a3f-4456-ab56-e564db1a4cd5", "sighting--a571499e-ccb6-4ef8-bc1f-d5b552c63ba9", "sighting--527edcf9-8d40-483b-8ed0-e828a8fd229f", "sighting--81088cf3-8bf6-49c3-a267-11fc632f4831", "sighting--7577b5ed-8eed-4f6d-b125-0fcffb230331", "sighting--030bafa6-f00b-4af0-9cfa-e5c3d2ebb6dc", "sighting--f52acce7-f641-45c7-b9b1-0d3fb00b35c5", "sighting--efe96250-906a-41bd-98cd-478b687a09dc", "sighting--56edd283-3554-49bf-a40b-e4d4ab65f6fc", "sighting--2bf949dd-6382-4b70-b2da-d1ebd43978c0", "sighting--f0130ba7-c8e1-4e1c-94c4-7be1d66493ac", "sighting--21e5e4db-8639-4aca-8933-a7caabd43cee", "sighting--b8a95ae4-37f4-4d67-9f82-e78c34457c6b", "sighting--0d750228-7257-42a0-bbdb-c4eb1c7b09e2", "sighting--4caa6a70-4f54-4809-acf7-2104ade25e5a", "sighting--adbd506c-2df4-4e35-9b24-d867494ce3d0", "sighting--d7490b96-c953-41ed-a455-9a96d27bae38", "sighting--624d438b-1017-4eb1-a793-453321250376", "sighting--ed2a0513-b0ba-4a59-9876-c6c139e23c62", "sighting--5473553d-fc6f-4bc8-8b9b-7eb17559a041", "sighting--28a6da77-2ee4-4cf4-a7ef-f63398726a2d", "sighting--3795f3fb-fec8-4e3b-9210-79498c4fffa4", "sighting--d06f0316-fd8f-412a-9e1e-80d4a5ad3417", "sighting--c2e1dc34-19c3-43a7-947c-6a64ced2c516", "sighting--fc40cb7f-ffc7-4c8d-916c-b8cb240d6d27", "sighting--b920421c-e4c4-4c4e-9fa6-d9301e09658f", "sighting--4bcb44e3-da94-45c2-a21d-d691b01b246d", "sighting--f6d3a75c-dce1-4c06-bbed-826f7f2d607e", "sighting--c30c9760-4621-411b-8392-0610307a404b", "sighting--50b60860-78d8-49c2-b681-44cd2cd043aa", "sighting--dd76f2ca-c400-4005-8247-7a329e58fef2", "sighting--aeba586a-fc4f-4eea-872b-99acb6d8af41", "sighting--9c5760ee-23c8-4c0a-8237-22ccb9aec2b1", "sighting--88d832e9-0f17-4986-abe3-d0f898931480", "sighting--9bfe0772-6768-4422-8d26-2db12c26f18f", "sighting--a47b87b6-1087-4ad1-ba85-85a537dc9762", "sighting--bfa2cd5b-a157-49fd-9cfb-9554ad2bd1c6", "sighting--274501a3-d9a2-4edf-b631-3b6cb38a34cd", "sighting--ad077c50-5971-4c72-83e2-2f89ed4c5b6a", "sighting--1bd7be98-2627-4767-827a-c0aa8a1fd8a0", "sighting--45a98916-c4cc-4268-b932-8b6a07e1fcd7", "sighting--2a35a57d-0a68-4cfb-9483-96aac63b485b", "sighting--d548f682-aac1-4100-958d-7d40c0f094ef", "sighting--d9e3cd2e-9ed0-4c58-bd09-d489799cb249", "sighting--20c188bd-e925-4b8b-9e2e-048bbbf8b107", "sighting--a06d0627-7bcd-4509-bd60-b61e5df51165", "sighting--4429e03c-ccad-43f5-baaf-53900c873469", "sighting--110f34a3-33ac-42ff-bf9d-50ed1c523605", "sighting--197d9319-4aea-481f-96ef-70a0b5fb0c6e", "sighting--6a0a2a43-1167-4aaf-98ff-aede3945a421", "sighting--c6abe1b2-02da-4c69-9d1b-b094668d9a13", "sighting--d40e1710-d8d0-40fe-ad2c-66b033c8f397", "sighting--129215b3-6184-4181-8ccb-4a8433e0de4e", "sighting--88d3282a-d654-412f-86c4-c29d8c18a245", "sighting--022b967d-dfc5-4667-989b-ab0b028ca0e2", "sighting--f4546e0b-b8f1-40e4-be5d-691469080a55", "sighting--816eaa72-fc5b-4607-94c0-a0afa51d5ee6", "sighting--8187a93a-06f8-4f14-8bcb-35a3235247af", "sighting--47074c10-a62a-4e2a-9dbb-15665255af08", "sighting--9329023d-9851-4acc-90ce-1f97d7e46ccb", "sighting--03122cea-a624-4a9d-8351-07db7237a532", "sighting--a019ec26-6434-4eea-8f16-b8f63008c318", "sighting--86ca6158-e308-45e3-8357-bd01750180f6", "sighting--ba4ac4aa-04db-4cf5-be8e-e3f01322e626", "sighting--5ea9a41c-ede5-49f8-a747-16e1740e82d2", "sighting--0b6ebd7b-9585-4745-99fd-d7b6c7d66dc0", "sighting--6bbbc564-b6ec-4a69-86dd-0fc037f9ac60", "sighting--7383cd2b-2285-4023-a7b2-8405bece8b0a", "sighting--72419822-aaed-4ddd-88de-b17918e8eec2", "sighting--89fa0e28-92f3-4592-9e47-e5452fac16be", "sighting--4776d0ac-e7e6-41a6-a878-5464f31a5914", "sighting--c0d7ee26-1c35-440a-ad25-9655623f912a", "sighting--66f37b64-e3f2-4b54-8ac7-f3d56068f579", "sighting--6bc05360-13d4-4b81-8778-70acf18ac8cb", "sighting--19df4435-27bf-4732-aeed-89d18a0d25ce", "sighting--53f7e887-d985-479a-8600-676dd4ba9af4", "sighting--b7c63ae6-9206-41fc-80e3-d0e2dd1ce2f6", "sighting--f2ef1d98-609c-4fac-ad52-2e5617d6852a", "sighting--d1f9b121-3206-4793-a4fd-9f03aae8c789", "sighting--4f4e89ec-86a4-455d-b754-20fb4d9e44fa", "sighting--3db284f8-f92f-4985-a807-f19e0482a4a9", "sighting--b8773545-f8ee-4d65-ad8a-5721bc8afbca", "sighting--3ea8605d-6b2b-4e2b-8c96-d0e09ad4a39e", "sighting--ecd9830b-a8e2-4cbb-8544-6e2663d707bb", "sighting--07ab9605-29cf-4e17-a5b0-9e1be1f6436c", "sighting--96b0bf40-519a-4068-bd62-bf382bd0a3b3", "sighting--2aaa894c-ce75-433c-a502-7b913b88c3d2", "sighting--51fed678-d29d-4369-a504-c2c523edfbd7", "sighting--d3779c58-b65b-423b-82a3-cf1d84797c07", "sighting--196d89ee-802d-43a1-a801-5a42a22c5944", "sighting--f5e3ca03-302e-411c-8a2f-cdcb2c5daedd", "sighting--da3b6ea2-aa82-47f6-8258-4a502852ca14", "sighting--b2bf1bef-b1ae-424c-b40f-0c05b8c03d70", "sighting--5754a746-9662-430b-a5e7-2c1883eed72c", "sighting--8fd49de4-a919-4254-b5f5-bcab0410595e", "sighting--58ca68b7-1a11-4c08-9d9e-5803f0dc543c", "sighting--2dbb6d6c-e810-4d6b-a843-554e36654322", "sighting--2a1e0342-068d-44c9-b7e7-4c7bcc321ede", "sighting--376c36c1-ec1a-45e1-8639-b7ec771540ba", "sighting--85d3cd08-38ad-45ed-b4fd-d29fb09e53dd", "sighting--0826ba47-22d8-4433-8484-c451c5e72b04", "sighting--175e20bb-e370-4380-8bf7-17b96100e418", "sighting--9bb79a66-f78f-4cab-be46-df65a19d264f", "sighting--145f0a8b-cf6c-497d-a97b-707dbd312005", "sighting--b48f8027-8fab-457b-99d7-5dc494d1d354", "sighting--35cd8592-ad2b-497a-8012-7c28625aabf2", "sighting--ac7789e8-0127-4655-b2d1-da588d7b3f8d", "sighting--bdc38c54-ff92-44eb-bfd3-8540a65ba7a8", "sighting--ab20b342-ee7b-4953-9cf6-fc52dabb2aa1", "sighting--ad95c678-e10a-42fa-aa4b-7de97f72c153", "sighting--88d39024-eca7-4489-821e-c6ff87201066", "sighting--cdc368ba-9efa-4018-8905-8a0324e2c1ef", "sighting--b39dc31a-4c6d-46e4-afdd-fd22f6dcf292", "sighting--d7b07064-f444-4dc8-80ed-d84724c44b53", "sighting--4fd19796-a28e-459b-9d0d-02b9a9a03a83", "sighting--d6e1f919-a987-4408-8026-6c86c735bb5d", "sighting--7c50e982-e4a9-4d19-b569-12d6f54032e6", "sighting--b2672984-e34a-4111-a6af-fefb43bc9998", "sighting--d01222ff-9cea-4b2e-8f21-b861c284ada5", "sighting--165db91d-ce2d-4983-9b71-e3f5734270e8", "sighting--57040a59-e595-425d-9b81-e68df9868a00", "sighting--a30011e0-40de-4362-9d13-0e268cc66e5e", "sighting--ba585785-ceb8-441c-8dda-aa69c35289a4", "sighting--b7afb8d6-179a-43a3-9d2e-d1063ee79bb7", "sighting--98a62766-b66f-4054-8d56-947de6c8cdb3", "sighting--f58baf32-eb77-40dc-85c2-28a9dc51a96d", "sighting--3697504a-76e7-4b2a-80df-b31b201805db", "sighting--d98e9175-efce-4a22-81fb-a3010bc5f753", "sighting--06fc8e79-957a-4ac3-90cc-60e5d2fd2948", "sighting--eeccff33-52e3-49d6-9d8f-130da7c33df8", "sighting--917f4956-0bc0-45e6-a62b-b07143700d4d", "sighting--d9065099-3465-4ed4-a789-46bd21fab99e", "sighting--2101a673-8f76-4253-9fa2-0d581cc0211a", "sighting--d8718b1e-cdb9-488a-ab55-99abb8b708d9", "sighting--7918e926-d4c5-4dad-b2c4-14c290053a50", "sighting--066e5b95-1bc5-44c1-bbe7-ef9926efe70a", "sighting--f9b2ffe0-1100-4cd7-bb73-d595d4703b12", "sighting--fbb8a9bc-c1ae-4079-86b8-a0f2003f0770", "sighting--cec1c457-08ff-464a-a6d4-d5fab0293565", "sighting--5becb852-40db-47de-aa42-161b0f0c08ee", "sighting--b4353ca9-f203-4998-ab4b-07de922e3429", "sighting--86141fa7-c2ad-490d-9ec1-c3ab964f4cd8", "sighting--55901425-56ad-4c24-80bc-6672a8309725", "sighting--fed0412f-5333-4dd8-87d6-ac9c8a4d3165", "sighting--2952146a-71bd-4bb2-baa5-b5b713e29f09", "sighting--07ce2442-bb27-4cdb-8a6a-b07207c7f777", "sighting--9d731987-92b9-4bf2-9296-e45cee1144d2", "sighting--7608a62f-e33b-40bc-a360-18a3b3b19759", "sighting--6d95bea2-ae7d-4adb-a528-f4d839d692d0", "sighting--b6a7b873-38c6-4429-ab18-61e84cca0887", "sighting--dff87083-3a91-450f-97fa-773cd5876896", "sighting--d938f59b-749e-4255-bad0-39eda7d7c4a9", "sighting--bd2dd645-8847-4395-a51f-7134265b0c1a", "sighting--597d9ac6-3466-462b-b2cf-6958291db38f", "sighting--0daa5948-5ec9-4cfd-ab8d-ddfce1e316eb", "sighting--8a88a131-b69a-47e2-ae45-347e60c3f75c", "sighting--e67db6b3-b4ba-4352-975b-9047e9f230af", "sighting--d3a3a7c8-e666-4127-aac9-7201c3844871", "sighting--d99003d1-a6b5-4bee-a879-72fdd2a30d90", "sighting--4b8bc0a7-3336-49be-b188-caaa5bad301a", "sighting--af5ae11a-bb28-4042-aaf2-a41372db0458", "sighting--8bf03440-580f-4885-ae78-65b03eeb16d5", "sighting--29210e6c-97ed-4039-8f62-60dc6092483c", "sighting--f4e66e41-a85e-469a-9362-33f45986fd1b", "sighting--3543b1d7-c933-414b-b53c-0696daa64bdd", "sighting--c56234f4-c69d-400a-96fe-58b12725affd", "sighting--636df813-8458-4cfd-8ab9-19a38e4c7483", "sighting--0ee42f67-faad-467b-854c-da1c35fe903c", "sighting--c2764114-7539-4eea-af14-9959639b4107", "sighting--741463ec-e084-4ec9-87b6-9c1194b8da3a", "sighting--6d89ba8d-43de-4779-928d-504e9c1c9308", "sighting--3d2f37be-076e-4adf-8299-b5148b200870", "sighting--e7fe10da-a35b-4112-847b-3db28a1d3bef", "sighting--8d4d68fd-fd34-44d1-8949-bb2812b43f94", "sighting--fc2179a5-8ff2-47e8-8418-fa8fb29f6644", "sighting--ed8270e3-3d23-4601-a994-df436bf64432", "sighting--1f6ceaa2-3a04-4d81-9180-f33f60424ec6", "sighting--f9e22677-88d6-4c92-a7d5-0bdbce7d643d", "sighting--fe22dd8e-6e1d-4871-9509-ba3ab650b0a2", "sighting--9434a401-5ecf-497d-8055-31cfdfeab333", "sighting--620023ce-33ca-4800-8c37-b1dd6d2a884b", "sighting--69fc9d4d-91b7-4b29-81ff-3fe754010e94", "sighting--58f9ff3a-2c16-4544-8738-6b28ce342dd5", "sighting--ebea3d88-64c5-44e3-a96c-21176be5e498", "sighting--53eed52f-2e38-422d-808c-3d6f9560a06e", "sighting--adf042a9-cdcf-44c9-a038-ae7f9a1639ec", "sighting--739e813c-8765-4435-9420-a33b11767fee", "sighting--f2a70d34-bac0-4766-9358-0e1eaabdc818", "sighting--dd5bec05-1c9b-46c6-b1f3-119ead5e8af8", "sighting--7058790f-ea42-4188-a1b3-faae1db3a4ef", "sighting--3dddef68-4c4f-4ed7-85a3-5fb8b0f0de2e", "sighting--51e35764-c8c2-450c-916f-7ff05512d368", "sighting--ec49582c-00d6-4061-8632-2a1d9fb6bd7c", "sighting--e2b70ba4-9399-4c00-b309-2d4390be803f", "sighting--2540ab9a-ad22-4da9-a15d-a113cb1597ac", "sighting--b29b8f46-dbd2-417d-b2f8-7371c0dd4d88", "sighting--b58c44e6-c57b-4126-8c8f-391dc2974dc1", "sighting--9a4f6040-3fa6-4c7a-ba29-8ef4f2bdc0a0", "sighting--05d2ea23-518d-4457-b2b5-81dff0724258", "sighting--64f57bcc-760a-4a4b-ada8-ca198e4b5ba8", "sighting--cb117aa9-0482-4e95-873c-259371048bcf", "sighting--de9e751c-cc69-4da2-8909-0d6d1e130fe1", "sighting--97c4b2b5-5b7b-4d55-9e5a-44e8dcecd1c8", "sighting--b0b50db0-299d-4ca6-b7a3-51a0fd998416", "sighting--ecf705c5-0343-4b50-9cf3-f26bcb1078a4", "sighting--c6ab0df9-ba5b-46af-948e-7a6d93aafc8c", "sighting--1d8d69ae-d088-4749-b7fa-8c43f0a87de5", "sighting--9dac564b-f2cc-4258-807b-c84f89c3e25d", "sighting--6705251a-6a16-40c3-8e74-800446444298", "sighting--d99f0d1c-874a-4976-9d72-43a2e8e9712e", "sighting--c3d7e110-db7e-417a-b19d-f50871eba0eb", "sighting--72c149a4-ce62-40c4-a981-bf39025d60fd", "sighting--48f6def2-3699-43e3-9448-15e85a7608c4", "sighting--b7602cbf-e724-4fbd-93d8-b0a417623a05", "sighting--4a948d48-6b2f-485c-a328-19e977971cc3", "sighting--f07866c4-f3b9-4f4f-9346-e374b024c4ae", "sighting--8b522e8c-784a-455c-934e-d1f1f764b836", "sighting--9c1b66c2-dbe1-42ac-9cf0-ab85cdee719c", "sighting--26f858d4-2b3a-495d-b2ec-14fb46083b03", "sighting--a247f502-b453-4dfc-a78f-f1a5fa08ede6", "sighting--bae9ebe7-53ba-4a52-910a-5b7569079658", "sighting--58ed5d46-3886-45b2-94b6-9012c95c2933", "sighting--b6577e10-917e-4f35-9e24-75626850cbcc", "sighting--066cb467-3f0d-41a4-a033-3a58027c33f2", "sighting--4b536472-265d-4613-8c30-52b5329d377f", "sighting--25d34099-bf91-4ef9-b4ae-f9e547acbe6e", "sighting--43a15923-3530-4019-9c4b-6ee855fc1220", "sighting--6c5262a6-6d89-4d21-9ff5-5375f279d3f0", "sighting--03ea09e7-093a-414b-bd85-ca4f798c65d6", "sighting--8453a0c7-1c64-492a-9b6b-bad0bd2197dd", "sighting--193a5770-ed49-4d13-9b82-06f19f324da3", "sighting--2005748d-67b0-4cdc-ae86-baf0f0f762ea", "sighting--e526147c-48f7-46d0-8130-8787bf0e91dd", "sighting--b2c3f7ed-15f4-4367-8501-10a444fc7c4a", "sighting--4d5960a7-34fc-448c-a99f-a0101a7cdd95", "sighting--626722e2-e27e-48ca-8e1f-0d9408b108c7", "sighting--dd123364-1767-4226-8dbc-b3c7760e4707", "sighting--be6a9bbb-8240-4d87-9d1e-10f327021e23", "sighting--2931b233-e737-432e-a016-20274fc7e1d8", "sighting--a278c850-693c-4991-9171-c45016879834", "sighting--5b17fc7e-14a1-4fb7-9ac2-16c47debccc3", "sighting--0921982b-4294-49c1-bee9-7662f25746f9", "sighting--1e91ac75-f32f-439a-ae7a-06ede674623e", "sighting--9dfd1175-7cd6-4975-a7f6-5482f2566333", "sighting--c44d936b-9fbb-440d-aea0-0882cec076d4", "sighting--39efcaea-28ec-4a30-8d38-dd58b409e918", "sighting--bc684c09-c935-48f1-8a3e-24dd28c2f76d", "sighting--10df5f42-6013-478c-83ef-f891eb54d056", "sighting--c0faaae0-1f19-45a7-8d4c-d4ddfe5b5b5a", "sighting--c715d3fb-c50d-4dd2-a98d-787c87be4417", "sighting--4e01291b-52ec-467a-a608-458097f98f09", "sighting--3d2435c5-ebbf-4ca1-a3ae-216ece21163a", "sighting--b62a9a78-da9e-437e-a7f6-d9794e74b324", "sighting--5de2a544-522c-4334-a7dd-458a3f3fd5cf", "sighting--f4fa2fb2-a46e-45d5-afd5-4871ed4b94c2", "sighting--90dea2b0-2b10-404a-bd1f-e40e92b811b7", "sighting--35bd5eaa-9094-4d86-ba5e-2a2e04de342d", "sighting--75828a41-73e1-4692-9b83-0cf84d9bb6b0", "sighting--5fc83173-e39b-459d-b4bb-6213360da02c", "sighting--a1c69099-7b97-4651-8026-4d3ac5e86d71", "sighting--9f995d89-df2a-4c3e-8c31-c0f6b379bcd6", "sighting--53f1ade4-3870-4dbb-8356-a6d8658d3df2", "sighting--d3a1e071-3fbd-4032-9665-e97029ae034c", "sighting--21f70b2c-9256-4568-9975-ca5f8229c10f", "sighting--0111c7bc-f20a-4bf4-926f-8321cf8cce6c", "sighting--a9a8ae33-fdf1-4cc0-921e-41c4dbac245a", "sighting--24755932-3692-4e1e-bcd5-50a47b0d2b53", "sighting--a3c185cc-1883-4fae-84cb-e9cab41a43a0", "sighting--49a7c2ae-43ea-4dd7-92f1-3091f6880771", "sighting--29328682-53a5-47a0-a3b0-01e1615bfee0", "sighting--74f38bf1-bfd2-40d7-8d3c-6910c3d6b937", "sighting--623318ed-f709-4772-8196-a3a11e8cb49f", "sighting--e119679d-a2e1-47b9-a1b3-599054d9ab72", "sighting--8c41a339-1c2c-4a31-8cf8-1ee7b48d9c5d", "sighting--e7e2f313-f64b-4308-a2df-3315ef79d921", "sighting--84abebe6-8c4a-404b-bf99-075e725de725", "sighting--327c8fbf-40d3-4b43-a549-ad99f8bdc6ee", "sighting--8f384855-9c64-436f-a3c1-4edf7e5000f9", "sighting--9a6f808c-d5da-4ee1-844a-402fb3504f02", "sighting--bb38b1ed-8772-41ca-a751-3bb5ba194f3f", "sighting--d65fc83e-8b73-4c3e-b73a-28453d2659a3", "sighting--668050f0-0ad0-4187-9486-40c1d8622aa8", "sighting--99dd693f-71ce-4bf7-91d9-d159325c2f30", "sighting--c95635ff-611e-4d85-bb33-2b396632ed37", "sighting--ee4c3150-564f-4590-a6ec-4b66731faff7", "sighting--5100b7da-7c17-4741-b6be-51c36fc65073", "sighting--a78f3dae-75a5-4cfc-bc1d-9c7e3e8ea71e", "sighting--cab3a866-3dae-4abd-b635-657ab34e5aaf", "sighting--f24d8d4a-1143-44df-a13a-2d7834e6137d", "sighting--b478aa8a-7f68-4840-94a7-84c4b86e390b", "sighting--ea93785b-bb9d-413e-8dff-1b1a2601f3cc", "sighting--e5f71491-d7c4-4898-b31e-5677190a3e91", "sighting--38b47657-d8b6-488a-8a39-ba6a080d797d", "sighting--8e059ca5-13c1-405f-9919-a01b74b770f9", "sighting--76684774-7a08-4387-8f5b-abbbeeadb812", "sighting--235b1882-3c91-4391-999b-125cd9c6f525", "sighting--63ef7089-c38e-48ef-a145-5193266c96dc", "sighting--ec3d3798-c74d-47e4-8304-bbedc329fb65", "sighting--c54818e5-f0c6-47bc-89b0-bd5f001c7b75", "sighting--2509f930-548b-46b8-a092-eeb8c18aede1", "sighting--909e2e5c-b111-4c5d-b321-e3ef3c356ab2", "sighting--578b43a9-3149-4d6c-913e-f0539c568668", "sighting--c8669efb-86c6-4a73-8d08-ae01e264c091", "sighting--e1047c96-d254-43de-adde-8ea85d835d9b", "sighting--e5c77b64-6567-4e32-8955-03943dd1fcf1", "sighting--62b40ffe-8dde-423e-bbe7-5f6543261e77", "sighting--1e87ab7e-3f19-468e-bc59-bac4beabb163", "sighting--afe47a13-ed7a-4424-8dd3-0f0b11830bd0", "sighting--1aefb79d-132a-4b36-95e3-fd3e4eedd08d", "sighting--7e55351f-5262-402b-974e-3bcdc8b64178", "sighting--5da6c535-8570-462d-9d3b-c63f802c1e0e", "sighting--6be56a70-cf9b-4437-92bc-0e508c1573a7", "sighting--4f73a67b-4ce0-4621-8381-d029703ef409", "sighting--2956cb3c-618b-4198-bfa5-5b33b51d8bb2", "sighting--92a06957-179f-4bf3-9973-97d18f8b7e5a", "sighting--f596db44-d5b3-4a68-b789-aaf44a68007b", "sighting--c28f3a25-60a5-4fd1-9a1a-3e19fd9440ee", "sighting--46d65259-6832-4b7b-93f0-d9b2f0eb28fe", "sighting--4f598f1d-10a4-4774-b76b-2538fa2ff54e", "sighting--61e3d28a-dd66-4c9e-a062-50d5fb43b423", "sighting--a9dcf6e2-7e4d-42d1-a592-a309f38357b5", "sighting--62ef70b3-84bc-40aa-9feb-9612ff327d7a", "sighting--3c29245d-b43f-4bb6-b035-ef3bd207ff2b", "sighting--fa5b6226-5127-4ad7-8ad3-c1c4527467bb", "sighting--f7a61f2c-9d05-4a79-9ccf-5c3001ed258e", "sighting--0efe0ccb-1a76-4b65-a86e-7a0e0f4d42b6", "sighting--d1a66ca4-9cfd-430a-88a1-8378ff4b73ea", "sighting--b8c2dd3d-3c84-4e04-891c-8321cd15bc29", "sighting--95eeb40e-9f98-4e6b-9e4b-9a81049c8d00", "sighting--41b10323-2924-41ae-b712-6a778e747766", "sighting--d24c96c0-243b-4e22-974a-495d924076a9", "sighting--90c4914c-9e14-40b7-aa5d-03a5b303c4fd", "sighting--ed3296f2-1b54-4a5c-bc38-8ceaea4bb05d", "sighting--3157e367-0f47-425c-af2f-7df013d00588", "sighting--0f692b8f-31e8-4ed1-98a7-aa469a5ab413", "sighting--61192cd7-45ae-424a-8bf7-e2289548cc10", "sighting--976708cc-5acb-47d6-a13c-5d5e83707fcd", "sighting--a868d7c6-a63c-4e3f-a2fa-895c83d5d9f9", "sighting--37a56603-2c06-43e6-86e6-940790532291", "sighting--2c45ee47-d561-4ab4-9a43-f898ebafd9da", "sighting--f41810e6-c3ab-4f13-b5e3-495dd815aa00", "sighting--9e1f31f4-e914-4fce-9a55-c1a38c8acb4c", "sighting--c407c423-484b-4cf0-82c3-832b4e55035c", "sighting--2eca206d-1d87-42dd-9a61-446972b3a2e3", "sighting--83dbd8eb-21f2-4161-bd65-775491e79f19", "sighting--e4f353ff-cb92-43f0-86ac-acb7f61c9b1f", "sighting--9317df5c-4f74-4d79-9a87-afe9774061e8", "sighting--f9f09743-42d9-47ae-99d0-5a1c1e86e6ba", "sighting--314963b5-20b5-4067-a4ab-e91b2c4e7caa", "sighting--c743f09b-c986-4179-930c-cdeb7c797537", "sighting--1a69a8f7-509e-40f5-a750-500f9a149642", "sighting--97f05b9b-483c-4502-a346-17be4b9d3847", "sighting--5370e0ac-eeb8-47dc-b90d-f9c8347e3bdf", "sighting--3f1f1b83-0835-4387-8862-59f7a0c9dbe7", "sighting--b96f88ef-d19b-44be-a41b-d978cbbf1a49", "sighting--1976a3c3-6408-4d7b-b481-100dca7584b5", "sighting--628e979e-0d5f-4458-946b-e1275f5dd7ef", "sighting--67afce9d-e81c-4e64-b913-4c9f363313fe", "sighting--955bf4ec-02e8-4df0-aef8-4191191d4683", "sighting--3c473425-d2f6-40c7-9bf8-6f5cebe50ee8", "sighting--234a6946-c20b-46a7-ab4f-c3d003609fb6", "sighting--5034de47-49bb-4221-86a7-2ec9463e0c81", "sighting--e942322c-446b-4b67-9063-07e22b6d3daa", "sighting--55aa2e5c-d784-4f0a-954a-3cc90129a2b9", "sighting--0f7cb186-a410-4466-b3a2-b14591f4275b", "sighting--ae07815a-f346-48f2-acb5-7c2e54f0687d", "sighting--c9a31be6-e5b7-49fc-bcaf-31df27504eaa", "sighting--c6998070-b75e-4d1c-ae99-134c5e382cf6", "sighting--7112ff4c-41e2-49fe-be45-48598c91b1c1", "sighting--fb533f88-ebe9-4dac-bb3a-645f6d5c42ee", "sighting--42aab072-731b-42a9-8cce-9457a69a5352", "sighting--0753917f-10e9-41e5-b9a3-f9253fa17079", "sighting--e30104d7-9a48-4417-9343-d03eface8111", "sighting--653efca9-8aec-40da-9073-c9a0e6672c17", "sighting--d587b1d4-44f7-4497-9728-fd78e20966ca", "sighting--8183318c-ace2-49c8-b600-0599c6245a0c", "sighting--08a1b6dd-746f-43a2-8a89-c912f937d18d", "sighting--2185f35e-dc9f-4f3f-a258-1ca4031c91ff", "sighting--f7c3072f-7d02-4edf-b77a-af6e3c2f9649", "sighting--f0453485-d36d-4b98-8bd8-4ed8e4f9b2ab", "sighting--a348a6d4-1bb5-4ac3-8b55-2a6ed39bcf3c", "sighting--d2fa0558-111b-464e-8276-91b787357856", "sighting--ed572fad-b1b7-4aeb-b3d9-34b601a408a6", "sighting--9795a390-98e2-44ab-bdf5-2f96231de516", "sighting--91d219c6-4723-4270-95a0-edacd4a98043", "sighting--d7c72867-94ae-4af0-98ed-1c2f2a7c4155", "sighting--94d02004-6b00-4648-995b-09f134bb536a", "sighting--b359d7b9-e748-4497-ae60-dbb6ee8c2dd6", "sighting--9fb01cc0-d397-489c-84b2-596909747cd7", "sighting--e7a0e94b-716b-432e-8281-c15f6a8f3ca9", "sighting--5f0efc3d-125f-4b0c-b236-24690531c101", "sighting--c6419e00-2da9-488a-834c-e0c0f3ff4b58", "sighting--1d893fe9-0ed4-4a08-9562-9bf23b2b0640", "sighting--0bc06d5c-4408-4dcf-a7b2-203e1cb66c84", "sighting--21653686-b822-4d6f-a4d6-75940ed0ac83", "sighting--53fa7fec-d326-4c87-b4b4-213717ae3c78", "sighting--415c6b28-c8d8-4c38-b5ec-230d29093dfd", "sighting--20b3bea6-4f93-4da8-8164-fcbce745e7af", "sighting--50b6b8e1-a4ec-4173-bbcd-a66e78812e58", "sighting--c0e6d86b-749e-4a66-8339-5279e5c57276", "sighting--5acd0ed1-8f35-412e-aefe-25b7b0fc44df", "sighting--604a248f-d684-4387-a957-de4ea012b22c", "sighting--f42540b4-6fa6-4f3a-af85-04f241c996e2", "sighting--a1f6a42a-9434-444e-a327-9c21ee0a303d", "sighting--d0db2635-7a13-4938-8047-6f41a155038d", "sighting--95669391-6e02-49e3-afee-ca8107007d18", "sighting--7a423d74-b958-48a7-b70a-f0febb2b941b", "sighting--39331849-65f7-41f4-bdc4-1f76d2d23889", "sighting--c333f043-6f20-4012-af87-6211090a9ee9", "sighting--0827fc7b-48eb-4e58-b4c8-811687b532b1", "sighting--a8e846dd-31a4-4e14-b1dd-f24ac482ecc4", "sighting--aa26ef18-999b-40b4-895e-bf087414e943", "sighting--3de11066-c2e8-46eb-abcb-52d662c05532", "sighting--8c3602b6-7189-4ad1-9f09-4cc31a1d237d", "sighting--65700a81-1e28-49f9-bcb9-c1b89aadbbac", "sighting--6512be87-f2a8-4b64-910d-984b0930cb45", "sighting--a856ecb6-1eb8-455e-aaba-e63386992a3b", "sighting--450ddd97-b47e-48c0-92d9-382186fe4dfb", "sighting--84599a1b-ba42-4209-b6d4-6d44d85b9209", "sighting--49253043-a6e6-4b2d-939f-6fae0d9a4f92", "sighting--035a9f02-7f86-443e-9f88-4b6b792496b6", "sighting--dbd589a3-b3f4-4513-9fe0-6c47a4d372ab", "sighting--582ca22d-6fda-49ce-8fa3-e4e28d2bb996", "sighting--438a1b8a-99bd-4d73-9ab3-6e6388824019", "sighting--5944194d-f0f7-47e2-867c-210cf6855bbd", "sighting--f3314f47-fa54-40e7-a50a-7151f8b49e00", "sighting--cfde3d59-5a61-4189-8c3b-0d005f50e607", "sighting--b1c52e80-0813-4a54-bb9d-457e15674cd4", "sighting--9448ac75-881e-4d90-9ee3-dd6e50041dce", "sighting--90897724-5823-411d-8342-c6d684fc6d1a", "sighting--03f5303e-083a-4dd2-af74-e2b5ff46387e", "sighting--cff44b4b-373d-4c29-a4a7-95ea82616889", "sighting--98ff73ac-b84e-4e74-a37d-a41707892936", "sighting--70d32287-b91f-45f2-a2c7-592dfad71d8d", "sighting--1c33334f-397c-4a95-87b0-3e4bfc7cc627", "sighting--b6a4e32f-0bc9-4f45-877d-430d1338439d", "sighting--8ca6bba6-c68f-49d6-ad54-95f66d9b7e07", "sighting--972a18fe-5d92-4430-8353-a6c1ff166e61", "sighting--aa2845e0-3546-42c0-a01e-61fedc8e3e07", "sighting--4ec5b01a-38e1-42be-86da-d3e1ef3df062", "sighting--d814d234-a2e0-4ff7-ac6e-4b480a7e1605", "sighting--2e0e2fa0-ca42-4903-a134-2535fa08a71d", "sighting--e10caa05-cfa1-4e52-ab33-978b8d7bd0c0", "sighting--45d7b41e-6313-4171-b4b5-ce0dca1da832", "sighting--2099432c-5d60-4985-a374-27a4526ad8a2", "sighting--81e54f8e-6f31-4a2e-b47b-62872a8e7eea", "sighting--eb536590-740d-4ed6-bc02-fdd3e8a0cb19", "sighting--c4c77873-73da-4378-afbc-e26e85afd6fb", "sighting--c8a844e8-7ba2-4e91-9677-b3722b4d6bf1", "sighting--46c93369-8fa1-46ce-9a87-84af6e344ac3", "sighting--2a57625a-0b64-4fd8-93d4-6d520df3cb48", "sighting--fd2a5bf3-57ba-4ca2-b96f-207dbd98b080", "sighting--c4ef1b1a-d95d-469c-8989-2dac9ee29b36", "sighting--e0970b4f-63b7-4e0c-87c2-b3da01024514", "sighting--2bafa481-a69b-4cd5-9fed-a24e842446a6", "sighting--3e38a066-c164-4d8a-94d2-5da370fbc53b", "sighting--55914205-9a9f-4cde-a5dd-e492df6b0676", "sighting--e761429c-a3b8-4299-aee8-793f6cc52a98", "sighting--e3dd2698-819b-4b4d-b23c-d9fb7f427e54", "sighting--0b3a5fb3-c6da-4d6a-9793-3336e4dbab7d", "sighting--8f03a4a2-1019-4367-9005-36b953809cdd", "sighting--0309931b-76ff-4c5b-9759-b2d1915f5d96", "sighting--50a6f0b3-db31-4938-8515-a4dd1aa5f274", "sighting--91c55fc9-5f1a-4962-b4c0-ecf3c31dc34d", "sighting--b041003a-56fc-481b-b6c5-2e735719bf85", "sighting--9de06f9f-7a39-4767-b783-73222d685bbc", "sighting--d6e3c773-8220-4c9f-ae61-9aef618ee0f6", "sighting--6830857e-54f1-490f-9c65-8340eb88cffa", "sighting--e7dcef8e-3fec-4795-8622-e3edac823a05", "sighting--175ccee3-11b5-42a8-87b2-7c0eb4220171", "sighting--ded06d4a-6f3b-4799-a5d1-49ac39d9ab90", "sighting--bfbbedf7-a0ca-4688-aea1-bab80046df14", "sighting--a5382251-4d45-4cc6-81a0-384fba1c0baf", "sighting--09d651f5-46cb-45ea-b193-b9e8a45479bc", "sighting--eb6b86b5-7666-439b-8b45-8e5c79ef6639", "sighting--5a8ab308-0c93-46f3-9bba-020cff925983", "sighting--7c02c8f7-548e-487f-b075-d9e116212ca0", "sighting--4618c3cb-b568-4fbb-8d11-d15028016ca5", "sighting--66910645-c1c9-439c-9fa3-f54b7e9aa5e4", "sighting--0407f5a6-fa28-4711-b744-6b3bbf6e9d3b", "sighting--b7845c52-fef5-4f88-9beb-cabcf0b2c96a", "sighting--ad20f9f4-2a20-48cb-aa88-3b24bee60c22", "sighting--1fed9508-1987-40fb-8341-4c484aaadd78", "sighting--18155834-682e-4d29-906d-75c882bb707d", "sighting--ec47bd73-9a34-4f57-9bce-4491c4e81a1d", "sighting--4274cc63-a268-4d7d-9fe9-d9b6c96ee06e", "sighting--9647acb1-c342-4484-9b7c-57dffccc8697", "sighting--f887e2ff-4783-42d9-9b66-ffcd372069e1", "sighting--32b793a1-5900-4ce2-8bef-e50a745e2f88", "sighting--72d63fc5-8aea-4a53-a0c9-15b20facafa2", "sighting--d2fcd47b-cf0f-4aac-a7a9-4fd6a7f101c5", "sighting--212638ff-3651-4472-b716-e570ee98f723", "sighting--38ded022-f4e2-4a5b-83b3-52f4caa8d8bc", "sighting--9518c377-ba9a-490d-8d73-55461861fabe", "sighting--1227abb8-75ec-4663-9202-197eb97d3943", "sighting--1735ef9a-a814-4750-9ae3-e292e54cbae2", "sighting--b4028fdc-154d-4eda-8cb2-3c6bcb10ff34", "sighting--8a852858-9f30-4e3c-a7c2-484cd8f6c282", "sighting--db9a7e34-ed83-46de-aa3e-795f63e59d86", "sighting--e6c6b8ee-8ece-4bbe-b6f6-e5eed0a38421", "sighting--72ba8105-382d-46b0-84af-45f7fddb2368", "sighting--0cfa0b58-7140-40e3-a60f-549f39a4478e", "sighting--bd620bb7-bc36-42c7-bda9-113485742e46", "sighting--43c750dd-eb94-4066-be8a-eeb4d8cb4198", "sighting--3bef4c66-2e8d-4dad-9b45-ac8283f68176", "sighting--19fd7fa1-1f8d-40cf-99ae-3d081e052a1d", "sighting--16a5f445-3d6e-4186-bc72-49f4c77d98fd", "sighting--dafb30fb-51ab-40fe-8604-23cb52750c10", "sighting--846032d3-1000-4581-a848-9c6e28355869", "sighting--e36debe3-8844-4154-b602-a1b9c16dd371", "sighting--fa8d21c3-5b41-4589-b3b2-0d31afefc8e6", "sighting--62605cfc-0536-425a-98e9-8111d224a616", "sighting--101fbfa2-9d4c-4c99-8b1b-72d31326bd16", "sighting--8a721a64-fb49-4cc7-b356-c816d8a41853", "sighting--7a6f3a02-2cb8-4cd1-b0f6-f4aa2aace6ac", "sighting--0b852a08-3737-4934-97d5-b176001167a9", "sighting--e684b519-f8ef-4240-bc6d-325f10c2a869", "sighting--8704a40a-430f-4652-8ea5-92ddcef4c198", "sighting--6d736751-7dd3-4544-92d1-0f1b6e19f009", "sighting--6f7e6bf7-9cd7-420c-b84f-46d2c6b92ad6", "sighting--261d6331-c4ef-48d4-af61-57535e870864", "sighting--6f54db1f-2628-4fe7-af4d-482bc6f16290", "sighting--05265b63-9293-4e62-b67e-412c8ee0f1d5", "sighting--7df46614-2140-4995-b070-78ab3a9cae65", "sighting--118a6c3b-197f-42ec-9279-a4f95c858fa0", "sighting--b7abe683-1a1a-4002-b39d-5823aca33028", "sighting--82c21d57-225b-49dd-b0fe-275d94e9d26a", "sighting--eadd9b13-8487-43aa-a243-7fe2bdb8aafc", "sighting--31307ec2-bb79-4356-94dc-4cbf8f52da15", "sighting--785d1fd0-4f85-447e-a982-daafb6f940c4", "sighting--9ba4b9c2-193f-4194-9b4b-e39df90e6660", "sighting--69b615dc-ac88-4393-ad46-7d12c886512b", "sighting--47651d90-7f8b-4111-826d-1770155ec020", "sighting--84b27e11-a9a9-4896-9a8e-209bc5473237", "sighting--38093e4d-6e9b-41bb-8d46-b0231b330792", "sighting--a52b30ee-8dc0-4855-a70f-e086b70ba7ab", "sighting--70c95732-f17a-4367-8134-08a34017bb6d", "sighting--5f7be97c-3c79-4f05-b7ce-f324a4bede62", "sighting--676cc6fd-679a-4308-9f29-3374a59be187", "sighting--c53f74af-c417-4d8f-b7ae-cde54ee345f3", "sighting--24a8aced-2a0e-478a-884e-00abf9b973bc", "sighting--dd46204a-cd2e-459f-b406-b0439028177f", "sighting--71d5e9ef-19ee-40a6-b8d0-6f04e526e7da", "sighting--afda04fe-4a2c-492f-9bf9-5770352784f4", "sighting--9c3323ae-1cda-417f-866c-4848e407cec9", "sighting--b07fbad2-e171-4a42-8e07-1fcec04a0df1", "sighting--50ff96ed-c38a-4196-a7b5-7d20f47855af", "sighting--49d358bc-07f4-4eb6-a3d7-f4d9e3ead951", "sighting--1d253fbf-1928-4c0f-9775-3f446fc61df7", "sighting--c20d404e-3d32-4199-8555-da3139fb5c21", "sighting--795d15b1-fbaf-4349-b474-75a9ae4be9f5", "sighting--708c9f17-07f3-4ea8-8be2-946ac05673ed", "sighting--38ff38fb-f4db-440b-8170-86a1834c46ae", "sighting--dd21ee63-37ec-4418-a364-555a4dfefd5f", "sighting--a04f3bce-f1e6-4bb3-824b-d31f0127fdf8", "sighting--04dfa9ab-5e53-4f78-a405-3bcf7cafbefe", "sighting--8848f62c-2e3a-475a-969b-06c2a3705651", "sighting--0813a362-81e4-4d86-a979-92ac6f15ccf8", "sighting--18f07abe-b8bc-46cb-a39b-5d344d82e4cd", "sighting--f4cc42da-8fa8-4374-a19c-4455d3d9224d", "sighting--ed5faef6-5c68-4fa5-9811-10928061533f", "sighting--2fea24c9-df7e-4ae2-96f3-80cc9496dd7b", "sighting--e161e478-5806-459a-9661-d255fce8b020", "sighting--73a3646a-fb48-43fc-9bcd-00b85c74e9dc", "sighting--9578566d-7e6b-4008-9ad9-2d4b04e5d58b", "sighting--615dea9f-380f-4934-bf46-3a320d218408", "sighting--154c2d28-a67f-4b5d-80f2-d4e2fa10132f", "sighting--21f27647-d545-4e9d-bb05-54efd282ec0d", "sighting--0102f971-bbee-4770-9d8b-b8c2d14a30c1", "sighting--31c470f6-539e-4d4a-9db0-f85d9e85a8c1", "sighting--ee751be2-883d-4c86-aa63-2e9be22f7b55", "sighting--0a544f6a-a2f6-4a32-9d2a-52d01fc7326e", "sighting--2416065e-fe50-4938-927c-a71f8b27328c", "sighting--03e6e3e8-a0e4-48d5-bf4c-6a46dfdb9353", "sighting--d851a7d2-f1e0-480c-801a-dafe079a5793", "sighting--d2069c3f-9e39-419c-b850-64309541abcf", "sighting--84839287-beee-4ea6-b368-b19962f49923", "sighting--42c18362-b43f-4a17-9a45-880c3bbde721", "sighting--4603cf96-3239-42cd-a82d-778806ba7177", "sighting--aade6287-6eed-4422-986f-9fffc00074dc", "sighting--05a62d3f-0bb2-4a77-a35a-989f7ba305cf", "sighting--d062e52f-5bdc-4320-ab58-2235ca820f2b", "sighting--b1e83e8a-3367-41eb-8e46-46a32241cec8", "sighting--edabe134-bdca-4e3d-b134-9b4090cb6a78", "sighting--f321bd86-0e06-4b14-abc4-27b07645bfa1", "sighting--985fd1ba-1feb-44ee-ae1b-f6fc9ad0e0a7", "sighting--b608f3bd-efc6-4581-bde3-950ce8e4a9dc", "sighting--13704ce8-9962-4a6f-bbe5-63ab88546631", "sighting--7d7da174-f0e9-4fa0-a3d0-ea539ae4f8b7", "sighting--59a1bfae-5928-4089-84b6-42571bafa936", "sighting--c76a640a-40d1-47a3-9209-365c1db72dd1", "sighting--f68b1ecc-be16-4fce-81a4-25d86d56524c", "sighting--ec5637fc-0cbc-4d74-ae6c-f68ca9cf91f4", "sighting--cdcf6008-c0f5-4c84-954d-04e49485b582", "sighting--9658b615-7da8-4402-adc3-7df13e912c31", "sighting--02eb71ad-725a-4372-a96a-290bc41d41ce", "sighting--dbc18c9a-bcd5-4a0a-8f00-fc7c7d2c4b3e", "sighting--4471b96a-18cb-4dee-b095-4d17bf46e492", "sighting--634373eb-8e1a-48c8-b457-dd1727749765", "sighting--d82e0ec6-add9-41bc-94c7-129c89ef7b75", "sighting--06e9be74-5caa-441c-8e42-4904abd1d8e8", "sighting--f2af92e2-be50-426e-bc8a-d9407218e0fd", "sighting--995af72a-966c-4a91-b3f5-e77e998a2ad5", "sighting--038cff7e-88b4-4748-a3e6-a8f4d61b0944", "sighting--ba2d3c5f-8c77-475d-b0db-8db848fa340d", "sighting--787cc6fe-1672-4716-889d-ef001bdc1794", "sighting--cf8478d5-8d85-41a3-b503-1a768f11bb9b", "sighting--612ddfc9-36a4-46ac-a933-1f604cf7545a", "sighting--ca52b6e1-667a-4fb6-b133-7eef74690dfb", "sighting--3e35126a-1d2e-4476-98a9-e5cb525c6793", "sighting--a32e453e-08eb-4e75-a383-02529ad9bc8d", "sighting--1236b490-18d0-4dd6-adb9-017f1d082ab8", "sighting--8befc3f9-583a-4030-be98-0f3065537ac5", "sighting--c5d17837-3d66-4f40-b4bd-8054b2b9d5c1", "sighting--80727c37-eb08-4fae-8b91-b1606ac2c07b", "sighting--8c2bdc57-fab9-47ac-9941-64d1381d9afb", "sighting--8181bf55-7801-4fa6-a28d-5c76c89e1d65", "sighting--318d803e-001e-40f5-b0da-10988e01e6f3", "sighting--ea145808-0597-4c9c-8fd9-ea27c73a2fd7", "sighting--5ff5015a-ca5c-4731-b9f4-1fdca9fb3563", "sighting--87c79f89-1f40-47be-935e-38b498cd12c3", "sighting--366ae597-345a-4247-a5ca-335e54ca5dba", "sighting--796d17b3-9ff8-4460-8bde-cb2cb80fe9b1", "sighting--7023c961-0f6d-4450-84ea-98bc03ac854b", "sighting--5436dce6-3a7d-4fc9-bb2e-371c62f87a2e", "sighting--eb45c209-d9b6-4e2c-9b56-b1f1ec88c663", "sighting--37dd48d2-6b0b-4a29-b699-11155a27ac46", "sighting--0958ebd6-7e99-4b35-b1e3-6f4cb7076f81", "sighting--fdb754a4-e25a-43de-b597-c60b967cc65e", "sighting--2c5093a5-ad05-46f6-a2e8-b9b5fbbac128", "sighting--793598ea-6887-4487-b66c-459c5d5a051a", "sighting--2a9172a8-9174-4aa5-af95-de0ad199390e", "sighting--af39e6a2-7b17-476c-b747-eec9435ec314", "sighting--dad38d22-c17a-4be2-9a42-2f91700346bc", "sighting--8dc2477a-897f-49e8-a224-8292a54e0760", "sighting--921165fe-ab94-4a8f-9715-f6369449af3c", "sighting--f373a7ca-ec92-46ad-a848-6d3a98d849da", "sighting--c07ca2f5-9db9-485d-b3e1-f1402ed9e890", "sighting--6175caf6-3d6a-45ba-80c8-2fb19d66c075", "sighting--a7151acb-4955-48f4-9d8d-877a5080feb0", "sighting--cd225122-a88c-4dc9-be92-452f673bfece", "sighting--7b06c7cd-bc1e-4eec-b5b0-9b58753110cb", "sighting--4f49623e-36eb-4bcd-932e-fa8fa0e1040d", "sighting--8e4bdfdf-f0b9-4338-8d56-14fc53b3988c", "sighting--00e8784b-073b-4903-bf4e-b582c882e8d8", "sighting--00bb8141-68d9-4bee-af30-a35c7909013d", "sighting--4da8432a-76dd-46b7-bc17-a143a7bd120d", "sighting--c60cbf23-0798-4224-8138-75ce18ab4897", "sighting--fc895aa8-d837-484a-9d51-71b8554bfb99", "sighting--42ccc8e7-9cca-4486-b391-c71b0c397aa6", "sighting--303d496b-12b8-43c4-b310-9a413f084dc6", "sighting--e553a303-4054-4695-a4ad-714a73b20d65", "sighting--ca59681e-a7ef-4fe9-bd0d-122dc45f4b20", "sighting--d919e18b-9190-4feb-9834-43a4e8991301", "sighting--1840ae44-b433-48e0-b300-75e8d5be49b5", "sighting--b754eda4-e51b-42f0-8dfe-5bc55791a560", "sighting--7d79adff-d789-4d4f-8faa-3f24749c8331", "sighting--4fc4691d-d1e3-46ca-9904-1de8c4796250", "sighting--5da3a32f-d525-473d-b5dd-02ca9e302b68", "sighting--011345cf-686c-4371-a560-8d259c343588", "sighting--a5c0f09d-4d82-4e66-94df-d8c2c190f38a", "sighting--cb6494f9-a3ab-41aa-8398-39f72251cba3", "sighting--a54dd4c9-6c42-4cb2-b3bf-8ad148ed14d0", "sighting--c3af2c0d-1d11-449a-9d51-fec9134f021a", "sighting--328c9afc-6d15-4bf5-9960-51f823adfa74", "sighting--ad665c54-f31b-4b54-8444-2610058460dc", "sighting--9cfd0c69-d1a1-4d1d-84b9-ba0d3baa6121", "sighting--1dcd19bf-bfae-48b5-b586-36cce90d13f3", "sighting--a4b9f7dd-fd8f-44c8-9bed-4588b8b26a96", "sighting--201bf2a0-1c72-41e7-bf78-499b4b43f58f", "sighting--29b3096a-88a7-4532-892e-f63af32c7bcf", "sighting--40fb3eed-27be-4659-b717-49412b2cc68d", "sighting--3b6d03a8-02d6-43da-84be-4ec2ddce5c36", "sighting--0fc45248-1ed6-40f9-a5bb-d08bab0140ec", "sighting--aa939680-f474-43b5-9610-7cbc872a52f8", "sighting--cd71dc09-7044-4a02-9823-b0333d0cbf54", "sighting--a4d08215-912a-49d1-9b10-24b4b8925cef", "sighting--65e3006e-fb93-4ef9-b16c-4a013052dbea", "sighting--f05ef6a0-4900-4236-b629-b3b8ce22deae", "sighting--0cd12343-cb02-4807-8d8e-7677fea66ed7", "sighting--23f5d764-803a-4ac0-ae90-8d940612008b", "sighting--cd5b79b2-ff41-4462-b24e-97f1056470dd", "sighting--dc838b42-022c-4af6-9302-4f0348301a93", "sighting--2448cafd-c2d2-42d1-a66f-2f32355711d5", "sighting--0ef8142f-0b4b-44f1-81c0-a432471846aa", "sighting--760581ed-2522-461f-89e0-cb93ec0e11cb", "sighting--01a3d8c4-1b93-4474-ac91-a3c4951c3156", "sighting--35635ce5-dfe3-4ac3-b3c2-c26a4fcb9088", "sighting--6e575b56-7c5c-406a-8da8-7c33a9ff6e8e", "sighting--8d58273b-acb6-4328-a00c-df6133fe2345", "sighting--b911c3fd-d0b2-484f-b480-5421fe198a91", "sighting--ac2a297b-46fd-4716-b25a-431282b61e82", "sighting--52da6aeb-f723-4548-8691-ccd60606c7f0", "sighting--32a689a7-2774-467c-ad6a-0847ffd9d53d", "sighting--924e9374-4e02-4515-8fc3-8c743c879ed4", "sighting--2281c857-81bd-41ad-a899-81b7be1cb41a", "sighting--29d7f54b-7f7a-4128-9e50-9a56089e5ae6", "sighting--a55aeb69-149b-4cee-926d-0b70772ff2ae", "sighting--29d69f32-a563-4d75-aee7-2bfabd16ec57", "sighting--2b3b2970-d541-4944-88de-0f35fb707f8b", "sighting--bcb4d0ce-3b4c-41c7-9a0f-1c9651ec2393", "sighting--de61d689-4071-481f-8e8f-2e7327282872", "sighting--4bdf7c49-2f8a-4d3b-ae2e-62523bbf4878", "sighting--f7013bd5-6377-471d-9c91-711eee1e489c", "sighting--17bd73c8-bdc2-4a17-a43f-2f6f49e5a477", "sighting--d2b0284b-a06c-49c5-8a6a-39ade9038b01", "sighting--94970c82-ccb0-4ee6-96f1-805168b3e3c5", "sighting--046261a9-f0ba-4951-ba84-adc7c18e35c1", "sighting--c618fafd-785a-4c17-a038-224ad0d2f4e2", "sighting--c1572b38-85ed-4e6b-99af-f5fee7fcf58b", "sighting--25dfa2f1-2337-440d-85a0-38b287505c05", "sighting--1b265338-a068-48cc-bc00-2570cdbbaa81", "sighting--a5cf0600-2f1c-4962-8948-d71d001ed842", "sighting--687fa5da-e9c4-4acf-a5a7-3d048c3ab097", "sighting--b01efe44-150f-428b-9386-7a752044251b", "sighting--2be5ddab-c5d7-4404-bb22-58dbda00b948", "sighting--b09ece8f-ffd1-46f7-b85f-d23c5752540c", "sighting--4bdf44e1-965f-40e6-afa4-a0610963150f", "sighting--da11f220-12ab-4639-bb51-d09361a6cd15", "sighting--159b3043-224e-4895-a76c-d7ce147e55d2", "sighting--bb211e7e-ebbc-4c71-b906-1d0c741fe8e2", "sighting--bfabb259-b38e-41b7-a3c4-4ec159e75b22", "sighting--6c565666-7292-4908-8c4a-edad614facb9", "sighting--085abc30-c8ef-4328-aabe-6b7a03bc72fe", "sighting--5209e6d0-21c8-463a-92ed-6701fd214774", "sighting--0820bd93-1c75-4766-a977-287ca97c445f", "sighting--6399bb55-ee73-429b-80f9-b65747f18c47", "sighting--cc121ef7-5575-4fbc-9609-2b8b63b2db13", "sighting--8680122c-5f00-4f5a-8dcf-d5d1dc20e613", "sighting--3fdbe6ae-1c09-4b78-832f-0e570f71c9aa", "sighting--58b727d8-10e5-48e3-b36c-52f4baaf5f05", "sighting--4dba1dbb-70dd-44d6-8146-5a2cf3f3c648", "sighting--ecfd6a5a-98d4-44b2-b7c7-e04d6255838f", "sighting--f198587f-8260-45da-bb66-f3a403444cfd", "sighting--080cbbe4-6173-429a-9ba6-4dcce44cbff0", "sighting--51ae6f75-c2f7-45d1-9136-299e36f34a76", "sighting--4777ed4e-f498-4434-93f2-ea1b7c4eaca3", "sighting--e0926b53-ce0b-4d51-9e3a-8beec7f30f4a", "sighting--7410c6ce-2a92-4a9f-a653-ebbf3e01afb6", "sighting--cb3eaca4-44c6-46ef-86ee-f7c9c75c597c", "sighting--a740e021-d769-48aa-aa80-387445c7fdfd", "sighting--45ba2615-7290-48ee-b3b8-7de81c1c927a", "sighting--4f989ded-c11f-4d97-93ee-e367440ca992", "sighting--cba84a0f-60ab-439b-b986-d3bb08ddac4c", "sighting--62083f34-b1c1-46db-8332-09f65aa112cf", "sighting--b90a0fc3-83df-4128-9115-ca35448c5ea5", "sighting--f532486b-2cc7-44b4-8129-80d5ab773206", "sighting--563832b1-0da8-4ec5-b067-676958a2eedb", "sighting--f5788ab8-55df-4c31-a808-e7e682e9bf42", "sighting--2c5a1d38-19a8-4295-a2db-cc20704d276b", "sighting--7743f3f4-3c86-447b-b011-a907b69cde9b", "sighting--d25cef43-be6f-4de2-812b-dac15f36f4f1", "sighting--0c709266-15dc-41bf-be72-8d68b30284f4", "sighting--a030b6b0-9e11-4910-88f7-5f5c494f640a", "sighting--c0ca1179-b327-4349-b18d-4aac4b2e5386", "sighting--6693da13-28a5-4e7c-b423-bf85a02976f5", "sighting--24ee32ea-e250-476f-8167-07a9dcadbdb4", "sighting--5a782774-3f23-4c36-9216-3434de685888", "sighting--72c67757-722a-4bd9-8e47-a8ba038541fd", "sighting--72f00552-51c0-407f-b094-f5a6c85ca472", "sighting--f7977b8d-0582-43d8-969c-2a13d94bce8d", "sighting--946364e2-0768-462a-bf5f-a4db2d1c68bb", "sighting--887baf08-c9cb-4c95-be44-e79abc08988e", "sighting--93ffc72c-5015-448f-a6ce-9c23141d7b9e", "sighting--760d9b57-c8e0-478c-8d64-ef6f7a2848c0", "sighting--c497ebf6-94ea-492d-a393-84a6e6101eab", "sighting--11e28e4f-572f-450b-ae3e-4e03d7599267", "sighting--709d5d9a-9fd6-4f74-bb1b-193232b1e484", "sighting--0378bf2c-3569-4f25-9c11-453575eaf8ac", "sighting--5c8abea2-90c0-402f-a40f-728e4a64cfc6", "sighting--b0199d32-0267-474e-a22e-c2c7f8df3420", "sighting--d334216b-de00-402c-ba5b-74069f3eefe2", "sighting--ba59160d-66c1-4af9-8b5b-dd85c3b3dee7", "sighting--d5e0bae6-d5b9-46dd-8a7c-af6346673e03", "sighting--13f888a1-fec9-4ab3-bfe1-4055eeaaa10c", "sighting--dc6ae26d-b891-4c6a-b4e4-f98696128fc8", "sighting--0d7c5edf-153c-4404-81c6-af515a6b7e18", "sighting--00b22ec9-df78-4d12-b497-c274c9c0d587", "sighting--df4c7890-fda9-4e81-8003-602fbd3c459e", "sighting--f23fc2ef-9bb9-4489-9020-6d06d5b86fe8", "sighting--d3de21a5-2eb8-4071-b227-b2b715d9437d", "sighting--d9c1dc88-3ed4-4743-8597-957d18f6beb0", "sighting--191c4b15-9a6b-43cc-8864-45decf9e59b0", "sighting--d3047266-7a7c-48f1-813b-812fb6b42dd9", "sighting--673dfa81-d917-466c-8c80-eee2085da937", "sighting--9e7f29f3-11fe-4c56-90b8-0c7b8881cbf8", "sighting--c46b3a7f-c5ce-4a2d-ba6c-448727e5aa8c", "sighting--b9adfc72-2957-47a4-83c8-f9e04e502b8e", "sighting--da65bdbc-5e3d-4c52-a870-dfcfe0015918", "sighting--06c257da-54c4-4cb5-bf4e-f77fa33a8a9b", "sighting--0a508c26-bcc7-4c2f-a1fd-9e0e1aa164a8", "sighting--8d300b2a-5ebe-4cc6-8d08-793d55d18653", "sighting--2d3dc9ba-8afc-4310-a833-55f34425b7ae", "sighting--ea34d4e7-af36-463b-9bb4-ee8d1ef2ca23", "sighting--f4b6f4b8-e947-49ba-aaca-ac8a44624485", "sighting--d1de5f79-5864-48c7-9b20-47dcf573503d", "sighting--2a23a3e6-785c-4786-9e5c-89fdf944d18c", "sighting--0aec4284-e50c-42f4-9243-ad3418bb92be", "sighting--e21fb9e4-5c6f-414b-a29a-c1f6da67f8f4", "sighting--08225d2e-b911-46ad-8b08-cbb1ebe9cadd", "sighting--5d7831cf-ce8b-4bfa-86d5-54056932a655", "sighting--7cc2b26a-ad7e-4251-bde6-bf8fe4407454", "sighting--578d0e36-69dd-4908-98a8-18b28f0d0879", "sighting--20f9b347-0bd6-47f3-a5c6-ed38d2527c8b", "sighting--234c632f-5baf-4694-b6a4-80d98487572c", "sighting--6d542203-abd9-4928-b930-b16a3d34f9ca", "sighting--1d2bf0de-d1c5-4bb4-8606-8b2cf4d4e936", "sighting--df2d034f-1594-4eef-8293-bf461a8a4467", "sighting--1c7ed557-c00d-421f-be6b-9b6211a972d7", "sighting--1f557074-408a-44a5-9957-aacee5d396cb", "sighting--dbb7afb6-5126-45e7-9c66-c7ca1aeec3b7", "sighting--50e60a1d-69a9-41b6-a33a-d3074280f406", "sighting--3ca7d9fc-011c-4611-9b8b-3df0e153e479", "sighting--11c0632c-559a-45d3-ae4b-0cc19eaca2de", "sighting--decd044d-95e4-4dc1-b1e7-3f1e13475719", "sighting--90d600b0-6ded-4110-8b94-d97931718e15", "sighting--e4f30344-4d6f-41f1-9b5e-e452c472a8b3", "sighting--f9b3645f-ff73-4f48-9d96-93d367cfa047", "sighting--6182ed3d-5767-4294-adf9-041a50fd26d4", "sighting--faa9c181-3295-4705-a5bd-7d15a6bbd55e", "sighting--4900f21d-e230-4233-8f79-bcb8f92c8b23", "sighting--1e85fe0b-ce87-4ffc-b942-c6e18d6ee541", "sighting--dcf08a9d-85f7-4233-8d4c-215001c513ec", "sighting--06966740-a3c9-4692-b80d-182227468370", "sighting--bb7f2b38-b112-4fe0-bf99-b5686d211897", "sighting--5ba498a5-098b-438d-a64b-6d9eac88728e", "sighting--1e14c4d8-795c-4047-87e0-5285d9e5a8c0", "sighting--0a278274-8657-415e-a22f-6f8447f2c813", "sighting--f0c4806f-a93e-4f8f-b129-02774168873b", "sighting--ad857c42-6845-4add-a493-16af51bbd975", "sighting--11421033-bd5b-48ca-b57d-1944f9129db7", "sighting--264314c6-42cf-4f1a-8e56-733dea94b038", "sighting--faa0d03c-30ed-4758-ad6a-f7e188fd183e", "sighting--f3b60563-d207-43d9-96d3-85854ef8229d", "sighting--8c695981-f4f1-41b8-9493-146d76a9625b", "sighting--9fcee5ee-b5f0-4ca4-83bf-b1f472094b30", "sighting--9b035fc8-1102-487f-b605-9731b39d74b5", "sighting--3f640757-a088-4cc2-bc64-27aea3f436c3", "sighting--2f414a53-bd42-49b3-9d06-ab012e001e3e", "sighting--5b23ee17-f25c-4991-b731-85aca5542eb2", "sighting--f49a754f-e7a1-493b-99bd-6ecfa3948f05", "sighting--f8b7e409-22ce-4ace-9650-19feabd08477", "sighting--80ce93ba-4e27-4a66-a9e4-6cd04595f327", "sighting--53ec3512-4eaf-4c51-a586-4ad68d905f9f", "sighting--9a0ce155-8664-46fc-a249-154b2983d505", "sighting--77bf0a31-3715-46bc-aa1c-93717b03790d", "sighting--c19d72d9-2da8-4cc5-a64b-cdb4a5844d1d", "sighting--b8d3dbf8-ff42-437d-9900-a2a96427d8df", "sighting--4d6d4029-6c07-4872-a3c5-6fcb2aea10e1", "sighting--7eab401e-6d41-44dd-802c-444c8a1883e0", "sighting--708bc5fd-5ca6-4b67-8d60-3fa600d0abd8", "sighting--8b3c0342-ea94-4d1c-b4a7-49e69ea9fc2a", "sighting--28433e56-ee51-4076-bc60-0026f4ca1d18", "sighting--1ad71b8d-f73e-47e3-b9fb-31967a612f15", "sighting--54798c46-9116-4c81-9673-5757925d1780", "sighting--24826b49-0269-4275-b22a-b0bc26c11d0a", "sighting--848dde27-c6e4-4b12-b99e-655c8d1ac7ff", "sighting--a6ce99ed-6167-40bf-8c4f-ea703010c5d2", "sighting--03c38505-5d3e-411a-abcf-a361532aa518", "sighting--37b39a6f-a6ff-4c3b-8c1f-addfd46c9ed4", "sighting--9ea5f236-4b8a-4f0c-8144-ef9f76b60aa9", "sighting--74e66783-23ac-4810-8a22-9de61fa38c55", "sighting--a104463a-bbc3-42b7-980a-db1ff9258bd2", "sighting--16e542e8-28d9-4981-b362-29be843d147c", "sighting--17a309ce-9056-4066-9db3-3200ca1972d3", "sighting--9b71f089-980c-4cc4-9254-44826edd48f6", "sighting--4cc3a951-ecf3-443c-85af-263834ee1a5f", "sighting--b95c4877-8143-4843-9147-4ab481f8a494", "sighting--e73de104-582b-403e-98f9-2d8eac1743bb", "sighting--b0a81d02-761c-4821-a1a1-cd67ce2fd5de", "sighting--ec69699e-c276-488c-89ae-a36497afbb9e", "sighting--27c55096-6c34-416d-ad16-f1fbc71ad7f6", "sighting--8685a75f-1151-44d3-8e54-5ab79395e9d5", "sighting--1239640b-d6c9-4b46-8452-55cdb0f40f02", "sighting--38e85e33-7c7a-4b4f-b05b-866acf0e4f95", "sighting--4a7868a5-184a-4b92-8dd8-3dec75b5c821", "sighting--ef2a502b-8dfc-4c1f-a9f1-b10cd3073ed0", "sighting--323c429d-b085-4da0-8439-c9588e83714e", "sighting--5499b27c-5214-4425-921d-e95eb6c4d949", "sighting--fc87c0c3-e90f-4912-ab4b-31db54527053", "sighting--2f86d60a-c3bf-4ce4-82b7-31b5ba83e6e1", "sighting--4871bbd0-9a58-4091-b46f-36fb89a8695a", "sighting--6e4f8825-3101-422c-835c-ff5c15613ef4", "sighting--efefbc39-2087-4063-9f99-427ff864fb85", "sighting--e8e466fb-c24e-4ecd-83a0-0789152b35ec", "sighting--2f506dba-2ba2-47fc-8789-8481fe8b4a50", "sighting--72f3b97e-5dc6-4562-b0ff-7b44e631d587", "sighting--f226dcb9-9054-4f19-9a81-c33e235449f0", "sighting--914dd71b-5127-48d3-889f-0ed4fe63fa31", "sighting--a41bf3b4-4063-473d-aa92-8d885df933f8", "sighting--2c4a3dae-1d69-43db-a700-200fcb71c730", "sighting--3cfc3fe2-a5f1-4a6c-819e-c36638fe67da", "sighting--3319f369-30f2-4a84-981a-ba6a6f8deb6d", "sighting--62ce297d-075a-4f2f-a678-6d2c012b5e16", "sighting--4ff82813-2741-44ae-b62a-189d95c66614", "sighting--2f8e89e6-d2d0-4670-bb55-04effeee2ec5", "sighting--789e50df-da17-4884-9f98-aedae8cb437c", "sighting--72a67f8c-5e54-4035-a61d-4b3fded0276b", "sighting--645abded-d784-48b8-af34-a29f7d83da5d", "sighting--8a50516f-92b4-41fd-ae48-1f3c6a1fd44d", "sighting--faf58799-f5f7-4dba-b16a-d677df541c28", "sighting--f196f573-e7ce-405f-9e6b-82aa99853ba6", "sighting--42c6240b-b28c-4a0b-b8fd-4745495c8ab2", "sighting--3371d53c-45e7-47e2-97bf-fecd4996d335", "sighting--caaa1e30-2733-4b78-9831-f5c6b9ccbbb7", "sighting--27320a09-2dde-419a-83b0-11b19ce039b3", "sighting--fb20ec8f-162c-4c87-9c49-5a74c5f29baa", "sighting--7649fcf2-3822-4472-a113-e0937a0da5a7", "sighting--54b05017-400b-4c55-b873-81edb71f4e7e", "sighting--fdb17bc0-d59a-42fd-a283-0f357937db22", "sighting--3b7b840b-4182-48ed-bd94-43f52d349503", "sighting--0841b12e-e46f-4682-9b85-e8641dd54710", "sighting--f96d1c6b-f8c2-449a-8605-14d760f5f8d4", "sighting--e09ffff0-a179-4e1d-87c4-a5829e881904", "sighting--dd605e71-f3d6-4ed7-9681-c0754743c323", "sighting--6edaa5a1-34d9-4011-8b74-569521191d97", "sighting--d246df74-8eaa-425c-8d32-f4e4d0d39ab8", "sighting--dfb41d88-4d7e-4ad0-b512-1778ffae910b", "sighting--a0dc4f5e-1811-49bf-9d4f-fe59b16f27fe", "sighting--e25e20b6-63ad-4665-ba38-5cb22b999416", "sighting--6e4c4916-bcd2-4fa9-a29f-40eb602356cf", "sighting--f45a3971-3894-415e-a972-0b8f4392a23d", "sighting--060b7600-9e96-4b6a-b526-15b166822f53", "sighting--9ba628bc-b2d1-4b6f-9e5b-63735e728986", "sighting--09c78b56-9279-4ae0-9cc9-29d17c4dc844", "sighting--29ae03f6-fe77-4a00-827d-afae557c36a8", "sighting--b6e7edc9-d541-4179-b827-cf4c89c655ba", "sighting--1f40ab06-7370-408a-928f-63b9c211d5d5", "sighting--ecab2af5-d70a-4624-bfaf-b4e725051dd1", "sighting--47d4332f-395c-4630-84ab-5164acc8a669", "sighting--7e018cca-1083-4103-b6a7-6bea643738e8", "sighting--c8d706aa-508c-429c-9af3-2fbd64e38254", "sighting--1e1527ef-3aa2-4e99-a2f5-bc68c6e58f42", "sighting--01aa2fcb-074e-46e6-b348-2722f1d7c36e", "sighting--d354d1c0-c6be-4062-9ac4-669ed2846ea5", "sighting--f67d5503-fd51-41d8-8b25-f7b173b9018b", "sighting--b5dac604-9332-475e-95e9-cd66d9b26d2c", "sighting--9dc54a31-247a-4a5c-a5c7-2f524f494112", "sighting--3385698e-cf21-4450-a9b0-89c740dbf43e", "sighting--bb278b2f-3c03-4304-a4bb-86c5e9dba5c6", "sighting--f0de5d79-48cd-4ff7-8c4a-7e86be4c44f0", "sighting--03638d7a-55ce-4175-a8a7-c18d4542a41c", "sighting--c401648d-ecbf-48c8-927a-f55a4d6294d5", "sighting--23d48d2f-64c5-4a68-889c-3f3f840f6083", "sighting--8b5bb970-0b46-4f40-8317-42b1537ce3fc", "sighting--83499e7c-f830-40fe-912c-a24559a8f144", "sighting--4fdee2f0-46ba-489a-a393-54c0c8a6d230", "sighting--ebae7d63-fc25-4987-88b2-b06502aabb1c", "sighting--48f1beb0-04ee-4836-91a0-84bf89eb8d6d", "sighting--c781c475-ad2a-40a0-b0b0-d9aeefe44e52", "sighting--bb6126f1-388b-454e-a301-030b539cf8be", "sighting--59377795-3003-4e2c-9120-9902b05b1ed1", "sighting--1e1c5641-a63e-4cd4-9d0c-e26f952e0572", "sighting--1e86fa37-3230-4847-9852-c871aac71e21", "sighting--b55ed9ec-0482-4d8d-9501-362f1b4933d7", "sighting--72ae10d1-910f-49cc-b5a8-ef843714c5df", "sighting--b1b160f8-bee5-4514-b472-3cdc08567914", "sighting--b910ea7c-6720-4257-a94b-419e833cf3d7", "sighting--2810f026-c1a2-4eb6-ba01-971d19feb24d", "sighting--3eac246d-0930-40d4-896d-fb6cd37bfb3f", "sighting--18062f10-acaa-4084-afa0-d59ec4a8a432", "sighting--07f80c46-8ece-4acb-9ff3-e1717ba3e2e5", "sighting--aab8b162-c27b-4ae5-9686-2fe62e5fc0bc", "sighting--32701338-76f5-40bd-a5e8-6021c13f1ba1", "sighting--ff294dcd-e886-42f6-a699-9a3506712b7d", "sighting--6ead98e5-df02-478a-a7ca-1b673a17504b", "sighting--243e72fd-8753-4ddc-9542-abc0d3f9f095", "sighting--5420fbbc-f6b6-4c6f-9eef-b30fbaa6b842", "sighting--7f165fd7-2f8e-4460-a1a1-b9ca6fa0b2b9", "sighting--f8079c25-952a-4427-b410-9cb186bc1380", "sighting--95a1ab5f-92aa-48d5-8fef-10044df50b7e", "sighting--ecd50575-8cd0-44e0-acad-33bfa3933a30", "sighting--d863d4f2-8c00-4fc6-a018-68ab7bfb2a8a", "sighting--c9d3a749-13c4-48ce-8bf7-af968c97cee1", "sighting--73758b3c-ef16-4c2a-af3e-522ea47e80db", "sighting--0f432183-cba4-4602-9ee3-be8be3a13f2a", "sighting--6bd5a0c2-15ba-446f-b107-4d427ccb5a12", "sighting--be29ac16-db72-4291-a51f-b5ce76bff6e2", "sighting--a51f6f27-9011-44fa-928e-cd9d13aa8529", "sighting--4e6f30ae-b760-4b59-b852-1e6eb9f6a172", "sighting--bc29f068-b2ff-4418-b415-85f1ace30cc0", "sighting--61d86816-f349-4d7f-8182-31eefb51dfec", "sighting--a08f817a-9a6b-4d52-ac91-57b20625a5cf", "sighting--41c2cb49-d358-4d16-b739-56cb9bd172da", "sighting--007d6dd9-370f-436c-8949-84a8001ea201", "sighting--e549a7d1-0c92-468f-afab-a1da11ef572b", "sighting--85898985-19a2-4889-9612-5a24c386bb9e", "sighting--907dbd24-b874-41ab-a62d-424f9fbfdb8f", "sighting--55af1b7c-1952-4482-b410-3e8ea3c890d5", "sighting--cb67e15a-419d-4ef3-b314-8eadb8441508", "sighting--072165f7-033d-45ca-92c7-32e5109fe00a", "sighting--fbb1f591-49ba-4236-ac24-aa26a330d7ae", "sighting--690821fb-bb38-4ed4-9165-47345979d351", "sighting--8746e469-0232-4203-be16-b4a95dca9369", "sighting--5d499b5a-1230-4099-876b-3c8f25c52adf", "sighting--b9ca0f61-5729-4a5a-b545-5e1c6d0d0cde", "sighting--9e9684f8-d425-42f9-8bfe-b0be01f79357", "sighting--8100ad1b-10e4-461d-b5ea-61ffa19266aa", "sighting--5ab9de7e-5b0d-4461-aad0-f2b9579bbea8", "sighting--2b128ab7-bd2e-410e-ae4e-95f47a6a10b4", "sighting--ecdf4f78-4757-4560-87d3-551fa1c8f3df", "sighting--233ca578-f7d4-4118-b5a6-015017abb3d8", "sighting--b5a2154f-ebbd-4f75-be03-146cc3761484", "sighting--84fc6381-f7fe-4e30-b937-1d35693ed737", "sighting--8bf46d75-844b-4cbb-9af0-70db9001ee81", "sighting--d89db4b4-18ae-44f5-b743-8b2b0c23cd42", "sighting--f2a4b7d6-995e-4cc0-af69-fc2713800b89", "sighting--ce17381d-8bf6-4493-95d4-634c96b284c0", "sighting--d05c98e3-0e9c-4d0f-9ed0-9a93d3d001a9", "sighting--0069e2eb-7621-4991-8886-01fda1efcc81", "sighting--c93e0c89-0ea4-4076-b5e1-ffd029ae75a3", "sighting--85784653-0eb2-4917-b1a1-9f4ab3f852e3", "sighting--f7061173-47f9-4597-9e3f-2017cbd50344", "sighting--a24ad7a5-3f33-4365-86fd-c1a6fbeed2af", "sighting--470dc837-954a-47ea-8cc3-6548f81e69cf", "sighting--f56004ba-1828-4af3-bded-8ed632f4520b", "sighting--8834fcfa-88f9-45cf-86e3-7f80d0fc7548", "sighting--7812d36c-bde0-4ea8-91dd-aa6c395ca848", "sighting--e6201c00-acd1-414c-983e-2445d1eb9da4", "sighting--292b79d9-65c3-4e76-85be-0216e0a23ad4", "sighting--6520c7ec-68ff-4d25-b83b-70e16b01dd9f", "sighting--dcb96ac6-7c9c-43ab-946a-174f87a64a4e", "sighting--6e937903-4e58-4048-95dc-47b907aee34a", "sighting--4274e63c-4375-455f-8738-bd662c119a8b", "sighting--b54e12e7-e79d-4c19-a29e-8f7ab430c5f9", "sighting--cbe92624-c155-4c60-841e-aa9b63351a59", "sighting--67799868-1b00-4ce2-8522-7a572f08945e", "sighting--02ca00d6-a71b-41eb-af5f-67db3b6987f0", "sighting--d1063910-d528-4916-b26e-6ea6b7d4530c", "sighting--55d17553-83b6-4019-b2d0-ab949dda6ab6", "sighting--6bd31821-1341-471b-a1d4-9deb5cda85f1", "sighting--381da037-ff06-4776-b8ea-77eb811324f0", "sighting--367062ab-a3b2-42f1-b6be-bce6bd797107", "sighting--182b1053-fde6-4b7d-9265-0560fe1c802e", "sighting--1d849304-1f94-42e3-b1c2-9c76315c57db", "sighting--fc1ca88b-d228-4920-bab7-703facce14ae", "sighting--0a024c80-0fbe-48eb-b044-61e9c6c3838a", "sighting--b5fec798-bb2c-44d2-863e-6abd90d90963", "sighting--80cb9159-44cd-4b3b-b0ed-84f931496edf", "sighting--47dd984f-4056-4b75-9c33-87311a60ba1c", "sighting--16aca8ee-7343-42f7-a037-3d661ac422f7", "sighting--dc873cbd-1732-4c2d-b96f-601b2a97328b", "sighting--70d7830b-8d48-4ac0-b28a-b049d17c33eb", "sighting--15126fc7-2684-4378-ad2e-17d0f39a9fdb", "sighting--13a559e5-ada2-43b8-9afd-7539083a6179", "sighting--1a5d369e-cf94-4da8-9252-44b378c1e194", "sighting--10c0e2da-d919-4b4a-9706-35adbd629694", "sighting--f7a9d608-9ed3-4e46-b826-f389d57fa165", "sighting--8b127ed8-99a6-48af-97fa-68495834dd48", "sighting--05e7a4c0-161f-4629-818e-deb18e389fb2", "sighting--97935b86-10a5-4cb5-8d06-996163009614", "sighting--2fd35fa1-64ad-4808-aba1-620ea981e4ee", "sighting--a055226f-cd99-4639-b6c5-b34be7275748", "sighting--a5f7d86b-5fb9-4e7c-86f9-593a2dbf51de", "sighting--d63e3526-2d98-4e0c-b370-f61ba6720444", "sighting--647d8831-749f-47c2-8473-6d5ed18018a5", "sighting--c74196c1-f70d-4d56-b1c6-ca142ea211a8", "sighting--4dd1fa3b-c22a-4016-a2f7-b2249d9ed46a", "sighting--4fa648d0-218c-4319-ae6b-16d8d8f5b630", "sighting--9c89135e-ad94-42bc-b24d-5b24537b2af7", "sighting--708b8b58-3e6b-466a-b997-556a9aca09a5", "sighting--e1a73779-a582-42f7-a9da-b3c7ed20484b", "sighting--a06bae19-49a0-4a47-9cde-9e3c2228f03e", "sighting--86222485-8ddb-47a2-abdd-223674c826f8", "sighting--6add169c-7804-4769-bd22-46bbd8af96ae", "sighting--0e71213a-ecaf-4388-8fcc-a75738298a04", "sighting--6dc14e72-591d-48a5-9843-1e870f8ee227", "sighting--bef4cde9-591a-4e1c-b230-190c648ee8d6", "sighting--6ad31dfb-ac64-491b-8ff8-e2f5e5e81cbe", "sighting--2ccec001-7ffa-47c7-a1a6-792a13ffab64", "sighting--e6a14116-91d5-4d22-b61e-e43c88f9146e", "sighting--95df3df7-0a69-48d1-8602-5cec965409ec", "sighting--4874b24c-4d2a-45e9-8116-6789925f76b0", "sighting--8a9a8445-89c7-469d-939f-f3aedb13dfdf", "sighting--c4a50223-8d39-404a-9c5a-a27b19caf9dc", "sighting--26e8bab4-1aac-44bf-b40d-1d9cd6fe8fff", "sighting--f5c16104-1138-4933-b1f7-c75042722d47", "sighting--c35e3bb0-54e9-449e-9369-ce588bc2e31f", "sighting--830d04a4-09e2-44c1-957a-234b9d594bdb", "sighting--bf46a5c6-678f-4394-8b3c-01102ead3ccb", "sighting--43ce4a48-03cf-46b0-a0f3-008cd0043f03", "sighting--462da9a0-3983-4ce9-8a32-fb18c13abc16", "sighting--cbad9102-9535-4837-a1d8-0a35a944fc4a", "sighting--8b657d2b-2d13-4bb9-a5f1-ead3c1549698", "sighting--449b9fcc-3b46-429f-9f2f-4fccd9f8bb34", "sighting--5f9ded78-17ca-4a6f-bf68-d958833ed945", "sighting--b29eae53-9f3c-416d-8d64-b463d867550a", "sighting--84f7ee71-f0f0-449d-9840-8b696423de0e", "sighting--16803481-1c44-47ad-8a75-4e31e147f87c", "sighting--fb8c11dc-6ba1-4070-8e8b-a8f225cbb82d", "sighting--e4ba928e-6bf1-463d-a54d-e4bb025e1f5d", "sighting--5c13bf2c-ed33-47cd-8403-20c3ec275ac8", "sighting--1224e407-a194-4ec7-828d-a97a17f48e1e", "sighting--1a03806c-d5f0-4cb5-805c-bbb3c2e96a46", "sighting--2bd866f8-774c-41c2-9084-bddaa07d2cbe", "sighting--c328df17-900f-4162-a043-fb79c2524816", "sighting--a01131da-a88b-4045-bb23-aaa1d26ef1cc", "sighting--467a0b60-a085-4fc8-a6e9-d7cad0af55f7", "sighting--f45d5c8f-a9ee-46ef-b3d0-dfe8b0d65cbf", "sighting--ab0408a9-5e49-4e00-a01c-6fa8b444340c", "sighting--958b47a7-bfe9-44c5-8f47-c37894817ff6", "sighting--2dac157f-c377-4264-ba8e-288fb2feebf7", "sighting--f9c6a37f-c6fb-4c1d-8217-e4aa84ef6ff3", "sighting--07d0edaf-8b18-4f30-9211-784cb0df54f0", "sighting--c4cc9073-97a9-4cc4-8592-ef881e99026a", "sighting--5064b87f-53be-41d9-af74-b53c40c00e24", "sighting--78c3d8e8-9a05-441b-907c-01546ddb8905", "sighting--96d743f5-4d1f-45c8-8f22-f415c2043c07", "sighting--a2f4b9fd-63e7-435a-a9ab-489a6646ce6a", "sighting--4afca89a-560a-4ed6-b4c7-6bb0f17bb82d", "sighting--634c35d7-fb46-4cb7-9ded-5de34953a459", "sighting--df89c87e-8167-4594-b97d-9e3fac11e81e", "sighting--7139faba-bc33-43e8-86b6-2cabb53758a6", "sighting--66bf977f-358e-4ef4-acec-fed7ec302a0d", "sighting--bb908a3b-b6d1-481e-b469-253cd917843c", "sighting--6a4a9b4e-aa1c-4315-a72f-64e0f064e09c", "sighting--ad44639c-74b5-4166-a888-cc9dbb88874d", "sighting--df411b6b-ea06-43ea-859e-b74da9757b9e", "sighting--f625ff30-16a6-4fc9-926d-b42860a1ed89", "sighting--becfe927-6b96-4d06-a47f-dfd05d854ab4", "sighting--62139b73-cb52-43ca-89a9-63c16fca4bdf", "sighting--800580cc-5f89-4757-824e-572fa636a734", "sighting--e84a186b-fae6-48cf-80e9-06bb91d281aa", "sighting--d442e74e-5010-43c9-8ade-ec8e90b5af6f", "sighting--d09e80bf-be62-4c2d-8454-1faeaf9cd9d5", "sighting--9ffb2ddf-56c0-407d-8741-5e2b2428dcbd", "sighting--532aa406-0df3-450d-a352-231b85f23926", "sighting--bc199156-4e55-46a5-be3c-a8db03b4a20c", "sighting--dba511a5-d259-4ad1-95eb-8bf0ace2838b", "sighting--ce5b35af-7c4c-418a-8d02-23de6902e231", "sighting--e1554b2b-83b9-4b29-9b55-5fb16e2513fc", "sighting--d2209909-996a-422f-ac56-3ce2f5d612ac", "sighting--3ddce995-475f-46c6-957c-b1eb15978428", "sighting--32e4c3fe-bfa7-4c24-b23a-c4e3a0d12a3e", "sighting--dd946784-9510-4e7a-98a5-9484edc3e6f1", "sighting--a2d8e376-72db-4cb4-b013-6f9d757dcac2", "sighting--e08138da-81ef-4d0c-b1f0-8e2b42a0d764", "sighting--01634d7f-586c-47c4-8a15-c132bc3f99a4", "sighting--caa605f3-8886-448c-b9b5-aa3eaa7853fe", "sighting--f0754ceb-055c-4692-8a12-1d0074a595c1", "sighting--69c0a967-10de-4c25-85bd-c8da6824742b", "sighting--22e45341-88e1-4850-a7e2-c9f1a4869fed", "sighting--a04b8e32-1ac1-4707-8fe8-3f0f453ba1c4", "sighting--336470e2-7540-4f6f-9018-25f77a82b780", "sighting--9e8e67d7-7812-40cb-9ee0-95e7ece83173", "sighting--66e4a190-4fd8-4fe1-a684-7a58fa9c3aef", "sighting--7dc90e06-3171-4788-8a3c-13edf98d8c85", "sighting--c1756c36-2ef8-421e-931e-f946c6d4cfbc", "sighting--f9144dc1-d17a-400f-bcdf-1b53aee3424d", "sighting--be48d004-56e9-4112-b6bc-aead78145890", "sighting--861bff64-d0d5-42f6-80a6-f5f5656ec4ae", "sighting--8b4c5d01-6c47-40d7-94a3-21da6ec966f4", "sighting--c06aa1fb-68be-4b4e-8678-fd7b6f1cf5b4", "sighting--74b986f1-b048-476f-9b56-5698e2170fa8", "sighting--96c058dc-bf21-49f3-9519-e5ee4f6a445c", "sighting--61355a10-8c62-470b-a989-380d5f8ad67e", "sighting--c57485d6-7ea2-4807-a084-87b931a4cded", "sighting--c87cbb1c-e9ab-46c2-8a79-a8ee52be1a3b", "sighting--cfeddd22-95aa-404d-ba24-bad399c015d5", "sighting--28a68779-059f-4a50-b0b2-7b2b03c1decd", "sighting--c456118f-155a-4448-b7af-7cc0a01445be", "sighting--59c7b4f4-32b9-471a-b1c2-0247f3b5d2a0", "sighting--b4752da7-2450-4d67-9279-47270b5b88d9", "sighting--5efba165-439e-4913-a3de-22a5244f5ed5", "sighting--b165492f-3600-4858-8794-4dec931c0b74", "sighting--3d5feab7-03dd-4e7b-913d-4be2dee6ecd7", "sighting--c6625355-28f7-48aa-883f-65c0abd90bb7", "sighting--7b72904b-1ace-4c19-a59f-1af929326dcb", "sighting--aab9189e-0106-44dc-9d2f-883647a1bb43", "sighting--f525e9cc-8952-4a33-89eb-d5df519e416c", "sighting--61d2f6fd-9a46-4299-b503-fddfc84c43d0", "sighting--e014d514-7cb9-4bde-b35f-6f30f8833a14", "sighting--633b381e-4312-4f5d-83a7-5b2014c33b7d", "sighting--e10676ee-2f06-43f5-badb-f8a0cd014a8a", "sighting--173b4dcc-c37a-4599-b356-99feca38156c", "sighting--b20038f1-d188-4e3a-aa71-a11c00dde5dd", "sighting--414e3f89-af74-47c1-8b6b-0ba079d93e6b", "sighting--a08bd39d-3d59-44be-8a40-5bf33189e565", "sighting--c06806fa-84b5-4842-b4a9-0dce230a33f0", "sighting--b290d765-9a21-4b2e-a13c-880626c25f48", "sighting--ec9a4e03-9c70-44f8-bc90-be2a6f11cc98", "sighting--761f30b2-25dc-4018-92b1-a516369dbcc2", "sighting--f3b58029-7495-4529-b4ce-b70e29cc2858", "sighting--b65a616b-4251-42d9-bb11-7dbb38471aa3", "sighting--7f5b5fae-3940-444f-8f0d-21e961522749", "sighting--c4033746-59d7-4650-b23d-86139e4c9aa8", "sighting--53c88870-4748-4e93-8b66-4bc1367d99dd", "sighting--ac8b85a2-00ae-45f3-93ce-9f2beff1334f", "sighting--40c2999a-010f-4c3a-a874-37881d404257", "sighting--1bd6b4df-9cf8-4f6f-9d2f-0907bf11587c", "sighting--09ad140d-9707-44d7-a353-3e434c6458eb", "sighting--b4a2baa3-f917-4400-882b-313087e18eba", "sighting--2e0ad019-ddf1-486e-b91a-e93e0bf8288f", "sighting--b6e1f1c3-ff28-4d28-a05b-478a5d40b302", "sighting--f4607b03-8561-43c7-8523-0d2845303d5a", "sighting--5c08f02c-9dc4-43f0-8292-5ef8cd619b11", "sighting--1cb9f0b6-9e6f-44e6-ab08-a5dc12e7ca01", "sighting--50d2cc95-69bc-45f9-88ba-a5ca7872f74e", "sighting--46f912aa-47dd-4dbd-b57c-fc84e5bed45c", "sighting--611a844f-f626-4528-88b5-bc1df5f7c18f", "sighting--1cb92a89-f508-4a11-92e2-41637539b0b5", "sighting--5dca061b-8728-40c7-a226-3b99e61c1520", "sighting--4ad80f2b-07ba-450a-a89d-a925836ede7e", "sighting--396123ca-ed7e-41fe-aedc-565130c2130b", "sighting--d202056c-8da0-4ea0-9884-b2026872d5a8", "sighting--ab713e69-813b-49d2-969c-96262347dd08", "sighting--2e930a9f-a8e4-4fe1-a1f1-8547ecae1f1c", "sighting--9dcc8e5f-6544-4ea2-a329-d07df40e2f9b", "sighting--d085067e-30c4-4827-86d1-83a350b7c47f", "sighting--93c40140-680f-4c3d-8ada-5ee2b41ef493", "sighting--5b5a7564-853e-4c8f-ad65-0560543d45a0", "sighting--50216bd2-3204-424b-9271-c3e3af57cec5", "sighting--801c8a00-b685-45e0-9d6a-d245332982ae", "sighting--620f4695-37d7-4114-9b75-a0bd7fc6d317", "sighting--146bf689-413a-4fa7-881a-1ff4135e9a1a", "sighting--7b860aca-8544-4b96-93b7-2d77e5329e51", "sighting--b056d22b-5fbe-4a5e-acd2-c85f6e8b877a", "sighting--06e41252-5f12-4bbb-81e6-ec54d11fe3cd", "sighting--a57f3de2-cbe7-4b41-a7f1-964bd842e716", "sighting--43413e26-554f-49eb-a484-2757812f0f33", "sighting--6ee8fb3a-f338-4172-94c1-4e92e5d3caf9", "sighting--2832072f-18e5-4b77-8f04-4d7c6595cbd5", "sighting--c2e51a79-6507-428f-85a8-8339768b5c8d", "sighting--007c48e5-eea0-4ef1-9135-12dfca4241b5", "sighting--387584df-9163-4b21-99f0-ea7949feabd0", "sighting--f8841912-6380-43b4-a830-59a8b2ea3640", "sighting--2f0481d9-83d2-41dc-a9cc-5e9fb31f82b3", "sighting--d3279d9e-dd3e-41cd-8cba-2df28a14f368", "sighting--aabc19a9-c37a-479e-8fa7-68711645750f", "sighting--875513db-9741-44dc-be38-5ae1fae3c1fe", "sighting--6cd2902d-d611-4399-86f3-ba20eccc934b", "sighting--e7811f95-5bb8-4e4a-bbd0-5796c00e3ad8", "sighting--08991113-7ce1-473c-af7f-b0f03ac50516", "sighting--5535f127-4669-4b45-ba32-f618d8c3f89f", "sighting--0c4efeda-6ea5-49e0-8a3c-932a42888f19", "sighting--1c7d26b8-7856-43e2-891f-c0bf06a29f2e", "sighting--8f8f75c4-e55a-4120-a67c-02cfb6b90689", "sighting--33d3d464-b25e-40e9-9d7e-9521eded677e", "sighting--bcc7d79b-a708-4553-b903-87bdcb0990f0", "sighting--f5a16fd3-b5ea-4866-b617-dd046b21baff", "sighting--8a2cc3db-6b06-4b33-8327-68ef4c940a5d", "sighting--cfdb2c8b-5d5e-4d8f-a59b-ba958f7d4c3b", "sighting--430eae8c-2f3c-4cad-870e-9089cc0dc8e1", "sighting--b23ae4e5-e83a-46b5-99a4-8abf9ff3aa0f", "sighting--8bdbcb99-7adb-4ab8-8823-e845bf7e6151", "sighting--3424deb2-f251-40cc-9a66-ddd75aa7ac2d", "sighting--f23c40f0-ee45-4f4e-8695-8e2fdbd62891", "sighting--4718069f-fc93-49d5-9ad7-2c6ba58094fb", "sighting--7366abff-68af-4e45-a273-79fe31e21cee", "sighting--c22aeb02-14dd-4e2e-af0f-7232ff683c9c", "sighting--89b7f59e-9411-4d55-84aa-172c6db6e9d6", "sighting--c60900f7-c712-43f5-a09c-0dc55e692868", "sighting--658ddb3b-220f-45d9-8430-bfa7a9aa0000", "sighting--74b42166-6368-4925-ab1f-1c3ecd2f73a0", "sighting--8de7c71b-a954-4f5c-bbdf-58afe7ede65b", "sighting--4e02abf6-59a2-4dbb-a2df-8f00005dd9b7", "sighting--b30fcee7-b7f9-474c-987e-3c4382003a56", "sighting--d2e201a3-96a2-4ee7-8395-c7ec021e546c", "sighting--8d9eac86-871b-42de-bf7a-ef7f0aee9b9f", "sighting--fba3e793-3081-4930-87b7-93af20265c9e", "sighting--2777650d-4e8e-436e-89d0-f42b812bb645", "sighting--0b911c7b-189f-4844-9e08-e1a47826d115", "sighting--8e06a972-85b6-40d7-8a52-5c28948df933", "sighting--baf133ee-bd21-420d-b8ae-23405de93711", "sighting--11ac5d0d-f51c-4f57-a76b-ef91621e164b", "sighting--1896355d-40be-4e6c-bdb4-0805e230e52b", "sighting--d11f097e-a13f-40ce-997e-4ef573cc8ecc", "sighting--76713b75-cc91-46c6-893c-ad6b495a388a", "sighting--ad57939a-8ce0-4347-a896-51da76dd128e", "sighting--8ae0455c-27ba-4338-88e8-d7f574936296", "sighting--21dff170-d5b2-47ea-a273-7af88f2e9b42", "sighting--aa9339b9-cca5-4609-964f-a490ae6d7c1d", "sighting--623152e6-0e85-4b20-9d9e-f2e7592f30a5", "sighting--d41b1520-f2ad-48e1-bb6d-9b9f514a21c1", "sighting--7de209a4-f9bb-4ce5-ae11-bdeafd0a26a0", "sighting--16aa2482-60cd-4ce2-9a67-ae93d96e4b20", "sighting--89add914-282d-433d-9401-3de773fef315", "sighting--dbc1b282-1f1c-4809-8ed4-4da4163a6134", "sighting--7570c50d-e039-4154-9d52-d924a7ee728a", "sighting--66c9fc6f-3385-464d-92c1-3fe09b463483", "sighting--29cf728a-0614-4068-9765-9ad65ae4750c", "sighting--e4e0c143-4354-450e-99ca-fe4e4c1b0005", "sighting--0a7ab9fb-97d0-46b9-83df-bc715ed72278", "sighting--64b5280c-badc-4fc8-a197-15cbdfa4bf14", "sighting--6a9e0945-9f3b-4c60-ab0f-d7e1c07bab2c", "sighting--4991a1f5-a722-49f7-b223-c404484ec255", "sighting--dfb49ba9-e23b-43dd-8fbe-5c0c94f453eb", "sighting--5e532b20-f95e-4e34-9e1b-9e84de475c7d", "sighting--b14bbfc5-8aff-45e2-a9d2-a16e39224c0d", "sighting--97f2d902-0db5-418d-a5b6-8ae7efdfd31c", "sighting--bfda945f-b209-41a1-880b-440b7e353245", "sighting--ccc65fef-56fa-4b0e-91d5-5206798f7101", "sighting--23b160da-9fe2-4617-a9a6-83a1f3ae9023", "sighting--ade5dc1f-aefb-40b5-a642-cd868a5fa92b", "sighting--adbdc9ee-60e9-4d2b-ba29-9a6b0b64d00d", "sighting--692f6227-6657-49a3-ba0e-c41e63cb6061", "sighting--85556277-99bf-447a-89c7-d3a2ab826279", "sighting--d63c831b-f59c-478c-82f3-bdda0b6af694", "sighting--14aadeb8-c850-47ce-b256-85d8ba9a3496", "sighting--46436948-6af7-4ac1-a3b5-ff4e5ced21d5", "sighting--a7bc617c-2cf0-41b2-af60-e50f947b9851", "sighting--c952465f-4b29-4a39-9929-d94539ac35d5", "sighting--7e8996cb-e6a3-4b05-8743-2017744f92ab", "sighting--1ea2e609-59f6-43bb-a66f-59285febf4ef", "sighting--39ca6a73-6a90-4c86-9e79-0b74f4dca279", "sighting--5ef8d6d7-a484-4a78-b233-18cc2c1621bb", "sighting--31806d57-9a47-48e1-bf22-02d775d79c06", "sighting--f3ddeee7-0566-43cb-a53a-6f771972635b", "sighting--edca91d9-1276-46ad-a2e1-c20e327dfb99", "sighting--e9e40d05-4de8-4348-acc1-5d9e38759eaf", "sighting--9453cb39-b4d9-42b1-b797-34d3fffc311f", "sighting--297fce85-c3ab-4cab-a57b-8646a8fb867b", "sighting--2a0b76e4-adbf-4fe8-9e85-10cf661552d1", "sighting--d6a89786-6483-43d3-9e7c-5cdcc3d52008", "sighting--8f79ebc6-e8fa-4a22-87b8-bbf5010c8791", "sighting--eaf47c8f-9e16-4478-afb8-33acc0230309", "sighting--66d85d87-6105-4df4-a05a-cf0c972d0b37", "sighting--a96b46c0-9499-4744-b458-5b7656e85936", "sighting--2754448b-0445-460a-b5a6-32c757f068d6", "sighting--47fb7610-5010-4025-8668-b56d57db5112", "sighting--76b239d9-11e8-48d0-8801-652743efa2f7", "sighting--92f9e2f8-83d7-4938-8cc5-5cdcccd3236a", "sighting--6d2817fb-6bd8-4edc-b430-6457a4e13b75", "sighting--7b265918-65d1-45e4-ad8f-8b868c43fb75", "sighting--9991df81-55e2-4478-afe5-c99d95da1752", "sighting--0663daba-c638-4634-a839-79bd62e6ab5c", "sighting--2cdbe1d1-1c3f-4d9f-94d5-fb59c3fd104f", "sighting--8c61a468-d8c7-4ccb-8192-80bce45b9eae", "sighting--35ffd2c4-ffd7-4e52-89b6-8c1b400489d2", "sighting--a982882c-05eb-42e6-98b8-bd17e24f126e", "sighting--9e33d2e5-f9b8-4235-b59e-4ae3cc2d90c3", "sighting--0ec76d34-3c91-4d10-9b5a-850fab8ce65d", "sighting--a3961def-ca32-4270-95d6-92cc56f88326", "sighting--5e845213-962f-428b-8711-818601733ea4", "sighting--07051498-1107-4f9e-aad5-00301abee7ea", "sighting--08abb6b0-aca1-487c-8785-9a91c37369f5", "sighting--2ab00dc7-216a-4543-94d0-539321dc07e0", "sighting--7354f7c0-e1a8-4edf-b7d5-b6c3e921098f", "sighting--9e17bc8c-b847-48c9-beed-6e9970cb2419", "sighting--8814b353-e381-45b5-95e8-3dd437c64978", "sighting--b17b53f3-3aad-4915-801f-9b7bf20a1af7", "sighting--4b9bddaa-b403-44e1-9aae-1c9e8fc643a5", "sighting--0b0736cb-970f-4f72-a83e-d8076bb58d43", "sighting--c6a7826c-efee-4f26-911e-1f9520e6c052", "sighting--db889168-e877-4cd9-9a79-3b518d4a8db5", "sighting--0e56bca8-f774-400f-934a-c06237376944", "sighting--6086aa13-bdfd-40d8-9db0-04311ca6b023", "sighting--b866e283-e5d3-4a83-9140-7edede061b53", "sighting--726842ab-631e-486c-8a09-88fe858a4e91", "sighting--2c80d17f-3db5-498a-b893-8d67021bc289", "sighting--04602d0c-36a3-4e18-88da-4f1ad3bf14a3", "sighting--2cea65fc-bd80-4e69-b320-15a77bb32c2c", "sighting--6910645b-fdd9-4724-ae12-730c6b1d0400", "sighting--b88a8ea7-3b02-41ff-a83f-816d858da67b", "sighting--8aba2659-0372-48e0-b507-33d2760de7c9", "sighting--199a1987-b70b-4e83-bb82-72b988d60e0f", "sighting--75d61350-e39a-47ab-95d4-2cfc5375d6ec", "sighting--347d8735-2802-4718-9c86-e07735bff7fe", "sighting--c41e57e7-8b92-4067-9343-d6beb1474b25", "sighting--e455ab2c-74ea-4c0f-aa92-a2440d8ee56e", "sighting--8230ed58-3c14-4d90-8648-5c68b50db524", "sighting--a1849175-f829-4d58-a240-d4f0d9e0259d", "sighting--880ff78c-d0b7-4ded-9b13-fee6044a22ce", "sighting--dbff7797-6988-44f3-bd57-efd8d5a01bb5", "sighting--ea0f4353-f673-4d6d-ab7a-8cc6e1d37a19", "sighting--68570250-6c12-45f8-8d11-21656eea61a7", "sighting--bf31c940-01a3-443d-9903-988d4924344d", "sighting--5c675610-ec92-4f70-a191-cfd4ec00f2c6", "sighting--46ec2932-335c-487e-b57f-10d6f7523d2e", "sighting--1be8c3a1-452b-4361-ad7f-2de925014a11", "sighting--0ff2fcc3-c048-46e6-9bde-4944d34c8a57", "sighting--e6b4dc34-a23c-43d2-a806-e244f3830f5f", "sighting--c88d1827-5913-4b50-9279-3bb9551e9353", "sighting--7eb34c19-7572-4c7b-80c4-b54ac5ec5a59", "sighting--c9225c72-39f0-463d-91e4-8c0579796488", "sighting--7f9e2f83-42d1-4711-8787-e35f2a8b529b", "sighting--bf14dff9-f76e-45aa-a672-69a48e34fbae", "sighting--0ef66e19-a7ab-40b3-944c-400a20aa82b0", "sighting--629348cd-2aae-48e3-8fbf-23ca1bdd0601", "sighting--2b622dd4-733c-4c2f-b556-9247b6cfe277", "sighting--649a5795-3e0e-4c01-9dd2-59ecf8e9271b", "sighting--fefb3c68-8a42-4a1a-93a3-c56a8db81e80", "sighting--d5a4a9f2-3abd-4f89-9234-3621968754d7", "sighting--3bb208f6-d328-4837-a4d6-93e724440158", "sighting--3d531203-17d4-47b7-acb8-ad39923e9d72", "sighting--476f8839-b03d-4592-8b4a-64c8729d6e80", "sighting--648c20cb-c71e-4d00-8400-f47753bac1ee", "sighting--31770a80-36ec-4066-af48-b0997b8c271c", "sighting--5e7cdca3-1764-4103-ac13-2c906a050ccd", "sighting--4753ab82-25e4-4a38-8b9e-fcc05c85f1c3", "sighting--82fd61ea-f5a0-4fbe-8c22-4ab4a9afadd0", "sighting--e6fdca8e-b5e3-4b2f-ab71-7a116b6cace8", "sighting--c7caa872-99c3-464e-8c4b-de30b02809f9", "sighting--664a9dbf-a36a-491a-a65a-cffe32865d71", "sighting--09e31609-27c7-4ee8-8c8c-a826da9d4b10", "sighting--e4ec9b7f-210c-431b-925e-2d7e4f78e6c4", "sighting--f591ddff-4854-42e8-88f7-2db09da3c3b7", "sighting--9975370a-e006-4141-9026-5cb9bfad2909", "sighting--d52e7879-5447-4af1-be09-e35092ae09dc", "sighting--d3452a8b-93f6-4d34-8309-3ea684366f2e", "sighting--6af91e13-c76a-44bb-b566-ce1b30f82f98", "sighting--4a684f93-22b0-4ca0-9d5c-6b062bea3db6", "sighting--936e6fca-49fa-471c-a422-64528d3589ab", "sighting--6225d132-3595-44b8-b061-9c8a470f2fb5", "sighting--c509634a-865f-4fe8-8155-ba37077597d1", "sighting--833f93b5-84d3-4d55-b79e-5aeca70b4c86", "sighting--68d52a36-af4a-4fd0-bcd5-650f66630c89", "sighting--54e3008d-f3ba-4b8a-a533-a0111b329b30", "sighting--cf01fcdf-8b5b-411d-a50a-5e9528e4c972", "sighting--ee1cf8bf-40d8-463f-a402-9d4f5b360aa7", "sighting--a38f9d8f-2469-45d7-91e4-a7f0877504b9", "sighting--7b5a7b42-3f70-459b-bdbe-cc0e26b9c662", "sighting--97baee95-01f7-4335-b0ff-18c16e967f5c", "sighting--8604a0ae-1e5e-46e7-905e-7b01aa853de0", "sighting--4ad9c041-f9fa-4214-a609-827fb356a92d", "sighting--1fe4c18c-bdb5-4e12-84e5-361a81ce069b", "sighting--a0b12005-7abb-4662-ad86-b66312cdb434", "sighting--5e999bc1-5322-45ec-903d-8fdb67668089", "sighting--382597df-f310-4ff8-81ed-5a7259876d6a", "sighting--1a96ac5a-848a-49f9-8933-9dcd8caaa98f", "sighting--89b4caf3-8dcc-437f-9897-517ea9f8952c", "sighting--1d5c4a00-7b33-4d65-9d4b-3c13bef33d8a", "sighting--9d5306dc-1798-4086-ad98-4b6c96394faa", "sighting--1cb0ea70-b895-4b8d-bd3e-a4c599059c67", "sighting--6b815d24-4599-495f-a179-425c6dd88e4b", "sighting--1df8d46c-9f17-49fe-bae5-35b81150f7a1", "sighting--218cd411-d1f1-45a4-ad6e-f409b1c4e94f", "sighting--f39906cc-f1da-4af9-a947-37fb500e5958", "sighting--5caa69de-050b-42bc-a450-23525eb1342d", "sighting--5e43c7c9-8c9b-417a-ab7f-472754acaac9", "sighting--a7d03056-b7ea-43fa-961c-36880fd2ac75", "sighting--26da11fc-b184-4aa7-adfa-fdd51295d4a9", "sighting--ddc74f11-abd7-4736-aa2f-8df2d6d7184b", "sighting--355965c2-870f-4df2-99f1-9268b60d1f0b", "sighting--c784d188-e43d-4a2f-9324-ff66ddfb6b3e", "sighting--cca6bbb0-7c4a-46df-87fa-bd3f2f6f70e4", "sighting--3fff1002-2b3c-4cba-869d-891197f0864b", "sighting--dda60e3f-0866-4482-bad5-ae36b2a19d54", "sighting--2aabb8e9-0d3f-45b1-89bc-983a3f13e16f", "sighting--7ae91a85-ea3e-4e36-ae0e-60ce45c935c2", "sighting--729602f3-2c1f-4a82-8d1d-3aa91e028dd5", "sighting--b36e3b5c-2516-4549-96d2-6d14bad01dd6", "sighting--f92d2637-aa3f-4c35-81f2-6fd2341484c6", "sighting--7877a7d4-ff50-4ad3-b4c4-d50b87161a81", "sighting--10e9384a-a7d8-49df-832d-5991a4dc9ae5", "sighting--4123e406-8b74-4e4e-9bc3-1479d28bfe39", "sighting--7dabc802-82a2-4e2d-b67f-f411208ec22a", "sighting--0895a095-2f41-4546-b033-f5a75a4acb3b", "sighting--eece9598-e468-4677-bde5-1d2ac7a0c051", "sighting--749343a0-67e5-48f1-8d32-cb7649c4591e", "sighting--a296c637-02c1-4a5c-b951-0f762c4e5f5a", "sighting--74cbd055-3821-4fea-bd81-507cd641251f", "sighting--87669979-0d8e-4d7f-8be3-9e8aeb8c25e5", "sighting--66a1472b-64d1-4b71-8c96-f8c244cb3bf6", "sighting--51b1d84d-669b-42c4-ba7a-b09b2a6ec8d4", "sighting--4358e05d-4cef-4cbf-9262-63500a2e1d75", "sighting--a4fa0fe8-e8cf-4617-8745-0dc97098afaa", "sighting--752d30c6-79a3-4272-bbb2-ce6c5c9f99ef", "sighting--38c969b0-01f2-4789-8fad-2293ee9c7645", "sighting--a1e38b42-2c7f-4fd8-b021-82173d56149d", "sighting--ce47d1f2-918a-4a81-bdbd-7343ba8939df", "sighting--2300274a-f22a-4d0c-8ac7-b158d3a2b286", "sighting--c05e4ac2-044d-4ee4-b456-76eeedd15731", "sighting--92e14bba-f552-4ba9-9456-e70344f66209", "sighting--3c5251a2-0bee-418b-85dc-99e1311d4f61", "sighting--6758c8e7-7e0f-4fa2-acfa-702a2de2bb79", "sighting--8ce64a45-72da-49c7-ad6d-3fed6a6d688c", "sighting--5ce30231-a556-4cd6-8b40-5fd53ee1531e", "sighting--0d7a00dc-7555-4245-a4fd-29d7cd31b312", "sighting--17e5acd0-b1ba-4375-aa6d-eb85dd2e75db", "sighting--ae963f1d-b9af-47e7-a0ea-442184464dda", "sighting--4dadc36c-cda3-4104-895a-0f4b4bd0accb", "sighting--f276d490-981d-4dd7-97bc-dd6ae1ce644f", "sighting--b3e491ff-e6a2-47ba-9bfe-434f168a1dfb", "sighting--744eb2cc-6f64-4f9a-b64c-605c8370e35f", "sighting--26d07f5f-aae5-4763-95fb-f84355407864", "sighting--43441951-0ebd-4e17-a139-bc954a90a58d", "sighting--e6d8e897-4f45-4bf6-88c3-7bc1f29f03a6", "sighting--ab69216a-6066-45d2-a569-5897830d31ff", "sighting--4694df9c-cc65-4074-8dbc-c89b1e748d9e", "sighting--9b9db3c6-9a0f-4cfc-b4a2-bb4f18a857be", "sighting--9853d214-f332-4e8f-b9a9-033e16bf2381", "sighting--433100c5-bf10-4c57-8b69-ff272197b597", "sighting--73763a21-9678-4ef5-b0ba-0424dedd4d84", "sighting--23fe1d39-69d5-4272-a035-6a3c0b6c84e1", "sighting--3277eae0-0a48-413a-b0f8-d39dd8160807", "sighting--ba3ef3da-862f-43fa-85eb-8d3276759c22", "sighting--194d17c8-8e6f-404b-b13d-85ec5f9aae46", "sighting--d786c771-347d-42fe-8871-19f1c5e23d02", "sighting--697d9a77-65bc-43bc-9878-ffe2e894a1f8", "sighting--f285212d-3afb-49ed-bf3a-3cd3ef077141", "sighting--5bcdd0d3-20a9-4cc5-8751-66868f6dac40", "sighting--f1113404-46d0-4514-a5e5-278b0b9ba6ea", "sighting--dee02547-c16b-4032-ae6c-8c9d0e2cf693", "sighting--9261fca6-e04b-497d-93d4-8be7f093989d", "sighting--4566e1da-9e94-486e-b254-0d7e72ca9651", "sighting--9beaa7d0-38e5-4ee8-9cb3-3feffb5a6dde", "sighting--d20bcea2-6297-4aef-a58e-efb054f8ab85", "sighting--76245b1b-f54e-42f0-a855-0b8f4f64a54a", "sighting--9a655539-5d52-4e16-81cd-e99032adf203", "sighting--0cd7eb81-faae-4557-b41d-868da844015f", "sighting--7168659c-297a-4d1f-a9ac-41afb61e962a", "sighting--dab3c337-ca1e-42b4-9daf-62c26bf29ced", "sighting--1e7d06e9-0090-42ff-abbe-7a0476888a5c", "sighting--c415824b-9700-4360-9316-5dd569cff9e5", "sighting--c90a4a44-1a8b-473a-984e-cc1e1123d673", "sighting--e1a5d65d-836c-4720-b81e-b51b3c107a9e", "sighting--75d79921-594a-4bde-9f7c-3c40fdea387f", "sighting--ff5b516a-8fa9-4345-ac25-f8bd9e12dc80", "sighting--fb98bbb9-3b86-4a31-bcb8-e0775f5c298d", "sighting--60f7338e-3fd3-4dde-9b9e-814583c7ef31", "sighting--75673002-4760-4eca-b2a0-e678005e827d", "sighting--c6d74df3-5a73-4528-a94e-48e225c953bb", "sighting--fdf0bf34-9eb8-41f5-b471-93b338110689", "sighting--fcb50794-36e3-436b-8c17-fef9ad370aac", "sighting--155fdf1c-ea95-4e51-861f-fdf196d36675", "sighting--e9c08ade-31c4-400a-8c80-82d900399e3b", "sighting--0a6b2648-032d-46ee-b505-c64802e52c19", "sighting--7567a398-a8cb-4570-bef3-2065311a183c", "sighting--40a38949-2041-4b11-9390-ee682e9bd7d4", "sighting--32d9b3be-66b6-4185-92e9-e27b7cde0215", "sighting--a114d6e7-445d-477c-aeba-010010356060", "sighting--8413cd54-a40a-493a-a17a-9129ed5f908f", "sighting--28d34511-d60c-410a-a2c6-5eed1d9e742e", "sighting--114906da-52e2-4fe5-847f-b7f2c03684b9", "sighting--043614c7-e75e-4050-a7b8-0d449fedd5a8", "sighting--301f46ec-190b-4990-a331-22c25aaf9bac", "sighting--39a40dbe-5a3c-4404-a292-5196446ce7a1", "sighting--dc320071-6854-4d6a-8a2b-2a92e6c76336", "sighting--7da4302e-a3d5-4b32-9bfe-784269ede78e", "sighting--e60601be-e228-4b01-824c-fc4ac4a18b2c", "sighting--e544636c-2052-4c36-b487-3229a3660454", "sighting--7de2f6ea-23e6-4f85-8957-d1dddedf48a4", "sighting--924b953f-6213-43e9-9d5b-849509889444", "sighting--3bc6cf45-8f2c-476a-9657-26b4748bf245", "sighting--2880a4e2-3c0d-4a67-9667-bfaa60dcc0c6", "sighting--bcc42da8-93a2-4abd-9abd-70a2c45beaa0", "sighting--54a99731-8f5a-4b78-9c26-03b1d23ca24d", "sighting--84d2cf36-a0da-4204-8266-e9a33ed61aed", "sighting--c5d84241-5973-4230-b025-00afb143011b", "sighting--c3c8a337-587f-4d84-95de-8b7ae05098a5", "sighting--34cf1aaa-536c-4c2c-babf-e02aae273a52", "sighting--aa56aa51-1efb-4d99-9675-6b735296aa10", "sighting--c6a0ed6c-91bf-47a9-b0e8-12ef0856c150", "sighting--c821d1ef-5871-4e46-b5b9-da90ef598953", "sighting--6e82ffe7-5b61-4a7e-ac74-dc3731e7087e", "sighting--f7f1f81e-c688-40b1-9c2f-25c911799b75", "sighting--dd8aebcf-e376-4189-bcdf-9d811c253063", "sighting--922c09c8-ff6a-4863-99a1-353a770ae2f7", "sighting--83dfa4c1-aee5-47b3-98b1-a52a0311ef3c", "sighting--522561bc-86f6-4f2e-9343-27250ce2900a", "sighting--0f143b2c-6476-4e3f-b497-6af662f26b86", "sighting--8211141e-1caf-4b0a-b626-118a12e39475", "sighting--4e543b89-d4ee-477b-87be-9539d0623da0", "sighting--087c759d-41c6-4a29-9a47-c8568d827807", "sighting--abf19fa5-1840-4c64-934f-88cdc5ae3f1c", "sighting--7f8de714-4399-460a-a671-891f91e131b3", "sighting--37ded19c-db42-4e3f-9baa-c59715e8e42a", "sighting--f1ad4614-bc37-434f-a9fe-f4f65cbb1aa2", "sighting--5579935a-00f1-4ef9-8c15-c40c1d852f5d", "sighting--68a44690-9439-4fe7-a3b2-5297708bf5fc", "sighting--11ea1eeb-6524-4231-95c3-08ad7a842eb5", "sighting--c544e3e9-669f-4675-8bc0-1aa585479a18", "sighting--2a0ea016-32dd-4532-8d07-5c1ce13a1dce", "sighting--c9ed170e-b650-470e-87b5-b208e0da48cd", "sighting--270e12de-1ca8-49d6-b4b3-2305cd5aad8f", "sighting--666b2b01-62fe-4af2-9110-50bdcec11cbc", "sighting--813e846a-2092-4e79-9ed7-bcd0625fa09f", "sighting--5a13c766-cb26-4faf-b8dc-270c8a471d36", "sighting--b84be0a6-b0b1-40e4-bbba-980a75cf7331", "sighting--42f52145-7018-4f61-a879-bd70a92749ee", "sighting--d8837623-c0ba-48e1-9e49-2849d1aa8f27", "sighting--8cd1fa90-e2e9-4772-8242-4b23c5c7fe82", "sighting--3754273d-cf3b-4a31-b98f-ed6735226e53", "sighting--4dad42f5-e87a-4c79-88f7-1f75e7b764e9", "sighting--53e1c459-7851-4a3f-b08b-484de86a896d", "sighting--473c6ab4-5221-4fec-8e56-d7f84a03c0ed", "sighting--c070c5d3-4667-4173-8a20-afa28fa762a3", "sighting--e4004d68-02ad-4164-9501-ab852f240933", "sighting--a40b30ab-7bee-4841-b92a-d88677b09026", "sighting--07fdf258-6c90-4b26-9456-e84e1ce2550d", "sighting--c92232f2-281c-43ec-8dc3-576544094a96", "sighting--dcef84a5-baf1-4031-9508-974189a7d860", "sighting--6b27e49a-140c-4410-a479-02edb99bd989", "sighting--1e324e02-cc56-4d89-b4ee-6b1ba9e345aa", "sighting--585da8a8-2354-419b-a027-f90df028a9c6", "sighting--eb19171c-44b7-4d56-be08-2412bd21172d", "sighting--85a36929-67fc-4a41-b3bb-38139926a584", "sighting--6f74d60d-75d8-46dd-b528-f478532c43fc", "sighting--fcab433f-68aa-4eb9-9725-fee59b797606", "sighting--638d2dd0-eb1a-41a1-8e87-a2aa7816da20", "sighting--347290cf-b397-4084-b1e8-785ec34bed75", "sighting--f7dafde8-13ed-4368-ac98-0713a1a9862f", "sighting--48e60d33-e821-489e-bf78-86ee249218e1", "sighting--19ab63bf-421b-4c54-af59-74436a1fcb61", "sighting--dd28f98d-81c2-41b5-810d-f7f6140f5afc", "sighting--ecdfffdd-d98b-4dbf-9197-8884c2e3cc54", "sighting--b2d5e843-d17a-4ca6-899f-9b1abe9999c7", "sighting--b8c3c665-87ce-4c85-880d-75a1b97d31a6", "sighting--ebc9a0b2-53a3-4192-bfc2-493a5ecb5ca7", "sighting--5b20ee56-04f9-4d96-a6d8-77a8482ed385", "sighting--f7d460d1-a2e9-483b-a45d-a31eeab62e21", "sighting--93670651-b02d-4142-9fdd-cc8e13e48bd7", "sighting--8596bbbc-f89d-49bd-966a-a30299c67534", "sighting--dbef75cc-f8a1-464a-ae10-bca16bf56dd0", "sighting--2d537719-125a-4cbf-bc77-ef6e1e4b29ae", "sighting--6638eb7e-6f8b-49ab-84a8-752737bcbef4", "sighting--4ba2a713-eedd-46fb-9134-8004e6c59dee", "sighting--3edc473b-7f3e-464b-ac18-32a7042f7515", "sighting--57f30b01-101c-4aa8-9958-0f77614930ed", "sighting--c409a0fb-9e2d-441f-86d1-1879cc2637f9", "sighting--62b7044d-1faf-4e1f-9cf1-86b3ba01cf93", "sighting--dbbee993-c7a3-4182-8838-c345a650655f", "sighting--880de468-eaff-4db6-8f34-ce29ea06c1ca", "sighting--4a0d39bc-8a6d-4fc7-a316-063f859aa32f", "sighting--6f2c740b-b21f-4f87-be63-d54bdfa98858", "sighting--de0b063a-ccc7-4b8d-983c-392deefd7ea1", "sighting--2eed09f9-ea0d-40d3-a720-f855c0f86f5a", "sighting--552bca9b-a36b-4334-9c34-f24fe2a12a10", "sighting--d8da5fbd-0d46-48a5-92dd-67555599fded", "sighting--7abc8511-5085-42fc-b459-a8c4948a0f7d", "sighting--34b37903-1920-4ba6-aa34-d18e83fbf76f", "sighting--34b0164d-fbfb-4741-9e3a-44abdf18df25", "sighting--72fd4b9b-1ab1-422e-84f1-4c5fc1a84626", "sighting--68630ea7-a42c-4b35-9f5f-8393eb429ff6", "sighting--e8c4cb9b-0b55-476f-8b39-48879a9ea9dd", "sighting--c83cdd74-6418-4e06-a3d7-3663e852d0a3", "sighting--3faa51e7-3d12-4f8e-be86-8a8a8ccba731", "sighting--7db0818c-f523-4099-b830-4967c7db1bbe", "sighting--72e13d52-4bf4-4507-8c04-aaa4eb155538", "sighting--9ebd8684-112f-42fb-8ea5-70eeb5c8d2ad", "sighting--ebe430ff-2f91-4111-80e1-374cc69d2aa6", "sighting--9e1d1f4f-90c8-47b7-8465-c4b308c8204b", "sighting--19bdef52-3a43-41f8-a2fa-227b69609f91", "sighting--b19c549c-9a06-4cd0-a6bc-ea476c571e1f", "sighting--927a658c-d890-4099-9d89-af8eea67db71", "sighting--29284bd0-bbd4-4b9b-96f1-26e24c674b4f", "sighting--12af4fef-2889-4bd2-9814-e98af240e982", "sighting--8faf3a2b-24a8-4d64-b394-444b3d7eaf9c", "sighting--af920601-a97c-4de1-b09d-06dd76c14e8b", "sighting--99eb6f38-0cc4-432e-9f64-d039d1483656", "sighting--ef8f586b-9d19-4f60-be25-98ef28bcb557", "sighting--5b0a498c-28fa-4d02-a8a4-77a4343e4750", "sighting--c56df821-392c-47e0-95c7-858f22cf4da6", "sighting--7f4bfa33-c77f-47ee-ba2b-9b08c2a645af", "sighting--aa54a235-86cc-4f14-9384-0ac9fb54d315", "sighting--e1401821-9297-4afd-9191-63b0ca046a53", "sighting--c048c8cb-84a8-4ddf-9456-14cd6e2c94e9", "sighting--e23a04f2-371f-43f5-984a-ddb16fa9907f", "sighting--b4c229ef-2904-482c-b8c3-fb3020786f9c", "sighting--65cd6716-2754-48ac-bfde-1458ab8bbecf", "sighting--85de6cbe-e21f-4615-bdc2-2200bcc4ccb7", "sighting--802bb5e1-d22a-43c1-958f-86308f2ae486", "sighting--f3834221-6ae2-4a1d-ac4a-2f7f17bd4f54", "sighting--52b48006-9eee-456c-b45c-b7df1985c58c", "sighting--bcbb8ae3-a48b-41cf-83a7-2dccdbd4ef02", "sighting--7ad46df9-275d-4384-84ef-c39ccb0faf49", "sighting--32d12a32-c7a5-4dc8-b17f-969f962e6e3e", "sighting--b18bf81b-1cd0-4bed-bbb3-73d8a9e26daf", "sighting--3e04388e-8149-4b9c-8a96-7561dfa7ee10", "sighting--f1e8d1bf-3fe7-4a6c-a35e-c26c77ed8460", "sighting--db6bc85c-2ceb-4c0c-b7b7-1f820607f247", "sighting--6e07dd1e-7662-45d1-8b38-d23a11d5deb0", "sighting--ec19c313-cbd0-48bc-9319-eed5c87e3a57", "sighting--4fbb0e88-d997-43c0-bb61-8972c51d40db", "sighting--98922e93-dc8a-4c3d-a82b-e520cfe06ae6", "sighting--d28facec-b8c0-40b9-8ddb-34c9ce458188", "sighting--27c0491f-598c-41e1-b89f-705fb2b45c11", "sighting--1b8e4cb7-ea44-4e96-b91a-2458d69b4c9e", "sighting--f8161301-9096-49c0-8b9a-1814da19b3ba", "sighting--97164c71-4fed-4da3-89f2-341b44cd6ea2", "sighting--82751289-9a7f-4364-96c7-bcef1cfd08e3", "sighting--2ed52048-7079-4399-b3e4-55a75d607895", "sighting--da41bc4d-b01d-4b0b-ac5d-f8f685d46da4", "sighting--63f77f8e-66fe-45ce-b2db-f48f197cf7d9", "sighting--eaad2738-f9fb-4507-a9f0-671a6e280943", "sighting--cd58ec01-e018-4e0f-8d80-7a112890714c", "sighting--847d3af0-af4e-4186-bb7a-a117eb5b37cd", "sighting--918b2415-bf15-4e5c-addb-3bee94facc15", "sighting--bd783952-9399-450f-b022-c81acd88d06a", "sighting--1c8f5ef0-9334-4ef4-8720-369302553c41", "sighting--1ddcbd5f-747d-4274-aacd-3d923195fb5e", "sighting--205eed32-7494-4c73-b0eb-a67d4510171e", "sighting--dcc6eccc-241a-43df-a757-269ebe5cfeb7", "sighting--b39c37d0-bd2d-49ca-902a-41bdddba5fe6", "sighting--3b7bc467-07e0-4530-aab3-0d4f0f7e0cbc", "sighting--cc2f5f3f-6d38-41ed-a46a-b5833e3221c3", "sighting--bf02ac20-fee7-4bb0-8de2-df4a4c2e8ea8", "sighting--8a4f57fc-2ef6-4858-9cb9-5880c4eeee22", "sighting--45038cc3-daa5-41d1-b3a6-08cfad760d8f", "sighting--d02199aa-e687-4c11-ae6d-a37b8a0beb5a", "sighting--9e5c9b62-e835-4e6c-9359-19a050a7172b", "sighting--01a41b96-f2ff-40fd-97ce-177ced7e8de4", "sighting--ddc95abd-f4cd-4a8e-8e34-127abfd7d422", "sighting--ab58dfe8-4810-4bdb-b1c1-17c40f5f2222", "sighting--a7c35db4-fde8-40a6-a059-dbde1afef21d", "sighting--8023c19c-d93f-483d-9821-890bc93e54d5", "sighting--2c115820-86ad-4e49-aa68-a9fdef0b4c46", "sighting--c07d6670-2874-46f7-bfb8-773c95fefcdf", "sighting--8cd1aac1-e0a0-4819-8649-5e8de1a89697", "sighting--b2770f65-3171-413d-96c0-f5612dbca7ab", "sighting--c3c09aef-6f1c-484e-819f-610bb282a632", "sighting--81be0951-ba0a-424d-847d-08076016ec48", "sighting--5938d406-7e25-491d-adc1-71dd841a9c28", "sighting--0cbc9b28-9bda-4142-867c-0cbfa1a4157a", "sighting--67ba2c25-dce9-4159-8785-81ff5cb132c2", "sighting--8c8bb0e7-263d-4c80-8d42-f1e1f402078c", "sighting--bb3f4a7e-8894-4a9d-9e68-ed9c717f0f5d", "sighting--6d4a53bc-74a1-4b31-9b3e-3a998e86cdec", "sighting--19eadf16-4673-4d6f-8c80-2d9f22439129", "sighting--04050e0b-c257-45d3-bef9-6d2cc473ca66", "sighting--bb33f8ce-2db5-4a97-8657-1a81f2a99f9d", "sighting--d0c0d8fa-84c9-4676-9c98-dbdfa54a6559", "sighting--0ce91ca5-8789-4812-b276-1c13f1aa6aa9", "sighting--28e23ae2-714d-4977-aa78-8a95f27e2d7d", "sighting--353c21d5-d599-43c8-97e0-8988e97f8e06", "sighting--cfdb8859-3bf1-49d7-99ca-3ca4dd01cf63", "sighting--a5216a99-f2c8-46d4-9cad-aa15abae696f", "sighting--c6f78fc0-4bf2-41df-8027-48afdc8d77b0", "sighting--f7f7cbf0-a34b-4717-875e-32852d01167f", "sighting--a3e97deb-65e6-4fdf-b921-f3a32c74de99", "sighting--1e26a6e0-864c-455c-848f-5ed306e8de62", "sighting--e663a488-1907-4e44-8c27-0052e503d9f1", "sighting--db614d44-cf1f-4caa-a05d-a524cc358547", "sighting--e303e9e1-3b90-43a6-b213-fe2145994b9d", "sighting--e49653c5-dbd0-4485-85c9-7139d49d92b6", "sighting--99c75cf6-6100-4707-b2f2-f5cdbabda1ac", "sighting--22ab661c-2d11-435e-b1e6-c862cb1b6786", "sighting--aa4ee8e2-062e-42b7-afc4-6769bc9a6a80", "sighting--d9793fc0-34fa-4a24-a89a-bcb7cb2f3078", "sighting--07a8d9a3-ff02-43dd-85a0-ad169ed7cd8d", "sighting--bcc671bd-0df2-4334-9aab-c308d2f7e7c8", "sighting--422d2e46-addd-42fc-9b47-cb1b5f7dceb3", "sighting--02f784c6-80fd-40ee-8b52-f2bc2d777297", "sighting--dee566fd-924e-43fa-821c-c2a2a14ba74e", "sighting--e23f1862-08eb-4280-8ccf-d866864d8d98", "sighting--4228353c-86c8-4659-8afa-feaa262d5414", "sighting--ac3b2d89-c964-4aaa-9576-b93553c39e44", "sighting--19df26d7-f180-4dd6-8d78-a111162c5a02", "sighting--330ff05b-0a65-4127-a0c6-3e7a73664ef0", "sighting--43009d53-9cf7-4a7e-8404-dcd55a85922f", "sighting--504de347-830f-4f29-9826-38f31d4bc06e", "sighting--29da00a7-363a-4875-a0e3-44e44f455ccd", "sighting--3e348cff-68c4-4d78-9a9d-1026c592be2e", "sighting--d21b5e9f-ccc6-4c90-82b7-b8c5fce65ce7", "sighting--0ccf3408-72af-48fa-84a3-853379025ba2", "sighting--7cff8218-989f-4da7-b678-66e0f0b3ac3b", "sighting--dd25610b-d19c-4d25-959f-70dc77fa792c", "sighting--8c07e165-4af0-4168-ac17-3ff79915cb70", "sighting--e370cc05-ade8-4754-b00e-fc21d49ccde4", "sighting--16b002d3-7c86-4e84-b542-6771f20a2ba7", "sighting--e9af444f-a250-4e79-a87e-5d3c37f4b2d6", "sighting--b2225e1d-95a6-4386-8d05-56d9d3f86d52", "sighting--a3211e2e-9c32-454d-b1df-bded78958df9", "sighting--f3705c4d-89d3-413a-a213-568d591120d6", "sighting--5a0581de-773a-4104-8a7a-fd1ce87a03bd", "sighting--2eb2695f-ba38-4d8d-ae1d-ec9f7ad3f8a3", "sighting--dcc59c6e-7494-47e9-ac73-2faa859014f1", "sighting--73d1908d-8c8b-42ed-be4d-ed0c165c6671", "sighting--0fa26f40-4e0b-4c0e-8cbf-9f4167e949b0", "sighting--9fa4ce12-47cb-4e50-9467-ec5f23aa81d2", "sighting--4e23973e-fde7-4e86-94b2-2b87884a6e85", "sighting--66f85083-d1fc-4276-86fc-04292b0ff5ed", "sighting--23c9848c-0ac1-4400-83d3-10bffc31a802", "sighting--b5ccf446-2e19-4ae1-b16c-02918e49709e", "sighting--be5ff704-47c0-4976-9955-788c90bec0e9", "sighting--1e5e6fad-cebe-4bd9-8dc2-6ee91e21c3e2", "sighting--0abdfc88-c930-4f84-8042-dbd2208d151b", "sighting--8c3a14b5-2427-472d-9ff8-694dbb0865fd", "sighting--62397e66-b646-4bcd-a800-af32d4072467", "sighting--9b3e363c-b328-4835-a847-0f3c01beb763", "sighting--8ff7c916-ea5f-4fa4-aae2-40f8e802fabb", "sighting--27bc5f15-6d19-4833-9924-6d7dbe281e6b", "sighting--940e77de-0f55-4c53-bbd9-a56c9aabeb37", "sighting--dc44a0df-5c01-4119-ac24-0a3ee1d0037c", "sighting--3561a222-1d90-401d-8e7e-67af1b08c02d", "sighting--b99fc27e-7fa9-467c-bc71-d6bf88bd60a2", "sighting--50fad34e-b4f2-4f59-91c9-3596a5c633ca", "sighting--3f34b3e4-a8f2-4c51-a053-910b5e131648", "sighting--217f2d8d-df26-453f-ad3b-9e5545669ddd", "sighting--373ed22a-a7af-4f95-8551-86b54811faf2", "sighting--09d46487-3136-460e-8d2c-e8abc9c5fee7", "sighting--416f068b-1293-4532-800f-9d86344ac01e", "sighting--7c2f65e4-e8e5-43ea-9f31-12ffc43b81e1", "sighting--dceaa11b-7111-4224-95d8-b7a1137180d6", "sighting--f7974659-6790-4d2d-b4fc-3055681b2a9c", "sighting--d50c6b6b-f254-41f1-888a-4560052af342", "sighting--593dfcfc-e978-4814-8af9-492196005967", "sighting--8c87d984-5919-4be1-9b6c-4b03bfe94884", "sighting--c0b8276d-d467-4f00-8660-933c7717bde1", "sighting--11fe4364-dc1c-4db4-a98f-5574ef008d22", "sighting--cd09e627-7f56-4992-a98d-52cb0c9e2647", "sighting--00a006c7-ea32-4319-82f4-e6f0885dda9a", "sighting--a68b1772-0fd8-4f11-90a6-ada50750745a", "sighting--ae78cbe3-8b3f-46a9-b592-1ab34096d693", "sighting--2992ee24-7da5-4fea-83d9-d58fcf4a0ca4", "sighting--5512e81d-a903-440e-b03f-9b858b161f66", "sighting--ef806a70-0c44-4d5c-b976-8974b46080d4", "sighting--ba75a096-0661-4537-bac2-dda8bfca692e", "sighting--e0767c2b-a4b5-4a88-9cd1-6f8e3f3f97a0", "sighting--d1e42347-dce9-4d6b-aace-760351e4e567", "sighting--fa04c9fe-7def-4a22-ba68-3c9cdb34d952", "sighting--78be2a06-89c9-43b1-9d31-3b0bb461ccbf", "sighting--060f09ac-0a3a-4cf5-b8ac-270bf4c798cc", "sighting--fb853773-5c4b-44e6-b24c-e2d2307e2072", "sighting--b317ac93-1c75-4b32-9655-fc128b361ace", "sighting--8185fc3e-322c-4700-a50b-ed817cd29ef3", "sighting--e165352d-4c7c-4863-be8c-3c4fd9625fa1", "sighting--26e15b6a-a064-405a-accf-e6a4694fe74a", "sighting--a55f6dfc-1515-498f-97fc-e5867bf38838", "sighting--7b0cd251-0feb-4c8f-93d2-117d61c0ad35", "sighting--d30a8b87-755f-46bf-9735-9f3f339e9e62", "sighting--b29ca5cf-bff3-48d1-b507-afea61f12a80", "sighting--66fcfcde-b6d9-4b8c-8b9d-206aab3e6fb1", "sighting--676b8810-e8c7-4fa6-9d4d-1bffbd6c8d79", "sighting--c93fe024-daa4-48c9-be55-ad418459b815", "sighting--5e8d41b2-ff7b-48cc-b858-8e47cd73a95c", "sighting--60c232cb-6b0e-4940-b47d-16f19cc2f21b", "sighting--58ace91b-c3e8-42b6-a63a-3204c38652c6", "sighting--0f8edb5f-20f6-4dff-9d9d-11054dbc7525", "sighting--1d37a5c4-5bc4-4cb0-9993-9d7feb62ce7b", "sighting--bedcf71d-0f12-4850-9d8b-42dd129a7a91", "sighting--63ce1581-0f9d-4397-bb1d-9bc25fb74dfb", "sighting--cb8d3580-a8cc-4de6-b291-e1595b40bba8", "sighting--3905fd1f-cd59-4a59-890c-5b63af817c90", "sighting--c0ed72ac-b5f0-441f-9556-eb7a099b0961", "sighting--2e5a6002-a681-4097-88b8-44c43ca6bfa1", "sighting--12c5ae09-6622-4d4f-99d7-6dcc8b72eebf", "sighting--35ad87c3-ec19-4faf-b872-2b59bf91f8b2", "sighting--b39b990f-9e37-49d1-ad05-f7b917e12c1a", "sighting--16a1e7c6-9075-4b45-ab45-79d238642ceb", "sighting--39f1c3cc-3c26-46de-b2ba-27a59e7884d3", "sighting--bf6804af-ad49-45e2-8630-d606c33c3ff3", "sighting--a1d8d820-5edc-4ebe-a227-9383cf179dbd", "sighting--c534f113-aba1-4631-a6ef-b2f0d045df1b", "sighting--03aaf827-e750-49d3-8bf2-0358da9f2135", "sighting--a9a90421-3393-4d42-b34b-1b0387333790", "sighting--99dab789-02d5-4379-874a-b4bcedf4c74a", "sighting--3bde17f7-1209-4da8-a526-48a46eb1b8fb", "sighting--06266423-d6f6-4b54-9e76-e0b74a6cf19c", "sighting--52ccb971-a213-4eee-9f1c-5406540e0011", "sighting--b33157bc-676c-4b45-83b1-0b1b3fdf22bd", "sighting--f2d14100-d13f-49dd-bae5-249a8ef979dc", "sighting--2c02ceba-da0c-4c66-a75c-86e600e56eac", "sighting--11a50ef1-80e5-4999-b0de-d6b8b1d61b53", "sighting--3bbc67f8-c814-47cf-aa08-956cfdb910b4", "sighting--391d28be-6855-48a3-a5f6-e261f5be8f67", "sighting--5ecf5b36-6a2f-439a-b263-6968dd44265e", "sighting--b7222de8-4010-4ddb-a2c0-a3c2e53298f3", "sighting--081ae9f5-e1ea-46f8-b689-c1123ac7a7da", "sighting--50ac0d70-f664-4300-9827-98f442723285", "sighting--3ec584c9-f2db-4999-8e35-eb2fd9eadd4a", "sighting--857e51bd-51c6-4f0d-96bb-59b0f1b1f2ba", "sighting--8f55f8a6-a16c-4fc8-baf7-34389b87507c", "sighting--4902be3a-9817-443f-b54e-ccde95587b4e", "sighting--81f2e202-c026-4650-8b28-8f215cbe3201", "sighting--24225eb6-c994-4f8a-8c5a-e0541e78ce58", "sighting--e55873ae-91ef-47ba-9639-bfb24aff12e9", "sighting--de3ded61-001b-4dae-bcae-51d3e27956da", "sighting--e1d43987-05d8-476d-a5e1-ccb9de201091", "sighting--715fdfc3-9957-4ac0-93db-ce3fa2e682b8", "sighting--e686d21f-4ca7-4ba2-8d9c-204dee1b1369", "sighting--d42744f5-be42-468a-bf0e-76565c55b536", "sighting--a8eb782e-59ac-4356-9389-7a228551ec6c", "sighting--9b4a8a84-0ac9-4b82-8799-91f910a94110", "sighting--9eb59fb2-f270-448c-91a4-8a25988e6f5c", "sighting--4f575de9-8404-4123-a3be-66f45dbe7de4", "sighting--fd89c1cb-3aed-4b8e-aa30-3c850263c8a8", "sighting--5f77bbe5-3b42-426e-a94f-c865ecd99b1d", "sighting--ba0bbe12-36a4-4a0e-94e4-a8b1e71b2d55", "sighting--f8f3da57-13ba-4583-ae22-2d69c87bd7ba", "sighting--3888277f-4cf7-4543-8c16-bc334c793ed0", "sighting--aea5412f-4bc8-4826-a4ae-9ba7759b0d9d", "sighting--49eff5a9-737e-431c-88bd-7e68fda85bc3", "sighting--ad3987d6-ddff-48b5-b8b4-10455947ffbc", "sighting--3c32279f-b257-4b63-916a-92e29ff4b731", "sighting--58b140dd-4755-4038-bdf9-35403870d604", "sighting--fd1fb679-aabb-4a58-ae3c-0a52c53900b0", "sighting--92eebc4a-25e6-4a42-be46-5b8fb24352a9", "sighting--d31ef397-fe1c-4902-a79c-319ce06db266", "sighting--ff0df643-4148-4167-98f2-80622c22a8df", "sighting--dbc48e76-bfcd-41df-8a6f-7b944c2b0284", "sighting--37da5a64-162d-497c-888b-cbb319d455d5", "sighting--853f3d3d-0503-492e-b466-9f7fa05523d2", "sighting--093728ae-88b9-4ae5-9955-5ec16c8dcf60", "sighting--44c38314-bdc9-46b1-afe9-20320885547d", "sighting--8ce33588-79dd-4af3-b318-1357289a9ebc", "sighting--a927880f-fef6-4e81-b13c-ad6676b1f791", "sighting--d6944ec9-48ff-4329-a0cf-a0de627a1785", "sighting--ac12de8e-ba29-40c0-bc7e-3a0c55043e45", "sighting--dbeb9926-90d4-4ca7-ad73-4ef80d8a4b5d", "sighting--0c122e63-fadf-42c0-aa84-22ef0adc611b", "sighting--97b9b320-07b3-477c-9563-66e6087c8d58", "sighting--c8a6b8bf-d068-4114-902f-dcdb420dd834", "sighting--12f7a437-4037-4b0b-aef9-c65c0b56f710", "sighting--d2c4f646-506b-4660-bef6-392ae47e61d0", "sighting--482daab8-f1e1-4a91-b128-2fa1460fc945", "sighting--6aff1875-5c58-4562-a8f8-37b94ccf2a81", "sighting--4b8244e6-1b88-4921-8c80-6f81107aa482", "sighting--47b3a94a-d8e3-40d6-b9e1-02b53239b47c", "sighting--9198c64e-3bf4-4420-a663-a7a73575c7ce", "sighting--03b88e77-f87c-48c4-8ef8-18d02e212eb6", "sighting--bde3c74c-cf4c-4924-be74-1ae413bfef3b", "sighting--39687f03-4f34-4803-99cb-a3e6218430a4", "sighting--6bc8a315-5e68-4371-8d17-bace86ef7faf", "sighting--f844ba83-7ddc-4c05-aba0-2ec15ee3ddd5", "sighting--9545eaad-e05a-4af7-b93a-116c022f8891", "sighting--5152afa8-de81-4958-b5f5-b7760a4cb617", "sighting--f366df79-550e-463d-bedc-294961a2deb2", "sighting--662d77ac-c1c7-4440-adce-4e7ceb117180", "sighting--d61ab969-2c59-4958-9b73-920ce5940a13", "sighting--9cd0b6a4-605a-43a4-af17-80e88597d033", "sighting--1c511444-a7af-49a5-8afb-a28a6748bcfe", "sighting--06c33734-3001-47b4-8e4b-68f0fea9f434", "sighting--507944e9-938c-425b-a6ea-bab0f3fb5da6", "sighting--2ae0d15d-98a9-4490-840b-37dab3535daa", "sighting--0baa2bbc-e0d3-40ac-8eb2-2dbe2a9415a2", "sighting--863fe1e2-49ed-467f-8392-931c80e62b5e", "sighting--c9fb9b0e-95fd-4859-b7b0-ee916cc0c595", "sighting--f3108705-d9b5-4794-b8df-d8e7f3b151eb", "sighting--883211f1-14d1-4b19-9384-7a3519e1fc38", "sighting--fefb0d8c-79b8-44ab-9a07-32f018595b41", "sighting--8f3aadb0-a98e-4c95-94fa-f2cb24847981", "sighting--94eeecda-7e60-4eb1-82e7-e348d5f16b64", "sighting--ed1197e9-a948-4891-ac58-10c2c5def8e4", "sighting--45f8a702-e004-4f0d-9bd8-6dea79fb8e7f", "sighting--ea1231c1-ceb8-4871-84d8-3b4ff92e8b33", "sighting--442ba687-37c0-4741-b1c1-e60465cd0962", "sighting--4c7de6ba-dc54-45a3-a552-eba1adbcc132", "sighting--23167728-f834-46f3-90be-bf84379b1887", "sighting--a603edad-e104-42ec-b08d-cfb11e7bd09f", "sighting--6ff8c786-4e6e-435f-bc69-274e7643e426", "sighting--b6c92bd1-278e-4cad-a1df-379d3d944ee7", "sighting--c84fa04f-ea63-4254-97e6-a61ff1c612cf", "sighting--a8c20be8-44e8-4255-9925-2fcd1f39a0b2", "sighting--bdee6abf-16f5-4e2e-94a8-eafdaeb17538", "sighting--6be76cdd-34c4-464c-92a4-b039a16897d4", "sighting--fa1a5c35-c387-46a2-b64f-9a44f7152d4d", "sighting--0fa0d89d-f008-4c1e-9dcb-3a876904ea02", "sighting--f52ee2ce-01cd-4710-97b9-66f9ad82cd5b", "sighting--ddf75a20-7804-4c4f-a6a4-af64766b9a28", "sighting--7b4f1fa4-8f57-4764-a849-5f2854429208", "sighting--aa2173a0-515e-4801-b23c-f112ccd78fb7", "sighting--1c55a199-8ba8-41df-937b-89d898619afe", "sighting--734dd529-1710-48e9-b526-e172ef8661b8", "sighting--9bc72b7d-24c7-4574-abe2-2be25751d7df", "sighting--c9a2bc8d-634b-45f8-99de-21c10fed5883", "sighting--ad1e2381-d560-4536-9674-be154717f0ed", "sighting--4513f624-a8b2-4fb2-a033-b0c74a9f38b5", "sighting--03f6773a-142c-4146-a0f0-cc6f808818fc", "sighting--e78660a5-3f94-4cb6-a324-d20ffeebed20", "sighting--c03bba29-35bf-40a8-a147-4866e7321e8b", "sighting--26a98d04-6c0c-41f7-99d0-6cc23756a32e", "sighting--7b8d9dc9-46bb-4768-840d-df596bdfe7d1", "sighting--59b91f38-a481-4325-bc95-fcb02f892a01", "sighting--37fb472e-7c95-4382-a85e-1e54662944bd", "sighting--e21c3f7f-0b99-410b-b493-5ab86e02b403", "sighting--b1074e4d-d469-43e9-b703-88090faca07a", "sighting--23266cda-2066-4a27-9b18-2f075c959f0b", "sighting--c58d6942-3cb9-4654-b47c-8c9795e4462b", "sighting--d2a00162-8b45-4c27-9299-40b6c0eea792", "sighting--c4769fbe-cf3c-48f9-a07d-c9527f91e479", "sighting--5f57d020-4d1c-434b-ba57-8aac795dba8d", "sighting--33bb2e61-3365-4b9d-b3c8-9a7c3983539f", "sighting--fa0cb2a3-cc60-4d6a-9dae-c82101302cd0", "sighting--0a83d6ca-db01-400a-8aff-f4ee2f30b593", "sighting--e6b6ef7d-99c1-4a0e-9a10-3861b4c50457", "sighting--89b0a8d1-a58c-4a0c-abc0-f41a47a877f8", "sighting--b5b641bf-55b7-453e-98fb-893489ed1e16", "sighting--ede781ea-b85d-4b90-8e04-372d141462b2", "sighting--a71c8466-6b89-4258-9b41-6cc8654da496", "sighting--a96002c6-c4a1-4caf-9ea9-1c87b0f13024", "sighting--7b992e71-9c2e-4b2f-a727-70c61c874db5", "sighting--760f634c-e73c-43fe-8aed-45ff86ede53d", "sighting--cc0326fd-3814-463e-b1db-9edf1889c87c", "sighting--b213ba3a-0135-40a0-b69c-c9562e3d2654", "sighting--8a9eb33a-7670-4054-9e3f-39e0ea08189d", "sighting--ceca0952-fea6-488c-b079-66922eec9284", "sighting--8cc4eddc-91e3-4a6e-b058-52bd5338a202", "sighting--22927c98-8035-4ce8-b0ad-1c6eb31d70eb", "sighting--a840d2df-5a42-4dc9-a5ef-2bcd7a44965b", "sighting--b9afc40f-d386-4bcd-87f3-f10837ec3cfc", "sighting--f7fb8bb6-244a-4739-bd25-6033a0353992", "sighting--f224145f-33b5-4abc-b4ad-dc597f2bfc54", "sighting--22e24b27-36b0-4929-a493-f935e592932a", "sighting--025c5e1d-f240-43d9-8eea-f7555919a303", "sighting--b929204b-5736-4e11-bbb5-bd963ba814fb", "sighting--5128fe56-8976-4a57-aac4-421b70f9a3a9", "sighting--4870545d-b017-4f6d-9bfe-b2dd7ad13fc7", "sighting--7d1510d3-077f-4388-b8f8-81555748f9d8", "sighting--5197696c-266c-4f7f-8682-805f6873cb96", "sighting--a39d877e-d876-4f67-abec-c159b6720ffd", "sighting--a59c0212-0786-4155-bbad-55cecc28a5da", "sighting--8fd7e5d4-89e7-4f8e-a9c8-140f222a03ec", "sighting--c4883913-15d0-4a21-913b-056af5438235", "sighting--4114d96b-313f-4bb3-9756-0b2a18e2c983", "sighting--ce2fec9f-a1f4-4135-813b-7b29880af33e", "sighting--ff4641e0-bb73-4e48-a0c1-0d937c4c5957", "sighting--4214e8bb-7f9f-411b-ab79-bf9d6087b32a", "sighting--89ca3250-95f9-4af8-b7a8-1ec82ff6dd1a", "sighting--c900d707-8b7c-4d4e-8b5a-150eebc54935", "sighting--14c4c433-35b8-4c97-bfd5-eef6b6826272", "sighting--dc40393a-105e-4815-a973-9efcd2e4956a", "sighting--13ac1705-c7d3-45c8-8d51-44728419cb28", "sighting--719ed6db-8735-411a-9dea-837d27d0181a", "sighting--0d444ca1-9cee-4113-bf1b-8ca432c040af", "sighting--1e535180-b717-4757-8d5e-e5506795ef0c", "sighting--0f598ad8-0d54-4a25-8cc4-98f6cafa28fe", "sighting--ecf1779a-d1d7-4481-a412-7a687c888f40", "sighting--e1eb4573-f755-46e3-a8e8-73ba8b60e927", "sighting--353f9147-431f-4ba8-9d2b-f96b33bf10a2", "sighting--45b24c23-d358-44b9-92bc-5c36962f64e4", "sighting--6adc8978-eb4d-4e1f-a568-bc627ed792b4", "sighting--e1d77ac8-c89f-4860-8278-1f0c3a4dbbaf", "sighting--bb2cd65e-2628-47c7-ac2e-962cdc6a81f5", "sighting--42c70f72-0e11-4cdc-a574-685fbddb9f87", "sighting--f76730ea-ef5d-4bd7-986b-8f1576a83c9b", "sighting--7c878746-3ca5-4f89-95a9-bf0823209445", "sighting--34d301f7-17d5-4d99-af41-58138c9f9770", "sighting--2fa6d182-4a32-449b-9873-6c1366919c25", "sighting--82e81176-1058-4756-8b38-c8cbf24b2b64", "sighting--fbd978db-8e92-4bf7-978c-769c6dc372ba", "sighting--7dac3a65-bd97-4571-a3a2-ab6aef212cc0", "sighting--48f5130f-0f19-4216-9583-bf79a11bde28", "sighting--2b87e849-e09a-4b4b-ae22-251ec6909b1b", "sighting--ec0c4050-37b3-41ad-b300-aff882a3c5a0", "sighting--b058e2e5-8ab7-46ab-91dd-23ed8987446e", "sighting--5999240c-4f3b-4238-9558-69cd55ed45dd", "sighting--931f76f0-6d10-4fbd-ae90-ff17593abb96", "sighting--83e411ee-0697-4cb2-8b9d-44626ca225f9", "sighting--7d9f05f2-4af0-4fce-8430-2977e60052f7", "sighting--4e89b06e-ffad-4c95-81fc-f6c0317b943f", "sighting--187ebb06-7228-426d-90c6-c2c2fb7c4319", "sighting--6a3750a4-1983-40c4-abc6-85e82373e9cc", "sighting--586dc728-2e94-4b96-918d-f880d6033121", "sighting--963e3e72-3534-4b0f-a68f-4ee0d8f2e73b", "sighting--54476152-6161-4a28-9bbd-33aeec6c3314", "sighting--d3123ecc-9eac-4155-ae85-c4b0a2080ae9", "sighting--72fb7f08-79e5-4d57-83fb-4264361e0998", "sighting--b3daf32e-64ed-437c-8e84-32c97a102766", "sighting--ed965554-b0a2-4ad0-9db3-6290f27b349c", "sighting--f993916c-fe6c-4ea5-8503-12f701ffe91a", "sighting--1545937f-8dcd-4798-b768-2f35c438c6cc", "sighting--62bc5985-e429-43ca-aea8-4b167a541f6d", "sighting--784dd31b-74f4-4e8a-937a-027a20990348", "sighting--b36a033f-8f60-4c47-a7d4-3bfff4788baa", "sighting--f2a1a470-b267-4911-8d68-6084488bb71b", "sighting--5276dbee-c638-4394-8365-27281860b9d3", "sighting--39941f72-ba1b-4f57-b91b-a97f3aa29490", "sighting--475b0811-0bba-44ff-a318-538772af857c", "sighting--0733caa7-6e30-444d-b0e8-45f703325186", "sighting--547b5361-6e1b-475a-b84e-d298a6c64ec9", "sighting--83d9fba1-9d2c-4855-b81b-2555d8b7b6d6", "sighting--f15c056e-6a31-4227-a6c2-a0b777af320c", "sighting--39ea6c4a-54fe-4a4b-8473-68bd9819bab7", "sighting--dce3e378-b0d6-4729-94d4-33bc6dbc4211", "sighting--f2d9ca3e-df22-407c-af56-8ff079268871", "sighting--565bea1c-86cd-464c-986b-00a2584af4a9", "sighting--2aad6ffd-8ff2-4d78-93ae-8686abe72f9d", "sighting--e5e22ec0-96fd-489c-85ed-1a1c07af5c5a", "sighting--d02a6051-e638-49d7-89cb-d6d80cb0d60a", "sighting--a2eeed89-e4cf-4a36-adf2-2f40e85544bd", "sighting--a70fc27d-c5b3-4933-b083-9ff4d5d09341", "sighting--5c72f6ea-3e1e-4c01-98c4-1f7cda09c3ec", "sighting--0da2e7bc-d4a0-4ab8-a114-eb9847f4318f", "sighting--b2bf925d-f59d-417e-8d4d-2bfe080aa6eb", "sighting--cd90d1a9-e00d-4055-82bb-ea3376cb7b2e", "sighting--b79ce634-7ab6-4e56-bb1b-dfa63f4144f8", "sighting--f3199a51-80c5-4e15-9ff2-d4a1404a0f98", "sighting--a27b19a0-a044-4cd0-b7a4-9597ac545eb5", "sighting--b320a19b-1383-40cf-9a76-25f2e702d862", "sighting--ccd55444-a9e4-4a07-88f8-d0f64caae7cf", "sighting--02b4b38a-1c71-4c0c-874f-4b862306786e", "sighting--4e99fc65-8eae-486a-8f54-9f3a8853a17d", "sighting--25f77b87-ade7-4618-a6d0-2b2d6e6ad956", "sighting--f0d2b789-6c8b-434d-af33-ca46b5847159", "sighting--1cb077df-1f47-4785-a8c8-c1ffa1ccb0c6", "sighting--3cac0eae-cc20-46cd-9ffa-785affb6f037", "sighting--05acefb8-18ef-49b3-9bfc-02b4cb46082e", "sighting--eb90a1c2-ba60-4c2d-870a-9dad86834cbd", "sighting--25e382a9-6669-4dfb-84bc-39a91211f558", "sighting--adf125e1-59f4-4f0f-990e-b83d2d07e47c", "sighting--a40f86fd-af14-43ae-8615-8f818ba85684", "sighting--b4294091-5513-43ae-859e-d4788cc532c7", "sighting--dfd78b10-c421-4f11-ae29-2eebdabcf037", "sighting--60ceb632-5cf2-4f78-ba26-8c6de54b7073", "sighting--11854646-2232-4f4f-a2ac-8f295fb44635", "sighting--004633ed-ca70-4624-aa38-fb71e26b3c61", "sighting--528df9eb-3843-4e5e-9e4a-1aa8013c370f", "sighting--1ab091e4-3a0e-4f83-bafd-4139bab4a32e", "sighting--afba521c-6aaa-4b2a-8a7b-4d63f318ed14", "sighting--102dd399-b31c-4d55-9e55-3751739307d2", "sighting--1c3e83df-ca44-4318-ae28-28dcde72c76e", "sighting--6c81b040-bdfa-4425-98e5-645024ed1129", "sighting--fb280102-0bc6-4539-837f-8d9b4e2713e9", "sighting--fd5114d7-2579-4372-9e05-2a5fd4aeffee", "sighting--6b7727bd-2b2b-4156-81d2-1c6d9f65bbcb", "sighting--1af03318-865e-4f6f-b21a-38f02bd00583", "sighting--f9188b22-9b7f-4ca8-b4ea-06f013797016", "sighting--14e65bf1-1312-4233-8f97-49266b0dc4cb", "sighting--0390966e-f3fc-4375-97d9-c4a2a3f5467b", "sighting--03c6bf10-6085-41f0-8f23-342855b2a853", "sighting--6caba429-3b6a-4cda-a43d-25ae73b1ef51", "sighting--c723b207-b04d-4efd-99bd-51ef1a0d6b80", "sighting--17b40a58-7cb3-4e48-9d36-e08d78953a4d", "sighting--393f1713-6d25-4195-8e66-6d0d1e84aa52", "sighting--63ecf9cd-7451-4036-9510-9caeb9242b9f", "sighting--688a0cf2-dd16-4cce-bda1-ac0efbd3bf25", "sighting--d9a49360-6134-4478-8f2b-757e961e2f13", "sighting--242f359e-2d4b-462c-ae0c-6004cd8a871f", "sighting--5815be22-2087-4548-b618-6a7da3ad1f38", "sighting--bab15b5b-ae00-45b9-b038-a0e96f545eae", "sighting--2dfe00c4-50c7-493c-9f80-01ef7cefd933", "sighting--92ed79e4-e6a7-4c74-acda-f0633dd0b710", "sighting--fbd0dfb2-784d-46bb-8f2e-b9a362d99df7", "sighting--3298ff8e-51e9-40ae-8a5f-08986d4fe610", "sighting--fc380260-d3a3-43fd-8020-b5166b9f2330", "sighting--6e3bedbc-537a-4635-b6b4-a8248de84d75", "sighting--28970e50-da9d-48d4-805b-8d601c208630", "sighting--3b5f36aa-a15c-4c40-811d-3a41bfaeeca1", "sighting--c151ff1f-68c6-4495-9774-cfe92a52cb5c", "sighting--4db51434-1d3f-48e4-9e1b-9974c289b60e", "sighting--8a46c167-6ae2-45bc-a058-807bdaff261c", "sighting--c07f5e59-e204-49ce-9a21-1d933634f1e1", "sighting--697ac3f0-c790-4566-870e-858a3828e648", "sighting--bd0b387f-8a11-45ab-b2a0-bbcc5b283e94", "sighting--74cf620d-1563-4b9f-a8c7-a671a5a5b979", "sighting--c62b7fd4-5740-46eb-87f4-5c6a3d9ec7b3", "sighting--4cb67458-d047-43ff-8df7-b57bd8384732", "sighting--17214e86-c52d-46a5-a396-278399c37845", "sighting--b266318a-32f5-47d5-a0a4-1424cfd94009", "sighting--8ce214de-b778-4eab-a89d-918fa2124ce9", "sighting--d5b1a427-702c-4745-8fb7-211f06f7f640", "sighting--67143840-2b67-43fb-a293-ac8efa202181", "sighting--0c80853c-7b08-4469-ae24-36b9c1230c41", "sighting--30e1d8a9-e734-4380-b739-bc3bc5284baf", "sighting--e75439ea-cd1a-4423-8b6a-98bdb8f42f30", "sighting--5aa10236-94ee-4f77-a1e3-170994631389", "sighting--a25adaa0-9992-4585-abd2-2536c8778803", "sighting--3e66ebff-4034-42c6-97d2-2428014a0e0b", "sighting--a7bca600-41de-43a6-b79a-6d75819aac1d", "sighting--9f3ca1e6-bb60-4484-88e0-6efa72bb6b68", "sighting--ccd8a1ea-df52-4d6f-ae83-5d52bf85ac44", "sighting--bb2ff6ea-9712-48a1-bf00-7dd073ccce91", "sighting--bf9cbb9d-e1aa-4086-a74a-7ca25e7380d8", "sighting--bf360d54-94df-440e-8e37-582426f0a6a1", "sighting--4d696adb-8b06-4a70-bd6a-a840464d5a37", "sighting--7274f59b-37de-4613-b6a3-0611950264a9", "sighting--5d334adf-1fe6-4b02-88e1-03863ea60dad", "sighting--16ebb753-05b1-4a09-b79b-53ef71c1a876", "sighting--c47bc475-a7b8-4297-8a46-81eb797e7b5c", "sighting--a33a2d00-c097-414b-aeda-210a53360129", "sighting--e6c14090-9bd9-4ba5-a62c-d1b778255589", "sighting--d8022332-607f-4bc7-8615-668fc941e4ac", "sighting--c12cddac-d17b-4e2b-b5f5-248b1bbff2b2", "sighting--9cb7fcb4-f9e8-462e-bfa3-d68200b9520f", "sighting--2e071135-55b3-427b-87bc-1c66d394cb2a", "sighting--09f3a7ab-dcef-4617-84a5-4bb9825a96db", "sighting--7a437052-19fb-4c6d-b823-eec9f3ee3cad", "sighting--b7123b15-5376-43eb-bc5e-c9f215d419e6", "sighting--27bcf4f8-f55d-42c1-a20b-9f35bb7577f4", "sighting--a3020f2d-be41-495b-9f53-475b59fbdbc9", "sighting--24177855-e1d5-4d46-a97b-e39c8d77b7bb", "sighting--8212bb26-381d-4d49-b3bd-187564d2cc06", "sighting--a5ff1011-7f09-4141-b2cd-a27bca0a6a9b", "sighting--fa8fe254-1751-4b6e-9956-b17653e53744", "sighting--e8a56a3e-6a58-4751-9e09-38a32358d387", "sighting--86baba9e-c998-4bc3-91bf-3909380dcd55", "sighting--3390ff4f-bc7f-4504-a1bd-8480051ac658", "sighting--20b59e96-f47f-4d9e-9976-6388964de7e1", "sighting--595d9d1e-d8f6-4a74-b733-7d8efd53ca76", "sighting--9cc9837b-83f8-498e-82e2-e83b494c0ea8", "sighting--e9e34750-c59e-47a7-925e-40a6f3aa17a6", "sighting--ae258742-eebb-4d23-b1b1-194d7cf07c4b", "sighting--8b5ab988-c546-4b22-8cf9-739e73dca8ea", "sighting--c1fa9d81-051f-4d10-99f1-0db0f9b5f5ff", "sighting--2fe5d2f2-349d-405f-aaf7-fad47e444651", "sighting--b86bd615-ae71-4272-b1e5-273438bc1ac1", "sighting--62e85113-4e16-404f-9541-15fbc4b91f92", "sighting--6c9c00af-205c-4dfc-90e6-fe102d5d377b", "sighting--6378b4dd-9990-4f5c-98e4-8e9d7a35bc28", "sighting--ccb1dea8-8e88-427d-9bad-0009e6711a56", "sighting--08e727b0-fdc2-4765-8457-c93413c849be", "sighting--85140f89-4b85-4864-acc7-de8dd1251786", "sighting--45e0862f-88fc-4e34-854f-97fb08d08dc6", "sighting--cdaee94d-e413-496c-8bce-dad371ffd8a4", "sighting--2b292da7-ef55-41ad-a763-055bb887a1f9", "sighting--fb48363b-238f-4f16-b113-8f80b48cf9d1", "sighting--0aedd03c-d28e-4ec1-a475-8c1dcb213457", "sighting--118e784d-ab68-45db-8786-9cc0c5ef2676", "sighting--8c125fb4-5bb1-490d-8887-cceadee37d18", "sighting--0d8d9b6a-7181-4470-9af6-3d001080a4a0", "sighting--0b02c907-cc13-4d35-b63e-fc77ab48e272", "sighting--d90982c8-3a17-43a1-aa33-85a1cc521096", "sighting--76dc32fe-a482-4a3c-bed5-0bdab3668132", "sighting--06cd2e57-df08-465e-bdf1-4971fdc429ef", "sighting--002c690f-2159-45f1-8b52-a4c2b81ffd47", "sighting--8e528ea1-75db-4889-a76e-1d7fa7038603", "sighting--ccdcd35a-5144-4a23-a3e2-a506ab0377ad", "sighting--60a541b7-a26e-46a6-89f8-5491d387999e", "sighting--f18a3615-0748-488d-bedb-a2deafe9297d", "sighting--709890b7-4a5e-48dd-8591-0d4fe981557a", "sighting--80107eda-95ba-40ca-9eef-5337bdcbe95e", "sighting--4ca3804d-becc-4e71-b14c-2c9a0c50a864", "sighting--f6b1a63a-e7ef-4e73-9651-ab6cad4a5d69", "sighting--4fcefa30-5158-4e1a-91e3-f4e0931ce5e5", "sighting--9fe9d858-c326-4373-afc3-019df165ebff", "sighting--c682305f-fdf0-4289-99ac-cc3f74978196", "sighting--af025c7b-4bae-42f4-bcb5-4a814b99c1d8", "sighting--7b887f24-b3a8-4e42-864f-ab4733a8ea05", "sighting--5c54c5aa-d81f-4e46-abd4-ba51e7b7b5e4", "sighting--ef1aeac7-a83f-4948-8874-f234827643b3", "sighting--945f8db3-a981-43cf-a061-09e1c56a2a41", "sighting--7a78cfe4-3c20-41cb-9ee9-9b88f16cc500", "sighting--ec6ffd07-45ec-4fb1-8f7a-9300b5fc69dd", "sighting--e0b22c4a-7523-4fa1-b6f2-8ef8ec34c335", "sighting--a1847428-d1d8-41c7-86ba-d87e2712c649", "sighting--4d8ab0b5-35ac-4435-96e9-57de927a007d", "sighting--d2c17910-6b6a-4e93-98a2-de93e55b745f", "sighting--b01aa88a-2333-41af-b8c6-9b643d74b6b9", "sighting--bace008b-2faf-4529-9c28-a199383cc269", "sighting--9154110e-e255-4bbd-8f5e-380a47fb14fb", "sighting--70aedefc-ee5c-48d3-a623-b4364341f395", "sighting--1542b437-9161-45c0-b4fb-0c1af9897836", "sighting--59aeb51a-a912-4fdc-af48-fcdf4dc077c8", "sighting--0fe77f73-9c6d-4137-89a4-275b0dfd587a", "sighting--21fe048d-20de-4b66-8251-d0a9e49aaae9", "sighting--17b4d832-7490-487c-8302-7212553b689d", "sighting--68cd1512-707f-4528-9216-4bbe9cf547a9", "sighting--f81a4434-b440-48d1-9e6a-fab6f15795cc", "sighting--2259735c-22d5-4df2-a3bc-b586601854f9", "sighting--c13c31b3-6ddb-4951-9dbb-fda12f36d095", "sighting--6b2aeb72-836a-4ae1-ad1a-18a293d691b7", "sighting--9d51ca87-68c2-43d5-a1e4-405bc4d4ee0f", "sighting--5d9b50d0-9cec-4113-9e3b-219f268cb4db", "sighting--8a39bcb8-cd0c-40fc-9f3a-5f640a46b6a6", "sighting--aeb5d19d-7901-4d92-bf61-b0307ca53527", "sighting--fbcf977c-f323-454b-a639-9484e75132cc", "sighting--9074df25-196f-490e-a3a2-e71c65f339e2", "sighting--c9c8f035-0c67-4fb5-a53c-667a0d19eb5a", "sighting--eb7366d4-899b-4788-9901-e5f72bb57246", "sighting--92eccf73-e812-4cfa-9410-9f4fef139262", "sighting--8d55d33a-c00d-416f-b9ae-d4383e9d179f", "sighting--15ec03e9-3359-46ed-a766-43c3d735566b", "sighting--65b46d8b-c1c2-4d1c-9bdf-0726fbbd90ab", "sighting--a5d1cb16-4a71-49ef-95c5-30f9f529024c", "sighting--a3a8d142-5e72-48e5-af41-d2d8201d446a", "sighting--ff8888c0-06bb-4596-9b87-a701d058d3f8", "sighting--d1a4581f-7efa-4733-aa04-5a30f9ca0e37", "sighting--68c508e6-fe6f-4cb2-971f-ca536f15ab59", "sighting--334d57fe-510d-4342-b4d3-32b9ed0a647e", "sighting--3c865a39-ee9a-4539-94d3-f3a0e89a386a", "sighting--a35bfa3c-ec5a-4556-8500-f6255302183e", "sighting--089f8dd8-1bf1-4030-868c-329b1df1af26", "sighting--6ef14683-3dc8-44ee-860b-146b6d5377be", "sighting--c583193e-c320-4173-91f3-722f458f6ad9", "sighting--b809c14d-dc6f-42b8-84a5-b19eb33a40b2", "sighting--1735aed7-5a2a-487b-98d3-e2f277c619f7", "sighting--0301bb23-6060-49c0-8510-e17960f89210", "sighting--18c3cc66-917b-4eee-bf7f-d7429b857552", "sighting--d3deea29-cb88-4db7-9f27-b48ac4a8873a", "sighting--5eef4cbf-9de4-4bf7-a9c2-18f5e240eb33", "sighting--beb11cfb-5287-478a-9bb7-36142a3e5da2", "sighting--dfd680f6-575d-4f0d-a32d-a6e45702ca3a", "sighting--b33f86d0-f5d9-423c-a90e-f182c7cc4c1c", "sighting--910626b3-98c2-4778-9a85-8715c75ebf47", "sighting--66307e7b-a5f3-4067-86a9-61783212172e", "sighting--944f3b1b-6327-4240-9eb7-44bc4ac2a503", "sighting--575bdd4d-2aef-42a9-9445-b3aed68cc02f", "sighting--2d64e002-adea-4ebf-b26d-308eb0fc75e0", "sighting--5772591a-0d80-480e-9ab5-0c948d595469", "sighting--6c89f712-91bd-4e0e-bd8b-3b0b93273c3e", "sighting--d3242e91-40a7-42bd-bcf3-d27a5cc6f3fa", "sighting--0d6b6b8c-9339-4048-8ac2-093cd3cac1d2", "sighting--ba1ca2b5-e00c-470b-abb4-881ac0d57c49", "sighting--76b9cc85-2c0e-4eab-9c4f-d6b68c80c500", "sighting--95da2e65-828c-44e6-9fd6-c3d02a6db168", "sighting--4b72fa17-6279-49e8-a883-ee16b86707da", "sighting--f04c9c44-4091-4c31-9e67-21018f457a25", "sighting--8e7302fd-d5ce-41fd-a25d-e4cb0da41bbb", "sighting--ba271623-da55-4681-acdf-2fde5a4c8119", "sighting--78a1272a-dbfe-42b0-91ed-3a8b5f6124a5", "sighting--05f96a50-58c5-429e-9cb5-f42e6dadd5c8", "sighting--4c0d08e5-6bbd-449c-816d-cd940cd61f3b", "sighting--58e99bb6-70c2-4104-81d8-dccfe9dc0384", "sighting--561f254e-8e66-47f9-9e00-f150b69d353a", "sighting--cecf90de-24da-44ee-834b-131f85ce8a51", "sighting--3f70ef2f-100c-4ce3-aac2-ec947a46b5da", "sighting--fccbb9f8-0906-4792-9fc0-7afafdb4ebe3", "sighting--9f6c7dab-0d54-4b1e-b660-098ef7f6b4ed", "sighting--1a53f1cd-ce1b-40de-9c34-f62e24b97630", "sighting--c46a7177-e24e-4b96-984b-5fd0cd1a80d8", "sighting--002de117-8e2c-4263-a6dc-a40df88465a5", "sighting--c3e59c39-7650-41ae-8a39-9014eb275b04", "sighting--4971a919-6625-44aa-9b07-66ac49d964da", "sighting--6d269b19-d2f6-4c50-95d7-8b8f93624d75", "sighting--c9699c04-b410-4d91-a56c-1557567f41cf", "sighting--893b9670-71c6-447d-8e17-3d66254712a3", "sighting--e9f60f7f-3b61-459d-a70e-305fe4616fe4", "sighting--87902039-a7f3-4f47-b8b4-2a112caf3bfa", "sighting--64e399f4-8b3b-4102-bad3-5abb861ee0b7", "sighting--8db5120a-83f2-4e3f-b6fe-f8cf328e5442", "sighting--81c5750b-efb4-413a-887f-4700e526e785", "sighting--1b132c17-bc88-4277-8f1c-013faed65f62", "sighting--640be342-e8c2-4622-bbc9-47927d288c8b", "sighting--36a6f5b1-9e8e-4e9f-b33b-2d59bdb2340b", "sighting--272bdec7-886a-446a-b6e2-72ccb42b0e5f", "sighting--17a03a55-96e8-4f41-827f-01b1f7b98b89", "sighting--11cd484a-f19c-4884-8846-ec51ae285da3", "sighting--3eaadfd9-daee-4bd5-a74b-e7fe86f5945e", "sighting--2da45496-2d57-45c3-be1b-28d47a3e1dee", "sighting--3f4a6ba2-f635-4e83-b43a-48c4b922e1b3", "sighting--b90700b9-5ff7-4dfb-886e-4864ba2d2634", "sighting--ea332e68-3f5c-4421-aa1c-d90d87daa31a", "sighting--bab89cbe-1726-40ad-b476-9bfdb346774a", "sighting--090a3517-cfc8-469a-9249-ef7661660da3", "sighting--74409f1b-c097-4fa5-a991-6bd0bebeca94", "sighting--2f7c3922-9ebc-4640-b3d5-743aa4923d98", "sighting--ad3df775-57b9-4817-b45a-38b473697295", "sighting--7f5ae711-0b91-482b-91ef-956b62b55509", "sighting--995ec19b-82f8-40f4-9345-cc5eb4e2ae40", "sighting--4593a74e-e3c3-4b0b-b67e-83d10af80bb3", "sighting--b29f751d-8687-475c-8200-b79b127b0b5d", "sighting--48ca0d3e-7ce9-4936-8232-d01b04065e72", "sighting--75aed71b-8261-4d80-86c3-667d279e9afa", "sighting--04a5eb44-ae29-435d-9f78-7991c72f1179", "sighting--a3e52728-715e-4220-a240-74fa7aec0030", "sighting--2e003772-8d8a-4c97-b6ce-4f5c2e36cd52", "sighting--4d631d33-f98c-4116-a25c-482812dd3f91", "sighting--3fcdb4db-7ac9-48b4-9d2e-aeb084813d70", "sighting--02f226f8-d22e-4d97-8aed-da1c978ab8c1", "sighting--3c0fb8ca-deb4-4c88-b301-16fdd1a53ff3", "sighting--dbf2879e-5158-4285-a088-968b425b8da5", "sighting--0f327635-c219-41fe-8e60-12ff45bce346", "sighting--50ea7949-58fc-4fce-9ce1-64cc88186eab", "sighting--0639e6eb-bc18-4d5e-9811-a88cc13f7448", "sighting--58b2f085-8a2c-46c0-8ffd-6110e249f67b", "sighting--0a776456-a3ea-4c52-af9f-089482de112b", "sighting--b9217a32-d711-4791-972b-bf2c8da790f0", "sighting--19ebfc9c-7b3b-417e-8f42-be2d19a31d8b", "sighting--075ddb95-bed2-4d66-8b27-cff9d0a895d1", "sighting--f7308a87-2a8f-4163-b1ff-e2979d49f27b", "sighting--2ecc9434-dc82-4e09-9ed2-b95e5d6f8124", "sighting--2143e0ae-aa07-430c-a783-e634a1880d07", "sighting--22142671-c484-4bbf-b7c0-ef3d9ad4c06e", "sighting--2e0c7576-3825-4763-829e-72ff6cff1e1e", "sighting--e80335b1-f77e-4e81-af9f-98cb30439a84", "sighting--a0ca866c-78ba-41ae-94aa-2a54fcf3addb", "sighting--4ab2088f-012c-4b9d-9429-f75e4f717d40", "sighting--03f5e10c-7203-486d-a310-f81600c0ee2d", "sighting--2b37f8a8-5048-41cb-bf8e-e05532ba41cb", "sighting--ee41f7d9-256f-48a0-9e72-33d1b5179c65", "sighting--5985ba85-4aa8-4799-b6c6-cb8908e63f26", "sighting--4c7f93eb-d24d-4821-bbce-86f2a71c4331", "sighting--909f6cf2-0034-49c2-b1f5-166d9c983bb0", "sighting--c6a3e42a-8fe2-4d8b-a66f-a36648408356", "sighting--f3138119-2961-47d1-b247-5bb8b026d434", "sighting--e3c65569-a789-4f4a-81f4-d957fe37e840", "sighting--58bb1634-71a7-4627-a977-c8e824df646a", "sighting--7c48b07d-dad1-426f-9faa-1bc7e4dbf7c1", "sighting--05b4850e-eba5-4efb-ae12-5a5fa7e7c54f", "sighting--ab27b2c3-1e57-43a5-8623-f0d57c87bf35", "sighting--116a8061-406f-4f14-8b4f-c774bcf33ed8", "sighting--6a7cce5e-b3d1-4232-a8b8-4f147af0f5a2", "sighting--658182d7-10af-4f30-8668-113c82284185", "sighting--03b57064-9e5e-4b2c-a47f-ad07a25f97ca", "sighting--7c7a483f-7e6e-4082-8788-78225297719a", "sighting--df6695a9-ce46-425f-9be5-a4d57f51a11b", "sighting--c8b1eed1-58fa-4509-b10c-14d9f571cbe5", "sighting--7c5fd539-68ce-4c08-be95-49ed05fcc0fb", "sighting--b71aa63d-c407-4a7c-b4c5-682627ce1611", "sighting--f6356084-e14a-43a5-a4cd-0cfb5478d9b6", "sighting--88380788-6b95-4b09-9530-bdc0c7435ab1", "sighting--ddd14986-b269-481e-b771-dc94edea5bff", "sighting--7087c049-a9f9-43eb-8c4d-33b18795724f", "sighting--1998d8a4-6174-4ea7-b521-eb99f4f4e6fd", "sighting--f247a37d-b839-4349-b4e3-8851c2855c45", "sighting--5140c649-cd14-4c09-b1c7-1be6269ddef8", "sighting--a6d838e1-27a7-4244-abee-6ad18e15a211", "sighting--92d69f27-fb30-42e4-b6a9-30747398122e", "sighting--5e3a5f3a-9744-4cdc-87bf-2a1ab2b05328", "sighting--188f583a-55ae-4fb3-8ffa-4e53f1b05cc4", "sighting--4454af66-f6db-4037-b753-abd03fdca779", "sighting--0c067de8-8cb7-41b9-a0de-2f357474b7f7", "sighting--536e62f5-8cf7-473a-8abd-8bbe3038f416", "sighting--57bde47c-c978-4577-bb14-3630a353e014", "sighting--21686404-e8db-45ee-acb4-22a242ae4483", "sighting--7c4db66f-9534-452f-8c13-76e2c1ac9f9c", "sighting--645c2c35-8b9f-4b0c-acb9-066cdb460918", "sighting--d37e1733-e1b3-4bb6-8ead-657156d68a61", "sighting--015ef54a-2f67-44a0-8435-47cdc5e2240c", "sighting--295ffeeb-8aae-4196-90f3-c2312991c7e2", "sighting--ce2424bf-ea88-4bb3-890d-81e2cc3c4630", "sighting--677279e9-a166-4898-ae65-c238f1b3cf9c", "sighting--b1884846-e872-4d83-b7eb-7c237757a27a", "sighting--d5eb2202-4af6-4fd1-bead-8475270fc7af", "sighting--2d6c6001-093a-4190-9e72-59c630b1cd4b", "sighting--1f8dfaa0-46d5-411c-8a51-1419f35aaaae", "sighting--e280adb2-e500-4474-b38d-7f210a5fa284", "sighting--3ea65d6a-52be-47a3-bb1c-31aabede3151", "sighting--8777beff-7ba8-4cf5-a6a8-7d94827de94c", "sighting--fcbe966d-8c5f-44e7-b162-b55d38e6a771", "sighting--21524583-76fd-4429-a6dd-c620e66273ca", "sighting--970ccfd9-d770-467d-b345-486ffcdd63e4", "sighting--394b4ff0-7c52-473c-acac-d75434152a1c", "sighting--363e6264-3f1e-4087-97c6-bcecbd397d14", "sighting--c3bf2fe5-0ef5-45a3-93c4-814aecb28598", "sighting--4369effc-06f1-4f32-8fbc-4fe84e8722b7", "sighting--0e9b053b-65d6-41ec-b57a-0e8cee6cbf34", "sighting--41d8183c-5793-4345-a0d1-a0628a0a80b6", "sighting--7f3a063f-50e5-4189-a129-70f63d21eaa4", "sighting--9bae79b7-d23b-4e31-a486-8d376716b032", "sighting--0cbcc30b-8c43-4d1f-9bdb-0da0248f296b", "sighting--f0bfde0a-5d41-4c98-9a9e-9925482e397c", "sighting--89fb1dc0-c515-41f4-ac8e-eb5d9f7c5223", "sighting--8fa6e19f-f231-4c29-a120-681f3fcc5274", "sighting--bd6ec6ff-6d10-47cf-b088-88c83020b3d2", "sighting--1e8f5c2f-1c5d-4d1a-bba1-42b0b7ab1a0a", "sighting--2844f7b6-86c1-4769-813a-a5bd331cf8a3", "sighting--9dcaf008-88f7-4723-9e1d-222c4e69d04e", "sighting--8fc208b5-5dbf-4bc6-8233-d8c6dc5538fe", "sighting--db6c72a8-87c9-45c0-af61-4e4f8f9c44a3", "sighting--0c3d118d-9104-4c6b-9f53-eff682e8a248", "sighting--6b0de229-c8e0-4a24-81a8-10aea9b7fca1", "sighting--9a033634-e604-40d2-986d-686b5ad2357a", "sighting--9eaa10b9-0099-4099-885e-6543a8706a4c", "sighting--016a2dae-9c2d-494a-9798-b395a0b12eb6", "sighting--dc76e4e5-90e5-4d87-8dba-f05dcc96faa7", "sighting--4b7c3802-a71f-4523-8e38-b1b9dcc78af3", "sighting--75e0cc1d-153a-4841-adf2-06bfe327ad77", "sighting--7add5639-9c83-4800-8263-bce8da56a5ad", "sighting--ccf7017c-eeec-4362-9b4e-7f09a45bde5d", "sighting--1152e3fe-ed4a-42e0-8c10-0b7e3a9d4648", "sighting--dc963a4a-8993-4d7e-8baa-cee52d9b7bcd", "sighting--377fef7b-3ba4-4e97-ae50-584c19669541", "sighting--6f72a5be-847e-4a29-a28d-84fa612d0ef0", "sighting--825b57ac-16a1-4538-8c1e-3accb267f2e7", "sighting--1e6a4b40-8913-4bf1-b060-43f0a2dc0bc8", "sighting--56615173-21aa-41ee-8a7c-d0c183ac8ddd", "sighting--9ec2f36b-32f4-4ce7-a782-1edf5e5c2107", "sighting--b13508c3-ab44-4cf8-9668-e082f8367674", "sighting--b0614f4d-96c1-4033-9595-20e9d98db03a", "sighting--c8e5184b-48f6-47fe-b9cf-281d22a74cf5", "sighting--80fd001d-0729-4de5-8bac-4435ad6a9a46", "sighting--5115c83f-f82c-458a-9362-ce95d562b3f2", "sighting--349db4c5-a5ce-43c6-9408-07541a7f5d62", "sighting--23c981f1-9459-4057-b925-3c81e3bc39ea", "sighting--099e459c-4bb1-4c43-afd6-51d4de3e037d", "sighting--9c94c329-aec9-4fe4-93df-bbd07343b3ff", "sighting--93227adb-9e38-481b-a5fd-c05d337a41c5", "sighting--e678e02e-1d87-4979-af94-a0494bd606ef", "sighting--2a5c0c78-f7ef-4864-95bf-b573d69925f1", "sighting--5351316a-1dd1-4589-9a74-1993539fdc27", "sighting--d7b737b2-5783-4f94-afb7-06d347eaa4ff", "sighting--8e116721-c018-4918-9127-a5ee131d458d", "sighting--e8644d6f-0a23-4d03-b490-6772fd75c8b8", "sighting--fbc81012-b977-4df9-95d2-9781dc6dd527", "sighting--309d64e4-e72c-4d8e-85d8-b3508e303d2b", "sighting--4c92f6be-18a6-461c-b38c-eeebdf0e8218", "sighting--ace5cc3c-dce1-4d88-aa4f-9234e44329f6", "sighting--e797dcbf-8bf6-4d5a-b34e-295864e0b241", "sighting--bdfb2d08-3040-404c-9b07-cdcef8bd8730", "sighting--f76979af-0569-4e74-a12a-08838e8219e3", "sighting--2bde5d87-922d-424c-a2f9-47340dfb9183", "sighting--ca44af48-ebcf-4302-bab5-9ba7b0dcb26c", "sighting--0a20c3c9-9131-4c95-826d-780408a86b74", "sighting--45d75f6c-d7e8-4856-853e-3851b9ff7bdb", "sighting--223fa35a-2662-4e4e-a01a-ae9a57c09443", "sighting--a740445c-e118-4797-8dd0-1b31f7069828", "sighting--c89eab6c-a75f-4a1c-af0f-e1710d037b9b", "sighting--cc283362-5308-40b4-90cb-6359b2d870c3", "sighting--a2cf2ab4-87a7-40bf-961e-79f13f4f80ce", "sighting--93dec0ef-80e7-41f6-a2f3-3221ea660793", "sighting--5165f757-ab5c-453f-bbb7-42e4d79b8416", "sighting--75476319-aafa-4afc-acf8-5a62d1acf7a2", "sighting--271404cc-91f1-458b-8371-00c621df5622", "sighting--3e0ae8b3-a03a-4d28-80cd-1e7395b51eab", "sighting--d105848d-fab7-48fc-b9ab-606035d9cb31", "sighting--555ed435-db6f-4847-8232-926647df0e49", "sighting--ba715e61-b0ef-43fb-8d4d-3eec22800cb3", "sighting--bafd9801-bfda-4522-aa4c-63c9a82c3b45", "sighting--aee5e246-8acf-4dcd-bc38-c9ba349f1bd2", "sighting--7ca2b5b6-1805-4d21-9c8d-951e990f466b", "sighting--1e8a76e1-0acd-4c4b-a457-8f9c43619f54", "sighting--3adf5450-63cd-43dd-80ba-33c27ded0bdf", "sighting--d03c7c7c-28d2-4212-bb67-915313607bee", "sighting--bcf01a39-5596-4415-a847-2cb995b5bf48", "sighting--e726520a-8a1c-4e90-b24b-dea6a3cc9dd8", "sighting--8a6631f5-63a5-41c9-b73f-fc5a5ef9a1d0", "sighting--144771eb-a08f-4b1c-a454-9b0bbb5a0fc5", "sighting--276f344c-0622-4a5a-9dd4-fd7c6c061076", "sighting--e264952e-6644-4a9a-9445-0e69b4068ba6", "sighting--cac742f5-b24a-4b90-854f-2b1601a7162e", "sighting--9d386f3f-7207-43f1-b53d-de4665ac4886", "sighting--a5c6f2c5-3274-466f-ab1a-86d827b66a2d", "sighting--bdecaad4-7f4d-433b-b1d2-10905edd258f", "sighting--a45acde4-63ce-4738-8a76-c02f1e6e40f3", "sighting--b265135a-0098-450f-84ca-4755ee86c2aa", "sighting--3e91b7fd-6848-442a-9296-62b23a314fa2", "sighting--a030dce4-6a93-4fc9-9d9d-e6380e24e19c", "sighting--f3bb7240-f9d4-48ce-967a-8e8662ccf554", "sighting--d45df28c-cd04-4e41-b9b4-3721e337c27b", "sighting--5891294e-c0b3-4b5c-93c6-dff32a0ea6e5", "sighting--66a022b1-ec4c-4de3-85a3-f187823e7c16", "sighting--bb384f54-375b-416c-acae-183580670ea2", "sighting--1df030e6-f87c-4ef2-bab8-c12f565578b4", "sighting--74d9e33d-eab4-490f-8a2f-915111dbc2cb", "sighting--90ac845b-ebe0-4dcd-bee6-777408cace89", "sighting--fed8e9fc-cbf7-4d24-873b-ebcca3475e65", "sighting--d1e48dc4-5c8f-424a-a2bf-ce74466eed4a", "sighting--a4891d54-d770-42bd-a506-cc5634996d03", "sighting--9dd0eca0-255e-4934-bb20-88e7a988e7db", "sighting--d21c8a1b-74e9-48e2-b434-51660cd3d6d9", "sighting--8b5dff07-da4a-4117-bf4b-747e3a2c8839", "sighting--fa9f20c6-3dc5-4136-b8a2-490519030baa", "sighting--abdae58e-6e4f-4ce6-981a-339b6b73a382", "sighting--7578e925-5931-45f2-a7fd-c9e83ddcfea4", "sighting--21c22c56-73f0-4c8a-82ac-4253b63c8a74", "sighting--5ceab1e4-3d1c-4dfe-b19d-26a31c4c136d", "sighting--e3c4001f-a0d1-4a86-801f-150cd77106eb", "sighting--a77ad4df-504c-4316-ad68-8e858126239c", "sighting--e531982a-f25e-4759-a519-060082c84a32", "sighting--1b6a4310-52bf-4cdc-9b36-eabdb622bdbc", "sighting--046b83b9-74e9-4de9-a871-71147e1ef3a3", "sighting--709366ac-3630-4cfc-9e0f-8831c6e441c4", "sighting--8163e9d5-9d2c-41d0-bb65-0a26cde37bab", "sighting--6e8f1b00-263e-4731-b912-d72c5496b60d", "sighting--4c9bfb39-8226-431a-94cc-f0c793a639cd", "sighting--bc89f998-e7ad-412a-9dfe-dea1c61f4b29", "sighting--9dcba8be-5d71-4e95-ad26-b0cdf42a2495", "sighting--20b6f93b-e1bd-4341-b202-e51c26643711", "sighting--b67e6cdd-3404-4d2d-9b3d-48e02e0c9e75", "sighting--c4ac37be-4228-4eb4-820b-63397f16e775", "sighting--d044f250-4539-48e3-b1e9-e14511fd9729", "sighting--e1b9690a-b958-4538-87b1-c6e1cb30d3c6", "sighting--57f70e2d-f96d-4d9d-98b0-f99af83a94ef", "sighting--0e588f9e-68d0-44b7-8d5a-6530fc717632", "sighting--fe8ef6af-7734-4b8a-8178-bf1fe93b045c", "sighting--24f10e13-90d7-426e-9d76-543e3d98d662", "sighting--b86d6a37-d16d-4347-8a6c-63cafa3f7b10", "sighting--bfd95fb3-1f6d-4a5d-84fc-d5b7c8246b23", "sighting--09b72b51-475a-4faa-9841-5e4492d945c0", "sighting--3a7e7aeb-c369-4667-b877-4195024e7551", "sighting--cdcd7b39-d371-4f8f-be63-2f7e1204709b", "sighting--7744ddac-9b41-4017-be4c-1558fe11c29c", "sighting--2a9946cd-7103-4887-9f26-c140ddf227e8", "sighting--1e7dd3f1-8940-4936-a5bd-9e2b01ce090b", "sighting--43a0c1d0-19ea-4e12-9532-164b607f91cf", "sighting--534f21ff-a4a6-412b-8512-98e70012a923", "sighting--8d497ac8-2f50-4ca2-a21a-baeb15ab247f", "sighting--7d0335cf-d8e4-44d4-b54b-4918b919aded", "sighting--768ea690-3a6f-453f-b134-d404c2d54231", "sighting--9f858fa2-c0ae-4a34-8f64-0f89ae43dbaf", "sighting--e9ddeab1-f736-45ed-92ef-bff5908782f6", "sighting--9e48d430-2b0a-40b1-94e6-272108acf26b", "sighting--965d360c-b24c-4a6b-bf3f-b3e34873afcd", "sighting--1976afc9-5605-46cd-9eef-54fdbd737b80", "sighting--9b1ad74f-bd8f-4246-a7c5-fe780f16ba1c", "sighting--861b95b0-445a-4bee-97d8-281f5a9437b9", "sighting--1b1503f6-ab3d-4761-abc3-0cf6bc3b54dd", "sighting--afcb0bd9-d14a-4736-bb4e-823b3a6ef4f6", "sighting--1195957b-6a7b-4978-84b3-b161cdf776a2", "sighting--e128d449-32ae-4a7d-b17f-35df50baa839", "sighting--9c3dc696-55d0-4ff1-9316-8ce832d17e40", "sighting--44a18bd9-cf32-4095-b13e-14b8153b6b4b", "sighting--de479db0-05d5-404f-8075-6f26e15b3196", "sighting--1fb204b9-3501-4a3e-b155-ada56627425f", "sighting--ce524547-d82c-4076-9b74-2b8d23d06936", "sighting--4eb56f59-adaa-4bc9-9c95-ddb1a049000f", "sighting--42b25430-dca0-4fc1-8e9c-f00c697bc513", "sighting--6605f5b9-775b-48e2-8519-83dec99ec861", "sighting--1de81b69-40d4-456e-b841-a3b54a443d93", "sighting--bd2cf825-fe4d-4cf5-9895-4c1512223aa7", "sighting--3228e38f-9656-4a1f-9ef7-57f7d788bd91", "sighting--644407bc-be5b-4569-9d70-0e4e6e3ece52", "sighting--37f00927-354b-4796-b0ba-84f14b3c6662", "sighting--79ab3fd1-83ed-472b-a87f-94ad494020cc", "sighting--025f749e-617b-4912-b643-528c772746c0", "sighting--a544b8a0-3c73-4ee6-9d44-569fb0595645", "sighting--183f7831-111d-4637-96c2-02010de7297d", "sighting--d39edd01-d4c3-4ac3-a058-68264c6d1358", "sighting--238502a4-29b9-463b-9c61-dfd3e7be9666", "sighting--4e169f08-119a-4bfd-9506-b62609bfd0e0", "sighting--95bd98ee-c8f7-472d-b5a7-466c389e6c6a", "sighting--e6b23377-4f71-4209-b45e-b3c53e0d313a", "sighting--28ea945a-f83f-4000-90e6-3190e7ca74de", "sighting--491f9093-7f6b-42c5-9d11-05292203e3f7", "sighting--4a4b8f7b-0457-42fb-a372-f13c6fe9e980", "sighting--f26128e3-9a42-4831-b938-863699a1e736", "sighting--77266e11-4a95-42ac-86fd-3ff8f239fac1", "sighting--9bcecb32-e016-4bbe-b458-ef67d4d32280", "sighting--e2a71af4-ee4a-4f35-a771-3e5e20436a32", "sighting--7570fe57-b24f-4de6-a021-c86419f52b1a", "sighting--32acaeda-7cd5-4a9a-bdfc-ef3eeb876065", "sighting--3e0a1dbc-89cc-41b3-96f1-0af56e848ccd", "sighting--68bc9a22-72a7-4948-b63f-628e7caa172b", "sighting--ee09d547-a27e-436e-b86b-1d0d76716160", "sighting--231af5ad-f4c4-4ef2-b53a-0a2bcf5025a3", "sighting--0343452e-fa11-4674-9700-e23195a9f670", "sighting--22b8ad50-e90a-407b-857b-8b5554d8d733", "sighting--a1e66a3f-5140-45d3-bbbf-19496cc00bda", "sighting--e6979b77-3e3c-4b8b-bd87-1e107e744136", "sighting--1b7dbd24-d49a-4303-92ae-3d08fc1024b7", "sighting--2c9d80f7-ad39-46c7-bae6-6a492cf6e151", "sighting--866e32b6-3bbd-48da-9e93-9b7985482290", "sighting--373c479a-8c9b-4183-b60a-29366cf53857", "sighting--0aadf024-04e0-48e3-be99-bb12fdcb4f50", "sighting--cd971622-8128-4108-be01-d4ab8554eba3", "sighting--111a1548-fe0a-4468-88c9-4b49c80edce2", "sighting--855a6145-3d1a-4c09-a34c-a4ce4cc12c3b", "sighting--2a226e3d-e703-4607-ad1c-1aa4870434f6", "sighting--683409e0-5a20-45e1-9928-148c78842629", "sighting--485d81dc-cb8e-4f5e-af61-6f0300714e4f", "sighting--d868ea03-1cc9-42fa-94fb-7a77c6ac8215", "sighting--d97a2739-f376-41ec-8196-29de7b1e1ca8", "sighting--cf80d1b5-a209-45e4-8acc-0d75ffc8fa69", "sighting--b212fa30-d67d-4f0f-bb58-ba5316fef68f", "sighting--5c4b3c12-cc21-447c-b03e-d84315d5291d", "sighting--6e6ee354-1cf0-4f5f-8b23-4c4464be1ac6", "sighting--12d89048-7c83-49d2-b485-f8d149ad78e2", "sighting--71e0a450-623d-49ed-982f-1fdfd90004f6", "sighting--1e45df6c-03d0-4d29-94d3-505d2ffa1237", "sighting--1d53f0eb-a04f-4390-a0c9-b1a8fed51e5d", "sighting--d51e8250-1003-406f-a2f0-ba8e256b790d", "sighting--5b204211-f33e-427d-b509-faac70b3f252", "sighting--e2d81315-49b9-41dd-a19d-7834bde9326e", "sighting--363d5413-a258-48ca-b4c6-a41a4ebf25e4", "sighting--30fbba7a-7399-431f-b68f-673a112ef493", "sighting--29b266c0-bb1b-446f-8e9f-0aa867bdc1dc", "sighting--9e02e257-a777-4905-a698-274af08a47b6", "sighting--777eebb4-71d6-4fe7-99f4-f51cc504bf2e", "sighting--ddf748be-4c10-440d-8dd8-da1622ea9908", "sighting--f318e096-1f56-4a6f-b04b-84c474cdd48e", "sighting--bc456393-2b20-451f-b406-838f624957b4", "sighting--baeb345d-a3de-4983-bf5a-14f75e632998", "sighting--fa3e54e3-4143-4517-9eb5-7a546ec7d2dd", "sighting--6eaa1827-a1f3-47cf-af2a-9ded34fea486", "sighting--c935df4b-8342-4ea7-b216-e48f18e04b14", "sighting--e5ea05a4-b012-43ae-a01b-92a972809212", "sighting--f47a9a04-3f6f-4429-9dba-bb35f95d9c86", "sighting--6eac4073-0653-46fa-a9a7-95ea8b401280", "sighting--22596d56-b5a5-46ad-8d7a-c03c7a4e9a1d", "sighting--ec5f5ca0-7aee-4b58-97e3-d587910ff008", "sighting--03af3d9c-528b-4ab0-903c-94d9ffa27001", "sighting--dd63b3c5-a46f-40de-a254-a83ae434a322", "sighting--70013826-bf89-482e-bbbe-0d49032e3b2f", "sighting--9cc8ed86-259b-4d2c-b061-5c3d21ed4f5d", "sighting--6f6355f8-b4f1-4f85-b949-a752fa4692c9", "sighting--cfd368f2-7a47-4c42-bde3-96b0546b489e", "sighting--30c92999-1222-4fc1-8fd5-20248b58e7aa", "sighting--ad6a612b-253e-47d9-bc1e-d9b293e97e71", "sighting--56367d4a-0069-45b2-87b8-89031e10709e", "sighting--8eaa9e10-1bb0-40c7-80ec-9500d5443a5f", "sighting--9fcc924f-ba13-4db2-ab44-3b6cb60d8bd7", "sighting--5d9b784f-b1f3-45f3-a5a3-d92b8675178f", "sighting--a305e820-8a43-470a-ba39-8550671efedf", "sighting--e4ffcb3a-d0ad-4289-962b-09c9e1db2070", "sighting--4a10eab2-5d14-4c9a-9d8a-fd31b6237cbc", "sighting--e0175eec-b134-4db5-8349-58ce96e85743", "sighting--9655ed14-16a6-477d-8e21-3182249a8b26", "sighting--09a8c0b2-d2f8-4942-9278-77945f0b6d7a", "sighting--abfe035e-67f8-4d99-9969-49a6b1a710e8", "sighting--21983e0c-b23f-4db3-966c-ac6aea68b887", "sighting--61ba9d50-a524-46ef-ace5-e8dcbb84b913", "sighting--472f2b2d-4ea8-4308-9d1e-225727dbea4a", "sighting--48811bed-0434-4762-83e0-78c256ce4713", "sighting--9c4c162f-debf-431c-934e-8c743f70f5e9", "sighting--e1a269e3-fb52-4553-82ad-90424147b3c9", "sighting--15050397-8b40-4f23-8737-a12ead27230b", "sighting--92351aa0-ff40-4545-b55c-a89816efeb47", "sighting--824e1681-a6a2-4576-953f-7dd23d96a409", "sighting--9eacfde6-e7e0-4960-b7cc-369065df0eaa", "sighting--7c4405c7-f774-425b-86c6-28e3a1a8d02e", "sighting--2445476e-882c-4a82-b304-517e19a48ba0", "sighting--97d6a216-e5c1-4dea-bf16-3538d8de21cb", "sighting--3a79386c-2cdb-46bd-800e-900811a3c694", "sighting--70d9641e-0375-477f-805b-465150106148", "sighting--fbdfc847-f57f-491f-8ab0-f17f7df1cf1f", "sighting--e2d2bdaf-6b2a-451a-8e3d-f92e69914e24", "sighting--587b32d6-77fc-47e0-bc92-d405be770319", "sighting--7b909344-b623-471c-936d-9ca77af7969c", "sighting--914e7f13-9e7a-41a6-80c3-43e5cf0ca1ae", "sighting--6aedef0f-879a-4b73-a1f9-76e5b28c7c77", "sighting--91b992af-fadf-446e-bd68-50e1cd48a6ff", "sighting--e816a94b-8b0e-440e-a729-55bfb7210ec7", "sighting--6980469d-1fe2-4799-a588-830291116b8a", "sighting--5a1e1985-0c54-4acc-8eff-5430ca62cd02", "sighting--c31c6831-5a8f-4fd7-9ab1-7f61137c1b82", "sighting--50759a76-0f2e-47f0-a8ea-ae9ba1dfed5e", "sighting--2dc916e0-83b8-48c8-a465-d6a3cb64a1e2", "sighting--69b29702-ab37-4530-8e6c-a6586c958ccb", "sighting--9576e2f9-2557-47f0-a3dd-08be7c0c4c2f", "sighting--c1cee992-3395-4b7d-9594-30f43f25616b", "sighting--48c5699e-04b7-423d-832c-3dbda7d3d24a", "sighting--1d251516-19b5-4717-85c2-fbec348c5cdf", "sighting--bcab801c-73dd-49fd-b2c4-01e78b44293b", "sighting--354d28b1-5510-4bdb-88d4-207169132349", "sighting--74e1570f-8c0c-409c-a193-4ead265f2014", "sighting--47014e32-67f9-4c46-8f11-3667ee3939cb", "sighting--ed90058d-4945-4459-89fa-6ea941bfa807", "sighting--6e049e29-5d88-465e-8d30-1e705428379a", "sighting--1ff117cf-0d14-4474-9705-1887b3caf61b", "sighting--b0643b05-51bb-4bb1-9bcb-8532604ed066", "sighting--35c0e24e-5971-4511-a1f3-9fb1537f93c6", "sighting--f0bcb865-60a2-4398-b8af-914894c6b92b", "sighting--7220214b-fe7a-4c84-95cc-8139d4b78793", "sighting--0bffaf7f-d961-4edf-bd2b-8b889742c49a", "sighting--9319c86f-cd0e-42c6-b50e-3fa4eabb8ecd", "sighting--4c769711-bc12-42a1-8865-fcb13d196d1d", "sighting--c846181c-5788-4d02-8777-95f3c79f2e6f", "sighting--e37b46c8-354a-426f-a375-51dd58b3110b", "sighting--e5b8acf0-8ee4-420a-b819-8e1dd802389d", "sighting--6ef1d012-73a9-4838-b70d-14ad9871326a", "sighting--c4f700bc-8af9-4ad6-96a8-148d9bf782e4", "sighting--e118d510-7136-4e5c-bf31-75a42b369420", "sighting--6b3839a6-5a5b-420e-b322-f1fd586181e7", "sighting--c9c8d6d3-e699-4bf9-ac4c-b053dd4eaf0a", "sighting--b3907656-b1c4-442b-9df4-acc0ae2be823", "sighting--73d891d4-e97c-42a0-9819-0e86de9f4cdd", "sighting--588dc0b0-df9e-4289-a24b-fe78274bb3bb", "sighting--3faff591-9409-4711-94a4-8f8abcdc2a01", "sighting--aaf681bb-9927-4153-b693-d4e6273437d1", "sighting--eae2cdf0-ef73-41e9-b677-f39b68da6104", "sighting--d0b0d56a-f102-4f7a-baa1-2bcfbe87e650", "sighting--52a0ee31-9c7b-4327-84fd-5d2a11744a37", "sighting--4347035c-152b-4216-ad1c-815993dfd1b3", "sighting--224d0f99-16ef-4146-b10c-a012bef0de98", "sighting--87ccab65-f8c9-4201-bb31-18941258125e", "sighting--328032bc-1598-49b9-b1cb-06ab8ca98dd6", "sighting--89e3efb2-c38b-4a4c-b52d-aa241e8e38d8", "sighting--20692d31-37f5-41a6-bf0c-ef1c942ac1d6", "sighting--d4fcdc97-0045-4091-8c1b-8d0f9ee899c3", "sighting--467ab470-3e4f-404f-97a7-e9778f892c7d", "sighting--61a52ac0-daa0-4c45-bf79-b5b788fe1f9d", "sighting--4eb24f29-147b-40d1-a1d6-b28dce869f95", "sighting--9cdc107d-8f8b-4ba9-87be-3212ceb09db6", "sighting--96b9f392-c768-4af7-b1fd-b31696db1655", "sighting--2306ad69-4821-4a05-9618-4e6f8ab3bdf8", "sighting--29475a32-5b51-496d-84e8-ef7ab02b8753", "sighting--7a229eaf-f65f-41d6-878d-2f3c76788c5f", "sighting--4a7b7ab2-837e-4e78-9aea-6fa913b6ad34", "sighting--b886e98b-c26f-4ddc-bf34-719df29eaa9f", "sighting--81abd0a8-a0d9-475d-9fb8-8651dd9a6c6b", "sighting--421ca1f9-1165-4fc6-8ac0-cf96b363e80a", "sighting--4afe63f1-a51a-4914-b047-346e9d505c13", "sighting--86a87609-e815-4f8c-9a7f-475d29be9a0b", "sighting--8b0900b9-074c-4d95-86ad-cb3c7a3ae99f", "sighting--f6c47247-a8e3-4757-a310-a94ae774ca29", "sighting--0a7bc344-530e-4149-8e26-0246d3e951ac", "sighting--67c3a5ac-c771-49bb-ab37-7ff45eb4e36e", "sighting--f924bf8f-ce12-41b1-96b0-4f39a822fda8", "sighting--280b3647-4ce7-4ee6-a7ae-beb13aee79c8", "sighting--57b7001b-ffad-49e8-aaf9-22cfa4b3b633", "sighting--b47407c4-0219-4906-8a5d-2e2a1725175d", "sighting--9c4074b7-d9fb-45b4-89d3-9e59fdd1a94e", "sighting--62aa52b9-5b27-45b5-8592-3e6a247b186a", "sighting--b3ba5d5a-8e5f-4af6-9566-7fd099c454df", "sighting--23a4ce0c-786c-4fa7-a671-42dd5221cc02", "sighting--b09c0a25-ebe2-4896-8eb2-170b53e58519", "sighting--0adc9c0d-76b3-4b03-b227-f7cf97473740", "sighting--c2d1623f-4e54-4a54-a79f-151853393849", "sighting--2058cde5-dead-4380-b326-1c3411fb2822", "sighting--a0eac834-c963-44c0-bd7a-95a6cb9bff8a", "sighting--be2a685a-066a-4a99-a396-f3a70369b9c0", "sighting--4eb5d1ed-ad2a-45ae-927e-6cd9fbfe9db1", "sighting--e93da8ef-ff57-44d3-adb2-27507f3c0dff", "sighting--f46e0ff7-eb58-4b2f-b8a7-b9958bf0d57c", "sighting--6bb39b26-c679-4566-aa9b-8e10eda18830", "sighting--bad17599-bd3a-435c-a97e-eeefbef1d941", "sighting--ec07f6ab-08c9-456c-bc74-b003ec691fe7", "sighting--648427ba-cc0a-4eea-a6de-1cb3e57b3905", "sighting--2cfc3348-9e0c-4b8e-a840-f5f879cc9d98", "sighting--4e6b28af-fd3f-48d8-9b4f-2deda14f7957", "sighting--f149b3d0-97c2-4180-a171-da5251c19cfc", "sighting--d5bb55cc-65f1-42df-935c-59b40bdac569", "sighting--2de8c953-8c23-4e7a-ba36-fc6f9f3036a1", "sighting--97b6d379-bb7b-49ac-8b46-d3bb11ebff19", "sighting--d47b1e38-d0e2-4632-8fb8-e8009e02663c", "sighting--5725f738-d8d8-4977-9344-52eb2c84a06b", "sighting--51edcb0e-8b65-42ca-8358-9e86b1c48439", "sighting--1dac31f6-b79c-4683-b920-36c0d4f4882b", "sighting--2053f4b9-3067-4461-a80e-54035ac2a00b", "sighting--1af95bec-1138-4734-86c3-54cdad58df98", "sighting--935c315c-da60-4240-9a94-a0b9fbc9cad7", "sighting--7a264dcc-fe86-48c1-ae04-69098b175b34", "sighting--5b061df4-9ec5-42ea-86bb-0467b933ea2e", "sighting--d91448e3-b4ab-4550-b4c2-a44ffdd31607", "sighting--4bc2710b-f2e4-4aec-8dab-7b350cd04b67", "sighting--50d4d3cb-5a09-4b2f-a366-079635fe0c1b", "sighting--95f042e7-41a0-4000-8e50-aa3d6accd927", "sighting--62088467-2552-453c-a495-6ee34cc743d1", "sighting--0755fc4d-916f-43af-8164-dd8817cf4c59", "sighting--6a6d2b2e-776d-487d-b4f8-ef4a92677237", "sighting--4a195ade-f1b2-4e19-8001-a1cf25c98a51", "sighting--2cce16fc-da0f-4c6e-9799-841c84f8472a", "sighting--fda6c0d3-3656-4800-8e31-ba50d39428f8", "sighting--95611ed7-9e72-4788-94d2-8c7b8fee27e3", "sighting--3526bb5d-9be9-412f-8fe6-6ab5ecbdc34d", "sighting--49006145-1a16-4622-928c-8ac7e8a4d5c0", "sighting--6ffa8bad-66b5-4d70-8e1b-8d1e6e10785f", "sighting--645a7e29-a211-4dc7-9e20-f4baf12183e9", "sighting--9af15e46-7ba2-4e64-87b9-a599de35c667", "sighting--46f000c7-fd80-4a33-b7a1-1a16747bc5ec", "sighting--84621ac8-3f38-40d4-bc88-062b160393ba", "sighting--b428b7d6-21ba-470e-844d-8e90b62ecfa7", "sighting--44ead6ae-fa41-4cbf-8cfd-c1fb8d580fd2", "sighting--25be8eb9-9163-4d36-ab5e-817d0082b76f", "sighting--86cb509e-b7e5-4f31-ac6e-47942a865442", "sighting--55f00722-9af7-478a-8e14-0a2d07338743", "sighting--d201eb0b-c350-4acb-a088-4063d5cdf59d", "sighting--97ee3827-2c61-4044-be4c-01d00d82aef9", "sighting--05d60def-502b-416a-8822-1ed9e7716228", "sighting--bc0692e8-af31-4e02-b85f-e5cfe38be511", "sighting--54a3fdf6-9fbd-46d1-be58-6392daf2df0c", "sighting--56ff03b1-a5d9-4a29-88f1-518f297de91c", "sighting--3b04fa00-d90a-4ea6-87ee-27d8f440d8f7", "sighting--4e5bf340-fae6-4555-9d88-f5d75b766de7", "sighting--f835ad6b-64d8-4c83-8dae-17d24cf94a48", "sighting--e48ff699-b802-42c8-b730-ed487771d999", "sighting--f70e408d-672f-4d27-8312-a9dcde6baea3", "sighting--f15608ef-8b2d-4f1c-8111-a48279f0e985", "sighting--6a156663-7e11-4a43-99d2-994cb66b3b70", "sighting--91660df8-4812-417d-948f-847ce5fbd52f", "sighting--a9d8845e-e3a4-4a23-885f-2bb0fcc1657b", "sighting--31f5c410-05c6-4885-b16b-bc80addf7f26", "sighting--e6f0aeb5-9342-42d6-80dc-557d3b4d102d", "sighting--7b6f9081-91db-4fa5-81cd-32f950058a76", "sighting--ef58964c-7f75-4b1f-a034-06de6ba19cc1", "sighting--4b68f6d3-bf70-4d55-91f2-7a12df23c347", "sighting--fc745a71-79b2-4e4c-8198-4c9755bc06ea", "sighting--138b2803-2dde-4113-afba-4d5c051a5d61", "sighting--4b3dacd4-fb34-4424-9050-c287fdd94e3b", "sighting--e067a4ee-c667-4df2-aa10-6a521d04f0a4", "sighting--6197ba1c-8b3b-480f-ab83-f378fc8583d6", "sighting--98c54abf-cd48-44d1-afd3-c3d545948fee", "sighting--449aed98-26cc-4efa-b6e3-6f55af0f4582", "sighting--54a31ea9-b391-44ca-90ec-7b09e4cb25d9", "sighting--155fe437-8cb7-498c-a82c-6c170557b90f", "sighting--a5ae7b60-9f73-49a4-b286-4efa31465f78", "sighting--813a35a7-700d-48c1-b97e-e382486d4d7c", "sighting--0360501d-09e2-49fd-9f6d-3288d3a118dd", "sighting--8b812125-0a15-4407-a8ba-850b65c25e63", "sighting--cb24d6a8-5651-4497-bd4e-2f6f08cab5d6", "sighting--90e1d008-7742-4b64-a655-9b2ecb3d15ba", "sighting--492309d0-0546-40c3-8d89-03f7e252c3a0", "sighting--e1e1760b-de77-4bc1-a55c-a7bf642d9cec", "sighting--82b2d5bf-122b-4d68-a750-e8beb0138e47", "sighting--2d420c77-30dd-4898-819a-58868413e106", "sighting--396e736b-0cea-4a00-a07d-fa64663150cf", "sighting--493cfe32-e89f-49b5-967a-c8ec9102f592", "sighting--cbe06999-c8ec-4bf9-8e18-db99a8ff9afb", "sighting--93bd7513-6ea4-4fbe-8ed4-ab53f355dbab", "sighting--192cbef5-e744-45a6-87dc-c4e89d039848", "sighting--469a7134-ab4a-48b8-92a0-d243cabc91ea", "sighting--dc903c11-1ba8-4004-8355-5838c8d1fea7", "sighting--0cff70a9-d59e-4e01-86c8-ef9c5590d9be", "sighting--f511dccf-31d7-4b0a-a48f-b4f22e07a179", "sighting--d4bb06e3-deaf-4fd2-86d4-b05d42ffdcc4", "sighting--71d1fa2d-4091-46d7-8c00-f8918f7775ea", "sighting--f61143a2-1e46-4ff2-adf0-931cf4212c7b", "sighting--93608622-f1d8-4877-b497-39bef0c9fb01", "sighting--e29e2db7-66c4-4bb3-9d8e-ded8493a321d", "sighting--613bfa74-ea7d-4104-8b01-ac3571f53792", "sighting--0a94eff2-ed6f-4588-ad1b-8de8216bfe0c", "sighting--ba7306b2-c3a6-490f-b92f-025642e1854e", "sighting--4560789c-1dce-43a6-84d0-b1947d0b7af6", "sighting--20edfe43-b032-4d11-ba17-7542390292e9", "sighting--329e120f-3b48-4e8d-a911-738322a4dad1", "sighting--064ff570-bf12-4eba-ac25-a04c1433bf79", "sighting--ad28672e-2841-4ff9-8936-177a6f88ef05", "sighting--11021c6e-fbfe-4acc-b87b-5bae0c648474", "sighting--e368eca2-1ccf-4c19-9c97-f7901cb76812", "sighting--ce225cec-03ca-4023-b2c9-5e4144cb9ffe", "sighting--e223760a-fba0-4031-8dd7-d4679b22aa0e", "sighting--8bb8bc11-d226-452f-8fa3-728c4d419193", "sighting--d198c45c-33b0-4ad8-84c6-2522455361ff", "sighting--e272da6a-4fb0-4af2-b2e6-17b4bd4ef030", "sighting--b6d26bb3-8ba8-4fe4-9230-d246e8796137", "sighting--1662e2b7-be89-4253-8b83-0aa27b12c42d", "sighting--271b1834-55c6-47e5-8a2f-a235b94336bf", "sighting--436610b9-54eb-4207-89b0-89ac2382b796", "sighting--7ecae794-373c-42ae-8d72-5f671d5bc508", "sighting--a6f30ff7-d521-4e72-9a67-1686c0bc3a4d", "sighting--14322952-8404-47cf-9708-a9c6c7213e59", "sighting--a19fcc92-806a-4175-9ee3-cb5b5df33b10", "sighting--d9360eeb-06c2-4812-928a-c472aff7840b", "sighting--5a42c3af-ab8c-4371-9adc-345c016fab0b", "sighting--eab93963-d3c3-4d3c-9a2e-c107f7e344da", "sighting--e9e0d1ad-2b8d-4eeb-b778-fedcfab00bc2", "sighting--da07beac-65fd-4e0c-8e08-d395cc1835d2", "sighting--de897cd6-7f9b-4255-be45-d768980853d3", "sighting--555325ff-8d6f-4e7c-8f54-7e5b7659cfde", "sighting--b4e76e24-5404-4378-86d5-19b40dff3649", "sighting--0c5fa1bd-52d4-4abd-a68e-050bb7141209", "sighting--fb92f118-27bf-4653-98e6-466af3968b99", "sighting--c39c62ee-39a7-4b5f-9ed9-5e09ed1aa28c", "sighting--7b8fc57e-60fb-4092-ac78-4689101a9205", "sighting--7d19c89b-604c-4c56-bb9d-6320bcbdaa74", "sighting--dc55521e-89bb-487e-839d-9fb3618df8e9", "sighting--c885934d-0abf-4d42-9da5-67cfdece667a", "sighting--ffdce8b0-2648-4955-b733-c5b74c12a6a8", "sighting--59ed8411-1a3e-48ee-9d80-97ff09b7649b", "sighting--ca38f43c-bc28-4cff-9623-c52189a01d0d", "sighting--85cc60b3-38ac-48a1-b1be-05a8a142dfb4", "sighting--27bd20d1-5a8c-443d-bec5-99897089ebda", "sighting--e19bf43f-d042-4f65-804d-c89a73bce60c", "sighting--ca78d8df-1701-42df-881c-f98d76fa3d2c", "sighting--e799c3ff-8c5a-46a3-8249-db23520d6312", "sighting--bf1ebdc9-e1a6-4356-b964-9ca12507d85c", "sighting--f5b22213-9287-4d98-b615-0c5b90500a7a", "sighting--4f76b350-795a-4691-865c-779a5eb88310", "sighting--e281ce3c-98c3-4741-bd70-ceb9180d4843", "sighting--16bb7309-4bed-464b-a26c-7efb1faf30db", "sighting--c1a8112e-9520-44c4-bacd-0a612ddf587e", "sighting--83ef529d-bf73-41fb-ad97-467b30f70444", "sighting--343c42eb-2b3a-4e45-b654-f7709aa4d738", "sighting--2aed5e95-c9f2-4586-a3df-7b5a1361cff1", "sighting--ca0ad951-c8a2-47d1-9964-2ab36ef2c66e", "sighting--bcce62bb-7ec2-4725-b57b-38e0f78e58fc", "sighting--c2f28ffb-63a6-4207-a06f-5b7a91ceac93", "sighting--9ac1078e-4d9b-43e3-b071-ea0cc23169af", "sighting--0b8ef894-111b-4b96-b14a-a59d983723fd", "sighting--a1e89149-39e7-4f1a-9fb5-df126f8fb3da", "sighting--5780bdf1-06f1-4e22-91b8-70774cb06f82", "sighting--4eb664a7-b68a-4b09-9048-d336d8abe210", "sighting--6107ce96-16ec-42f0-b0ed-12b18d8457bf", "sighting--4a44d057-5e11-4a4e-bfed-e3a00179c312", "sighting--dc87e5c9-403b-44d4-a64c-91d863ec3d56", "sighting--a31ae80d-cc8f-4e56-a395-3a9970e9a0f7", "sighting--a6d67917-b4af-4455-ae8b-d56a2a15ecde", "sighting--bce3bb45-7e68-446f-b93f-f091631d1af6", "sighting--382ac705-2466-4641-b99e-46d303c70878", "sighting--31995e03-6609-4b0a-a8a7-929eb7e6e3c1", "sighting--aca2d21c-615e-410f-8e09-9a913cdc1aa7", "sighting--abc4b4ef-f7c2-4235-b556-079c35e56c94", "sighting--5347b943-1cf8-4179-ac69-e5d8924df852", "sighting--af4e4712-b1c0-4784-afb9-748c42ae6589", "sighting--7e7027ce-3cdd-4e15-9532-e5a9c4de8b01", "sighting--35013b06-3943-401d-85d2-964d1980035a", "sighting--b1d9c326-8758-4de5-8785-891b4bc1c931", "sighting--ef6a6869-dde0-41f9-9b57-80bb5fd79334", "sighting--b979d804-7d61-40e2-be7e-4ae86d043a4a", "sighting--087ad44a-89dd-4929-ab5c-4f02c1570552", "sighting--92604441-d8d5-4ed2-bce5-0b87c1c3efa5", "sighting--28134ded-441e-4de9-a87c-e1aac5386e56", "sighting--992db0f9-70eb-460f-8ebb-f52602ac69e9", "sighting--699b393e-2d78-48c7-9c68-9fe0bd33fe4a", "sighting--8eb09c04-fa5b-4738-9de9-3ff7f82f6bd1", "sighting--95af9921-73f6-47fb-95c9-75d9f4a0a73f", "sighting--bf32319d-1b09-4b81-8cbf-53cfed0431fc", "sighting--33ce03f1-52bf-4f92-86fd-4e631f5d49fb", "sighting--632117ab-1c87-4de0-9096-21b548bc77d3", "sighting--a3dc5016-f1f2-454a-95e1-13c983e10fc1", "sighting--e28f1d3e-54b3-461a-ac93-567a4731f926", "sighting--67834fbc-83b9-4bf0-987e-0c15a968fc45", "sighting--7c80afa2-3892-4a1d-b39a-ca978b34d055", "sighting--4923ec8d-4a31-4c91-b0c2-b44bda76ca1d", "sighting--4a3ddd9b-70b9-43fa-bdab-7650a36e30b6", "sighting--7449b556-7271-4f69-9978-26f13ad98241", "sighting--851e3014-b49e-4ed8-9f51-5f60f0088aba", "sighting--b195e569-e4dd-4743-909b-313c1efd906a", "sighting--43ca3ba4-83be-4f4e-adf2-58b0e7ec7b07", "sighting--81621240-f0c2-4e76-933a-6d13d78b51be", "sighting--8cba7153-8408-4ab8-8ef2-707ec31beb4f", "sighting--7c21d93e-61da-4ba3-8c1b-3c78b7cde0e0", "sighting--3e2468bc-9259-45cf-9a10-eed2946da529", "sighting--26cb38de-62b9-4e0e-a6d6-31c713e25f77", "sighting--f7e004e4-d8d4-4fd2-bb69-57a045f04e0b", "sighting--e4199fb5-5715-47e3-a97a-19249c29ce4e", "sighting--e4d7dd70-c32a-40a2-b248-88347dc0d8e4", "sighting--b17f57c9-f33c-40e1-a310-9db762e1f78c", "sighting--2da88d58-2221-43b1-9a34-c0e7db8974dc", "sighting--feaf6f35-415e-4505-b16b-8cb15e723552", "sighting--8b4412da-4eca-4258-8a8d-3244d5c95570", "sighting--559c9996-ea3b-4e79-b088-7b9e324f3920", "sighting--a41cf61b-9d15-4266-8bee-7043ba76e9e6", "sighting--cce02141-367f-42e8-a029-ed6c71122721", "sighting--e5ce8b68-5954-4e34-b9a9-41e7cc011445", "sighting--54c646dd-dde9-4846-bf13-4912451bd33a", "sighting--2fd3d241-9936-4b68-afee-5af3692b044a", "sighting--4e009e13-8250-4fa3-a288-f98f1ba970f8", "sighting--913d99f7-ece9-444e-82cb-163b89f5958a", "sighting--8e868e88-d71f-4830-8bce-1b2be61a2a8d", "sighting--15b89fa4-eadd-486f-afd7-b667feb595b8", "sighting--9bb160a8-ac3c-48b8-a3bc-239964ba3fb7", "sighting--b076a86f-b675-46d9-830f-a91b12cfde9d", "sighting--98226103-9efe-4ffd-b8e0-b72cd451bbe1", "sighting--f2dbb039-1121-4d7d-a528-907c4a92d714", "sighting--a3e2effe-7b6e-4738-abe6-ca644c7e9073", "sighting--801c4509-728d-4d0b-9f72-8c3b1fcec325", "sighting--9f92a3c7-e223-4974-bad0-071ddb5c8f53", "sighting--53ea7afc-b6cf-4f0a-900a-4d0e8c637ed3", "sighting--c5993742-c6b1-4dfb-bbf1-03a6738a48d4", "sighting--bc77ba03-cc29-41dd-ba05-075d3de659b4", "sighting--455150a8-0196-44d8-b483-5972a18e0f50", "sighting--cce7083a-59f9-4c12-a96c-fe30607f6b32", "sighting--7699e24c-d909-4254-aa74-b18e88afea9d", "sighting--0e790ace-6479-4529-9238-97038b640bf8", "sighting--7606d19e-f7ac-4e29-b977-24c2ef4f6077", "sighting--9ca54067-4cf6-4463-81bb-b5af9a3bcf02", "sighting--334dabf5-de19-45c5-a50d-933dbd58de39", "sighting--608b0110-5d37-48ff-8746-006c13ea9afc", "sighting--debe9aa3-9e7d-455b-90c5-26179b2af8d6", "sighting--f5e2b979-92a6-4f0f-9d60-a21c7e3dfb72", "sighting--e73c483b-e64a-4772-bcfb-5ca2da91b43e", "sighting--7c1141fe-8479-4369-88b1-5a14aabf30ce", "sighting--071c32bd-4bd6-44f8-86ff-91ada1c4f49a", "sighting--961d7c91-70cd-402f-bafc-12ce7ff2ccba", "sighting--ef75760d-08cf-4bb5-9f36-582b92054b22", "sighting--22ecac25-c2ae-4686-a7b1-4827b4f4b9fb", "sighting--58799748-bd34-43e1-a9eb-08980f945f5b", "sighting--3046a884-a80f-459c-b79b-cbe3cf6f728f", "sighting--f49be545-95f6-444a-b4e5-4de9614960ea", "sighting--e5f18857-c7ab-4192-9b7e-3228b211e480", "sighting--17a74203-dd20-4008-a89c-beaa7cc074af", "sighting--f4ff6f36-3e12-4dd0-9687-21b144bddd31", "sighting--cf549d11-9da6-41c3-8ab1-a775f4d028d5", "sighting--f0268b9a-4550-4705-83a6-90be04f73fba", "sighting--ee19d03f-7434-4e37-a828-bd6ab6fc9190", "sighting--4333cb7d-8673-4619-b373-86ec660a9258", "sighting--7d9e7aa5-27f2-47bd-ad89-d689ecd15eb5", "sighting--8237ff0a-2d1f-4fac-820b-f1125859b431", "sighting--d0643a7e-c234-4825-b19f-669a850e839b", "sighting--65c73ad6-c1b0-401e-87d1-31e64262c286", "sighting--576883c0-0efb-4153-840e-c71e5c3bd733", "sighting--e0160298-a8db-48e2-8511-08f4abaf312d", "sighting--3c4a2676-19d4-4a39-a2b7-39e41fe98518", "sighting--2aac4f24-7fc8-46dc-89e2-16e65ee29902", "sighting--770efa59-97ac-4171-8f63-4badddb14034", "sighting--042f5fe0-9c7a-40bd-9d2d-f93c3801f1c0", "sighting--0655d13a-b620-4992-877d-6ee7a2d81b43", "sighting--984b0c1b-4bb1-41c7-be1f-f079397729f0", "sighting--f569196a-9748-46e4-b4d4-670336c98641", "sighting--bbabf4d4-83c1-4a3a-b5c8-76b9d7946b44", "sighting--97ba062a-0028-4406-8230-2576a9e70340", "sighting--08f1659a-8e39-45ca-8b74-94d87248777e", "sighting--6693fdde-348b-43a5-83dc-82afa73e7b7b", "sighting--270d87e1-797a-46ac-bbb0-588669a4bb60", "sighting--e5e82100-8c91-4637-ac9e-50da8342e3fd", "sighting--66554f84-51ad-4952-9f73-034b104dc01c", "sighting--3e498126-cc7a-4105-911c-7ed54f3c79a1", "sighting--7378d771-7bc0-4dfb-8219-d4433274e4e0", "sighting--c8ab802b-53d7-4c81-9cbf-0e1b2f9f626d", "sighting--b2f0abe3-00ca-42ab-ad92-4c703389b77c", "sighting--040083d0-f3a9-461b-8845-03970418ab2d", "sighting--5baf24dc-2b21-4def-97b8-247f7953333c", "sighting--a4b3a9e7-ac76-4a08-abf9-05d128f3698d", "sighting--a61b0270-dae4-45c6-9813-d26860f67742", "sighting--eed18374-11af-4f12-a5a7-ccf8b14eee84", "sighting--58fdb1c6-cc06-4579-b43f-221351eaf2fc", "sighting--f086f3cd-03a7-4a3c-8141-a25145e05938", "sighting--7fef87ad-315a-4cc2-bf53-c70d1cd25ad8", "sighting--418a678d-dc92-4201-b0eb-90e08a8f4076", "sighting--2d385ee4-377d-4c22-9bdd-80a753c3ab98", "sighting--239985c8-5b43-4cc5-915c-19ff6f2cc81c", "sighting--c6673ef4-367b-48b3-b54b-7bdcc9834875", "sighting--29737b46-f453-4cad-b8ae-a696bc2fe991", "sighting--8c95f27f-d80a-4f7e-a3f5-9e051457a001", "sighting--945a331e-57c3-4765-8b89-d494fdd6db97", "sighting--6f326aa7-e9da-4c42-b10c-1b1630f409bd", "sighting--4432808b-547d-4a41-9255-079e9f4cb1cd", "sighting--8c1c1028-f05a-41f4-b0ec-4738a2151b0b", "sighting--5ef554a0-7011-4e4b-a0a3-54055fbb9b74", "sighting--14a59e13-cfbc-4714-90a4-bc4da093d070", "sighting--3df18dde-62ab-4d22-bb0b-5ce8aa53804c", "sighting--1cd1e2e5-b0b9-4d94-9b5f-690f8d4f2974", "sighting--f6897622-8d66-4bbf-b90b-30615d5d0e3f", "sighting--fb7ae5f8-ba13-4f8e-9b13-7e8a75c33ef1", "sighting--130c6bf9-b2b5-4967-8243-753cbe03d1ef", "sighting--7e915cf0-754c-4606-b660-2cae003ae06d", "sighting--45282b3f-0513-4b99-9fda-c16e73cf2b52", "sighting--179b89d6-7474-414c-9fad-0246919045a3", "sighting--4781c28b-e4d9-4a8e-a5df-c9a70f59c1e3", "sighting--704af56e-8df7-47c2-9ebb-10034b1968e3", "sighting--d563f066-84c5-4c50-a907-f6262a51e47a", "sighting--78514085-b874-441e-9ba7-b6daaa2113cf", "sighting--14fbe293-0078-4340-a877-d3e14157554e", "sighting--078ec94e-72cf-4336-8e2f-920611f07f88", "sighting--c52ba9d2-1cb6-4ee8-8441-a88a0ce81a90", "sighting--bd1b4863-5bc5-47f0-ac0d-2ac19a5de90d", "sighting--30554f2b-05fd-4d9a-ad72-3acc21eaf79c", "sighting--11ecea3d-f5ee-4085-828b-fbb9e66808b3", "sighting--c5267e17-a5fb-467d-9567-9d1038fc296b", "sighting--4f20033e-1664-44af-9ca9-0d777547cf45", "sighting--0bab7844-2e03-40ad-aef8-1024c7fd95ed", "sighting--8f3f112b-f26f-4d06-952b-6ba966d15bed", "sighting--f4444c50-864f-40ae-afdf-1a347049b70f", "sighting--a9cd278c-27b9-4f54-8106-1829b8d0ca24", "sighting--988fbf39-87fe-4097-85ae-d8f4dc73b8ec", "sighting--0048bb48-dce3-4c57-b22f-e127f2769c40", "sighting--f5c836d6-565e-4feb-b896-2fda9a31fd6c", "sighting--2bfa9a5c-4d30-4e6d-a806-cda1a83c37bf", "sighting--12f76fa0-2d59-4db0-83d3-dd7fdfc1d93c", "sighting--7c7e0f93-f88d-42ec-90db-efdaa9512523", "sighting--712a9ff7-47f3-4ef8-bd9a-815c812f8826", "sighting--046401ef-0e45-4084-a9cf-4496712d95a8", "sighting--fdab3116-eb03-4f20-9636-45ad7cff77b6", "sighting--4feb242f-3584-46d0-9d55-9e455012ae99", "sighting--b303c375-8892-4284-a51a-614b8447af91", "sighting--1a451c7c-cca4-49dc-b6ae-f861080a8fe0", "sighting--ba21bb0d-5ce0-4264-bb98-40affef223d7", "sighting--d8c6d263-f03e-4bab-b1d2-cd6a0aac98c6", "sighting--939296c1-f2c1-48f7-872a-66d46537b070", "sighting--4e83f353-4a9d-4bb9-9d83-8194a6b32611", "sighting--ebb4ee3d-6a9a-4f0c-b260-8fd47083f88d", "sighting--0c9d9ab4-918d-48a0-8192-3420e83e71a8", "sighting--6f7180ad-a4e1-47a9-976f-2a2aa87d940f", "sighting--3ef588cd-9ac6-4f5a-bfa1-33c737907168", "sighting--87676f92-b7a2-477d-b8bb-75013ff48a36", "sighting--60a9965a-eec8-414a-94a0-cf41d5e53cb5", "sighting--b61863c4-12ec-4eb1-a875-89c8da5d8cdb", "sighting--50b694a5-67fc-48f7-80ed-d2f3324051c5", "sighting--d07a2d87-3b5b-4401-9f90-55eff2073b8f", "sighting--714f3a3b-a5e4-45f5-a027-d8695b88553f", "sighting--93283057-b906-44fe-bcc5-b52eb37ace5e", "sighting--09116df5-fcc0-4ad7-a6b4-1aaf67dbd65f", "sighting--81099389-30c0-40e1-8e01-7ac94d2580c5", "sighting--2963f123-77a9-437f-843c-82588e2c4a7f", "sighting--55933eb7-a3aa-4d04-83ec-450d1fca4a64", "sighting--7ece99c2-88f1-48cd-88b7-eb51bc76b1e4", "sighting--56158604-74e5-4f07-a792-88280b8f4cc7", "sighting--6a3731ec-8195-41c8-bf2f-73182a371eee", "sighting--13d37c59-8792-46e3-ad2a-2db8a92ec65d", "sighting--ce2ff0e7-64aa-4f20-8cd8-245ae6424402", "sighting--bf0d00d4-bba2-4de7-8cba-4b9ad93ca36d", "sighting--fad63498-0029-4a46-b68c-c8d16d31e137", "sighting--700371a4-a54a-44f2-88de-80d97b97941f", "sighting--bd4704d5-7cfe-4a5d-840c-b812360770cb", "sighting--cd04ddde-109a-435a-b22d-1509c8e424cc", "sighting--bc45f03f-fb29-493c-b4d5-2a42854539e5", "sighting--33682680-829d-4cb0-aba6-c5f181456e78", "sighting--6144d533-68c6-40a3-83d2-cf6794b4cadc", "sighting--60abbb39-2a78-4871-9ac7-52092a59e17a", "sighting--e4076214-fb63-4f7a-8c2e-9278d7efda51", "sighting--a1dd010d-e923-4192-aba6-584a4479b3ce", "sighting--c45b4cf6-4dc0-460b-8c2c-d38108e26a79", "sighting--0e90fd26-f55c-4871-a3c4-b4f80b92aeb1", "sighting--aaec8de3-5b64-46fc-b799-82f1342c20a5", "sighting--a456d23f-77a8-43c6-a442-24e2d367b502", "sighting--5e4245d5-b58f-4bd5-8cb0-d92c397faa7a", "sighting--0d8a0c69-926b-46e2-bf5c-1d59a74cae19", "sighting--98f83873-d417-41d3-9871-dc405b743138", "sighting--a0e867ad-52bd-40e9-ab0f-d30104f68e91", "sighting--bb27298d-80bf-4eeb-b3c7-82dd9b55c201", "sighting--88bc1339-ccdb-4b1f-bf97-666b865d781d", "sighting--2dc5091c-116e-4f31-a54f-c58d5bf2284e", "sighting--04337e3b-13c2-43fc-a8df-fd4ec8d9932f", "sighting--bda7cfb7-ac92-4238-b66a-3c49539578c4", "sighting--509201df-d50e-451a-862c-eda8a7389440", "sighting--dedbcdb9-a3a0-4438-9389-43d21451c0d1", "sighting--ffe7f64a-18b7-4c3b-9c49-a4fe0a4ea15a", "sighting--f63a58b7-7072-4482-a8de-eaf23aba0e98", "sighting--a4809552-24d6-4031-8537-ea686ab1e32a", "sighting--b9a18157-301c-4247-8a13-9f21365ab018", "sighting--8ea5c264-d0ca-44a9-8cff-0912478ef692", "sighting--d0c030aa-c3fb-42e4-8bd2-f59cb70ecd50", "sighting--f0712b48-f7a6-48d2-ac49-ca25a3e6b6b0", "sighting--b78c3da3-525d-48fa-907e-202d37429a83", "sighting--4e1d1ada-215e-4065-81f5-e36af1d841f5", "sighting--64af99d7-80f8-452d-878e-18b587526eb9", "sighting--9f13cd1f-4be6-422d-afa6-2393f2d76972", "sighting--ca08b3e4-d5a1-45af-9b17-db3e36e8e6ae", "sighting--2216680b-a309-47b2-bd3d-3bb51695d134", "sighting--2ef17b6a-34f9-49f0-8b3a-6b5861df0f91", "sighting--bf0bcb6d-ccd7-4aaa-8f0c-516fda46a7ce", "sighting--9e2ca586-aad3-4a03-b00a-e3347c4d9723", "sighting--67cd366b-f98a-428e-9fea-41cbb132e06f", "sighting--c9b4b5f0-997b-46cb-80fd-a548d0a51d96", "sighting--29e86bcb-8ec4-44ea-91d0-7baca16afd83", "sighting--d751810a-46f1-4b06-9392-79d54954e450", "sighting--b918cdc6-48bb-4d7c-b44b-f0324f3f56af", "sighting--e4ff0f45-7b8a-44b1-9747-673e452ddad0", "sighting--7c4ad740-e2aa-4ac8-9553-5cfc0907f689", "sighting--e0169574-c14f-4ea1-8452-1b827af63969", "sighting--802f83ec-6e16-4ace-a696-e395263a772d", "sighting--dd2d5498-5128-46bc-b132-409b760c6c71", "sighting--8f6c5fd1-c575-4b9c-9995-72cee9d376be", "sighting--3b630600-234d-4487-b99f-9f7d4012f0d5", "sighting--43e3cb67-3462-4527-b7a7-074417fe9267", "sighting--954badf2-9ce1-49b3-9a0a-22bf566bccc3", "sighting--3755a0d3-ac7c-490b-8e80-7c729fd140c4", "sighting--0efbf98d-c35c-49d6-90d5-44aa7de254b1", "sighting--f9db97c2-7dbf-4597-a797-5873e3034d1e", "sighting--0e2d88cf-da8d-4166-aa2f-74b6c123fdc7", "sighting--7ce41d06-2113-45b9-bc38-2ae51e0b6bc8", "sighting--d15c0c90-90c7-48b8-9dd1-9a25ff63377d", "sighting--2d00f46b-cca2-4f11-86d5-bfa4acc95a2b", "sighting--520bc219-a83f-4bb5-a818-0f27cf2de687", "sighting--c75275a9-66a5-4849-a12e-9d8e291f71bc", "sighting--a2e1d16f-0a3f-4661-b4fc-c9dccbd6c536", "sighting--1dfba28b-a2e0-4c12-8480-9b3952785c3d", "sighting--b352e554-ee65-40fa-bdc5-c5f3e533cc4b", "sighting--820697b2-aaab-415c-96f3-5cc3f509bf9c", "sighting--5e5427d6-605b-4f7b-9a40-5c344ffad4cd", "sighting--ec1fe8b0-34da-4e3f-b9e8-28d56d230fe4", "sighting--2a0b4073-154f-4b5f-9bb0-0b69d11bdd5f", "sighting--0ddccead-fb34-49c3-85a7-3414f8a08416", "sighting--efef6f72-8846-409e-ae89-21c5e23c1b62", "sighting--f062d619-b2e7-4877-a24d-568602bf16aa", "sighting--5c379b64-a53b-4d45-87c8-1980ff0e2fb1", "sighting--ba89b320-cfc1-464f-ae89-fe2215c6dc4c", "sighting--2416f83b-09fd-47d9-a86a-95e18f230625", "sighting--9d5ef32b-befc-4254-9749-b7534c88e3dd", "sighting--1d6cc4b1-96be-49ba-bbb6-7485c303f5c9", "sighting--25516203-fd5f-4279-85fa-97fe2c5cab18", "sighting--eb698b35-d4ac-470a-a03b-a4ef3d6514a6", "sighting--56483de3-210f-4952-a1aa-f4c88cd3768e", "sighting--efb29ac9-36bc-47e4-87f7-4c15d67e57b3", "sighting--857fe0e0-027a-43ae-8900-15708579df68", "sighting--8f4eb9f3-db95-45f8-9c47-9d3d9864c0e1", "sighting--c768632b-5555-4f01-81d8-d836f1ec250a", "sighting--8e65a7a7-6933-4389-967a-39e22889360c", "sighting--6c370e7e-424c-4b2d-bbb6-120ffe1e3b9a", "sighting--7e66bebc-e8c5-4a34-bf5a-07d81591e8f9", "sighting--7c7c181a-2e95-46de-8c53-f60b4ac7a809", "sighting--f74072a5-eeb9-4e43-8dde-a258ff010bca", "sighting--16597317-f200-463b-bd14-dca27ee38cbf", "sighting--2ac11400-0d54-4bbf-a5c4-0941331fd87a", "sighting--ad4dd326-e0fe-4cd6-afcb-3f48bbc8d48d", "sighting--0159a70b-adbe-4344-9781-dd912a3765cb", "sighting--a4295422-96d7-444a-9128-337829932519", "sighting--ab88552e-c336-4acb-b298-dcab1cb4f43f", "sighting--4e0bf956-6e73-425f-aed6-538b3ae3f528", "sighting--0afab2ee-89b6-4fc0-a101-3518633afb6d", "sighting--f0eafcb0-198d-4919-8c9d-8e0e46248508", "sighting--8e69086a-2f90-4255-88fe-2da429792eea", "sighting--367d309d-5573-4d51-9205-34293ea14cc6", "sighting--04d731c6-3e03-4d43-bb8d-40542de19c15", "sighting--06ebcbd2-bf39-4fb7-9985-25ef3745d347", "sighting--f8df6f1c-512c-43c6-9dfe-b9a2520e5b4f", "sighting--cc0450d8-d906-49f3-991f-a2f21c202748", "sighting--8c3e3dbf-dda2-4cf2-9cff-11a03b995d40", "sighting--d35086b2-bab1-4d6c-9c48-cefe3220edf9", "sighting--c5221de8-dceb-4331-a455-491297c5cf16", "sighting--3b1abc08-c881-4b23-958f-34fb83997684", "sighting--e1565fe2-a1b0-4fc5-93e0-b4224a7c358f", "sighting--809276ab-0110-491c-9554-8ee47eff7996", "sighting--6fade0dd-35ee-4d9b-b040-b04e122b8455", "sighting--18cad176-a781-4995-bc3d-e75fa01207c2", "sighting--ce31f660-a3be-4737-b1a4-ed217cf2de15", "sighting--01120dd0-215a-45c9-8f98-626e68d7621b", "sighting--bfe3c67d-9cb0-4553-ae53-d467ee23fd2d", "sighting--84208e0c-4478-4d5a-aeb9-4ea66339146a", "sighting--4bdd27fc-e012-4d97-b6f9-7606d4d76008", "sighting--528a08b2-065b-42d2-b899-9f0000501ed4", "sighting--17b7cefa-1d69-4140-982c-597585e61daf", "sighting--17346c8d-e2a8-40be-8dff-235192f8e448", "sighting--b4c92fd8-3547-4bdd-8d2a-0f6d3e3cff64", "sighting--d3e6d958-43e7-41de-a71d-a91bb4453ff6", "sighting--1f39188b-e445-43e5-8a70-b2022083284b", "sighting--0ac7fdba-187f-4fa2-9d5b-153ec60852d1", "sighting--0425342d-1208-4cf7-94cf-af6c0b5eb94c", "sighting--dbb795a0-2695-4e96-872e-7126c165b4f4", "sighting--89362e1f-afad-47e9-a0e5-6b51398d7eea", "sighting--5ec15d08-3b9c-4e2c-8aa0-8ba275b74d4b", "sighting--cf65f928-2db9-4254-8b05-dedafdc916ae", "sighting--2026a333-fab6-44e4-96c8-143cc50cb710", "sighting--458806aa-ffbd-4a85-b0c9-48fe1083e5ce", "sighting--c87bfebe-0fcc-4d0d-bcc7-cb3d5ee8de3a", "sighting--25d95029-0226-4bbf-9be1-2d7e3cae54f9", "sighting--ed7c3281-cbcd-4274-bddf-1a9fe3783028", "sighting--b8558250-80a6-4c4e-880c-c8c31ce1b096", "sighting--76449981-9d5b-41c9-aa7e-77728f3e365e", "sighting--0178bf1c-46d1-4026-a560-de4977cc93ad", "sighting--b5765f86-d92f-44d3-a90c-686d00bf6dec", "sighting--16672377-c216-459f-8f3e-ba66bda4df94", "sighting--d8af55a7-825a-4b3a-87ca-e03b4ab35b03", "sighting--f0a32524-1b69-4935-9480-3ee92a71557e", "sighting--e50aa67c-49a3-4460-a1b5-33b12cd09e59", "sighting--7dc82c99-9571-466f-925d-373a4dd22219", "sighting--655f4f53-f16f-43de-b250-35c9a38b16bf", "sighting--173b31b1-c84d-4444-ac77-b71563d8aec0", "sighting--a9881849-4517-4b5e-9609-85ca298cb150", "sighting--94b57387-624a-4ee2-b5f3-7a1e6d956cf5", "sighting--41f0ab6c-560c-4dc6-908c-c032523ac0a8", "sighting--84f303ac-33e1-40b2-a01d-b3cda4816a28", "sighting--62b07d9d-5774-40d5-b432-23b049f7ff10", "sighting--80818f78-47bb-4ba1-beba-2a2f56000646", "sighting--1594d86c-a42e-4bbb-9110-19ef20ae707c", "sighting--b2a8d1be-3efa-47b9-876c-d3560d11406b", "sighting--51319dfb-0ac3-49ba-8a3f-59ac373431e6", "sighting--0bdab957-c92e-4a48-b40f-d57cd08721df", "sighting--00493d7c-241b-4a1f-9385-5a887fa2d434", "sighting--4ac7b93c-40aa-4e8d-9437-708239b484a1", "sighting--62c54062-459a-49eb-b2dd-f8e38df7072c", "sighting--a424573c-4a09-4279-a422-5ed0416fe5ae", "sighting--2a29b295-ab40-484d-82ac-dd8a2261bdc0", "sighting--dc868c78-bd31-455d-a246-f4d0840e6076", "sighting--c002c991-960e-4c5a-85dd-b9555f4d0beb", "sighting--6fce5994-dad9-4a53-9af5-8a73876194b4", "sighting--86edc14e-3f3c-4ca2-a300-8b7bad86d908", "sighting--c182d562-5833-4a5b-b099-3a4c3ad9afad", "sighting--9f8b250b-2e5c-4d99-80df-e2129c6be791", "sighting--6c3521b9-014b-42ea-80dc-cc81a0aa43b1", "sighting--2f5c8df8-bbe5-490f-ab05-450c18d48310", "sighting--6eda7bee-ec50-46da-b5f9-8c58457cf66c", "sighting--742a338f-9173-455d-a164-e41bae149776", "sighting--489b6102-d48f-4de4-9f9f-ba6a722de939", "sighting--7d3f36eb-1b43-47d3-952a-d1cf25b4de5e", "sighting--7a1da0b7-d913-4def-b625-365e5e2782f9", "sighting--4ee032cf-6702-4d65-949e-f2bd5f408ce0", "sighting--8a7dba74-321b-4fa6-bd09-1856de50a6fd", "sighting--6fcd20ae-3fb1-4ca9-89f5-86d8c37a6302", "sighting--8e5da690-177f-4792-b3a1-29491832c6b3", "sighting--1b18a707-57c8-4597-a0bd-50a90bb85b35", "sighting--c6c37158-fc75-4792-9419-ba8b2c0f3b90", "sighting--9ad8eeeb-1f28-40c8-921c-90a754c6de4e", "sighting--db23cab9-d471-429e-b981-c152278f3029", "sighting--b39c5471-2e66-46a0-8d1a-1a2f51c2b379", "sighting--5edf9077-1f10-4390-8233-fd825824205f", "sighting--a7c5906a-b823-41be-a354-8b28425c1543", "sighting--14a546c2-5a25-4ef2-8fd3-a7c08c7c706e", "sighting--2531499c-4d87-4040-b969-6e2970eadbaa", "sighting--f3e4f3da-be9f-421a-8941-0437e6c62d61", "sighting--3118505a-a600-4fa5-b8f5-fae9b34ef0db", "sighting--87b63485-2502-4623-abcd-d192839ce905", "sighting--97f5fc37-1bd3-4a9f-b697-193263741855", "sighting--640c407d-d23e-4d0a-a461-66d6c3d65039", "sighting--7b60780d-e5f5-4a85-90b2-b44ad74c5037", "sighting--4aa0f835-d8e5-4c30-bf54-74041eabafd6", "sighting--e94386f4-233c-4be8-bf45-a470e43bf64f", "sighting--7cd09125-e58c-4a48-acf5-a9f15069af83", "sighting--4b5164be-4e67-4533-9e18-03bf0abd1669", "sighting--d5cc2b1f-e6ff-4cb1-825b-7914dd4bf62c", "sighting--bfca312d-386f-463d-a9f9-3f8e26d5beda", "sighting--9d29adc1-ae86-457e-bfbd-992376e66680", "sighting--c1d45c23-c29d-45ff-b5af-9883fdb38633", "sighting--88685b47-a416-4c44-becc-72505ddc827f", "sighting--15383601-4524-4703-a0d5-2aa91b312b4d", "sighting--99f45224-e8d2-4581-b767-fd985116ea06", "sighting--dcba2e0b-796e-4fb2-9f3c-e4cc1650f386", "sighting--479ee11f-056a-4aee-895a-d8f3e68a3c50", "sighting--3957c6ed-e4ca-4f8e-90a6-ce3aa55dd84c", "sighting--b79be6cb-392c-4c59-b766-a09c09486b81", "sighting--6b9bd796-e84f-465f-9a6e-37028a7c2f26", "sighting--57561063-4def-474c-8270-64c3b7ccdbc0", "sighting--008db726-913f-4a63-809b-cb531d468632", "sighting--07497eab-1587-4308-86f7-698349e326f3", "sighting--d2f5b360-206e-4c8e-9ea9-2a0ef42b952c", "sighting--ff8a151c-372b-4073-a164-7bc40c27e486", "sighting--97d0b4de-8854-4492-8764-a97e91128435", "sighting--3132d366-f1af-477e-bb37-58628a15c56a", "sighting--6675014c-745b-426c-876f-f335db9e4058", "sighting--4f81529b-8ea4-4d41-b7df-42f2f728a4ef", "sighting--5b3a4125-ff4f-4006-8b98-d7d0fd292f0c", "sighting--63857bee-09fc-450f-8029-ee2a16044e16", "sighting--07b57a58-419d-4638-9d69-a9deb5083793", "sighting--a4ecb242-aedd-4c4c-90a9-a38c970b0343", "sighting--610c6ffb-0157-46cf-9b7a-5893ec728b85", "sighting--9e2da3c1-c3c3-4d14-9fab-6fd99184e812", "sighting--f80fc85d-9778-4f18-ba47-773deaf3bdb3", "sighting--0cafbbfd-035e-440c-a196-4f6e5955583d", "sighting--99077382-a6f9-42ac-9bdf-de4aaa36ddc0", "sighting--fab28af5-2235-45f4-9d3f-692de699b65a", "sighting--b832edff-0faf-414f-8bbf-8f7f2e398669", "sighting--e84cd61c-1460-49d1-a340-dfaa3d81572a", "sighting--70b3e2dc-974f-4ed4-b835-53fdcf4838e8", "sighting--7a7927f1-87b8-4f17-b71c-c979d7944023", "sighting--28b5f49b-be01-4ab8-ae2d-a750f8ca1465", "sighting--aa316089-291a-4f9d-9e17-a000d737ec82", "sighting--d2b354f9-fd1d-4c9f-96f9-ad76b152ac48", "sighting--23826339-4de5-4bed-821b-715500f0f2e2", "sighting--c3fc294c-6b5d-4331-99b0-3196c7090666", "sighting--2ed7e7fd-17b0-40a2-965d-06ad7fe0e720", "sighting--97b90158-7472-4558-ad52-9d066fd1cdee", "sighting--d18feca6-cdd7-4858-a235-123f9863c0ae", "sighting--b94b5b11-a78d-4b57-9199-543d0b9d8b0f", "sighting--93871559-7062-45b6-ab05-997cb4d834db", "sighting--e35d95b7-45c9-4b90-8779-dfa2d419f2a6", "sighting--a45aa142-7dee-4736-942c-e5649664e0a5", "sighting--ab68c5da-4ba2-4023-bd4d-bb81a25836dd", "sighting--20f82bd9-da2c-4ec2-a9e3-fa578af4964d", "sighting--d8f6aa82-f6e8-4f9e-a428-66c43e5997d2", "sighting--5ff7b28b-f3f4-4bee-ba05-b88ce06462df", "sighting--ebb30e59-9fd7-4fea-b158-d6817084790d", "sighting--d66f3eb1-cfd7-4a47-aab4-7557448827a5", "sighting--3d4cb721-b219-44aa-ad9a-7e5a64f769a8", "sighting--330e101e-4ad9-4d00-bcaf-a21c5a73c0a7", "sighting--c72bc150-0b3c-4686-8bbb-46b9b670e9fd", "sighting--a7beb8f6-9456-4449-b02b-7d08c56fc52d", "sighting--663a5215-3615-45a3-ad0d-802c4f9b85e6", "sighting--9729bc12-4034-4622-820c-87e65e3f5231", "sighting--a78d7b22-32c2-4f7f-bd01-d5f21bc32127", "sighting--b84849b3-e0eb-44e0-a7b7-1892527b2e99", "sighting--d795ee9f-4cd8-48ac-9c43-7472c07219f6", "sighting--9e494bd0-d60f-45bd-b111-739ea1ccc37b", "sighting--5931dea2-1a6b-4d55-ba1b-3d4da924e238", "sighting--96ffbeb4-0553-41be-9fe5-4b7dfe1c5c73", "sighting--8e74ceea-a345-416c-bd59-4874e0659bca", "sighting--bff36509-0e5c-4ccf-908c-a4017629fb7f", "sighting--dcc7cf20-8034-4d6d-ae56-b1b35314997e", "sighting--e629abdf-a738-4988-91ce-7a8a3efd3f6c", "sighting--d0aaa597-64ee-4318-98ad-c6f64bc4492d", "sighting--d80a1d0f-3c88-41ca-af3b-881b19fc73c5", "sighting--0af0d2b4-7885-4529-a480-109aed2fb4b4", "sighting--0e7d9558-21b9-4451-aa70-c360ca4de4b6", "sighting--7f55ffe2-cf2a-48bc-86b8-819f5c689522", "sighting--29de454a-d710-41ea-b977-7f882e8d857c", "sighting--e64b181e-a9f9-4517-ae59-f865c4702152", "sighting--c67dc1c2-051b-4aa2-9a2c-446d172a981e", "sighting--b1db77db-1242-4776-af20-558e6670236d", "sighting--b65b541d-c2c8-4da2-ad80-89a7465a7166", "sighting--39936d21-5927-4508-8422-59f9b67598f7", "sighting--354d2e2f-1f23-4eff-acea-3b3540da3667", "sighting--322c3154-aa4e-4dcc-833a-3979470be351", "sighting--52ec7311-bc81-4995-802f-513032ad7a01", "sighting--5607a59b-0f31-4f78-a9ed-2b4b3111deab", "sighting--9b27b0c5-4d27-443d-ae90-7e44c087f106", "sighting--633e1dc7-224b-4c88-bd82-9f5fcd99951e", "sighting--ae3d523f-3c7e-4755-ae55-52f60b42ab2d", "sighting--6bcad847-c09a-4a55-89a2-eaf08eb737f0", "sighting--d18936dd-7204-4e69-864f-58b4750c6d5a", "sighting--f9ef60ed-123e-40c2-95a2-63ac09c43805", "sighting--24b71ae3-1714-4ca8-af78-daa7c829e219", "sighting--f4de080e-540a-4026-a780-175c82698d60", "sighting--c56f2b91-d786-467f-997b-525e6830536e", "sighting--57ac7cd2-1b2a-4a01-9046-7f11108af798", "sighting--e58a79c7-b6a0-4cd3-9aa6-8d3b014975a5", "sighting--0240fbbc-d522-41b5-9d68-1380d9cdcfe2", "sighting--bccd91e3-cecb-4baa-92af-87045fa60a84", "sighting--8d528179-fdd1-47d3-96b7-5c6c419a419f", "sighting--37ca3222-cac0-45a7-b7fe-07537f3f6067", "sighting--321271a1-14df-4189-a14e-530be3c0e28b", "sighting--1fddb8b6-b125-4d01-9c94-c8fb7f0a9c95", "sighting--f8f1907e-6a06-4f1c-8f63-593efb23d67f", "sighting--2651774f-dd14-4b44-959f-9a6a4543b435", "sighting--5c14a6da-b4bd-4b2e-a069-953440297d3f", "sighting--8c2b2e20-e8c9-480e-8508-e5c22297fb5f", "sighting--0d50282f-9e28-4a31-a8d4-a816384a0989", "sighting--0ef9e70f-54b8-43c3-9604-356713ebd893", "sighting--745c13ac-40cc-4494-802c-f0aec0bcded6", "sighting--e1e1e650-b720-4fe8-a7a9-a5c24bbab66c", "sighting--56557ab0-bb6f-4b58-b887-0df3802a9c06", "sighting--a88136cf-5cfd-4f31-8fc3-219f299ae6cb", "sighting--bd698982-8366-4bb8-80eb-48d55cae5a9a", "sighting--bafe62a5-7145-4f72-bc87-e3e81ccb4ae0", "sighting--a8654570-d053-4ff3-bd56-00031d0a26d9", "sighting--90efc5ac-b466-4e4b-9089-db2886a551af", "sighting--227bcdde-714d-429d-a70a-20e6a04ccbc8", "sighting--7f3129ff-ca42-4069-b28a-1b5a747c6fc7", "sighting--5941def8-6c75-4d11-b056-b7e13897d127", "sighting--ee0f3f90-e0d6-467c-bdf8-582c1616d015", "sighting--b52af466-d6d0-4687-bed4-dfa72c922e19", "sighting--8a650a71-bad5-4c3e-8501-acee2658c77f", "sighting--81d3d401-1897-4d3a-ab39-e20d31a954f6", "sighting--581d2fb8-a29e-437e-91a9-3fa9e5098652", "sighting--1ea8b83f-e691-46d7-8748-3aba01f3ca23", "sighting--ddab64dc-1688-4d14-b738-3b7bd559a39c", "sighting--bdea8453-ca90-4947-a063-d21b0a55f6f8", "sighting--6548c250-7345-4841-8550-3a92b1d15a61", "sighting--e021eaac-2fd8-467e-a043-a82ae53950e6", "sighting--071e7552-837d-4407-929a-a2e5adf6068f", "sighting--5ca9aedd-e02a-419f-b53a-9b5a1ca4cbed", "sighting--8b6eeef3-0392-49d2-b5ff-09b122a78819", "sighting--a974c56f-3709-4b62-a0b3-267919bfc62e", "sighting--a5291e3e-7824-4b4e-b0b9-a710a565cd2e", "sighting--a548698b-7415-4afb-92ad-c57fd9f738a5", "sighting--af19cab9-2798-43bc-bb1a-43886f667170", "sighting--069333d6-a064-41c7-b585-ff4978568dec", "sighting--02c2939b-c19d-475c-b9a9-4e0a7cd6df58", "sighting--135c22fd-2bea-400c-89f9-11dbe52206bf", "sighting--1c352057-7a6e-4953-90a9-5ed69b94baf1", "sighting--6a066523-ff67-4530-8934-34e95ade7578", "sighting--ecbc42bf-90ea-4770-ae1b-43f0acf857d8", "sighting--e4c19b17-aec0-47fc-95a7-27ed0d8f0574", "sighting--15338feb-cbea-4bf6-9c54-a2c6d272914a", "sighting--becb3516-3f62-464a-a874-db93f870ddc6", "sighting--6baedb9e-1b69-480c-995f-b39fda4707dd", "sighting--05c154bd-d39b-48d4-b6f3-69df9283ddf0", "sighting--e14f417c-0cdf-426f-bda8-91da15956e95", "sighting--be807744-d8b1-4bbf-93e0-ea10f967e18c", "sighting--4541e8ab-1d67-49b8-8301-25b53ee1f61f", "sighting--3e64d628-30c6-4482-96e2-1da2e30f3dd6", "sighting--986cc96a-07fa-4692-a80f-a7df46dd1340", "sighting--b4b1cf26-44cf-41f7-b6c1-c3521d1230f9", "sighting--0b90dedb-a75d-402e-a403-43b81111a8dd", "sighting--1b5e47d4-ea2e-4eca-8e82-171c20a94a93", "sighting--dee345f7-06a1-4898-9096-7306fc1edb5e", "sighting--0b81cf41-1fd2-450a-956b-88ba3009579f", "sighting--cc5c2083-0f3f-48cd-9f6b-3573ed53d329", "sighting--2b4b9e7f-0603-44c9-96e2-d3a4541f48a8", "sighting--b3b755dc-93f5-4145-81f5-fcec0b4f1e76", "sighting--ee904fd1-2a21-431f-a56a-0da9315034af", "sighting--16b23857-f91d-40f6-903c-7f4b7145bbcf", "sighting--f1916a17-d366-4812-9863-990ca61e9450", "sighting--77469d4b-1560-4ce8-9854-95cfff825bd0", "sighting--1090b7e9-98cd-4009-b001-c2d5f854c2d8", "sighting--be229ed9-2ba9-46ab-9197-91102e307864", "sighting--fa9b8eaf-2cde-41db-91af-22bbcd71c3e8", "sighting--2d5b21c6-3e94-4fe4-b543-9ac8ded28826", "sighting--176f0088-2050-414d-8b31-58a6d8dca641", "sighting--b8f02c6d-893c-4628-a89d-dbd5515ca420", "sighting--bd99d119-da1d-4881-bd04-867724068d89", "sighting--5a26cf8b-ced6-44e9-a5f0-f1df54200af3", "sighting--43a683fc-77f2-4e0e-8bd3-8a716b549444", "sighting--100f78a7-9f25-406f-93c8-763589307e8e", "sighting--09862503-22f8-42b2-8175-ab5b57933351", "sighting--f777c2c6-82fa-45c7-8a95-c01de93918c3", "sighting--ec4b48ec-b6ae-47b0-ab0d-7801c46f3a9d", "sighting--5115ce76-eb9c-4f08-b405-fb9815eefe3f", "sighting--fc088327-1efc-4883-9970-c1063e706b8a", "sighting--62122dac-28e3-419b-b028-fc069dfc64c0", "sighting--3b77f2f3-a993-42ab-8983-fdf4aabd8944", "sighting--3b53dd10-79f3-4fb2-b493-17e36c3ef183", "sighting--d4b8208d-0160-4fd2-b7ee-63b30405448a", "sighting--babe4f78-6059-4119-8ab7-84b79b7a952b", "sighting--f9ea77e4-f54d-481d-97ec-27717a0a8215", "sighting--dc2c9970-2ad5-481f-b7ab-b3d4f036e96d", "sighting--7d6deef5-1dfe-41ca-94d7-94df084ede31", "sighting--f799252a-0bb0-4bf8-9664-6eae33ef3232", "sighting--4c036897-5cbb-4bef-bc2e-540fc5e68228", "sighting--96b4805d-834d-437c-81d2-a2d77021f2f0", "sighting--7edb281d-b18e-48c4-a141-970786e479b2", "sighting--c19af93b-b8b9-43cf-8bb8-672f620f2367", "sighting--ebcb85f6-171c-4804-abfe-a1c6805852e0", "sighting--4e3eaa13-cc9f-4784-9aab-9656d81017b0", "sighting--c675aac1-9deb-4bf3-ad78-738e98cc3d5d", "sighting--a32dfc7a-544a-45a7-aac6-90f2364a8e38", "sighting--321330e3-84b6-45b8-96a5-ce6f41f07340", "sighting--11ad6eca-b63c-43cb-b127-6121ff1fd5ae", "sighting--16fd3163-878f-4501-a11c-d5292157d6bb", "sighting--f6b21ff4-8dc5-4b5c-a067-80d1035de634", "sighting--1eca64e7-9054-4ff2-aefe-907fea658e15", "sighting--7e2c6009-2a5e-4b1e-b95e-5a2ecb7f7ff3", "sighting--e368d368-9bd6-487a-9001-cab2ab057bc8", "sighting--882bba14-9616-4feb-8875-3ae30432bd0e", "sighting--46d1b920-862d-44ea-9d15-cfa1d44c9735", "sighting--d0ae5dc3-0823-47bd-9276-ce1899ab987a", "sighting--10fc876b-1967-443e-aa37-7110856b0d09", "sighting--9fca07d3-3a34-4a08-9803-28500bce041c", "sighting--3ea15c8a-1943-4e68-a310-b8d12175b378", "sighting--f05aed7d-d663-457a-aaee-271bc0791f96", "sighting--9fedc3d0-760f-4ffa-b0b4-eab2856d1bf1", "sighting--e0ba4272-de69-4fdd-9f1f-55e713e0d775", "sighting--d7ca8770-4416-4d0d-9ce9-b25c4c572b07", "sighting--4c236eae-9806-472d-8867-6f399988e9c0", "sighting--8ee13b5f-1823-4c76-8051-ecfbbaf693da", "sighting--bd566805-cbb7-4ecf-a948-051e16cfbc39", "sighting--f2da5d51-14aa-4e67-90b7-0cee97f8f0c2", "sighting--6fd1ff82-b288-4953-b25d-59d6570c68db", "sighting--095be0de-1fee-418c-911c-79a925df3e4d", "sighting--4d9882aa-c500-49d6-8227-d85e055e5af7", "sighting--f1c83566-4a8a-456b-81f6-0a544bda398e", "sighting--99ee1c51-aba9-4b13-a6b5-297238f297b6", "sighting--c625f7b3-50b9-471d-8054-fa2bb6d3be1f", "sighting--c40b73be-53af-406f-b2ab-8d76666a4911", "sighting--9f812833-95e0-4d84-b3a2-de381d3f17a9", "sighting--956e395b-7816-4bdb-b84f-321be1c323bb", "sighting--4324e0a8-9fd5-4aed-acc6-66d06a099437", "sighting--78d0f5d1-4ac3-44fa-a2d1-31292982b57d", "sighting--916d31e0-c36c-4dc6-a23d-a77cee743126", "sighting--a5cb5e82-3cc5-4df1-a919-ca219614421e", "sighting--657ab2ba-7d2b-4f28-b56d-8742be48877e", "sighting--846acc71-1076-4825-991b-0f340109555a", "sighting--86d44ce8-ec73-4d3f-8097-7899bdea380b", "sighting--97631f3f-c8f3-4b4f-a6dc-dfa4fdd47108", "sighting--b4baab91-c77b-48bf-b18c-6c53cd8fceff", "sighting--e5da1160-752e-4add-83ad-de86ada30bd1", "sighting--6ef23602-e59c-41e2-b85d-b3a102144284", "sighting--44f25c90-91d6-4d25-aa57-4ee112cb7369", "sighting--662b14a4-956c-48b2-b7cd-13dc0393c6ef", "sighting--a644a00d-b760-4217-9d23-84c47ebc1d9a", "sighting--6c616b22-3bb0-4b91-8394-5b7cd5966413", "sighting--5a85241b-380c-4218-af82-53c4ac0ae232", "sighting--80082df2-0176-44bd-b541-73d01b1616b8", "sighting--6919abe9-669e-4fc8-8c4f-27000d598bb7", "sighting--074814aa-3c78-496a-bafa-0aa6cd2cf110", "sighting--48616049-b08b-4e80-83d0-ffbfeba87169", "sighting--d293fe9b-98d1-4d43-b42b-682205b50f01", "sighting--ed38db25-317d-4f22-8cd2-a176f0826f04", "sighting--c0a2e29b-262f-4953-a29f-6de4a93cfd5b", "sighting--98d2a8bf-6561-4b33-82b7-e93fe6df9617", "sighting--480da4e6-ed25-484f-8703-54fb834cbc20", "sighting--44e0a89d-22df-4408-acba-d3535d37fcd7", "sighting--7ecc87d5-f4d2-41a6-b1b4-4a8801d2cf96", "sighting--8cfe476a-6f15-48ae-af18-f8b1aee37227", "sighting--99a08ac2-7c5b-412f-abfa-c94986e39ffd", "sighting--2941cd81-febf-406d-8185-aec4701d75df", "sighting--0a8f0444-c8b4-43a4-821d-2531c04d4d78", "sighting--7df254b9-e9a6-4a0e-a6b2-e86f261080f3", "sighting--ad206472-b543-4389-8992-878aba1fbbed", "sighting--7751edd1-4a30-45de-9f6f-af932413dce2", "sighting--71813dd1-697e-471e-b2ac-e1926825b786", "sighting--ed12f827-4b15-45ac-9443-097a0810b656", "sighting--c93a2998-8a1d-4023-ba41-9e692b0eb6fc", "sighting--61b6e669-d07d-487b-bde5-60e80cc15eb8", "sighting--d1e8a43a-dfc3-419c-96dd-4b9cab1ea840", "sighting--2c6eb40e-af71-4c6e-8eb3-34768a4346b2", "sighting--ed183b78-b952-4f48-a993-27444794bf30", "sighting--7ef1c41c-be53-44bd-b6bd-dcc28d61fda4", "sighting--013867c1-4fc7-4095-921a-8659e674e798", "sighting--4efa5746-cc35-4e1c-828d-949c0ec76df0", "sighting--e41867d0-38e7-4a69-a1a3-87d8008260ff", "sighting--715fbb36-9d74-46ed-92e5-34cd30870288", "sighting--da19f775-c478-4aaa-bbc8-805723bdd500", "sighting--814ededf-afcf-47d9-acec-4fc64cc696d3", "sighting--374fdc76-376f-4f92-9587-18057fe1bb10", "sighting--75fe8919-32f2-4489-af82-008df3d8a4cd", "sighting--fd42ec03-dc50-4703-91f2-684336c0bd91", "sighting--150f02ef-c222-46c1-88de-1e94b695f683", "sighting--a4808ff6-3db2-40e2-9ec5-c352c9a5e0f6", "sighting--bc8684fc-ad0b-42c1-a448-156ba044a90d", "sighting--dd349388-d981-487a-ba2d-9fecec573d5a", "sighting--72dc3ed2-0e3f-47c1-b0ab-ac7a1264589e", "sighting--455cb8da-145d-4e95-9a6e-a189ae427d76", "sighting--6e4997c3-7495-44cd-b8d8-263415a5e926", "sighting--989d67e2-f6d2-4e61-a26e-d1d3eea0173d", "sighting--64132d5d-a89c-4db2-8eab-89a0a79509b7", "sighting--e1e7201f-db07-4a2b-b85c-ce18ae16b4d8", "sighting--97281d3e-976b-4395-8377-02dc0a164978", "sighting--5747fd23-69ae-4832-902d-b878b73649a5", "sighting--be3d1118-18c1-472f-bd15-2ba86a34b104", "sighting--0e342764-8811-413a-9e11-0c4d2a49303b", "sighting--e0951227-8038-4eec-99b0-db024b52c951", "sighting--dc050f7e-027c-4448-b8d9-77c2798c9e46", "sighting--4be02e3a-bed3-490e-95c5-6111d94a759d", "sighting--819d372d-6195-489d-aaf6-24c7180e93ba", "sighting--23ce2f3d-23f3-4f35-ba7e-26ffb2ca78e8", "sighting--cb8f7e4d-a635-43f3-bea9-f449b4f050e9", "sighting--b7aad461-4415-47c8-9218-93d5d9d12325", "sighting--d87a7cd2-8991-44dc-8896-74df7b68dcf7", "sighting--4429c337-9c6c-4b4d-9a04-9a7b33147a7f", "sighting--6713cf7e-b323-4531-b5fb-5ab5cf7fb996", "sighting--3afc334c-b894-49ab-8e37-00d5b1142ef5", "sighting--4de1aa22-f8fc-4d2e-acfb-695487d57b41", "sighting--ec563a31-d1cc-4a11-9151-5f38c8902cb2", "sighting--d29cea57-2645-4c43-8002-c37529b11726", "sighting--7db5a539-0dea-42fe-8418-5db63ba0bfa1", "sighting--ae1b2429-cd39-42a5-89cf-9e2933c1f8cb", "sighting--263d91fb-9d85-4d5e-86fb-1086e4104ba1", "sighting--46d55b75-ead3-4c8e-a1c5-1d3ece577b11", "sighting--3c3ca972-66bf-4361-b4bd-c6b21f8bb465", "sighting--7469ac2d-22e0-4990-b7b7-b0340be4b913", "sighting--531f9cc6-d560-4a71-a051-d81b94f61d51", "sighting--837b006d-0e2e-4d18-9104-5000e331cd13", "sighting--e3511190-4369-4ada-81f6-45d0324b5aa6", "sighting--8e1f1b0b-8939-49d2-a5bb-681edbc4e754", "sighting--a7786162-d475-4351-93b7-06b52b990798", "sighting--b8493ecc-f2a9-42af-a39c-6692b48598d3", "sighting--d4d74363-376a-4b76-a35a-d698d3dcdd9e", "sighting--3d7c2cda-a9c3-4c58-9b48-18312fd24304", "sighting--8357f1fd-98e9-48a2-988f-1d3979aeae9c", "sighting--cced4493-0ccc-4a49-bf83-94becada288a", "sighting--7b2a7710-1b27-4141-90c1-9880e47a52da", "sighting--be80e31c-ff44-413f-a29a-9d8758eb523b", "sighting--c76a9ee6-e8f5-4b80-b807-7d27c8d0579a", "sighting--68efbb47-7cf2-4621-ad63-5098346f4a33", "sighting--598a1abe-e5e7-45ef-a4da-00a69bd5f33e", "sighting--2d916b0c-3416-43bf-9565-940f8c9380c8", "sighting--c66de531-0309-4736-b53f-d6e394a4c0ec", "sighting--591748e7-3261-48ba-9f57-188c0f550be1", "sighting--9ee34e2d-36d0-45c3-9043-0748c956b46b", "sighting--af07eb75-9e00-4071-aa33-92f145171d56", "sighting--037fadd1-317b-4657-baba-595fbd6a259f", "sighting--ec064ab5-693b-440b-92fc-df95b6ee3356", "sighting--c4f464f2-d0ce-4867-92ed-689e4b0f48a9", "sighting--21a1173c-9315-45f5-8775-18a0ade85dd7", "sighting--0bc7bd3f-0554-49c6-969c-ff9bf229a7b1", "sighting--4d680690-9bf3-4b88-8f51-1fc8c2535696", "sighting--a60e0ada-7028-4f1a-b1c4-03c8ae003d51", "sighting--b2191bee-68d1-4dee-aaf9-7c9e9b782f4c", "sighting--5669d8fb-a402-4da1-b357-777013040b9a", "sighting--2ce24ca1-279a-4ff1-aa7c-a703a2184b95", "sighting--0e43121f-e76a-435f-8eed-4d63d746ef5c", "sighting--bc575211-0c54-458b-b149-539b4d670c83", "sighting--a96d007d-6c99-48c7-9084-eeff2ba40567", "sighting--034cf5ed-ee81-4b92-a21f-58582b0c4efa", "sighting--38c9de49-17c0-4ced-98c4-97ba6670af72", "sighting--36e2f313-b798-46be-90aa-f7d4f9d39a77", "sighting--578a477f-0059-4557-a8b9-7a8dfaae85f4", "sighting--2afaf3d9-9097-4701-994c-16c55e4f2293", "sighting--0380c5e3-8b5b-41c6-ae12-3731c7bc7f63", "sighting--a202961a-50b0-46f3-b48e-43d77e33aaf4", "sighting--e2ca91ad-cb42-468a-8057-39e52f1a7cbd", "sighting--4e86951b-389f-4582-855a-321d248dd75a", "sighting--a6d22e66-3214-4024-aaf7-9a4832abcaaa", "sighting--1f41917f-1e80-47f9-9f47-498867e656f1", "sighting--b24d8064-30d9-4095-92f6-9faa90c59c9c", "sighting--bedb5225-e23e-4632-859b-aca129c8b9ff", "sighting--5c03e8b3-420b-4a64-8e4c-5dffa52ac685", "sighting--cd4cb01f-59a5-4ac3-87c7-3529465f0a9b", "sighting--45d1d051-7def-4b9a-8e80-aef4a59e55fe", "sighting--fb83c633-9618-4759-9b44-d3d38ba46452", "sighting--fc571dc1-4931-4e06-8db0-abcaaf34945f", "sighting--d1b8e178-8d9f-4db4-82e8-d045238b7323", "sighting--f26081da-a42d-4b9c-88a4-b41fa5b9ae9f", "sighting--2ebe63c3-d819-4d8d-b462-c35d1931a36f", "sighting--db58a113-d756-47ce-a468-69ea925690c0", "sighting--02383f44-b76b-457c-8f2d-cdaac03f085f", "sighting--ce9fe83a-d08f-499a-b5ca-8442b81afafd", "sighting--aeafb84c-81b6-4d8e-8258-439267d85d2c", "sighting--01d6e06a-ca1b-420d-bcff-4841339279ef", "sighting--89003f39-6eed-47f5-a25c-69f974c03c64", "sighting--3a95b2c8-f9ee-46f9-b469-f04207a328f0", "sighting--8cb3b1d1-34eb-4070-8f6f-32fc287bb7aa", "sighting--f987cb15-f773-4e25-97bd-a86c823b4ba7", "sighting--112d6340-ef57-453f-85ee-512af79dd07f", "sighting--5140922d-e815-43b9-8ef7-d2ba657d8d96", "sighting--85fae5e0-7a8f-49a4-a55e-85bbd8cbee88", "sighting--7c278853-2272-4205-947c-3101cc7c0e05", "sighting--448b7af0-46eb-4800-863d-954414d55e77", "sighting--8351d044-3c41-4a0e-a912-73bc35458b04", "sighting--13a29715-2dc7-4081-bfef-bb845ad3beea", "sighting--50d9826a-2ec8-4ac5-850b-ca512f6bba41", "sighting--64f7a8b0-3eaf-4461-9419-b50dec89e6f8", "sighting--ba22adfa-3b02-40da-8238-a48736d8a953", "sighting--8e75c4ae-7d0e-4f29-b8d5-e0a19c829ef3", "sighting--46146d2d-9af4-48aa-947d-56d53996c964", "sighting--bf756eb4-6fad-4a94-9040-adf6c78d0b63", "sighting--f1aa60a7-b24a-43ac-b390-94f3d6235dea", "sighting--9ee80c5d-eea0-47f1-a615-8bfce1766339", "sighting--a5704aa9-86f9-427b-8447-0c0e879b1bca", "sighting--8e428fd6-b664-4bc3-9e26-08196fa21a09", "sighting--33cf12f6-b599-4356-bcd8-a4096f520027", "sighting--86f77415-5d2d-4acf-82d2-76c6434ecd16", "sighting--09ef50e7-36a6-4005-8ac1-a0416dc40601", "sighting--c0f35601-3e35-4854-9102-8bcfdcb0854d", "sighting--dea956fd-3864-4872-b700-2ad83678b7f5", "sighting--8edf8d15-115c-4d71-93ee-07282154dde0", "sighting--66e93b3a-fc65-4e80-851a-1cf8f71dcdcd", "sighting--bc0d182c-ffce-4ea3-bca3-f1db1e1b95e8", "sighting--d534d32a-56d4-4f7a-9f51-42834c366ebe", "sighting--cb5be55f-c61b-4dca-88b2-d9c4693bc631", "sighting--118a551f-4ddc-4671-93ff-9993e45b3ff7", "sighting--6420107e-f53d-4ef6-b720-1831401fca84", "sighting--ca186605-ca49-419f-aaa7-440387fedd02", "sighting--8683f56f-5630-4569-8dbb-ba793eaba2fb", "sighting--cc973940-104b-4a6c-afc8-ba56ed4c2995", "sighting--13252ab0-5bef-4eb6-956e-4d0f98398b27", "sighting--ba7efa35-7040-43d3-93b5-15495c4a88fd", "sighting--4fddb5f8-0d4d-4df7-b870-029ee024d60a", "sighting--4dd5148d-0721-4689-8e31-d180cf4f9b72", "sighting--6069b26d-a80d-49f0-a27a-329f66ad1f52", "sighting--a2d47800-cff1-4e50-b54e-729374f475cd", "sighting--ef94961d-2a4d-4029-84bc-60ebd3ba9479", "sighting--d0f8f2c0-175c-4440-be9b-71163525ba64", "sighting--c992788e-9654-4ca1-9f0e-2ae449c1a64a", "sighting--d21f8509-6fb0-4813-8845-fe6f0940d8c6", "sighting--3246b2dc-4b0f-42dc-a5d1-be26a3268e5e", "sighting--0fd3c21f-9eb8-4633-abd7-f4f64989305a", "sighting--c9e24af6-a880-4ded-9c7d-84d68aed9117", "sighting--bfee1f54-7109-4315-9d7c-999d6f96e6b6", "sighting--a9faf17c-7cc8-4949-b680-5a5834d23c22", "sighting--f5d1e67c-ba2b-485e-ab5d-a891378b39fa", "sighting--62472b06-2a88-4f82-93e2-15a44b3fbb41", "sighting--a31f9cc9-90ff-4341-85db-9ac1e62b6d94", "sighting--795851df-6202-4ad4-9c38-c3f1aa7ae268", "sighting--45331126-a792-42d4-b90a-ee6a6d4fe448", "sighting--6598ebe2-400a-47df-b004-78ab17ff0d79", "sighting--76c8e57a-9cbd-42d0-9765-2c7c87e00c34", "sighting--f85868fb-18ff-4093-8b53-a2943734142a", "sighting--21ec9849-6236-4206-8690-57b4c8efb331", "sighting--5e5677c4-a871-4805-a70d-7025c097df53", "sighting--0f955508-7149-41df-ad60-0d426d3d4b67", "sighting--39999f25-dd02-4af2-9741-8d9df2f91883", "sighting--9796190b-c7a0-46cf-abda-122b27037249", "sighting--6f8a4366-9326-4ad8-a8e8-a50340a16a1c", "sighting--c1b89848-f418-4908-9fd7-aff187938532", "sighting--5e1cb331-b948-48a9-a553-7b055423ceb4", "sighting--5ddd7810-fa66-4166-8edf-d93c78773d3e", "sighting--0d382d8b-f19a-49e6-92b1-e45912d80e71", "sighting--fa44b8b0-6cd8-4f9e-9cdd-ff3ea1493936", "sighting--2415bb1f-96d4-4691-a013-ef403211286f", "sighting--2ca5a7cf-584a-4eaa-8d3d-11fb4313d296", "sighting--0f25a20a-f276-4cd3-b7b7-d0b63c9bda72", "sighting--dc2e2bfc-48d9-4d3e-9be7-77677f75bac1", "sighting--5d0d835b-25fe-400a-8b7d-694bdb3275f7", "sighting--22e2c938-7991-44d3-b79c-8eea26314b4b", "sighting--1aa5ce3b-f9e9-4c32-bfc1-b6990dcf5041", "sighting--28d8e6e6-71ea-49a1-8ad6-6c83d331a50b", "sighting--2e976c66-1c8c-4cd6-861f-e4a9418e86b8", "sighting--21cb8a4e-3dea-41fc-978b-b2594af05117", "sighting--d3294478-88a1-40d5-ad4e-b2538ac40da3", "sighting--b34f4fb6-bf6c-4b90-8302-f83ce407b096", "sighting--e7b69a89-a5cf-4ad2-91b9-ac61a45e791a", "sighting--eb751d9d-b198-4391-a0bf-51535a857691", "sighting--06e937a8-aac6-4e05-bcd3-a19318642be3", "sighting--8183c518-4f2c-4176-a7a8-0d5f29c6feeb", "sighting--56091212-ece5-4f21-886c-e1ff614b30e7", "sighting--811bc0f4-c8ca-4762-a1f3-d132937823fa", "sighting--35a5a74f-fae1-4420-ad78-331fdb1c059c", "sighting--28507de0-3b69-47ab-a4fd-c90357afb2d0", "sighting--6dd4eebe-0efa-4e26-98a4-c1fe9fda8d4d", "sighting--fa0a1432-e374-45f9-952b-a0d92d5b5616", "sighting--ce0af3b6-a1da-4b68-a716-b8f829c86b7c", "sighting--cc62215e-77e8-4368-9425-eebcedade69a", "sighting--e5a0e0fa-10f1-4d0e-bf42-14c311e7c6c2", "sighting--36e51a79-b9f5-475c-b17f-c1e1cb189252", "sighting--ae88e5b8-6888-4d10-b09b-7158ba488e97", "sighting--30afbd9b-d82a-4bc4-bd35-949b0574eba5", "sighting--0fe5d972-9f47-4593-9512-40a39377b102", "sighting--2828f4c9-a66d-4c50-95c6-74bc2c8525f2", "sighting--ebf02431-61dd-4e29-8744-1ac5ecdc4adb", "sighting--ae88f000-a82d-4c03-a8c5-520f9a376dc5", "sighting--ce55ce96-f6e5-4ade-9bfb-b9960b408c39", "sighting--9aa40a71-a616-427e-a800-39b176733643", "sighting--72cd48b4-20c1-4f65-9655-bd85d0d362c9", "sighting--22839bc7-7ae5-44dd-a541-f5ee41c7836c", "sighting--9e66b7cd-7b41-4ef7-9c2d-c4d3e3598976", "sighting--85c594b2-d722-4101-9d10-fda5ed57c5fc", "sighting--20978115-98cf-408f-a765-4ea896fa8c97", "sighting--a58257e9-40d3-42d8-8dcb-b20cc3f8dac0", "sighting--f8546610-e58c-4ea3-b1d7-31349fa2290b", "sighting--4a79d54f-efe2-4d73-ba94-f1a760005f3d", "sighting--cd51d6c5-7752-4fb8-b98f-5340e25bc9c3", "sighting--cc1cff95-6a03-42bd-834c-dc040e83822e", "sighting--e9fc0d66-08cc-4f94-bef0-6776f9909c0a", "sighting--210ca626-286e-4e8c-95ff-49569970a793", "sighting--d5c6f71e-a561-4cf1-82da-50b1183fa849", "sighting--881e95de-bc30-4b7a-80f0-c87c5da2ef86", "sighting--cc1e1dca-4d46-441d-adda-a276eeaad1f2", "sighting--b7d336f7-c7e1-41cd-8289-d3b4674a45b6", "sighting--553e09b7-e74e-409c-8c3b-41848902c4d1", "sighting--1c32d49b-8d8b-4662-aeef-f4da45c9e95a", "sighting--3b089dad-8e7c-4c10-9aac-b08e35e1bc23", "sighting--22c15235-a030-48fd-aefb-bcc163e650d3", "sighting--2f6d246d-b2da-4fb4-b67b-a9c0ea2edaf2", "sighting--7442c6eb-80a1-4b88-b1f6-7abeb0bec446", "sighting--5bc40d1a-f32d-4ffe-8084-719d11d29bb7", "sighting--dfbfd144-23da-4c5c-b4f9-b5dbd6ff68bc", "sighting--4641a8c6-b352-47a3-9a85-140cc927be43", "sighting--2dd5b629-6a14-4bec-8290-95fe2c89000d", "sighting--ccf6e399-4b33-49c4-8af5-82ea42583b82", "sighting--5a57d41d-ef03-4121-bec3-fad446bb865b", "sighting--067b6d76-307c-4fd1-90ce-cb9c220c6521", "sighting--e12d7aec-b4c7-4f19-9b08-114214e6664d", "sighting--96bddd83-347c-4a38-87f6-16aa2792df18", "sighting--7fa1bb9e-187d-4ca6-ab89-5d7ea99ceca6", "sighting--a805f08d-71c6-4698-bbc6-0a29f7de99ab", "sighting--928f9cce-c9b3-421d-a3fd-72008c6151c1", "sighting--a10e5a06-9de1-4db8-b4f1-f1eaae78f1b4", "sighting--6334e38d-1a1a-41da-93c7-1d0f9c02d45e", "sighting--3a8e0c92-999b-4130-b0d9-77e4987f00a8", "sighting--f241fcc8-d4e6-4e94-a26e-2ffa49e189d4", "sighting--e36b0f0b-6429-4176-a87c-6f5230ddc384", "sighting--7c40efbd-3ad9-4d7e-8837-f58e131709e3", "sighting--d4c34f99-e8f3-4c61-af6c-23df1d431f7e", "sighting--ac716ecd-71f5-4340-ba50-ba2b7f7e61cf", "sighting--cafc64be-95ce-4592-9a5a-21104409b589", "sighting--db395f12-f657-4e16-95f8-62415610dd5f", "sighting--3933ce67-ecbc-44d8-bad7-24d19312d1e8", "sighting--5c2611d9-d5b7-49b2-9c14-d78a5ca75c1b", "sighting--69c7ef77-6d1c-4209-beeb-f91633f372aa", "sighting--2e121d80-c9bc-41c9-87d4-545c7edfb93f", "sighting--98daeee1-ff08-4b2b-99cd-f7be503420f1", "sighting--b12aa38d-aaa8-42db-9605-980b8a6c11e8", "sighting--79e8b1e3-e6b2-4df0-8cc1-98df5d7b31ea", "sighting--e6394059-6ef3-4306-b518-928fe288bca5", "sighting--63d8c5a3-94c2-47b5-ac22-4cd62cf6e8aa", "sighting--92ca5c1a-0203-4d66-aa1d-0aa8870c75a0", "sighting--c6893d62-4c64-49ef-84ae-84263bac2b51", "sighting--ff06ac2e-fbb5-4bc2-b3f3-599b0f1d0a17", "sighting--29f163ba-1b44-4a05-bddd-af682d8be8e0", "sighting--d31be0e6-4622-4ae4-85e8-e59982cf90a5", "sighting--6af62a61-d1bb-4d78-97b0-83c9207ade8e", "sighting--9f55ee1b-b707-4fad-a314-f2c39424c16c", "sighting--93b423d6-562b-43fa-9154-0b3ccdeea22a", "sighting--5a173a84-ed1d-4065-a72e-2a3b79226404", "sighting--d478e363-6466-4eba-bbc4-2e82f68e0080", "sighting--b62f6d6c-37f5-4da8-82b9-cc21013da534", "sighting--4130ee85-a499-4cf5-9fbc-886c80e6b5cc", "sighting--ec21703d-1b23-4811-ba97-2f4703eef59f", "sighting--e9b91529-cdb6-43c6-87ea-6a5657b7e9af", "sighting--06862573-9bdb-4be8-a6f6-e132d3dad0c3", "sighting--d49be2b6-af76-4c5c-ae1b-c470bb1ca467", "sighting--af6e2f13-baaf-48db-8419-0fe245daab82", "sighting--36ada4af-0577-434f-9941-49ad79d482c2", "sighting--61991938-d8d0-41be-8878-7988cbf21692", "sighting--cc62367f-7abc-46e1-ab5e-d0daa1af82e0", "sighting--09492c87-d16c-4fdb-8036-26d73c67b5aa", "sighting--11af66b0-0a98-41e3-aa93-f1e58867f71f", "sighting--34171c02-9c5c-4bf9-8af2-b391f447496d", "sighting--ac9d6fd1-7cfc-4e62-adaf-ff7906fc9099", "sighting--7c7de22d-0fa1-44e3-b044-480ac38cb8ac", "sighting--42d747b2-a3f2-4d6c-af0d-7a44dc78fd5c", "sighting--e530ce5d-9aef-45ee-bfcb-d36b9571148a", "sighting--a288c6b5-154e-4ff8-bde4-e8f6ebc76ad8", "sighting--05d8040d-4d47-4205-87ef-ba2aff271a34", "sighting--04f9f6c2-4f8a-4291-8eb9-655a29fdb569", "sighting--d6b1f270-5bac-47de-8d63-39fbe6f62aef", "sighting--61bc0b49-ea47-4bdd-8151-9ea237e57864", "sighting--997106f7-a76d-47bf-b925-a28b50e26046", "sighting--5be62fd6-d05a-4de3-b7fc-5769699b06e8", "sighting--ca9e74a2-90ff-44ec-be0d-ea18fd6c7eed", "sighting--db46bdca-9705-406f-b20f-e92970a3e722", "sighting--65e4e188-e4d0-454f-b92f-a138b26c515a", "sighting--5f305574-6455-4296-89da-47593835a019", "sighting--64940a0c-4486-4e42-9421-ca0fb90f4580", "sighting--8f79f8a8-99b2-489a-bfb2-6ef67d7bd110", "sighting--3b7285ab-4054-42c5-b41d-71a89c43b20b", "sighting--226b1e3e-9768-4f2c-b74b-805d38780f67", "sighting--ac2cd212-af3f-4855-bfc2-af6e10775425", "sighting--5651894e-fcda-4928-9852-3b7966e60516", "sighting--b10e4272-c77a-4e5d-87ef-ea9ee9596b24", "sighting--f80f8b9a-3eca-498e-903f-a5930a6c964d", "sighting--238b7a2a-5b5a-4ea4-ba9e-95c32897e3e2", "sighting--6323dbbf-1de6-411c-bc46-3d7d948621b9", "sighting--4a8261db-2ea4-46c2-b414-5c676f6445ca", "sighting--92f0ff4f-7a6b-4d9e-a3b0-16170337d385", "sighting--27317d6e-6329-40c1-adbf-927d2841e662", "sighting--15060b9a-18e8-4f1e-b629-5ae9902b8f0b", "sighting--fe36f7e2-a1a3-4f2a-89af-530297eff1ab", "sighting--42be29b6-4209-4e8d-89bc-4c190afa075e", "sighting--16eaa91e-05e7-4942-8e94-58c5d2166423", "sighting--41f17209-19a8-4d29-8d5f-5667ed8d5cc8", "sighting--4e70e7ed-47ce-4feb-93d3-a8c667f6f2e1", "sighting--eaff027d-3e88-40ea-9a79-b7af3b21bdee", "sighting--6fbbca05-ed36-47b4-9fa5-56dd7a32a461", "sighting--8d84620e-9108-406b-9777-d336399af9c1", "sighting--a0d90899-37cb-48a4-98e5-c037fe78f204", "sighting--35f961b5-96db-4c76-9d67-ab0afc2172b1", "sighting--15645d42-9e6c-466d-b6f2-eb36be3277a2", "sighting--d3672eda-b8d7-4d96-bfd6-8bcef4899ae2", "sighting--651fe720-8ae2-4e86-a26c-fc7d0d269e65", "sighting--e6327a8d-b6bb-404f-9289-1a804f2ea5ef", "sighting--357465dc-403c-481f-93e6-509ed7a2e9bb", "sighting--e6a3aa41-0910-4939-95fd-cc8ea0cb681f", "sighting--7b62d91d-0eef-450e-916c-fda86b0faa1c", "sighting--cf709e36-38cd-4a15-8d70-e6beb65e7e35", "sighting--77cad5fd-9481-4ca2-a880-0a3b261d8825", "sighting--cae088e9-1a40-496f-811e-7280fc5b58c6", "sighting--ed0fcb8c-968e-445b-b8c9-caf048ecddfc", "sighting--481f98a6-ee07-4c48-be60-0a0ce8c6079e", "sighting--12d43347-cbef-4c6a-bb60-558cfb576892", "sighting--63703687-0e40-40e3-9d89-c0559cdb1cdd", "sighting--c2a2e2d2-23dd-4cdd-a8b1-3241ddbf2c84", "sighting--5b01af59-6132-4765-9ca3-ffd879efc910", "sighting--fba2b80b-ef27-4e9a-938a-bf4e22eb038c", "sighting--e3e5cd5c-9d82-4dc6-8237-6adca1db03f8", "sighting--4c27faed-a48e-4e25-a471-d7e2daa6e5cb", "sighting--15617ae0-7825-44a8-be6f-c083c54c0728", "sighting--f1a649e9-7cb4-4624-8bb3-5922a1c16ba3", "sighting--ab383b68-4f25-492d-a042-fc68d52a7e8f", "sighting--33b8401b-71d6-4d76-9406-79038f80522d", "sighting--2787f3bb-524a-4208-916e-59a076b892bb", "sighting--b7a5e823-a187-4b1c-8853-330e1b007bfa", "sighting--0a0b855b-373f-4c51-8340-290aaadcb92c", "sighting--a504e664-5b45-4645-b93b-d2f7fb819b65", "sighting--c882a70a-986b-4dcf-b626-50084bd04610", "sighting--7f53e44b-4743-4f14-af13-c746300eb417", "sighting--1e3cb118-f46a-4256-a7de-52afcfc6d00e", "sighting--138248ab-0c60-4b97-911f-6e74d9eed849", "sighting--a80ac845-53a4-4a9d-aa8f-e0534a150668", "sighting--77d47978-3a84-44d1-83c5-566955240d14", "sighting--afb6dc12-410f-4f7d-9703-79760dea3c73", "sighting--0c362e61-3d62-4bf6-9652-74c49a5ea65f", "sighting--0f2cb097-e2bc-44c6-808d-5f349f2b8655", "sighting--79bd9d3d-460b-4fce-9cdb-627757aafd6c", "sighting--15a9306d-f21e-4cce-948e-f360b1e7fe1b", "sighting--95e3b28b-dc42-4bdf-a438-8dd5efc1b3aa", "sighting--ddedf095-bdac-4320-9d4d-b4f5e81c934d", "sighting--e2d4e513-3913-4ae1-9c6f-895700446f5b", "sighting--eea9e15e-1df9-48cc-8c3c-2e5a7cefec23", "sighting--13b76b72-3b8c-4b8f-9ad2-c1eb6a7b598d", "sighting--e0d72d99-332b-4643-95f3-ec82de4451dd", "sighting--52a99655-3a6e-477b-8684-2447063bf944", "sighting--eb848165-9f67-4795-8917-985821be4b42", "sighting--10502523-9fb8-4cca-9cc3-0d4b6a097595", "sighting--5557f25f-7a29-4ce7-88ce-7ecf7404ee30", "sighting--003f94e3-4dc7-4713-957c-65ff7505634d", "sighting--e8bc7c74-d553-4b78-bd7d-031ed5cb0a34", "sighting--5d0005c1-72d1-437d-9138-d3cb382eb601", "sighting--9ceb8dd7-27d1-4c5c-8652-a85048513e22", "sighting--a1851d66-bba7-44f7-926f-e22ada21323b", "sighting--0706b8a8-a260-4741-ba6d-16816dd67fcc", "sighting--840bb556-bbb6-4416-9e8f-9fbba0e21695", "sighting--a3f96ca3-7bd0-4b09-804a-d1def7b367f3", "sighting--91fdb77a-e5d5-4912-8548-e244973c7d1a", "sighting--804c1f0d-2287-414d-8b9e-27913a92c3cd", "sighting--1d301cfb-7d33-4125-915c-8eece444877c", "sighting--9d32f0a7-d234-456f-9420-4733fb839e65", "sighting--02feb11d-6bbf-40f8-a7ed-773c8c1d0398", "sighting--4371afa0-0067-45ca-a769-a83cd9352d53", "sighting--f2ab26e0-3172-4e97-af09-14b5f5df94e3", "sighting--e1383a9b-7a9e-4d99-afad-dc333fa89eb0", "sighting--5129b8c2-aabf-4d69-b666-35c17c57094c", "sighting--29db9188-6bcd-4bdb-a601-ebb58cf26d64", "sighting--15d1f468-50f5-4ada-88b0-36a30e7cf31a", "sighting--0538534e-89f0-4544-a904-87fb6085867e", "sighting--6ef3510a-8aed-42ca-8340-acb713dca66d", "sighting--6865c38d-d868-4783-a65a-ef4eecf58102", "sighting--5d79012a-9ec2-4b24-a9e8-0a852ab3a332", "sighting--5cddc9d4-8600-4445-9169-59026a00deec", "sighting--8f79876c-7cea-43ea-a088-d281ab54eca4", "sighting--66146253-c0df-454b-9d49-f0317aaf3b8f", "sighting--6519061a-1c58-4ea7-b393-e8aa9c8f5673", "sighting--3a7c79de-1ba1-426a-93db-5dbd01fe135f", "sighting--4b8f7abc-6d2b-4c1d-aa8a-091d95687455", "sighting--693378dc-288a-4258-8149-5f377fbca044", "sighting--4c5972ad-b3e3-414d-96ea-c6ff5d4784b0", "sighting--33945a40-fbd2-4e72-88ee-cd60256e09df", "sighting--3929c01d-b712-49f1-acf9-1862b23f2465", "sighting--3dcb0558-34b1-45dd-9afb-b9380b8d6eaf", "sighting--d9921465-74bd-4e37-a7b9-b8ba25dccdc4", "sighting--00f922ad-f7b4-43b2-b1b0-3512493978eb", "sighting--b8b95b46-b608-40b9-ac3b-ac938414fbab", "sighting--d26ce7f7-5423-4113-bd62-29c732bb1c6a", "sighting--71751439-ea5c-400c-8a9c-a1787624ee8f", "sighting--6b2bd0bb-c01a-4441-8b25-9a43af89e07a", "sighting--1ef226bc-d555-4d1c-9df2-3bb57b49de8b", "sighting--613213db-5f9d-4605-8e80-8f2c004e6d11", "sighting--40348b0c-9b0c-41f1-b315-e74a6c222ddc", "sighting--e7f73161-eec9-439d-9944-304bcd352a83", "sighting--3e61a340-73d6-4202-8f05-efa321184ef0", "sighting--8898a5b8-246e-450b-8303-cc0348aa5c61", "sighting--9b92a25c-1894-4c12-8159-325961120159", "sighting--6cd797ea-29bf-420a-9dfa-5cff4b76cf99", "sighting--8b33abd0-e567-4888-a13e-4dccece333b2", "sighting--b479cf97-7402-4f1a-972b-0c640a5f8553", "sighting--7f0258c8-a41d-413b-8263-74f5ba4c4afa", "sighting--6c43d3da-d5c7-4b75-8c54-787c50600494", "sighting--58afeeab-4eb2-427a-800f-2e4f4da5ed52", "sighting--e06e36d8-5a1e-40a4-b4cd-b9db6bd6bcaf", "sighting--9c2590d8-573c-405f-9b87-d15ad981d1f3", "sighting--495b720f-c08b-484c-8fcb-5153aab119d0", "sighting--43035788-94c5-43c1-a3f9-e6f209abd9d6", "sighting--8e43546e-034c-4317-9c63-7fa189649a3e", "sighting--a705f92b-939f-4939-a635-733dafbdd84d", "sighting--c49c1565-0229-4555-bcf9-6318ac04f4ba", "sighting--31ab30ce-a201-448d-a810-1c540c9dced6", "sighting--2c3cdcce-1bb2-4e89-b64f-8ed0d7672951", "sighting--3cf71df9-9a79-4390-b147-969c4aa69194", "sighting--c52a4019-74cb-46b5-9b3e-94e272fa0c63", "sighting--decfacb2-b419-4b9c-b669-1233e2cd7b3f", "sighting--7698598e-a768-4994-be45-39d3ced5782d", "sighting--a2be4011-af52-4fc2-ace4-cb5521c6f877", "sighting--f21abb57-525d-4d39-a36f-303ea8a6705d", "sighting--5e12a3d8-4a66-40c3-b942-2932c42609d9", "sighting--f6ccd2ed-80df-40fb-840c-75787e98a681", "sighting--462f4896-b313-45c6-a3d3-7facf8e48e6f", "sighting--4555788b-2e62-4efb-9fba-71d64b4e5d4f", "sighting--0e1de474-efca-4d08-8fa9-a3b1f24b35b5", "sighting--71139aac-e6e3-4a30-9668-9aade50fd314", "sighting--33d68c54-18b3-4996-b9a9-73a25001e4ab", "sighting--760f23cf-ba32-4f16-be33-82e1bd08ee49", "sighting--d8d6b0e1-5144-4445-a76c-3224b20554e5", "sighting--46db50db-f66e-4d3f-a426-7ec7cb5bef0e", "sighting--28650001-132e-4fd5-aec0-f62ac3273409", "sighting--1c608dc6-130f-4dbf-873f-fd7b3b23aa2b", "sighting--6b248410-4de8-4168-9f7a-0c853b102072", "sighting--af690a13-e743-4c06-a25f-e8f284855bb8", "sighting--3b82eb40-9b4c-4272-9fed-afd179f2571f", "sighting--c720423b-b204-4ae8-a1f0-e1544cd6eefc", "sighting--f35852ef-ffbd-41fd-bf53-256035e45208", "sighting--14c1547d-74e0-45c5-979c-1a07227b5ca1", "sighting--6c224872-8219-4abb-8e33-f5b73e706394", "sighting--a614cdd8-3b91-4449-ad8a-8f58d0cf8401", "sighting--b5daee1b-2cc3-4f99-87db-fc91d1abc686", "sighting--3d5d19ec-d172-4595-9d62-aaf0e6aa2c06", "sighting--f31c519c-a1c7-491f-a672-62e4a272e829", "sighting--7ffd57d5-b09b-4831-bb4b-292fe34c09fb", "sighting--eeb826e2-e064-4033-976e-8417ac377a10", "sighting--dbe27316-9da5-4833-8eac-7b6f0374f590", "sighting--bd12432d-2f4f-4615-9466-81cdbe876588", "sighting--619aa896-7cb6-4eca-bd7a-f3212508318d", "sighting--19e6265c-93c5-476c-a7c4-b856a59848ce", "sighting--82daced0-e00e-43f3-849f-c2998afb590d", "sighting--94900a27-b9b2-4fa3-85f5-5cd5b450c06d", "sighting--e9d8a41a-366d-4a19-b0a7-56a42c75422a", "sighting--dda24fc8-f345-4fc7-a268-c423422af1db", "sighting--6b0b0d12-8f0d-4377-ae1e-a1c8394933bf", "sighting--3848dfd4-2083-413b-9c0f-80c67afc20dc", "sighting--f492c2c0-56de-48cd-af52-545206547a79", "sighting--129f4921-51ac-495b-9a88-8c8b9a9a5e09", "sighting--cd34bc5f-f44d-4161-9a6e-e4b4f70a890a", "sighting--71543f12-632f-4131-8ac6-876330182d9b", "sighting--dd204edf-a948-4e69-bc09-dcebf63fb650", "sighting--852dfc56-4a28-4df3-81be-05df59e7f763", "sighting--012f7394-edab-4223-92af-7be2dff4107e", "sighting--28c934e4-e8db-4e3d-a355-5fdf5fc93734", "sighting--f01d87b3-6973-46eb-9394-ff5080eaf7c7", "sighting--1cdbbdd7-700b-4194-a146-afaa0f5445dc", "sighting--901a18f0-b6a6-4753-bf7c-68927a8bfd97", "sighting--7f1beb96-57d8-4bdb-b1ed-75e37fdeb672", "sighting--382d86e6-47ff-431e-9fa2-91fc4354e290", "sighting--00cb0fca-8103-4436-824d-c9957954ffba", "sighting--f3e49b3b-2c29-46f6-866a-abf6fb19452e", "sighting--1b7f22c3-63f0-4236-a492-6bfc13fa3570", "sighting--086147ee-7f30-4dd0-a18a-776a27b3a494", "sighting--e46d09b3-b0ef-4912-a8a8-3422add6d410", "sighting--3621f44d-65de-4dee-9a6b-e8faccd88cfa", "sighting--4a15d690-ba5a-4f13-8605-ef3e03603ecb", "sighting--93ab1d49-2414-42b3-89a2-a5ebb9c61d54", "sighting--e0a7d192-ad0d-4c60-b596-6ac27cd3b427", "sighting--0a176779-5107-4075-862c-04fa28a0e1ff", "sighting--bbe9aba6-b9d4-4186-8d1f-6db2ad01d64e", "sighting--0c040252-09df-4498-abda-823c44fbfa80", "sighting--4ea2b322-28e8-4137-b1b6-5c618756e4d8", "sighting--67ba1805-0d4c-4fca-8bb1-55e789608fcf", "sighting--cf9b7231-aee7-444b-aedb-cc400caca5af", "sighting--147eee79-ff7c-4054-ac9a-b62ea6902d07", "sighting--244ef911-35cb-44af-8ba7-408a7f98812a", "sighting--46b59de1-f27c-4efa-86fe-947934e3063e", "sighting--5ef840a4-abec-4f12-a8d0-e599fbba80f7", "sighting--469beb9e-3231-4f90-8e51-631d01919855", "sighting--f5c57d3c-ea7e-405f-96f2-38ef72cae50e", "sighting--0e5ea6bd-bf07-488e-b7a4-17473d9a1bf5", "sighting--2807183b-7178-480c-a470-64e15bf7f4e3", "sighting--337a587f-0db2-4b59-8ea8-226ae6d9619c", "sighting--062bfe1b-de89-4d3a-bb41-1da21a05e288", "sighting--085376ec-53de-49ac-8ba0-929fa05478d8", "sighting--3abed6a5-2d26-4b9c-a6fd-f731f7c124d2", "sighting--570f9550-44f0-4ab8-a0d4-d96599bfd52f", "sighting--abfa3382-7c8a-4f3c-bcd6-dcbdd8ff3e1d", "sighting--54bc3ddb-5fb4-46c6-9e36-89901f067808", "sighting--26bbae3d-e798-4555-9566-44adaff79590", "sighting--87a88c28-cfa3-4609-ae91-d0d82b9f2852", "sighting--1716eb49-c4b6-45ed-8dad-46f18bd31fec", "sighting--3f423336-b324-447d-ae1c-93bd84d6ad8b", "sighting--e88be892-3050-4a8e-bf00-2872849d89f6", "sighting--b5ba6de9-6f7e-41ec-9052-6db71ad8a615", "sighting--be9fffb5-851f-41b8-849d-9f07a89369d3", "sighting--7d083b6a-319b-4667-8b88-5430b38a6d93", "sighting--a3702956-fce0-4e8a-aba5-12d7fc2ad4e1", "sighting--c3fdca68-d688-43fc-b92f-d2d7b9cd5020", "sighting--22345e4c-9d75-4c02-935c-63aa1ccc785d", "sighting--13b1aa55-ccad-437d-9ff7-69171a94038b", "sighting--adcfeeda-afcb-405e-98a3-cfadb80807af", "sighting--17ba2190-8233-4e7c-b829-44d62da74dc5", "sighting--8457c2d2-6ba8-49ff-8080-b322cd0e80a4", "sighting--18383bd8-e313-4210-bd47-2f38d75b3323", "sighting--9f47de42-a0b7-4691-943e-2202e39d4adc", "sighting--4814b663-657e-4223-a667-8256b83d9850", "sighting--5e7c537d-870a-4514-80ad-1583a66ca8bc", "sighting--744092ae-c305-4d2f-9f22-63b6db417b66", "sighting--bae04b57-5c57-476f-abae-7fef148fdbef", "sighting--0f7857aa-d69e-4f93-9a35-4be23a8108bd", "sighting--30ff8de1-668e-4b00-aa47-23008151fc7a", "sighting--631e26e9-bc93-48b5-97d9-47eee53fcdc8", "sighting--bf619096-a022-4231-bba1-99ace0e9dd5f", "sighting--956151ca-4709-47c0-9bfe-3507e0940db8", "sighting--ac2c0109-cc9e-43c1-8da1-60bf75c7ce4f", "sighting--62e215fb-eb62-42dc-8f22-3721822056fe", "sighting--fec413c0-dba0-4227-a06e-67238462709e", "sighting--bcd6913f-403f-40c6-8da6-adfa41be6097", "sighting--3b65d8ea-056d-4d25-b8dc-05bcf848aa68", "sighting--1491afa6-0aee-4bf5-9d84-b0d9ad30f770", "sighting--07e36464-532c-4fce-83bc-ff7a7d8062c9", "sighting--e909d3c8-b9e5-4afe-a287-c3f58ddb9c47", "sighting--97335c2a-8576-4677-9975-f5780712bdd9", "sighting--9e303545-c6ec-405f-9498-bc72d6f270c9", "sighting--baa23b77-9456-42f8-a36d-70bccfaf9a26", "sighting--f0b0b442-da46-4705-b374-4ad91bf4bbca", "sighting--25c9cabf-7d04-4f23-96a2-72548c2e6f00", "sighting--5fb8fbe9-2823-4374-8227-04ab636ebcd5", "sighting--096fd80a-14dc-41f6-95ad-cd549a278ca2", "sighting--1f11ca86-2c59-4fc2-b45f-e1f7e9638fc6", "sighting--775f5edb-5e38-4cec-8045-1781a903020c", "sighting--8f33b4cb-0722-4d9a-80a0-2129d56589e8", "sighting--b2d1223e-501e-49c0-9cbc-c545ecf11468", "sighting--4c5b052c-4226-421e-a29c-3996e37cbb02", "sighting--b072c936-9f8c-4e7b-a031-5c7ddae3bf82", "sighting--f1c55de6-625a-471d-8c7d-19d9620076cc", "sighting--5a0843b4-62ca-417e-a60b-25f6e8b4e968", "sighting--8f665f1a-37d3-4569-8477-f599224bad37", "sighting--78cd709e-a24c-4960-8528-698a6a3329f2", "sighting--14e845f5-21b6-4faa-bc00-6e0894cbeee2", "sighting--39dfa098-72ff-4494-adf0-4079c0dee7b6", "sighting--3bbd781f-0748-49d6-8cba-3e7a60a10c7b", "sighting--985ef774-514b-486c-8070-ba2a0f5838c9", "sighting--e9d10d47-9266-479d-be31-a232a78fb534", "sighting--20708e98-7d49-474b-915c-1ebb6cd00bea", "sighting--35e0ed1d-8e7e-47d2-b76a-4c1b8899caae", "sighting--5f2e8f82-fbc2-4757-ab18-53843b928696", "sighting--ae0322d3-6da1-40f9-9bd9-be8c1ce4f0df", "sighting--eadd07af-c6bf-49ad-bdcb-da8c78959d69", "sighting--c801e44b-2baa-40c8-bb2b-8bdb2f0c5fbd", "sighting--32584d69-9146-4caf-815c-a9194cf4af0b", "sighting--54ed0ac3-2ebc-41a8-8585-f45801ce5de2", "sighting--45aeee40-b771-4302-a840-9a0d7b6c6396", "sighting--57c80c48-a6b3-4dc2-a116-f84e7da2fc8f", "sighting--780b2901-f60a-49b1-8018-3872379ba56d", "sighting--3a7f7ffd-4869-4bfc-8f2d-fc2ba4bab56a", "sighting--c7abc787-6635-4364-a48a-967dce69a3bb", "sighting--c10853ff-c970-473f-9ba7-84fb4419fafe", "sighting--23c8be68-97a1-4832-82c3-272816725354", "sighting--473d8cfa-3419-46ff-9995-7aed48b237d0", "sighting--b425fe92-7946-4285-9650-c94db64089f0", "sighting--5a56eafd-2e44-4bd8-8293-a080d93076c5", "sighting--9300c5db-5a73-4539-9178-858acf8875a0", "sighting--deea2c79-0e26-4db2-9c96-41233271efda", "sighting--95baee9c-09c3-4acd-bc85-4970589cf7b7", "sighting--9b112d7f-0752-4225-b735-7a3f3e543b35", "sighting--5c5c1c06-a04c-4c57-ad18-99ebb073897a", "sighting--2d9e46e1-6081-4716-af17-67f4a7cd59ca", "sighting--dc1e3b16-403a-4561-9e67-a9c66e3f25dc", "sighting--47de5190-9163-4928-b826-7a07c84d697c", "sighting--d5744f0c-2bd0-4e6f-8e5a-2b2cf4889e62", "sighting--7d1c3d11-ea63-4489-a683-55963c8fcdd4", "sighting--f9fa45b9-3127-43f3-9dce-cb4695971c99", "sighting--c7ce322f-f5eb-48a3-9763-5c95db7d8a4d", "sighting--d5139d5c-d4f8-44c2-a8d3-ff498c5762b9", "sighting--43ca333f-a639-4bb2-987c-5f8ef59ad9c4", "sighting--9db2769d-8ee0-4fc4-9410-5fdd17e5c005", "sighting--52f101b8-2a33-4989-89be-803202c123b3", "sighting--8f1e5474-6dfe-40aa-aa25-1d0acd225e30", "sighting--c777e35b-2bbd-41c5-aba7-66d69efc041e", "sighting--ba359a0c-cf8e-4729-b800-80a8897e562b", "sighting--17f1612c-7602-4445-9be5-4f9f54913a99", "sighting--47e5f5b2-ecca-46f9-8165-89094053f60c", "sighting--cf07c4d4-3eb0-4289-aa21-a66262d959b1", "sighting--13db3fba-1855-4f0f-b536-50abfe9dd5cc", "sighting--cf96c9ef-7931-46d6-8554-2fab62d0ff87", "sighting--2ccedc21-a918-4e1d-b968-a4357e592d61", "sighting--5168832c-664b-4ac9-b6d1-bf4e836155d8", "sighting--44570fc2-f6ac-470a-92a7-0cb2ce329afc", "sighting--dbe570ec-7bd7-4cf0-aab9-2318e1565966", "sighting--abc78b99-30ce-4059-a808-ad2400e553e5", "sighting--cd975944-831c-4d3b-9f16-6a21dabba5df", "sighting--bbbcf108-e67c-4853-ae3b-7359d5f14316", "sighting--386f3b04-c769-4dc5-8550-1cb52f952752", "sighting--c10d31ae-02ee-4595-90de-125d9b9f9aa9", "sighting--2d2d6da0-434d-42be-9b4d-16b813371b9f", "sighting--5d79dce1-fed0-49b9-8134-f641ceb08411", "sighting--2b17d7bc-57b0-4717-9b40-1c55ce089c9f", "sighting--4128c1dd-22a4-4861-bad5-42f7f691282d", "sighting--92e883de-6186-4a86-98ad-97fc48b87343", "sighting--c93ee90e-d4f1-4410-a284-5f6d18b0c265", "sighting--904baf82-f0fd-429a-aa31-83d19fe03105", "sighting--3ab516f5-c388-4235-9ab2-97807ea5d889", "sighting--705aa0ef-e9de-44fe-8876-0db1b81430d6", "sighting--c2093d1a-2a6e-439f-9004-973589ade720", "sighting--a2ccc308-81d7-4759-bbef-c0e8d5752606", "sighting--5d43c32a-70c2-4d70-85f9-70b5c1a1e351", "sighting--6ed197b5-d3f4-4ba1-b668-45769ccfda32", "sighting--d87cb4e9-cbaa-461c-aab7-eececb4dc8c5", "sighting--fb9863a8-bbc9-4737-9588-5e426ffa7b13", "sighting--99c618c4-4dee-431c-b896-50250fd66d7c", "sighting--421c0fea-4e70-4deb-8aa0-23f3e442b8ce", "sighting--da0a09de-9445-4207-bcb0-ba7adff5f1b2", "sighting--7c678a0d-f572-4dd5-94a7-69362f5f5c52", "sighting--63b7201e-8009-46e6-be38-7bea31f5d3e2", "sighting--36033825-df1b-4ae7-b29c-aa0a25b3c29b", "sighting--0fb13dd5-92a4-4301-a813-b9a07027f502", "sighting--d7abc176-67e6-4066-97c8-2ecc97272ee3", "sighting--85ccde9d-7a66-4ba3-a933-97d7fe7a0e62", "sighting--754296e6-3fb2-410f-b79b-9f420199903e", "sighting--0f9de9ed-a5ca-47ff-989f-6d5ec71ba1ea", "sighting--97c2fa35-1d9c-4d21-b6a2-b618e029263b", "sighting--71a6c4a8-baf1-4ea7-b4c7-d54b57ebfe45", "sighting--11b467ee-7072-4944-996d-0d6ff110067a", "sighting--08419ba9-4690-4dd9-85c0-1d21ef9d9e85", "sighting--bac830bd-cccc-4af9-b6f0-c459a55d315d", "sighting--f8e4e528-184c-49ad-a288-2bcedd656fc6", "sighting--e99338df-a84e-410c-b60a-d6d7cf6c99b0", "sighting--e82dd264-a3c8-432c-b82d-e28c53b29ea8", "sighting--e9883445-cb7c-4019-94aa-87408b49c575", "sighting--cfcca700-4099-4446-8918-873d8e874288", "sighting--86c36f0f-0765-44fe-b098-df63552dec1f", "sighting--f8a864c8-d09d-4435-94f6-60eab369841e", "sighting--332caa6c-50d6-47fc-ad7d-7ceaeee34c37", "sighting--b82bd8d5-ced6-40b6-97e4-174da57e09f1", "sighting--dfc7b536-796e-4ac6-adc2-236ecc2def95", "sighting--30084bb8-a1b0-4935-97b2-e87762c01e60", "sighting--213f2abe-6b7a-4b08-b2eb-94acaf77c08a", "sighting--e4d11719-35f6-4979-8210-28e586282467", "sighting--5921c9fc-f1ac-4f86-b9c6-0e781d1d9193", "sighting--80395f47-9a46-4c25-8928-0d71f1e3c63e", "sighting--dcbab5cc-1cbb-43e8-98aa-9b89dd49ac18", "sighting--0737c431-b482-47be-ba98-407eb9950a29", "sighting--5cfc65cf-80d9-48f0-b9bd-8851352cbfbd", "sighting--f9e9002f-b208-4d9c-897f-0ba91736b506", "sighting--a6ced060-39c1-4951-b004-2db760dfbdec", "sighting--91e98dae-830c-4e56-905b-8c93b931393c", "sighting--aea89053-ae2e-4c97-998d-acc3952dbb28", "sighting--a90413a3-d21e-4e8e-9e88-9bca3b47eead", "sighting--c97d6e78-68e6-4e3e-8ee6-8a5c5ccd9e98", "sighting--37675fec-ccea-4b0a-b8a8-09e11c6386e0", "sighting--23249ed9-378d-461f-9c96-90935a970a0e", "sighting--792525ab-f129-43d6-99e7-4931722a93a3", "sighting--68d7c5ef-faa4-4a36-98e8-3a6db2a8962d", "sighting--c821b280-3ec4-420f-9024-1c1c398425d4", "sighting--9b5b7076-ad65-4999-baef-909d7b42d710", "sighting--523ff3b0-d1f0-44f7-9abc-f33c918608b0", "sighting--bc28e828-b5ae-4885-8929-74a1d2e5259c", "sighting--26d2ec62-0114-4378-bd52-6cd9a20393ed", "sighting--bf0c9ca3-4140-41b2-84fb-2be563a164dc", "sighting--b16ff3ba-f597-4bea-a7e4-914dad9fed4b", "sighting--9a4c0e25-2993-4c1e-b44c-2ce54690a834", "sighting--ecc694db-498d-4583-b4ff-8a4279a0acb8", "sighting--ef6da660-b954-460e-ac4e-6d7646110e68", "sighting--602a72fb-ff9e-42a1-8f48-af40312f915d", "sighting--f3d217aa-0901-41f3-8869-702d7dc62e28", "sighting--50c7bc81-ea8a-438b-829a-1dcb7307eb10", "sighting--05d76098-4299-4d25-abe5-f35813164272", "sighting--a0704f33-1c89-403a-9978-e8a5591ee9e9", "sighting--7c374a60-c85e-4e12-aadb-8c6d19679b61", "sighting--3b3ce94f-a9bf-43bb-83e6-1d905b827f00", "sighting--b569939b-8539-45fe-ac6f-54815ba02ad4", "sighting--39fc0109-5572-4d98-8b39-977d7d5b597a", "sighting--175cf1e7-0b78-47bc-a1e1-d3655a50a0c7", "sighting--43236d8e-1d2e-4b9c-aa5f-8b94c5d5f37d", "sighting--563f313b-34b3-4738-94f5-32d4092a275c", "sighting--bf248569-45a9-4f4e-86a4-fbb41244d505", "sighting--140b438e-471b-4084-bb33-7dfed16f70e7", "sighting--421c0946-616c-4b3a-b80f-58bca1354452", "sighting--766e95e4-a440-4a7a-b418-2f9e8b1df8b2", "sighting--74917989-0da3-466a-8dcd-5f022275bceb", "sighting--12976d8f-fb95-4434-b674-e58174a0035b", "sighting--46e68281-df10-4e9e-bf9f-04cbc1c8260b", "sighting--2f059914-fd79-4aa9-b169-b8fdf1c200f4", "sighting--d8c1f1d5-d3ea-4ba2-a720-f1846cb5f14b", "sighting--c6fba298-5b77-403c-85fa-deeaeb9e438e", "sighting--ad167633-6474-41e9-be22-526a2ed07d8e", "sighting--0b0b81b2-af05-4d34-8634-c21bd6d6777b", "sighting--49f169b4-c145-4261-bf2d-89aa9b53f8d7", "sighting--5cf1b5d4-ed3b-4b4b-9928-4dd9cec1cf78", "sighting--e6bb9b3c-53cf-4df7-b683-ca264bbac20d", "sighting--1eddf86b-038f-463b-bc05-8353d70e909a", "sighting--234dc45e-5412-4a49-9a33-10505b25f0be", "sighting--a2c2d69e-4fcd-40e4-a8ad-fb379d97cb22", "sighting--cd432727-4a2d-4c8f-80c9-812dd6a4693c", "sighting--b6438fef-f210-4a5c-b0e9-ff8bce89551d", "sighting--074c968f-9fdb-4fa1-8e2b-f03cc963c580", "sighting--0e83e3a4-1608-43c8-a353-94e89f46ac24", "sighting--8906a3d9-1188-467b-9b44-60b7ebd489ff", "sighting--7bae1b2b-4beb-49bc-85bd-59a150d55d6f", "sighting--e18057c0-7da8-44bd-b10d-c41c65205ea9", "sighting--e8825df8-01f4-45d6-afa1-b13521877016", "sighting--62317232-b025-4927-b9a9-d0d4781997fd", "sighting--dbe5645b-d050-4e2b-ba14-8ecf11d11f0d", "sighting--930025d4-a3ab-45a1-8d4c-a156b2e57112", "sighting--afbc912b-1fd3-4042-b86e-ee8fd6366dc3", "sighting--838fcf8c-93bb-4d01-932e-12e834e8fc8f", "sighting--e706c893-b5c0-407e-9443-65974185367a", "sighting--42607e9b-9d4d-46b0-8912-f0e22ea88644", "sighting--e0c5d8b1-a00f-4fd7-be52-40fb41b853d3", "sighting--df4df1d0-bcff-4ad2-ab87-372814228bfa", "sighting--55d49055-c102-44a7-b816-58056af9f977", "sighting--51a2f83b-4a8a-4cad-9c01-c72ed8bb1b20", "sighting--0e9a3c8f-5dfc-4a10-87ac-769bfa70b110", "sighting--af8bb4ab-1f03-42b7-bd9a-01c14e6bb98b", "sighting--31245d14-2cdd-46d2-9e09-4536f3a1ff3c", "sighting--a86e1fe5-3d1b-41f8-aa49-be9aed4d6bb2", "sighting--18aaa20b-8fbb-4bc9-b025-4f5eb09fa5b8", "sighting--18021a72-1d7b-4d4c-b978-f1c052fac3d2", "sighting--7e7be49a-c52c-4f24-ad93-6cf3ef53e5c8", "sighting--90d2f366-e3b7-4d01-ae71-ff8583f95fbe", "sighting--5ebdb3c7-2b92-4bb2-9a7d-6b7276876fa6", "sighting--b8d240c8-d898-42a8-958b-d2a5414b3aae", "sighting--0d21a335-f55a-412f-96ff-7631b17cd227", "sighting--9a2b09ea-5718-4846-b75c-3af51d2b177f", "sighting--2fe5d927-d203-47cc-977e-95abb83927a8", "sighting--95a45e4d-1dc1-4ca7-b5cf-65599aad34af", "sighting--2a0c181f-7796-4f28-9052-429e55b072b8", "sighting--d6ca1a01-7674-41d2-ab52-4e73defea0fa", "sighting--3fcd9c6c-d7e3-477d-9e88-b7c61c4e8c4d", "sighting--51742654-e77c-49c3-a268-abed7c37773d", "sighting--00b8523d-067e-4bd1-ad3a-b8edae5a591d", "sighting--dae00fbb-1a5b-40de-a2e1-7937398f4c55", "sighting--e3993a86-74e3-499f-bfd9-5464be6bde40", "sighting--cccbc5ba-c489-4dd0-bf1b-0f933eb68a77", "sighting--a93fc170-5448-425a-ae03-01732280f349", "sighting--ba4c3c72-13f9-4740-8137-77c495c6d679", "sighting--e4c956a0-6c56-40d8-98de-190b748b4092", "sighting--e77e061c-a0d7-45a3-a2ad-d13cb2a4cc62", "sighting--fcc5ea28-8c58-4077-9efb-d39af83aece1", "sighting--71eb75d2-e8cf-4311-aac2-4ab4d7ea5366", "sighting--c70c689a-e733-4546-b047-5759582bca07", "sighting--fa15b5c0-9548-4ecf-8c50-e516d2c755a8", "sighting--6758fa0d-783f-41e5-a781-eea0eebe6b42", "sighting--967c27bb-6cfc-4801-bf77-c29de2f35ae9", "sighting--7819be08-2b01-4595-8d33-3520b1274e38", "sighting--ff35b910-9bce-4633-99df-6e5ebe5d0592", "sighting--51921d9a-2c25-4377-8dc9-65e6d41ba65f", "sighting--6b517cf6-7f0d-4bb4-898d-c6aab714bfc7", "sighting--2a8ff213-e07c-45dc-9c1f-c9890d7a3ee7", "sighting--7b167c0b-c4e4-40c0-a3da-cdf29dcf9f39", "sighting--4fd24b83-0e99-451a-9778-9d763c05cf18", "sighting--cba8c4da-11f1-4439-9d84-0fdc4130cc34", "sighting--0fda5fa2-b63b-4bdb-9de7-a5eb6d638f1b", "sighting--40208904-a7ad-4b77-a505-1a44c3b735b9", "sighting--8bc560d5-d0b8-4148-bca2-29a3c349ea6c", "sighting--b3ab3172-de71-48f8-89db-30b0e63ed98d", "sighting--af36934e-08bc-4ad8-a39e-72bd11a4315c", "sighting--9d20c8c9-90cf-4c49-b5a5-13e9ef572aa3", "sighting--66345986-3fa4-4d92-8bf6-c9015e4416ce", "sighting--dc750a3c-fc3c-4129-ae36-d4eac21cdc87", "sighting--019641fb-1120-44ac-83ea-f60ff06a0e26", "sighting--f7dba1bd-1b05-4eaa-9535-2c67b1c91b58", "sighting--39a99a20-3b6f-44c3-9750-3dbf7c882189", "sighting--c55ddb0d-3d50-4cd3-83a5-d8dcfe906a25", "sighting--44a9a473-35f6-40e3-88e2-44f9d23cd1d6", "sighting--41477f06-17d7-42a0-9433-add6c4a6689b", "sighting--e97630eb-bb63-4a89-839f-64a1a76915be", "sighting--1c8add73-d2c8-4e85-9cae-130a4ca74f4e", "sighting--4bba424a-5cdd-45fc-bbb1-94e78564264b", "sighting--e4ce88a7-b178-41ab-bc6c-cd580d29bc94", "sighting--cf0d417c-02da-420a-9ba6-f1eadf5ad537", "sighting--143e0621-1f55-4ad8-8f76-d0f559099193", "sighting--0d756862-a892-4580-8dc4-f11986b54bf0", "sighting--771f5ef4-29ba-4eb5-90c4-86da164b2d14", "sighting--4e1bff63-d587-4ec4-88bf-881cdd84809f", "sighting--7e3402a5-a115-49ca-a76e-d96828b69d7d", "sighting--1532211e-93a5-47b7-8456-4066718b3109", "sighting--c515f515-65fa-4f16-b2f9-b964e2a1a1c3", "sighting--294ac951-3335-42e6-9b8d-1ddb394599bc", "sighting--9a06d5cb-57b2-46a4-8e48-3c1317c8837c", "sighting--e4d1c402-a33e-438d-a409-18d58cff72ba", "sighting--919b515e-9050-4fd6-85bd-706ab5ad187d", "sighting--203603a7-87e2-476d-a32f-a591b7ce43fb", "sighting--b30e8b2d-9057-4822-819f-d283aefcd386", "sighting--efd641e8-195f-49c4-9392-c8022e200897", "sighting--25139798-295c-4791-a5a1-ae3037b9abcd", "sighting--1b54492e-c87e-4815-8acc-0249e7a90691", "sighting--1406044c-1294-41fe-8267-da6db0750a50", "sighting--afdfa89b-1d30-4f0f-87f0-9d036e05e97f", "sighting--753d0e18-6b25-499b-b246-d623a2f845af", "sighting--5db8eab5-ff0b-4ea3-9d76-e45945bc0e3b", "sighting--0d16350e-fd82-451c-907e-c9eb348fc961", "sighting--a7ab0283-01cd-4260-8adc-ea986ba3a1e3", "sighting--65d3df5b-9a08-4340-894c-fb4e55361fc9", "sighting--061e028a-896f-4746-abd8-8935582daf31", "sighting--d746c695-e128-42c9-9ad6-8a9fc1fb4608", "sighting--33b1410a-d073-49a7-9213-abecc2871aaf", "sighting--c0826ccf-4429-4fe0-b442-b13fee236318", "sighting--7ae748d3-33af-4b07-8ee0-3d65e4444260", "sighting--24564513-acb9-4593-aabd-632c8436784b", "sighting--492fbc73-9a73-42fc-a860-5c96b8465994", "sighting--5885a1f2-6716-4e73-8111-56e0ca824d03", "sighting--51488b16-a7ea-46e4-9c9f-3f7039ce940b", "sighting--35f2da99-8136-44de-ad48-a757b8a26c6c", "sighting--5737463a-9eee-4f2f-bc00-9ccc672bc713", "sighting--788f4648-5f33-41f5-96e7-16a21ada5a79", "sighting--70947f01-63be-4548-a647-fdf0a615f24e", "sighting--4bf91312-72d9-4058-b8c4-85fb3d036274", "sighting--84169f6f-5109-4c87-800b-a775a26cb1e0", "sighting--de1263ab-b436-4a23-91ec-7593fc682c4b", "sighting--e715e058-8b24-41c3-a14e-e927741ddea3", "sighting--753c83be-2fd7-4952-91f1-ac912b0ab9b8", "sighting--038a17a3-9a57-41a0-b386-86fe15ca1bb8", "sighting--9d6697eb-55bd-4a75-a8ff-f47e6cde0b8d", "sighting--0363a0bf-3a9b-4a74-ad62-346c8a22c6ac", "sighting--95085dba-466d-4ea9-ba69-5323aa6254a4", "sighting--bb19af90-18d1-4c70-a7b2-ba9ac9e49418", "sighting--5e211ef4-7d26-4e43-a4b2-7e493ca192aa", "sighting--7ea2699b-552b-47bc-a5d0-9ec196fbd5c1", "sighting--4f4cb778-fa13-43c3-8211-c45dc6c7c031", "sighting--8dd4548a-4f8d-4b44-b8b2-5af8d940d0cf", "sighting--f52ef02e-92d9-411f-80a7-a18ff339ad57", "sighting--1a3d1da3-0cbf-402e-9245-fccb0b9a5c9a", "sighting--b3370950-8d24-4d5b-baf3-455d8a18b4fa", "sighting--14d9618c-1d30-4796-9b81-2ba5689a95d9", "sighting--881e6e36-0bcf-463e-9ed8-509a1caac02a", "sighting--d3ea2e13-8504-4b8b-90de-3bd3934cd4d7", "sighting--6b9e3c56-0240-492f-8149-75b57e13a6f0", "sighting--5454a77e-1042-4340-81c1-2e23ab13d48f", "sighting--88890904-1b41-43f3-823c-976767143a38", "sighting--36f31381-821f-45d7-ad11-dd5ecdb2b002", "sighting--b04171b8-0b78-413c-a91f-e1113d434eab", "sighting--63486bec-8bf7-4c69-beac-69db5abeefca", "sighting--f399ed6f-9fc2-4f72-9d9b-cf27bb53cf11", "sighting--855b17f5-7f6e-4bdb-b289-74786a25ac84", "sighting--ace82365-7c29-4e7e-8197-f4c71c14ca2f", "sighting--6c4e2120-1d01-47ae-adf7-1492086856e8", "sighting--c10e6592-ec07-4638-b8ab-e6c260fd8794", "sighting--bf834694-9f62-4810-8eca-557e604d8ffa", "sighting--4c12fe66-b8d3-4d8e-bd3a-5d254f5292ad", "sighting--bcf8f29a-fa19-4a31-b313-f7e118778de1", "sighting--c40b0ece-04be-40fc-a1d7-e2e45612b2b8", "sighting--d9a650ba-cd4c-4d70-b44a-62defa7f4702", "sighting--fc969bc0-623c-4278-9e2a-da7589d61f9f", "sighting--c6a83cc7-15c0-49db-8a5c-28ac48d46aeb", "sighting--d6020e38-30ca-49db-b690-cf3c40ad3b69", "sighting--d94480f8-a39d-4134-bda6-31d1203c3230", "sighting--f0b38965-d8ed-47cd-ba48-ad4ef67c788d", "sighting--b7112af8-d2c0-40fe-b42e-c14a451ffe40", "sighting--c240e01a-fdbc-44f4-90fd-193b55d62ea0", "sighting--d1ccdb2c-9ab8-4935-a0af-0991584822dc", "sighting--5b5881d8-a79e-4ec8-b18d-59ddcc31fe14", "sighting--6481aad6-a79a-48ea-9c20-b5e0f5a15bd6", "sighting--dd58ef11-b213-447f-b124-178dcff6c72e", "sighting--cf6da06b-3b30-4aab-bda2-810c036b2512", "sighting--07515915-cbe2-4699-b428-dd0d75f95c30", "sighting--d330b5c7-e006-476b-92f8-93f65135c48c", "sighting--ac79a9c0-3f94-4f3d-8923-f9f04d5e240b", "sighting--23584604-1925-4aef-8ec5-ed4c5c4ce538", "sighting--a04649e8-0048-4264-b0e8-4c69b33392d6", "sighting--1e520693-a701-40fb-8353-316f52686e33", "sighting--a1408b22-e77d-4071-bfd4-7fd7e0b10c3a", "sighting--06909fcb-e3b8-4c9a-9a17-ed65fda5044b", "sighting--4c1dd792-19e3-4996-a93c-3d18328fd7c4", "sighting--94f45531-e1aa-4545-8f73-aea18a326553", "sighting--d35f31d2-18e4-41c4-bdd8-8e5d0a740da4", "sighting--9b1341d7-b072-4d06-ab36-5cffcc2c8a6d", "sighting--a969cf50-ff8c-4159-b47f-a0482d9440e6", "sighting--701f8ebc-42ea-40b3-8d24-582c319889e6", "sighting--99a3be75-f4f8-4340-a126-ce23ab02e1ff", "sighting--30b56000-3855-4d05-a31e-ba4a3c28663f", "sighting--6f1a4062-c932-4dfe-ae72-ac931dce07c7", "sighting--3dfd1bec-b24d-431c-8d84-f250fac7ea31", "sighting--c069375c-4e44-4711-b02f-a8c3b04f07ba", "sighting--5f281a13-f056-4f0e-8a79-9c907c0ea9ed", "sighting--341e6288-f927-41eb-b9d7-dd571582913d", "sighting--2d1b3ccb-930e-4746-ad70-583917256a88", "sighting--767840c9-2a31-455b-a230-464f824b546f", "sighting--ca8d3097-48a7-4b87-bd19-5bea9eba50de", "sighting--f6848b29-3829-4f48-920a-86c066381ae9", "sighting--459096a6-ef09-40f7-89b5-ed7afabe102a", "sighting--b200d126-2dcf-4a96-b154-12bda50b8225", "sighting--3744434e-24a5-402a-8c39-1e80f40a5bb9", "sighting--42640804-c8b8-4722-950e-88ad9ffc95a1", "sighting--4009a6e8-b228-4cea-a011-e23a0758d08a", "sighting--3684c92e-818d-4799-a423-34d5e863e797", "sighting--7a96445f-1022-4712-9f00-4ce4a80e2384", "sighting--43745c9e-5e47-445b-ac05-2758063a5615", "sighting--68c71e47-e7ce-46da-91ae-6e5871f2a934", "sighting--c02fdaee-854d-4604-b6ed-5083f0b594c6", "sighting--01c07fa1-47e6-435d-91ef-5616abc388a3", "sighting--752126e3-6bbf-44eb-8e4c-5e2ed26fdc28", "sighting--02314ddf-5d87-43cb-bc00-c9fb9055dd20", "sighting--9ca6880d-374c-4332-bff0-6a4c567a6f9d", "sighting--2cd4c198-ac03-42f4-ab57-ce983384f6b6", "sighting--d8ec16d9-4de1-441b-a2e0-a5dd02216f71", "sighting--e40f2383-035e-41c5-8dd8-2ddc6d84f3e9", "sighting--6c4af0c5-7d41-4ff7-b77b-79ce28cf8d50", "sighting--e0d3e0ad-7a4d-47e9-9b67-d01ba1b6d889", "sighting--c1525afb-47e1-4217-b3bd-1e3f4a31830c", "sighting--aebb549e-537b-4171-9e95-2559d2f1f6d0", "sighting--ab13a3c0-11bb-43d2-b81e-4d2703bddf13", "sighting--c6f2c26d-af2b-4a14-9896-3190a69af967", "sighting--6a325aa9-d05e-4a2b-88a6-1a70eeca8786", "sighting--acb1b9e5-65c9-4e88-8317-b67b893a7f1e", "sighting--5fa628ec-f981-4ec6-bba8-a632970452ba", "sighting--c8ec20a5-c9c5-451f-9b97-7c8b9f63d8b0", "sighting--744fe5b2-67d7-4a5c-b035-4e37064878b5", "sighting--12a11eed-05b8-4bed-b47d-2e3e45b3fde0", "sighting--2ec17ce0-c24d-4d09-a47c-4eb5f2e25b80", "sighting--658618e5-baf4-463a-bf7e-752dada6a1c9", "sighting--31c73ed1-057e-438d-9852-6078b151dac9", "sighting--99898594-891e-45b1-8095-4c2d3295b482", "sighting--a32562ed-dd7d-4faf-8fff-f9df47856006", "sighting--dbc02f41-8fcc-4ebc-aa3f-214bd6c8e236", "sighting--4165fd2b-88b7-4e8e-8a7c-2ba7a82484a6", "sighting--5c5bcbbe-652e-45c5-a2bc-e853810f4a2f", "sighting--0dc667ac-005b-41e0-b62c-62303a4d43be", "sighting--4a6f7cd5-d885-4f98-a880-2a70d497858d", "sighting--3500f494-8fae-47f8-8227-c760f1e28b04", "sighting--ffadd7d0-9e15-4780-85a7-22d4d16d38ce", "sighting--a88750f5-7ebe-4705-9ab6-4581d2c7420b", "sighting--9f818ab4-e94d-4826-a0eb-32dac1f51c0c", "sighting--5a152cc2-ba6d-4c17-8719-6d7e81d8a219", "sighting--74b87460-0aed-444d-8396-2573d7d4ef65", "sighting--a2ca185f-37b2-4c20-9900-51fb54091525", "sighting--ced7f198-067c-4ed1-b4ec-56042a722796", "sighting--e262a582-c430-49ae-a170-ffa3b35cfa73", "sighting--1257c4ad-dd63-4b3f-a9a5-5611bba7eac6", "sighting--7787fc60-29d2-487d-acc1-4835f36db38d", "sighting--f639d706-2823-4861-85c1-3247eb15ad43", "sighting--e7e9245d-540e-480e-9837-4cafbd23060f", "sighting--47406d0a-4ee6-461e-aef8-f849115d4696", "sighting--fd70dd55-92fb-485c-b2d1-e0ab75072aec", "sighting--8bd1a8c9-e32b-4ae4-8ed3-2d4a2e0e2142", "sighting--fdee6801-e1c2-4f73-8563-9e9f917a589b", "sighting--e1d0327d-7970-48db-995e-a9ce304d4336", "sighting--f7c2db06-a8b5-4922-b5af-326e2df9b403", "sighting--8d834ade-c892-4ba3-8ab6-d3f82befe750", "sighting--3f9ed6d1-578a-4856-8391-c2cd6ab3f07f", "sighting--870f7189-ba5b-4fe4-ba0a-c1f37d638a1e", "sighting--2c63a972-b342-4acd-b47c-1e803196e2c1", "sighting--5bd70b8c-ebe7-4279-8633-43d8996ed10d", "sighting--db663d80-f70a-4862-9c07-4f393d420ce8", "sighting--cce81ed0-5499-4674-a631-8d67c6be94ec", "sighting--f4a6b2fd-5ac9-457c-ac13-a706a646e7d2", "sighting--da46a779-b105-488c-bda0-a4f1b6b3f536", "sighting--5908f68e-cc6a-4f8e-b76d-d87e0b081c3e", "sighting--a29a4021-ec89-44f7-bd9d-8df9c7f6bbcd", "sighting--b6a9642b-ca5f-41e8-96d6-0e00204e9e5d", "sighting--2ff750f3-722a-4f19-bd9a-a790cbd7b0fd", "sighting--ad9fdf79-c78a-434a-b1ae-993d4f19bed1", "sighting--885e74c3-9700-4e6a-bfd1-01817117f510", "sighting--0309fb95-8974-4383-9eda-72b9bd65767a", "sighting--1ca4826f-fda8-442a-8a66-fa11f50201cb", "sighting--d94f7c46-7545-44de-afe0-418b338ae959", "sighting--755198ea-21e1-4d9c-a491-0b7d376b85c3", "sighting--9d5cca3f-a0bc-4cec-b4dc-e70c36ba0b3d", "sighting--13744023-8423-44f9-88d9-92d4c94123bf", "sighting--7115c41f-8358-4d53-9177-c7caadfc9f5c", "sighting--6b511866-28b7-4482-b609-41816ffd509e", "sighting--2fb6989a-ddc5-421c-9660-2250e5e940b5", "sighting--04c4142e-f6c5-4b67-8a84-9a32d6ba3200", "sighting--3ec809cb-487e-4165-9db9-3e0597f25aa9", "sighting--112ba56b-1d05-4be6-8125-fa4ba35c14ec", "sighting--40a8f970-aaf4-49fd-8d69-1a2c83cca429", "sighting--0e3a3782-7eb7-490e-a37e-4ff050254f04", "sighting--bfa90349-72db-46f1-a4f6-ab2fcde96f55", "sighting--c46b4665-b288-41c9-b964-e8f22e3d23e2", "sighting--185ba5fb-53d7-4502-83a2-4130067107af", "sighting--d6ca6db9-f4e8-4542-b05d-4e520031513f", "sighting--1ff0b35f-aeb3-46bc-bbaa-c7a6bb6cfa0a", "sighting--bdbad3e8-9251-416d-846a-59daeb8bfb27", "sighting--6a11a6a2-7ec1-4dcd-b3ad-912ff3a99063", "sighting--d78c98b9-d3be-456b-91bd-e7aeae1a5420", "sighting--21dfadee-80e1-40e7-9154-866b48b0da00", "sighting--305bffc6-564d-483b-8cdb-148780aa7384", "sighting--bb373d55-a284-480e-b6ac-179ae7ef61c6", "sighting--df4b9e95-7a55-442e-a4b0-7e83185f5697", "sighting--35b94ede-d28d-4564-93ca-e54d4c20c756", "sighting--1a9e3587-fd96-4b8f-a6ac-6ff7db102d0a", "sighting--c7fc74d7-55a7-46cb-873c-e09474548f19", "sighting--c2ec20a3-893a-4f88-ad08-c42fabf3dff7", "sighting--35858cf8-52fd-4d6a-9842-6c33530b928d", "sighting--79ba6add-0780-4f10-9123-4d39f8d90530", "sighting--1db371b7-9f1a-496b-86af-7d555441c728", "sighting--06b1a415-55b5-4d92-aaf3-d7ff6f7c1529", "sighting--b4867e32-c2ef-4f7a-a8ea-ac83637308e7", "sighting--cbbd86ad-7855-4032-b0c5-9d2673cd67c9", "sighting--c86a5a1c-c1aa-45c2-afd3-5c068b5e7b44", "sighting--8fffabc6-f974-44cb-ad01-7ed0b8507f56", "sighting--05275851-fa2d-4e03-a1d9-a3b503338a50", "sighting--6046039b-1976-46de-a4cf-2008d14c43ab", "sighting--fc5da42e-cc9d-4947-aa90-cd8bd4c02c74", "sighting--b9cce0c6-1df4-4b93-abbf-32b5d66142b1", "sighting--cb3add10-28e6-4806-bd52-f1ae7683a9ae", "sighting--1e7a2f08-8838-4b09-9ff9-1ecd991beba3", "sighting--7a9a6245-7cba-4a2c-8c97-1196aba19e35", "sighting--edbe0091-2fc5-4ed1-ac3a-0784393764a8", "sighting--9c052fef-2882-4b28-a008-79e9e285a2de", "sighting--40f0d2d1-171c-4985-9ae3-1f8dc47c7ccb", "sighting--fbc432af-7c7e-4383-9fc7-ee9bc76e6b48", "sighting--f631ae64-751e-47d2-b652-07d94c02495f", "sighting--7b8212b7-aa2f-49dc-97eb-44be88b76d9f", "sighting--426238c5-53a2-4b7e-ad24-5801dfc42450", "sighting--fcea37b8-8510-4024-964f-de9d992d91be", "sighting--d1642ac0-7312-4546-b313-78d54c038449", "sighting--25d85f25-ba84-439f-8c50-b20aea90f38d", "sighting--71026f1e-2aae-438e-a15d-9f4a253015a4", "sighting--564d79db-7ac6-494b-9e82-b00b10c69b6b", "sighting--bc5a1680-e5fd-4b81-8bc9-681fdfa9cd38", "sighting--46626637-8694-4e29-98cb-7cdce1aced91", "sighting--8b772918-4b21-48a9-b00d-504853751f58", "sighting--4733cc5f-e917-42ab-a9a0-362fbb342127", "sighting--718d69d4-b9b6-4128-a3cb-9a98d6bf124f", "sighting--6a844178-68f4-4e39-9855-ea591876788f", "sighting--b8f19812-25f4-44fe-9ed6-5f62dcf362a9", "sighting--a341e90f-9994-44d4-98b3-8870ed4fc9b6", "sighting--91f801ff-7fa5-451f-9f0a-e72773a3a1b6", "sighting--19ce3256-f04d-444b-a566-20c7f9ae02dd", "sighting--ef89de9c-a5db-4e23-af35-fe8e73a91567", "sighting--afe6d59e-b006-4fd4-8fcb-af12bbe514ff", "sighting--394f3cd2-31aa-46d4-a710-0bb8ea66dfa9", "sighting--9979b071-28ad-49ee-85ad-6451d7519cf7", "sighting--29cb4878-3015-47f6-a189-ea5274c8ffd1", "sighting--21a76c38-7b3a-4dba-a200-bf6fce758a21", "sighting--039fe1f0-5522-4f29-b747-e2a452d0a0c0", "sighting--7cadde32-b46a-4899-932e-ce2a93c93ee7", "sighting--75cf64f2-1670-4783-a52f-1507c8433277", "sighting--84f58eb6-fd0f-4e83-8352-7935c14cc9d1", "sighting--dc1034ce-619a-4fef-a6bb-4d6ceafc1eae", "sighting--46eaa0c3-6619-4fe1-bf92-217125c6c7c2", "sighting--3400b997-ab97-4276-a018-c6daee9fc0d3", "sighting--526e6031-db47-42dc-9a1b-4fa87b6149ba", "sighting--fd4ddb34-231f-4eb2-ae23-dd69254ace1f", "sighting--8da28738-d74c-4951-ac17-6d43a504b4b3", "sighting--e6319082-41e2-4985-8111-275b0f329e5a", "sighting--558855a2-af83-45c1-b3d7-32170f5e080d", "sighting--d89a35c3-455e-4b66-89e1-23e27b2a1ee1", "sighting--1c09f310-d5c6-4691-b32e-5bf66989eb29", "sighting--954a89e4-fd02-4608-8cb2-f672642eebcd", "sighting--1bd64cbd-20de-4fbf-b23d-b3e66b2f660b", "sighting--e74c8755-1c0d-494e-93fa-71134c32f91f", "sighting--f262836d-d42f-4006-abab-25426a31915c", "sighting--cd50f554-0daa-4ba4-86c5-e5ef2ba8623a", "sighting--56879cfc-cd69-4655-9b64-0adc4bf36179", "sighting--1e4b6b6f-4bcd-4d5f-8968-2446ca89f030", "sighting--d907d46a-7d7c-4bc0-b2f8-37a6792a41b7", "sighting--9733da8d-bce7-4420-9f42-f30fe76c9d3f", "sighting--ee49f199-218f-4db7-8102-4136600f26dd", "sighting--3b98f65c-1754-4ca4-9bac-a3361c2d732f", "sighting--c34b83b6-5d60-4e3a-b8f5-022c95af3c95", "sighting--d0404037-39fb-4499-a610-ada221df05bd", "sighting--e864f3f6-dc7b-4448-8350-5ba411c70db0", "sighting--c3228635-db21-4cb4-8ea3-5eda548c27f2", "sighting--526281d5-a178-4d13-a84a-2e6bd53afd4b", "sighting--9fa6a309-8cb2-4a15-a7e3-0a2aad1f8ca0", "sighting--1a93a828-2fe5-4946-8085-61ad381e5a5d", "sighting--d4512938-7cab-4e52-b1e0-685762d68641", "sighting--791d0809-9f0d-4385-bf2f-71e4e62ed8ba", "sighting--7257567c-fffd-46db-868d-7868cbae71ef", "sighting--d499ce68-c686-4522-9d66-7981c240183b", "sighting--d8cd1896-2c7a-4e42-beb7-0b5f207a1a32", "sighting--fa9a3e0a-dff9-459b-b5b6-3851b181b92d", "sighting--22ba758d-a12c-4914-bc98-aac2679075b3", "sighting--b2d3e662-d0dd-42ca-a4a6-3e49e69140f9", "sighting--7a626bc6-a4d2-4104-a758-6fb6e1e29feb", "sighting--6cc1f980-c2a0-4717-82fc-5eec395a3846", "sighting--32eeceb9-1787-4df4-9b1b-090add80f680", "sighting--f1e06526-5b8b-4c0a-a667-4b34ed2d4f56", "sighting--99cd46a2-41e4-4035-8796-269f1f621816", "sighting--dc1adb44-66b2-4d6f-947b-a9fbf7432c1e", "sighting--12fd2d0f-7cb7-461b-9a7e-9b1c59da82cf", "sighting--fd1a88a2-1963-4ab4-8188-c0a0172b1043", "sighting--d3be3bd0-44db-4230-88e8-463b253693a6", "sighting--d5c0137a-6cf9-484c-9fcd-0dd420bb538e", "sighting--d824c4db-faf1-4326-b1d1-c13a22b7aa02", "sighting--63b2e850-9296-4db2-8093-c32d6b6cddd9", "sighting--216f596a-e4c5-40ba-9d3d-b4729832524f", "sighting--6da79ef1-90b4-4611-871c-e0c7c963d217", "sighting--38daf1bb-d6c0-4b96-a422-edb3623334f6", "sighting--1a343092-893a-4b87-be73-742d3ce93297", "sighting--5e80b5a4-e2f0-42a0-bdb9-8151bb7602f4", "sighting--9051ce80-2dea-46e9-a689-c5be27a3d664", "sighting--2460fbee-0e33-48e7-8418-bc409bc254a1", "sighting--d76dfd4d-22d0-403f-b628-4479ec201609", "sighting--a298516b-d776-424d-829f-288a14f0397e", "sighting--a23a37b7-e762-4020-978a-b8a12e7da12c", "sighting--ea333c2d-8d05-4bab-8c9e-2a914d55cd62", "sighting--16de869f-f728-4b41-bce3-841647b1bea0", "sighting--f8bd3bc1-1fdc-4b7f-884b-db4f1f25e1e9", "sighting--5752ed2e-77f9-4a39-94d6-bf775ad50a11", "sighting--6b5f46f4-1138-45a3-80ea-622d2f119e90", "sighting--b247d7fe-a9ef-4eb9-8571-d5b702a00f38", "sighting--f4ba0ac6-a717-4766-95d7-c4232db8d1e8", "sighting--67525819-54bd-4634-951c-2f8eeba57de2", "sighting--0e3d1da3-5dfe-4a87-8bbf-5f77deea5511", "sighting--721ff9b6-5b20-43c3-90db-462b8049cc32", "sighting--eefc57c3-96ae-4a09-946b-bd9c07acb9aa", "sighting--b44f9393-7d59-4674-a221-edc49753622d", "sighting--717a2a3d-fb8f-40c8-b34c-a31edf53482d", "sighting--772cb120-5a02-41c6-b601-cf4306efd5c0", "sighting--17df9000-3623-4e49-83ee-043eb8348bd7", "sighting--fe8a61b6-9eb5-45d5-9a68-9a19e6cbc7d0", "sighting--fc31772c-1120-4709-a9d2-63b7956bacf7", "sighting--16a1e279-0eda-4f9c-abdf-415dc4dfd099", "sighting--8607584e-47a7-4cd5-97fb-aff546bda7cb", "sighting--a6e99d68-f183-44d8-8be3-298a7d869317", "sighting--b151b58b-0317-43be-8e65-643646502beb", "sighting--961ed882-0941-40e3-9cd8-509302976db9", "sighting--d2f7b89b-1b61-4e86-974f-b5da58b67ce5", "sighting--7a1399b5-b271-483b-bdde-7941171fb394", "sighting--63f5b77d-fad6-429c-a84d-3d3ae868894c", "sighting--a1865303-61b0-423d-9dcf-ef8bfbb2a488", "sighting--895a2234-d74a-4bd4-9c44-eb13360af442", "sighting--a56a069e-13b0-48ed-adae-2cc72e8d91c5", "sighting--9538159d-6392-435a-9464-e8dade6bee1b", "sighting--0f359f0d-54cd-4fe1-a97f-8dac20aac585", "sighting--ba328032-c670-4e4a-83bc-a94ebbca1dd4", "sighting--56cf61bd-cdeb-46c0-a0e1-c63eb153eb0e", "sighting--71c08457-cdd0-4efd-a2b2-75f8a90782ae", "sighting--fe16720b-3827-4446-bd29-e0ad0505acfb", "sighting--ede53f8a-5c96-43ea-8c1f-b03dbe2ebb91", "sighting--7f267c9b-d3e2-4716-80d4-949308edf83c", "sighting--036ad329-4d77-4e4e-8bb8-67ecbe26d4ef", "sighting--f23427d9-3c9d-48a5-a664-b7992f1c5b4d", "sighting--c8390d86-c974-42b6-a984-1ab0bf4cd346", "sighting--18312840-09c0-42bb-8bb6-27e3d1445e69", "sighting--472815ac-2089-4197-91ac-c4bc5a5199cb", "sighting--5da84473-21ec-4532-b249-96f48e949ac8", "sighting--2bdd8608-9bd1-4016-a3a9-70cc2e93c162", "sighting--0e5c2cf4-481b-4286-9fa8-a0eeae18ee31", "sighting--020f6b01-ef95-4f9e-9934-4a154eba0c4e", "sighting--3ee2470e-cd11-4817-9602-41ac8c268a53", "sighting--3ef23e73-af3a-4ed0-a187-70fd890f8b50", "sighting--43854f3d-e789-45bd-96c4-65ba739184d6", "sighting--27821cff-98d0-4154-80b5-b8560689e43c", "sighting--0a9cd345-5b8a-4b08-ac3a-6e8adcef8392", "sighting--c40e9c05-c0aa-4047-885c-4fe59352411a", "sighting--8a64f10a-2f44-41f8-8c24-d6d1f1d5d385", "sighting--eb9db58b-6d9c-4c3a-931b-24c489afa015", "sighting--7d8fd85f-b99a-44c8-9ef4-4a310996bd79", "sighting--1a5e7ff3-1760-4669-8780-6840858c07f8", "sighting--5f0c99c2-1748-48d6-a6e7-30d46eb88828", "sighting--f9f2e657-613d-4306-bf18-e5e6e57e5f71", "sighting--2548a832-6f14-4f43-8c61-506bfc47ac98", "sighting--809957bb-d8c4-4445-b172-c4b876885545", "sighting--6a74fb1a-3b84-41c5-b8be-1bc121f938ef", "sighting--c6f4c20f-a20a-4507-a425-0272a7476684", "sighting--490c5e5a-09f4-4bce-ba00-8898ef9d6877", "sighting--83a74591-0ef8-4ebf-a2fe-ee762b7cd569", "sighting--75df14a0-7cee-4b98-a405-c6af61b7f192", "sighting--847f9926-6faa-4ad2-8a06-249d65d11055", "sighting--9305e0a8-2d81-4905-b38b-8e894452db49", "sighting--8226f1bf-23e7-43bd-bc3a-5ab0571c8799", "sighting--deb92236-81a9-4933-8c1e-6f2c0b0ba5fe", "sighting--3b92f33b-9414-4823-b139-a23db0d45e99", "sighting--cff1cc63-59ff-44fb-82d2-763860c64925", "sighting--053b2615-7f98-4875-adc1-ae4c4fc0b6ba", "sighting--ab29a4bd-c4c9-4734-940b-be657529f1b1", "sighting--a152eb77-f00a-47fc-bcc7-97466a6df19f", "sighting--7cb11db5-9c4f-4ce0-83d7-bc6b3886822c", "sighting--b5420608-8cb5-45d1-a991-5983ce7955be", "sighting--a35abda8-2901-4281-8167-3d63efd61cb0", "sighting--b6f2a45f-7b7a-4539-9b83-8d8d2889206e", "sighting--b00de64d-a9cd-448e-8eaa-cb5041b44914", "sighting--ceb7d8f2-7e22-4db4-b474-6f406cbfb895", "sighting--c2372397-6fc9-47f2-8e0a-4ec789f25790", "sighting--dcef1adf-20df-4a7d-991d-d0f83900a1c7", "sighting--73e19b84-77b2-4b1d-9993-e44e0eca01cc", "sighting--ed45a300-36b0-473f-a4c5-8939c993b7dd", "sighting--dc1b5342-3356-4777-b92b-c51a3598a315", "sighting--6e91dba6-1cfe-49a6-a255-a5c21126af70", "sighting--82d2f584-d535-4d6c-8e0c-b53195eaec4a", "sighting--d14f0ed8-a20f-4530-9b2a-8ec91e807f42", "sighting--c1c20913-b84b-40cd-905b-e75fee8dd85a", "sighting--4bea967c-62df-447a-b201-f17e32a89b10", "sighting--7322f100-baae-4782-9329-19ddc468b807", "sighting--c21f6401-3391-45f0-a7d6-d2b56bafe7f8", "sighting--4eb66fd8-1260-409d-bcf6-07bdd53cd80e", "sighting--f4cb1eb7-24a1-413b-af76-894bdec406a7", "sighting--5b7387f1-ea95-4205-bfb4-69460a54fea9", "sighting--1090c517-8791-432d-9d34-ff5767467d6e", "sighting--f6af7473-d6e5-42fd-8721-9377c8f9b6df", "sighting--b81e079c-82ff-4b3b-8e51-21eb7da63c59", "sighting--c3eac9eb-adec-4735-8a73-f293a29c4497", "sighting--b4904f6a-c72c-479b-bd31-f9349654c724", "sighting--bd2cb9c9-dee8-4e43-add0-069f3e191a53", "sighting--fa6c0f03-153e-4ac9-a569-276c794dbcdb", "sighting--dbf67744-854f-4500-b6c9-576c6c830ae6", "sighting--1d5414fb-bb3f-45e0-a21c-747950cc48c3", "sighting--0bacfd5f-1e26-4535-8069-20de9b23ec0b", "sighting--1dc67fba-91a8-4e68-8176-112c5a810ae9", "sighting--6193ce3d-b6f2-4205-a2e1-0a8c7115ee1b", "sighting--4bab4f95-6ad9-41c0-ab03-a418620f1066", "sighting--9b0e79ec-78c1-42cd-aceb-c384e37bf0c0", "sighting--102b8f40-8f74-440f-82ef-c8bc97748dc8", "sighting--546d8d60-272d-4aeb-b95d-4bfeb6685d4a", "sighting--f52913a3-dcf5-452d-bffd-5259defc6f9f", "sighting--d19f8290-441d-44ff-9091-7f92e430e0e9", "sighting--e15c690b-f4bb-4108-9518-afe507ca3852", "sighting--5f09b750-570f-4704-9823-26cee8cb6305", "sighting--4e1abebf-9f2d-4650-bf90-2efe6bf0a29a", "sighting--eac96b3a-8122-4469-a41b-26debc997057", "sighting--3fc7d758-d740-4cc1-8f30-f59551c3d012", "sighting--0d5c7474-7c4f-420a-a775-5746d0976a6e", "sighting--20ada7a9-0363-4269-98dc-805a09b048e2", "sighting--4443439b-59be-4db8-bc20-e0a3cc710e02", "sighting--e7363912-d556-429e-b4c4-561fe6670937", "sighting--26cf1a46-d0eb-4c91-bb9d-b160e3a48135", "sighting--53fcb6d9-2718-4d89-89d0-4084fa76acd3", "sighting--c92d3f63-25eb-4fa2-923d-413ec07940c5", "sighting--05eb3663-3c50-462d-8dfb-618ef720135a", "sighting--09634323-7f0b-4e2b-8e32-fd0804ff2bc3", "sighting--f2f3f0b5-5824-434f-843a-0539043c14f5", "sighting--47d60ac3-5d2d-42d3-bfa1-acf1c6b98f2d", "sighting--48af7337-175e-469c-adbd-af1cf5c28d47", "sighting--2a11d4d1-03f1-4266-84d0-82ae83a9b3f8", "sighting--af7f29c3-a52d-4544-913c-67d46aa4c06f", "sighting--8637b30f-d523-4316-b6c8-fef5f96ceee2", "sighting--41d649cf-a8dd-4665-b22d-949374af5479", "sighting--e149ea16-a6c2-4e70-8e9d-d985d0e08ae6", "sighting--8f3c2298-6105-48d8-ab59-d73dbd60fdc2", "sighting--25fba88c-aa8d-41d9-ae53-aba415f299a1", "sighting--5cb8140e-6f0a-47b1-8f72-5f6e2bc1936f", "sighting--fabce65d-3120-463e-90e2-eaf6e127d0d8", "sighting--fe643ee8-ad80-499b-9436-95a7fe290bfc", "sighting--f5709651-3d0a-4dc7-b009-0d9df1c92257", "sighting--edf5198e-e250-4536-af29-65b28649f4dc", "sighting--2f6b3aad-49cc-4e8c-b4a5-0c6d8dd659c0", "sighting--8eb06d7d-df31-4008-85de-92c6c4daa104", "sighting--7bb7edc6-d105-413d-ac6b-fb8d7debbe9e", "sighting--f57a9e2c-4981-43b8-aca8-0c883d717f9b", "sighting--ffeda2d7-9a3d-4181-bf0b-9a4783f494e9", "sighting--1c707c3a-d281-4de5-8544-03bf3dd2111f", "sighting--d0a6594e-78d4-4b0c-8d3d-9977ce890147", "sighting--cdf4586b-dacf-4857-8723-513468c64290", "sighting--4d5d43bb-ad15-4dd6-a715-2452360f24e3", "sighting--ef9ecb77-68f7-4d00-aede-752f583605df", "sighting--6459d97b-b6e0-471f-acdf-83496cab1111", "sighting--f6e2c17a-3119-4f84-9300-ba3691932971", "sighting--4762c3d0-4582-4361-9851-61cad00c0be6", "sighting--cd7ba03f-7c0d-40af-82d7-df5c72a85621", "sighting--d30eb69c-5d65-4eaa-b54e-1755baf4fa02", "sighting--618e3c72-ce74-4e2b-9977-cb27ac244204", "sighting--4286971a-c49a-4db1-bc32-931a226d3ba1", "sighting--733554f8-0596-4f14-8fb8-4b8813520ecb", "sighting--341b652c-c6bb-46ff-ad72-9bf5c09476a9", "sighting--911c066c-d062-4ffc-8918-604668d395b2", "sighting--74e63f8a-e341-4451-a645-690764de988f", "sighting--35956588-fa9d-4455-ac10-9c3d9fc0aa95", "sighting--51e408fe-ce6c-4adb-9ced-2920a90a49fb", "sighting--c05a1159-e663-4232-8a67-ea27f8199173", "sighting--5a24c2be-6393-4eb7-b1cc-1f8d74cd66d0", "sighting--24b695c5-9810-46c7-8516-dca73c37a398", "sighting--991dee2a-a13f-4e78-8518-292033c5cde6", "sighting--cd993893-659d-428d-909c-76f3f0f73936", "sighting--879638dc-a417-4490-9c75-debd8bd1356b", "sighting--ab56bb39-d718-4b4b-bf22-ecf0d21a24ce", "sighting--1e8a5bcd-fcf8-4150-868a-fff9b73415a2", "sighting--c654f2c9-f5dd-4f05-832c-9f50a987d661", "sighting--98411861-9ba9-4335-a07b-610a5e806fea", "sighting--52fcb36b-6cb3-4dbf-99ec-279f77feafd6", "sighting--c7d916fc-392e-4b82-8a36-bff669eb5310", "sighting--4f355141-4f5f-459a-970c-d974b930402e", "sighting--11f80f3d-e866-4b44-87f5-7e792aba3bdd", "sighting--57ac1a0e-4713-4b42-8bb6-0c2b4f815a6d", "sighting--27425266-002d-4259-b310-701f6c07f0ae", "sighting--53966bbc-c5d4-4a6e-a627-26c667a7f3b9", "sighting--900641b9-858e-499f-9006-90979a75735e", "sighting--81f4dfce-b55a-4751-9b12-0002a1426ecf", "sighting--8368eb8f-2b99-4a66-9904-5919572ca301", "sighting--b4694af5-cab0-4334-bd55-77b526909612", "sighting--7f6c9fe6-2774-49b6-b78e-b4965fcf9dd7", "sighting--1a6c1301-1f2d-4364-bf7c-ba7a140ddd45", "sighting--4bd1f2b6-4ccc-4515-b8ff-41f033955556", "sighting--15eb1e38-b5da-41ca-93b7-c475b75df2a2", "sighting--876ab0c7-92c3-4cfd-92c4-14f625b384d0", "sighting--588a5c57-d549-4210-aec3-43d16134fc19", "sighting--ce675134-b922-4f6f-abb8-46912f4cee4e", "sighting--92af98c5-508d-493d-959b-bca0bb45a03e", "sighting--8269c558-8104-427a-aab7-e0e2adecab02", "sighting--ee963774-2e1b-42b2-9f5c-2a6e57a8b9f4", "sighting--52c53b6f-9aca-49d4-a186-f769cc397674", "sighting--6b1daaf5-8e73-479e-b158-647ebbe41101", "sighting--736241fe-2d4d-4d06-bfef-2b30d3265666", "sighting--c819fb41-37f9-48bc-8946-72f1f4d77fcc", "sighting--723d2e00-675f-4391-a080-bf05363e30a3", "sighting--3cc0220b-8785-425a-8da4-ab582ff3fb36", "sighting--ea16722a-c1c5-45ce-b415-cb2470bf3ea6", "sighting--41052e61-fca6-43d7-9030-3c3a30cf33c5", "sighting--6f701ec3-2346-4045-9f78-167ed955c8a8", "sighting--ae5f5081-5781-48e2-9ca0-73fd7cf4db6f", "sighting--68774ffd-2b02-4ec6-80c3-e3ea154a5a4b", "sighting--97133204-cb3a-4dac-8786-b0a9deac7e05", "sighting--429c983e-49e0-45fc-8421-ea72f59e0f99", "sighting--009fd2b4-08f9-4275-ab2c-5cdf1b883155", "sighting--28e781d2-506c-43b0-90f2-f0a80437f379", "sighting--67a0e1c1-d310-4ebe-a647-7bfed27a9bad", "sighting--fe8f08e7-afac-4fce-a570-f4222662a01f", "sighting--688b68b0-a788-4ef1-989d-29e5b72a4626", "sighting--12a9e9c3-1739-41a3-9856-810aa281ae5a", "sighting--ede34f8e-61b2-4814-8cc7-7bf9b2e8aa71", "sighting--d20a7671-c245-4811-b701-a937b1188c5c", "sighting--903049ab-bad9-48bb-a499-f1070df29f47", "sighting--439cafe9-d7d0-47d5-9c0b-5d6f2c094cac", "sighting--51611892-1e67-4f0d-87fb-f88b12015d94", "sighting--13956bfd-5fc0-465b-a7ec-b73911199757", "sighting--387957f3-d647-4805-8616-67407a3b66f3", "sighting--3ab0aa29-84b7-4b98-90f3-43b9ae0f7f89", "sighting--2937db4b-9059-4c3e-86e0-0ca3473420e3", "sighting--5eb3e577-3ede-470f-b22a-4caf9f4b496d", "sighting--a8afee1d-0664-4f18-bc41-0e072e35daa7", "sighting--d0065588-711b-4443-9d3e-3b6f1c1893e8", "sighting--09752b40-a2d2-421b-9396-f3b4c4de1949", "sighting--ebd5b0bb-de66-4b9e-abc0-7d3e0e2e2de5", "sighting--43a24bed-bfc8-4c76-b96b-2cda7ddf035b", "sighting--0a5cf763-370b-4e55-a98d-e9a2e2d22859", "sighting--ad52abaa-56ba-4a60-912f-ccfcb1b4979a", "sighting--ab10b272-80d2-48b8-b499-f5c9caf24db5", "sighting--c9590e93-d609-45d9-b6d8-20da63a3a90d", "sighting--d9d9fa8e-f31a-4bfe-8360-8ee0a2ab6f61", "sighting--83829f93-8198-49df-85c8-80d8df5188df", "sighting--3b5a345a-a370-4e96-85dc-c2c4973aa1aa", "sighting--1f06f480-0312-400f-926f-b3c87d480522", "sighting--b6c1eb3d-0697-4e80-9193-ae01052b3624", "sighting--45df8624-0b2b-426a-b784-ef1a1cb43803", "sighting--9bb3c789-0f24-4631-97d0-b2956fee2557", "sighting--6287753a-6356-4dd0-9718-baf7c2cd7a54", "sighting--12da22d6-f2c6-407c-b011-e3435ebc1501", "sighting--8664b3a4-e278-43fc-b643-9dbb250d1105", "sighting--7be59e5c-fa00-4275-bec8-9755a1808e71", "sighting--422b90e8-05fa-4c24-aa74-2f477790a56a", "sighting--c7e920f2-a066-49aa-bd72-aaf60082ee89", "sighting--7599c501-bcc6-4ad0-857a-1e34d27fd11a", "sighting--e8e6b67c-6141-4a94-be56-f89019f72a2a", "sighting--9f11ad57-81fc-43b2-89d3-eeecf13c631e", "sighting--51c27aa4-6c41-46b5-91c4-9fb7a44ef69f", "sighting--eea4765a-3acf-49a0-9015-c8ff2e460a54", "sighting--beae3922-4ee0-475d-9832-06d8f38aab96", "sighting--1ccc2239-c0c0-470b-82ed-da240784f54b", "sighting--e849b551-bca2-43d3-82ce-061197914bfe", "sighting--2dbfe0f7-202e-4854-b4bb-c395d1789772", "sighting--3a5c792c-bda3-413f-8f2d-99b30064260f", "sighting--90eba258-26b3-40eb-95c8-1df4233012c7", "sighting--7acbac7f-7a18-46c0-84fa-fae21a687489", "sighting--43fc2cf4-db9c-4552-adca-3a73f5b3ea14", "sighting--f9d31d4d-1465-4a35-b512-86fe32ceeacb", "sighting--fc807614-c369-4d7c-a75e-ca51bde094d2", "sighting--17ceebb3-b715-4eb8-9cd5-f77ca3b8c8af", "sighting--6f927cf1-6e9f-419c-92a8-8a3fe6a27731", "sighting--24cd1d94-48ef-4189-ada2-1c04447679f4", "sighting--1aad16f1-54d0-47e9-9df1-94d20fa9cd1b", "sighting--2d40e954-0418-4d13-ab61-877bc3c7e452", "sighting--4700e7a8-bd83-4557-bbf4-d5b14be827e1", "sighting--b52c6122-60c7-42d0-8285-487cf738bc48", "sighting--70b9def8-b0e5-4e54-b682-71bebf7711f9", "sighting--82939e44-3032-4d1a-b7f6-0ee9f6bcde87", "sighting--8546cedb-964a-45b5-b369-a8831dea598f", "sighting--f8c05fa6-a9b3-44ee-be46-8a75c294be4e", "sighting--d9a87bb7-e9f6-4056-bdd2-b84f6ae47645", "sighting--c49d4ce3-8349-460a-b33b-7f2ee418e647", "sighting--7e480d2f-0108-4720-a363-24591e4113e9", "sighting--7c5bd5e4-468b-47ba-9e35-27b0cadfd9d9", "sighting--cb185a77-2e71-478b-a054-8e8ef6eee805", "sighting--0de453b2-709d-4e9d-b6b4-8b7391b519e7", "sighting--032d4bcd-37b8-46b6-8fc8-a54bd16110d0", "sighting--b14a3cd9-902e-4dd5-aa81-d8bdf1a73410", "sighting--b20091bf-a03a-4ab8-b1c3-712a9884769d", "sighting--5d612b14-065c-43d8-a31c-37ac79803f7f", "sighting--b7d410b4-d0f5-4149-be95-b4927e29d770", "sighting--dbfb6c18-2c79-417c-8837-ee962384f461", "sighting--76451bec-06c8-4e56-bce2-f590cdf2d254", "sighting--ab62e480-245a-41ab-b2b2-1500c2836545", "sighting--00479444-7b02-413f-a3fc-3cef6dc243d0", "sighting--cf01f033-13ff-4cd0-acd1-09fa4ec72449", "sighting--d112bf77-a9c1-41b2-841e-a3deb2d81b8b", "sighting--3c2a7948-ffce-4b84-9d58-8dfd0df3b35c", "sighting--39359228-9738-4727-9d22-850677ace488", "sighting--44c7b4de-b38b-43cd-9815-44dc3ced7e89", "sighting--caa330a2-7501-4592-b0b5-c054958b65d8", "sighting--6c6211a0-7b94-42d4-a37b-8b324e0648a4", "sighting--02fe4cae-d19a-4340-a575-dba40105576e", "sighting--6b78e0ae-fbea-426b-909c-72b0e4af1d23", "sighting--69179a25-9167-4bd2-915d-7f6a28a4c686", "sighting--73eac5da-923a-4a2c-b2b4-ffe945158615", "sighting--679f076b-b4c9-4ace-8cf3-8eae4024b22e", "sighting--e48fea6b-b942-43ed-b555-eba4359f12da", "sighting--9ec8373d-a10c-4603-bf5c-22f8b15a1b23", "sighting--a8ff2961-4364-4de9-9544-f4fb1691cb4e", "sighting--6a806a2a-8702-482d-913b-7f8f26e64a3f", "sighting--f91c79fc-fc37-4c0c-80eb-fd66c89e816b", "sighting--bd156cf5-5735-465c-bfe2-83bce6ab825f", "sighting--3bbf92a3-a22c-4686-8366-575f654b9b92", "sighting--65c0a84e-089a-4440-bbf4-05af7596f116", "sighting--9660ab29-00e9-4e6f-bc6a-9b960f9860a2", "sighting--86bf14c7-5876-49b7-af3d-956d246de0ff", "sighting--3b86517e-bcf1-4c14-b9c2-30d01db284e0", "sighting--7bd1f025-1d90-4294-b53b-12bcf074788e", "sighting--6459849d-377a-454f-b07e-80775d413dce", "sighting--04e91c3d-88ca-471c-96bd-7f95025f07f0", "sighting--e21c9892-155c-4152-9ef3-089f8666389e", "sighting--21fcb53d-2a71-43a9-80e5-e9c6d1cd6827", "sighting--db529f88-a142-457d-9f68-bc3e41a8c507", "sighting--215e896d-9e16-4b42-8ece-3aed24eedd7c", "sighting--61c21810-588b-4cd7-a34e-4337e05bb166", "sighting--39a42984-9787-44c6-b9f5-404135c6f6a8", "sighting--c52ce337-277f-4c5b-b166-f7a6818a4901", "sighting--4b20bb2c-a2d6-41a3-9fce-14c4f7d9dc7d", "sighting--f20da181-767c-408c-ac36-d7ad899f5bc2", "sighting--a685bda8-9802-4c0b-a9bc-a8a46c239512", "sighting--69dbd5e6-047b-4842-beeb-a365e7b405fb", "sighting--33f32ed3-5b6d-4cb4-857e-3a5ef7c417ee", "sighting--830e892b-4676-4521-b3cd-53346f3e43a0", "sighting--6fb29968-0483-4dc4-a731-627eae30909e", "sighting--6f4875da-7fdd-4bc9-bf6b-a6a5257732a1", "sighting--0f2462cc-bb07-4ace-afc2-8df2f1fa7002", "sighting--56c10630-21e8-4968-9800-18ed66aad06c", "sighting--216c7a80-d0c9-4073-b279-2930c142356f", "sighting--a58c535c-ac34-4d2d-a36b-30da90895fc5", "sighting--f793e441-c5f9-4279-811d-7026b8928b46", "sighting--0c22e414-674b-40d2-9f74-ff88d1f43975", "sighting--5929029d-22bf-44b3-a8db-00c812ec13c2", "sighting--3b7c4811-e8e3-44c9-996a-f14a82d42d09", "sighting--2afcf7f0-6ef3-4a63-9105-f1c4e7a651a1", "sighting--64ce311b-4b82-459e-be8a-866cc320bba4", "sighting--cb557222-b5ed-4cee-9be8-9d6363d60b17", "sighting--1190a2b7-9c8b-46c2-bf68-f67440936fa2", "sighting--95b1ac3d-a82c-48bf-bec8-2732137377ce", "sighting--9ccdc81e-366a-46cd-9579-98a3e0381e72", "sighting--17f9ccb3-0934-4264-8349-5547fcb53e05", "sighting--f0454efc-4b22-46cd-9559-5f78e58bfc3c", "sighting--91fabb58-69d8-4a94-a435-f981e6ec6c25", "sighting--92ab4c7e-86ad-4fd5-951f-34be8494a8ea", "sighting--f75cd935-3b46-4e78-896d-b116b372a290", "sighting--035f13e0-5dd3-4e41-9614-c777cc3447b3", "sighting--7789fcac-a876-4695-8f84-ef1067805c86", "sighting--1b2988dc-aa97-4f80-883a-576f29364c90", "sighting--42583353-5e58-4984-a8b8-b2c26009b5c7", "sighting--c5792312-c444-4163-877e-f1c31117499a", "sighting--463dcca8-1176-4d56-b464-4010e672c7a3", "sighting--eee4e6a7-8208-4c7d-9de4-c79710dfc366", "sighting--765c505d-b0f1-4ea8-b503-344cbcb0c1d1", "sighting--5d14bb93-d96f-4551-93bb-0779686b9817", "sighting--c245f2c0-1f9b-4662-951a-51c1de7d1072", "sighting--eae3761c-a4bd-410c-86a2-58b50fa11b94", "sighting--d0efc5ac-dc87-4ab0-9039-4ef21861fd35", "sighting--1200369c-bd0f-4472-8289-d1eb6be9797a", "sighting--a01737c6-a688-42fe-843e-66fb0b333ee9", "sighting--659d6459-467b-45ab-93ab-91f8510a2d7d", "sighting--11846f00-2e2e-4325-a974-32f6283ec0d2", "sighting--14eac9f6-fda9-4cfd-8620-1afa9c9a3afe", "sighting--3fb90a54-c278-4906-b95d-706e34eeab75", "sighting--e4b4a1d2-e488-449d-b5ef-18f408d70cdf", "sighting--dd2f6074-1781-492a-a209-d3259e75e122", "sighting--d72f5eb7-36e9-47b9-87cf-4f4ad62ff10f", "sighting--e5cb422d-cf85-443d-88a2-7d647a66a345", "sighting--6fc2b94d-4f84-47d5-b72e-69d7dbb93b79", "sighting--be8a0883-7054-4193-98b6-22acc9629d8a", "sighting--6a1530ac-9df3-40bd-922c-078b524065a3", "sighting--712994e0-fad5-4345-a701-41b275d61e58", "sighting--8f65a710-aa1a-4f32-b4fe-1aaadcd60dd2", "sighting--3064deae-b301-4ea6-970c-54ada9cee665", "sighting--64cae178-c7fa-4dea-8f12-5c7b2834ecea", "sighting--47716aea-8527-4054-a574-ccdecbd2d6ee", "sighting--c7c976bc-b956-4746-8ce6-411026f687e7", "sighting--493ec56a-8b83-4137-ab1a-6cfddf3d683b", "sighting--60e24e33-f918-455d-8aaa-0ff9cc2a7ee6", "sighting--a3bba624-b8f1-42c0-bc3c-e17e447af88f", "sighting--de0d7577-2354-478d-a823-5e128515560a", "sighting--3bdca29b-7f2a-4b76-b82f-6d01de3d5785", "sighting--b62c9245-69df-414e-97f9-4c1058586fc3", "sighting--2240ed89-1878-4e09-9390-1cd224c30de6", "sighting--15413b87-9383-46c3-8bbc-1432e5423eda", "sighting--8c1fa6cc-727e-4db4-9dfe-cff7755883ea", "sighting--50161b1c-4d30-45fa-b8bd-436dd9e81d34", "sighting--cef67bda-48b8-4a2d-947f-1f63f4ac6cd4", "sighting--15980374-f662-480f-8acd-5c0a3d7319af", "sighting--d59beaec-9523-4e9a-909d-5f0a22601715", "sighting--d4513487-136a-41af-8cbe-f33568dcdaca", "sighting--0b92904a-7431-4049-948a-11d2d169f8f8", "sighting--991ed4c1-1c9e-48af-857e-61d30f7b52b4", "sighting--987ecf9a-a7ce-4b5f-b3d3-492759f52e88", "sighting--fde27fa5-8601-4370-af84-7400155bd651", "sighting--a5cfba97-bffb-4828-bb1e-6da20edd44ad", "sighting--6843860d-3cfb-4a91-a55e-7de4f82657ff", "sighting--859e82c0-052d-4358-9cc4-1ff787a852c9", "sighting--45a2937b-03f9-4a15-ad1f-cb2b49e2cd09", "sighting--ff688091-f12b-49e0-8d82-d0897d2d8b69", "sighting--c09f082f-b2f5-45db-87e3-687b05b0d3c3", "sighting--45c61803-a31a-4972-a8fe-92cecef1fc13", "sighting--abf62bd5-3877-4fe4-8837-55d43e4c0d5d", "sighting--e69543cc-8eb2-4176-8998-4a9f5d5435c6", "sighting--737e7fef-4a4f-42db-bf51-f82d8f3e492f", "sighting--e919c06e-b4ef-4abe-8d79-818ba7b20bd3", "sighting--d0976f92-f92c-43e4-8313-daeef189b7f9", "sighting--9147e3b1-b96b-465a-89c5-cd55de0ffffa", "sighting--65cca44c-e867-4b67-bd0b-02c373804731", "sighting--bc54f0af-85b8-4228-bd0d-10623399a79c", "sighting--8e26eeaf-aed1-4e8a-bb9c-13fbf413a832", "sighting--7e0bf6c8-7a85-4d02-ac68-a872789ca617", "sighting--79f32a69-2647-41e1-9b2b-355cd3751c8b", "sighting--46845c42-2e73-4e11-8435-2d4d0a30b7f5", "sighting--c61d7298-ca77-4ebf-82f3-c737ac959181", "sighting--da09b42f-edfc-4604-905a-7509ef201910", "sighting--438e35f3-4b63-4071-90cd-787e1bad2bef", "sighting--f2e289b0-923a-4457-b841-825293447dbf", "sighting--2982ef8f-3a6a-4066-90b9-dba0d9cee85e", "sighting--39dc902e-d6ed-41e3-96a1-f2e70ba5ae94", "sighting--d7ce210d-b2bf-4c6c-89e5-7aa2c2927a0b", "sighting--7a676691-867c-416f-8f24-ab78ae4ace17", "sighting--409350ea-5a98-4c83-a6b8-6ab6992ea5ed", "sighting--4d328c66-db3d-4749-ab16-a3fbfa62953c", "sighting--a86753cd-952c-4e9b-950b-54636679a9e7", "sighting--7388ed02-fe74-4a9f-9acc-736d2cb6df31", "sighting--8adc2565-7d1b-443a-926a-95a412637f73", "sighting--3893528d-a591-4f0f-b04c-e13ef0b2e81d", "sighting--619b45f2-da3d-4303-b6c8-d986f0fd078e", "sighting--6770b83d-0061-440b-b1e5-57545b62509c", "sighting--38061263-1978-49af-9155-eeead6ef292e", "sighting--fad75d18-544a-471b-8d18-1f254ad5bc0a", "sighting--6bbe015a-c2c8-4ad3-a46d-60dbd210093e", "sighting--ceddca58-738e-48e6-8a31-e299b73d97c8", "sighting--d3ae317f-3ba4-4fae-9e0c-85dd23c5dcae", "sighting--38932d8e-cb66-4e58-acfa-21cb559a432f", "sighting--627d3f3a-c6f4-4a91-8736-4df8898b4584", "sighting--5b525072-f7c0-4f33-9000-b87be0f0eb43", "sighting--a60d727d-118c-4bab-9cde-bc9f4df9b50c", "sighting--287e5401-3bd0-4aec-9ffe-10f8f8d7e629", "sighting--09c631b4-b78c-4670-b425-ffd135a45128", "sighting--25747405-2b5d-4bf4-bee5-d6839043f5ec", "sighting--95307823-273d-4b98-beec-d66a4b826c09", "sighting--18a945fc-9f04-42b8-9d44-7dd01c6f895c", "sighting--56943180-a51a-4879-81f7-9947dd0e42d9", "sighting--d5ba1dd4-09e9-4b8b-befd-a795c15266f6", "sighting--976a8c22-52d2-4bcf-8397-a42f20c0c723", "sighting--6866e26f-adc4-41d7-83cd-45c85d13718b", "sighting--7b78fd79-baf6-4665-8c98-52fc9df974c7", "sighting--5c97f6a6-1c33-4b2c-9eb0-6fe794dfe40c", "sighting--3e0149d9-8e6b-4bb0-ade3-16d301a97db5", "sighting--c509188e-b151-49c8-aec3-870c6a84a4b8", "sighting--e4dc6185-50ac-4163-ae1b-4252e4497a58", "sighting--35e535cd-d25b-4a06-b7d0-2ee2f8a35023", "sighting--6458e726-5c3c-4d1e-a27e-f95536946355", "sighting--3e98fe67-cc8c-47b6-b5d7-e239702db961", "sighting--01ab4d9b-9b2c-4dfd-b1b8-fa4d47effcea", "sighting--112620fa-b925-4689-b660-348ab87877db", "sighting--e149dcf2-a36c-4ee8-ac3e-7732df7a2a52", "sighting--9673d5e8-1b3b-4c74-b0b8-508483255199", "sighting--69c4ca9c-1fba-46b9-8ce3-a6eeb11049b8", "sighting--edd132f2-2302-44cb-be84-666f7a49cc27", "sighting--2aadc970-8347-4a26-af41-65591d495f77", "sighting--b3be1531-ead4-4a87-8dae-60ce3f271664", "sighting--97714b09-97bb-43c4-b7e5-b928483339aa", "sighting--ef0ec6eb-ba06-4d5c-9efe-dbd1f05607ac", "sighting--50687028-7222-4cb8-ba8f-0afc3e62efca", "sighting--ce90e17b-ab81-420e-8b5e-c78e15f3b68e", "sighting--caa0bc91-0ae8-4d9b-ace8-1411c086aa19", "sighting--3cc2f69f-7226-418c-b01f-57f5528e79ee", "sighting--af9cc40e-e9d1-4ca1-9e90-6609b79ecd7a", "sighting--14d9dda6-0b85-4e66-a5a1-6ba605f72e3d", "sighting--d0f4ed3c-8514-4ba0-9dee-41453014be78", "sighting--16a5fdff-c8f0-4763-b561-0cbb4ecaf9ca", "sighting--39e04e55-26bc-4922-80e2-fe7c5f3c86ee", "sighting--37de5e46-6fe6-4cd1-992b-7426934cacf8", "sighting--cae54967-6fdc-4e31-803b-64a7445e27d6", "sighting--3286e0cb-c816-4c76-a8a8-381957244bca", "sighting--2ba1f1f2-715a-4c8d-afa9-9df06678bbc8", "sighting--9525f679-b0ae-4415-b0fe-d9b005de54f1", "sighting--dc5ebec0-258f-4a78-982d-2d594de30e5f", "sighting--0c29a7cc-d42a-44e5-8d4a-0766a18364e8", "sighting--1eeb9522-f8f7-4660-a7e8-e9884a048998", "sighting--25db6bd9-fac5-40a8-96b5-42135297a89e", "sighting--245ad560-a744-42c2-aa79-4b6e613d7074", "sighting--be938662-3252-4529-85ee-149b242b9f52", "sighting--aefadca7-bb94-410f-a90c-63d81bc7375e", "sighting--0240d5c0-eb48-41af-82f2-733bf4a4a40f", "sighting--68cf3d88-e942-4813-9391-613a97c88d02", "sighting--a4a2f554-059c-4eba-bb63-6450ff99acd5", "sighting--cfc9a1b6-90b2-44fd-8080-ee502e16f9e7", "sighting--555c295c-94e1-435a-a5a4-3a3ae966bf40", "sighting--0bf0dbc7-160d-4b31-b589-cb410d65f721", "sighting--6ce1d813-4add-4019-9393-635316ed4340", "sighting--93a624f7-abf7-401e-ab12-53d8fc462a89", "sighting--0e48b791-a78a-4107-a1d3-851c69a659bc", "sighting--82cb5bb2-5c62-4045-847b-14ecffde07fc", "sighting--dfc8c049-4340-4fe7-bb23-1ff0842f47d1", "sighting--51f1a6cc-a769-4eaf-ba2a-7c46bb1c288f", "sighting--89869e1c-fcd1-4141-87eb-10cddda1b659", "sighting--d462ea72-c230-4ca8-b8f8-11fc287cb3d3", "sighting--68831774-e00e-4f06-8efa-734674c453e1", "sighting--12df30d1-a7c2-499d-aec7-e78a8d0d43d6", "sighting--4b2cc4e3-b88f-4505-8f5d-b29344921fad", "sighting--b0db0b49-fb1b-482c-bd4e-ddf5d947af1c", "sighting--f2b75387-4196-45a2-b46d-11cd830c0991", "sighting--58801911-735f-44b9-98da-2d96ca82b07f", "sighting--072ea237-e95d-4ef1-949d-25bcc3833118", "sighting--2579161a-4bbb-4324-b146-3849f5fb3be0", "sighting--8ccd3ad8-3d5a-4e05-aba9-7a83ac646c64", "sighting--18b438a2-1a4d-4aff-84ba-4d967781e247", "sighting--f321d8d6-5c70-427e-824a-d2abbed7d963", "sighting--62e77099-8c53-4817-afee-ab6e98f44d00", "sighting--9c6570db-0d09-4188-967a-7572b24d33db", "sighting--f1012ee4-87db-452a-9126-696ae9ce81cd", "sighting--b0eaf576-b3ee-4581-b0de-d3aa81a47348", "sighting--d1eb7ea3-24f9-4389-b5bb-3af5f58827c5", "sighting--b1006b19-dc23-4961-8a3c-521c5e978571", "sighting--4d26af84-662e-4538-9df7-fba29cc4ae13", "sighting--86eb9071-422d-48fa-ac22-bdae5245f309", "sighting--c1f4c23e-88e6-420f-aee9-2b953baa1821", "sighting--ba26d574-54b1-44c2-9320-109935662cae", "sighting--55eb48c0-b4a0-435c-8810-593fcaaf663a", "sighting--5ee7f4c0-a2b5-4a19-97d1-78f28d932594", "sighting--489a1461-d0fb-4148-ac7e-d7033f664969", "sighting--f9b5ef15-e78e-4847-9dc9-17f9ab2a7646", "sighting--224851af-9a8d-441b-a51a-fcb41f6e08c9", "sighting--bcd5536a-0b1d-4e77-ba62-83b0e9972eae", "sighting--7f4c45c6-4fc5-4ff6-a150-7b1d5a7b60c6", "sighting--2efffa1a-b859-4c0e-9de6-974fb4da6263", "sighting--fe9be83e-ea5b-4654-9985-01b2440726a1", "sighting--5d281c67-1264-429d-88ca-a3456f8d11ed", "sighting--e9af8913-0125-4e65-883e-1b3ff719ac62", "sighting--6ab65cbd-6de5-40e5-a3bc-26e2b6e4f00d", "sighting--b3a0bcc2-f464-44f0-b16f-dafc3f1f8ffb", "sighting--b10c9fed-95bd-4498-be85-94281df75fe3", "sighting--e73e792d-cf7b-49ab-b1f0-7e71b40153ba", "sighting--7637b869-5302-4635-8430-b38662d36616", "sighting--20cb02d3-cd48-4d7e-b7a0-c1c966286378", "sighting--078d40b1-d85d-4e6f-95a0-df522782a946", "sighting--e60b150b-a491-47a4-b905-1f389f13be94", "sighting--1e02190f-4d15-40a3-8dbe-c6bb784c6d0c", "sighting--98265937-a772-4b4f-82c3-1370e1b7703a", "sighting--777427d6-986e-4850-8153-eb2e47554115", "sighting--1e4a808e-f255-4a19-9306-be884c9158d7", "sighting--a7d5e8bb-6422-4126-9561-5a102de8ca29", "sighting--de146de4-942c-42b2-a922-b7bb68a7b23f", "sighting--90408724-6195-41c3-9e0d-36e9594f6b47", "sighting--82cb12aa-098a-4947-bec5-386e78e76c2c", "sighting--3a278ad8-a6a0-42d8-ac0a-b813110e07c0", "sighting--b05b2e66-c8ab-43bf-86cd-d390b9df70d5", "sighting--b13280db-0a97-4688-ad3b-b5ecd150121c", "sighting--add8cfa7-4acc-438e-938d-e6b3a3b3e418", "sighting--8208c659-59f5-4dee-90f6-323e4fe93548", "sighting--4bdb5dff-66db-4f8c-b647-2b2f3d499b1b", "sighting--9f8037bb-d882-4be6-ac66-06a95629ff86", "sighting--b33cd8db-e914-402f-88c8-c0d41d60f63b", "sighting--691633ea-9e6d-4d57-89db-bb776e65e2ea", "sighting--8bce840d-ad3b-4e42-b997-ee9d44d3e547", "sighting--32935ed9-feec-4009-896e-b6c232829733", "sighting--973bb6cf-f080-4b28-bbeb-83b908a77a65", "sighting--50c16d18-9142-48a8-a674-667961385adf", "sighting--5b473079-bb57-4340-b87a-dac96d86156f", "sighting--f28414f1-59d8-4037-a9ad-f98f68f50897", "sighting--789c6055-2d47-423d-9428-843c92ab25b4", "sighting--8502edcd-1610-4160-82a1-a4d77986b7b5", "sighting--1d02b32f-3ae8-4dab-b93d-43f1cff4c4e3", "sighting--56c54af4-0aae-4428-be09-9d53365626d4", "sighting--bdd84096-60ce-4eab-b3a3-a1753cab8333", "sighting--7e0e853a-49ce-4c43-acbb-0249ae855866", "sighting--87784043-3776-4073-8d1a-43a777a0368c", "sighting--73054594-f8be-451f-9fe6-b0c51c154d58", "sighting--17d5c67e-13bc-4ffe-a517-646aa9f7c781", "sighting--b5f45929-a36d-4f01-be83-17eade011fb0", "sighting--82c5cc53-b27e-41b2-bf5f-f07979521e8d", "sighting--4c1148ed-4111-4f91-a1b0-4dbc4b1f8677", "sighting--cefcef1e-480a-4912-ab9d-2527d6a29086", "sighting--4023d4c7-5e35-4932-8934-c24bdc217518", "sighting--1a631236-2e1f-48d8-b5fe-085121c9e4d6", "sighting--c1a618e5-a336-41b2-9715-1e69d1765060", "sighting--b3b0dc95-5881-49a9-aaa7-551c484ecc4a", "sighting--7fbb3a9f-7b0b-4ba1-bd35-3f4bf8c93982", "sighting--ada08623-0a7e-43ff-bede-fa067270318d", "sighting--999d38b7-4723-4abf-a4a3-eb3ad7d52015", "sighting--959dce99-bd8b-4995-889a-ba699d74fa2e", "sighting--369382c0-984a-4d33-812f-7badb86dc015", "sighting--5ba45831-61cb-492d-bd55-e29da8159f6b", "sighting--de84a713-2fef-4adc-b072-987f7fd43cfb", "sighting--b87e3c05-8581-47f2-b26e-e6684dea5143", "sighting--501ff0cb-3e81-413e-8677-47cf55340e24", "sighting--7f3a6191-25e7-4506-b6d6-e1dae322a860", "sighting--3b077f8a-3ffd-4577-845a-33f990a9cb05", "sighting--18f0520d-24ff-4505-a004-4b76b9f791ca", "sighting--0de300cf-7694-421b-a982-e7e00a780cad", "sighting--a6ed8514-8dc4-466b-a838-c68f329b86a7", "sighting--a34b3fb3-c3c7-4f6e-b6de-bd480afb14a7", "sighting--f164f5a8-83b8-48ba-9d15-e0ece9cc7775", "sighting--d68ec31e-13ed-4baa-831d-4b06fcc4ee65", "sighting--f104da13-6d06-44ba-9ab4-18ec35baa517", "sighting--584a6009-a853-4917-b18f-ae0771bdc8ad", "sighting--d613751e-c32c-42d4-8bbd-249313ad10fb", "sighting--bf7b53b7-18d6-4768-b89e-53e1937a0f74", "sighting--c5234692-a27e-4277-9aec-e4ddda399bde", "sighting--19474ac9-8444-4c36-87c3-514ff1d0c764", "sighting--90014c02-b7ca-4b95-9f56-43fb6b50a1eb", "sighting--dbe96d5e-f2c5-4f2a-bd4c-5e19e096febb", "sighting--98d9cd2a-23af-4cab-aea1-b9065a66348d", "sighting--ba340f26-ac38-4db2-aa77-1b68a3146539", "sighting--08462185-8275-4f15-b609-ad937dbb6d5b", "sighting--813e8ddb-3e72-4925-ae9a-d24ebc427027", "sighting--3a237c80-d302-4a89-a541-fc1294f86026", "sighting--076e4454-eb73-42fb-806c-0d9bcb14c1ce", "sighting--86861a54-0e7c-4e2b-b6a3-b9e03c5ed60e", "sighting--8d010605-6a0d-4577-ad34-dc50333cb82b", "sighting--8e431b3b-4d9c-402c-9b1a-6de16fb6bdde", "sighting--f6bc7d5a-f0ac-4ed8-83d1-e5d1d3668ecd", "sighting--ebaaf02e-1db8-4cbb-851f-ae8d6c4c4f54", "sighting--dba2eef3-7bdf-4575-b326-021ec2590aba", "sighting--dcb698fd-af36-4b1a-9207-4e3d09fb3348", "sighting--b65ad3f8-0f9d-4d6e-a730-f514003e741b", "sighting--dba6013d-f0f1-4dba-8964-b631d39e0742", "sighting--9a292089-dbca-4782-9d27-3a39d74b081b", "sighting--51021eec-ebaa-494e-b800-58cae6a605b5", "sighting--6558f926-11ab-4bd2-9ad0-e5f2bf0353db", "sighting--bf364ac8-6dbd-4812-81a0-1238f3fd2711", "sighting--59ea34f8-56b0-41ba-a1fb-33ec878fc716", "sighting--92001339-9ea3-4708-988a-36fdd4f87db0", "sighting--50458f50-7de9-40c5-acfc-d9d982cd4dc5", "sighting--56a26128-82bc-41ca-8d67-19f86eb48ae9", "sighting--f32fe171-6068-47f7-aa84-1a74ea2a1c56", "sighting--f587b953-a67a-4593-9223-34592b302314", "sighting--edbc8590-4d2e-452b-9ca1-d27797998a1d", "sighting--d2727f6a-aa7b-4bf5-b277-c410c61f0381", "sighting--260e09cc-589d-4f68-9c24-171ea0166adc", "sighting--87d1f152-a86b-4e5c-abda-0eccd1df93bd", "sighting--dd5ebe27-1283-42c4-9f67-804cfa5ae61f", "sighting--6ba689a1-f2b0-4a30-b919-7c4ba4e62a06", "sighting--8caa4846-8f4c-4a2a-9604-176a2826aa5e", "sighting--644da742-1fd8-4610-b1d4-3236fb15ef9c", "sighting--b847f08a-925b-49f4-9aa4-07e900ea6592", "sighting--e4cf400f-4e26-448e-8c72-3b4e7406549f", "sighting--75e93564-b1d9-4039-8fba-f6eaa063ba1e", "sighting--7e0c8a51-c284-4aff-8e7f-3bba5317dfb5", "sighting--22a594d6-50ea-40ab-b289-b3bba35a920f", "sighting--3433279f-48eb-4094-832e-f9a87814b893", "sighting--8b8da292-f676-45ff-a877-c3b431d5ff72", "sighting--25419eda-de2e-4c37-ad92-09dd932751d7", "sighting--53421b57-13b9-4b0d-a106-845621c3f00e", "sighting--16020cc1-89eb-4eee-b6a0-b907e6a28ead", "sighting--0d468c89-0b29-4fab-8499-24a1397b277b", "sighting--dd5ff119-112f-4a73-ba41-f5d12d5bf5b4", "sighting--c56a9b7b-4cba-4495-916d-834a28ada9d0", "sighting--3e8668a9-4017-4246-8618-4a389fe8196b", "sighting--875652ab-ed15-4669-94e1-18d7aff94e50", "sighting--cb3cdd2e-86d5-4a44-b330-f2a552365688", "sighting--7eacf7af-9a37-4dbc-8386-8de19ab2f4d4", "sighting--5015f1bf-0113-4e19-862b-b67ea30147dc", "sighting--9b5fd42b-2a2e-4afc-8d16-07f8ca784624", "sighting--b8e8d48e-f983-4698-8d34-9ef9b490484d", "sighting--043ad183-7ad7-4cbe-81fe-1dd6aadb0edc", "sighting--9dea05a3-fb7c-42c9-86ea-34fba852a687", "sighting--2506869f-6127-4056-b99c-97a601d7c759", "sighting--f101ccb0-1d4c-498a-a16a-9feca6b0ee4c", "sighting--59258b39-022b-4e54-a1e1-77ccbfefdfd7", "sighting--92dd23c8-8c5a-43e1-abb7-8142b6046fc3", "sighting--09938f16-a601-4843-9347-e7583a3f0202", "sighting--c5f33e03-c05e-4782-a74b-35ce2a5cf095", "sighting--947228c9-4c13-4930-9884-75440bec0693", "sighting--3e53d942-4dbb-4ff6-85da-8d3a6e03f38e", "sighting--f7e3ddb7-7646-468c-ba6e-8c6b52858c08", "sighting--22e38f16-38db-404f-9072-a35bdd9530c2", "sighting--40c97f14-0017-426b-a069-71345a9fef74", "sighting--6d89b290-bbad-498c-a961-3aa43d2cd189", "sighting--fceb1608-88ae-45ee-880c-eb0bd185311d", "sighting--b7edc12f-ea7e-4006-a353-71e6aaacf7bf", "sighting--6716f7b1-a8fd-40bc-b6fe-a912e002cf8e", "sighting--d1857a0e-162f-4930-b100-7ed2bab51619", "sighting--b8bbe8ce-bfdb-484a-987e-04bc9b188ab7", "sighting--a5968b07-ac0e-4041-b8fc-ec58ed8aee6e", "sighting--95582023-6abd-4965-b530-0be71eada9c0", "sighting--1167a9ab-71f4-4e14-9651-8f1ca306adda", "sighting--a9952d1a-b2dc-4b08-8ab9-abb9025db1b8", "sighting--884a191c-05b8-414f-9672-b128a51bef1b", "sighting--0627a251-b82e-426a-bbde-46c7dc01fa0c", "sighting--cdfaddcf-2813-4d2c-b188-df8dbbef61cf", "sighting--089fbc10-c937-48df-8ab5-2b50b990d86b", "sighting--eef15460-029a-4d59-949b-b2851b7879a2", "sighting--1954fe27-e38b-41c2-b800-46d6c0dd7140", "sighting--085fa632-f733-4633-a097-ace83f0ed30a", "sighting--4ae3c43f-86c3-40ba-b32e-018905973337", "sighting--cafa004f-e4f8-43d9-8096-bd2534fb0340", "sighting--01665e54-c93a-4675-a4d4-cffcf86e26a5", "sighting--b0e754fe-1ce2-4a1f-a892-d7eebb1f73f9", "sighting--9704af44-c2c0-4ea2-9704-a98adf6a2e4b", "sighting--2b8ee94b-73b1-4fd9-8a55-a9beb61cc6dd", "sighting--ecd6fb51-0f13-4919-95ab-213b6591c162", "sighting--3207ca62-f58f-45ac-9770-812fa5852579", "sighting--f4e9e8ca-3b88-41ae-b52b-0657828608c2", "sighting--e8e90ece-8eee-46a7-b127-9697a308dbfd", "sighting--ca863572-f0f0-4750-a74b-acfbf6070577", "sighting--57bb8b4f-1e11-4fe0-86e6-82c4a061c9c4", "sighting--a7ca9eba-fedd-45ae-a8d3-251e18af84d3", "sighting--ac304312-9b72-448d-a138-36d0ff10a2d9", "sighting--3121de08-9c54-429e-8d7a-84a78004472a", "sighting--58633b99-4718-4ca2-a881-1bd074390bb2", "sighting--8405cf98-3e5e-47e1-b654-7465de606a9c", "sighting--991cc262-d743-498b-9e8b-85a16589e4bf", "sighting--4b892de9-3feb-44ad-b00f-db3c0b0af669", "sighting--81f2b8d6-b0b9-492a-a622-2b92ef75d799", "sighting--334f48d6-8799-45d4-915f-54eb14b50fd5", "sighting--ad499a24-ca4b-4ff4-a34c-af2f26d52cd6", "sighting--47135db6-108c-4c2f-afb5-b6479ac993b6", "sighting--fe30eb5a-5fa0-4733-8fe7-b4042bcb9ba8", "sighting--1c0ff09f-b28b-407f-8eb2-3159c3b0f96a", "sighting--29a536d2-9615-43a0-9230-d05b6856be8b", "sighting--92a4dd4d-045b-427d-ad15-e2719c3e642f", "sighting--f2cafad2-7f57-4342-a169-95d31e58590b", "sighting--251fa685-0b3a-412a-8856-fb964db7ffb5", "sighting--0292c83a-e90b-492f-b565-747e7c13843c", "sighting--0ee32f89-ae84-43a0-bc7d-258ed9ae00cd", "sighting--182046a4-7b6f-45eb-9dec-b63c1ef1fb8d", "sighting--7729fdf9-1214-4652-abe0-a770322bf882", "sighting--fe218d05-1310-464d-b95d-72f8dca9fe12", "sighting--f573345f-953e-4780-8d47-bcbd61a03f8c", "sighting--c4f28423-de34-469c-bffa-5fea1a0e5fd0", "sighting--1c158b39-44db-450a-a14f-6853128afab8", "sighting--3712c6eb-2097-4350-99eb-7d25c853b9da", "sighting--ac2d3a71-078f-44ec-9898-939c56737511", "sighting--48e43d4e-8b5b-43ab-a016-e6d242b6cc22", "sighting--83f60bf8-998b-4c86-ab92-35ea08d4cde5", "sighting--6d3c4f59-3d59-4063-bfdf-9c59ca2e79b3", "sighting--8d02adbd-500a-4716-b121-fd45d20188d3", "sighting--98c92d63-97c9-42af-aa8e-fa3e21bf0d98", "sighting--12f19033-2c9c-45eb-aaac-d7a6b0ab9517", "sighting--cf6a0b5e-c509-4052-94a0-cf52439020df", "sighting--4d42ada0-95ad-4e17-8bf6-a44279c9f4d3", "sighting--7a3e40d3-67c5-4f85-9fbb-3b55866ab612", "sighting--48028a08-d938-47a1-944e-8cc18743b180", "sighting--8a049c77-8907-422c-adfb-d98c91ac4d93", "sighting--2918d973-4544-4bfd-8f5b-726540536748", "sighting--c4b23c9f-ec3d-44f2-b952-f4a2ec32c27c", "sighting--d49ca4ff-61e3-4f1d-8ebe-15c8a73c76c9", "sighting--491c9955-03ca-47fa-a7fe-affda10fe6dc", "sighting--0f81b11d-b007-48e0-a4e2-6041fa65b39c", "sighting--afa1fb85-637d-43b8-8553-c9dc140188d8", "sighting--da2dc509-907d-442c-a1e2-c3e539603f2b", "sighting--a129b10d-9be6-45a6-870e-2c1bbe9a92ef", "sighting--b17edd13-92e1-42c8-9580-06f005ae6bf6", "sighting--530dd0c2-5b43-442c-99cf-9c969a7798f1", "sighting--7599c1a8-62d6-492f-aa50-9c18b6abd680", "sighting--638c3183-273a-4e54-9f03-84143df81458", "sighting--d01f5659-b65b-486e-b461-e6b147569582", "sighting--21eeca1d-a0da-49b3-b159-ed8ffdaeafef", "sighting--f4a73c47-63b5-479a-87fc-e380a3d5136a", "sighting--270d7ea7-78ce-4b4d-bcc0-5960d3e1c2ec", "sighting--d289430e-8498-4b3b-96e5-2d0c6a6b5e12", "sighting--023c3c4e-99bf-4a24-b6d7-6aa7997bc9bf", "sighting--6708a0d9-71ff-4d33-9bd4-b27a8153c994", "sighting--239c06d2-d412-4a86-b86f-4f8642748c8e", "sighting--3518e40b-fb10-47e2-ae14-71d73ccaaa94", "sighting--ff78e128-fe5a-4d04-aac5-7476ed482c8b", "sighting--afeae2c0-b46f-4be8-a429-fa72cd32d1bd", "sighting--59c4f075-8689-4bb4-8d54-b6f28d484483", "sighting--d129172b-f48a-4b00-876c-58895d03a123", "sighting--c1eb2808-a2ef-4557-9b6d-759b462bf132", "sighting--c62ef134-ea08-4533-b205-c0e954daaa36", "sighting--ed0ba4ff-c76e-4102-a037-26a5855dcfef", "sighting--18e0f8a6-ab7d-478f-aa8c-20e5b9b10cb6", "sighting--f104eb87-bf29-48a3-b903-583a7c70081a", "sighting--64127a88-bbfb-4921-a350-30b88ca570ce", "sighting--548cce06-2633-4fef-892a-27d55beec57f", "sighting--5866e10e-8979-4090-9665-fd6901a31674", "sighting--932e8348-1ea5-489e-a4d4-aab1ac475c96", "sighting--70835937-1827-4c69-852e-3aa55d499e95", "sighting--df330fea-4017-49b2-8bf9-c2918dc3f742", "sighting--748b01ba-bdc7-4978-acbf-84dc4b9fc2c5", "sighting--2ad97f75-f218-40bc-8b5c-8e76b9790f47", "sighting--eabcbdd3-e7c6-45f3-beba-993ed9606f22", "sighting--30f4c5f8-3221-448e-9507-6a718f982da7", "sighting--7e21ae4a-2cba-4ff5-adf8-949b12c260ce", "sighting--555125ea-6c03-4a36-97e7-f2cb9c67f945", "sighting--1b05611b-78a2-471b-a602-3781313b2f27", "sighting--6518e234-0411-463d-b6d9-c5bacfef4aab", "sighting--bacb9948-e865-4db5-8a6a-1127405811af", "sighting--1fcdb5fe-ee49-4a70-b119-63eee81c410b", "sighting--2fa4a053-1132-41fe-b796-8776154f4407", "sighting--1d45fbc3-cdae-4430-b576-25845fdb44d6", "sighting--298dfd64-c8eb-41c6-8836-1bb080397b88", "sighting--d5825a64-444c-42af-9358-a69969e10752", "sighting--4a0daa8d-eb1d-46e1-9135-262a30ff087c", "sighting--dff01212-124b-4e3f-a299-24d0742326a7", "sighting--b6ebdb9c-92e5-45fc-9c90-de00ab3bd75b", "sighting--a8547a83-562b-4e05-8aa3-5a3bd4004123", "sighting--676ae8b5-2962-407b-a8f1-eef61edd142f", "sighting--25ac9f85-32b2-4c83-8ac1-95a32e32954e", "sighting--cd44d84c-79fc-4611-8f0f-17971c229713", "sighting--c5479657-dae5-4d81-857b-dc6861b3b3ed", "sighting--6592f3f1-efcd-402c-bcb2-6c063d0e33ad", "sighting--ca481d1b-5889-4017-9251-697c1b85e99e", "sighting--62232a9d-7c49-43a6-b62f-ed6a23a61fb2", "sighting--3c4e751c-5e03-4652-87d9-a7e242531ffd", "sighting--5427bb2a-3a7a-4e30-9ab4-adfc1c855579", "sighting--c81bbbc0-9706-4c23-87ae-56fa1b38749f", "sighting--a88a21e6-5e9d-4a08-8c61-83eb853e8792", "sighting--024de495-a879-4c14-a0f4-b05364c9421f", "sighting--ac6cc308-5e56-481d-a339-8b13f51e2ac7", "sighting--3389f8ea-7375-46da-aa6d-0e9a706a4cd0", "sighting--a46cfcc2-852a-4391-ab13-b834d14acac7", "sighting--0c429a74-ad6f-4309-b856-64ee0e03e6ea", "sighting--052db866-5b9f-4558-a189-007b08114337", "sighting--7ac49a99-69ce-4684-9574-90b28cd0af5d", "sighting--4d4e4a73-92f7-435a-9c25-b7c7f1906e82", "sighting--aed80d35-7ca7-4e96-b6fb-81bff46aca05", "sighting--5cbe525e-6b0d-4ba8-8d7c-b71c15b18b5b", "sighting--abf8118d-827b-4ac9-944b-2040cf970f46", "sighting--b92d9150-37e4-46c8-9d8d-c2b2d3106902", "sighting--8c9fa041-9e08-4925-924c-3b123e2be284", "sighting--bf8cd147-47ce-41b0-a686-5e6ee1a00138", "sighting--219d1e8e-bef7-4cf7-81ec-574cf027aa00", "sighting--1707481e-79af-459b-8bd1-fb889564e0fc", "sighting--e30c9178-44ad-4c5a-a54d-581a95e2a19f", "sighting--86341ba3-36bb-47df-a22f-a231ff9e5e42", "sighting--477ef2bd-8b1b-47d2-832e-bc1f42c745bb", "sighting--779794e3-d41b-47dd-a623-2936fe1858ed", "sighting--739b67f7-02f4-462c-9608-0d0c26b79dd8", "sighting--cfd4f7ab-1422-443b-9d4c-a399fa2ab66a", "sighting--1f81595c-e1fb-43d9-9567-8ea1effa3e3a", "sighting--fca90a51-17cb-438e-87e9-4d7b1ada761d", "sighting--47dbb255-91e1-4218-9cc8-e2e2ba8782fc", "sighting--5f7c95c1-e1df-4e5c-a57f-87fe9e0de9a8", "sighting--d797b477-d205-474c-b9b1-3ede079d727f", "sighting--572b7661-c21d-40d3-ada0-c8f7e81c98ab", "sighting--ce610b92-9fb0-48ad-8442-497d7b99c766", "sighting--5325105e-840c-408c-a90e-5cfc645cd60d", "sighting--6bdfbf24-860a-40f6-b177-63a733ca8fa2", "sighting--55115c71-7d56-4fef-a278-bb2a053faf7c", "sighting--a929c024-1f8a-4608-ba92-5eff982f5702", "sighting--99d96b75-1699-47c9-8994-56fa77f3764a", "sighting--d35f086a-997a-4999-9ae1-fddc9fd9ae70", "sighting--879ccc2d-cbbc-477a-858a-6ab7e290cc90", "sighting--75b6bbea-b887-4c64-8708-1dcc92fe55b5", "sighting--15d61757-d845-44d1-b0b6-14eaa16f059b", "sighting--4da439a8-0c35-4f85-a1d2-21b856629050", "sighting--b9315249-493a-475a-bf8e-01fb6a7900b9", "sighting--17845313-41c9-4d27-b017-7d6dd4d66443", "sighting--a64fbe07-2a9d-45f8-9fe1-113231253317", "sighting--5be8e4ec-0947-4017-a69a-275d4d461ea1", "sighting--dc23d7bc-8db5-4a96-a351-5513337cff43", "sighting--ecc32df2-adb2-43a2-83bf-91f096026f90", "sighting--f289bfd2-ff96-4246-a1c9-98e8566efc6e", "sighting--f29e31b0-21c8-45a6-8999-86823afa8620", "sighting--d8e7e715-a8f9-4405-b8db-c58f099c9d3a", "sighting--db0004bd-24c9-45cf-8205-4a95543386eb", "sighting--96d115e1-1a5a-440f-81e6-c26702c2548d", "sighting--24e3d285-77c3-4bbd-ad52-68b6a1bd6c41", "sighting--03b78d3d-3087-4e1e-afc1-e10810a2a077", "sighting--9f60f7b9-d4e9-4786-be9d-40a3a813295e", "sighting--3be3dcdd-4812-4ec6-94d4-e036fce8df83", "sighting--93e19cb1-d1af-4cc0-b6d9-6622e1e5ea96", "sighting--0b2a1c9c-80ed-45d5-9e50-6349ec97293c", "sighting--2ef277b6-e65e-4c36-b13a-cc223abca64a", "sighting--29aec71f-42ba-4e00-bb6d-d0e6926d0fe5", "sighting--794bf38a-ddb9-4885-85b6-666eef6ff410", "sighting--2325665d-fe4d-4ecd-bd7e-379395468c7f", "sighting--4059e4a9-edd4-465d-aded-f6be451a01ce", "sighting--6e75c6bb-daef-4058-8269-4e6395576037", "sighting--6d3a73c5-c5ec-4978-acb4-3eb06aa6445b", "sighting--baf38be5-20e7-48bf-b64a-ad467dd118b9", "sighting--87f5aa0f-97f3-4c9e-a95b-4f4635475985", "sighting--58b553f5-0088-4edd-bd4c-c84c2c7edd30", "sighting--b27c2322-27e7-4c78-955d-4f80d54b2640", "sighting--82d594d3-45dc-4a6e-bb60-7acbaf9fc0a8", "sighting--8d688638-4c14-4bc1-9c98-2eca33920eb3", "sighting--f6129ce2-12a7-4edf-a508-83bf41c7e8ef", "sighting--becfb53d-8b43-42d6-b690-8f41b5362e51", "sighting--06183c07-8580-4db8-a09f-dfeefe5321d6", "sighting--b1b521a3-dc70-49ba-8642-11f78329b4a8", "sighting--f859f3a4-ed0b-4cbd-be95-92565ecf0814", "sighting--2e96a0aa-8ea3-4484-94cf-69eb34555d7d", "sighting--39af766b-fe2a-4708-abea-570b75d31a37", "sighting--7eaecb34-89d6-4552-9077-df1c65e5ce5c", "sighting--f6b7bc82-c369-44c9-83b0-babe1304efa8", "sighting--0260a56d-c3ed-4a00-b7be-33abd591c508", "sighting--5dee9215-dc7a-4a43-a528-ec6fa3426feb", "sighting--52165f71-bae9-4be3-a74a-ba7c1be48c4b", "sighting--54e0a785-2441-4811-8181-ee7c41cdf30f", "sighting--de519016-15a6-4bde-ba98-7c5392590052", "sighting--4534d843-f754-4bde-8004-ecb9399cda1c", "sighting--f9c51b0c-18ed-4058-a50f-f918c67b6f3e", "sighting--9c44f4da-bb30-4ea0-ab81-6f0df5f87222", "sighting--a3331442-1834-493f-8e2c-e2eae2034f1c", "sighting--108e5c0e-9c50-49aa-aae7-33257a6155e3", "sighting--80a117c4-6deb-4c95-90a1-88ab0c6a5dca", "sighting--409681d4-97bb-4ccb-b8fb-d590ee90fe0f", "sighting--d10f1e35-99fc-4ebc-9198-8a427dd6e49b", "sighting--27da9c96-86a1-4a95-822e-4bc411d2dcc8", "sighting--32be8a5a-9fd9-4b33-946e-2c9e526a7bc0", "sighting--df8085b2-a45d-460d-af30-d6265d29fc8c", "sighting--e27d8031-cf4e-4de6-8fa0-517078a25691", "sighting--69e92b6a-5bfc-40e0-a4a5-9ca8e9c7cfac", "sighting--fc8b6bd8-48e9-4af0-aad7-038e8758538e", "sighting--46bf7a81-b76c-47ba-8a8f-17949717eb70", "sighting--fafa6438-83cb-43bc-91aa-3982bfed454c", "sighting--49df1ad6-3141-4b3e-ab40-9f162948d50b", "sighting--5123ba97-f2c4-4911-ba3c-8e15ed9d63fd", "sighting--37561416-e9f6-44cf-8742-2167fe4e225b", "sighting--36616b98-42ab-4085-9e6c-0a6f0fc653fb", "sighting--41a23a33-722b-44f7-8e6f-dc9878575f23", "sighting--d7ce5874-8cb6-44f0-880b-ddd05b6917ed", "sighting--7de9c590-ada9-4e1f-ac93-53ef563d439e", "sighting--9f6328e0-9c7b-4031-a186-a40372b7b953", "sighting--4de4240a-975c-4ea8-9c07-12edb0c86fd7", "sighting--5353729a-0710-4b04-9fe5-7d324ac8232f", "sighting--650ae5bc-3a6e-45e7-9edb-b0a2697099a5", "sighting--0fd5cb28-89fa-4aea-b7a0-c7f51098fb0a", "sighting--51defbc6-9e9f-49ce-a427-09bacb87a73f", "sighting--9fab6cd4-e412-4eb2-bbb1-865e578de061", "sighting--e59c0380-1752-4225-817f-1069a05ed01b", "sighting--8e1255dc-67ca-492f-83a4-b7a0beffca2e", "sighting--1a472200-540d-43bb-8cdd-7fd383497cde", "sighting--e3af64d9-aa45-4eda-8aeb-8774f8f6a250", "sighting--d5641f92-8729-499c-8b7d-60bdb596913a", "sighting--0bcc2902-29c9-417d-aedc-7afa7d7360c6", "sighting--3fbefe1f-0ee6-4623-8a52-776a6d08d92d", "sighting--0b7cdaf3-4be9-4c8d-be90-d3effff8e01d", "sighting--6e508d30-0a55-4b4e-9c1a-6c1292b6c1f9", "sighting--4f52752c-6901-4208-8043-1ad7471c6b87", "sighting--06b5f674-2b52-4c50-a4a0-8a527dd6fe3f", "sighting--d7e9c305-8da2-4121-87b5-4aa9b60a6d21", "sighting--0f803368-5728-401f-b415-9a7ef81fcf9a", "sighting--88b29289-d8dd-4b87-a00c-ccad7e124d47", "sighting--0570b610-1979-4386-9b4a-60ae76a60824", "sighting--4dfe5cb7-0765-4928-810a-9f3ad7fb5d1e", "sighting--33f100b5-5641-46f9-b1dd-8afe16f22300", "sighting--3d3eb069-d604-40dc-a023-2f3ba0e07d13", "sighting--a96168bc-9170-4a6c-bab0-13ca122ede6e", "sighting--07fce01b-01eb-49a6-af58-2cc543e54e04", "sighting--b1a660bb-a535-406e-b0aa-61edb11127c4", "sighting--33f5e8aa-2e92-421a-8bfe-5e9cb49c9ec3", "sighting--fe6c4473-72f8-42a1-b0a6-f5063b272f9b", "sighting--c2ae1971-00d9-46d9-aaff-dfb4f5be5a4e", "sighting--2c740efe-edca-4715-ac64-ea6304c893db", "sighting--a7162e9d-d904-4b0d-96d5-4c5705f2bb51", "sighting--9d8c3922-250b-4f32-8cfc-c0824042e94a", "sighting--a5dca69d-2656-417f-9678-784bd322b09a", "sighting--e950852f-5b0d-45e6-a818-80fd71295f5d", "sighting--b9e773f9-519b-4c3f-b3c7-d8fe25235c36", "sighting--372501c5-7c7d-4a04-b359-aa83ec845874", "sighting--089026d9-1754-48ee-85b7-5542905e8d1a", "sighting--a336d0f6-51cb-436f-ba54-caa9b25923ec", "sighting--6835c9db-fdb2-42fb-bcf1-a4b5befe2160", "sighting--88ab2d0b-1e7f-42e3-b2ad-48f0b93ada7a", "sighting--507b2e59-b97e-45ce-a8b8-13e7acc6461d", "sighting--cd6a5d70-1a0f-4216-82ee-d33dda229446", "sighting--37ea512e-698c-4c47-8292-eadec8e019ea", "sighting--47c1ed46-4abe-4269-8d28-f9b625fd34f8", "sighting--7c224880-4ede-40df-a258-4f1bdebba815", "sighting--bd5a2e34-1814-4682-9cd3-366727205b8c", "sighting--0ce3f847-a8f1-4c5b-82ba-ab774dace5f9", "sighting--463ca365-db17-4902-983c-c473c4053d37", "sighting--b31f8ff7-fd56-4b3d-be46-c013597da637", "sighting--267cc473-5481-403a-94f2-ecfec529f3c1", "sighting--e513e193-0aa0-41c9-a50d-4fcc4d2a135e", "sighting--6378391b-d400-4c79-8c55-1fa1d5e15ca3", "sighting--1cb1e2fa-9764-4456-8d40-38e0d4465b34", "sighting--33455026-01e5-4107-a07a-6806f4ffb1ec", "sighting--ee524c43-b781-4589-9d0a-b2ec0808c538", "sighting--40c3da91-fc14-4868-a345-a9c30049bc29", "sighting--def01698-06a6-466e-80b9-d31cebedbf61", "sighting--034d4d96-7d22-47a9-b508-7665d8e8aa00", "sighting--afb1f6f9-8580-423c-85c8-37c59236ca20", "sighting--6cf25252-b61e-4d9c-ad98-2cd47228873f", "sighting--f7453aff-3c81-4f9a-9906-9272271806a1", "sighting--9ac6b3ba-51ce-413b-8627-7cd76fc7420c", "sighting--ea0a153b-aa3f-4624-b970-86b549a7279a", "sighting--8ee26428-6492-4a43-a767-31a5394e3544", "sighting--8b0d0b24-d125-4e18-85bc-55ad115072f7", "sighting--307a9881-217b-4228-ada7-8999f8f50527", "sighting--5a924cd0-b1d4-4849-8b16-061492d178e0", "sighting--a35bf169-1408-469f-960a-2fdf2effa267", "sighting--1be340ae-b243-4d79-bc4c-2d2ef28788b5", "sighting--e085cf84-aba0-4866-8686-ed314fa75eb4", "sighting--6dfed669-d291-44af-bcc1-e1d8bdb22c70", "sighting--dc7636b7-a186-44cc-9623-f0ae229983ac", "sighting--8e6c415f-8b20-40b5-b03b-9e6a3a4a27a4", "sighting--ed353655-9481-4810-88ac-aeb7409f8539", "sighting--39418636-3067-4e07-9f6f-91423f1e374f", "sighting--17853e64-c468-42cc-9077-2291ec24a534", "sighting--5ef4157f-067d-40bb-9f6b-cf6277fe4e1b", "sighting--32ad8883-b6f4-49b5-901b-d7959522b70e", "sighting--2229ce22-e61f-46ac-8552-f1c90d7c85f2", "sighting--6a901547-e021-4a22-89e6-ceb2c26cf58c", "sighting--58e04ef1-8b7d-48bb-a731-8b514049de37", "sighting--004f7549-d5f5-4d87-b392-696aaa6a108f", "sighting--7ca9bdfe-72d8-4d56-8a52-0de631111272", "sighting--3f356ce5-3cc5-4c2b-954d-ff4abad04154", "sighting--ccf0f891-04cd-49fc-9026-2c8785594cee", "sighting--a6a68452-6bdd-4cd5-ab2c-ad5ab2de569e", "sighting--4438609d-56fe-4cea-81cb-bfda55ac3408", "sighting--aa72cbdf-2237-4937-ac01-d098f4101bbc", "sighting--4183c48e-43a3-425e-a39e-4a2e4fe701ff", "sighting--30fe7bee-1c3e-443b-80bc-bd1427a920d4", "sighting--7f517972-dcb6-4c4b-8b44-da82c69637b0", "sighting--096b5de9-aadd-43d2-89d6-0f008a7278f4", "sighting--228414df-dc77-4439-a822-33986be1420a", "sighting--a945e84f-3165-4728-bbe8-68bc0396ae57", "sighting--4b0fc350-8297-4bc3-8db8-b19b18a8c647", "sighting--a3bebc4d-428b-49dd-a7e6-4d2ba36b7e01", "sighting--40cbb391-e37a-4423-b8e0-6f008f696626", "sighting--641240df-5d7d-43e9-822c-469fa874b428", "sighting--0d310f74-7b3a-4105-b87a-7bf56a1173a7", "sighting--828d25a6-c114-4dd0-ae82-cfe572c3af7f", "sighting--f76db508-eac6-405e-93ec-2bcdf6caeda8", "sighting--607c4f95-7bac-42a2-9eb8-238f3e8a7867", "sighting--2c3e4882-3cfe-46ff-9ba1-8298e7abae6c", "sighting--1b5f5682-cf3d-47b7-923b-b5db832fac12", "sighting--6d068210-8594-468e-a1e7-b778d1e73cbd", "sighting--0f6e7043-2e82-40ea-a28a-9316cf0088be", "sighting--35c024a0-5ecf-4fee-8b60-a5efa7e4cd2f", "sighting--56266e0b-82ee-4faf-8868-2c38d5be30cc", "sighting--717d3489-7877-47bd-a3ea-60e6bf083671", "sighting--1b1fe841-4cce-4184-99fc-530caa083908", "sighting--209a9959-de2b-4f83-ba17-d046d4d9b7ff", "sighting--f5c0efe4-b91b-44f7-b8e9-d6beca86a9a1", "sighting--880e71fc-c2ef-4978-8761-d75de2c97e41", "sighting--b6a5c057-98d4-4d54-a7df-9643e80779c2", "sighting--e9872ef6-9307-419e-852d-929e846f1567", "sighting--a552f045-c5c3-4642-b421-686b02defb84", "sighting--77127c14-d6c6-49fe-b0fb-d03c0983de92", "sighting--14b46a83-3b09-49c1-904d-4f7ecf0c8088", "sighting--f95bea8f-fd0e-4b78-a19b-1fad68f889bc", "sighting--8953bc82-bec1-4aa4-a579-4a7a512851b5", "sighting--2a262d18-5950-4282-9973-e903be2d9f45", "sighting--3e560b26-a838-4323-b6a6-aac567bfe66e", "sighting--83094dcd-eccb-4b44-b589-47c32232bb15", "sighting--d1a83f5c-ddd7-42bc-abaa-701aa3e3b359", "sighting--7e88d359-65a9-4f49-bd27-ec34b1d7ac1f", "sighting--11a0cb49-0240-47db-b994-228e0360da56", "sighting--5b6b6b1f-23e7-4468-8832-0e982407afdb", "sighting--0bad2c68-bd0e-4043-8bc9-17d4e1ddc499", "sighting--65fc0898-1209-454b-91e3-767b285369ba", "sighting--e3134cdd-5657-4966-ac0a-3dcd738db492", "sighting--7dcd7140-ab19-4530-9e6a-c883f8eb56ee", "sighting--d2d0ed87-6ab4-4578-ab9e-7e9f6a98dbec", "sighting--bf73fb6b-35d2-49e0-a74b-0910f3ea7827", "sighting--42b9be12-e9b8-4b21-9c1d-7198f161376a", "sighting--f632e17a-cfdd-4b2e-9563-3b22d607f39a", "sighting--061fecd2-c3db-40d7-b023-382c0172eb5b", "sighting--0923f18d-055b-4a5c-ad1f-8421153c337e", "sighting--fc26a120-5b4a-48c0-b397-c6090dee21b4", "sighting--69b50d8a-223a-4162-9855-b669f700e0ad", "sighting--881e560e-f5c7-45c2-af11-2b48e79b553b", "sighting--0fc0101c-5156-413f-b754-c6d309e3dd30", "sighting--98f0452e-83c0-4844-864f-ebf622a7a1fb", "sighting--0e512d98-1777-4806-a4ba-1e71d0a5ab10", "sighting--dc3f1679-642e-46b3-98aa-28c15c986296", "sighting--4b15304a-f0fb-48ef-b4a7-0cad3f515837", "sighting--2893145a-bcaa-40c1-882c-e829fc61869c", "sighting--43c9f15b-37d1-4431-bc39-3de058e17126", "sighting--667e5584-4165-40c2-be57-5acd286e7fbd", "sighting--50b087f8-2147-4ac5-b1fe-0ea615a7e31d", "sighting--79564a42-5bdb-410b-96ce-06eb887efb41", "sighting--dba2f550-0981-40b7-bc5d-f665e1d2c895", "sighting--05d0c4e8-8465-4008-9a12-48f972bb3bfe", "sighting--b56b8764-a7eb-40b6-bd56-4660d7f67f87", "sighting--775b3fce-f158-4418-a813-20a933773e96", "sighting--9caf3f2d-96cd-46bc-bfdf-e1af2ff45e86", "sighting--d75fe390-9714-4c11-ab35-83d143c624a3", "sighting--b75be116-61f7-4c52-a0c3-cf7fd8092649", "sighting--44c02770-ecac-4b86-987f-b5707eed32ec", "sighting--73e1a46b-0926-4afe-9c40-b244afb2b6c3", "sighting--c365a3da-7ecf-4cf1-b009-a2120f920833", "sighting--29b73418-d72d-48f9-9918-fd1940da036b", "sighting--f996b9c1-b30b-4397-8aba-fd8dd772e92e", "sighting--33d39f15-3ad8-4bae-a2f3-227e82ee33de", "sighting--7ae98fcf-ad87-4b11-9e2f-a0437d1106f1", "sighting--933a38dc-d69a-4d16-93b3-09959a897e1c", "sighting--85218899-72ec-4450-866b-ffd8c4a643e7", "sighting--d8bbd8f1-fcd9-4191-946f-a5889dca7147", "sighting--16c36997-7857-4be4-9ccc-eb4592fc1c7c", "sighting--227cb729-c1e7-4cd3-a8f1-fc989cf63328", "sighting--0e78b425-8e80-42e6-a545-0e13d7c7c8f7", "sighting--253bb2f2-51b8-455a-9b35-0afa21daccef", "sighting--292b020d-26fb-4de1-9970-a6b73ee1df82", "sighting--c727955c-6a0b-43ba-8170-c19e146dc160", "sighting--1723b9bc-5177-4d78-96a0-b950f22e5a4a", "sighting--09d67b4b-eda9-4a40-80b7-afdd53bfdefb", "sighting--14dc6359-caca-473e-85b0-71294d839221", "sighting--2e377b62-788f-472c-a876-43c5686089ac", "sighting--e3d3d9e8-93b2-44fe-941b-31026d493f57", "sighting--b1194c65-fc7a-46ac-adf5-4b154bbce701", "sighting--faf33f26-ba35-4c0d-9c0b-99448f7b0dea", "sighting--d74faa28-588f-4588-aa58-bb7ce82efb1b", "sighting--3c92dcda-0f1e-430e-810b-13b6f6924aec", "sighting--9cfda4ed-81f8-40f3-b5aa-73a26df31ba4", "sighting--52912ebb-569b-4961-95ca-7559628d2acf", "sighting--3fb88c44-b6c7-4ed6-8519-2dc4f95349ef", "sighting--e0549c5e-02c3-4cd8-8122-57da1c37120b", "sighting--4388b26e-6d09-4197-b0a2-3b3296652815", "sighting--e42aa5df-21ee-4f4e-90c7-2be3005a876d", "sighting--ceecffa6-46b6-4feb-a8bf-bd9e0c4c4d2c", "sighting--f8f1ff59-9d6d-44c0-be33-741c18812cd9", "sighting--53347127-2a4d-4a9a-8130-14e55a7ef096", "sighting--aa3943be-ea6a-439c-91d5-c371a3cda539", "sighting--369c0875-71e8-4dd4-bcf5-998c7f93c4d2", "sighting--f8a67f28-03a8-4667-9cca-facda5d8193c", "sighting--281a03ee-10c0-4b41-870d-01a989878afa", "sighting--148db9e9-4bba-4217-8bd8-f4859560567a", "sighting--7f430260-84c2-49b5-b6d3-dba727cc3d23", "sighting--9fabe1d5-5fe6-432f-8128-ccdde1b06df8", "sighting--d97010a2-2203-4eec-94a1-7a7e4668d8aa", "sighting--176782dc-6b34-4713-9044-1623b07946f5", "sighting--e8d8e914-7546-48b2-b952-24ffd9ec15f1", "sighting--78e82d5e-d818-4aaa-b5d5-6af5fbed840f", "sighting--4b16298d-025e-4d19-b21a-30ee8ba4e27e", "sighting--886d474f-ef2a-4a29-b1ac-b3d1cd915561", "sighting--c0946c60-887c-4a8b-b33b-24ef8e9216c2", "sighting--824e1e7b-33c1-48f6-afc1-21126c3b656c", "sighting--3f823368-f83f-4c3c-8bd1-f1f897af0129", "sighting--53e2c8c8-5c52-4c85-aa7a-f6be02be4392", "sighting--62148fde-01df-423d-82de-b2a045fd5d6b", "sighting--15a79ff7-fc25-4f97-b8b7-f00079199793", "sighting--6d6d5d32-d509-4c39-973a-72358f230a9d", "sighting--947cbf69-17ee-4a2f-931a-f29d91508f93", "sighting--a2d6abd4-481a-43e8-986d-14f85cdb3a68", "sighting--9eb920d0-056a-41bd-bb00-bd235ee99d1a", "sighting--f4b648a8-e1e1-4ed6-a3fc-342a882c1d65", "sighting--2c8df1ec-91c5-4eec-a75f-e5c277c5c28a", "sighting--465f428b-c7b6-4b69-b368-3256a00447fb", "sighting--1fe54687-7c05-4932-a0e2-d54d63d9e478", "sighting--360b2007-ba4e-4ef7-9e69-ce7f60d6a3bc", "sighting--ab633608-c6db-4369-84a1-c4715de8b0d8", "sighting--0752cb74-5b4e-4318-b913-e3f8e2537d57", "sighting--f99a433a-fe98-4d00-b559-cb1aaa22cb7f", "sighting--0e2f27df-e05c-4658-9326-cd5337b682c8", "sighting--b5d217b4-524e-4561-9373-dceec637db7f", "sighting--a8254ef0-471b-4cde-9b60-20f84f592e9b", "sighting--88b2358e-5848-44ed-b258-ba3625829452", "sighting--67c60b46-5d94-495d-bb07-bf30517ddb52", "sighting--ee66f2ec-3050-4e43-96e9-9d5be783553d", "sighting--7f005b71-1f5d-434e-960b-1c5ec931f986", "sighting--f9983f17-772c-4789-9e54-18c410226d92", "sighting--d0b67361-345d-44dd-9ac8-cd232baff1c9", "sighting--a08117f6-5625-4914-b84f-bedc7745888f", "sighting--487e9bf4-86c7-4034-a6f6-24d4ef182809", "sighting--9dd6fffe-933c-4c8f-8691-7926693bcf51", "sighting--de8b7ca4-f9c9-42c3-a5ee-c4b51a76508f", "sighting--6044b889-e31c-4d9f-a4f3-6e1130b12c63", "sighting--40c61921-ed2e-4985-9d3f-da86d3c7298d", "sighting--13cfd5b9-b2bf-405c-a1a5-8240a1e89716", "sighting--2f445404-dc89-4f84-98f0-d2aad4c95ef4", "sighting--cfc6246e-9a8f-4a95-a2af-d474e93e4d22", "sighting--8759e1e7-f32f-4e21-8a8a-aad6e44df2c7", "sighting--22ea3788-a050-44f4-87d0-6f06fa33a104", "sighting--72daeebc-6f86-4fcc-bfd7-592bec15773d", "sighting--36434fda-5036-4868-ae88-93d4928df099", "sighting--e52551f6-9e3d-4c12-b1ee-e5a7f44939ce", "sighting--2755f5db-93f9-45bf-bef6-2b1254dbc812", "sighting--503f8832-5214-4339-84b2-04c2c62c798e", "sighting--679b33fc-cdd3-43fe-9c33-edb684d15dab", "sighting--32020e98-af33-4562-b453-0eba93c08eb0", "sighting--1a34d834-580a-4523-a1d0-0dba1c5b3553", "sighting--93dfaa65-1cbf-433a-9892-54942815080d", "sighting--c42e86e8-dbd7-4263-a85d-9a0026837963", "sighting--671763e3-eae7-46c0-a1c7-21af1d8675a3", "sighting--2a99d8cd-5271-4670-945f-3a29090a57d6", "sighting--93228443-12fb-43e0-bbf8-303e13b3873a", "sighting--af3bb126-2675-4636-9ff5-a1e2d8f0a2f9", "sighting--10cbe499-d470-447b-99da-21c3a897ea06", "sighting--1efc116b-6d9f-4c5d-be82-4c8132227d03", "sighting--ac601d06-1127-43eb-8475-cc49d5cf30ec", "sighting--8f1ebf01-e1a4-4a29-bdc6-59dce0f7fe76", "sighting--3255379a-bc18-4a7b-aade-c7d901f6808f", "sighting--9c2cec39-8dfc-480f-848d-7bc01792b115", "sighting--e508a488-792f-443b-89d1-1a1a0b5543cb", "sighting--524d2abf-90a1-4f1e-9def-0003e226785e", "sighting--c2041fe1-835f-4d9d-9569-93c1ca88a519", "sighting--17c72d76-db53-4e10-b064-3125dc1ee5f7", "sighting--b4a690d2-6009-4191-a64f-a3d0a7850835", "sighting--eb9031c9-ab86-4fbf-aa60-71c59471d594", "sighting--ff9a28da-f740-4c0d-a05c-7873868e641e", "sighting--cb67bd39-fe2a-4bbb-aed6-e7a8881e7b26", "sighting--5e9fe50a-9dad-44bc-9fe9-242d5cf8d261", "sighting--0b50e810-bd20-4961-a2e6-8d6a18d67071", "sighting--f64ae93b-816a-4c17-a8f7-86f4f9a58bb5", "sighting--7ec09b6e-1f1d-4b5a-977f-64e0253e48b0", "sighting--35b7551f-d9d9-4280-919b-a885a671f849", "sighting--ba9f3a59-33e0-4d30-9660-d23bf0cbcba8", "sighting--f2c9f855-9afa-456a-beac-ab4a9171a894", "sighting--687c46f9-eb6f-441e-a4a8-d1e63db2652c", "sighting--a4ea5dcd-18c9-4669-851b-e482683e9ce7", "sighting--a2c37062-833f-4983-87b4-b54d8070cdb7", "sighting--e9c89da2-7195-465c-8f0c-a2e0a279e887", "sighting--d5e04873-b913-4c1c-ab39-3026fa1fbf05", "sighting--811a913c-abab-4360-be2c-23e459875a21", "sighting--d3752dcc-89d5-403b-9ad4-b1f42bc9e97e", "sighting--0def72e4-a480-4487-b8f5-e1945953fb7f", "sighting--2696cc41-bccd-448d-82e1-7406878a0184", "sighting--1062df09-2889-460d-945f-eab6ada7c09d", "sighting--03bf7886-9aa1-46c1-805a-df1934f614e6", "sighting--dd2345c8-c4ad-43b6-9466-cb3dcf308ab7", "sighting--ea4bd166-c79e-4095-b3f2-29f2ab9d8e57", "sighting--dbf5c38d-15c1-4183-bb3d-bfe537813376", "sighting--1b9cac3f-366a-4636-b31d-d9ba9bb75ff8", "sighting--6211553f-c66d-4961-9f0f-88215ed3588e", "sighting--c3755a79-885f-4c77-afd3-28cf7e359479", "sighting--980c1c0a-fc67-4872-98e0-30f30a11c8b5", "sighting--e4282361-9136-404c-9967-5bfbada4c4a6", "sighting--4bdf5c42-e0cd-4f25-b24b-62819f8e7f01", "sighting--67c6fc34-b1f3-4fe0-abe4-c4f8a6b4037e", "sighting--8739ce63-f3d5-44f1-bbd7-ead045ef0003", "sighting--9d27b0e7-a789-4ec2-bbfe-794309f6d1a6", "sighting--55d75c35-2417-4360-a3df-c5ba4b02430a", "sighting--60e82f03-3807-45bc-8bbf-12c177c7cc4b", "sighting--6bd6fa4f-3930-408e-8904-142a1258eba5", "sighting--d9fb51dc-acf7-4342-a959-a5e3f70e0372", "sighting--e224e158-7b05-4673-abc3-91b31d8efe18", "sighting--12183e9c-d8cf-421d-a9ab-1cd85b78b8ab", "sighting--f59ae8bb-ae28-4f4e-a820-1eaf2f582a17", "sighting--8aff11f2-a41f-4f8b-a612-2ce5686484f9", "sighting--9e66ff2d-cdeb-4b9b-8a0e-ec506b21aff4", "sighting--0788a534-4af7-491a-acac-30cca1c3e9d1", "sighting--e41c58d5-d919-41e1-a704-fc64940ddd5b", "sighting--2bb3b72e-e577-40e8-9980-bb569b6278ba", "sighting--279f512a-24a3-470d-b38b-af068e823a38", "sighting--ada5c244-5cac-4b19-a5fc-587b6bb5aa4c", "sighting--9a3b5d96-19f8-4984-b8af-17b6488a1be4", "sighting--4acc57f8-1fdd-4e70-a349-1f9a5051fe5c", "sighting--1a1dbeb2-2e5a-4d39-8a35-ffcca68630a7", "sighting--a451b506-d545-42f7-af20-847f22233763", "sighting--3a260393-565b-48d6-af48-97addd53e95d", "sighting--157483c2-d508-4e8c-a9a0-a56ff7ba2ac5", "sighting--8a03f4be-5023-43eb-bbdd-ec2a4b2fa93a", "sighting--4cbc5ec7-0239-4b70-a588-3e78593ceff5", "sighting--db2a7eac-b15d-44a5-bb69-0846d299a1a9", "sighting--5eefc8c0-daa8-486b-8ca1-56c6b0c80c71", "sighting--b48b4e00-3abd-43b9-ac27-1e5e06d37d0c", "sighting--2fa84f02-de54-4629-be25-c9978b3d8d95", "sighting--73e76085-5126-4b08-a5dc-c8c70314dfda", "sighting--7a61daa4-d8e6-4f8c-ba72-d403581c54ca", "sighting--f889a9d0-850a-4d9b-a2e4-1cedef97cb01", "sighting--bfffa5d6-c94b-42c6-9ebb-ee8f0633e6ed", "sighting--ed396646-66f1-46b2-8d1f-eabd2d327b0d", "sighting--c7122ecc-52de-4fac-8f0a-097e607ecad2", "sighting--a69ce8fa-7499-4952-8554-fbdf6dafae16", "sighting--1bd34c0d-454a-45ab-97fc-766d93e304a0", "sighting--153aec37-ba78-467e-a842-ca404288c6f4", "sighting--07bd3461-e2cd-40e9-8245-444733cb403f", "sighting--574ce7dc-b88f-4155-8e3e-1f93f8db3045", "sighting--da3937f4-deb9-442b-88de-eea1fe041ee8", "sighting--a0f0c2a5-e0b9-4f78-9c23-ef95345c338c", "sighting--faa59e94-d4a6-4838-b310-253fe46384b7", "sighting--720f07b7-144f-434a-b539-f4bdb561c744", "sighting--c55453e4-6874-4c0d-af5f-e24f6510ed0a", "sighting--9f063851-b48b-48dd-b493-8fee0ddb4110", "sighting--ec5e9f72-5d2d-409f-8072-4e911f6ce838", "sighting--8c9c0a83-5255-40b4-953d-87991a1fc316", "sighting--a4d7da80-e71c-48e5-8913-e9fd7cb8719b", "sighting--9ef6d6fa-0f48-4bec-949d-4f6458701da8", "sighting--42b7ff69-fa2b-480e-ae78-1f76071a8d2a", "sighting--0c38a713-f1aa-4a75-8e5a-450e55c4f939", "sighting--142a7747-e992-4dd6-9df0-62b5e56f334a", "sighting--f60ba1f9-0da8-4877-886d-47b54b594027", "sighting--d41836ff-c1bd-43dd-8624-4ddbf0ca8af7", "sighting--46596420-0e87-4b6b-a27e-4e1e5a57a8d1", "sighting--6587ad38-6856-4bfb-a541-42381f209cc5", "sighting--2b69cab0-f51f-4502-a07e-e7b0058f0f4a", "sighting--c3862af6-f910-4e66-8b2f-3eba1bc282be", "sighting--206292d9-a1af-431c-99d2-1d0010562f7a", "sighting--cda46c24-d27e-41cb-8d1b-7d1a4eccd6d3", "sighting--4d55e17f-8556-4f7d-b0d5-66ba25eb9aa4", "sighting--eb0867b4-0758-440d-a050-58f3c4524433", "sighting--881e106e-1b34-421d-8e0b-5a5d03220fba", "sighting--b3e64beb-6bd9-4ed3-94d6-13da0a53a286", "sighting--25715ae8-7f6e-49a1-850c-97e861df145c", "sighting--b948a929-8f46-4a1c-97a2-ab091c4fbbd5", "sighting--4e4aa2d3-0ee2-4219-9ae8-efd2e40462e8", "sighting--9cbbe608-18b1-4bb7-b451-2de97936d2dc", "sighting--b6572f2b-8b32-4bbd-91cf-2584bcc51d92", "sighting--f8bdb5db-9485-4423-b046-60fa664dc797", "sighting--030eb4d3-8fda-4fd7-9e96-9a2174a8b8c4", "sighting--0a1fcee4-7864-470c-91a5-2bd58acd291e", "sighting--fed3af8e-5ec2-4f9f-b37c-db7735e70d2e", "sighting--9d3d7d91-d6e4-43ef-b675-ee97b84b7060", "sighting--5ce51639-f093-49fd-afba-376f7b50e745", "sighting--a42b5d78-86f1-408e-a9e1-7209a8728064", "sighting--614f3cac-88f1-4c52-ad9b-da7460f2a1ef", "sighting--15a0507d-a1ec-4412-bb05-1c73eb6b2ae5", "sighting--c13c8f7d-e45b-4fdc-a6cd-2fdec7cd0821", "sighting--33f18974-5145-4460-be8b-dd03d46ef71b", "sighting--e34b71b9-3ef1-4e16-8708-b8722efb3a82", "sighting--f857f22b-6659-4021-8b29-4cc3c599fa74", "sighting--4c010aa0-2713-49f6-980e-9b0de02c155b", "sighting--d93bf01a-5007-4e62-aa23-fee6c9c3b76a", "sighting--da396abc-d7cb-4b62-b163-33cddbd48f3a", "sighting--f6e5e3cf-e8ad-45e0-a6d6-e105ff5d0898", "sighting--481d5acf-0b82-426e-9059-13c24bec8938", "sighting--5bf9aa34-207a-47af-84b3-5f71267b4927", "sighting--6a357480-3f27-4479-b0c4-399c6d85940e", "sighting--e44d4efd-81f2-48a3-a827-9b4893ea8482", "sighting--5581d793-80ad-44ae-a2ea-bd02d94364e5", "sighting--005061ff-eda2-434c-914a-79b8ba495ed0", "sighting--52923043-9faf-4f54-98bb-f46e919a6e9b", "sighting--5574b74a-c3c1-44dc-81a0-588ebab1ba97", "sighting--b9456f64-e52a-4153-a2f1-155132ba4a04", "sighting--73b15073-9986-4efe-95f9-5d3f7b44cbd8", "sighting--c4af00c9-5680-435b-a370-d09d33f78d2b", "sighting--96ace610-b0df-4c46-b327-1f14caaba293", "sighting--67189776-1372-49a4-9d57-2abbf41f3b4b", "sighting--fb5272cd-83f4-400a-bb15-34673509011b", "sighting--95c5b422-d3b0-4af1-9c3d-e977f6842bec", "sighting--d1d91f23-71c4-4792-9464-e557f88e9cce", "sighting--53ed9a34-9d8c-485f-b0be-14064ceebf69", "sighting--1d150880-6a02-49d9-b251-4287ed537c0a", "sighting--c83e166d-d01c-419b-8d90-6fd9a4c61ebb", "sighting--01c61602-3277-4f41-9099-bb64f6fef240", "sighting--44b76d43-e262-48cc-97ce-acf5de6b3974", "sighting--814b783d-9d7f-449f-8f86-23ce09a8e068", "sighting--42c2a90e-8c31-4801-9043-24e4d63237a7", "sighting--78c0b526-f43d-4463-ab0d-da9dea0529cb", "sighting--346e5a24-0383-4131-938d-7d2de1df4b22", "sighting--788a64c4-66cf-4b87-bf9e-13377dc1d92d", "sighting--5c2a71f3-3109-4c0a-9aa0-eb91d8b2c95c", "sighting--136c0561-c17e-4b6a-afb4-e2ca4ea3bff1", "sighting--59ebcdaf-9b77-4129-82f1-5949f6b1f95b", "sighting--64f0bce8-2abd-4f7e-97bc-0c62273a3c30", "sighting--41ffef8f-9216-4aa9-8f1a-6be1422948a6", "sighting--0cbb6d01-2042-498b-bd95-459072ec6bb9", "sighting--88f5750d-e474-4824-b89e-f6fe2e2644e0", "sighting--77fd304b-7d20-44bf-945c-8c17cffabc3b", "sighting--91c3f706-ad3f-4ada-947b-21e30eda0bd6", "sighting--3a81a2a9-ef12-4d7c-9940-4b4e107e9819", "sighting--00fb07f8-2794-4a71-8872-bd47cb9b4f94", "sighting--3c23eb13-805d-47ab-9b21-1509658f97ed", "sighting--c47cc4ef-d184-4d77-a829-77a3671e1e73", "sighting--fcfb242a-2896-46e8-ad94-75cd303805e1", "sighting--585bb2f5-4b10-458e-a52e-221a0ad63037", "sighting--3d7cf432-7ff9-4a49-ada9-9983221c4c56", "sighting--0ac4e730-7978-4490-9fb6-1fa627afe995", "sighting--ca148a7f-e68c-4378-a76a-610165ab249b", "sighting--29a2d347-cf75-4523-bd06-2d538b6dff20", "sighting--431bc569-b3d1-4fb6-9fe8-914b08890038", "sighting--591d8aa0-81ff-4f13-ad8d-b0a904128c63", "sighting--8631b880-6a72-4a3a-87b7-36c3d48a6666", "sighting--46c451c3-3129-4491-8b71-d2c9327494da", "sighting--3a1d9438-b491-42ad-a2f0-6c69949ed3b5", "sighting--8d0b006c-1c09-4755-b7b2-2a209b42e125", "sighting--6c7f57e3-1f9c-4c48-8f99-020b6ef848e3", "sighting--886d19eb-9469-4356-89c0-7f43c549bd9b", "sighting--8671e8ad-697b-4f88-bd61-e73a79873a96", "sighting--4b1daa6e-97f1-440b-ad1c-37acf8aa562c", "sighting--f25ac179-a3d3-4d0e-8865-485176b91e0e", "sighting--95d242df-ce21-4e55-b84a-c773f26cde9a", "sighting--1466fab3-bbd5-46c8-9bf0-8532c28608b2", "sighting--e5c85927-ec24-4d39-bf04-3bade9a5c0ef", "sighting--a40ad4b8-cdc0-4c94-bb6d-2b28b6bc16f4", "sighting--dc6e70fb-8312-4ecf-874f-0d8de0b19d91", "sighting--f2927ac7-00bc-4ba0-a7e3-d780cfa8314c", "sighting--1407649a-9cd9-45b4-8182-dcc619884986", "sighting--c394247a-14a3-4c98-9409-d03abff5e654", "sighting--e8e2c23f-dc67-46aa-97cb-cb370c060b28", "sighting--d7299739-6fb3-4ac2-ac8c-da70e349615e", "sighting--93b1cf12-eab0-4600-b2fe-14f12b8bf9fb", "sighting--813cddbb-303d-4362-9294-692a5608cca5", "sighting--352fbe60-9817-4408-a62d-e948009f2e80", "sighting--72cd4338-298e-4cf9-b51c-b26607eae9d2", "sighting--fd8cf3cd-87df-4884-bce1-bbab2a24c78b", "sighting--e72a5e27-dce2-4758-9262-5ca4bfc23f9b", "sighting--0e56166d-cda0-4349-8367-03ab5975af98", "sighting--f0935f6c-4472-436f-8dae-c76b1253fdc1", "sighting--f1991eda-7d55-44a1-bb91-d675eddf4e31", "sighting--10a03fdf-1b04-4c97-a487-893e98622dfe", "sighting--44299725-ebff-4e28-b250-dc4867c86b5d", "sighting--c518634f-f9f3-434d-b084-ef63979cc088", "sighting--2e5e7902-68a3-4eca-a96b-0331cf775cf0", "sighting--e69c3c41-6d93-461c-bde1-a55153d40ad1", "sighting--928f2087-7a23-446d-97da-a077f93b28fd", "sighting--4de28c8e-3278-4dfa-b420-33cc006f27d7", "sighting--915aec6b-6c38-450f-b823-e2fed98a9d25", "sighting--6b782da2-dfe8-4b9a-83ea-3d04aebd67f7", "sighting--ce1cfbd0-221e-4259-9ba3-009988f658f1", "sighting--0fcf71d3-b879-4d3b-b08e-6b3537e78ce1", "sighting--f3b16ca7-fb47-43a6-bf37-0c05a52d3635", "sighting--000ed20f-dc36-4762-a57a-3223f7e906eb", "sighting--9972f812-f611-4fe3-93d1-cb7ba6588824", "sighting--8bb5b600-4187-45d9-8e22-25567b130a81", "sighting--d2b221a5-85cd-4064-afbe-efe2ced6dcb9", "sighting--57ef3a76-74c7-43af-97f5-57ba8162749a", "sighting--40355948-b28e-40ca-b528-f5e29ffd607c", "sighting--a8e0bb54-a1e1-4e56-9343-bc5698c37b18", "sighting--13399f2c-fe11-4404-a388-c0e1af48f6f1", "sighting--ee70ade7-9a36-4074-9ab1-2d892f676e02", "sighting--bc3f4dfa-670a-4818-a423-a19810de2b05", "sighting--c0e03123-2451-4f2f-8875-3cc6b14b1991", "sighting--f4805559-ac48-42d9-8cb2-0fbe066bfe3f", "sighting--3044df4a-3e7e-4031-90e9-92c3b9cb2b90", "sighting--e303ce62-2a1f-4cf6-92df-6e5f67dafd16", "sighting--74996f73-a88f-4729-9f8b-d413e6e0c7d7", "sighting--189fc8bd-3d94-4ab2-893e-d31c1e8bc600", "sighting--b5dbef99-2a71-494e-8953-0cc001bfce93", "sighting--3fba37a3-615e-4a86-a2fe-a840d7df7ec0", "sighting--4ae93724-de74-4e48-9f2f-f3c760e6d311", "sighting--0e721629-da07-4c9f-967f-45d3bb762a58", "sighting--154d2ee4-dba9-481b-ad6c-a9c23fefb84a", "sighting--e7d142d8-4a47-4d47-b82e-00ece93e5ef3", "sighting--4f9b9d87-d6e6-4de1-99a7-aecbcc7d0772", "sighting--68737271-fcce-44f7-bfb7-266e7a0a59e8", "sighting--7f43f37c-0338-44d9-8d95-07d48da31e93", "sighting--585cc4ac-162b-461a-b952-a2fc9d1ad66e", "sighting--5f93f739-e754-4906-904f-1cf0bbf6b709", "sighting--2b9b1516-1540-4dba-93b7-c868bf8f67cd", "sighting--91cf8a5b-1a36-462d-9d79-63e11c628dc4", "sighting--ee741fa5-c578-4a17-a9a2-d28a43b82bf8", "sighting--1e831c14-bd85-4efa-8254-d48b49a05ebf", "sighting--4ed68b5c-ef31-48e0-b32c-aa0affccb2dc", "sighting--0501273a-9ef9-497a-9126-aecf4abedc13", "sighting--389d0dd3-0022-447e-ab43-37c6531d3d91", "sighting--ffc8630a-2bc4-4ee0-a1eb-41ef0fe3db62", "sighting--549fea61-2236-4e75-a750-49e279630e39", "sighting--55fe1828-85dc-454d-a05e-ee95b057a530", "sighting--9d74ecf6-e680-4fcb-9077-ad31e7f92dc4", "sighting--8bf66735-7f17-4bd4-a9ae-65ce0b64ab21", "sighting--14330680-27cd-4050-a3d5-dd874787650c", "sighting--12739b8a-f185-430d-8c56-f1920abf8651", "sighting--8e192e0d-4b20-4b3e-9b02-562b1e549762", "sighting--a09295a0-e2e1-4b51-8c66-f3a5d466f9d6", "sighting--0b354a2d-f65a-49b7-a45f-77dc3b5221eb", "sighting--b4f9186e-4aae-4314-b88a-99cb92101c25", "sighting--3333bf1d-fd83-414d-8e6e-3f57f097a265", "sighting--d250f20c-7b7c-4007-8b4e-6847a45ea5c8", "sighting--a0811c1c-81b5-4a59-8cbc-9215945f5545", "sighting--2c698110-8421-46a7-929f-a4eba9fd8fb9", "sighting--2d548a7e-0b36-4724-9c94-5499bfe41579", "sighting--4dcc7d41-f04e-4b33-8604-d582b8622354", "sighting--e597f40d-8e36-418c-968a-416a608405dc", "sighting--4249315c-013b-447e-b9f0-bfd033ed99b0", "sighting--34f1b6df-052b-48d3-a365-65fb0155f1be", "sighting--59e87b68-37ac-4c39-b9bb-e919d2e0a96e", "sighting--e0a4950f-65f6-423a-85f5-cd038f74af33", "sighting--77021f1a-0b40-4733-9ad5-f318ab30d667", "sighting--53e31b05-80d7-4ea8-b3b9-01a4b4c52101", "sighting--fba88fad-22d1-47fd-bd49-5ed9e97582ae", "sighting--4a1ef6e8-79b2-410e-9ef1-5c13e5adb36e", "sighting--d43e4932-e139-4d34-b206-10d0611d78d3", "sighting--256cdef8-a758-4d17-9e5b-e3545b0379dd", "sighting--d8d6e616-560e-4e96-895f-83b24f04ca48", "sighting--49bd2057-387a-46f3-b275-af4927fa1dad", "sighting--2a86adcc-bfc0-4b74-a425-ad769751c06c", "sighting--cefe366b-639b-4818-84a7-4f37c66fc3f5", "sighting--07d88503-8acd-43dd-823f-228d565ca8b2", "sighting--ad29bcfb-9843-4fbb-a873-9ebe833f402a", "sighting--94463b59-b97d-4f4b-a790-676b5ae95e1c", "sighting--ac7f8861-3b2d-4b2f-9b38-7c1b960658a5", "sighting--e15fcfdb-3e7e-441d-bf16-3bc82b2e26d1", "sighting--af905875-eeec-4d22-87b9-4916c5d664ac", "sighting--b344c3bd-acad-456e-b351-06d884d479bc", "sighting--6c581466-7f03-4ce1-8d04-b8e4ddfa1e08", "sighting--d28b9840-514a-4fcf-a722-aa353ffa7a96", "sighting--82c7454a-8086-4ed7-9892-bb1e98e153cb", "sighting--142a9f14-d29b-4150-b0d1-6855c9c264df", "sighting--c2c1031c-affd-4539-bc34-e6bc605a26d6", "sighting--5f144533-5f80-4964-9764-fa465f59a2fb", "sighting--2e0c5fa0-901a-40df-afe8-695c5124be17", "sighting--054a64a3-cf5d-4c0b-8b72-144b91eca618", "sighting--e16ff32d-b30e-4cd8-8bfd-172c713809ef", "sighting--cfca972b-7b4b-4573-b10c-b173c18d5c7f", "sighting--8f4c03ab-1850-4c9e-a20d-153a7772be57", "sighting--1f78b02c-9fca-4935-ae25-bab0740748c7", "sighting--2a70d3e3-2dd8-4a55-91e4-12865158ac43", "sighting--bf571e3f-590b-434e-b186-8346f793b8d1", "sighting--48bc0c28-a7a7-4ffd-94cb-002701a01e7d", "sighting--2a3395fc-ab4b-4012-b2e4-67fd6097caaa", "sighting--0c4e76a8-9cc8-4ac5-88d9-2fb7287b7bde", "sighting--ab16b87f-64a5-4e68-a9e8-b460ce3987ed", "sighting--dd980257-6f33-49d5-bd82-cab433754a7a", "sighting--0b5a2a28-4eec-4e19-81d4-5231aa7ec6d5", "sighting--12219bd6-3518-4612-adab-396f832928cd", "sighting--bb0e71e6-67d3-4e74-86c2-6aad0295a60c", "sighting--c4428986-8e5d-4d90-8229-0bf6b909f280", "sighting--80d9ecb6-08a0-400f-810c-d0e51c47759e", "sighting--1b5dade7-fc36-46a7-8804-1cdadd3e9e0c", "sighting--57194c7f-5d4e-4a09-a993-952703a38c3c", "sighting--d572925e-3c36-4f26-8f96-191676775b34", "sighting--b7332812-26b7-4f50-b981-d463e3257c14", "sighting--9a00756d-9e3e-49bb-8c11-2075331f8d1f", "sighting--a22d24f5-4d71-442f-8c32-4037f5650b7b", "sighting--70259c27-4e87-4747-8a37-75a155755576", "sighting--4d3fa9d1-0863-44aa-af88-ea999d3b01c3", "sighting--d2fe763f-01f0-4126-9f4a-fc4f45e7c0a6", "sighting--a54943a6-2c51-48cc-9eba-7820d458d12b", "sighting--3440869d-7a77-44e7-8595-f85a21a37f5f", "sighting--f85cff72-75af-4618-82bb-ed5d1ba26dc2", "sighting--42d1efb3-3fa5-4f2b-bb81-fcf349c47161", "sighting--ba215cb9-fca4-4e5d-bbe7-93abdc694f8b", "sighting--c249b70f-28f8-4760-8b8a-a7208e6263f8", "sighting--ee59958c-d23f-45d9-beb9-28ce8a7b48a3", "sighting--519daae9-2260-4542-aa4c-983cd5aa1c90", "sighting--fc6cbd4e-c039-4921-a1f1-400d565d1df4", "sighting--78314a38-3ad6-4ee6-b58f-ab737c99d718", "sighting--f6eae518-33d3-4e8c-98ad-30cfe126a117", "sighting--2a6bd159-8217-43ae-856a-a77d052402ee", "sighting--816eead2-e918-4a5a-b557-186bf567e3ec", "sighting--aac093d1-dd25-4b87-99ab-6dd42a3d4e13", "sighting--deb92d81-cc99-4b0c-942a-2d7d9e379b24", "sighting--791d575a-2abf-4139-a493-0f68ce1fad41", "sighting--183168ea-0dde-49c7-a4e0-59f44e2b5bf8", "sighting--b0a7d232-2974-484f-8473-d615c276335a", "sighting--e6e9c7cf-a637-4337-b856-db5e094c7f19", "sighting--b19bda2f-d3e4-4d3d-8f61-fb12c18030b2", "sighting--e8d36f21-faa1-4f3f-8f03-2b2906db635f", "sighting--44df1011-ccb1-43c9-bd52-67c21462592c", "sighting--bccb9a17-3438-4aec-b58e-3a8a2df5e85c", "sighting--9b3e728d-c1ee-4674-901e-2231046a80f1", "sighting--bbab735a-7965-41e7-8204-8b84eed0460b", "sighting--a541450b-37bd-43e0-9794-75ade5630fd5", "sighting--074efb2f-8b4c-45eb-9db8-c92bb34c278a", "sighting--98f017df-8d53-49c2-985c-d1dbfe95ee0b", "sighting--1b84264a-2629-4948-99af-dbbc2d9fd2df", "sighting--7b3f05c3-64a1-41b5-b9a6-16d8d338dc1d", "sighting--bf0759f0-a0b0-40d9-8361-8e0da5c97262", "sighting--74644ffe-7eef-419f-b5bc-801fb4802fa9", "sighting--3879466b-17fb-4a98-991c-a04b3bf654fb", "sighting--69e03015-b773-43b3-b914-129530643f0d", "sighting--fee6441a-c51f-4d27-9c8f-65b096cfc339", "sighting--b68ac1ac-3adc-4e68-91e2-e7e5a82cf36f", "sighting--3c0d9e37-fe75-4456-9a9e-f14f610c09d5", "sighting--e0c6eb2e-5f36-46c5-99ef-bfc482f2e9ba", "sighting--78e7d85d-3969-4dd7-9e2c-60d3819fa919", "sighting--f92bba5a-22e4-44f4-aa53-79d35941f9c1", "sighting--907f3e1d-dac6-442a-86fd-0b779195604a", "sighting--c803a5d0-e0e8-4ead-8c9c-eb5861628eb7", "sighting--07770f5d-b13d-4520-a987-3cc07b6d4fd0", "sighting--b0b86db6-65fe-47e4-a72f-b316747ef827", "sighting--2a07190c-0db6-4de8-ab6d-8c7bc384dcb9", "sighting--f69d6f0a-5260-44f2-96bf-95d0a84a6367", "sighting--0ad705d1-25dc-40f4-91bd-c86caf5038c1", "sighting--ef0c7fce-7967-4f45-be1e-958ae268ba00", "sighting--706ba328-0b58-4160-bda7-c0f654679ed7", "sighting--dc983a20-bba7-4c23-b4d5-2d1016de5e57", "sighting--b61d042e-d6e7-498a-8e1e-72744ede5904", "sighting--4d775968-9990-4677-8bf7-4ef4483ddaea", "sighting--1dc6f8c0-fad1-4faf-b1b3-12e314b9248d", "sighting--4e9c66f5-8640-4786-b29b-5a477e85a3ed", "sighting--2a44f9d4-82bc-446b-a851-51fc566fca18", "sighting--c52efab8-8cdc-4014-adca-be9cd7030bc7", "sighting--04f1300d-d491-4a43-8bb3-508aae737f27", "sighting--cabac22b-d535-438d-89a0-f753181e36ba", "sighting--58938621-6bb6-46bd-9945-00e9885beb1a", "sighting--39b9cf6b-87c9-45f9-a4c9-86a3ce929074", "sighting--44e35e4d-500d-430c-b027-5a0483b85a1e", "sighting--263c78a1-d3fd-400a-adcc-06a08ba01325", "sighting--b9c07db9-4c35-4250-a75f-38e53ac88bab", "sighting--b0ed6abe-b073-45a0-a669-cd6fa62d3c86", "sighting--78ecd033-6ae9-460f-a5ab-d36ebd986d82", "sighting--51bd241c-4440-4abf-abb2-07e33eeb2a7e", "sighting--3f3272ce-5f9f-4595-8c80-7f3ac03d20c2", "sighting--2bf4d92a-025e-45b0-ad3f-9e378a642608", "sighting--9657ef2b-90db-4d0a-9bd9-b9222a841621", "sighting--34a021a6-80b6-448b-aa92-7030245932d9", "sighting--e2d23002-d864-4769-a2ea-f332e9ae6d0c", "sighting--c58d6fb8-a99f-4ba4-ae21-bb04607be91e", "sighting--6b8a574c-09ed-4076-a5ac-dc48ad76a2ba", "sighting--f26f40d3-fedb-4dff-bc5a-758e960640ed", "sighting--293aff71-6bcc-440c-b214-842a471ef73f", "sighting--a8b14147-fcfc-42e2-b898-66783ba77d32", "sighting--5c537616-1ada-4587-a783-79a5f8463a1a", "sighting--8a4f5184-e2d4-41d3-adbc-cb3f71056f85", "sighting--4b117bb8-e9f4-45fe-a51c-5298778079b9", "sighting--4907a0c9-3b49-464a-979d-03ac61bfca81", "sighting--170d1e0b-6b40-4223-9747-9434252f1fbe", "sighting--8494c257-a31b-47fa-b8bd-428a10a308dc", "sighting--332d87a2-ecf1-4681-b252-52c16c50a1e3", "sighting--8578ab31-ccd6-4b21-ab47-b02ba74356e7", "sighting--e318fb41-0674-44dc-a84d-601bd844c497", "sighting--683060d1-e35a-4fe0-864e-a936e0becbd3", "sighting--8e5773b0-0324-4a96-87f4-06f6d1d4423f", "sighting--73f42dd9-dcab-4812-9181-749f81f77249", "sighting--d99ac7e7-7766-45c0-9782-3c3b5c420a61", "sighting--b37324d8-dff7-4981-b8ef-ef6d1fcdea1a", "sighting--86d3273c-58d0-4764-bbd7-7039738a0e7b", "sighting--e4a1ddca-e78f-4003-a796-ba9538cbbc13", "sighting--fa3171c5-f39f-403a-9f7d-90d59ce0d291", "sighting--648737f2-63dc-4b90-ace9-f558deb9948a", "sighting--a09b3b9c-2939-4ad7-9a9f-67b2f05db158", "sighting--c9ed577f-c60c-4749-89db-fd374d303ab9", "sighting--cdaecba2-fae4-4f16-a31c-1d01fe7bded1", "sighting--103556de-e1b8-4858-b5cf-42ab027c0e06", "sighting--1c8c3f82-e4f3-4106-b9e1-aefa9187a751", "sighting--266a6ed5-5625-455f-ae0e-f8daef8dfa91", "sighting--72bc0bb5-b1f1-4a57-8c9b-54155d8936e0", "sighting--91ac7ba2-6f8a-4ef4-9251-8e9c5b4a97c0", "sighting--b122cb15-d53b-4ec8-aafe-08894e7d153a", "sighting--174e1aa7-c260-40a6-9502-ce10918d96fe", "sighting--c3d6d356-a51c-4bb7-90c4-6ca406ae0195", "sighting--038674c2-431b-4d78-92c9-6b0d12e455f8", "sighting--5d633899-22bd-436d-a999-18b6a88164b0", "sighting--379277d3-605e-49a4-9f4f-5380981a121c", "sighting--3e5c7094-1bc3-4c68-aed0-6da63c006812", "sighting--e34acfff-20a8-4479-aed0-29ad88ba4579", "sighting--0d305253-722d-40bb-9e16-48f8091a0e1b", "sighting--aecbcd0e-62b9-4965-92fa-1319de0d2598", "sighting--812132a0-dc6d-48f9-bd49-c72c91c244a3", "sighting--7b0f66db-6151-4170-8c1c-b33b0f90c445", "sighting--93255d7e-b1e4-41f2-a37d-d786ec71a981", "sighting--fd8c88c4-665d-4ffe-9e21-0d1501cb2a39", "sighting--6508939b-b42d-4dab-84df-6dbc5e0cfbba", "sighting--983b9705-e7c6-4f38-b841-4993a4dffa0d", "sighting--43bba2c3-4b30-4a8f-a5c7-9dad0d3734e6", "sighting--5f1c2bd8-5469-48ed-93ff-7512ecbc5c07", "sighting--afc75380-e576-4e80-bb29-2c8a4de5dac2", "sighting--e7c44fe5-548d-49f3-b76e-395083917069", "sighting--c4adca00-06bd-4093-bfde-6067817036dd", "sighting--9fe03710-11c6-49f9-b6e4-66c214c493b4", "sighting--35967622-cc1f-4c0e-bf07-16e39fd666c2", "sighting--9d867c9b-cbb6-44d2-8338-aa37f3b105f7", "sighting--62b5c288-79d5-403e-9db1-e0dd14f0d8ce", "sighting--fb67e0f6-7344-446d-bc66-4f5366f8a580", "sighting--d241aeaa-f50e-4824-b38d-0f5c055e4b9c", "sighting--ce101e78-bd81-4077-b838-afbd9adb9c9b", "sighting--ba78c722-0649-4157-80d7-dfaf284c2340", "sighting--989a4290-99b8-4186-8bb4-f6f7aff59105", "sighting--19ba3e0f-ad86-49c7-aae6-57cd074098d8", "sighting--7aa87857-3f24-42e5-a727-b1d46efecd6e", "sighting--fe382d5e-8a87-4ecd-93bf-75b0461a36c2", "sighting--8e16a581-f772-46c5-87b2-b9827f4ec0f7", "sighting--1dff2c2a-b918-4b26-b45d-c9422e7a8f18", "sighting--47e35f42-b253-4664-857d-67f52e46a2ca", "sighting--fdf25673-76e4-4252-9489-61341225a920", "sighting--2d958255-7e94-4c60-bbf6-7b7e14971df4", "sighting--c8a0f49c-16eb-4fcf-9899-4391d619f4df", "sighting--bec61f8a-223f-4c4f-a2e7-b146007e2a87", "sighting--2582f914-b015-416a-b29b-2b9c7b6dc44e", "sighting--0c19ea38-7297-45cc-82ef-1e0f77d04d7c", "sighting--7fca0db4-9af4-458f-a62c-a72146d9c950", "sighting--e3ec8581-071f-4ffb-ae5f-d8cde0422fe1", "sighting--6f2b2abf-839b-47d0-94a0-fd7411411bbd", "sighting--926c3eaa-e3fa-4571-bd8c-992252ecbcc7", "sighting--d03b2214-95d7-40d4-b710-9d14fa8ba3a0", "sighting--b0f233f2-2a5b-4b0e-a059-026e750336bd", "sighting--f06768cd-ff18-4dc0-bb91-300353a4d801", "sighting--45170579-ac03-4d79-ae1a-a7ca61e9af98", "sighting--bc65739d-6b98-4a95-98fb-82c7a6dea4d7", "sighting--9df70cb3-b96f-4981-b2e9-2aced41a7c06", "sighting--a169924e-7a48-45e4-a056-fad37d716e36", "sighting--cdfbd2d3-bb59-44f2-82e1-1745660d65df", "sighting--ea4039d7-018a-4af3-ae58-d95076a2fc75", "sighting--9adacc51-5e7c-4125-b2f6-787b8db6758f", "sighting--7f0fb282-88ce-454d-8b23-159496c021d7", "sighting--be5332c4-e656-4cb3-a65d-d9aecdbba391", "sighting--fd3e724e-e084-4039-be43-2c061e3a88c1", "sighting--d8e055a6-9512-4347-bb53-4ad42e39c234", "sighting--7c61e28a-ea8b-4d26-afd3-36952644fc84", "sighting--357281a4-8b89-4c62-88a7-d603467a084c", "sighting--25cda208-5310-4fd2-bc51-0cb9bc15f4c3", "sighting--53d5d977-729d-4041-bb68-e67c06741cea", "sighting--c5ea7481-afc2-40c0-afbf-af8ac24b0cc7", "sighting--5c3dad12-f27c-4dd6-a25e-b1e32fe793c9", "sighting--0d5645a8-50e9-422d-860e-5ddf0b3a4a2a", "sighting--daa0f132-78da-4968-ae8e-1f19d4393f4b", "sighting--da6b78cc-d74b-42da-b7a1-2bda43f7e5f9", "sighting--35babd3c-62e6-411d-a07b-9040263e0d34", "sighting--1ec0d17a-0e74-404d-a794-4a4ca5d355e9", "sighting--97105a28-4ed8-46de-abfe-1432d5073bcb", "sighting--bfe4737f-ddee-4c59-a4e1-cb7aac5eb047", "sighting--eda67791-b571-4a00-9cf5-e0f995071478", "sighting--b320c4a1-730a-4626-bcb4-140535417004", "sighting--12b92c4f-000f-48f6-8568-2d7385229c4a", "sighting--549a6efc-2200-440f-9219-394e07a53352", "sighting--15385731-bb19-44fa-80ba-b54beffbac65", "sighting--d06cf9a7-a84a-4ee9-a748-ac5572e91beb", "sighting--819d4a27-b055-4e5e-86ed-56b42dab3d45", "sighting--d2a875eb-11f1-44c2-b5d0-0eaedc071aea", "sighting--b7de687e-2147-4d25-9aca-b908075fd96a", "sighting--144cb0af-3622-44c3-91a1-a1945651dc2e", "sighting--2dbaeaea-7137-48e2-b894-f5d2c414ee42", "sighting--7227951c-ca50-4791-bbca-d7ff70e27df8", "sighting--cbcbd42a-0f29-4d26-9adb-d4de1666d8c9", "sighting--bd4af614-6dea-46a5-b73a-0781ce2224a8", "sighting--98a6bbaf-73e3-4019-af1d-382b10c20d3c", "sighting--a789136f-b335-4ebf-a4ac-6a44570249a4", "sighting--4513de28-0f92-48cc-b877-e7ebe402e2d6", "sighting--8e4ee7e9-b59d-4a21-b6df-e07d5f78a65b", "sighting--2fe143cf-80c1-42e1-9cd1-478f07c0e0e7", "sighting--639201f5-614d-416e-b696-cd0f18b61b51", "sighting--8bfe1a33-ea13-40a9-82ab-3b59332a1ea4", "sighting--40b025b1-0420-488d-a2e9-1ceb9bec23e6", "sighting--ab7c39d4-eef1-405d-8b52-3d58902aa22d", "sighting--0df913b1-6886-40ab-9a59-9a667332b807", "sighting--e6e1b63d-3100-4d59-8579-42e87a496550", "sighting--b6640c77-a7ea-4454-933b-6ac00376742e", "sighting--741ed66a-8a00-4034-a28a-715a1795df89", "sighting--5a4c4fbf-4f78-45a8-90dd-c50abf0076ac", "sighting--eb099b9b-27be-4d37-8c0b-8f139175f5b1", "sighting--c14ffb6f-4bd1-47d8-99d2-b59f8cf1f513", "sighting--aef07633-5d22-40e8-9c1e-a523ea726d79", "sighting--a6908a22-596d-4916-bcc9-81e09e77b168", "sighting--e86f294d-5de4-40fb-be50-e57f76b5029e", "sighting--3911ad9a-6d39-4151-8752-c64fe00525a1", "sighting--436d9aa5-3754-420b-b94e-80c494875d76", "sighting--dd0ddd82-7e66-46d5-bc11-6ebed820181e", "sighting--07ded746-35a9-4296-b5c1-7705f6bfe7bf", "sighting--7a7dc930-6f18-44b8-84a8-ecde952d0bf9", "sighting--0b05fe45-4d8f-4da0-9d65-17d8cd665edd", "sighting--1a3aee8e-f2de-42dd-beae-be588ec94031", "sighting--43e291e6-f1d4-4e23-9388-49ee619ef6cf", "sighting--28126b1b-b5e4-439d-9c82-d006be9c8b5d", "sighting--36240dc0-e03f-4918-888f-47a9e06789c8", "sighting--6939b34c-defc-48eb-a777-da48fc5ef352", "sighting--4ad55fe4-0990-456c-b0d2-b84f05d521b6", "sighting--6fc0eb22-c885-4d1e-955f-2f0e37b1e607", "sighting--b39686fb-04d7-4278-bca9-dd3261aba755", "sighting--a6dc8de6-60df-4834-a73f-6beff39cd502", "sighting--b9cab260-1589-4f5d-b647-75f612d8eeba", "sighting--d59d7ef8-5a30-4100-9f51-1ab2d2418965", "sighting--f040cbba-376e-4354-ab0d-ebef5c7d9ce1", "sighting--28cf3f3e-0581-4fdd-a605-ff8e6f4f9f36", "sighting--8c2e52f4-ad02-422d-8f0c-4571ce3e40e0", "sighting--0cae1a13-9b97-4dcb-a8e4-55cc713092db", "sighting--b5f0fdbb-ee80-4aec-ac0f-f8db0701f79d", "sighting--74be4d5b-0969-415a-8f83-33e3180d7665", "sighting--2b8f15eb-2bd6-4858-8551-c1e7d277ebeb", "sighting--d5bf3b24-34b0-4647-83b9-85420c150063", "sighting--83d977e5-3cc8-45f3-b9b5-3bd01b3a355f", "sighting--4cdc9951-5060-4634-9511-d4721d37e18e", "sighting--0a898deb-e172-44ab-a1e0-62f3a8a38c3f", "sighting--757fa17d-d834-4551-b6a6-57a5b1d373d5", "sighting--d5fdd633-c17d-4c43-9725-e2fd10754267", "sighting--377a6e97-28d2-4544-bba2-92a6539995cf", "sighting--55c0fd76-de22-4605-b9a6-a0519fc6e5e7", "sighting--2b100b2f-2e0d-49bf-8a79-15162dd6bd61", "sighting--cb3d71e2-0911-4d71-9a7d-12ff971ce8d5", "sighting--9b06b9f5-44c2-42c6-8b76-d4825fe69a8c", "sighting--1a28bad8-8430-42ed-a9ab-ab30c60cba16", "sighting--d1e6deb0-3c1b-4ace-a72c-a6d1b816b3b8", "sighting--047a4de3-fe79-4f22-8c53-c2470eff6cfa", "sighting--a3330076-c244-482f-838a-124a0e1625eb", "sighting--434de322-5813-4614-9cdd-af37f258ec51", "sighting--611605df-a85c-4a46-92db-2598cb0b12e5", "sighting--f7e877ba-8727-41dc-8123-ec6420a47f14", "sighting--15af55a6-e90b-42c4-89b0-2f99ec9c9bc5", "sighting--31afafc8-41f6-4d0f-9a49-fab86ba1755e", "sighting--af3ca3ac-211c-47f0-a3b2-f76a30a2ad58", "sighting--8d207c27-b1ee-4c31-9513-81a3b4939358", "sighting--efb67678-f3be-4690-a1cb-40e44a12a57c", "sighting--7e14d904-a173-4865-854f-10a8428b35ea", "sighting--6dc0ccd7-b1d1-428a-97e7-780a876870a4", "sighting--6049c02a-db72-4b03-a336-601d31792ff8", "sighting--a8874d44-6455-458c-a477-144ff885cc6c", "sighting--00001195-3002-4e4b-bf99-dd199640d750", "sighting--9bc1cca9-e6db-4a0b-92a2-9732ada09c75", "sighting--f082832d-916f-46a2-aaa3-715f8c798e06", "sighting--0d48870a-3f94-42e5-9b3b-1b1285f5fca5", "sighting--c56fb0e3-0e1c-4974-a2f0-4d089111d9b3", "sighting--dc9fcd7f-0b0d-4885-bf31-e10535da4b30", "sighting--8f43f570-664d-4ce3-a92a-85dba712e068", "sighting--445d32aa-15d5-4d98-aeea-cc336a81c81c", "sighting--3b4b144a-80d8-4c2a-b262-948078cf88f9", "sighting--2452274f-ba48-443f-8581-80f2d89aa5b7", "sighting--4ae3508f-17f8-426e-abfc-4b01d5b1c04b", "sighting--9b9480ef-cf6e-4658-92d8-5255d5c979ad", "sighting--1b8c980e-3522-45d2-8a89-e691630ea2fb", "sighting--5089c251-ac1c-430b-bbaf-9dda8cbfd61d", "sighting--7fe93b41-6ecc-4b75-b0c3-77868e84a049", "sighting--91383b63-3aa0-4c6b-ba3b-2e3f2dba7e58", "sighting--5f49c780-0a05-4179-b4fe-f51ac034bd89", "sighting--fb940c86-f60a-41ac-b2b6-19701a777322", "sighting--dbf871a9-dbf1-4fcb-8e25-a4a6c79733e2", "sighting--1188c634-fc6b-4f27-b817-08edda9ee007", "sighting--3ec8c7e3-08d0-4dce-9387-c654bea4348d", "sighting--c4d4dc3b-32c8-4c2f-a62d-f63c691d1399", "sighting--829dcc8f-899c-469e-8974-bc27f8c9dddf", "sighting--963d93e6-36ef-47a7-af12-0ef3dd89c7e3", "sighting--ccf439d5-3371-467f-8e81-c6593d022122", "sighting--b3f0bc20-c717-40cb-ac96-dbc3dc00b09d", "sighting--856c074d-bad6-4d1b-85eb-a1a8cda1d02e", "sighting--575f87b9-e284-419c-8e6f-1a4e83dabce0", "sighting--2b3d651c-69a1-40a2-af68-277ce187db73", "sighting--08867819-68b5-428d-8b22-a2dbe8c7a413", "sighting--8139a3bb-cd1f-4549-8e50-5d252c47781f", "sighting--1271ec3d-b8d1-4892-8160-1c41e6cf32ae", "sighting--b779dd2b-3450-4cb1-8909-314fde3a8b97", "sighting--1fd2f0dc-af2f-48ab-8eb6-e4e274167d67", "sighting--20cd2d42-a5c1-4359-9cac-5a88911863be", "sighting--d66a03bf-c00b-4f8d-9650-c052e620fcf4", "sighting--156e620a-ce19-4dcc-9e08-93ae46188e2a", "sighting--d29f9723-d35a-48f2-be08-2e6dc2d78de9", "sighting--32948589-72e2-4de8-9006-305fd8b17e91", "sighting--9d046b27-7db3-4c62-8af4-d30fd4282658", "sighting--588f5808-df31-43e5-add7-6b4d6f16f178", "sighting--95d3e214-15cf-4368-b8b1-5db7a13bb911", "sighting--503fbd4f-ea9f-47cf-bb4b-de2843fef692", "sighting--6f79b820-ede9-498a-b05b-4b8d60ac220b", "sighting--53156164-d041-4df9-9442-798b53566ba7", "sighting--103f53d2-c8ce-46be-9adb-c4998c174943", "sighting--a3b45afa-d10d-4b3c-88f2-52a936a31014", "sighting--fd5b1dfe-6dc1-4258-9ebe-dc5fb3b6c6f8", "sighting--498a5c12-7c2a-4643-83fd-ef956e9d51ae", "sighting--e6e96085-c835-4598-9cb9-69d7a36c647d", "sighting--806c5494-5f4f-4618-95bc-ece57f3d237b", "sighting--6b8314c3-09aa-4082-8284-57f11cae84e0", "sighting--8138cefe-b301-4511-aea9-4f2be21392cc", "sighting--14a02832-3089-4f1f-83b4-f93082118acd", "sighting--5781adfe-87b6-4ae5-a4ad-172743ce4eab", "sighting--2b3a7368-23c0-4089-bc01-7bccb79b4c04", "sighting--4d7509c7-0094-4cd1-992c-a860bc64b5aa", "sighting--8249fff7-982f-4cab-9eb5-34a4706cb6ca", "sighting--39d7369c-5146-4350-a382-15c1bc078944", "sighting--0407abb6-de9a-4b3b-b966-3f4c2de6f619", "sighting--3967c5a9-f576-48db-82a6-fdb6e069b7ef", "sighting--407dcdf8-37da-4a9f-b787-9825e0d018d8", "sighting--7376fffa-caac-4ebc-9fe3-04d078b8fea0", "sighting--d41311a3-b059-4951-bb5a-272fc2301de7", "sighting--9843a1ce-018e-4647-a120-695c5fefa270", "sighting--f055cda8-e484-4f44-8cb9-43899b0a77d8", "sighting--13bcfa57-968e-4556-ac06-d3c4446453bf", "sighting--f5539af0-c220-4e44-8f20-f4e16182b097", "sighting--ff1ac366-792a-4bbb-89cb-3883ad079c36", "sighting--5abdbeb1-6ea2-4898-81aa-b37ae873f0e2", "sighting--37667738-c313-42c2-bde6-cdc2afbd4372", "sighting--e7121f31-ba0b-4a87-b1b9-2f6075b9d53a", "sighting--9f0c8eb6-28b8-4eff-8cec-dad189b7cee7", "sighting--cf80626a-3f70-4316-acae-cb7bfd10ce37", "sighting--793b3373-6905-43ab-83c2-895fa6b9d45d", "sighting--7fe8c43f-b719-4728-933c-b5ad6321ed39", "sighting--292b8a04-3055-4236-9f8c-d22f7884f248", "sighting--52668585-e485-4d0e-af73-a3ffb0ced00d", "sighting--0313764e-d670-4288-9ee9-e097957ea065", "sighting--730639aa-5f34-4ebf-8e12-b633c856ea04", "sighting--f431255f-dfd5-4784-b91f-a23f4af36fe7", "sighting--123a735c-9044-4c7a-a873-0aa090396548", "sighting--cb36e156-9f9e-4e22-a191-9fb440e81111", "sighting--d1a2d2f0-933f-470d-915f-c32e60c86690", "sighting--3a7367ea-a9d4-45dc-8e70-2cbae37bf097", "sighting--582d95c2-78dc-465c-b947-89e460c56a68", "sighting--5ef842c1-4511-42d4-b5e7-2f3092c2dab5", "sighting--675c7a52-87fd-49c2-8e55-f929a36579bc", "sighting--51158844-1d33-4b11-8a8f-52b42319dc3e", "sighting--3d9b2ee6-af18-45ca-96db-66914adbbe58", "sighting--e30f4909-6acf-4e47-9354-4ec7e11d903c", "sighting--1e50baa4-d922-442f-99a1-afcbe6aab5e9", "sighting--19568ba8-4415-4f73-a290-b041d1d69af6", "sighting--e69cc5db-be10-4040-bed6-5720ecbba384", "sighting--60a0d895-f2ed-4879-8f4a-19fef3916e11", "sighting--680ae2ed-de0b-4cc3-9783-7be57cf6d85d", "sighting--41d25afe-0ca3-49a9-aec0-98ace37e04e7", "sighting--de32c94b-7288-4432-b44b-d40d25b30e78", "sighting--2aaf9495-ad5e-47f5-8b44-9d99467ba2ff", "sighting--eeb0cfbd-3756-40f6-bd82-550b28717165", "sighting--41667d95-f6e7-4fdd-beaf-3bb8fdc14927", "sighting--b3a02ee1-5088-4282-89f1-49ce86daa47b", "sighting--2fe68a97-32c8-4e06-8606-05661858f115", "sighting--62dd0981-2882-49ab-85a6-2d531dd759b6", "sighting--d191b09b-fb37-4eb2-9e8a-8ef4a73e7324", "sighting--eb1ab6e8-8cb9-4951-84d8-74ccd367d12d", "sighting--3de33995-f688-41f2-b026-6df18b89c9c2", "sighting--ee5ed636-bf61-412a-9ff3-ad5648c2288b", "sighting--00298275-612d-4181-b4bf-66a88a324eae", "sighting--79d64f08-bb6c-46b8-b911-fd6179d55fe6", "sighting--494a918f-99fa-4e8f-a068-03ebb8f59a47", "sighting--bb70af61-614a-48e6-bdd8-2037801386f9", "sighting--eaec2683-cbf8-42a6-8768-97ebcbb74920", "sighting--7fa571fd-e746-469b-800f-b95277345571", "sighting--6a2ff187-7cba-40d7-9431-50ce83456cb8", "sighting--893e14e4-5ff0-4475-94ef-423aaa9b4915", "sighting--a71a90a1-3dbf-4fcc-b15b-ec173a434a8a", "sighting--e2d7a8bd-023c-4b92-b8f7-137092cae257", "sighting--a0f5a421-fc6b-4673-8648-f57d48bfe255", "sighting--ff37e130-300e-4c22-bee3-2021cf1d7bea", "sighting--4cbc0a24-b3c6-41c6-8cf7-1e34fc30768e", "sighting--b4f59c83-5e1e-4d50-83fc-afbafc7e1f4e", "sighting--1e871cb7-ae36-4625-abb7-d295920b6f1d", "sighting--994e2078-9856-46ac-9fdf-8757be4e68bd", "sighting--5ad5e7c7-6b7b-4499-8cdb-2cbfa05a93cf", "sighting--29e45906-1295-408a-bef3-88a6dc15d2bc", "sighting--b107e5d4-0d7a-4ff6-83d5-c7f4aeeda339", "sighting--9e3007ae-3ee4-4a06-b936-cbc353f3e637", "sighting--b6b5e593-d8a1-49d2-991f-52746f6981a7", "sighting--8473fff2-6c41-4af1-b7fc-bf652e366921", "sighting--5e08a60e-bb7c-4dc2-8308-ac303473ac54", "sighting--27ea7f73-4dc0-46fb-bbc4-2ebc237bb7a6", "sighting--05aabe07-2b6a-40fb-a68a-425834b91167", "sighting--786e52ad-0d30-4e16-92a2-b6bdbed880d3", "sighting--5ceffe48-359e-4e7b-a4ae-ddd75d94678f", "sighting--239008fc-a036-4396-9b9d-c1b474d0653f", "sighting--1bebfed6-d3be-446b-a536-937ff8ccf3b5", "sighting--f9b5e098-4644-4a9c-a902-d663471908e2", "sighting--21b872eb-e122-47d9-9c56-606d95245144", "sighting--d861bb55-45db-48bb-8d63-1907b2745133", "sighting--39410648-fd7a-475c-8693-6f37c93da25b", "sighting--11e12bfa-1bbf-4e01-bfd7-219e7e588eba", "sighting--2ae12895-e1cf-4d08-832c-c1745166f011", "sighting--ddbd4510-e492-4622-b5f5-a7ffb2fc0e00", "sighting--4f6edb08-5944-45a3-8813-1d9ec28512f6", "sighting--51dbe65c-d905-476f-9433-58d4ac0c7a9a", "sighting--e8385750-00ce-4851-958a-450546df0ebb", "sighting--9c2f0497-edeb-4aa3-8090-5fc416485019", "sighting--2354445c-7e32-4bd4-9fc4-97c73204d20f", "sighting--973dcb4d-a43c-444c-88a6-eef9399976cc", "sighting--a5828c8a-b64e-44e7-92a5-a0eec9a9b0e4", "sighting--849ad3ea-9c16-49a5-a766-257ec03c5fe5", "sighting--173a7c7a-a81a-4d88-942d-b35d8c409c29", "sighting--c2b63164-efa7-4d98-b60d-0f2179eac2c7", "sighting--534ca09a-1a3d-42ce-b87b-5fca610b8427", "sighting--3e6504fc-bd76-47b3-a710-c54fc1ef42ff", "sighting--c8433244-b2c7-4c67-be11-6cd1451fee78", "sighting--dce253fa-d9b1-4e4f-8815-385c7edfdafa", "sighting--a07ff7fa-bc72-4438-83cf-8521bbd6e5e8", "sighting--d3d26f14-18b4-4536-a56e-00bc6a1379ec", "sighting--157c5167-dab8-446d-9226-5b0f25c03c1d", "sighting--24d35e9c-8f1c-4c00-8fac-5a0e4c557104", "sighting--6f9b77fa-edaa-4868-902f-f20536aecd31", "sighting--e63b1973-9e93-40c8-9e84-33627d3ff24f", "sighting--bdbafad7-278b-4556-885e-0383315d0ebc", "sighting--84d30045-e9cd-4345-bdbb-ca953b9f334b", "sighting--5fc85b0d-d2fd-473b-80f5-854fddd64efe", "sighting--ca74e6ad-e83e-481f-b161-b3d3f8cd87f8", "sighting--9f39e28b-a5aa-4da3-83e7-cc7194d5991b", "sighting--c7ee8b9a-3625-48e7-a7e0-a47d0c2233c7", "sighting--237e11a4-d129-4476-9311-ec9f6a199c6c", "sighting--8f4e4bb0-786c-4fd1-8c50-5d3f27fa7759", "sighting--ba5348f3-04fa-4510-bd4e-8d0a891c79b1", "sighting--0d44be6b-caa3-4e68-8103-53f50d90e4ce", "sighting--74948c03-d88c-45e3-893d-404e80c68427", "sighting--60830971-bdfd-4da9-be38-2b1e128937e4", "sighting--f95e4e55-081e-42f5-9a71-869c596da615", "sighting--6f145936-5ac8-4d6b-9a99-e9c07316c68f", "sighting--bb6f6fdb-49ff-4cf3-ad50-7efc6e0e8f9d", "sighting--5a0419bc-8cfd-43aa-8a43-27d3817d192c", "sighting--ca4f86b2-d1c8-46ee-bfbf-9616f6d69dfd", "sighting--efb62592-cf57-4727-b64f-e605e927f57c", "sighting--07e437eb-1c55-4dff-9337-a89d2603cb52", "sighting--f78a5948-797c-4637-a201-b4efcd22a36e", "sighting--e345fe84-e3de-48ce-9f74-e27aa440a43b", "sighting--c2b6abdc-6363-4f16-b38a-523b0ec059e6", "sighting--78910c3d-b727-43fe-97ab-3690d0842f7e", "sighting--e29325df-b501-4f76-886d-bc4807e8ab99", "sighting--470c8c8e-a472-49ec-956b-733d148ac90f", "sighting--c670dc46-1583-4e4d-afec-23d50eae497e", "sighting--d23534c7-a754-4791-9aab-8ee0eb9688a4", "sighting--e78e8f5f-b81d-4f85-a924-1d9ce60c6966", "sighting--94e64dc8-b766-49a6-9d4b-ac1f2443dd0d", "sighting--c4c21042-baf0-46a1-bc8b-4a677a8a732a", "sighting--37557c65-6f4c-455c-af4f-1c282eb48ed4", "sighting--236553df-836c-461b-b1b1-b886bc48b97a", "sighting--cf23023e-cf87-4e49-8e19-8464cf28f160", "sighting--2d30da36-0858-48b9-9ed9-d47835fb2767", "sighting--0538b5da-0773-4263-af1e-39eb58edf7df", "sighting--862d4825-9521-4814-be4d-ffb91ef0856d", "sighting--73939f69-5f53-44fe-9830-392f483615ac", "sighting--1b79777e-021b-48c3-b4aa-6448d842526f", "sighting--867c0164-3566-4e92-bef2-2574aee866ec", "sighting--b6009266-c656-4a07-9a52-9e4d2335df54", "sighting--5e08bf84-3244-400c-8b4e-afe7761a28cd", "sighting--4ea28c2b-1ec3-4101-b5cb-1566bbd9f424", "sighting--4fed7735-f894-417f-bf6c-4ea234fffb45", "sighting--a4e59b1b-8fe1-4d2a-831c-40bedeacd98b", "sighting--5ec357a3-685e-4959-843c-56696691774c", "sighting--5419141f-93a5-4d31-9c28-23bfa6fd4589", "sighting--ed63a0b4-ab33-460d-b677-d9a605786c32", "sighting--4c9f8b24-dc80-4913-a61d-727689e8554d", "sighting--f7601ef9-544a-4317-889a-a6055189e3af", "sighting--b06c8a61-f343-4712-98f1-0dec6fadd274", "sighting--04b2c89c-6f7e-47d8-aa2f-9f70e1f85d59", "sighting--cf4b7009-1e69-429f-baf2-b8dcd3af6afb", "sighting--50d6d53f-e8cd-4814-8d72-c324f643d0e6", "sighting--4b0ea0df-2107-453c-866f-3d9a275b4039", "sighting--23e5c2e7-f037-49eb-8916-d3443ebddd36", "sighting--89c1353d-b2be-4166-af9a-f1f3a19e47ce", "sighting--a6a3449b-998f-4fa2-8757-e3221cf388df", "sighting--36d4c089-784a-4ead-a421-fe0a27736baf", "sighting--ad0ff1ab-b1c6-469b-98a8-d1447dde6819", "sighting--a083557e-3d77-44a5-bf1f-1a207532f07f", "sighting--dc56ce91-ec63-4d11-80dd-9937e8e7483a", "sighting--68e6322a-d2ce-4268-891b-ca246b452e93", "sighting--93c3aa55-e8f3-4766-b97d-b82e3be0a240", "sighting--edbba9dd-ebff-4ccc-a53a-6b5e5143197f", "sighting--f47b8c87-7478-46e9-ab13-198497c2867f", "sighting--2119a723-e49b-456a-8083-e38c365ec57b", "sighting--00884742-7149-4cc9-b8f0-18756ac4fe43", "sighting--77ba38fc-a1cb-4d92-a11f-7edf28a6f75e", "sighting--bcc9bd03-cee2-47b0-b9f0-632443aea431", "sighting--245af9af-5333-4509-beb6-561476f3a656", "sighting--ceb17275-79ed-4812-9a71-15affd152ebd", "sighting--614e84ef-fc16-4b45-b654-02cbbe5ae8f2", "sighting--6e495911-6ebe-48be-a1a2-54e64315a02d", "sighting--b63ab20d-ea49-4b13-b606-efddff215ac3", "sighting--622712e5-9206-4fc7-b83d-510754e33109", "sighting--0b05f9b0-3e13-4514-af2f-080d68fac25b", "sighting--8e33b262-c468-4d2a-ae63-054a3cd2a627", "sighting--69365dec-2140-42a2-b55d-a9444d9f837e", "sighting--76e22804-f7ed-4ae9-8822-3454bb432411", "sighting--ef77a45c-cff9-4ac1-9efb-5c70ffbfb83e", "sighting--1b3d8de9-8088-40ab-a306-74c8478e264d", "sighting--3bcb5659-aa99-458f-81b8-ce609ff5184a", "sighting--f510e7d2-6ebb-4b05-98cf-33f76229df35", "sighting--8fd78fec-c0f1-4c63-a608-62ad8ad74b3a", "sighting--9cc8b50e-35bb-4b10-9ab7-12a4f937bb75", "sighting--81cedade-7077-4c47-a4db-6488320a9ae4", "sighting--225dbbe6-4203-4a77-afff-a7869be7d180", "sighting--76e6fa55-067b-436f-8eef-ffe83931a6d8", "sighting--a2fbc84b-f85c-4f64-a353-0f9698273d0c", "sighting--a9d2e410-1fc1-47f3-93d7-e6e3f980138b", "sighting--b8406b30-856b-45c5-a83e-cce107962b6d", "sighting--92edc7ce-354b-49bf-90a6-f3382f59473c", "sighting--a1d14fac-f34a-4edc-aba4-59a04b4af2ce", "sighting--eaf1974a-7ef6-44b9-8112-3a6945e3c931", "sighting--d5d0a961-dfa1-4652-b584-6b5a6de66351", "sighting--67f14487-4c3a-49bd-9215-a638422ed399", "sighting--b1f0bbf4-47e0-47cd-b50e-b2bff940281d", "sighting--23bab324-64f5-42f2-8650-2513b2efc31b", "sighting--2e1655ed-23a9-4726-be9f-d125d429ec9c", "sighting--54fb8ed3-1db9-4c38-8e76-c0a02a84eff5", "sighting--2ec2091a-c6ee-470d-a839-1fb3df8dd812", "sighting--72323388-da7e-4447-a3ce-a9b52a1a7403", "sighting--d36f4705-f549-4449-a422-ae2c1ffff789", "sighting--9543bff7-4dfd-4702-82b6-e1ccbf88e6a8", "sighting--5909c6a2-299c-4a50-b741-9bf7362e0dbd", "sighting--313f2605-b47b-4317-bd02-1a1d3ab1b96c", "sighting--8cf003df-2a69-4af4-b007-aa0004d2e581", "sighting--2bc99d23-6ed5-48b9-a343-a8ddd6ca63f7", "sighting--372026a3-3185-46e4-80fb-5f5c6d84bf5f", "sighting--f1e82165-2384-4eca-9869-15bffff48eda", "sighting--901d65f9-c0c9-47a6-975c-a1315d076c54", "sighting--66ec88c2-b2f2-4129-8adc-a93e4cd8bf27", "sighting--cdd2291a-518f-4c04-8e7c-70003b0dcd47", "sighting--fd0ca020-ad98-4b61-b59a-611e0bb7d3d0", "sighting--21a59d69-d41c-4f2d-8fa5-5af0b672729c", "sighting--99aa78cf-64a1-4364-96d4-ecfe604f4e1b", "sighting--3c3a5517-fad5-4f04-89b1-d576b250b816", "sighting--2a005a30-22ce-4ba3-96c2-9788fc924327", "sighting--a4607568-a4c7-4bf9-a454-b3ed683bdc0f", "sighting--1dd862ee-3726-4de4-8652-47ac6ae2df35", "sighting--8372add3-158e-4504-8d3a-d47596f550b2", "sighting--9c1440e7-0fa1-4dc4-96ea-3833aeeb006f", "sighting--8d944add-4507-43a6-97c0-9c7e4be8eb9e", "sighting--4ae12895-7b1e-45ef-8e15-13f119731f20", "sighting--aa5ee580-e19d-47c5-9e0a-7777dc059622", "sighting--d58b4b63-bdc0-4cc4-ac88-d82809e59412", "sighting--435771c8-e9f8-43ae-b283-ad98158c527b", "sighting--86e6fd92-ced6-478c-817a-635a910c117f", "sighting--3b06e29c-a61c-4d93-a00e-22cd8421ac15", "sighting--dc60c44c-036e-4b94-a07d-c87b8e26f926", "sighting--22240960-a00b-4d4f-86c4-8952cf960567", "sighting--9499f810-bd2e-426e-bfd8-e464068682b3", "sighting--07ad2018-816f-430d-973f-ed86d6a7334b", "sighting--1771fd52-f828-4796-8e50-bd9e50367b49", "sighting--0e69d5db-206c-4228-9d86-ff4a9b2a35e8", "sighting--063ef99d-5552-43db-adc9-7355a30be872", "sighting--49844bc6-67cb-487e-9b80-a1f2b4cd3f27", "sighting--f66b05c4-c5db-49f6-b8a1-801c0f03b58c", "sighting--69761508-3ab5-4e22-8c2b-fac12cc1ab9e", "sighting--a9720121-a530-4de2-b5e4-05f6d3e53935", "sighting--eee0abe2-2761-4d4b-bbd2-eccaab9b9f2b", "sighting--aaf0b4e9-6354-4243-b82f-c4f0b1f766aa", "sighting--806f665b-c346-4225-8292-c7a15cbab67a", "sighting--77739dc7-4480-4856-ac0d-179db51dce7f", "sighting--925181fb-2ff1-4a73-9d81-48fe052fa30c", "sighting--e7760954-ae4c-42c6-b009-e48c142ae924", "sighting--ec3c3dc1-aebe-4188-960d-8c1f069cae04", "sighting--adba5bdc-efa9-41a0-b3a6-c99ea4a42a14", "sighting--6b625321-3250-4ab8-a0c9-fd9cd0c02c55", "sighting--5c7ded4e-3f38-48a1-94db-34045f6ba787", "sighting--463304cc-7d80-4bba-b133-870574342eea", "sighting--47aa2d07-cbe3-4b89-a07f-43b4ba511c29", "sighting--06119997-5b79-4da7-a3ef-62b6d116674f", "sighting--66425a00-cd6a-41b2-8540-753a72122027", "sighting--4879b134-ec8e-408a-856d-570fc5e0756a", "sighting--54348eb3-b63d-49c8-ae07-bc3bcc11a5f1", "sighting--daf68399-d4e1-4796-8498-35819fac9f72", "sighting--59863a49-094f-4dee-9b8b-128f3594ef83", "sighting--5a60aa36-ac13-4230-b30f-e67c3067a715", "sighting--838088fb-f739-4021-a178-f06bf29dd3b8", "sighting--8b1b9f7d-3c32-4ba8-9d3f-425caff5fefa", "sighting--075ddb9d-d643-439a-bd63-95b194bf530b", "sighting--ad43c73d-2c1b-42c2-b7c8-a1037128abfc", "sighting--4e8c74b7-9dc3-4965-b0a9-4355847a01d2", "sighting--45ec1d0a-ff23-4f59-bd6f-47a5bbd29b13", "sighting--f52b098a-55e1-4dde-b5a0-b6dac1673c37", "sighting--0d0fa0bb-48f3-4115-b051-a78ae456bbca", "sighting--9ec04287-0701-4b4b-bf51-4e9d26c18511", "sighting--14111335-31d2-4b00-8dde-555311147677", "sighting--b3ef79ba-3675-4549-948b-aa7fad2e3dc0", "sighting--74ddb3f1-104a-4c5f-968c-c1d0000b5f9e", "sighting--c65b55ab-c8a9-45c6-82e0-2c74ef10e650", "sighting--48d13ec6-3091-42be-9ad3-99b501c9a5a2", "sighting--fb105e61-bdae-4b10-8a6f-daf8ac4da1e1", "sighting--271c87d5-fde3-43a7-9256-159b98f5c776", "sighting--ba636d19-15f2-41e7-9181-ef5c6c69d9ee", "sighting--3058be51-0025-4a7a-9f0e-57584e9cbdc7", "sighting--fd90beb2-afa3-4711-92fa-4b64a63b8862", "sighting--755f2486-425c-4ebf-be10-e0168ca01f60", "sighting--c0979aab-18d5-44e7-83ef-2e25eb660c7a", "sighting--4a561bec-983f-4471-ad77-5a11f80c99fa", "sighting--8cafb785-4813-4e53-b27c-3abb725b8c8a", "sighting--ef7e4ab5-a8a1-4251-816e-369e0f420815", "sighting--77b43a78-01d5-467d-84a8-ed9a54012e09", "sighting--14791ab6-2f0c-4033-9251-e1aa5f3e4684", "sighting--5b0088b6-d429-4cbe-b59a-1217b40e6ba7", "sighting--510acc46-8eea-4d82-8578-456db308028c", "sighting--8aca6e68-df4b-4dfb-aea8-ef455285066a", "sighting--9adb21fd-c04b-4941-ab2f-df1c58da252d", "sighting--fc2278d1-71fe-4e8a-908d-14ed89e3a147", "sighting--998afbeb-fdb3-40fa-974d-7f1733e172eb", "sighting--414ae2fc-ec79-4299-a042-7b88a1f4f645", "sighting--cefb9765-aa1f-4c2e-afe1-0c89074b876a", "sighting--bd1739d6-8001-4178-bb17-ce7c833d37f0", "sighting--cefa7427-a592-4873-8a12-f1eb136e1f86", "sighting--3c8dd0aa-5e3e-4e42-b52d-edf6c8110af4", "sighting--e719761e-71ec-446c-a92f-ecc3a67fc9cb", "sighting--c987dd1b-958f-4f86-a7bd-bba0aa26771f", "sighting--e60b9a4e-a0a3-40c3-bd01-92d19310439c", "sighting--b23b7218-dfdc-492a-91f6-bc4db4cf9627", "sighting--e37d6764-39ba-49a9-8d65-245af2783769", "sighting--6462c5a6-bb69-4628-905d-8dfa609fa376", "sighting--415a0636-d373-4491-9605-1c4decf00997", "sighting--c5f4747c-edaa-4095-a05f-9d6b18bda5e6", "sighting--04f91dd4-df58-4883-bf83-fb9baa3a5408", "sighting--c4b226e3-a70c-4f7f-89ff-aa73e07c3ddc", "sighting--c59620f9-522a-47f9-b6b3-7494f3a01388", "sighting--69ede4d2-3bff-49d2-89cc-0c3e3434db81", "sighting--ac7d472d-d56a-426d-a7de-9b5c7f389722", "sighting--246efdf9-4c63-47bf-9333-8957d3d16127", "sighting--ae21f766-7832-4aad-bf67-d72e3c492f77", "sighting--c7fb9115-503b-4c01-a15e-5b80f5f83bf5", "sighting--f74e60d6-7cb0-4e1e-ab55-92d2f0acc4fb", "sighting--4ab540bb-1e7c-4fb2-bc86-01e86904f0ed", "sighting--b77e1059-18b8-42af-80a3-86147bdd03e8", "sighting--fe638e54-e8a4-40eb-a59e-4be595c92f64", "sighting--24712669-18f4-42d5-be21-085f6263aeb1", "sighting--f213935d-418a-4835-acf5-87f1a2681c1a", "sighting--5715e68a-27b2-4695-bf82-42c7b56bafd0", "sighting--c99fab59-4e63-4b3c-b7d3-6d6a796400c1", "sighting--def144bf-3ea6-4b39-a28f-ff5a0ec75fde", "sighting--0c1f5aba-3902-4cb4-9bbd-9065bee6ddd0", "sighting--e856cf46-78ee-4513-9c16-d8ca09419e2b", "sighting--3df7aa5a-c83a-4d3d-a0ae-d39aab6fe142", "sighting--48beb754-d870-4ccf-8af6-26d4a08c5cd0", "sighting--9dbd4399-e1ea-4b1f-8e6a-5f61833e2aab", "sighting--62ea3f5b-5ce0-4960-bcff-55258e42a20d", "sighting--be0b48e1-b529-4f1a-ba01-305fd5acc1bc", "sighting--e90f8d60-685c-4dec-a863-661137a1822a", "sighting--d386d477-a64c-48e6-b4bb-7bae46de3691", "sighting--fb263891-1fc3-4c23-b2a6-c524b97bc0b3", "sighting--89783826-95ce-4dbc-9c13-b8d4db73e2d1", "sighting--1d75ced9-6aaf-47d2-939e-dae712de2fbc", "sighting--db252349-50f9-4ef8-af9c-6dbd96fa4f35", "sighting--b41f6565-7f03-453c-9317-eb9f3d00708e", "sighting--205379c3-4591-4959-8d2e-f2da1a3ec711", "sighting--e10c12c0-c341-4b85-9bca-10e5d44bed07", "sighting--011a01ce-e262-4837-98e9-eda3f7497722", "sighting--17dc26ed-e9f2-41fe-87fb-3ee6aab2a856", "sighting--c880d299-6cfd-4ff1-a6ff-fa1d3a395596", "sighting--afdd8f51-3827-496e-87a4-cf1a4a64d9bd", "sighting--f9f8100e-143b-4681-8898-e85f0b1345e7", "sighting--9e6cccc5-0210-4f85-b61b-6594f9a48915", "sighting--13812058-4838-463a-9f93-9d5c6ffb70c1", "sighting--9f38d6c4-2d29-4f82-a734-3d4d3be55aa5", "sighting--853e982c-ceb5-41f0-8e82-769e3188a9bb", "sighting--055ef25c-4e17-45e7-ac52-5d39093df6c9", "sighting--0bed086d-68b2-4ed0-8f3a-dea59ade4fcf", "sighting--3a5dd8ed-170c-4fb8-be62-4f7a75c1c664", "sighting--2a699de6-2d51-47a9-8350-e751049a745e", "sighting--3eda0d82-3c3f-4464-b82f-6971c44d3120", "sighting--c81388fe-5838-4e40-ae97-56ffc9107594", "sighting--c2cfa8fa-6d9b-44ea-be29-114a91df55f3", "sighting--8aa9116d-314a-4749-8e95-289bc4c5db85", "sighting--f24ca2fd-f1bd-47e2-a875-a7ac5b9d9700", "sighting--73f60413-f1c3-4aea-aece-b580f35292fe", "sighting--0b349ffa-4952-4a44-9e7a-c2ad606ad3b2", "sighting--a340a127-5c3f-4196-ac54-da3ea93192d7", "sighting--0978e10b-195c-4e70-9872-9501683a43d8", "sighting--94a25dad-7cee-4326-a912-854bbc01a438", "sighting--42259eeb-7221-4955-a2c3-1bde1974c755", "sighting--76bb8cfa-566a-4133-a2cc-bd869d95b68c", "sighting--f99e3ef8-8d80-4dd3-beae-208787a4fc6b", "sighting--014075a4-9a99-4301-bd24-445569fdd412", "sighting--401e04c2-455d-4246-867e-5d155ada7fc8", "sighting--43c51d6d-3e21-4a94-990b-74f482d6c974", "sighting--a5af24d1-9b45-4b5a-95a1-ae3be2bfe7a5", "sighting--98456299-0dcf-41f3-aba1-2da67ac2e041", "sighting--00cc0922-d57b-4773-90c8-1986e94fc13c", "sighting--f7a3eb2c-a32c-4e25-bbcf-38bb690624e7", "sighting--b8fbf433-7aff-4610-843b-4bd5f28e31f9", "sighting--adf5670a-0aad-49ac-a9a2-7cce8e3eecb1", "sighting--4b5ca54c-0a06-41da-9535-31f1dab8f7d0", "sighting--d708d777-e444-425f-a8c4-61dd8c912022", "sighting--4b7b9e9e-c22b-4e10-a65a-613acd5b5fbc", "sighting--88549487-2938-47e1-806e-042fc3385645", "sighting--e35da8dd-f0cb-4251-b344-9406f0aaa61e", "sighting--04197454-f182-472d-bb37-3816cb91ffd8", "sighting--1da04a9e-6d38-4984-823c-6c82198a3e24", "sighting--549dd855-0a72-4906-bd60-d9154c93a63f", "sighting--82d71244-9623-4b11-9309-a6d1113ce791", "sighting--a300fd28-cfc7-4e4e-94e2-6dba34d7bcc7", "sighting--9e5d5118-0c48-4b86-805a-1f94435345f8", "sighting--429050e3-ea1f-49b5-8b72-df265b600335", "sighting--ccaa3148-e5e5-4d21-9847-c11ec36819de", "sighting--ca854388-1263-423a-b611-d581afc16b87", "sighting--27ebc5af-fe7b-4edd-ab3e-9b8759813a88", "sighting--085c888f-bdc8-4968-8887-55be595a4610", "sighting--4440dce2-6702-4a78-85c3-1cdfa3aea152", "sighting--32ee7eb2-bb5e-43b0-9ef9-bcc7c5f1a1bd", "sighting--f7a75b5b-bc20-4640-bce0-f0206579613d", "sighting--06cba2cd-f73e-4404-8c01-f1f391bb8c41", "sighting--b69a56e1-9992-4acd-9960-9837c4b413b9", "sighting--a64b43be-c368-4585-8a90-fcd360482680", "sighting--cd25971a-2177-41d1-9273-88ca1212ff27", "sighting--e07cbd4d-8442-4c8f-bb51-1e8ad93a77a3", "sighting--e1416102-fd66-4973-841f-c6ceb19c5d85", "sighting--b356c3db-ef73-4302-b366-670c901590cc", "sighting--7861d2b5-344a-4ceb-b646-6137476959d5", "sighting--a4e64154-d0cf-4f01-8d77-bac28c78fe86", "sighting--c9a3f436-c02d-4010-aeff-f0b14f156ca0", "sighting--7622ccac-e071-4239-8bcb-25882a249128", "sighting--6ae2778a-4af1-4296-9a0e-715760bb6169", "sighting--1f82264c-e203-4c7a-8216-c366474356fb", "sighting--65d19f0c-e383-4677-a658-f0f7b9fa5c48", "sighting--735af067-fd31-4255-8dcb-ea39a0245934", "sighting--0bef2061-5ab1-444e-a5b5-089d21d14f5c", "sighting--de926f5a-b081-43ed-a6d5-ce53ee158845", "sighting--a2d405ec-16b1-4482-bac3-3a098d9779cd", "sighting--9865fb85-5933-4f6e-948a-8b9d2081dcaf", "sighting--430da87a-da49-4bc4-ba2b-5ee7c025712e", "sighting--65ee9552-a88e-4d21-9aec-3fef07c7b216", "sighting--24e52390-57fa-4190-b9ce-ef1dc219655f", "sighting--03378d7a-1fed-4489-939f-39fd5f0f0efe", "sighting--4c0f971a-9096-4c21-8d63-2efb69da415e", "sighting--20bd539b-c9dd-40ab-8401-dfa76d4c71c7", "sighting--798fec66-474e-4dbd-9ac5-d1526aa0f2cd", "sighting--198d4050-9456-41c8-81d4-dbe5d2b2894c", "sighting--5ea885a3-322c-4392-82ef-87d0e6174776", "sighting--033a422a-f18d-4ee2-a86f-d82ec5ba02eb", "sighting--a1bff0f8-fa67-4fd4-8aac-78ea498a4fb6", "sighting--69176f55-564a-45ac-85be-1489ad98ca7f", "sighting--48a7a117-0777-478a-821b-cdd349c79f99", "sighting--2f50e255-afe8-40a3-ab7f-4e976458fcf1", "sighting--e9b29023-5abd-4938-8f38-35c81427589b", "sighting--776ca834-38a3-46aa-89cd-a54679f962d7", "sighting--f70babaa-5485-4024-9f92-d20582ace393", "sighting--0ad86960-4a55-4bf9-bad9-1415b59a964c", "sighting--169549fc-cef2-411c-8418-d5d2faf64926", "sighting--08a7ab43-301f-4ba7-b6ce-23459fbfba23", "sighting--49482b53-6bbd-4ff7-8c06-b8a30c56c451", "sighting--61ab03f3-3ead-40a4-85b2-83073320efad", "sighting--3a382c5e-cb8e-4f9b-86f5-99ac71856254", "sighting--65fbe325-2d06-4970-a3d1-fd51d291b03e", "sighting--9fbd1a07-347f-45f8-93ad-fbfbe8a70c7b", "sighting--4bc240db-e2aa-43dc-8295-08780706f7cf", "sighting--224dd3d6-b756-4e44-b938-839f9cec8055", "sighting--b5bbb6ae-42db-40d2-8fee-b3db956b70c0", "sighting--b05c8cac-920f-4224-b810-88fd2988b159", "sighting--3f73036a-7f13-4ea4-9e25-acccb65a3c3e", "sighting--9d30a5a9-c949-4fdc-a0a0-c09731e18a2e", "sighting--9005571f-cbc6-4426-8c43-8ebaf55449ba", "sighting--2ecabdf7-1a9e-4b6a-9eeb-808546040193", "sighting--d0c35a9d-d748-40a8-b70e-148fff03787c", "sighting--4b59cd2c-d435-461d-84e6-4fb8216e242d", "sighting--098c467f-b875-4ead-a7ce-1d7a416bd608", "sighting--db5d0c02-ee68-416d-92e4-9bd36e8c6207", "sighting--0e0f60df-dfcc-4880-ace0-7145fc292af0", "sighting--6fd2bc5e-220f-4f42-9a17-5856dd9f5010", "sighting--ac82d386-6fe1-49ef-ae09-15f634b15201", "sighting--beda86c2-da56-4764-a863-f0b8077917e7", "sighting--7d84c8b1-a15e-4405-a887-720daa2f7d9e", "sighting--4f9a99e9-3db4-451c-a9be-2e2cff223f2d", "sighting--5ffe97a5-7f4e-4d79-b43d-39b082612cf4", "sighting--4bf6c9df-1c12-4fa0-ba21-521d13de7a27", "sighting--967cc5fe-961e-4ee2-9856-39a5f971527c", "sighting--940aa460-4b98-477c-8a7c-6084d595485d", "sighting--302509cf-ee5d-4a3e-9354-3e4ead00cca8", "sighting--98509483-00bc-4937-8115-06581de155ab", "sighting--698115cc-edba-4517-98ed-dfdc94ae749e", "sighting--f3ff7ed5-d84e-4b07-856f-ef7cda259e0d", "sighting--efa71291-eff5-4f93-a233-ec68bbc81dbb", "sighting--47cda7ad-9e11-47a3-a42e-b07b6b55bd79", "sighting--8db714ab-bcfe-485f-a730-a35e1865e1b7", "sighting--7ff8dfaa-747a-4bf0-a9db-d757ad8ed852", "sighting--56951825-f281-4c72-aff8-f4c5215b0f24", "sighting--5250c921-b840-4af2-94ee-0850263e7cfa", "sighting--cc6dac54-97fe-4aca-8521-341105e290f2", "sighting--7aa93a92-61c1-4e07-a4b4-5ba0659c1cbf", "sighting--4279745c-be38-4b33-8732-4e2faca5d93a", "sighting--79edddc5-c32d-4730-a5d6-d04288f5e4f3", "sighting--7ee516ce-3486-4242-900d-b2034227a878", "sighting--702baeff-50a7-48ea-9082-40c81d10a187", "sighting--a361d5d3-d78a-48f6-a16c-573b7869c3ed", "sighting--c5f718fc-4ce3-461c-8a82-56f594f3facb", "sighting--20191489-abbc-4f1f-b850-1c0de3d958fe", "sighting--9c6a9f95-c403-4032-b5f3-5c18ec043290", "sighting--95eb421c-f722-4f09-9400-9ed0d82507c3", "sighting--576c7a4b-1c49-4f2b-8f8e-b71a393a88b2", "sighting--e4260025-8465-49cc-94da-173cf0fc5934", "sighting--fcf22e00-5df4-4dcd-9f67-72d927924a0e", "sighting--d14e9036-930a-4cf9-88bc-a2bdc93167b1", "sighting--d5bab7ba-91c5-48f2-8b19-a350d5554562", "sighting--a080b2de-2c09-4b09-aea6-834c0f51bc38", "sighting--cd177388-770d-4fd1-b779-df15bb8088be", "sighting--287f7d6e-b8cf-4b4a-8eea-35eb2dbd9fcc", "sighting--d5bba064-a465-49bd-8ef5-9f7e0450c265", "sighting--8dce1025-aeee-4098-bb4e-1acd8b7c0021", "sighting--e4c81781-d94a-4fe5-b2b9-584ca95b41ea", "sighting--684a5dbc-1e7d-419e-bc49-ca27577b9c0a", "sighting--773390cd-a5c0-45ec-a758-3a641cbcf809", "sighting--d2c4c794-dfbc-4fc5-bfd3-d913d69026db", "sighting--51248397-e972-4e4d-838d-b666053aea69", "sighting--e48364de-cf23-43f1-ac2f-4dbc2aaa33dc", "sighting--fa28d679-9414-448d-a9e0-4ce34dc067ff", "sighting--9887f41e-d0f1-4e69-840c-a368772ab5c4", "sighting--0e264a53-f432-408a-b6c1-bebf5d3111db", "sighting--bc9413b8-d348-44c9-981d-7cc993d38f54", "sighting--04d8a8b6-91b1-48e1-a6d7-215d54147131", "sighting--21c0ebae-2f43-4e9b-86ea-4ad1515bd31e", "sighting--d07605fb-1825-429a-9d24-342946c4f0de", "sighting--3384ab9d-f05e-4cd0-9aa5-92576598f0e1", "sighting--36a760a7-25c4-4488-b792-7f3084cc1a3b", "sighting--e9ce09bf-0050-4eb4-95f3-9e31c5066fad", "sighting--3a1ea060-d563-4b8f-aa28-8fe7f5b6ac73", "sighting--3407bb1a-0db6-4b31-b4a4-c6d6e315365e", "sighting--433fe088-28eb-4b28-857a-c0578b5d1569", "sighting--fb41054d-07bd-4722-98f6-0dd0c0ac447f", "sighting--c217dfae-c5fe-4888-9cfb-0835af556525", "sighting--14c3e4d9-462f-4225-9bc7-c43ba7ee9a2f", "sighting--5bc75e45-4839-42fd-97bf-b84e0a06d720", "sighting--4776d83e-97a6-48df-9990-73c30288f89f", "sighting--1689a518-c4f7-4c30-afd4-90534a16e05d", "sighting--e3bbbbe3-4150-4aa8-b318-3a5a67cb24ab", "sighting--2d8c9d87-ffc5-4b38-ad15-6dcfa4a51064", "sighting--d96b0966-fdf9-4a41-8a7b-4a154eba87b6", "sighting--a82c3421-fb9c-46b0-b367-63aaa691705c", "sighting--8db97ec7-c56d-4023-b74b-428d16a52c37", "sighting--c647d017-4321-4f00-9db3-986518bac981", "sighting--f7e7b46d-a5b7-416a-847d-f781aa4480bf", "sighting--3175313c-9a41-4770-a00d-333e7c361102", "sighting--2a909f99-4632-4aac-a06b-f7aa9bdde7ac", "sighting--f54b8457-3ce6-4bda-8870-abcba1583261", "sighting--e6a4910a-5c32-4572-8114-b65a905fff23", "sighting--aa3c7218-bd0d-453d-91cb-b93f57888756", "sighting--2fbf0244-88ec-40e0-ab30-b723d23c1965", "sighting--326b1d81-f261-475a-89b6-bb388a27bd45", "sighting--40288ff1-02dd-4410-8ee1-dbfea25dc007", "sighting--b8ff4455-2676-4915-aa95-e7526fda50e1", "sighting--4c8687b4-c345-48dd-829b-d2b43db9f8aa", "sighting--a82da7ba-c861-419b-9cd0-4faefd319e06", "sighting--2a4d7949-f780-4cde-ac1f-a386983709d2", "sighting--c710063d-3f11-4ce2-987d-2126427c680c", "sighting--d7e9527b-8a68-41e0-a289-155b07d7385b", "sighting--b604d931-32ae-4a1d-bb0e-9d854acb0883", "sighting--a4e0da95-8d4d-47ac-815e-533d6d84e055", "sighting--0d35876a-33b7-4273-8f04-27dfc725b4bf", "sighting--a97b5d73-3fdf-49c6-b571-bc368bd7c06a", "sighting--eb365005-c1b8-40b8-805a-c6bbfb2be224", "sighting--6ea32c6c-63d9-43e6-8b4b-690db568668d", "sighting--adfc9fc7-d686-4e8d-a4c2-f04c6c8bf640", "sighting--f2a04f09-2dcf-42d9-aad3-546fb88db32b", "sighting--819c87c7-d99f-4a96-bf87-18f08b097f4d", "sighting--6f1c3b89-c2d6-4a2a-9c69-14c472fba901", "sighting--58d8c364-e351-4351-9f0e-aa6f56819287", "sighting--036b7b37-2709-410e-840f-f3276ea88944", "sighting--71382688-da85-48db-8cd1-4534afb84ddc", "sighting--c252d595-301f-473c-a8ac-f2840c90bf68", "sighting--8129b1fa-ed32-45bd-b707-b79a9213668e", "sighting--213fca62-0528-42fe-9466-9baeceda0250", "sighting--7e4e7dba-dc14-4c49-9f32-49b834413f96", "sighting--dee6a127-6300-4e8c-8921-0212b86836bf", "sighting--c98aba05-5fa2-495a-b00c-09e70435c195", "sighting--86e26643-93a0-4fa3-a122-aae09f66b480", "sighting--84c0e2d0-053b-4ccf-9710-29571e5b30ba", "sighting--7e90ac67-6fab-4f7e-9fab-9ae772c3c9e8", "sighting--e59c9c8a-f7da-449f-b27b-f8fad56ffb80", "sighting--b983d437-c0df-49cf-bf74-7acc8c47bd91", "sighting--439cbcbd-b4cc-4fae-b050-ed2b3f9c3aaf", "sighting--06c3a7ad-8128-492d-89b5-48c569700f16", "sighting--d9c0bef6-b014-4805-b310-bc5237bd5693", "sighting--fa849328-0f88-492b-b271-b00145b1b672", "sighting--619e02d9-271a-458d-a791-f4e7531f019f", "sighting--a9f0b91a-b7ff-45ef-b5ca-920318160c60", "sighting--a4ee49b2-de5d-4b8f-b83c-303b0c99daee", "sighting--f5a1d11f-9094-4ac0-b8c0-88edaaad1304", "sighting--1ba6f18a-1830-4ad2-8491-2089c4662653", "sighting--8f9c2da0-9413-4dda-b94a-b43d819d73f4", "sighting--490c1573-de7e-4b14-a2ae-1087b1eaffe1", "sighting--81ad0853-c7f0-40e1-8f0a-3098f7d87254", "sighting--a66a358e-d6b6-4860-a9dc-1eea9fff52be", "sighting--f60dfbac-5a7f-4477-a8b7-269a6f0fe6b1", "sighting--af237d28-52b1-4a1e-a74f-b699cd21f7a6", "sighting--d2bba050-64f1-454f-b01d-e137482a06a8", "sighting--f3be90f1-6c2b-4186-9304-a02a8352cf73", "sighting--763d33d3-4638-4e06-9567-ac02e39e48cb", "sighting--4897984f-34eb-4820-a65c-43c82c62b755", "sighting--0d640351-beba-4b42-9206-623398697bb9", "sighting--bf49a085-ba52-4fc2-9470-ebc043fa314b", "sighting--0a605d5b-2d0f-4dba-9713-51e006ae9497", "sighting--e5f0c74b-b038-4cb2-b9a0-d23ea317a7e1", "sighting--38e780fb-0dea-4ccd-9a61-ac7799317cc2", "sighting--ee9582ce-24b9-400c-a200-8bead9f7c4fc", "sighting--f6290774-9bdd-4605-8993-9d49f478e052", "sighting--69c4fa41-36ca-4833-b213-92b0b4095460", "sighting--f0ba5b4d-c202-48b4-bfa1-546d0bbf21a9", "sighting--b23c449b-d570-4801-89d3-e59ac7dcd824", "sighting--86eea9a8-a191-4e2e-a5d9-526d801bbe9f", "sighting--a576054f-1247-44f7-9f51-31a2061164b8", "sighting--11917236-cf1a-40cd-b2e7-6aa498328aa5", "sighting--93ec6b9c-40ba-4de8-afc8-e6e49cf40bd2", "sighting--37788b9e-59c8-49d1-b83b-c3b34fc9eb19", "sighting--aec0064d-d452-4955-a87f-e6e07a94ff6c", "sighting--1f9313b7-d7e2-4317-8426-7669b772d099", "sighting--102bf1ed-bbdd-4e40-9dae-e4f2147c02f9", "sighting--c111a99e-00fb-4fa8-89bb-4dbb47ed7afe", "sighting--e1675ada-63ae-47e9-8fc6-cc2d54ec0130", "sighting--6a0ee55a-7b8d-47f8-9f1c-5bc2f7e6a9ee", "sighting--ba99bf87-685f-48c7-9f9f-270ffcd32e99", "sighting--c52959b6-88d1-424f-a133-288f41364e24", "sighting--eed582a0-7fd1-479b-856a-1fb3ea74c212", "sighting--207d79ca-8a69-46df-a4d4-6a11fe136b0c", "sighting--5ee0c659-648c-4f92-aeb1-0a035aa73e17", "sighting--f7b052ea-b356-4833-8d4b-94a9598ecdb7", "sighting--b6a2eb06-4457-46b7-aa1e-60f43c54fab1", "sighting--1a71f139-94c3-420b-ab13-10c8b812f385", "sighting--8ad4dbae-7aeb-4151-8ab4-36aa4a89955a", "sighting--4269c308-39ee-469d-9dfc-6d28fc4f7654", "sighting--a7f1d46c-f19b-4671-94ac-cdee5a517c45", "sighting--42798114-acbe-40b6-aa3a-6163543e004f", "sighting--f863f730-bf9b-48e2-8d5f-099dd95cb7ee", "sighting--438a7622-1013-478c-a739-d6d6f9e3b62a", "sighting--7d0d17eb-090d-4cea-9675-773510edc811", "sighting--351e76ce-520d-4e09-b854-3e9492fc71b3", "sighting--471a91e4-c292-49fb-bcb7-b1918b7503ed", "sighting--ac1b49f9-c016-4cc7-9ecd-fca18ac5aed6", "sighting--5f760e95-14ad-4001-bcf9-8a1d60a99370", "sighting--dc769e71-b7d2-479d-9f60-b06da400867f", "sighting--41fca5ce-4be1-455b-8274-7f3e40f071dd", "sighting--641a1f5c-4af3-4b6c-8ee8-9418883168e3", "sighting--aa6f4f11-e683-4df6-b6ae-dd532638b5c4", "sighting--6a75a25c-18f7-4af9-9cdc-1c0ef75ca704", "sighting--4d45448e-8b1d-4a83-ac7d-fed1210af7e2", "sighting--ad0e7209-d6ee-4552-b875-6dc65d9c99ed", "sighting--db8e161f-0e2e-4fa6-bc7f-ceb72e7f5ae4", "sighting--f82b839d-d9e6-4b5f-9223-e6694ec009c3", "sighting--d556e083-7032-4ec1-9706-9171099be019", "sighting--6fd87ba6-5388-40fb-b78f-253bf6c0e7ef", "sighting--15bce3e8-d0e0-4b72-bc91-09816f7fc877", "sighting--5b3d99bc-cc30-495e-8aa1-e87c973c579c", "sighting--2e9c34df-3203-4daa-9439-cf0adc86e4ac", "sighting--a5717f0a-1f7c-4383-9a73-36397d31dbf6", "sighting--d6b2bee3-c27e-4365-9637-690c8c1af19f", "sighting--970c7f21-5b13-4f1d-9f91-76bbcb416aba", "sighting--e5b4feb1-b632-4e33-bcb9-5d9ba9fc53b5", "sighting--21effd3f-798f-40fd-8422-3f8e3f2f3927", "sighting--c7e5693b-7e52-42b2-81f3-8392d2fece83", "sighting--12b421cb-6412-465f-b932-f7f9a317e7f5", "sighting--d25164ab-fa26-4f51-9b56-41824f2e07c6", "sighting--8ab9738c-8076-4e0e-a651-a972ae857652", "sighting--06d62678-b637-4218-a791-884cafe1cbac", "sighting--15b91438-1359-40eb-9e4a-01c3f7a7236c", "sighting--45d90544-fbee-4741-97b2-62abf844b910", "sighting--a4f6a4db-acf0-4693-8c8a-9dc238c0d7af", "sighting--f18356f4-3963-4f7d-aa17-8f25cec44c16", "sighting--c69446de-a5b1-4c8e-8d14-1fbe54d5537e", "sighting--848d5540-d4ae-4270-afba-223b7b5fe393", "sighting--34c52912-1169-4e29-9de5-46b56b0d2c8d", "sighting--77c597ae-2119-4fad-99ca-2ca27647285c", "sighting--355924b0-d51c-4650-88be-f511560886a2", "sighting--20b049ad-4ba0-4993-899c-27dbe79007ad", "sighting--e6d6307d-c517-4067-b4ab-2787126d0e20", "sighting--2c747037-e1e6-421c-8f27-fb83eed3b356", "sighting--d3439e29-58de-4be4-9448-75d6fa8bbc6e", "sighting--78d78998-ac62-442b-8cbb-5994a28434af", "sighting--5ca2243c-dd3f-489e-a5f9-d6f5e9f1ca8a", "sighting--c4e7924e-5d4d-4c39-9134-4be64837548b", "sighting--7cfd6b20-7b50-4b54-b33c-77e9dbd94738", "sighting--5e60f286-c26e-4321-9114-1fa012bd4d6d", "sighting--3872ad8e-2f75-4c6f-a5c2-c14829901bc7", "sighting--141fb4b2-f9e4-4a8a-984d-1a326ce9de35", "sighting--9b224759-547c-4080-8373-85ad3ac2ed98", "sighting--846b54ee-ccd7-4452-84d5-d5a60fed5267", "sighting--fecbe379-bf51-432d-acc4-be6d13a50fc0", "sighting--2170eb5d-a43f-4ee2-9852-7ee1fd59bfce", "sighting--77155500-4302-4d0b-9fc3-3152e666ac88", "sighting--ea03b66b-1eec-44e3-9fc2-8c36886eb174", "sighting--b07ccb16-23a2-43e8-a9d2-bb5cad91e8d9", "sighting--7f1592c3-a585-4336-917c-749227d33a8e", "sighting--30dd8a48-c7c3-4676-af46-8c113b5797c0", "sighting--7065eae6-1e54-4192-839a-dd8a67141a49", "sighting--a6a94eba-0244-4a25-9e75-66c2745b1e9e", "sighting--880b97d0-c839-4358-8a86-6da998e03a50", "sighting--903122af-607d-4cb7-ba00-81e11866efd1", "sighting--a0b2d92e-fcd6-4714-9704-6ecb08b462f3", "sighting--abaa54f6-4e61-4241-948e-30d3433282fa", "sighting--2f8869fc-fdb5-4820-b2db-4c679f72d20b", "sighting--ca5fb52a-cea5-4272-b7e2-949233409153", "sighting--4fb27552-44b2-40f3-b555-2006260cf9b3", "sighting--c21216fb-581e-4d15-9e72-93b8c88ba2b2", "sighting--25e4ed65-8941-4bce-af42-199c6e2e83cc", "sighting--ac6f8537-42ba-45fe-984f-a84f8eb98e27", "sighting--55bb65cd-bd06-4fd8-8cc2-0db35ef4165a", "sighting--d7da64f5-87e2-4957-a8b6-5fa832bd235e", "sighting--c90c460d-95fc-447f-9588-a7b4cf3239f3", "sighting--4d52334e-5bb6-4f40-92ee-0cb320a65cf5", "sighting--5aab5033-180a-43dc-9944-c48d2ad20ac5", "sighting--87798c05-aee4-4802-a740-85cdda23f0bd", "sighting--ef0979bb-f4c9-481c-8013-a3088fc48a08", "sighting--a99a38d7-d28b-4c3e-9d68-ff19cd2e611f", "sighting--c7e9d8f8-d0e8-4a51-a678-c79a2b77b569", "sighting--5a627fc2-e800-472c-ad2f-d2bd37c03fdd", "sighting--61b7684a-a002-45c2-a6ae-9bf8eb78b8a1", "sighting--80143b54-babd-47f6-a150-5c9a7941ef6a", "sighting--63c92cc8-a85c-4f75-a4df-de6b78a5d044", "sighting--0d6f8578-aa55-4e46-ba98-2b25b401e3c0", "sighting--f8030a44-8f06-492c-9c87-afd349d314c1", "sighting--32ffa39a-bcdc-45ef-89b2-fffdfdefd0c2", "sighting--aaec9516-cee2-467c-9d65-fefa9d7884de", "sighting--17852b47-c860-4d36-bc7f-857f2a9316d6", "sighting--bf328c3f-1d4d-4b20-8fb3-1b48de2bfce8", "sighting--4d2e85b0-5179-4f28-9fb1-a4179f16de45", "sighting--24d54c9b-4a7f-4973-8c02-0719252194f3", "sighting--2cd0c122-eafa-4bd8-9d69-b0cd448a48ce", "sighting--2fc5e78b-4c49-473d-a11a-5caaed3488c7", "sighting--6e54d621-286e-4624-bc75-f1c666d31f23", "sighting--e0f5f562-d700-49f7-a3d7-a127082e5eb0", "sighting--2024e501-276c-4f27-a2d4-68db33398432", "sighting--b1370ef1-2d9d-4f1c-854f-293e2139a20f", "sighting--0a948e8d-6545-4db9-8e48-0c4fab4cb144", "sighting--ecc47d49-5f4b-42c8-93d6-099016feb849", "sighting--735a83c7-d9d3-4ee0-ba48-3ca279f33032", "sighting--e3068268-fd19-4ad5-8d24-f82a817b7345", "sighting--02150028-d151-4e93-b268-ff93c07748dd", "sighting--22176694-def2-4736-8b38-6392cab792e4", "sighting--99b60ca2-8e65-42ad-9c41-5a91c55721a2", "sighting--520c581f-eaab-485f-9730-807a4a550185", "sighting--f7aff43e-fa24-4724-9827-cf3642ef14b7", "sighting--9296412a-3f08-4505-8c30-921b8edd53ad", "sighting--8748b386-2c7c-42ce-9464-70f698f6ac67", "sighting--e03c7415-e806-4a5c-bc06-54456824c663", "sighting--b03da0ea-03c4-4c92-9665-79b6918c5187", "sighting--3f2fc6fd-28d0-4e6f-b230-cfca3a6c9fe2", "sighting--50f5636f-5abb-450b-a56c-1fa395482a86", "sighting--e0b33b94-7b1b-4eaf-9907-3dee732e7d7b", "sighting--6cedf2ca-2fba-46e9-807f-a5f8818cbb40", "sighting--0f2e0a32-26e7-40cc-9a6c-5cb41828d29c", "sighting--2260834d-031c-4b55-a575-d95eb783ac7d", "sighting--2867bb18-9847-46eb-bc73-88812cfc278f", "sighting--153922dd-37af-4dc3-a41f-813241c71f40", "sighting--5f7a60e6-2774-4da7-81f5-3bdd72ed1399", "sighting--f325f66d-f44f-4af3-b9b0-5def8c1566f3", "sighting--26f8148d-be71-49ab-9801-4fe3d02bd4bc", "sighting--cd1e7446-bc5b-4465-b966-1108216fa711", "sighting--662cc2b5-9079-4ed6-af6a-fd1e78855d4a", "sighting--9dfe3a8a-e195-46a8-b58e-656cdf8cf2b2", "sighting--2dec735a-a424-4316-b601-c2d457c01ca1", "sighting--b56a5a4a-5684-4e2f-badb-7b4d979a0429", "sighting--27712a36-037f-417a-95fd-a0add73528db", "sighting--fa216d25-07dc-43ee-ae12-ae1e98bc1373", "sighting--0c92d241-14de-4877-8c08-a0e36f89d95f", "sighting--ae2cfd29-ffd1-4a7c-af58-04ebae4d0f9c", "sighting--c213f5b7-fadc-4105-a801-e5e586b138b7", "sighting--a79abc75-0e79-4322-a169-84fa45b50388", "sighting--09262490-ef51-49f8-8709-aad50376994a", "sighting--a00ff5fb-b78c-4b70-9cb9-d8cce2562c38", "sighting--e30b7ba4-1c4e-4d91-86b2-ce70fa880c71", "sighting--f9166a7f-8a40-4e63-ba56-43932abd124d", "sighting--43a1ae29-d1dd-4bde-929c-94f9fc0f1675", "sighting--25a67b36-dacf-46fe-a45a-d343153765dd", "sighting--70d29e1e-075f-4d86-b0d0-b45771d48fad", "sighting--1def8dd7-6b83-4430-bddf-261005cba693", "sighting--1a057d74-4023-4916-b67b-158542f2bf0f", "sighting--fb961c90-a582-4007-b7d0-f0df7fca4502", "sighting--b71e75c1-fa30-411f-8ca3-d7da72a0d870", "sighting--e1e271d1-b847-4719-ab04-e72c43cdfe6e", "sighting--8abf0cf6-e39c-4690-b203-8b244f16ecda", "sighting--1d687e5b-e6b7-47cc-8d15-b6f9ce1ec678", "sighting--f48225e0-4354-48bd-ad7e-3a5309745b8b", "sighting--fc32d506-b502-4fcf-bfda-ad4d478d59b1", "sighting--ed311723-3f87-4bb4-b6d7-f3bc912c99fb", "sighting--47461159-4b20-4279-9c87-09a0d888bdac", "sighting--986441ed-0419-44e2-9759-274f4d554b35", "sighting--9dbf9491-ea84-45e3-a713-d82b84969d36", "sighting--15addd76-2dc5-46f3-bf85-a6d39da57d6f", "sighting--7ca78e2f-b784-477c-a6e5-6fcb8c698120", "sighting--05f3a349-eba5-4d1f-85d6-89f9dd099e67", "sighting--bd877337-0d47-4727-a886-2dece6728e13", "sighting--07eadec6-8b4c-4788-805d-bd24db2c1846", "sighting--78bfe21b-f8d4-427e-bc41-99ee642ad0d7", "sighting--0aef5e80-2610-4aec-815a-b2e6859101b9", "sighting--6b8b58fb-5dd9-4d9e-9c97-f34860502931", "sighting--18d7890a-b366-4b00-af22-c172aae66e9e", "sighting--a00ae7f8-147b-4a8a-b780-6ebfe35f9f6f", "sighting--fbdda615-78cd-490e-8ce0-2b4848a69aa2", "sighting--106e3e5b-9a7e-4349-bd1d-ed932919ad76", "sighting--36e36ba6-6e88-41ed-a1a8-9c9b54bdcf14", "sighting--cdb9a900-8460-4535-a1a5-3e915e18c7f9", "sighting--b573973a-0ea4-43b2-95d5-74da237a2328", "sighting--a720d062-5b51-475f-87b5-66b527622b55", "sighting--e4f495ab-3c25-4f27-b710-d6ce8304c39d", "sighting--1c5fa4ac-912c-4aee-9a9a-924b586ac0b1", "sighting--5cb8543f-75b7-4381-85e4-0fcf1aafe379", "sighting--18408104-89fa-4cb1-8fb1-3653f4ed004b", "sighting--925fafbd-934b-40d0-9003-cf2fda9b63cf", "sighting--28a2bb82-86f6-4bcf-b0a9-d0a697f0c5e5", "sighting--2d658cf3-bea1-44b4-b3e3-a8f2e698351f", "sighting--6edcb774-81c7-4a6d-a598-ebc66cdbc352", "sighting--667a6866-cf71-4727-8920-e11baeb4c1a6", "sighting--01db0c3c-b4eb-4690-8da6-e0c25452a5b7", "sighting--9d0da8a7-dd4e-46a6-a80d-e5380c1f2512", "sighting--6d0c8fd6-b65d-4a83-99ae-d2a3b8f2af24", "sighting--7c8c4648-ed32-446b-807d-dfe00853ffd7", "sighting--1950563f-a390-48fb-9dc4-40d4052392b1", "sighting--4375720e-a5d9-4810-a303-0e1117ef3599", "sighting--fa780f84-1cc0-4a19-8b8a-cb0bb9517f64", "sighting--2f4e1433-0f38-44e0-b231-3ba824a7ea37", "sighting--d249004b-63e9-4c92-8e93-18690d1dd349", "sighting--9ea39328-9cec-4ed0-b128-f02118abd131", "sighting--a6080ae8-e5b4-4541-90d4-109a0eb94cdc", "sighting--08c5d145-001b-44dc-b84d-dc801faa0dfd", "sighting--695f9a8b-9700-4a62-bf4f-9509263e83e2", "sighting--94c1e596-ff20-4302-a7d0-d5eb81e3bba3", "sighting--0da0784e-fc08-4c7c-8c57-9aae4e97c6f1", "sighting--db7be61b-54ba-40d3-b660-68537ae1a946", "sighting--e9c67383-d7ab-4d4e-a801-0908fc777489", "sighting--d55266f0-8f79-4087-b09f-d9155fa9a231", "sighting--17850126-4339-469b-9221-b360b719d77e", "sighting--fdeec9ac-d538-4c84-bdc0-61942f85fcad", "sighting--c23546ef-13d2-42f9-b10a-74b12e81094c", "sighting--d2e0f61c-4cf4-4a21-8c40-21cccf4441c9", "sighting--93bafa4b-e8fe-4d9b-a72a-f4aed5fa287e", "sighting--4d8223ca-ab2b-47a4-b5e8-c6b20252e1c3", "sighting--1df8a509-656c-4f48-94ce-2f3c9b071ee4", "sighting--b4c6a284-59e6-4e97-a3d0-eb3108e9517d", "sighting--59ab0982-4256-4512-a6e7-5dd719e13e50", "sighting--4e53151b-c17e-48dd-95c4-e3ec9ebb60f9", "sighting--d54809ca-caf8-4b62-88b5-fa99be508b3b", "sighting--a2072734-ba8a-4e8e-b3e9-ab957bbb56e9", "sighting--fb94e199-ff81-448b-8e88-3f44c79e2a2c", "sighting--5e68485b-566f-419c-b2f7-3f278a788c1e", "sighting--f44afd63-9b72-4bdd-a978-80d810c0ea15", "sighting--a2380557-d528-41ad-84c1-d01c34f6131e", "sighting--880dab92-8be4-40c1-9ea9-1f2f98cbeccd", "sighting--757c1dd5-251d-4c69-b9cd-b258dfe1368e", "sighting--c1678435-b316-4b4d-875f-077d7c3708b1", "sighting--29c87d6e-72f7-413f-a524-6cf9bef7b3c3", "sighting--5f56d03e-0cbf-4ad3-9fc4-4dcb00480a30", "sighting--0523632c-36f7-4be6-b2d5-255e136ad4c8", "sighting--c987a725-f584-438c-a79d-aefd441da1d6", "sighting--176d88c9-0954-4f73-a14c-3d8312b6d300", "sighting--5ba54105-bc60-41fa-8a27-57ff6e7453dc", "sighting--2fee3377-c29e-48f5-aa19-48714802330f", "sighting--eed54aa6-a8c3-44f2-95df-dc96f56ada02", "sighting--f5a9680f-558c-43a7-b833-260628acb8e2", "sighting--c769925c-c91e-4f67-90e4-5d6ac74e8c8d", "sighting--79ce4beb-c24a-40ae-896e-5769eff7bf00", "sighting--87af8621-19e6-4be7-8f89-a4589c586e4f", "sighting--c67c8296-b7e9-4dd0-a516-b93f90529e9f", "sighting--697bb0a1-6cfa-40c4-b7ed-e968eb4656d7", "sighting--67dd9f71-91c8-4482-bebd-dfe396bd4648", "sighting--4d4dd447-f1b9-41d7-8369-1905abed97cb", "sighting--dcca055f-bc71-438a-90c4-c884a7dd7490", "sighting--249df71b-70e1-4a2e-802a-43376e7144d6", "sighting--459f9266-fe37-4776-9792-e7907c9b4397", "sighting--e2f95695-c065-438b-8f92-0592a5ad42da", "sighting--097981d0-be10-4316-97a6-be3f8dc3a1b0", "sighting--9cc39872-616a-4003-b16f-a91499cc86b9", "sighting--52027469-930f-4401-b862-19d4f207218e", "sighting--9a2d5ae6-3107-4633-ac51-a60bccc43f9e", "sighting--f381ce2f-faeb-4e10-889d-900a56581906", "sighting--6bba2ba7-ee36-43d9-be2f-0490993f4686", "sighting--3dd8afa1-68c6-48a4-b60c-2fb2d01107d0", "sighting--16e865d1-5cf4-416c-813a-ac92cdef7763", "sighting--a6370392-06bf-427d-b4d9-5c56d697c5d2", "sighting--4079f626-9887-410d-babe-122ad4ec0d2c", "sighting--f3607fcb-c6a3-4d97-b0f2-d34c0f1e34b8", "sighting--551567b1-f1b6-4c65-bf88-a542084172ac", "sighting--937507ba-5c56-4955-990c-e7944ae3a202", "sighting--b4935e12-14f5-41b7-909b-e8759d77de08", "sighting--b5756276-747c-4b3a-90e2-95e6fa2213b8", "sighting--a5dbac61-178c-498a-aa34-2727d891f8a5", "sighting--10085c38-d3ac-4e57-9ec0-93996b48a1e3", "sighting--96522a5a-6aa6-4f6d-845d-ae6ad1c09939", "sighting--3c5f33dc-4511-4144-9fc2-12e810dcf2e8", "sighting--e112a841-6707-4e9a-bcd8-accc4ac46132", "sighting--a86580ac-4a8d-47ac-aa29-1422e7785476", "sighting--e41d3432-315c-4bb7-91fa-b197572082c6", "sighting--7b3ae4eb-da20-48b1-b97b-6cfca45258cb", "sighting--5c1d19c3-c15a-4fac-8b3f-cce3b76fab59", "sighting--b5d0adff-ec5d-4f03-b770-2bd4951fc91a", "sighting--b4a861d8-d974-4c32-82cc-5a8b6093dd01", "sighting--2ef66fa8-faa9-4215-b3e1-7458b6add637", "sighting--0d0f5123-681b-46fb-ac59-ed18bb999706", "sighting--b504897c-26c3-46cf-a27c-d23871494254", "sighting--2ec0964f-01bd-429c-93b4-a401432a4231", "sighting--a336cf9b-cd68-4874-8740-125c74575bd3", "sighting--4a04ccc5-602c-462e-a33e-90f584490890", "sighting--deb02165-5ca1-402d-8074-372b3655e0e6", "sighting--d404ff72-0ef1-476a-b430-7e1d7f956aad", "sighting--c55f6f55-da99-439b-ad5e-c587b443beee", "sighting--752da083-bd28-4b03-820c-27a2244678a1", "sighting--1351e74c-b578-4332-8a73-af1297c492ca", "sighting--888319c0-86b8-44f5-bfc1-4b2d4ac0154d", "sighting--d14ef009-e2a5-419d-b2f6-97bc439e4d44", "sighting--dfe94342-3668-453a-8967-1672f1e4c9b8", "sighting--f37d662d-1234-4a2d-816f-4033cc80b0a5", "sighting--6ceeb2a0-dbe7-4f2e-b2cc-fe4c1c621fc5", "sighting--737cc41c-aaca-4bc3-abb2-bbb187224e81", "sighting--94597ff8-05fd-4073-b62f-17287f0f87b7", "sighting--c6c81831-07b8-4c1a-9a9a-d6f10be7547f", "sighting--c077f895-2fa6-4cf3-8ef9-e33b17ab428b", "sighting--7cd1bd08-8964-4be5-9987-b50ec68e4e53", "sighting--8ad3cb52-13ee-49db-afd8-35fe9216e207", "sighting--f567770d-e2e0-46f9-bfc5-58a39c636500", "sighting--28b8a072-0dbd-4db1-9d35-38bd39b6f775", "sighting--17525d8a-d1bf-4d86-9e0a-17d80679bb2d", "sighting--f12e22e1-ba58-44b3-b3e7-2e95cd6ff202", "sighting--ee3b8e02-607d-450a-a4fc-12660d5845de", "sighting--1fc8dd76-7993-4abf-b6dd-384607446f4f", "sighting--0f392a49-fcc6-4ef9-b965-c12c5af47d6d", "sighting--41af094b-9ca7-48f0-94bf-41d471a7af48", "sighting--a0055db1-afcf-40a3-bfd2-e81fef9a9d4e", "sighting--c32e37d1-3d5c-46b5-9ec8-316bf64ab26e", "sighting--b55c5961-6199-4aa4-853f-8f9594d8a7f7", "sighting--f968a8c5-a72a-4786-8bd6-16cd1271a534", "sighting--d4bb65a2-9079-4e68-8a02-fa7bbe43094f", "sighting--b39d3b9d-7670-4640-89a6-d8c43df1c41f", "sighting--2987d63c-3313-41c3-be3c-64052b9281b4", "sighting--a84f5085-acad-4f9f-8da7-b161ecf7c1c8", "sighting--aba4a577-a2fc-46bf-a8b3-f0cebee456b1", "sighting--5d7a40ff-da3e-47d4-b83c-d301b7a65805", "sighting--bd9b0d9e-5733-4991-b2a5-5c67079050f4", "sighting--cd3249a8-2d2a-4f21-853a-cd024c97f42b", "sighting--8f6778cb-5f65-4e63-a481-30d9a70dd58c", "sighting--ccf10d91-584f-45ec-a3e1-d81465164d70", "sighting--4806e407-fbe0-4ca6-a771-c4fb02c831a4", "sighting--46c665f9-9420-471c-b454-7ce00645641d", "sighting--194be144-ff0e-4be0-b494-975b939ed72b", "sighting--7960543a-dc93-4e00-b2af-0b8b544b295c", "sighting--6748662f-21c1-473b-b68b-faf146b83419", "sighting--012cc429-7e03-4b0b-8945-a5cf92fd1bac", "sighting--d000b7b7-f6d0-4f83-899a-d710ab5d7050", "sighting--874ab8c2-ffa1-45d6-8e48-d06b6d3641b0", "sighting--646dc3b4-2170-4600-bee9-c47f0b7aa562", "sighting--2d1a8da7-a2ff-4b63-99a8-1654b22e9b5f", "sighting--594b953b-0fe8-4a2f-9624-f72253104705", "sighting--7eb7e020-0821-4db0-9cd5-d2dce65ab00d", "sighting--f477f71e-27d0-478c-839e-2e87e899b305", "sighting--e4dc11bb-1b87-44b1-b989-7e0c5a789b6f", "sighting--767e5840-684b-4f46-b158-2a7898088a2d", "sighting--92b161b2-913a-40fc-a7e9-95ca3675032f", "sighting--2d8402ad-7a2f-4c11-bdd7-8574985231c7", "sighting--7f323746-3e50-4d69-9fbe-8d8bc720614b", "sighting--24b39121-0f55-40b0-ba96-6b9b1db24b43", "sighting--6320b7ef-4b9c-4075-b757-6d5f0c3643fc", "sighting--51306fa0-f065-44b7-965e-64baa50c1eef", "sighting--b6c31d94-d91a-40da-aca6-fc3e7aa89ed4", "sighting--f237f1e7-65a5-4b9e-96cf-ddd4f3e06cb5", "sighting--b767f53c-32cb-46dd-8791-c132cba09c78", "sighting--7590f762-a426-4d79-be9c-9db3990e05ab", "sighting--6c300dd3-32c8-4408-96d8-bfe76f006838", "sighting--e7b006cd-a263-4da8-91c1-afb298a84bcc", "sighting--cc3e3ae4-2a28-4237-b53a-05ba3a8e3b5a", "sighting--83c538a2-81b8-43a8-b126-38d114027282", "sighting--504838ba-6966-48fd-acaf-1aa077da3fec", "sighting--31d7b49c-fe0c-47a6-911a-a19d639042c9", "sighting--9e2801b7-dba5-4a4e-a18c-9e87cfa6dff8", "sighting--c7b9a5c6-4ebb-42e0-b006-a1ef1d0215b4", "sighting--1ae92bbe-101c-4f46-b6c9-c96576d705dc", "sighting--e41c65df-aa5c-4ba6-b7eb-a0bd7278c0b6", "sighting--797f6e5f-6e53-451a-95c7-8c3d903b3875", "sighting--32ededc6-6e0a-48b8-826e-a99236e71bf8", "sighting--5b8d0e5e-282f-4417-8e1a-4409caded468", "sighting--5ff71890-1e33-4fa3-80b3-02538ff4fe58", "sighting--50a88900-aa85-4c8d-a968-fcc4219b87c3", "sighting--938962ec-b09d-448a-9d10-56b3bf192702", "sighting--17e09ad7-fb5b-4b0f-9b9c-1d287eec7672", "sighting--f3dba43c-5a76-4f12-88ee-1d4c674f0223", "sighting--baee5c44-0a95-49c3-af71-ee1bac631946", "sighting--54e8929f-6860-4ff5-8dc8-6cec4734eeda", "sighting--d3ef22b6-dabd-4596-a76a-1d48fdd8b35d", "sighting--ba68922b-1ac3-4731-b6fa-464547c7d5e8", "sighting--399f1901-8b7a-4f01-b7bf-7a29e5676c67", "sighting--f1b73261-9ecc-42ef-be5a-c28c2ae209ad", "sighting--cddb504f-602f-4f06-8719-79ddb4283ee0", "sighting--33d28b58-20d9-4e64-9c2b-d71055e93bb4", "sighting--3ffef3ff-95c3-420f-bcf5-b24f109122c2", "sighting--849dd3d6-0f83-4ecb-bd2d-6fb95db6c361", "sighting--346c3b24-2760-42bb-a447-e1fda62cd3e1", "sighting--648b90d6-2495-4e31-9735-5cd07cb3f851", "sighting--93855af8-516c-4311-85bc-44d5fd8e6273", "sighting--caa74906-1ea8-4979-ac63-1dd53b3a72a7", "sighting--72f02688-55a1-43d2-9d31-2588bba6b56b", "sighting--4e3f3309-c52f-41e9-a8ee-c5a8c7e3bff6", "sighting--ab1b4e81-7328-4cf0-8b54-d9a83dbd8d02", "sighting--8d31f5b2-3c9f-4fb1-ae06-814723142ef0", "sighting--d4507994-c6b1-4e64-af4b-99fe63535b7d", "sighting--b7507931-055a-41a5-9f12-f45aba10799c", "sighting--6bd047e0-e95b-4c26-8243-0048f4be4d83", "sighting--58962932-3dbd-453c-8a1d-37e55060e0db", "sighting--5c7c2d9d-b158-49f8-aa56-4bf17d55400e", "sighting--e43a1369-8f82-46eb-bf02-658a4ad1c818", "sighting--8bd040cd-9777-48f5-871f-739a20886108", "sighting--d7caa0de-e1b0-476f-ab04-9f66c5313a69", "sighting--6564773a-a0c6-41a1-aa65-26fa277e572a", "sighting--239ea511-3537-44ea-9973-6b2956cbc951", "sighting--24795e35-66b7-4031-8be5-984ec2114960", "sighting--ee63de62-2c0c-4a77-91de-3d2f5398b529", "sighting--a63b826e-c74f-4ab3-9b3d-a00fd6fbcd6f", "sighting--6c63f83b-832c-4590-92fc-0cf356dcf7a4", "sighting--fe82bd34-ca49-4be3-b48f-56db44d87399", "sighting--d7e2373d-e206-4ae9-9936-7d110e0660af", "sighting--49cf69e3-8db1-4fa4-8219-3ad0d9c032d6", "sighting--ca784fcd-34dc-4cba-82b2-c75f9d1223ed", "sighting--13200ed4-df67-4319-bc1d-ca99d4cd3201", "sighting--d7e8fe6c-2f25-474c-ac6d-f63d0b31dbc3", "sighting--7df4fd23-9453-46ab-baa1-027ff9b5f054", "sighting--62803dc5-cc07-4a4b-9b96-d2547717f1e2", "sighting--5daf08f6-1998-4fe8-98a6-5e3e827dc9d2", "sighting--1bb86b07-e14f-46fc-bfb0-4997bb4fcbe7", "sighting--c466baeb-3b00-416a-8d5b-2c235480a358", "sighting--bbcf08dd-9d6c-414a-ad7f-841faa1b3f76", "sighting--9a802474-a62b-4263-9a1c-60be1a3f2803", "sighting--95cced04-1187-4bab-8fe9-c66c109ab012", "sighting--be4e8f89-b9e2-460a-9d28-27b6ac8c7acc", "sighting--91ca9117-3925-4974-832d-80a5cd13767f", "sighting--496d5ba6-e56f-4a3b-9d3d-bd485e627c96", "sighting--7bb70bef-32b0-49ea-8a61-41c2cdaa46d9", "sighting--a9fca599-6390-4aaa-900b-8c0e4bbf21c6", "sighting--4e2d9220-32b1-4104-a131-dd19141d3c39", "sighting--ba681d9d-a817-46aa-8317-83979d912cd7", "sighting--0eb884ae-a36e-4e6c-af29-2c6b652a750f", "sighting--e797bcf8-9dbe-4a23-95ab-fa570a92ad4e", "sighting--a1f552d1-f06f-4d21-815c-281b15ce41a6", "sighting--549a62b3-1f30-4f4f-b30a-9105f6b08e96", "sighting--327d5417-a9c6-475f-836a-48307d04051a", "sighting--71234755-d513-4783-82af-4af7f693f63a", "sighting--f40a9046-0415-4de2-b8ed-0660583f8080", "sighting--ecc0296d-08cb-4cd2-8588-2db817937b2c", "sighting--a9802bdc-5b82-49d1-8419-acf1db2f0122", "sighting--2a134c87-6ad5-4707-9d37-3b8c0c564650", "sighting--96eef755-536b-45f6-b87b-99c05ddb45f9", "sighting--f81f3d44-18bb-4d1f-a7f6-043810aefd34", "sighting--1cdae955-11f5-48aa-b3bf-e26c8a1d5203", "sighting--0cbe5db0-c5b4-422d-86bb-184b9e14ed21", "sighting--acc979da-44c2-4e64-95dd-a844d05aad69", "sighting--61d01042-b7d0-40f2-af38-a31a108c6ead", "sighting--26842c01-8414-4fd2-8c2d-7ab010709a98", "sighting--912c9698-ab2d-4964-a548-be9a1d0345c5", "sighting--a5ed470d-41f1-488f-90fe-1341d3d2fffd", "sighting--e4513aa8-4441-43c7-80f2-357b7adccb6f", "sighting--37bdbafe-7ae0-4686-b6cf-a6eabca1a44b", "sighting--63b583b8-16e8-40d8-82f0-fa02f9be04de", "sighting--e1faa523-0538-4ac3-abe3-a8abb81cc2bf", "sighting--b83764aa-e4e9-4f5c-8e1f-ce259fe53218", "sighting--0d2afed4-8a81-47bd-9c5c-ad80a033ec6f", "sighting--dc83495c-e9cb-45e9-a34a-8c952c5d73d5", "sighting--902317d9-5df4-4fa4-80dd-43f30706b260", "sighting--f8734cb5-ec6f-4a5b-b934-7477798c76da", "sighting--60c532c3-5907-4991-b12f-644dccb7b2ec", "sighting--dcd53be7-66a9-48a5-9522-b6ca70f7a33c", "sighting--dbbbe951-b4e8-464b-bb5b-3f0df92f220a", "sighting--8eeda360-b632-4364-a85f-8ce17b877298", "sighting--e2285cea-a135-459c-8536-15d72c5a7ee7", "sighting--34566c4d-d1ea-41ed-8817-dafb4acaa230", "sighting--c25c707f-35c1-477b-8924-e59f1de1aa4a", "sighting--b353dad6-2b9e-4dbf-b180-97a7c264eba5", "sighting--89853449-d989-4d80-a1ed-6d7871f1a6f4", "sighting--31c2cb9b-4742-4bcb-b868-685dc6633158", "sighting--b0f3834b-3e4a-4c2e-a72f-7bbe044a93e7", "sighting--c2e6adb6-5a8f-4c2e-b8d0-c5be2bc6915c", "sighting--040b1151-82ed-450e-a724-c3abf7771aad", "sighting--3180c1a0-39d5-4e11-9bdc-870bfa14e629", "sighting--ea0738ea-e8e2-4736-b413-8b5e15a6fd76", "sighting--3b25dc56-9a8b-4dd0-b8fd-a72c88440ce8", "sighting--d87caaea-09f5-49a5-9d11-ce72fc882cd0", "sighting--7676a42c-37cd-4931-9512-c40059f73e25", "sighting--4e96b588-ff77-487e-82c1-be6eec4fce9b", "sighting--4fb2da35-192a-404e-a62b-1f602e5f610e", "sighting--4ca2f71f-6430-474d-bddc-74da92465194", "sighting--3671762b-79e1-4ce9-9a82-a8fb493639c2", "sighting--ea39ccaa-ad5e-43dc-b868-b29c8c7fd49d", "sighting--7c7009f3-8245-4f8a-9c28-db9c44ee6f02", "sighting--1c6375c4-bfe7-471a-876e-67ba185e211b", "sighting--4ba36557-b18f-4018-8ad2-efd1de4bb43a", "sighting--a059a2d6-a9d4-4881-b440-4254ac26e837", "sighting--605cf397-ce35-46e6-969f-3e3396f7f7dd", "sighting--25fcfaca-4a24-43d5-8871-127ba78fbb7a", "sighting--0cda753e-8f6b-43ad-b216-ad9d2b39a615", "sighting--ce7454e4-fbac-4e4c-9925-20f41d3baa26", "sighting--c5839c3f-84ff-4bc0-80c7-d1fa6e0993db", "sighting--6861a0de-8105-4bbd-a98d-551a6d9c485e", "sighting--aef40806-3529-4a17-ba35-637c2e352d64", "sighting--fa0535bb-3cb9-4195-815b-482e45a80980", "sighting--b9b53c55-a0ee-41a1-affe-05200f776341", "sighting--1aebe19f-848f-459a-9850-1fc721204b33", "sighting--d288c5b1-4315-4e81-a19d-3b4760ce1505", "sighting--f68c926c-fd4c-45dd-9ee4-e2a880076c7c", "sighting--24c72b5a-100c-4ffa-9c96-353328e68aa5", "sighting--06e0e85d-0e54-418d-821a-a788a7e3e016", "sighting--3c5274ff-4936-47cb-a45a-eadf0e657298", "sighting--d0a0ebd4-b7e1-457e-9179-a5169f9d8ddb", "sighting--b06e9d14-f90c-4dee-aff8-feb1f83750eb", "sighting--c8b382c6-1e3d-4d4a-9d63-cf3beae2f28e", "sighting--469a738e-c7c9-426d-938a-08b541073fbd", "sighting--19fb7b94-fd27-487a-bbf7-43dcde4cf2c3", "sighting--6479617e-c322-4966-8d30-6d0a5279d02b", "sighting--1982dd21-9f3c-4d38-bf73-32bdffceb7fa", "sighting--1e7b655c-fad2-4a6c-b77c-e7445130807c", "sighting--2e65ad38-7313-471d-8d75-92f81cfe810a", "sighting--0549ff5a-2965-4160-8765-164dd4587691", "sighting--c3ff7f3a-ec46-48c6-8774-270a3617a492", "sighting--db82d057-eab1-4a24-8aef-3c6eb5cf8a30", "sighting--556d1fab-8e62-4297-a4ee-41bbd5730499", "sighting--4331381d-0bba-47ea-895a-e61278f4c045", "sighting--dc9e3afd-968e-410d-b4fa-6dc2e3d022fc", "sighting--ad2e84da-be7d-4f03-aa7d-68bb0b7f4aee", "sighting--307c3429-4190-46d4-9c21-46f89f5b0548", "sighting--b57e2f95-ff19-4da7-a6dc-93f95414c104", "sighting--f8a20726-3dc1-4a47-8df0-35651e15b4ec", "sighting--dbb84c69-bd75-4e60-a8a5-38279b95050d", "sighting--5e0f1946-1518-4eae-bc09-92018db9eeec", "sighting--8850ddb0-776d-4ac1-9c56-947135dc985d", "sighting--4df5e026-c918-4593-98a2-e982a0993ccf", "sighting--942a49ff-a4a3-43a9-a884-f3f113854796", "sighting--217f1fc0-5941-4ae1-9dc1-98113245b8e2", "sighting--9dfabc91-52db-43ec-8ad2-eb35908b070d", "sighting--74832e88-52b0-4144-9a20-16bf32da95b4", "sighting--c33d1d34-bc12-47e3-bf54-3497ad1ba2a5", "sighting--83164a95-ca9c-4c10-a9c7-35c6e22f12ef", "sighting--631d63fb-091c-47b7-b2ca-cec514cfce31", "sighting--886ccaa9-1c79-4849-b5bc-5a33e44d33f6", "sighting--1fce97bd-f896-4ce0-ba8b-492c90fe506a", "sighting--ac964138-343a-40c7-9f59-dc76461604c6", "sighting--13c9cb81-11b3-4f74-8e57-5d2715117cb4", "sighting--6011ef90-6074-46fa-8a37-3c058339b1f5", "sighting--0296e1bf-00ea-4ab1-9c63-08c2b3185915", "sighting--934b8d4c-b9e5-4a8d-97b9-d480b651100f", "sighting--5bdd00b0-f1c1-4ab3-a674-38a8a87b2531", "sighting--8931e978-707f-49f2-964a-7bd2e47c78b6", "sighting--65c81088-6242-40a3-8a0d-31c902e8eea3", "sighting--cf8db548-4cce-4ff6-8ad1-ca2b50a1b86f", "sighting--c2b2092c-17e2-4225-b6f5-cd19ac43e7aa", "sighting--56a970b5-8001-4e25-8212-637a91dda5d1", "sighting--bb13f3a0-6a97-43db-89db-7259e24289a3", "sighting--86248dd4-523c-4228-8331-c57e632affda", "sighting--a168d797-66bb-4d94-9e0e-ccf247d741c5", "sighting--9adcd5ad-cbf1-427f-b814-f0146013124d", "sighting--190f5de5-f19b-4cf3-9bd4-2e9199711fa1", "sighting--b07c6421-c7f2-41b7-a7e5-5bade3593298", "sighting--2b7cb056-1a60-45d1-83f0-6759aa0fd705", "sighting--1e3b87b8-c135-4996-9114-58fb9d68c7a2", "sighting--00341e85-a001-4246-9bc2-6e4a4f07e7b3", "sighting--3c22d22c-9908-4977-bb9e-9cabbfb85f28", "sighting--7ebab87d-2b15-4fdb-87e2-3a89b862bd6a", "sighting--ec65a758-2a77-4c00-af90-8b8797a90aee", "sighting--072b64b5-4fca-494f-8ca0-8448ae90065d", "sighting--3b976796-ad6d-4381-9601-ccdb53f03505", "sighting--a0bf20c4-0fa4-400d-b1b8-76e9833c3ba4", "sighting--e25d2bfb-94a0-4805-9510-c2f64306761d", "sighting--91f705f4-c102-448d-ba5d-1bb3f15eb77b", "sighting--5aac633c-92cf-4814-be26-4b6ea076cf9e", "sighting--966c288a-3003-4074-8840-e32ec45c8bd2", "sighting--f835abff-0843-4e9d-80b2-3ce2cf97d931", "sighting--1a1781b1-6d25-4afb-9599-411e16f7533a", "sighting--195a81a8-788c-44c6-aecb-505f41233b2b", "sighting--c57833f7-ed1e-4c6d-be32-57f0a86d069e", "sighting--79db05af-3b86-4f33-a3ae-55ed98b9941c", "sighting--fb479cad-44eb-49ac-8fc9-ace1b6e01238", "sighting--30b023cc-ce90-434c-b758-0e5d4e906a9a", "sighting--12ad9dea-eab0-47bd-86f0-d8a4169b44d9", "sighting--5c2a81cd-0631-4e8a-9261-0929647ad61b", "sighting--d6c0d03e-6f1f-4c90-9d3f-366044517336", "sighting--9d98974d-a8c3-462d-a3b9-688dbbfae6b7", "sighting--a3c3a50e-f477-4d97-9883-8e0355ac475c", "sighting--5d4890c1-642a-4a0c-8a53-a643199bda77", "sighting--70610e25-257b-4470-91a0-7ca8fb9a5722", "sighting--5b62b348-6bbc-4cf5-8def-707948df12b8", "sighting--d914ae43-34fa-4d90-a5c7-92c803bd6aea", "sighting--138a523a-4b65-495c-90d9-fffec4584201", "sighting--d488b13a-9b42-48d7-832e-6ed114bab180", "sighting--512e3761-01e5-44bc-98ae-e3892e67d365", "sighting--965fee21-ff1a-4989-85ff-d9194aeca811", "sighting--4c3d26de-627a-46db-933f-8679f664a759", "sighting--f6a01658-bbf6-45eb-9109-1090ae7a4e1b", "sighting--bc379de5-4a0e-4df1-9958-24be1b68c8cb", "sighting--26d73abd-b352-4253-9110-f8e663e2b0b4", "sighting--88b46db1-590d-44b5-9ebc-2c0b7e10138e", "sighting--3e91b62e-3eac-495a-a9fc-e2974c21a899", "sighting--8a6b21de-6374-43f7-b5bd-e768a178d19c", "sighting--0f93fb3c-b5ae-4bcb-8f2f-e0ef7bea48d1", "sighting--283ce166-dc50-44dc-9139-921bf49a551c", "sighting--f94afdc0-c616-40c8-b6fd-87f72f1f4221", "sighting--fde09458-beaf-4ce6-9a65-0e428ec883ce", "sighting--948b66b3-3650-4bf2-a66f-1058b3e19260", "sighting--adcc8d0f-f838-4c4f-bc6b-8b517a1345bc", "sighting--34af4e4e-2f68-4fb4-8b7b-34714fb2f92e", "sighting--2a391237-9599-43de-ba64-34cef738c593", "sighting--c2c32ff3-8ac9-43da-8ced-c62a48f3f136", "sighting--d033aba9-de5d-4a95-99a7-456d5d52c4d7", "sighting--2f9e1b24-0d7d-417b-8300-d6a1ff130744", "sighting--86bc7c18-78b2-4890-ba81-f03c7d2662e7", "sighting--4009db63-c053-4040-8301-b818b5d2c01f", "sighting--db0daadc-0a63-4410-9111-a64f79db3ee6", "sighting--87c68c4a-fca5-4d2a-9547-48a64c02841b", "sighting--19049542-e601-4667-8b06-97f60bff1f55", "sighting--94e61efd-cd25-441a-b973-88afa74b0193", "sighting--ad95588b-6525-4681-87f8-4e8a1cec059d", "sighting--b47b38fa-4a70-456c-b89b-565626833852", "sighting--379947cb-0df7-41dd-b2bb-6b27920c82c4", "sighting--7ff3dc38-7124-4b71-825a-1c571581404a", "sighting--d28b4d8d-b880-461b-b527-3e5a017dc401", "sighting--84b6d295-a731-4f07-8b05-d1cec64dee44", "sighting--0752b416-6ac0-4fcf-8a4d-50c29bd5a881", "sighting--7faff86a-9033-410d-9440-15ac0cec0bf5", "sighting--4bf9e8a7-10a2-4de3-9ad0-1b9d10e98473", "sighting--a7af901d-1ab7-40b5-9183-1a8a4f397b56", "sighting--4f9d957d-befd-4bdb-8eda-afaef781fa97", "sighting--1a43a989-3d4f-48e8-8c20-ff18c8418860", "sighting--139a26c4-bcf9-48a7-bf88-838eb026dffd", "sighting--3c6f6cd7-b161-4d54-8b44-37b5a93565ce", "sighting--a9720a84-ac60-49c6-b285-7f888a1ae52a", "sighting--c883a2c2-ac1c-4418-b388-48e9a56a46b8", "sighting--1fdbbafe-ddef-41e8-9fab-e87b0d259890", "sighting--5715878e-6fcf-4a57-9e47-b944514e0d95", "sighting--c68ea495-c148-4b51-af6e-56b155aa8a63", "sighting--59db5e8a-ea90-4a48-9fd0-35ea756a9f36", "sighting--1d53f8e2-5482-46e6-b231-fdd699b73e6e", "sighting--7ad5f7b9-6984-4eab-aa8b-f5649411c5e0", "sighting--b1fa4005-98e9-4c55-a065-793dff2c2b00", "sighting--b1dad150-eaa3-421e-92cd-0c3238b6ed0b", "sighting--b51286d2-3e0c-46c0-a56a-7dad0c994571", "sighting--e948006a-2791-4ea0-aecd-8728ed46b3c0", "sighting--5c68821a-a1e5-46cc-873a-b46c5445a72c", "sighting--bdb27021-71df-4251-895f-b32351cf37aa", "sighting--a7817c3e-0436-4c4d-b3a8-7c60363f6fb1", "sighting--a93c1e1f-1417-4dcc-b78f-4817cf6e01fc", "sighting--f42c9fa0-b637-4ccc-a9f8-c7fb7a87fcd9", "sighting--4071bf50-08a4-40d8-bd3f-1347c30b3107", "sighting--e92f6cfc-90fa-430a-8dc2-431764ed5068", "sighting--5bf0bfd1-03ef-4e31-9f44-2f3b680e77a8", "sighting--5ca291b4-c64e-434d-852d-2dddab8efc7f", "sighting--3fdda9d0-59ba-465b-bf7a-973ef43547fb", "sighting--15660c5d-2913-4002-8224-fb49190b2306", "sighting--34c8e4b2-b98f-4808-9fe4-7de16df16df7", "sighting--fe9b1a76-70ac-43a2-bc85-bec04b348e0d", "sighting--55b3e8b7-3d58-4e5c-8374-328720aa5d6a", "sighting--b4b0f1e7-a73b-4f41-bd21-0764129dea27", "sighting--13febc3d-1161-4fcb-b1ae-8e7cb8826bd4", "sighting--df3cd3be-f411-4b5c-9b8a-87b361596616", "sighting--83d97e4c-1ca5-40a1-85c8-3b30087bfb0f", "sighting--9b75b2d1-7e3f-425f-9ed6-8650a0084c53", "sighting--9f64938a-6ec8-42d3-bbb8-a87d9da3ab7a", "sighting--d1e59817-3827-4776-a6be-d500506c3b0c", "sighting--9b79e33d-192f-4d89-bae7-3d0515c481a5", "sighting--f9bd0bfb-48f1-4543-83fd-87e040df8c49", "sighting--6ad65349-c71a-4838-95fa-7c77a6177f0c", "sighting--8632b2f9-3caa-4a4e-be6b-eb3655b1835c", "sighting--4749484c-daff-41a9-84c8-cbfe461b1a82", "sighting--7686f5f4-7fbe-47a8-a2d9-508656ee5876", "sighting--01bdccbe-140f-4d2c-a556-8d65c57cf3e7", "sighting--241952ca-a088-44f2-8234-94432fb139d4", "sighting--d2a762cd-b2de-4a1d-ad86-77a349d9a59d", "sighting--38854a63-ef9f-4088-8904-14acd57def74", "sighting--05a9f28e-5813-4f5e-9327-de4996cad5c4", "sighting--7c96dffa-32d8-4495-82f7-920b794f4f11", "sighting--38f5332d-4265-4432-8468-793195e5d72f", "sighting--e7bbaad9-2aa8-4d44-a7cf-eecef7f2f035", "sighting--21d06c49-9137-48f2-ad96-f04c7d4ac005", "sighting--d273116e-ac33-4648-a1bf-e1816822eddf", "sighting--f0270c10-5654-490c-bd1e-abdadf5ffeee", "sighting--4c84dff0-7ccf-4183-b58e-b8aed059a10d", "sighting--073a948b-50fd-4551-8a48-1216ed5c875b", "sighting--d8cc39b0-4d95-4f9d-831b-908e176a5f8f", "sighting--5c025e16-bc03-4300-bbe5-0f7c21e76e19", "sighting--c59f9636-ac55-4436-8dbe-35fefd5a8cdc", "sighting--9787bfef-dae5-43e2-b694-74782cdc5799", "sighting--b4bd0eee-3d2f-4e7a-a8fd-484d1d46e8df", "sighting--a9e3d0bf-a8b9-48e9-85d9-d32f0e29012f", "sighting--d233b220-d4ef-4565-b04b-c8081b9c0738", "sighting--0d0a9a10-a2ee-4592-bc8d-4a680badc77f", "sighting--e6a18ac1-a8a4-401c-aa23-6011317116b5", "sighting--58e80f13-728e-45c5-9729-5a104517e7b2", "sighting--70de68d1-dd05-49a1-a3b4-a5faf941d64c", "sighting--3df1b29e-2daf-480b-98b8-a7500aff9c4d", "sighting--79578de3-6efa-4900-9227-2a3ba928395e", "sighting--0fd49b89-04db-49d7-bb6b-395432f133c5", "sighting--411c27ed-5c3c-4b18-85be-9638cbdb6c45", "sighting--4ee43de2-fe83-4215-8781-884fe98df7af", "sighting--69318a67-39bb-4a0c-84f4-9da6d64e8978", "sighting--87639e65-8dbb-41dd-a581-edd417acf8c7", "sighting--bab04be0-f5dd-4cef-8b57-d1a2d2e0a7be", "sighting--0e29a819-edc5-45ea-b5a9-00ecf9f705c1", "sighting--c90a9c52-0956-49b1-bdff-da9d805d4e5a", "sighting--907e5265-fe4b-4a2d-af3e-8802698911ed", "sighting--89513ed2-6104-44a1-99c5-9c209f9f0ce6", "sighting--fa04e349-616f-4c25-8ca5-76062d10b9be", "sighting--236838d3-3146-4273-9527-c8c5f507f7f8", "sighting--f367c506-8750-4ebe-8a83-4601fc35328e", "sighting--6ec4f58a-3ad0-43b4-8fc7-babfe0f253e2", "sighting--1651980f-4aa8-4340-8956-8c054537ca57", "sighting--d75702f5-2645-4ccf-b7b9-0da14d8bf831", "sighting--dc8d601c-335c-492e-9314-7a6bc468dad2", "sighting--7a2015fe-ab65-48f6-befa-0df589db3b3a", "sighting--06a467cb-ad03-4aae-ae13-65feab7c4c0c", "sighting--86f01fcd-c276-41b3-984e-ae0c0fecf98a", "sighting--c228501f-09ca-40af-8428-8f98d1e316f1", "sighting--53e2dfdb-cb45-4743-af2f-8641074030d5", "sighting--3549c77d-0864-4c64-9e41-1dad93946fcd", "sighting--6428e8fc-8f91-46f8-a10c-22189cc2d41e", "sighting--53176f6b-4d76-4f65-8e66-363135de42a5", "sighting--01d9fed7-2e5b-4e5f-8f27-28880214f69a", "sighting--9c2775cc-2bdf-41a3-9ac0-41db16559975", "sighting--90c2a5f3-0085-4c66-99de-c153d4586852", "sighting--4be39982-3dfb-486a-99b3-8cb28afed08a", "sighting--84b55ed2-8c61-4f7a-9992-34e4899279b0", "sighting--c53abbfa-c651-4e25-9971-b00f44dd1cd2", "sighting--04369dba-9899-42a0-af2f-d0ff8878aef9", "sighting--e9b8d000-c982-4bc9-bd87-0529fa0c2eeb", "sighting--3b3d90c9-f612-4a17-a5c4-38cc7a71aebd", "sighting--6fbe1789-2b6c-4520-9d57-bc6b77b7a051", "sighting--b5a1cb6c-df1e-4b21-b5a4-ebd6fda8d041", "sighting--8edd934f-0e41-43bf-a305-0e7fa32a45c3", "sighting--497f829e-3ccf-4d9e-848c-767ca1ac269e", "sighting--5a7a9611-7a73-4797-86cd-4ba2b016680b", "sighting--0f4808ad-3cea-45ef-b020-d6e8abc28347", "sighting--d0067575-1bb8-4684-84df-4d0396f804a9", "sighting--46eecbe7-ce6d-4971-bd62-4e7dbdca0fb2", "sighting--a04759da-4968-400d-a253-b8c57bad84a4", "sighting--870919ad-2b84-49e3-9929-2e3d6223cc41", "sighting--719d3388-acb6-4096-a6b2-b8672804f6a7", "sighting--c83f9972-58da-4598-94bd-e2f96dbfbef0", "sighting--c578502d-1e26-42d7-b36b-ac9dc6438812", "sighting--d0054a4f-b731-4703-8176-b3e196f78445", "sighting--7e67ab82-d6fb-4929-8ec7-9e78825c13e2", "sighting--83aa71f6-5e72-4d4f-95e1-b98fe1154733", "sighting--c634ac4a-62b3-452e-bd57-a6ea112a6bf5", "sighting--cfcea7fd-d363-4437-8116-38c4fd5f5b98", "sighting--b2117dcf-476f-42e2-885d-ecec73c9ddc9", "sighting--a3d71c5a-e85f-45b3-a7da-23f4893e234b", "sighting--182cd364-1966-465c-be86-4efff11cd687", "sighting--cfade8fb-a572-4199-919c-4fef72ccb52a", "sighting--7da5da3c-b31a-45ef-91f6-255f09b4c061", "sighting--2fd43c60-6563-400f-a8ae-a390cc477fdf", "sighting--b1850a42-ba39-48da-b80a-0dbb84a21a32", "sighting--d74117bb-2618-45b3-95f5-10bda3eb03ad", "sighting--62e1cd67-04c1-4826-b7cb-e410c7bda781", "sighting--b494138d-710e-4ad5-b17d-3fac389bbdaa", "sighting--291d310a-8b2e-4308-b524-15179cfd4471", "sighting--dce9db3b-8cf3-4923-a62c-4adfaa79b2a0", "sighting--ed8b816d-55d6-40e3-a37a-ed6ed2b7c5f8", "sighting--04b10aa7-749c-4279-a847-5d441766dbf2", "sighting--4a459f82-a1a4-45fb-8a91-9443a2aa2798", "sighting--c560d2b3-d366-4fd7-94cc-2184b2bd9f0b", "sighting--076de291-a345-4332-8f2b-0fc6030af821", "sighting--c9e50646-c60d-484a-90c5-a55edc1fcd04", "sighting--75a68b3c-7e09-4713-a96c-2bf655feddc9", "sighting--e9016058-29e6-4c43-bc0d-9f2a27d5786c", "sighting--a6c03f5e-a294-4c53-975d-61ed99da30ff", "sighting--23b58c97-4ebc-4e1b-8357-0c47a40e6347", "sighting--8d8eb2f7-3d73-466b-92a9-6a364965a797", "sighting--dc91314c-a928-4619-8def-c8ff37733624", "sighting--acc85e28-c37a-4637-a55f-b37b6a235e9d", "sighting--8d19af33-5357-4fb9-b871-465325ba8011", "sighting--cd72e944-d1bf-492d-ae65-21049d90142a", "sighting--d9878a49-90de-43fa-b5c8-08586c38fa6f", "sighting--fad834c4-1d62-42dd-84c6-d7feaef1e85a", "sighting--0a19ac86-9e7a-4474-87ac-6eae58117bf6", "sighting--25a43f9f-15a2-4a93-8af6-2e11ad255abe", "sighting--6948b5b3-a973-4bd3-bcd7-bd6461a70cfa", "sighting--d9fb1c84-ba93-4d03-ab3a-72d258fa4b39", "sighting--4f92eb8e-6c83-4d42-86e2-fc123ed47b77", "sighting--1108e1da-c5dd-4dce-aa5f-133dd965ad67", "sighting--4367aa6d-84de-4470-a138-7116004cbf46", "sighting--7e035481-cf72-4149-8678-a5ad0d3f6bf4", "sighting--e96889cf-5fe9-4834-b1e0-d921a1feff31", "sighting--dfb6b11a-f50c-44b7-9724-0b9649896c22", "sighting--a92d3000-765e-417d-8e9e-8bd9d061e32c", "sighting--b36518f4-a93d-42ae-9c0c-f403ac082cb6", "sighting--e7bfe02f-1407-4e84-88bd-c034233736e7", "sighting--420d2ef5-ad1d-4b4d-ba94-b5a4435779e1", "sighting--37c3310f-637d-4581-b9f0-97900f76c06d", "sighting--d647c3a6-b122-4868-ab24-44213716ddef", "sighting--fea96f13-bcb2-4840-85da-9208b5a0224a", "sighting--debd8cb8-8038-4052-b6e8-ce7b0987b853", "sighting--22179f93-3420-4b5f-b116-cd9a7e3c62f1", "sighting--9e4fe46b-ec45-4278-b467-d92231168aa9", "sighting--6820ad2c-e3c6-4968-b7e8-ca39ca2ad821", "sighting--1cf9e97f-0118-4f50-8e1f-1bbff114f766", "sighting--b0a6e8e0-61a2-47f9-9838-13b2e8fd0934", "sighting--07e7970c-d438-48d9-8c32-a3cbdc4b867a", "sighting--18888890-15a4-4229-aa8c-90804286a45a", "sighting--d7d7d059-e2ab-4be2-88db-c37ddc44c4d4", "sighting--40de8cb8-fee9-4490-a999-54d4eda0d124", "sighting--531cedc0-25ec-4815-b266-89bcfa7a59f4", "sighting--06cca147-91f2-4905-9c3f-eccca9d441c8", "sighting--e1393d3f-9430-4bf6-aa04-5433a77c578a", "sighting--25549c6b-c109-4adb-b4e3-d9e8c6fc4c53", "sighting--fd802db6-e117-4d5e-9c16-8e07d9924b46", "sighting--04018229-2e26-4123-a63e-9bcf4b47455a", "sighting--f4939342-9df4-4cad-b082-feec67c75e9e", "sighting--0bcce1ca-b4fd-42bb-8003-84102f96e476", "sighting--8f11335a-bd41-4af9-a68b-c6a296e0542a", "sighting--c4c635f1-744a-4b0c-884d-71e8bc5d913f", "sighting--5c22d10f-6ecf-4371-8c0e-cdf3d3f7850c", "sighting--1a64e323-4890-4426-a8a7-653280124d9b", "sighting--161b9895-4cd0-484f-bb07-64dfccd3a740", "sighting--f6f8155b-1283-4d7b-b4b5-5a02617241fc", "sighting--eb65401f-6262-4c2c-b0c1-5e028958aa0d", "sighting--9170861b-5d95-4905-accf-ebf645779deb", "sighting--b70e21c0-8ca7-486c-a8d2-4776c357fd7e", "sighting--1b66e373-c3b4-4842-b585-ff71145db63b", "sighting--65e80455-66ef-4d0f-b8e5-238afc145961", "sighting--be2b3026-f384-41be-94db-d237faec226d", "sighting--d618dd0e-4cf7-44ec-9cc2-12841788c25e", "sighting--6ff4b04e-0bb0-4763-aacc-c2c378e69844", "sighting--fd229671-c273-4254-913a-b863132161db", "sighting--62a8b7a3-be39-40b9-a8e1-e7ba8fbb00cc", "sighting--c28a8b3d-39b0-477d-869a-9fcb571efe62", "sighting--14933f01-d23e-4e67-9886-8d9eb3f12ed1", "sighting--7f3b91c2-1ebc-4410-8960-008dbc8e733f", "sighting--28e13c2d-2591-4a24-9298-05e8e05c7510", "sighting--fa8ce3b2-289f-402d-bfbb-dd03eb7d4eae", "sighting--cba986e5-b641-4c34-a5f2-8f63da77e92d", "sighting--04e0f0ff-6d68-4083-907c-a4fdcae4e931", "sighting--b0d93265-6b46-4c3d-ae46-6c3344026c32", "sighting--7a089ecb-4495-4d33-8b50-ab76634bb696", "sighting--c05ac213-5d1a-4191-b205-066370c327dd", "sighting--da039c88-b83b-4ca9-82e6-c9288367b6fb", "sighting--17ebbf20-474e-4329-b3c3-f73ed9c1ab92", "sighting--2069f940-c552-4ea8-860e-d3563217cd3d", "sighting--d883406b-26f0-404b-aef5-2fea4c480222", "sighting--09065125-f660-4b7a-a668-9b10c6e2ce3e", "sighting--0ba156dd-1c59-4418-9845-eec4642d5a7d", "sighting--3dc2d613-d539-4801-9bee-393ab6b7793c", "sighting--6fbe2110-e643-45bd-bd92-e06486cbde83", "sighting--64a5ce7b-38c7-4ed5-9aa1-66655d26d6a6", "sighting--d89699f8-89fd-4d4d-bb57-e0be9420a8ca", "sighting--d7e88498-8a69-46d8-8614-a2f341afae91", "sighting--19c76046-09c1-4c44-8928-36eb47e86897", "sighting--022379de-6044-4bb7-9b98-339cedc10b3e", "sighting--b7f13e5c-d5a8-43db-90f4-358a4abfb73f", "sighting--e4a5bbff-f819-44de-91d8-a6482a997d02", "sighting--dc41be90-2245-4441-afce-cbbbb1591fce", "sighting--309d3ba2-ab37-4fb5-ac7a-cf564648a883", "sighting--c6d681d4-762c-4523-bd17-152a4c76026e", "sighting--28cb23e3-9893-425c-94ea-fb41d568b141", "sighting--90f8b870-bfec-4223-8a04-a6b42a11bc9b", "sighting--91d6f425-52d0-4a66-99db-73961d2a4bc1", "sighting--7817e7b1-83c7-4b0a-b3de-ffd755d3b3ee", "sighting--19785299-dbee-433e-b262-ede2315a9a96", "sighting--f3c50044-a0ce-4621-a972-b8257c7cb917", "sighting--d1a174f1-3a85-485b-988f-81246d5afb58", "sighting--6e45feff-5552-434e-99d1-66d8bf328770", "sighting--c0665a20-f6ab-43ce-adb0-79b676277aa7", "sighting--783bddb9-82e6-4c99-94cb-1ab3f5783015", "sighting--427fe0da-3fea-4e85-9f12-dcaadd9dcc9e", "sighting--7140ba62-1beb-4c23-8eec-ecd88e55e7b8", "sighting--faad8919-d9ef-4cc7-ac21-9445d690406f", "sighting--fae451d2-8077-46ef-a752-861ad1287e2b", "sighting--a608b0d3-8905-4625-8d39-52f95d28e89f", "sighting--d75947fc-4fc2-4bf6-8fd3-1203680bfec1", "sighting--31bbe8b9-e735-4d9f-926e-12c8f415c097", "sighting--83c5f40c-a044-4ec0-b1f0-a6b43e97c116", "sighting--839729a5-f03a-422a-9f8a-ac0c90a393f2", "sighting--d081de69-de7d-49a1-8f66-30d2edd5dc6e", "sighting--f9b7a916-3b47-491c-b0a3-ef4b5ad1d3db", "sighting--54a02f1b-3343-4de9-9b5f-c27fea6ab665", "sighting--b97610f1-a9f7-4bd3-abc3-5fd0d211b7f1", "sighting--8d662843-d80b-4eb8-80f3-3dd30c40dd04", "sighting--d2cd1211-8585-43b3-8230-2e521f07e066", "sighting--d4b05e13-9da7-40af-a7c0-f8bd94381d7e", "sighting--b5ef3738-625c-466f-af0e-3b997fc563f9", "sighting--68476fcc-87e9-417c-ab2c-139857cfa5af", "sighting--05b78ab2-9333-4281-9c23-ad08c6a5d94c", "sighting--58708f80-4091-4bc8-af83-2a9fcffc1eeb", "sighting--be9a5f4b-a706-404e-a77d-70f4a8eca2e5", "sighting--f57cea56-85bb-48a0-a5a9-d0d92db86c18", "sighting--eaf11242-cde4-4bdc-80b6-17df98f331f7", "sighting--ac93c881-49f4-4446-beae-b26d938e7319", "sighting--22f5ecf1-6e20-4c3e-9ba9-1969b48d7579", "sighting--c76dfbba-e134-4143-92b9-39c3ec415c0b", "sighting--a155ae2c-58ad-4125-82d3-4b1b7debac6e", "sighting--a64c69c7-fba2-4c90-b6e0-cc2df9f64a2f", "sighting--65f1b1a4-8d0b-45cf-9317-5bf27491d2b7", "sighting--74be843b-835d-4fd5-86be-b6e5c0b78574", "sighting--c97d710c-320b-4059-bed0-e7f3ee797762", "sighting--042b33ea-46c0-4f8c-a87a-ac6e5a928697", "sighting--f64ec137-b0db-421f-bc92-faa66378bb8d", "sighting--61b616ed-b599-4e89-a58e-6d765ac9f09c", "sighting--ff708d55-4a75-4d3a-bf8e-1bed1221ad25", "sighting--c629dc5e-b3e3-4664-86f0-17388713f3aa", "sighting--27ab8d26-7092-4d74-bccf-99d89559560d", "sighting--1c9f303e-9e4c-4a56-9b0c-0668f0dfc4bd", "sighting--bb7b7f2f-a532-444c-9ba4-5704de3bc21b", "sighting--68e88048-4c28-429a-b526-3c3711745f91", "sighting--415ae493-c5d1-4249-ae97-e74903f1a729", "sighting--5cb9b662-67d4-473c-b208-603cf9c7c8b2", "sighting--3a94ce14-1e79-4d09-9a2a-c4cd1f84e1a9", "sighting--a94aced8-18d1-4887-8213-a9218d65959c", "sighting--3d131c8b-5a1c-4656-90b6-925ca74df1fa", "sighting--b47853b2-7137-4942-ae60-53c75c779974", "sighting--2adc1f70-4dd7-43cf-8d96-fbd232e9f61e", "sighting--a1e62463-270e-4243-a3d9-69fc9e535d1c", "sighting--09fb25d8-24b2-4399-ba4e-869fbc22a3e5", "sighting--a05d1a42-b105-4f8a-9102-47d8e3471de7", "sighting--35502619-a4cc-4cce-a33a-ce56ee348c25", "sighting--b609aec7-4ba0-46ec-be19-f50fd1d15377", "sighting--aa030b3c-6db5-4b73-999f-5f096bd73660", "sighting--fa45f252-3018-410b-9ea3-d844865ee484", "sighting--985efeb9-6f79-4658-9034-50cdead8fef5", "sighting--3963ce2f-3437-4004-a4c2-8a7fc39eb7ce", "sighting--e268bd32-9a10-47fb-8526-5635eec5f8c5", "sighting--ad448cce-59a1-4542-8a17-fc801713ffd6", "sighting--526cfe4b-a534-4d94-9fd5-d3c3a4f11f45", "sighting--f6b02822-3304-45cc-bbcc-faac3f994466", "sighting--ba968350-318a-4ba7-9bff-405fb806721b", "sighting--217dab32-6a79-4e26-b872-b620372c4071", "sighting--0fc7287b-3d0e-481a-8903-7f2600452a4f", "sighting--d77a59dc-30fd-4455-9b34-62a10f54fecb", "sighting--fd4fa1d8-4a36-455f-94c0-74e08fff853b", "sighting--5a0572cc-98f6-491d-b936-15022c9e5585", "sighting--45353acb-7bf8-44be-85e8-d942324c4a07", "sighting--07e4601b-ae22-4c30-bf1b-f93390559f4d", "sighting--17bb9627-bc7e-4a41-a2ca-3550fbc8f78a", "sighting--44407c12-4265-423d-8ac5-4222279fb491", "sighting--f51fe091-dcd7-4a40-a3a4-2b9ce37b882c", "sighting--e5ae1604-9711-48d6-a561-434d204087bd", "sighting--e803e5c5-8d90-43ba-9fec-7f69f9d37cbc", "sighting--0fd3e992-8e99-49c5-89ad-a04f9bf21497", "sighting--bcae51d5-b07c-4f26-b53a-61fd24a59b5e", "sighting--9ecf2f4e-b109-4ebb-884c-cf10da944316", "sighting--bfaacf58-6430-48b5-8839-68c68b10a6b8", "sighting--0c5c9076-3544-4fb5-a1a5-8f360bcc557b", "sighting--b6ae7cf3-adbb-4dc5-a430-9464847da1f3", "sighting--a6986427-5408-4704-a638-6b93ec3dd654", "sighting--fb476db8-dd03-4c35-ad4f-a6468ac1dde3", "sighting--4d124aa3-bd57-405f-97fc-089ad4757b31", "sighting--bbe557e9-0a99-4261-87a4-142ffba8621c", "sighting--28f582df-369c-4596-989e-0ecf9c138687", "sighting--38050d89-d6a3-46a7-8e06-b4e4a112f8cb", "sighting--5ee645f9-7708-4cc4-a05a-150f0144a119", "sighting--e4ddfcfd-3a62-47b2-b096-a5f20364afb7", "sighting--af4146ba-04d5-4b7a-a34c-c403f1ddb9ec", "sighting--eeb30b16-da33-4375-bf22-cba8a44ae817", "sighting--1ab9ea38-4f4d-4710-bcdc-12ee7a98b483", "sighting--3000b088-8729-48ba-ad3c-f32152936dc7", "sighting--0dd69511-02d5-4eb3-8734-aaf786945076", "sighting--464ef5b0-d5c8-4a3e-8780-75489660ed5f", "sighting--94a646f3-61b8-43ef-b715-6ac09ed5663e", "sighting--1ecf9f3e-09fc-4c5a-9456-f7f4d94bc1ce", "sighting--65210c9d-5627-45f0-974c-07962c4388fc", "sighting--f8e0322f-5235-43d8-a6dc-ada9c0fefa38", "sighting--8083fb93-69ef-451d-8956-c5e11f64c63f", "sighting--4902d30e-b088-4ce6-aa9b-22de1f191c72", "sighting--1ff44444-c258-4e85-bc91-fc6c5df332b9", "sighting--bcf1fd96-d94e-43ac-a840-618cfb390db3", "sighting--c52f3f0f-e4f7-4986-896c-bad825ad2120", "sighting--5110fba0-e2a9-4b24-88e1-4b6728d5cbe7", "sighting--06d3f9da-0970-4001-b3d8-eb88e2a0d1a3", "sighting--9adc8638-2eb0-4fc3-96b3-01edb7fe4da2", "sighting--49afaef4-f0e5-4a79-9f04-764d39716852", "sighting--2a67e10d-e081-45ec-8aaf-b300dda67a25", "sighting--afc9f4e8-bf99-4777-aab7-8a76ef38e482", "sighting--63a17d8a-9997-4817-9a7d-c96a0d26bdce", "sighting--4d8bc8b6-a2a2-45d0-a7b0-b178e5599fbb", "sighting--65ccbbb9-18b4-45d1-9c29-668919b05bcc", "sighting--3b4323e0-8add-4577-80cc-e1feec4fed59", "sighting--5306ed8b-c709-46bf-b8ea-e25663591a40", "sighting--dd8733b9-b53e-4b05-8524-870d79c74bfa", "sighting--1c00e5a6-9b0e-4319-9879-701d3cc3b0b6", "sighting--e915baa8-c8c7-4852-bd8f-925fe86c959c", "sighting--a48239f0-133c-4899-a2c2-dd8dfb7f35e6", "sighting--edb1bd38-b7ce-4188-bbd9-5c9769635c74", "sighting--14774c48-0cc8-4b26-87af-a08d70077882", "sighting--b2d5fc51-b6ef-4aab-913f-67a75ed4427c", "sighting--5d41e3cb-a387-4dac-841d-b822484c4ed8", "sighting--5285a7d4-57e4-4959-9439-63b9f8e42404", "sighting--ff962cb0-f19f-4f24-9c5d-c4117a94ddb7", "sighting--25f81980-667c-40c8-b0f4-e0d6eebc7560", "sighting--778b4389-088c-4894-83d1-e2e81de8e344", "sighting--60a004bb-97d5-431c-9d28-67896f3854bd", "sighting--628c85cd-49fd-4f27-847b-4fa5a9d7f57f", "sighting--811e1bd9-9b9f-417f-bee9-5e862ac1df25", "sighting--428f774b-9410-441c-876f-f4e67be3fcba", "sighting--f612e75d-f349-482d-8c95-999e29bb976f", "sighting--ce04a9db-d8bc-4238-a0f1-1e1afd66eb21", "sighting--a8dba90b-5547-433e-ae00-660778cf9034", "sighting--86bbbb97-61a9-454b-a7f7-019069c5c5e0", "sighting--bb86706a-692f-4952-85f4-1beff6462b35", "sighting--5506eeef-d35f-4998-8c4b-ed2f852a7656", "sighting--2594381e-882b-4e40-84cd-dffe8f8b07d9", "sighting--baa733cc-dc6b-4534-a415-f1f71d44f0c7", "sighting--39c7e572-5bf7-4e59-b947-4246d24be754", "sighting--68ea2c1f-6dcf-4014-bffd-6aa1d7765da4", "sighting--90526593-3b35-4959-8204-fbbacb7d2d40", "sighting--6bd63e06-4f2e-4c5e-8d26-d868ed3a44d9", "sighting--e2fba79d-4629-4090-9dd0-b8b299941c79", "sighting--c69a86e2-fbfc-4c52-a57a-ed2911311a78", "sighting--c4d8f547-b8e2-4931-bd9c-316400fb0fa7", "sighting--03f6b764-e824-4713-944b-c15d71b8da29", "sighting--8fa3b7c1-94f1-40bc-8482-f477b2cbea5f", "sighting--7c06bd65-8628-4908-85eb-5eb904d5dc4b", "sighting--8dec01a3-9f24-4b1d-8995-fdb188631139", "sighting--7c239a57-47b1-4e7f-bbac-62c84686fbb1", "sighting--9f81357c-1e63-40fa-85c5-474904313969", "sighting--a69724c8-c4b5-45c7-ae72-a3c96abe665c", "sighting--1b83a22a-c672-4b3d-a18e-96de0ac61016", "sighting--898da342-3a38-4907-822f-4a9a9e41b018", "sighting--51dc3b15-ffba-459c-a483-ace90e2518e4", "sighting--9a942b04-bcc3-4a17-a1e9-9cac480629b8", "sighting--759b6cc0-5367-4ea0-b661-137a74dd4eaf", "sighting--dd7f9ddf-b3ef-40c5-bde4-4eb10615ddac", "sighting--f24b9928-68b1-473b-82a7-43cb85ea32a7", "sighting--29ff82bc-4145-4cd7-9d3c-ae754c8bf552", "sighting--dd9d570c-717d-42a2-b181-28bb008f40ef", "sighting--72de9ff9-b677-4268-a220-acaad07513a0", "sighting--6f5e26d5-e518-4d9f-adf8-63e0b9082c4f", "sighting--e9adf3e8-a4d2-4f3b-8c47-141a6e4a230b", "sighting--0691ec05-d45c-4920-925c-11e5405b4cd6", "sighting--41c7a08d-b7f9-4b84-9d50-570206eed49d", "sighting--1d76433f-9d7c-4fd3-a40a-6c209225c276", "sighting--d691ba74-7791-43ce-bce8-69c248121d13", "sighting--6cd94ccd-9d1d-4db3-b99f-f32793c58d85", "sighting--95578015-5a16-4f41-89fd-c812cf100c50", "sighting--552746a6-39fb-4e2e-acf3-bf8d5aee9d7e", "sighting--bf546483-d373-4db1-ba0d-7f9d348f3144", "sighting--9ea42fe7-0f4b-47fd-a09a-36b9d2264712", "sighting--0d7edfd3-163b-455d-ba68-bbfd43eb7200", "sighting--3c304ca6-0cc1-40c1-ba7d-e35f1a3cbcb2", "sighting--9cbd342c-092f-4269-905f-6fc553d2647c", "sighting--144afd0a-7e4c-4e44-9d70-be38c79d89c8", "sighting--e086aa16-9797-4fb2-900b-cb9a1c2cefa8", "sighting--97ab28aa-d422-412e-b93c-7ded4cc196fb", "sighting--aa8810a3-723c-44d3-a9d6-0ce29d734c95", "sighting--ae4166d0-f9d9-4512-887d-77c228f68249", "sighting--9ee44a8b-dd07-4011-8695-831012d4454f", "sighting--9bfded2b-4485-424c-8e57-fb4fe557dbea", "sighting--c00054dd-0a97-4064-9cda-65cfed6e9611", "sighting--127ebdb2-e69d-41c9-a34c-8e6de467be1c", "sighting--24c563ed-d6b9-4f1d-a10b-eaa5da5f2d6f", "sighting--c8a7358d-2d65-4164-9eaf-ec48392462fb", "sighting--67c79806-03e6-41bf-a0e4-69575476e210", "sighting--89375e04-c4d3-4cc5-a8bb-7ea2c33536b7", "sighting--34879e47-d181-4820-9244-41c2b7fe63bb", "sighting--412725b1-cb6b-4c8e-a811-34703574bbd1", "sighting--d7781e32-1687-4d41-8372-d2a304512352", "sighting--d686eef7-a15b-45da-a201-b75deb92b7dc", "sighting--8f557fa1-3386-44fa-883d-9b19408469ac", "sighting--586ff946-89c4-4615-9f61-c94c8772b8bc", "sighting--5d9ca14e-82b7-46bc-afce-016e7a5e4173", "sighting--85341096-ba6e-4935-9aa0-93c833b86c24", "sighting--e319e024-8b9b-41b0-ae7e-31bd5697a2a1", "sighting--ac1deb98-59e8-48cc-ac2f-5d7ba074909b", "sighting--acf1faa5-288f-4f84-82e4-2ecdb678615d", "sighting--02b420fe-52af-4e62-8198-1a2ab1256aae", "sighting--4143326a-7bc0-4cbc-92a5-0a544995c813", "sighting--95799b71-e37f-4b5a-9b5a-62ecaeb19279", "sighting--de0b81e7-e2d7-4855-b5f7-bec82dc30fef", "sighting--08e3eda3-32b5-49cb-af07-1fb08bba3703", "sighting--d86391b2-175d-4949-a241-46c77e3b7324", "sighting--c897e41e-5aa5-4391-bd79-92ac0ce3a82e", "sighting--4c895fc8-2800-4412-94c6-30eb7c9e7653", "sighting--2ab21f5c-74f3-491f-a2b4-bef725318fe3", "sighting--ce13951e-8cfd-44a6-a991-fb8673f53e2f", "sighting--43a3a74a-c873-4ea1-9b2f-7e4a58d60520", "sighting--9d87e090-4f8c-41a2-afcb-538168e409f4", "sighting--4f479ed0-4e8d-4aec-8da7-bbfcca08dd2f", "sighting--d03a1aac-27ed-4d9a-a26d-e17ba0a73271", "sighting--99d2500f-ba29-4225-829a-43d9a7160443", "sighting--4d6dd6f8-c45c-429d-a153-5d2b6332ea34", "sighting--7f8d8801-a26b-4460-828a-2ff7dd88f7b6", "sighting--b6e7c58e-8614-442d-8239-bf152810e5da", "sighting--5b0df3ea-3cdd-4c46-828a-8b4d87c6f9e2", "sighting--a44e4e0a-6bf6-4586-9e30-fc004406e5cd", "sighting--637a6f97-8797-4cb8-afa7-c3c757fb714d", "sighting--af6b1b2b-8251-42d6-918e-8ebaa71c36da", "sighting--a91cba22-8195-4c8c-b769-3cf5134acdb6", "sighting--ecff367b-c9f8-4f7b-b4f4-fdded1b161ea", "sighting--f1968820-0a66-402e-9f25-71f9d7e235a0", "sighting--23fe7e41-6a41-4250-ba50-07abd4ce741a", "sighting--82907a92-b40f-4cef-b13a-ef531580ecf7", "sighting--66a5ac59-fcbd-4edc-9e1a-60e904490397", "sighting--dcf91764-9b8d-44d5-b0bd-fa7c71e24447", "sighting--29842a01-8e55-48b8-9ee1-fb2d4e8160ed", "sighting--126f4d5e-0530-430c-8028-17b4c87a49a4", "sighting--1ee6471a-c607-4522-8a8d-221381b8910d", "sighting--db8ac2f4-4660-4406-ba29-85653073011f", "sighting--39919611-3b00-4fee-9ebd-6beedf4e4fa2", "sighting--0ac3333b-998a-4e34-928e-440b0521319e", "sighting--d0c7ca8b-09aa-4c92-86f1-613989268003", "sighting--c3b82662-b280-40de-a475-825b62d6922d", "sighting--efcbcdc0-917a-487e-bbf2-83564a07b06a", "sighting--e09d7b68-eb5d-4add-9226-e051bbee8975", "sighting--c6c049a5-69d8-4ffd-8dfb-7af78c8ba596", "sighting--8b392b4e-858f-48a4-94e4-2d2b3a6c3a0d", "sighting--b8037f8e-b386-46f5-877d-c9fa6bc4e02e", "sighting--f5cf8bb3-168f-4e7a-8c85-6d62fc2a1407", "sighting--6ae468a6-0bf1-4eba-9f30-734311dac802", "sighting--b9c36fe8-f9e7-4672-82dd-aacc2b121617", "sighting--bb20577b-2af3-4ec7-b39f-72528aae0e4e", "sighting--f3b21267-6063-47d1-9035-42b1046b0a12", "sighting--8cff0932-63a5-4b83-a40c-719c8366339e", "sighting--28843b6e-8c64-4134-847b-81bcb4a4d769", "sighting--a2d2ca2e-861b-415a-ae05-d8a6ec8af4b6", "sighting--a8a1d1bc-6812-438d-84ea-86d827ebe9ad", "sighting--d1d9734d-63c1-4558-a5d0-139bb8dcc3b0", "sighting--c2bb25b0-1b4a-49d7-b635-5908fe4ae8c0", "sighting--992a812f-b44c-4d50-9e80-2d74cda52cc1", "sighting--45076146-0142-4e14-a9de-36f1afdd12d5", "sighting--be3e747b-0cfc-4f22-aa2c-d452b89db439", "sighting--1457e170-37dc-4905-ad79-938601142779", "sighting--69618f26-bae8-438e-a0ff-4c9efd5c5314", "sighting--be4f802e-bbd7-4178-9a8f-5c40175c001c", "sighting--16cfbb3c-72ca-465d-adda-c6e3b2076d5d", "sighting--c883e570-1f3d-4fc5-8af7-7691b94f4cbe", "sighting--feabc33f-3f85-4c28-a976-25f0e850e56f", "sighting--331898bf-0b89-46e6-b2cc-a5de73bb32db", "sighting--59893791-c7db-4465-81de-57bbd4fb3f5c", "sighting--5cdff8a1-4175-4428-ba9c-b3f7fd691c59", "sighting--1c4c3e98-95f3-4bd4-8b58-32775440ab74", "sighting--7e416745-d5df-4cb6-bf23-cdbb723bc553", "sighting--f56f443c-961f-4134-9405-bbdc490b978e", "sighting--e4be17d5-fc3d-46a8-ab8c-d15ef90e6871", "sighting--150dbad7-784c-41ca-87c7-942e1691661c", "sighting--3906b149-70e3-420a-b7a9-e8644d3d74eb", "sighting--a1c2f267-c4b5-4b2b-bf37-73d535a42ac7", "sighting--8a4a1367-99e3-4228-ba03-cd3d9cb5cad0", "sighting--5dc06b01-b6a2-4859-93cd-72bc3a150b72", "sighting--4ee36f60-dcb5-4be9-b3c4-0b26b3a31be9", "sighting--f6bf8e98-6fe6-49b5-b8ef-3cca9011fa0f", "sighting--7c3be188-de80-419d-b87f-47f10a75cf36", "sighting--517993a9-c330-486b-9e56-0e9c6359a853", "sighting--61274ba7-e933-4105-9dc8-8f8ddfb701ed", "sighting--57983a71-49b1-4a85-a20b-835511706ea5", "sighting--1d78f760-f34e-4ffe-9325-e69f21f3eb5b", "sighting--406e5c62-9454-432b-a3f8-d8bb4c67c3ec", "sighting--44bdaa0a-5e7e-43a7-9ee3-c69e25fca9d0", "sighting--879adcbc-3d41-43ac-adc1-fd9cf1a5a2e5", "sighting--ff4cd523-fb4c-4405-aa21-59fb0a3b1bb8", "sighting--9329cef6-0159-4905-b597-f39f06407cf4", "sighting--3db29244-6677-4c31-a921-9449ef94c0b1", "sighting--30d31c23-b0e7-4e09-985d-9f49fb694e5d", "sighting--d33088ad-e081-419c-be9e-62f9671813fa", "sighting--d9eda993-8365-42e7-8e1f-95755beb25c6", "sighting--ccf2a13b-71a1-4af5-bc5c-936b366d56c5", "sighting--b30d0ecd-64bb-49a2-9d7e-55ce42ac9cf2", "sighting--c07181d7-8d67-49e2-85e9-f391a51e7cfe", "sighting--0e6ea068-1c86-4ce6-8d79-e920f90c5b61", "sighting--38545bbc-0ba5-4ea3-84ec-f69e36e4b2e0", "sighting--e7db82d0-f037-4281-a31f-19d5c56eaff9", "sighting--71dde531-b3e5-4ec6-8af0-31042b3708a0", "sighting--0eae48ac-6e0a-4fe9-91ed-35a89395457f", "sighting--71b12005-323b-4d5b-9e9b-c50ff6b35a14", "sighting--fe648b44-8e0c-4af8-83b9-05637ec7e5f8", "sighting--8d8cc0dd-6f70-4c04-907f-4162ac5ed9a3", "sighting--ca07665d-b69a-45bf-9f7b-b86cd684b45d", "sighting--72c0a7a2-7aa5-4145-91a6-5b2fc215701d", "sighting--d221cf79-a13f-4c31-b13c-110329994d4b", "sighting--dd7cc436-2965-43c3-86ae-797814c17df6", "sighting--d1c853ed-a84f-4643-9b3b-e82088ff1886", "sighting--b0f5699a-7446-41a2-ae10-16a991cbd408", "sighting--6b62a8f2-85fd-4eb4-8334-5ada378ad43a", "sighting--e0bdb335-0da1-4113-9466-91edc6101f04", "sighting--17538091-0395-441b-9d7f-c973ee6375bc", "sighting--849ac60e-d07a-45b8-8481-194406f17825", "sighting--8933961f-261a-4494-88e8-b9ba0ec39f5c", "sighting--e31479ba-fe05-4b98-84f7-7f00629391e7", "sighting--8134ab01-7275-4f73-93a5-34a9fc69b117", "sighting--29bcecbb-4c30-429b-8926-93c883002cc3", "sighting--6d9c7bd4-3bf3-4829-9e96-50ef878ea835", "sighting--76840dea-cea2-4174-b6ce-a4b7b6980378", "sighting--de8cb291-15a7-4b50-98fb-a8a8a9500c13", "sighting--267cbbac-1bf0-42ad-9cdc-c3a95ab543b7", "sighting--65c7c62b-11b3-4ddc-b721-a97efa5ad9f0", "sighting--4f32c717-7d7d-4234-be27-4b25f4a87a69", "sighting--bfa29890-f372-499f-9b5c-75c7ab9c6b13", "sighting--56caa92c-05ea-4c14-be04-988617adff33", "sighting--b7d9438d-3055-4819-9f21-6e2005dabcb2", "sighting--257ddd1c-4b98-43a2-a47a-af6f0c5417f8", "sighting--fc70285a-0281-4f22-abf8-1b533e092d30", "sighting--6d9acaf7-1fd7-4537-8aa4-3b01a0f23f9a", "sighting--d99b5098-da2e-4a15-9825-3c77078a926f", "sighting--7c3977ec-3168-4c36-aab2-b24bcafd9127", "sighting--fea37f95-0696-42ab-870b-a84a54652c7d", "sighting--b3b69880-ee5d-4ad2-9032-484c1bc14ebd", "sighting--daae9d53-7bc7-47ac-8a7d-f9280a603840", "sighting--f96b9212-eb37-4b94-863e-666b37c0ed82", "sighting--a2fa63c9-b61f-43df-815d-b3213003e361", "sighting--6f25fc63-5695-4820-8029-1c5b4e873095", "sighting--e81982dd-935c-478e-8e0d-35f59b2ffff2", "sighting--220d8378-b3ea-4213-b0ff-5c24a0156495", "sighting--3466acd6-d842-4257-b783-914db215296d", "sighting--31f79026-c9d6-429d-a848-d7c177ec6a4e", "sighting--248fe447-46fd-498b-b23d-99306ec73f2e", "sighting--9f86cb05-f9b4-45f4-b334-0981bfe23726", "sighting--5268ac6c-b010-4a3c-9324-96b14f10363c", "sighting--4c0bbf52-67ab-4ed0-9058-57fd371c733d", "sighting--5855f398-e275-48e2-a4c5-178e3c8b31b2", "sighting--191a34ff-630e-4e33-8680-a0b21f25f79c", "sighting--eb840b5b-1130-4425-9ec5-ce1735f814b9", "sighting--fef2f282-b815-4b51-bea6-85f9f3d42635", "sighting--28ef4236-f9ce-4169-85f9-f098a40fe63b", "sighting--a79f482d-32e1-4fc6-9721-63a0b4f12e07", "sighting--89e77e3d-46b2-46cc-a443-4418dd086ea5", "sighting--9ae4a5af-5476-40bc-97da-2012384375dc", "sighting--d740b060-27de-47be-a991-ac3f44e0a05c", "sighting--d09f832c-a796-448e-9ebc-e4058867dbb1", "sighting--1286205e-1240-4c45-abe9-1d2bc59aab3c", "sighting--22d9e72a-2637-4ccb-b811-574c500b73bb", "sighting--c6835d69-1cc1-4be3-92e9-d07ad5a5c89f", "sighting--d7a0999e-2ca6-48f0-8560-269331b2f038", "sighting--1f24fcfb-8978-4a96-b846-6ab4e9fea029", "sighting--a89d5844-79c3-4b4e-8c11-860375f5ad9a", "sighting--d77486d7-859d-480a-b21e-4e58501aa625", "sighting--b1a67dbb-af4f-4900-a345-37747aceffd0", "sighting--e794feb6-9704-41c7-bc5b-4da8e6189707", "sighting--3e267b84-7899-47a2-ad94-89a0600d996f", "sighting--47da2952-6b2a-4da6-a2a0-94a7581f7d6f", "sighting--1d7424be-ce80-4796-8e4f-22579f3b5311", "sighting--73648886-0bae-4545-9850-ef8981a92424", "sighting--4407735d-18be-433f-948c-4ef5f73d451d", "sighting--6d36785a-c6ce-4446-92b5-f505be3e7609", "sighting--0545b211-7a72-4bbf-8799-bdf68b09a12c", "sighting--1bef0010-c58f-4afe-b014-d573187358b4", "sighting--6cc9e7ac-f263-44d9-8aa7-f35a755e527b", "sighting--1af78e9d-5858-4f6a-a2eb-f5dcf4347495", "sighting--82588038-124c-4a28-aa3d-c4fe27473d34", "sighting--2752c40c-b7e2-446b-8158-a2adc2d2cc03", "sighting--dcea3e73-3541-4a90-8234-7bf69317c0b2", "sighting--c210da0a-9834-45d9-b88a-3ea212ecf1c8", "sighting--bf423836-6e04-42d6-8b11-aab1fdb5a4b5", "sighting--f56a408d-171d-4ffd-a412-89e574bd1020", "sighting--6fe3b11a-584a-4b8b-9afb-4714759861b7", "sighting--aa3b5298-338f-4b57-868d-53e9de6e258d", "sighting--f670614c-a0e9-4a2c-bcdd-c90171e9e9c1", "sighting--d07e5d88-9e94-4865-9e23-25ac5e85031f", "sighting--a1313eb4-d536-43f2-b48f-db0ef0b97ea8", "sighting--af84271e-ad56-437f-b29e-0453bd7d3301", "sighting--525f8ca8-6403-4e93-a0fc-5eabf460d124", "sighting--c4c3f96e-9558-4dc0-ac56-b9f9d8547366", "sighting--e6215899-b709-4a95-b254-19fd6c6e9d7a", "sighting--ed8d87c4-97c8-4fa3-ac12-548f7d8c02fd", "sighting--a5bd1283-563d-4299-b42a-cac0105ddcf0", "sighting--863cad3e-1b06-4cb1-b7f1-32dbc0e10732", "sighting--997930ee-56cb-4e96-a046-6cbe122b5780", "sighting--0446d9ae-7db2-415a-bcfc-eeeead82eea3", "sighting--f8380b41-7dba-44ea-be8f-99a8adb369b2", "sighting--54b39703-73ec-4644-a4ce-49b3e544673f", "sighting--4fd06140-507d-42c6-9ceb-465568cafb3d", "sighting--1bb6dbc6-a519-4afb-87bd-34ae05f535dc", "sighting--7afde008-282d-49fa-a5f1-4ab6ea182dd7", "sighting--ccc39a48-0ac9-42e4-982c-b067fc17ec1e", "sighting--29dbcb2b-0e67-4527-91ae-69e697e3a669", "sighting--50b31a54-87e2-409d-b7b9-8e5108e71777", "sighting--c57a1230-4f66-4266-86ef-a90fcde2263a", "sighting--d67f412c-eb67-412a-895c-49125a1329df", "sighting--02720445-f2a8-4ac1-aacf-4d4ac0b3c86f", "sighting--40d633cd-c8a9-499e-93ce-e016ff17b349", "sighting--16930c5b-2a9b-4059-ac61-f6af2a8e9d38", "sighting--eb804248-9c8b-46d7-9a7b-8f18c91985d0", "sighting--508a439f-0a10-45ea-ae4a-6432c56cec79", "sighting--780bc59f-6764-4baf-8fdd-18278623a0a5", "sighting--810b1cfb-2289-4c75-9e95-6a6c031dd5ab", "sighting--7116abed-a62c-497b-bec2-9e9559fb0ef7", "sighting--fb66c79b-88fa-4f7f-b041-386c565fb113", "sighting--00441be2-5c94-44c4-9142-c5fd1d1708a2", "sighting--24962f1f-a036-4d3b-a5b8-bfd6551ff3fb", "sighting--f677f6dc-4057-4572-aa58-0e68d641acb2", "sighting--e1b386a4-20d3-48da-a7fe-da985a1ab712", "sighting--b9db9755-f865-41f5-a9c1-28c3d0a086fb", "sighting--94d232bf-866d-466a-8d6e-02f263c5b0f3", "sighting--a93eb6b8-26bc-4a3a-a221-4681972132fb", "sighting--9d6f4ed4-3446-44ec-b076-a6340c2a377f", "sighting--be4ffab1-d731-4e53-b73d-9cc9f51b2c78", "sighting--2adac108-3a9a-4866-adba-92a2afb4a271", "sighting--e9b1367f-b32c-4146-a6f8-88880a899ae7", "sighting--20a5742d-ff31-4706-89e3-ad2fac84125a", "sighting--499f1658-b577-4c29-b175-091a6e0a7840", "sighting--0192ed11-38b8-4d96-9f4e-e6792b10a3ac", "sighting--b2358d87-4beb-489a-ae9f-9e3690586bb3", "sighting--50505467-db15-46c6-99cb-ad8d21d6a8f0", "sighting--8358aaed-5722-473d-9288-0f394b43c72a", "sighting--37815ea9-aca5-4ebd-9dfc-5e2781e1b001", "sighting--7e32ad2e-12ca-433b-8323-d9a50a4076a9", "sighting--609b005e-3dde-4a24-891d-d876d556d4b3", "sighting--bc496bd7-dab2-47e5-937b-1027ebd5b4f7", "sighting--3a844491-ce53-4a24-a2e7-bf1bec08dd7b", "sighting--51acc507-4ab2-48d5-bb15-dfcdac1efb82", "sighting--27a5d58b-77c8-45aa-ad0e-d9d3ea07c66d", "sighting--397eec62-b604-4f2b-93d7-c78ffbc76fb4", "sighting--30898402-cb6e-498b-b5af-3c38e0a1f654", "sighting--74ca12dc-f18c-43f4-9e01-261b7e2604dc", "sighting--b3fcfc89-5b05-46fb-9945-9a89d0b9d152", "sighting--88da440e-6ab9-498c-b61f-470974bc7972", "sighting--78124aff-a3b0-427a-b76f-cbf615571b2b", "sighting--f06131e1-9540-4527-9701-728e707fe345", "sighting--206e1be5-a555-43ba-8bd5-0d0f2dada9b7", "sighting--77dfc29c-b578-4274-b962-5bf5568a980f", "sighting--768e7b68-0bb3-4000-8172-e36ea75e0a9a", "sighting--15b6e4f6-1979-464c-a481-be22db73b9ae", "sighting--62646c26-fcbd-4ba6-8bdc-5d196ffd376c", "sighting--80e3f8a8-af1f-43da-b779-fe1c66b6c2c8", "sighting--6c0ac32a-e474-4ecf-ada0-514cfbf8663a", "sighting--4f00b5c6-29ed-4b86-8ce0-8cde1fdc34ce", "sighting--d869a472-a21e-448c-b2e3-c9abeadc24ac", "sighting--72d45ab3-00b2-4057-bfaf-61b4b642ad06", "sighting--bcec3e0b-89af-4229-bacf-c05ecfbe1963", "sighting--b1e342a0-78de-408e-bd79-71b304258080", "sighting--77c5d5b7-9fc6-4822-ab8d-c9c7b9e0abbc", "sighting--44d06bc1-ab83-4ac8-b3bf-37f2f625b2af", "sighting--5f9a9cdb-2f68-4b82-9fab-367efb45cf20", "sighting--e2656202-a910-48cb-8b85-d384d53de647", "sighting--46a33b04-0c92-4982-871f-8b73cd120342", "sighting--7455845e-ff56-4787-9881-b848d2ef9d97", "sighting--9e9d1c1c-9e1e-4877-9e32-5d9c06a56b7d", "sighting--9671fc48-efb9-4248-8d1a-3c2c13dbb173", "sighting--5d38670b-3011-4330-bf98-b9e546d00d61", "sighting--217a02dc-a670-436f-8d74-1bf963893fb8", "sighting--3ccaf8d9-7cf3-430c-a088-dcc5430bbfc1", "sighting--85e6766e-7cff-4e2d-a08c-3be2d0df5951", "sighting--7679220f-b1b6-4a09-ba89-5f97f7260472", "sighting--c119e474-bb1a-4d3a-9766-e6f088f7c654", "sighting--397c91dc-1847-48e7-91eb-e1b1a22af95b", "sighting--2cd6cec0-09cd-4a18-8b5c-a4b7f90c8c56", "sighting--f160fc88-c8f3-4c94-81e7-5d6bacb87285", "sighting--12374f75-3bd8-4dff-96fa-e499d583813a", "sighting--7372bd9c-8223-42ec-9674-a9b0eff3badd", "sighting--d875e587-6be2-4006-9363-e369f8dc16a7", "sighting--be763059-f354-4b8b-91e6-faf3dbaaa298", "sighting--37497c3e-48c0-47d3-bfbf-924e152f9989", "sighting--d2045c6b-2307-4d6e-8ced-20f265415232", "sighting--97cd5051-0568-49b7-a153-823fd342f2cf", "sighting--ebce0953-21db-407e-b47f-e74c404d7a3a", "sighting--5e536e5a-02c6-446f-8c79-526ed94cdd0d", "sighting--a6db7ead-972c-4626-b8c1-34047c2c2585", "sighting--54c4fe88-ab31-4e57-8aba-e655c1d542c4", "sighting--275f851a-2366-408e-84d3-11062da3f217", "sighting--98f96a73-fa7e-4c9b-a7bf-716c8d349a15", "sighting--cde9872d-8740-4101-a658-cddb18b3ff46", "sighting--aa311395-0c8b-4bac-9749-f0736b8fd7a9", "sighting--e5e47b5f-1b07-48c3-80cc-3f5c258ddb5c", "sighting--ef6f8214-2b3e-4c36-854e-6ef2991a65ca", "sighting--61d842b0-8971-4f29-bf9d-b7024bc9f59f", "sighting--6a35fd60-dd50-4de4-b488-ce7f68e510ca", "sighting--8c5c3644-a96b-4fac-8668-bdd36a94b4b6", "sighting--ad92327d-3672-4fb2-8794-41c3f02560b4", "sighting--1dd52504-64b0-4654-8c01-07794cd99efb", "sighting--cfba6f86-e12b-465e-b4d9-e443414c1464", "sighting--e1447415-63ec-49a3-b085-2bf9448cef7e", "sighting--1986d09d-a85b-4d39-870b-02777766f2ef", "sighting--5fec875a-3dd8-471b-a0a4-1ce78132346a", "sighting--f71f8fb1-5086-428f-80b3-6037f6488de9", "sighting--6aab5ae8-3232-4df7-94f2-7d036e7966f7", "sighting--1144fac5-cf23-4966-af0d-1ec8695219d0", "sighting--45517774-a479-4d54-845b-2902abe01c6c", "sighting--e11df544-5183-4b83-943d-f54a62df3ccb", "sighting--52ec43bd-cfe1-43ca-a748-4e42f2a20e3c", "sighting--51e5fa86-ab98-445d-bf2d-5bd3d3044635", "sighting--2c4531cd-921e-43e5-93bf-b02d56dc314b", "sighting--f725aff4-1e97-477f-94a4-f5615dfa86b3", "sighting--87287037-4659-4228-b5a9-a1b8f94a491b", "sighting--e3c31a80-c8a5-4b9f-8ccd-54356a2d368c", "sighting--0a826506-5d57-4109-ba53-971089d3a116", "sighting--11a26c32-95e2-45c7-991b-092dcde47d6d", "sighting--eda9a617-4a5b-4d22-a0b7-e67619f3e8ab", "sighting--93cff030-cee8-413d-a1fa-4034e58b72bc", "sighting--94111d4b-0bf3-4b13-b3d7-cefaa6f8aba5", "sighting--3a216a24-9526-43e8-8172-59119117b62a", "sighting--9b593471-958e-46ef-bc20-c2261896afc4", "sighting--670c708d-b109-46d2-9593-f86d15539789", "sighting--2946ebcc-9c36-43ef-88dc-4d5162029c1c", "sighting--603607e4-7d70-4555-95f5-d8a2573bab5c", "sighting--a640bd8e-7b83-45ba-90b9-a8b7c2072dad", "sighting--47d6ad96-2a33-4c70-8995-1f12c5f9778d", "sighting--4ffd6acd-5078-419e-88f8-aac3d3c8c984", "sighting--b0af4c29-57f1-4082-92ea-4912e7feef76", "sighting--8adb4d76-6433-46dc-a637-d9ff1647fbf8", "sighting--74cb28c0-6985-4b12-9183-46e92b0c9d7c", "sighting--ca07afed-6c5e-4331-aff4-df677b39afdf", "sighting--1d91a1db-c89d-4e56-848d-4f0524753311", "sighting--fab3e92d-57ca-4930-8cbe-a5c5b23a14cb", "sighting--dfe2040c-6a08-4e6f-bbd8-e1b7655ef1fd", "sighting--b4fa1c7b-d883-4c47-8612-118439212ce0", "sighting--616d0012-ece7-4db3-a5e0-baff55e5c9dc", "sighting--893f05be-5792-43f5-94b2-8f8b00a78850", "sighting--5a6102a8-64b8-4e9d-babb-0aaa1eec5912", "sighting--32fd42ba-b559-4cd0-a301-2e39fb936f84", "sighting--0310f190-4b8d-482f-8700-5968b7296360", "sighting--d6ed57ae-fed9-45f7-adf0-7068045673fc", "sighting--ae34b680-c032-40c5-b35e-e693b9648a6e", "sighting--d490bd9c-91b8-43d2-9c4c-56f7d7666b49", "sighting--ee86d14e-e01c-4f5c-b23a-db9042c14764", "sighting--a5c54e81-5d9f-4483-b3c6-3699d08f4c27", "sighting--65bfe205-873e-46c5-bd5f-ad3586b1db62", "sighting--33db1271-539c-471b-8cf9-e32d49def7e1", "sighting--fc3f54b4-6f46-44cb-a50c-db0d134faefc", "sighting--b1f8fa65-2aae-4d10-83ca-060f80a9ec12", "sighting--5e5e8407-1493-4f1b-bb64-cc4629e3a0b1", "sighting--292b739a-dd6c-4c94-8ea7-523aba9aa193", "sighting--dbdd2962-3022-4763-a293-0a5a678da382", "sighting--6fb87e79-a8c5-4727-9459-e36d43604a3e", "sighting--9d44df43-a90b-4158-9c28-b6666d9ed7c5", "sighting--d268006c-6766-4538-a2c7-b6ddc6b51b18", "sighting--c4139d83-ec89-498a-95e2-779b2ba54043", "sighting--5564eebb-6157-4aba-828d-3a63d055e732", "sighting--2c7d4af0-6c1e-4243-a930-d4fca392bdf5", "sighting--4513b2df-670c-4c09-b3ee-9f9b8f2f2504", "sighting--6d20faf6-718f-4bd0-8a4a-76d08e66f5fd", "sighting--9a9bea52-130c-4354-b2f9-9fb96f7e78e9", "sighting--439158cb-e381-4da8-8c57-02b69e0cac3e", "sighting--d89f380f-8375-43a7-9ccb-b98059bb95f7", "sighting--e42413e6-03f6-4c6c-8a81-c0a73f87c033", "sighting--c0c65a10-eff2-4f01-8039-c659930de805", "sighting--4f41ee6f-c408-4a11-89df-4d85052ba830", "sighting--f7729839-509c-4d03-970a-b83bc22afac2", "sighting--a2987e0d-acc6-4783-8ce0-32bf759442c2", "sighting--ce2906fe-77fa-4b8a-b541-7ae6ebaea4a0", "sighting--63046b98-4a78-40ea-ab59-47d6bbbf4dff", "sighting--23577ff7-50ca-4f9f-b632-5247cb873e65", "sighting--66061349-1f52-4ac0-8daa-63b930fe69ac", "sighting--9968d1b6-e243-469b-96fc-dce52886fb8f", "sighting--f5a39ffd-9b8e-42b1-9fec-7289c7d84c26", "sighting--a76730fe-ac2b-4d69-88d6-a7bf0565b5d3", "sighting--b219e3da-5d3a-488f-a5f0-1d2044ae59be", "sighting--ccb92def-8f89-42b1-9ac1-9b0fa6c574f9", "sighting--5a51006c-a84f-4b03-a612-92f87268195d", "sighting--e9dd6d55-1452-417f-8f2a-5288142cc4b8", "sighting--71bd4a5d-e3c9-46c5-86d5-a873ceccdd1d", "sighting--55b27330-287a-4427-ac7f-159c0c2d3c81", "sighting--88ee9bf0-695b-4966-a28a-b4fe33abbb99", "sighting--fc4bf3a7-41ff-4d76-b209-742f6c66ee74", "sighting--0532668d-0fe3-4d6f-aa5e-98985a25bcc1", "sighting--62dd1352-d46e-4e55-90b7-d7c5889bb1ad", "sighting--0edb5c1a-4535-406d-a22b-c8b4d05fd484", "sighting--28ad5e12-821b-41de-8730-f78e2096a1d5", "sighting--717530ef-31cd-496b-aa97-a2be264c498e", "sighting--4edf38f5-cc52-48bd-8fca-2b9171709a24", "sighting--7da22670-7269-4038-bf24-8b163c482693", "sighting--cbd0f186-b93e-4154-9007-2a18d233ce70", "sighting--71074cba-05f9-4920-8d12-6a62438c83e5", "sighting--633d0f4f-658f-44c7-acf9-b02fcd111b76", "sighting--363a488c-4941-4d43-ac5a-5537c2db40a7", "sighting--5ff08211-0842-4583-83f9-6057e299122d", "sighting--5d0e97bc-5f5d-419b-83e4-85924c43b748", "sighting--15816149-ec27-4990-b81b-d43bfdffa7fe", "sighting--03cd543d-b981-4191-a80c-9ac3134c4a96", "sighting--a24ed795-2647-412d-bd68-d7022a16e429", "sighting--7310ec9f-6abe-438f-9532-3014d3a07ddb", "sighting--609d48f0-1a15-452d-90db-7335a8c4df7c", "sighting--c713f23f-7cac-4752-9858-2e868b98a723", "sighting--99356114-c870-4fa4-aa3f-a42c0d036b84", "sighting--51a067e3-8fc3-457d-b58d-4d631d2d1f1b", "sighting--35248f59-5813-40bd-b0e8-8912c229c6d3", "sighting--3ff384df-65d2-43c9-9337-6fe40dd54d39", "sighting--85c48e9a-a3ea-4c13-a1da-d95b82852b1d", "sighting--fdae2c39-9502-4066-8382-0d7109082a78", "sighting--0533d75c-f989-4a00-81e6-ea3f97742b27", "sighting--3b35d4d3-b33b-42c8-83fb-2ee1bb0c538c", "sighting--5e93d2ad-3cea-420e-ba8f-9dba5a8b766b", "sighting--e06d4985-51ea-417a-b25e-81529f83bf00", "sighting--202f529e-c990-40ed-9453-bd047ed87265", "sighting--a75ba80e-8804-4601-bf19-7abf5c522209", "sighting--d3d18555-ddfb-486d-adfc-c8db3bc4a4ad", "sighting--28d27b58-1cb4-4041-b3df-1b13beaf8c7f", "sighting--738c741e-e3ab-4f26-abd6-3c6d005cf4a7", "sighting--3fbe4ef9-ceae-49cd-97e5-0fe0e5c01fd2", "sighting--52e4761a-3b49-4932-a0f0-d917367a6250", "sighting--0aebe887-19e9-4425-bbe9-43b160d35555", "sighting--c9cadcd2-9787-4d27-8b10-52dba6e061ac", "sighting--2142496e-f8fc-4b9a-b7fb-68daf0920a07", "sighting--a4bf4aa0-32c5-46e9-8844-d8b8d0e8d623", "sighting--e7e0a2f3-caf5-4f22-97f5-7cb9ee7e91ee", "sighting--791c7ae5-9591-474c-bdd7-8d056b9cfea3", "sighting--99fbfdec-c358-4d74-ba52-b1a4579d0245", "sighting--d952e4a4-8d07-481f-9963-591f73ade042", "sighting--d8f8c602-8f6e-4ca7-ae71-e509c90b3c1b", "sighting--c2e98a1c-bac9-4119-8875-43501f772571", "sighting--c6460d43-188d-4505-ae46-d40c42253a58", "sighting--97ef9f39-2a0b-46e5-8dcd-11b3f0112116", "sighting--1896245f-ac9d-4db5-8b32-3ec3376eeb33", "sighting--a2d1d7a6-c15a-472c-b589-b6d3aa5d8bac", "sighting--87607c47-62ac-4b7a-8fe2-a86d1219d1de", "sighting--cc60544b-3b3b-48b8-854b-f5b01e5977e0", "sighting--945f88ac-2506-4471-abc5-f00a690be81a", "sighting--9f15296f-bc29-4cf7-92fb-0ca1f47c9c60", "sighting--2bc60acf-29c3-4097-852e-4f40a30e5eb2", "sighting--c75f5a14-ccef-4217-8ab5-409989e846bc", "sighting--33a7cb29-5481-47c1-b2a9-b706fd45cf96", "sighting--3d958ebb-8382-4a79-a616-2d093c11c8d4", "sighting--13acee27-56a4-4cdb-8717-af51106ca466", "sighting--7871bb03-e98c-4b93-b2e0-8cf8e2a03322", "sighting--bb52fac0-9dc7-4488-9ca7-373ce3fb5309", "sighting--f4386635-0666-45ca-9734-bb0d806decbb", "sighting--4a04319d-7f27-48b6-a710-5bbcff0ee94a", "sighting--25181c87-1a22-456f-b80f-0373e47106af", "sighting--2c5eeae1-290d-46b8-b929-196e3e7c54ac", "sighting--5e341a1b-7fb6-4471-80b5-63b0361894df", "sighting--484bded9-9810-4e0e-9168-f942da23fe7b", "sighting--e57745a4-bbc6-4977-bac0-93fa29a57b1e", "sighting--3c253554-d613-4a4b-9414-b11f26b6120f", "sighting--76ed9f09-a814-4db9-ad27-ab21e3a28dee", "sighting--4df0ec7c-db7d-447c-9258-4988ed2432c3", "sighting--1277de17-db7c-4654-a528-c3b1ecc047a8", "sighting--f0eae035-f61b-49df-87cf-f3d4f7daf768", "sighting--97db93cb-4bd6-443b-b912-ffcdb0ca5401", "sighting--3b77adfc-cbd8-4822-8145-067e10ffe053", "sighting--0c338742-46aa-4109-8b41-21214bc61b81", "sighting--41b9f013-d769-4615-8a1d-e283380aee50", "sighting--c8b0c280-0172-4ce4-b7a8-d4fb449024e5", "sighting--b25f901e-9e9b-4943-ac5c-8fee9a0ac81d", "sighting--1a4609cb-6a11-40d4-8bfa-97527fa6e455", "sighting--964214c7-5a96-436c-96fa-bbea76080dba", "sighting--435d262c-4f46-47aa-a526-7dbd544099a2", "sighting--45933129-830a-43dd-bc43-cd6d02d71d1b", "sighting--0d2349af-576b-43cc-b320-8b26f371db94", "sighting--5893e165-3298-4b56-934c-b8e21eb43bcd", "sighting--6f865b0b-5abe-4299-a43b-348285d7948a", "sighting--50aa7dbf-0876-4307-a001-26f2d62a2d34", "sighting--af328cb2-0094-4c9a-b7e3-b2988b51c6ce", "sighting--d98304ad-f253-4fb3-bdba-38d41f2528a8", "sighting--b90d3daf-d1b5-452e-8220-afe629d74f74", "sighting--ee1f065a-d554-4746-86a1-735ffbcdfcd0", "sighting--47bbee99-1092-4c8c-86a4-b806eb251abb", "sighting--a9a9dc0c-2771-43b5-9697-5b5d4f7a019d", "sighting--c727bb7c-8a71-4811-bfbc-f7dfb709bd59", "sighting--3b447e40-1fc3-4710-a000-09f76c5cb362", "sighting--597c00b2-7efb-4b9a-9e9a-6c1b761d074b", "sighting--db4862cc-4ee5-4bf8-90c5-0cd7f2e45fef", "sighting--dc0c2ed6-e66c-4314-ba6a-39e0394ccea8", "sighting--48414037-6e94-42fa-90ca-6bf3ed30150a", "sighting--f6a005cf-8d2e-465a-ab84-20e3745b3799", "sighting--3fe8a157-2461-48b2-a69f-c092bcdbbe40", "sighting--1b0de642-ca5e-4f43-8dff-3116119e27ac", "sighting--c6afd847-3aeb-4300-970e-c962e5bca6e5", "sighting--477881de-52c4-476c-bc68-acab8d0e328b", "sighting--b21af3b3-1d75-428d-88d0-28ed3b50c0d5", "sighting--7cd57297-0114-45cc-8765-87b5c04040a9", "sighting--b3ff9cfa-9d07-4f31-a5c7-c4e60926accd", "sighting--4309521e-838e-4e85-a0a0-6e6054799f23", "sighting--2502b8dd-db18-4f46-be39-15adc5e4d9a5", "sighting--c1cc8ad4-67aa-4d7a-8013-55aaca5f66a4", "sighting--c91797f0-6237-4690-a1c9-b58feccfa183", "sighting--9e54edb8-7c5a-4ff0-8545-8007caae0451", "sighting--5e217ff0-16cc-4c65-a665-487ffe49db50", "sighting--fc5a56e6-8bd4-4151-aa0a-363a40d29f25", "sighting--17f82ebe-5a84-4909-b672-a6fd2e7b7275", "sighting--bca71f0b-fcfe-4d57-8b57-e19fd6b4eb66", "sighting--013f8d43-9d21-40e8-b851-64d7a04da080", "sighting--67d9b0ea-e066-4346-b44b-a6539fe004d4", "sighting--34949a20-63c6-4466-87aa-8220d89abf4a", "sighting--6001e7ea-8b2e-4c71-b599-eb576d599043", "sighting--41f6a328-2f0a-4c59-b11f-4a04148d254b", "sighting--4ef6396f-f86b-499d-acca-8451c3ed6ef5", "sighting--6b79e21e-083d-4912-b469-058364d1349a", "sighting--fc033869-0833-4c75-99d9-4351b20bd80e", "sighting--e2bcd02e-080a-4a6a-a5c6-783bb2dd7a27", "sighting--684afe64-1bfc-4e12-a6a2-45b066b16180", "sighting--4595da8c-8cf9-411d-ab8c-e9b5378bd0b4", "sighting--8585c1ab-d174-4df5-b3bd-dbeddf6e4777", "sighting--8db79b1a-d9fa-4ad4-929e-47da740f838c", "sighting--026ac58a-ca98-4163-b93d-4491c5df72e0", "sighting--d6a806d6-352e-474b-8ce9-215844ade5df", "sighting--58eac0b6-1073-4415-b74e-02c7d28b4687", "sighting--649bb2c6-d902-4f7a-b31d-a80e1cc288f3", "sighting--f8871766-24d9-4f2c-bc32-0f01150ab780", "sighting--57493936-47c0-437d-a788-9719e7f13744", "sighting--41949b51-5048-4528-bf52-992bfc1f845f", "sighting--903ca769-563c-4776-b439-325117705980", "sighting--bc5efc39-be35-409b-a49e-022c35239015", "sighting--c6ce2ec5-75cc-4a66-96ff-aa2538975133", "sighting--8a025533-97f0-4df6-ae6f-a68b3cdf6f90", "sighting--871a54ae-ca5e-4999-838d-51524fa21a67", "sighting--1577bc76-f03a-4531-9960-bd0fd2d6b434", "sighting--4dadd2b3-71da-4a6c-8a91-bafbd5b57773", "sighting--9a68b672-a20d-4ed0-8e47-f9a9b31ff47e", "sighting--32683257-b001-400f-b8ae-729f0518fd4c", "sighting--8aed81e3-5c0a-4353-9a89-d86ac1ae1220", "sighting--42933eb3-072d-40af-af6c-1370f84974c9", "sighting--9e90011a-f11e-4e9d-b225-8e0d05b5b472", "sighting--13b2ca69-7c5c-4f92-9301-5c9968148e00", "sighting--d546c359-3696-4c45-b25d-39bb866745fc", "sighting--505780c5-6b78-4d66-80de-734f65870beb", "sighting--01bc11ee-666a-4270-9194-11d23114b54c", "sighting--e682bcd6-b9e9-46a9-a952-7d3932931465", "sighting--55a8e067-d33d-4786-b636-7b483a7786bc", "sighting--53acb70c-7ad9-416d-90c0-b002059eb9f1", "sighting--af2677a3-bcc2-4c3c-b086-5fdf795024de", "sighting--aa55a22f-657a-46ea-bbb7-f96c6cc4c29d", "sighting--9a4fd612-af8a-4ae0-8fa9-7f962443d44f", "sighting--7e7ad18a-04cf-4427-b0ac-dd38022a12b9", "sighting--4a929215-e680-43db-874a-58af2a05dd16", "sighting--55c4bda7-c560-447b-a5d2-09e7717c6aae", "sighting--5593ae5e-f1b5-46de-b4ea-0fbba9394ce6", "sighting--c57516b8-5f39-4e8f-a0bc-d4f51e3260af", "sighting--73eb132b-6aa9-4b68-b8b0-10e6cbe683d6", "sighting--e7dab1dc-d355-4060-8b99-af994328ec3d", "sighting--0100e0eb-215a-402d-83f6-b6311e779211", "sighting--48e7a102-72ff-4229-9192-5ee76d8e235c", "sighting--331a65e3-4966-4b99-9f32-88326213fb3c", "sighting--4d881e1a-c3ab-47f5-be30-89d6444ff685", "sighting--4de7e971-3b4d-4950-8b95-9888cc3e96e3", "sighting--52815ff4-70a3-406d-bcd9-426cee43066e", "sighting--df2ef378-0c25-480e-8903-77f8d464459c", "sighting--8f8e1842-0392-425e-90df-2d93c620578c", "sighting--97784109-c9ab-4504-8436-9483044bdeec", "sighting--39a5032a-162d-4f2f-9130-2d15c1441de5", "sighting--c8d08e45-50af-4aa4-beff-78ef070f60ae", "sighting--a78b7bb6-602b-468a-badc-9b0115fae4cb", "sighting--8d178c67-da86-4da6-8768-5fd0af56a66f", "sighting--83553c34-c461-4473-a6c9-4609074bc6bc", "sighting--47c48a4f-2524-4e0f-a545-e7a2912c9827", "sighting--51f6db0f-0b81-426b-a4d7-070a7816412a", "sighting--ac7dcea5-f5a1-4b0d-92ee-89abc5016f39", "sighting--ef05d021-ec17-4f0a-992f-fb21f6bae8b0", "sighting--6523b5d6-df25-489c-9376-3c13d6af2f5e", "sighting--e804736d-7f33-4829-bebe-33a7f5ac35c5", "sighting--9cefe3ac-f5f8-4d45-8dc7-62768482b166", "sighting--e2ded91d-a8b4-42a0-8ab4-4fea331cc1d0", "sighting--8d35a095-f656-4798-9d0b-fc5d4cdabe33", "sighting--037b1187-9cdc-4a2f-803c-60905c3a2967", "sighting--227ba754-9210-4e79-a49b-2d96153b3e48", "sighting--8b6480d4-4e17-42cd-aa93-4641a8a97645", "sighting--ca359205-b948-43ab-bdc3-8cbd7caa931c", "sighting--50858b10-06ee-40a7-abad-711d43d9ad81", "sighting--ddac3f72-d136-45fe-9efb-449aaf8910ca", "sighting--0bd19ecc-cfc7-4ab0-8d37-ca9c3fd24e1e", "sighting--444cb09b-1997-43e7-9866-c37d8a2dfcea", "sighting--d83bb53e-145f-42cc-a539-be626685618d", "sighting--38ebca1b-a315-424d-8c19-2e0f74428546", "sighting--d5472d6b-fc50-4b20-b481-112272d615f0", "sighting--09582e29-1c5f-42ae-9a62-be1c8e11b192", "sighting--603ff334-33be-4bbc-bbb8-21a5397bdbae", "sighting--6e3dc86c-1d40-4c7c-8372-b8c1c8c35057", "sighting--10087934-8341-4e4e-9353-6cda27a3b1e1", "sighting--3379c626-a4b5-45ab-a5d3-b4a3043e52cb", "sighting--497b9a4d-f483-42c1-b511-10018fb4cce3", "sighting--a159749e-b518-4be1-a0e9-5aa2ca74e62e", "sighting--63e71753-0ef3-4f18-b9e1-69a3c6cff0e0", "sighting--9d79f9d7-da23-4f52-a7be-20c16349bb9b", "sighting--f302767c-c00f-4cbe-8eb7-c124656d2991", "sighting--41675ffe-2d8c-4733-9f87-9aabbcc9998a", "sighting--4d958314-0167-4fcf-9bfe-7c4ae5baf7f4", "sighting--fddfb046-9896-460e-b3e2-e7a23d7f8d93", "sighting--783f6fa4-f3b6-4ddb-9699-da13530c23f9", "sighting--3682c3b8-d1eb-4296-a90f-fc4191113510", "sighting--6df33105-5abc-4b1b-a3a7-ff7cd6778255", "sighting--362c1cef-0d13-40a1-ba01-0716ba026e90", "sighting--08447075-4e74-43a8-bed0-b70b70485cdc", "sighting--e0de7329-51ca-4a10-9c61-a2c1252e6026", "sighting--07d23cb1-f1d3-4478-b0f8-c201585ac69a", "sighting--f18212b2-d0e5-410f-b225-df65230de7ba", "sighting--5728ef57-de86-445b-a0b0-928e16279158", "sighting--7419527e-42d8-4839-bf07-19bc3c171fb1", "sighting--7e209bb5-e4ad-4fb1-bd3c-00354f93ee31", "sighting--b6cfc196-ce9c-44e1-8ce7-619dd3031162", "sighting--5a18d4e4-682a-47b0-9b39-ca42d774f429", "sighting--6db4f401-d09f-4cd3-b3c4-861a511476bd", "sighting--7946e061-85bb-4db9-a0ce-b3b0f0d74c97", "sighting--3ef574a8-038a-48ae-9509-100948612992", "sighting--7cac0068-4e36-45d3-9b17-c3eb15e0371e", "sighting--5c78075c-4683-48ce-86bc-0fceb24d6f96", "sighting--2ec5ad78-aa5e-4291-9115-f080f9a7a174", "sighting--061a1077-142a-4e8a-8845-d532991567e8", "sighting--00f08d8f-bec4-4238-93d6-a63967fcca1c", "sighting--c9245479-7141-4f65-bde8-5c2ed4fc64d9", "sighting--2cf1439f-48e8-4b04-81c5-9c7d237f32b3", "sighting--d552ec15-2c54-4083-9afe-7e4e533e0089", "sighting--ec1c9326-2c94-4445-b584-86d0bae82191", "sighting--4d7a9b2f-a19a-4de8-9891-b3885ea421d7", "sighting--38e8c9ad-fc2e-4f0d-be9b-6a7ab701a3d6", "sighting--35a55d9d-74bf-4cb6-a518-c0d9eeb28dae", "sighting--76870664-131e-4c3b-b948-91ab8192cd1c", "sighting--cda2df89-43c2-4090-b15a-3656968db4b6", "sighting--98bd65af-dc88-45d1-a315-28bb3837d999", "sighting--7390a3b8-43af-4555-a83a-f3b695c69be2", "sighting--677b1ed9-e178-4bad-b2e7-78f8ff2ea445", "sighting--73176e02-337d-4b08-84dc-dd60a20713d1", "sighting--3e0f4150-38f1-411e-b993-b15a4667a889", "sighting--2b8247a1-9307-455d-b400-e9f61efd0a5d", "sighting--798d0cf2-6341-408a-8e2a-8d8645107ca0", "sighting--4471aadc-d8fb-4a02-b91e-66805ddd858a", "sighting--dea6445b-1394-4435-84f4-abbfb105e087", "sighting--47132792-f774-4ad5-8881-685dfda10d01", "sighting--8433b7fa-742c-4e6a-90e8-8b77746e2a3b", "sighting--d9224fe7-59c8-4456-9e0a-59f7c4744a85", "sighting--ede55bea-85e0-49bd-a618-95860f669541", "sighting--90f67fe6-3d85-4648-8635-e7975ce553fb", "sighting--98ae7014-d8ca-4de9-b381-572d0032920f", "sighting--4e21ba88-3618-4a35-bf16-33d8e8fc3119", "sighting--3b522864-6e6a-42fc-970e-8a45d6ff0867", "sighting--6a152482-0658-426a-a5fb-c43cf462e84d", "sighting--8b1305af-2f41-48a5-bd6e-3162ad6c3d77", "sighting--ababca7c-1f9f-4111-87d8-a5f47d4837aa", "sighting--3183f3a5-39c8-47ed-aa04-ea674ac0f10e", "sighting--6ad09b17-d79f-4599-b1c4-f075c9bf4cc5", "sighting--e237017e-190b-4f92-8f73-faecee9e0467", "sighting--c52b5c9d-22e1-49c0-b276-fffdd4e38cf0", "sighting--4464d06b-ee47-42b4-b5c3-5160bbde4d07", "sighting--37d6c3c9-9dcd-453f-978a-4a94efe8aba1", "sighting--a4a7f74a-e72e-4d29-b0ea-1a21d7732b7d", "sighting--4540251e-4524-41d5-84ed-76df70a68214", "sighting--ed382205-00d5-4b34-8d44-35c0f23110dc", "sighting--01340c86-6128-4e23-a33f-eac03775adcc", "sighting--f6d3abcf-0bc5-4ad5-9194-ecf0362ed614", "sighting--6f955796-bd86-45d3-9e6b-63e4c42fcbfc", "sighting--0276ebfa-0e31-42f2-b107-dd6cf37dff14", "sighting--4ef7f791-0462-416f-a0e9-cfbca1b511cc", "sighting--722c1d6f-60e0-4bc5-b3a4-421e680919e8", "sighting--b158d100-7b85-4c66-8230-9ef1d1a9516a", "sighting--e0bf5eb2-70c6-4f77-8e9a-c0c47a1f467c", "sighting--6883d68c-ca73-4dcc-b57c-98602e952e3e", "sighting--4dc419b9-a27a-4f3f-b899-2b0c72149219", "sighting--59e1e9e6-d032-4728-9084-e1d9a364fe7b", "sighting--a1515a0d-74c0-4fb0-bae9-44f6cb1b4345", "sighting--de21d566-ddc8-4706-9571-16af1825485c", "sighting--4d3b85c7-ba9c-4d81-8313-5addb7d3fd16", "sighting--026dc650-397d-4db6-a50d-f78b4733f767", "sighting--dfbe8739-03a3-4b2c-aad1-57ce1f236d03", "sighting--7099ac7d-a4f7-4ef6-9e71-e10cfd2f5e72", "sighting--0a1a3e0a-c32e-4454-a512-de0f1451b6ae", "sighting--55e244a1-a0b2-4fd2-80d1-3a2fa8090c88", "sighting--7c2c1eaa-dd32-4157-afda-b255dad23b5f", "sighting--e8a89dc9-b01e-41d4-aa3c-205a453d189b", "sighting--fad21cbb-f03f-4c89-8148-d306eedc80ba", "sighting--dc638e92-6b86-4f3b-a673-b7e6d10ab4eb", "sighting--3818bd03-9854-4db3-807b-035b471a03b5", "sighting--1c045b5a-744f-4321-b737-f16f6300c0a5", "sighting--4bcaa2c0-f44e-4819-b85d-24ed3f1a4831", "sighting--a8ecc5b1-a244-4802-8e6e-dd04ce47bebe", "sighting--ea598ac6-4574-486c-8749-df8d56267442", "sighting--ba983fa2-5685-4b25-a8cc-065ed43fc9ae", "sighting--625f9278-44c4-49b3-b2e4-608b25e2b6bc", "sighting--229792a9-535b-438c-8392-669d03161ebd", "sighting--41b432c1-3cd1-4caa-b3a0-8c7512e5a22f", "sighting--00337153-e630-419a-907f-822642b2c888", "sighting--0d9ed4e6-d5c5-4260-8b0b-76c338e2b5e1", "sighting--d380e856-1854-4c68-a36e-0283ca165e42", "sighting--8dae0a3c-e01c-466d-85c0-c260930e781d", "sighting--4e55c49e-ce98-4a8d-ac4d-f969c375d065", "sighting--9be52c0b-3c2b-4c0c-b573-12670d5e1f9d", "sighting--3dd135fb-c0fe-45d9-9490-7b7469efa9be", "sighting--efd3b21a-8d11-47d9-9d33-fde0cd812567", "sighting--4d98944d-b922-43b7-a3dd-e2ad1e0fc98a", "sighting--0e467e7a-62c3-4759-bb17-c8caa29c00fb", "sighting--c9f36158-f641-4731-bb69-c5ddacda4375", "sighting--9ab4ba4f-4ba5-4785-9524-9c53c4855a76", "sighting--e14c5be5-d908-4277-a6f5-e8d88efac752", "sighting--bb78c150-5095-4980-b16f-a98003eae867", "sighting--9244e7b5-73c1-4e6e-b088-a3b4c26fe90c", "sighting--924f4675-b661-4b69-9dcb-dbe1e24eac36", "sighting--937ca266-6cf3-4bb4-bd8e-124bbe2254f9", "sighting--49143aaf-e4c7-4504-afe2-a692bcd85890", "sighting--c87fd63b-f706-4553-94ec-8c9e82e7b2b9", "sighting--8eed6fbf-1946-4f10-a002-3515b12a77fd", "sighting--2c4048a1-ec08-44c4-a0fd-21b1c138da83", "sighting--6b501063-755a-4d6a-a708-97bd4b168a2d", "sighting--248f59c2-6dca-4fb3-afff-05138ddccf11", "sighting--5bfe80a0-bfc7-4979-a62d-ec2f6796eb4a", "sighting--6f8d05be-ba20-4ebb-acf8-3800d6788db8", "sighting--43bdba57-af91-4397-940f-053c3986b251", "sighting--347904b0-c1ce-4e39-8e2f-661bfe788201", "sighting--dead5613-f40d-463d-891b-41b36d428b38", "sighting--b2cd3bb0-a5f0-46a9-a82e-a01f1cba5d5c", "sighting--89b9f5e3-be98-4ac4-ad66-ee3ad4ca7c25", "sighting--1e4bd679-9ce9-4de1-9098-bf79ad257189", "sighting--46d09810-6154-46a2-8c7c-45634f47f5ed", "sighting--4a18a3a6-0ce5-4176-9b3a-ee8bab78cb1c", "sighting--02905869-bd30-4f22-8c9e-0a87c87e25f3", "sighting--85e86f0d-bc1f-4aee-a52e-cc40f4257d74", "sighting--e803c22d-5679-46f2-b415-c33fdcdccba8", "sighting--ab8d509e-85eb-4902-96ab-1fb302508a64", "sighting--697713cd-cc34-4805-92b1-f99e3b74a6d1", "sighting--09bef614-545a-49f8-bb4d-430481aa8878", "sighting--2c6ad36e-f63a-4f5c-93f3-1945fdd97c0d", "sighting--95f57d10-fb8c-4932-8be8-19df358be107", "sighting--32bb8b95-c2ff-4877-8e55-4a9e19b311c2", "sighting--4d2741b9-b1bf-4712-bbe5-043b359a7a12", "sighting--a018c71f-8171-40e7-9fdd-00771a34c9b5", "sighting--1b6b1425-9730-4cba-a9ee-1f1fcba52828", "sighting--aed9dc92-078a-4fcd-9c14-a545225fea42", "sighting--d62dd562-38e9-4e8f-9084-fa447bc8ad71", "sighting--e2e73ddb-92d7-4cbd-bc88-01584e36b7d3", "sighting--85f19428-4527-4c16-afe3-033bf8dfb2a8", "sighting--afe844d1-9ec6-4009-ab29-f18fd6fab2e6", "sighting--f34c3205-c5b5-41c0-8e22-f0840c6d4c5f", "sighting--e7c58681-fcdd-4889-b9a0-e1b08f2b4b9c", "sighting--73d0abdd-6dc9-4da6-b0cd-944ddb8afef4", "sighting--ae585d43-dd29-418b-922c-2d674f2cd5d4", "sighting--918c5ee9-b403-44d6-bfc7-8fe965a5447c", "sighting--f80a3006-44d1-4bdc-9312-fabe448b4aa1", "sighting--fba9833b-3408-41bf-a6c4-e2ca912fbb2d", "sighting--7be26874-a635-4ab6-b70b-3a8dfe70163d", "sighting--6c6b23df-329e-4d23-b486-5e0cf3e2155d", "sighting--96ec47de-4253-4f9d-8d6a-110d1bcc5e13", "sighting--f3a97306-8b15-4a7b-b232-74cf9528f549", "sighting--2191dffa-c610-4a2f-89ff-2f578ea11616", "sighting--06fa17b3-5d88-4441-8f6d-d350e53282d4", "sighting--23ad9108-1ab9-445f-9264-31ff2ea85390", "sighting--b5384559-3e2f-4ff6-8851-2ad42bcb6046", "sighting--33ad71ee-e012-41cf-896e-909ead26db15", "sighting--d31bf3f0-9fde-4c78-84c3-cc189ec92cf6", "sighting--cacca189-7d69-475d-b826-040a5d703dfa", "sighting--be6045d2-3225-45dd-a8f3-425a24591378", "sighting--d631a6f1-5de8-4f66-b78f-cdef4a0ddd01", "sighting--d5623a6c-32ab-4e29-a9d0-88a3d983b8e6", "sighting--91bd27c1-5a13-4c0d-9379-732fbd7ef5b6", "sighting--1d61b3ca-e45f-4b4f-b107-98aae2f4dc5c", "sighting--da502b3e-8b95-4f97-8a85-f7c2f9e1f02b", "sighting--051dcb1a-2136-4bcc-a00f-267c386a9d1a", "sighting--d3544c89-b9d7-4460-8c36-dc9062181087", "sighting--3477cd8f-88f2-4bb1-a643-90f34be9adff", "sighting--83f54b17-9f9b-4953-b080-55431bd847ef", "sighting--51440f71-abcc-4275-a5e6-9a51b16bcf78", "sighting--73a752b0-1bd0-4814-a3cb-99308dec6a84", "sighting--d3d6abce-e914-4a1e-942a-21d9a2ebfb0c", "sighting--0292254b-2410-43b7-80fa-48f8076971d9", "sighting--263a1a26-9f5c-4ff4-bf62-28f28c4168da", "sighting--48905a4b-f8fa-42a8-aee3-ce68e3ae9ff7", "sighting--2e2fddfe-46f0-473d-81e4-a7a273ad2a4d", "sighting--d711f4f7-f7b9-4685-aea8-38f507829d8e", "sighting--fe43dbe7-16c3-426e-9a1d-de26c5a7283e", "sighting--5bbb30ea-c633-424d-beeb-1be10ad86cf8", "sighting--638b208d-85ec-4557-a036-dd9f9801ae84", "sighting--3c2d48e1-b7b3-4783-8b3d-8e015207c134", "sighting--bf4005bf-d7bc-41f2-a5aa-21572d6078e5", "sighting--eab09da7-2186-428c-8fa5-2ae66ea71168", "sighting--797bca17-a8a7-41c5-aad8-db25b13d3284", "sighting--31ebbcf7-b317-4fd3-ae24-65f024f04d74", "sighting--0b90327e-f33e-4700-8a11-a2358ca1f127", "sighting--d3a93076-e0b2-43f7-9f60-b858d9061cd0", "sighting--1b4d0fe5-d9e4-4af9-a6c5-d79a1ba61830", "sighting--3cbcdf4a-ed1d-45a8-af10-694b032bd0d1", "sighting--398da822-e93a-4725-8d34-2e110fdc6293", "sighting--357ec1d0-ccd8-4927-b7f0-6714a3b0c1f3", "sighting--0f539fd0-65c4-44de-a63a-118943a8c5c8", "sighting--4e110d3b-27bf-4e3f-853d-fdcab21b1dd5", "sighting--061453f4-13ef-4ce5-a8f9-44beb25ecfd6", "sighting--e8238240-9277-476a-a2f3-f713fdf0cdb5", "sighting--5fde2fa7-6e5f-465f-8467-85f809caed85", "sighting--a0199195-dc8a-4e8d-8821-3412ed72a339", "sighting--5bbc189b-660d-4b86-84bc-dc4ed5a3e9c5", "sighting--54a2ec5e-abca-4831-b300-37a1acdaeb57", "sighting--225dc810-edef-4c1f-a44b-fe7072ac3d20", "sighting--dc9de12a-c6ae-4560-ab77-167db4925321", "sighting--222c091c-a75c-4510-9f8b-0322b38738bb", "sighting--96875e04-4976-463b-925a-1a5b3898cb82", "sighting--b119ba62-b3f9-4385-93d5-cb7d9741de34", "sighting--7a062fcc-1c80-45fb-b2d9-9f3f624361df", "sighting--5970914b-26d1-45b0-b8db-40bcc9a77798", "sighting--7f2d764e-37bb-4299-921b-75d080f0df76", "sighting--d8ec5fe0-32b0-4562-b790-99cc7cbc1a75", "sighting--511f46ea-640d-4a7b-ae4f-a2bb3290fbbe", "sighting--6b034431-2a8b-4433-8b78-11ab49214f31", "sighting--fb81b44c-533c-437b-b601-11391561370e", "sighting--291380de-00c1-4d70-a88b-6d4ee07a03ab", "sighting--875915ca-cca3-4ee1-b9e5-5184a45606e1", "sighting--8425573c-bff8-4d77-be52-59724fa176b2", "sighting--7165fad8-cd09-4288-8eee-4a7596888228", "sighting--39a200bf-5ef2-4e91-9942-83a80d45cd09", "sighting--337cad57-8418-412f-8d19-4a06f291231e", "sighting--896969a5-27ec-4fce-9e17-4e17ef2bec5a", "sighting--cf846a25-f9b3-4772-ac67-10ba25916044", "sighting--ad6f8aad-1c63-4aa5-89e7-fe370410b951", "sighting--fcfa971d-a578-4073-913f-0b5546172a06", "sighting--6475fe43-48c0-48cf-8f06-c396271a668c", "sighting--937af50e-44ab-40ca-9ba1-c4b5c7b01cb9", "sighting--d7464522-7113-4372-93a8-b0e089de0d14", "sighting--e19998ed-b020-40a9-b6e6-35dcb35e2dbe", "sighting--1d08f4aa-616d-467d-8107-c62c6173f8b4", "sighting--4fb0952c-db0b-4c03-87b2-62f6b23471a2", "sighting--c7f7d96e-9d9a-4bee-a9e0-e716d9763a2b", "sighting--653d906c-d7f6-467f-a339-7772c126732c", "sighting--beeeea39-a315-444d-b084-e37c17a05194", "sighting--e8c90808-0347-4433-aa52-cc8b55d33683", "sighting--1c0a88fe-85c0-416b-8c80-39e2b18b6740", "sighting--1a5e18f3-9a26-4393-8225-393e8ed32f17", "sighting--abae2aeb-d15d-43b3-90e1-cbfade40a121", "sighting--7062e210-870f-49b4-a658-6127319c7a85", "sighting--5ca34f9e-bffe-4530-a513-6516deaee7a1", "sighting--5ac970c0-2237-415e-9010-12eb579a9a18", "sighting--1d0dcbfa-edae-4ced-8811-a13eb9da277c", "sighting--3cb75117-5bec-4b8c-b9ea-7c699cb6c72a", "sighting--605fb48f-950b-44ef-bdaa-1ec56da52dba", "sighting--b87aaac7-1571-46d7-b84f-3af4f0b4ff84", "sighting--4e3ad5ed-4c1b-4fa8-83d0-210de6dc6516", "sighting--20e4c735-b38e-43ae-8781-f4170cd75321", "sighting--eb35abbc-ee16-45fb-aefc-121f62e355ae", "sighting--35692316-05cc-4052-98d9-b56b8440e612", "sighting--cbfb6660-1e8a-4404-bcde-826bdb557e2c", "sighting--88814acf-c204-47b7-be32-b3834e14b379", "sighting--2a2daa7b-a622-4e57-ae27-d18c92d734cd", "sighting--2cc78259-0da7-4f85-94f4-2f0d25f096a5", "sighting--14be9287-3a42-40f1-a9c8-a672743e9b7c", "sighting--66b403b0-19e5-41db-b200-3f32333b920e", "sighting--6f9e4b98-ee29-42d3-9761-1c297f767445", "sighting--8c9ff95b-069a-4269-a587-92330ccb86ad", "sighting--4982c7d0-810a-4b87-8ecd-73acb619a882", "sighting--18636a43-3709-4832-a307-543ebb17e309", "sighting--6a68fc7d-69a6-4646-9a66-136d22ba7c93", "sighting--5541da04-846a-43c6-94bc-8c055612f742", "sighting--86a009b6-4505-4769-b3eb-784ae88d2b25", "sighting--08055d55-0b9f-4385-a60a-92ffec49a918", "sighting--c3db13cb-f49e-4def-a05e-252d6e882f83", "sighting--7bebdfe0-909d-4197-bc06-0ed75d577006", "sighting--23726e30-52f7-4738-bf66-ee37968d18c3", "sighting--f5058b91-5452-4e04-867b-a456af7f7132", "sighting--f7b004d1-856a-4638-a472-093b4c6d354b", "sighting--f4277165-0368-4b82-af1c-ffe99c301fb3", "sighting--4f4f460e-922d-4f09-a14a-f1b0edd13163", "sighting--2008ca24-79bb-45e7-8517-d3498f99538e", "sighting--ea9b39f6-3148-4a7d-939e-e04a94fea6a6", "sighting--bf36599c-f76c-48e4-b149-bced694120ba", "sighting--4413d03b-29a0-4c6a-ad7e-23b592ba911c", "sighting--4ac89faa-958d-4140-9773-b9ce9f53fa7a", "sighting--5524eb24-a007-46fd-85eb-0cd5eb502d94", "sighting--7bde7cb9-9a00-4a1d-9ede-64accb634cd4", "sighting--4411b0c0-2e83-43f6-81a5-2cd9c6c1f17e", "sighting--e10ebad0-1cc0-4e06-b0f0-abc85958767c", "sighting--3cd70368-e5cd-424b-9324-6f6d15a34162", "sighting--1827d65d-d144-4662-85e3-2f57493088e2", "sighting--da1a05c8-cb41-4174-9003-9bffafbb2cce", "sighting--1acfabc5-f984-421f-bd33-b14af5283627", "sighting--492ddfce-a54c-4478-bfcc-d3eb28d54834", "sighting--f8fc8f21-c199-44b5-936f-e7964f75114c", "sighting--25d3633f-968b-4a8f-ad94-5e203ca99d38", "sighting--60e517cc-47e1-4379-ac1b-02c26d0a16f9", "sighting--0353a165-0612-4dc8-86fc-0680da5f6c54", "sighting--425f092b-313b-498a-9af6-6bcc4515dc65", "sighting--3b508b6d-b921-428f-840b-312b2c5a888c", "sighting--ef9acd00-a3cf-4d1f-acbc-acff160fd8b1", "sighting--69aa1541-d5f1-4f51-a470-4d64ffc1782f", "sighting--13644c21-ffdb-43e2-8a73-d15a01f7f7a2", "sighting--8e287055-d58a-4fc2-8718-18f218f12e51", "sighting--8de12e5f-7566-45fc-b797-3626ef7f66f0", "sighting--ff78c2c4-e4bf-490a-abbf-9002ca36b3fb", "sighting--63214f03-d17f-4f87-91c6-085549e9dd84", "sighting--72c2fcf0-7e80-4c05-b263-b40a374e53cd", "sighting--0386e055-b4c5-4246-bcbc-373096918049", "sighting--74e4d0c4-8a5b-484c-ac91-cb91d7c8df8b", "sighting--e9697b77-ed31-4be2-b37d-0fb41277e155", "sighting--265934c3-0137-4edf-8969-a3b1176f8a19", "sighting--796ebd22-8605-4c9a-88e3-c15e701df868", "sighting--118aa40f-91b8-493c-913e-ff6c8d253a9e", "sighting--19942b77-79c5-4778-8e50-e20b6f6c94c4", "sighting--b90e5ee7-9241-4e1f-8113-5b4914085ffc", "sighting--eb568882-b932-4bb0-8ddc-21ec32413a5f", "sighting--ec46cdd9-5101-4d2d-a704-6564d1c7afcd", "sighting--2bbb1ed4-1983-4879-8a8f-0cd65b4a56df", "sighting--dd534213-6f08-4714-8cdc-ff551497ea61", "sighting--6898243a-af4a-4470-92f7-be4bc27d1485", "sighting--089f6f3f-d43b-4280-93c7-8684784a0ed9", "sighting--721f8e26-3529-4a79-86eb-be28b5f60feb", "sighting--d9cb476b-2fef-4385-b5a6-17cc664c8b05", "sighting--001a2128-8abe-4d69-a5c9-f94d34ca0590", "sighting--609f1747-286d-4635-bc8d-891c9cb72a41", "sighting--bbb4dfd5-1310-4d7a-9fd4-d2744cd9a3b2", "sighting--7e7aceba-76f4-4584-8da0-b698c3c5c70a", "sighting--6f888d83-e7c4-44d0-9384-8aa4b78ef4bd", "sighting--a81c2a01-e470-4e6b-a8b7-7117019cc17a", "sighting--4d8a768b-80c4-4b82-9b89-7f013cfa5d32", "sighting--c9b998de-343e-46ad-8401-6487829ebf84", "sighting--90554d07-9d06-4638-beaf-94d91b1eb481", "sighting--a894f4de-f5b2-4d00-9d68-d0dd6af60176", "sighting--5c2210bc-121b-4a31-b3c5-e4a984f69d4b", "sighting--7eaef821-3e88-475c-a36e-9f7471482511", "sighting--aaec7a93-6f45-4dc4-89c2-d8f80a86b9c1", "sighting--65af208c-258f-44c6-aeed-7151cc624584", "sighting--926251c1-1187-44e6-a16b-dbfcace489c7", "sighting--ddbe562f-7e8f-4221-9577-62e06fcc8f3b", "sighting--5a8ffad6-2503-4141-bed2-21c9fe88dabf", "sighting--d3c4a280-aeb5-429f-bf74-e2e7548477cb", "sighting--4877a2e5-1f8d-4440-bcfb-ab629a02017b", "sighting--f5e4576d-80b1-4156-83f3-06007b05e0c0", "sighting--0c16ffea-59a5-4115-a43e-714298ed44ea", "sighting--1e6e50a1-c1a4-4ae5-95ce-a460ac5f5b08", "sighting--df2f1158-ba05-41fc-9050-4f65ea768834", "sighting--fe28ef4d-dda5-4d41-8b32-097ffb26ad59", "sighting--d1e2cf18-6d9b-4607-8fc4-eb9e2c70a39d", "sighting--7ee0a082-1c0a-4a50-81ee-5fea3f84a778", "sighting--b416e919-6c8f-467a-b963-34b94677b197", "sighting--74a3477d-8d22-415c-ad6b-1bc2e51a9b15", "sighting--7269f07a-b491-45bf-aaed-a5e928ea19d5", "sighting--d07ed007-e1a6-40f2-bd41-d37827afa661", "sighting--958160aa-0789-40f3-ba50-ee928af5841b", "sighting--f0c858b8-a667-4d11-a261-531c0615cf87", "sighting--c1cc70d0-b5e3-4db4-a878-e2a7b6c6dbe2", "sighting--35abfd54-e48d-416e-9ad0-3081716e6c14", "sighting--4dc4a5a0-b90f-42be-a22b-32785da9fd8e", "sighting--50a33281-fb17-4f1c-bc9f-353e99952aef", "sighting--ed65fc29-6f0d-4ecf-8d2e-3bd0dd9820d1", "sighting--0db81802-1871-4599-bfd1-3135d0fab0e1", "sighting--6412d4a9-0b00-4fd7-9ed2-933fc7fd5ea4", "sighting--f967d89f-552d-4ec5-ad87-88f6ab7fb739", "sighting--8936f836-815b-453f-88b5-4ef1c72cd8e9", "sighting--5a66505e-82c9-4ce9-8613-73a598ebde9b", "sighting--9bf18d73-bdce-4364-9cbf-5ecdff344fa9", "sighting--49d3adfa-1fa2-48bc-b0a5-5ad436310d98", "sighting--10257d6b-a05e-4fa6-9c50-df083c9fa8b0", "sighting--fc7b8745-f0d4-4c25-8f11-d69698730c08", "sighting--99211539-8da5-4024-8570-6d0e444a33b0", "sighting--459b25c9-8fa4-4614-982a-66cc9738d8aa", "sighting--3cd4802d-d069-48a6-b6eb-818f4587dfa3", "sighting--422f4028-4cf7-42b8-b3ac-aef5fb4a1ba1", "sighting--185ab812-2e70-4fac-8103-eb8ea092636b", "sighting--3d67e363-007c-49aa-b4d6-4e2a196fce19", "sighting--10f635e6-d99c-456f-ac36-3450b1fe3d7a", "sighting--5bf0b706-2383-4663-9d43-048e37db9595", "sighting--ce7fa29c-372d-4980-bf68-5371b99f93dc", "sighting--474fe395-2283-4eaa-b569-a23f31240e92", "sighting--c0d63971-a8c9-4a03-bcb5-796c3804b38d", "sighting--8dabede8-9fb9-4484-bcd6-d196f2d811ca", "sighting--8874f708-e9e4-4639-8a8b-1f87bb94d1bb", "sighting--43f03994-5131-442f-9e88-d5da388daf11", "sighting--e4077303-cd32-436f-ac10-a3eef154c776", "sighting--3e06b4ef-d735-4e32-ba1b-f59697b4c8d7", "sighting--23c8c245-422e-4a68-b228-fb5e944cfe76", "sighting--91687ea5-cf1e-4e05-b14d-68e726f14425", "sighting--55b744ac-fa0b-459e-a741-e8460c492172", "sighting--7cb09f99-3723-43dc-9dad-9f3924ae0e9f", "sighting--6dedb64b-7cd4-4ba3-abc3-235b6284d472", "sighting--2f77f405-bcca-4d76-9451-15021bcea8df", "sighting--aa3bac64-cfc7-4f86-8362-c7997f238898", "sighting--820e43d7-1a24-4db1-86ea-f986fa4f2ea8", "sighting--88c52c62-5a62-4cd4-8b9a-519f66f4bf2c", "sighting--01b01f29-73be-4e4c-8f5b-17393760d225", "sighting--db15f066-78ac-42fe-b5a0-5850a3c2fde0", "sighting--1014399f-8f3a-4912-b1e3-6176a48eb19e", "sighting--64463446-c09f-4749-947e-00417f4d3baf", "sighting--02206c26-b143-4255-9a36-0c9550fe3159", "sighting--dbe9044a-2815-48c7-9d0d-d314be9eb3f0", "sighting--84b013cc-ba9b-45b2-a215-49d4139006ec", "sighting--35c73389-cd92-4bf3-8b31-8b517d5a7490", "sighting--8f26bc3c-eb83-4046-87ff-1207d68597af", "sighting--677ffe26-4168-4d42-aab5-26402663ed65", "sighting--e720e5ac-f989-4fe8-9c2c-1e83ca49e315", "sighting--cbd6f20f-1503-4aff-8bb8-e32ae826457c", "sighting--3fa8fb1f-0b39-44db-8be2-943fb2656513", "sighting--5c77b67c-f07d-477f-9905-91c5b52b5f98", "sighting--6e201ab1-3b94-46c7-9cee-dcc44a6fb60c", "sighting--e791f80e-7af0-4934-ab56-88ef5a502edc", "sighting--d79013bb-6b5b-413c-a696-7ee19d75f112", "sighting--797abc93-4875-490c-af19-fac16088bf29", "sighting--2914b826-bb80-4ab6-8fa6-fb376fbf435d", "sighting--50b67d4b-7fde-4abf-ab7c-7c89f67d0f48", "sighting--9d82842d-2305-438a-976f-86b1ba07fc58", "sighting--872625ee-badc-4c66-a01d-2e42010b223d", "sighting--3dcc31aa-0cdc-40de-b741-f63c801599f7", "sighting--789211fb-003a-4be5-b37b-531fef7e9ab8", "sighting--1e88e0e6-06ab-4e34-8435-f1c3829b5871", "sighting--f57a6ca3-7cc0-4c9b-bb9c-ae61dd77768a", "sighting--89989bec-04df-4798-a7d9-71245476d8e9", "sighting--e9dfab99-9d41-4024-bb0e-4d7874d68f33", "sighting--13107458-ef55-465d-8d43-1cc6b94d854e", "sighting--de12768a-e516-4b3d-8140-e63df0a490d3", "sighting--ed1b4068-5d32-4f06-974d-3fd5632cfcd4", "sighting--b338708a-b692-4c08-90e4-18900e0f3299", "sighting--aeb920a5-f4b1-460a-9cf4-1ec3ed40833e", "sighting--01c3a350-ce49-4679-b378-964c655029a9", "sighting--bcb08697-a0ee-41c2-bfbd-c6f3a45b0c4d", "sighting--718fa3bd-f1c5-44e7-bb91-533aa9c93c4d", "sighting--738b3173-2e9b-4aef-b02f-2d46674f1a30", "sighting--afd30115-388c-460a-af35-b868c6be54ba", "sighting--c964970d-c05b-49f6-b821-c223315baa21", "sighting--c8adf7ec-eb10-461c-ac89-a6cf17a35012", "sighting--6f71e981-8f5b-4091-9944-652725a46649", "sighting--617c9df6-b1e7-43ca-8e19-8ba3bb8247f9", "sighting--a97cc155-b4df-4b00-8a11-3e9e090b7c56", "sighting--35466c4c-7888-4452-835c-580a57e58017", "sighting--cfcf4d61-79b0-4de6-92e2-c538199640d9", "sighting--9160ca95-c6a9-4e85-bca4-562ed0de49da", "sighting--e2ba555b-ed58-4b09-8b1d-118b98e44591", "sighting--1f8828c3-1ea2-4277-9a84-70e82cac2686", "sighting--975c2994-3029-462e-96b1-56a30f295ad4", "sighting--909118b0-d277-4b50-97ea-7a2373d9fa2d", "sighting--0cd9a569-69ba-4329-8632-8cb343c5744b", "sighting--dd5119d9-92cd-4e32-8101-4fdbd96cbe17", "sighting--096e788a-1b2e-4cb7-98eb-c8abf46248bc", "sighting--3ac1a008-3bce-45b6-ae5b-9918ba97ea15", "sighting--b8097055-0923-406c-bc6f-ab1ca1e19fbf", "sighting--d00f4014-88ef-45cf-8795-7c682b7b6dca", "sighting--4ed28df1-d49e-4632-9fe4-adec990f2c80", "sighting--0dd28718-2a2d-4123-9714-88d2feac70b0", "sighting--cf1867b2-8c1d-4e3a-9e8d-80bdb74ded3a", "sighting--3fb30e6d-aec2-47df-9f05-7027cbf1bdc2", "sighting--cb7797de-c034-4593-b690-1dd5fdff6c07", "sighting--ddc21e28-df99-4ab0-a4f3-6df4b781cb71", "sighting--b998b8eb-c209-472c-80e1-d5b7865ee9de", "sighting--9d6f59b9-1973-4755-bed7-fd8181c2f58f", "sighting--bccb90ae-e03c-4b33-8dd3-4e6fb4eae781", "sighting--39d78b62-bbb2-42c2-8c8c-13e7fc8fdb25", "sighting--1178b99a-b36d-469a-99a7-24c01f9d0682", "sighting--7ceeee87-fcd3-431d-9e28-996f4f65583e", "sighting--dcbbb52e-4c52-4a08-85bb-b5d48b264d21", "sighting--982a26e4-1950-4710-957c-77b817d7e0c8", "sighting--80677521-5abb-41be-a333-ecb3adc49b05", "sighting--fd269b48-d486-47ea-b054-050ff17cdc5b", "sighting--5d6fd46c-7d36-469c-8638-ae764196d5f6", "sighting--6d2b4a71-8357-4854-821d-ecca68bec9f7", "sighting--d7eb20ba-c6f3-4781-a648-39646b36d9d1", "sighting--4b5a6dee-8e20-4f49-b109-9c9e619bc3f5", "sighting--a19da312-c7b9-4722-9b96-060cd53ec7b9", "sighting--158898f7-8a14-49b4-a1f6-41678a0a336f", "sighting--17cb6b0e-714c-4865-8926-535a3c17a065", "sighting--33315e4c-eab2-416e-9ff0-33154fa7f5e8", "sighting--67aa20ed-e499-48f1-b243-1d38eec1c49f", "sighting--73e06390-9bb7-4d5f-8aaf-5fae26f348e8", "sighting--0e8e2e75-85f1-47ac-9ad2-ced720ff27db", "sighting--33ce8f2e-78b6-456d-8ade-a35a8c01f203", "sighting--baa951a9-0f4e-49e3-9388-a4e1ed48fc30", "sighting--75e691de-2486-4eb4-b4db-f9962a91fe39", "sighting--1829e02d-e3e3-41c7-9347-dfc81c43afc5", "sighting--4b1966b8-be44-48c0-883a-1d2f36477cb0", "sighting--4b268161-766d-483f-97c3-6078c5e8cbf6", "sighting--e28beedb-628d-4c3f-b117-d5785ec5ece3", "sighting--a6a35e6e-f87d-488c-b355-691afe62ad46", "sighting--4015b156-a795-4465-996f-e866551b4335", "sighting--deb9ab6f-a65f-4d7b-85dd-82fb28da51c7", "sighting--c6f744a9-1320-407d-ad61-6c295c0a5dde", "sighting--25d870b0-cd3f-45e8-8ba0-623a5cae4e9e", "sighting--51cd86ec-aa27-413e-a04e-8d4be50838ff", "sighting--275c95a2-1c92-4aea-898c-e2c5c1be269c", "sighting--267a0492-f9c0-4b76-b311-64d71a09a3ee", "sighting--4691f056-6fe7-4d1e-822f-caaa99aa4ef6", "sighting--535b9577-d3f5-48f9-bd13-d8d49f22f3fe", "sighting--bd6ae21b-54f5-45ed-8fb0-b91c88476784", "sighting--a871495e-4cec-4048-b23c-aa648076d901", "sighting--c6696b70-f773-4351-a223-7e81e0da8b7b", "sighting--78cc81d6-06a6-4bc0-8040-47246edbf400", "sighting--f136fd3a-010a-4bc0-ad08-c40bc6ab7939", "sighting--ce0eebad-785d-4176-a252-045903b333f7", "sighting--703fd8f9-dd65-486a-84ce-e4b465ed7e1b", "sighting--988716c6-c9b1-420b-af06-9369ce102ab9", "sighting--409024fb-b2d1-413f-b15c-8fd21893ebe3", "sighting--40f39dc6-378b-4682-b367-54e081589ba8", "sighting--f52d2d21-158e-4852-9841-47b8de37effa", "sighting--23cf2e57-7b38-4d22-a1f5-5aab0ce2d965", "sighting--54b1fcc7-1cbc-4e0b-9805-82a39ab3dbe9", "sighting--dd62b62a-0870-43e5-85ef-3933ef6b37c3", "sighting--6ef691cf-a6ee-49f2-b369-0f3f82b56bf3", "sighting--7fb1b403-e874-4b1b-8ce8-7a03006a5ce8", "sighting--cf905423-e1f8-4197-ac8f-10ed4cba2900", "sighting--6fa4d691-f3fb-43ed-8f9a-5a7c0e6f9090", "sighting--2af72710-91ce-4c6f-821f-61aa89fd126f", "sighting--a2030559-068a-4b61-9311-153708985c30", "sighting--7b6625f4-d582-4788-aa68-3ec525fa9246", "sighting--acbf9557-c9af-47e2-9a92-8e96b6deb97b", "sighting--e302a32e-ac10-45b6-b073-07dd3c572f5e", "sighting--8195f2ec-2fa1-45f1-8680-1c13eb200920", "sighting--62536154-d0b2-4121-8474-1a5f8431c2ae", "sighting--f429868e-7d47-4f8b-9108-f273dfea8325", "sighting--d1b0b396-a6da-4390-adb7-bda34be37029", "sighting--7eed23f1-51ea-4734-9c34-59576c20c6f3", "sighting--11de3b29-534e-43a5-8901-224b46061235", "sighting--01a25b6a-3b60-41db-b4a6-4fe61b29b59c", "sighting--71318893-f8b3-4c16-9b89-71214ad8ff1e", "sighting--d016d271-ab75-46b1-8186-809b3e2e6be6", "sighting--e10c07c2-9f44-4aa1-918f-20b0e88eb984", "sighting--49065d35-4544-46f7-b376-0dae9870b9e0", "sighting--12ab9ad3-cfdb-49c2-bd15-e360914604f7", "sighting--c569e3c8-a2d4-4b07-b072-c4eeaebc4764", "sighting--abac5621-8cd0-487e-8f0b-6c8f42686a18", "sighting--8f35274b-14c9-4b86-8f76-18e4608243cf", "sighting--0642dcb9-2140-4afd-a1b1-90166d583acb", "sighting--e7b24c4c-814c-44cb-aae1-664653689d8b", "sighting--73f34cfd-d081-4c22-ab2c-cb410b6117d1", "sighting--2e4adcda-457b-479a-bfbf-7934ad5f99fb", "sighting--323f9c95-df98-4966-b448-4430b83cde62", "sighting--c3eb23f5-254e-4243-a2d7-db5f1fce552f", "sighting--cb9db5e9-1a7c-4170-89a8-d6c957d44cb1", "sighting--eb2e33db-90fb-468e-9eeb-45ccb59602b0", "sighting--7d02ac92-92aa-4376-8947-6a4714f46419", "sighting--2438bee8-2fc9-45a7-bbb6-acc15fa351dd", "sighting--eccefb48-c6ad-4d6a-b87b-3b2b0994e052", "sighting--536be962-bb0b-4e56-a297-44525b9ed2c0", "sighting--ef4253c0-29b7-4e81-97d9-b2049ba11a33", "sighting--9196869b-e5f0-4143-b676-0b5f4f8c4c57", "sighting--67d57077-e7ad-4659-91ae-bea5d76342e8", "sighting--1c600385-43cf-4233-bbff-1b3895140b6c", "sighting--35edccd3-5a10-40bd-a43f-5af31ab87229", "sighting--3e20b1cc-6e4d-4ce8-b2e3-f31fe2be34b4", "sighting--b1ffc800-1abf-4170-82c9-d4badd25114c", "sighting--0b0897c2-234f-4dbc-99a0-ab7eb01ddf65", "sighting--3bd31a39-d6da-41a9-8122-76b132b5277b", "sighting--00019e7e-efda-412e-8f5f-3d5f01ae0a64", "sighting--c2d6fd9c-c92b-40de-aeb1-a1dba52f9fb9", "sighting--40dde490-be75-49ed-863b-6bc3681c2358", "sighting--838d48a0-8e1d-4cdd-b3c6-e572ec5e3251", "sighting--c3685b2d-a13a-4137-b962-ae708ff951be", "sighting--1412147f-8c4e-47d8-b59a-ccf0c2c9ccf6", "sighting--843c70c0-c05b-4531-b2f0-2df46fb8515d", "sighting--b8fae4e2-5df2-4cb4-a86f-826561314379", "sighting--294268db-d912-48ef-9cc5-de13521d2a45", "sighting--177fedad-6c3c-479a-b0c1-8aee95d64155", "sighting--9059f618-93e5-4e64-acf7-4478b11d5429", "sighting--d31b047d-2929-4f09-ab75-5253c4f7f4f0", "sighting--faaa7b31-76bb-4864-b336-baef3b9bcf46", "sighting--32b951dd-b5e3-496e-b0a0-1305a324563f", "sighting--ddbdfef2-3f46-4614-89d8-b398980d9c5c", "sighting--3292d1a3-0bb6-4505-84cf-07a793194c66", "sighting--440cf7db-c971-45b5-b19e-80f9fa9988e7", "sighting--f62223e3-8313-4a05-8460-8ff7b4a49a5d", "sighting--eba16279-0845-41e2-97d1-bf120db463ca", "sighting--416e578e-56a7-484d-ab31-af6cc206fd5d", "sighting--76e524c0-927d-49cd-8dad-b2151e4a0bfc", "sighting--cc2e0239-a0e1-40e2-ba6b-d4387383791b", "sighting--8bdaec60-276a-45fd-a615-105e0f9597c0", "sighting--840059ff-3747-44d3-aa26-0e0c27230b6f", "sighting--ffc2c5d1-3177-4bb5-8f59-05071f42c9c7", "sighting--602b8cec-ebed-4771-a9b6-8f93da777679", "sighting--af0ee177-52b1-4f9b-9bd0-229d8daa84c9", "sighting--96ba7558-9a4a-4a4e-9954-4155e6d544a5", "sighting--1c11730f-3bd8-4ddc-ba8a-d48c6448c881", "sighting--46fe2913-2856-46a3-bc33-6c398ad2d85d", "sighting--996fce6d-6dc4-4da2-b3bc-c602de1b630e", "sighting--aa05d0ec-ba99-4c25-97e3-d34ae2f620a7", "sighting--ff6e06cf-8fb7-43ad-b553-8a2f12b0312c", "sighting--06eac5d8-0ed9-471d-b208-e3bf40cb1a99", "sighting--6b1361f5-6820-4d4b-923e-c068801cdcc4", "sighting--904b2404-cc0c-4e2d-a026-2015f220ce2d", "sighting--a9d842c7-f12d-4587-b32c-b7b7d33abade", "sighting--17d1bfc8-dbb7-4e87-8270-dce710449dcf", "sighting--83d168c4-ddfa-4a0e-a28a-49969ac28554", "sighting--20628dd6-d379-4e66-b0f3-1c59a6bf7fd4", "sighting--91ce64e3-2897-4880-8dd5-7b6216a846e9", "sighting--0dba3701-6cb4-407d-beb2-71afc2c2dbcb", "sighting--5dec5ab1-7f39-4c36-852e-20848701018b", "sighting--6290a41d-66a2-443b-b589-fd94c636a95a", "sighting--724497ee-785b-4f1f-9666-31dba79e04f5", "sighting--fd899c70-1dbd-4256-9dba-3321228669d0", "sighting--4e94896a-4223-4010-8dbb-72734410640d", "sighting--6731815d-4184-4b0e-a9ea-d85dded8636e", "sighting--a3e87a56-350f-46af-a2ea-cd1a1602eaf5", "sighting--05f35d89-c143-4d73-80b9-d4ab4b352835", "sighting--ba8b5811-4f98-4bd5-adaa-f71c1e639533", "sighting--aaf9455f-4e02-4011-9efd-4696fefc2337", "sighting--8f575b83-4744-4e5d-b2bd-e482fcd05914", "sighting--12204da4-a60a-40e6-9b37-1f9181e0357f", "sighting--c15b50e8-a8ce-4a41-a719-961198814c54", "sighting--b14c76fa-4b7e-4523-9dea-82a0658b0304", "sighting--ec346fd7-56a8-4f90-908c-ddcde4730b94", "sighting--e546985a-f735-4559-afcd-d6e91d997437", "sighting--6faf6df9-9d88-44ce-9b83-cdf7ef3082fd", "sighting--281eea52-aa2e-46ac-9e52-46ea87c14a54", "sighting--37c4a30b-883e-4384-b6fa-61c6ee790d92", "sighting--c12c6697-4ae2-42f0-846a-7eee1b2b5f2d", "sighting--44d6c623-f995-43f2-bce1-29a017b93c6d", "sighting--5e16dcb0-e971-4c5c-8692-b79c4e9e70aa", "sighting--276f1ea0-e0c6-42fd-9287-2868d4bf18e9", "sighting--623fcea8-03bb-4a17-bb51-a30b17955f6a", "sighting--719d92eb-53cc-4b39-ab65-53c6d28e7d70", "sighting--5839c607-7cf4-436c-bc0a-1f6333ccd8d8", "sighting--2a4040db-7ac7-4781-b8ac-14948db75721", "sighting--f30308d6-81b3-400e-a192-be19f6d33a64", "sighting--5060362e-ffdc-4dac-a4a6-21e340a7e6c0", "sighting--ea3fc5c5-e4b2-4ba4-bc06-e33d489bfeae", "sighting--0dd55d6b-cb41-4c32-b037-7409387e1631", "sighting--599448b5-1f44-4fcd-9c53-f6781e01f5c6", "sighting--a6a8fbd8-4c91-4ea0-b64f-71df8811f9b6", "sighting--1aed8913-53ca-4d48-a5ef-5c603d457111", "sighting--a0c091cc-684e-4106-aba9-ef5c008fb00a", "sighting--379cf16a-12a0-451c-bb21-33d0604cbb3d", "sighting--e62646bf-47b0-46d9-8338-0654f9199f61", "sighting--c755fa66-c577-448f-837b-0d803e692938", "sighting--222ce99d-9780-4a8a-8b3e-d65ce00ac07d", "sighting--b8b2aeb3-a443-40d5-85fc-b722b08e9845", "sighting--00fd354c-8c9c-4608-a3bc-138a1c4c8f7d", "sighting--37b9fc1b-6c4d-400d-ad21-ab6b278af329", "sighting--467350d9-eed1-4ef7-ab8c-cbfee4b263d6", "sighting--469640cf-28f8-4633-9ccd-e8936f4cca32", "sighting--d3a42468-50c6-4eac-8a43-8906a4228024", "sighting--c3fa275c-a40a-4fc9-832d-a553feb3d175", "sighting--862f19a5-4c0a-422a-9e92-2d8eae3dfabe", "sighting--0a70044f-29e9-412d-8c9e-5074a8fb6cff", "sighting--ebf6bc7d-dba4-4808-a898-26d4e2e86982", "sighting--f72cf9c1-324f-4599-a131-4fb6b4b2656c", "sighting--48d5c3fa-4dc2-4411-9eb0-cc966dcd4359", "sighting--048544b9-8a5d-4b60-862a-776899977d6e", "sighting--e9a68e55-a5e8-4312-b2a2-3a6c1251e2af", "sighting--1dd7ce11-8efa-43c8-aa4e-86d44c37876f", "sighting--fd14c681-b312-4d18-b583-b96f008b5a2b", "sighting--381dcddd-ce59-4d58-bfed-4d98b0d0c726", "sighting--ad23a4a5-cf96-45f1-83cb-bfef359d9ded", "sighting--373ec7a0-3f88-46bf-81fa-aa1d0498f005", "sighting--24361962-c02e-4440-93fc-b8feba78bb81", "sighting--e606cdf0-dabd-4307-820e-7f40c0f153b1", "sighting--0a60aeed-57cd-4a20-a147-0856c4d7392c", "sighting--557e0125-5b35-4e23-ba4c-f7c24cc23e62", "sighting--9048f615-1bbd-4a70-8eb1-9523314dff7d", "sighting--c18a363e-f50a-45e2-be2a-901f9627774d", "sighting--4139071a-8079-4872-8b52-f9c748565796", "sighting--88618026-284d-4018-adb2-a774c827a3d1", "sighting--f69c85fa-575f-45d6-a174-144cbe398f4f", "sighting--012f9b74-b80e-4d31-a3c3-511f1170155d", "sighting--03e7bd1b-663f-48a1-817d-2ffef0ba5257", "sighting--27fa5086-d65e-4108-9995-01d31bb020c6", "sighting--7b456607-aa1e-4929-b62a-df1dbfe59315", "sighting--b5302ebc-73b0-4a55-865b-661c45b7caf4", "sighting--405a4b0c-177f-4758-96c0-e8eaaea09e1d", "sighting--87f739fd-98aa-4762-8092-7f10f5f44f54", "sighting--1ad3d051-63b5-4a7e-ad25-ef5ba13cf47a", "sighting--29ed28c1-3043-407f-b233-2906981191ea", "sighting--0b55d2d3-48c2-48bf-a085-fcc85a474d20", "sighting--151a4e25-1dd7-4663-ad33-a6ef49f6892e", "sighting--d1d4e0f6-4615-4fee-842e-aa96e54d6f52", "sighting--86be8303-7ef3-42b1-948d-13ebbc4c0197", "sighting--04f7ffc0-62a5-410c-917d-054f48415e61", "sighting--06fa1a6b-851e-4345-bd2a-d705cb11676f", "sighting--1338fa25-87c7-40a6-9f0e-b78b12bdb539", "sighting--c822812e-119e-482b-ab64-ff9c3f2582f7", "sighting--527d4478-3671-4805-80d5-68c649148887", "sighting--2262d0ad-4295-4acc-a9b7-432c07f0070a", "sighting--dcb6d879-dfb3-48aa-883d-5d64d6c5e1ea", "sighting--9abdab34-5a42-4ac6-b992-2bedf8357bc5", "sighting--a7eeda2a-01f5-4941-89b7-e69497bbcea5", "sighting--eeaec218-465f-4d4a-a713-588ca916a636", "sighting--7f106f24-bc24-4985-89bd-fcbc37879268", "sighting--d3a837d4-3e94-4b0c-b158-5ad3769c6ae5", "sighting--3b8a8597-d950-4442-9a32-a583c91e53c2", "sighting--1f093ec6-02bf-4095-bc39-14ee0ecffd6e", "sighting--7e73a211-a944-41d3-8420-ec740e2055dd", "sighting--8d783e9a-106c-4568-9797-b50eef50c330", "sighting--a5945ecd-a77f-4cd6-8776-014778812759", "sighting--a98f2c42-c399-4474-b930-52c609cf5819", "sighting--753e23e0-468b-4260-9a6c-c44ec563fb51", "sighting--1ce4524c-f295-49ec-b0f9-5cce0e804675", "sighting--c5fa0452-669c-4a61-95fc-b8595e4326c0", "sighting--1a6b290a-ff9b-4eec-87df-a31adc48a742", "sighting--a5ae7367-eb70-45d1-a2bd-f7e5201cb0df", "sighting--a828e67d-cfae-406e-b55f-6cb466b0d0b7", "sighting--4a50ecdf-4d40-4650-bce8-55023f04e953", "sighting--20a69890-f7d6-439e-9527-99f9accd3475", "sighting--ef59edfd-ce0a-42d8-b52b-ba2d49044b35", "sighting--08ed991e-e0e0-4e71-87e3-62199e41e65e", "sighting--23eec823-50d4-402a-9c4f-d6ed320f8bc4", "sighting--9b17e90a-a0f3-42fd-ac87-1e143da7b85e", "sighting--09a19119-0263-4187-bda2-ccee2079b19c", "sighting--1daa8126-4a07-4b6e-9764-4dc288d2e871", "sighting--aa901993-4997-40f1-86a5-f770cff7f941", "sighting--7d2f7fe1-8979-4eb7-b2d9-c13e9fcdd099", "sighting--c2c0e56e-42e6-49d9-84c0-d1febf8add90", "sighting--6aac0056-8759-47d3-b9d6-7b3014c3cdc5", "sighting--b68442d7-f231-45ac-8da1-c85019405bea", "sighting--e805f6ec-9c74-4c7d-98c0-593160ae02e9", "sighting--14f37b22-6921-4ee7-896e-fb3ade801110", "sighting--770e1c43-c0ed-412d-9f4e-10bc4155301c", "sighting--9122cc63-6e38-4cdc-a7a1-3de58f259c66", "sighting--90f72155-e8bb-4c68-b2ca-8cacc3376aab", "sighting--c0069f21-024d-4345-9b2b-3dbf49f696c9", "sighting--8524f5f0-8935-41f8-969f-6675851d7093", "sighting--5f034743-cec1-4e82-954f-fd59d13f948c", "sighting--fcf5fb5e-9128-455b-b3af-182f6b4e4ac7", "sighting--2fa3e6d3-1b4e-4d69-b341-1e563b4f0c86", "sighting--f57a7ece-12ee-4786-9d8f-f035c8d853fa", "sighting--d686c4a5-3954-4109-ac72-f018fad6ef40", "sighting--b7492fd1-24e2-409d-9325-4a7332e533d5", "sighting--046f9df4-9090-424d-9f66-34cc008ac685", "sighting--d55f8f30-74e5-4fdd-b253-437d8fdd47fb", "sighting--ed1f4dab-f35c-41ef-b679-04678b0a4363", "sighting--71173a71-50c9-4ed5-8eec-7b695d870ab8", "sighting--ad71cf90-72c0-44bf-996e-1ce417524912", "sighting--c3ffdbed-0927-4436-b446-2ec1ebff4df4", "sighting--3883a12c-b45c-45d5-9007-be56a6f0877a", "sighting--7c59c42f-4801-4e56-8b0c-e7c3c4141e8b", "sighting--e1354738-1c37-43e5-ad28-cae009107653", "sighting--003b8053-2940-49e7-95e4-f79df1b95123", "sighting--1fa671c6-9ff6-4f45-ba33-f8baf80c13c6", "sighting--331aed20-0fcb-4390-8e6b-b46b43afc50a", "sighting--203ac84d-3786-4a89-bf6d-136503cc89c4", "sighting--a7bcd593-dee7-4625-bd30-af194bb3bf9c", "sighting--b1446281-4125-4a80-a561-b732bd1467e5", "sighting--3eca105a-dd7d-4905-a47c-547ecaf8f2e2", "sighting--4e049ada-31c2-4acf-b42e-a0a870d21908", "sighting--ea330075-ec7a-4b79-92b6-5a1f54f01272", "sighting--0033bf78-8a5c-4bac-816f-aab71c4feb64", "sighting--9d69dab8-946e-4fea-a061-163f737672f7", "sighting--ba6f42ff-5809-4f7f-9a23-824c8e194a70", "sighting--e3695df9-05c0-44c8-b6d8-ac2b254328ec", "sighting--e5743aba-4d66-4d37-b148-c1a43e51fb40", "sighting--8bd7537e-4cb2-485f-b921-3e7f62b9fa1e", "sighting--1e76e707-51ac-4742-a749-14e808d7e67f", "sighting--23118608-cc35-435e-8875-5ac471ab8d1d", "sighting--3416388b-e476-4426-aa62-bec7fb08ea6b", "sighting--b9631645-8514-453e-833b-246c9ce36028", "sighting--e359feb0-e7f9-4163-bda4-657b134038fb", "sighting--dc50f7ed-a633-4b18-9555-fbbe637ea3f1", "sighting--8360e78a-d997-4035-bc5e-9e9079131743", "sighting--e0171ff3-c360-49da-8590-34e08bddee10", "sighting--f5272f10-8c39-4692-9371-65fdc3300072", "sighting--e5dacf4f-80f7-4584-9e35-250545d2e7e0", "sighting--1e40a13d-e70d-4c58-bf79-24c6acefb7e1", "sighting--f7779e23-2ecf-426a-9744-18f940d02b2b", "sighting--bfcc20db-130d-4d2e-b4e4-a4c408bd2a01", "sighting--248aabe7-82fb-4724-ab51-b6969effdf1a", "sighting--db652afd-12c3-401a-8fac-d816f65b2ca0", "sighting--bd35282f-79c4-4f10-85b4-0d2cde22bbbd", "sighting--03d2e8f5-bb0d-48ac-bc2c-056df950c8ad", "sighting--71b9adff-5f76-45e7-8c6c-fae2b22134d0", "sighting--6367dacb-2987-43ef-9079-4a57a0bf481c", "sighting--2e8d3752-8637-45ea-88b5-19cae1e291ef", "sighting--6e43925d-c182-4e5a-8fc3-86d247a476be", "sighting--5c7ac1a8-f07a-4e3f-bbe7-dcb9e5f05f36", "sighting--e181b72f-bd7b-4727-90e6-6427297a49de", "sighting--de5ddc07-4a31-4546-8bed-36dc1416f6d6", "sighting--68334795-6ea8-4f2c-ba3f-1f73eccd9612", "sighting--b7a0d77b-2903-4c4f-a600-bd3a5ee81957", "sighting--c72682b5-f7bb-4b03-bb2f-bd60b22c713b", "sighting--2e953661-d1ba-42c9-947c-3181cafd8225", "sighting--b948e9c6-d929-4ae7-a56e-45540632cf2d", "sighting--4458b96a-a935-45dc-97ed-bde4d5ae67a7", "sighting--d7e0e5cf-cb29-4f72-a867-b0ccfe1a87d1", "sighting--c3992ce4-3f70-4bfe-9707-2addf4dd5f5c", "sighting--921cf659-fd52-4f77-a474-e0c56bf779c8", "sighting--b804ad64-0b69-4ce9-ae1e-f54799cc8101", "sighting--76d049cc-9986-43a6-a166-10d09248eca1", "sighting--9f91463f-66fe-41ff-a2dc-c125fe4cda0b", "sighting--304b18b1-b1e1-47f6-8521-f3a0551c479b", "sighting--0b8999ad-2273-46b4-9d50-5e82f03ecfb8", "sighting--4f2e0f61-9aa1-4812-b4c4-eb6ce84f522c", "sighting--d1598d14-820f-471f-83b4-5ecb42f92d81", "sighting--aacba915-9d23-4ec8-a240-cc8282a8a30e", "sighting--26ff03ca-81aa-4762-9438-ac768d8d90fd", "sighting--0eb9ff76-a2b6-4007-bca5-2484ecebbdc1", "sighting--e19600bb-06e8-420d-97b3-1e3fcede0d42", "sighting--86aa601d-c876-4276-9121-38040f1f126f", "sighting--18bdd0c1-a2d8-4a28-9056-5e9eac98711b", "sighting--dc81ba3a-b897-41af-a620-2da6182f7362", "sighting--3210e096-bf13-4751-9227-69062d5f5a9f", "sighting--372e801a-f099-496c-b47c-e420afb189b2", "sighting--e9c79538-76ac-44f5-ae85-ae55ee4ef4ae", "sighting--079b983e-3134-4abf-b16a-f1d3203af0cf", "sighting--9b03e2a4-2938-4b63-aa60-0e00b753eacb", "sighting--84d55b85-e20d-4586-9ed0-73a03b8e10d4", "sighting--3707976a-7895-44f2-b158-b25c258efee7", "sighting--61290f71-48e0-4447-a988-48086bef57b0", "sighting--4a156c63-1380-4da7-8193-3fd250700a2d", "sighting--36d69681-08d1-4e68-8cb6-cc689e42889e", "sighting--b7e4b91b-4fbb-45c5-9184-7ff3269eafe0", "sighting--a8ef7186-494b-45eb-8f10-b1b190ec0727", "sighting--afcaea92-ad17-43f5-8c48-98b9add9345d", "sighting--49eb7c3e-faad-4e87-912f-469b925c750f", "sighting--248a588c-d370-4d5c-a3e4-46ecec76faf0", "sighting--755f1592-7942-4924-ab25-95b86efa4368", "sighting--69873fd3-c89e-4a9a-8b5d-f049685372d3", "sighting--786fdd5a-085b-4878-a721-9ce8eb32f332", "sighting--05196f71-7297-4191-96f8-5707dbf5bf3b", "sighting--6962e1df-a36e-41da-aae2-4aa8edb91621", "sighting--2a5149be-80a6-41e4-aefe-bd02f35b5964", "sighting--2baebed6-36ef-4e45-9c51-0bddaecf8a41", "sighting--b75cd98e-e00c-4aeb-b585-a65c40ee5543", "sighting--263dac2a-128d-4e7d-b9a5-ba5a30ed84c7", "sighting--088e6010-a97b-4876-8059-2688f38695ff", "sighting--23ad9fea-f8ec-4861-abd1-80a0f4ddd2f9", "sighting--e58bb51d-8d73-4278-8b6b-23552ad7b691", "sighting--84945d2b-092d-4753-aff8-52b31a223910", "sighting--555a0927-e507-4e0c-a738-705c297e034f", "sighting--4dc991ec-bb0b-4255-87e5-d05983bdff2d", "sighting--d7952c0d-1553-425d-910d-6b64ad1e4754", "sighting--fe3f7569-f462-4f05-a119-3575bcd9f891", "sighting--a074c57d-fc61-4caa-846c-d8d837d9dee7", "sighting--759ab6bd-7108-4932-8670-8c24bf78e677", "sighting--140a396e-585b-425d-9354-14b537519477", "sighting--a7249138-8c50-4dfe-8c15-fe3703aa7dc2", "sighting--033b9702-e1b7-4e62-8584-1197da4f490a", "sighting--356b5f50-2998-48db-acfa-66ff421f63b3", "sighting--bc919a82-fb6a-408e-898b-8af32ac2cd5d", "sighting--a3e0fe69-d65a-4408-8016-4b36f7e8caea", "sighting--346ceaa9-0dc9-4913-b550-2210f8351126", "sighting--20101de3-468b-4f77-8d5e-ffe80b4b32da", "sighting--d38cc4da-31cb-4711-a03b-16cb46419f19", "sighting--19c4c9c0-1f4e-465c-8a7a-51d578170ec3", "sighting--9ed66acd-5b4f-45ea-8512-1050e0acd5cb", "sighting--0a157ab0-7027-481f-8964-dd6188cd439c", "sighting--52d06841-e840-46be-ae0e-47afcdebffcf", "sighting--20ed0970-313a-448a-8899-34088db4735e", "sighting--f6f38d11-e17d-409c-aab5-eda3c2e7fced", "sighting--803809bf-1010-4d8c-aa49-e418b745628b", "sighting--9fe40807-8b88-4549-ab73-04d56f15f833", "sighting--746bcba5-ca01-465e-9840-9146182f64f5", "sighting--290027dd-6fcc-435a-9f69-64b859f08cff", "sighting--8af60e18-d7bc-4a30-bfa8-eff59065dfdc", "sighting--e727e870-f8b7-4cd4-8f48-f678e545caca", "sighting--ba63f56c-1e0e-437e-908c-b023264ef890", "sighting--9b0a7f90-988f-4d2b-ae69-71ae1b43afba", "sighting--94dd761a-6c23-442c-a953-16e67a1fec19", "sighting--617671c7-e987-488c-b27d-4132b6305659", "sighting--3b378b8e-60e0-4d19-bbf2-9915cebf55f7", "sighting--7d0ccc98-14b6-491c-9c4e-6f8b1f6c47b1", "sighting--287c3199-8e9a-443d-9c52-a36a25c28e2c", "sighting--a88e74be-bf5a-420e-b3f0-54af62d3aaea", "sighting--1b6de4af-ba7c-4378-9581-c49a689692f7", "sighting--bc3765e5-b87d-4d7d-bf21-a832fee456a9", "sighting--2055f322-d5fc-4937-970d-8bb7723f7af7", "sighting--7a743a42-1bd0-49d1-aa8d-d10da4e3e918", "sighting--b123f450-e54c-4ab9-bfb8-f9b5954dc3f5", "sighting--37a46189-2a8a-42d1-907b-22d9f5188834", "sighting--4fa772e7-c342-44f0-92d2-8447761f77cf", "sighting--990f7624-babd-4b48-8c4a-1a3740c20174", "sighting--473403a7-1904-4d5f-bb4f-1712359aa1d8", "sighting--94297ea9-ca88-45af-82b8-1cb5171ebcd2", "sighting--d3637e92-6238-4c59-9a6d-3cf517be3f2c", "sighting--76ca09a6-9472-4c52-a76f-3be7cb4c23ef", "sighting--dfc61b9e-74fd-444a-a5d5-ec6c89f1dc1f", "sighting--e4be3b36-5926-4a65-9af8-80057e22eb05", "sighting--b029db08-d145-4280-a748-4f8c1f8ee387", "sighting--468041bb-9b1b-489d-8f5b-a92dd63c4d35", "sighting--3454cc21-a43b-400f-b389-25b635e10de7", "sighting--1fa47f3a-5697-45cd-8e02-8f083440fc9d", "sighting--7ce16aae-15fc-4206-8ff1-7088107aaca2", "sighting--befa2090-3f07-4073-ac8b-7ef41ed301c7", "sighting--e9b9306c-9302-4c0e-b82f-5acaef234e9e", "sighting--5df41076-f848-423b-80f6-5b50752a443a", "sighting--a3f42e5d-93a6-4b14-9126-0d08685aef11", "sighting--15da5a43-f310-456b-92b2-5f513d7f529e", "sighting--748b6889-1585-411e-b6e5-30c8e5e969a1", "sighting--5cab9a73-3bed-43cb-bf85-330a56141f8d", "sighting--360aa800-950e-4c00-9e14-a2ffa0352053", "sighting--f6633086-7f13-4dc0-a08c-ad0911738c0c", "sighting--251b573b-51a7-42d6-864d-14041758ee7c", "sighting--7491e613-efa8-463a-8c01-a71254d7391b", "sighting--59f3fbfe-65ae-4463-873f-378bc0f52030", "sighting--6176d6f4-350c-4ab1-806e-d134e0472d5d", "sighting--46314b0c-afa9-46d6-9103-27e638f54ec3", "sighting--5dade56c-f8b4-4416-bdd2-ef0ac65f9038", "sighting--14db3ae2-18c1-422a-8344-b074a0133a16", "sighting--e397d1f1-e344-4915-8784-7db75ab39501", "sighting--de490bad-877a-4305-9e33-67f4bfbc1ce5", "sighting--079f5731-bfb9-4ee3-b962-7ac6875c4700", "sighting--1e8370c1-90c2-4225-94e1-46d08337e168", "sighting--bbf04a2b-f49c-4795-8d46-7c049d908b25", "sighting--a2a9a53f-58e4-4d3e-9d67-792be67cb876", "sighting--471303b2-cc4d-4938-ac2d-e9a4c3d9bfec", "sighting--da999b1f-ccd9-44fd-b689-7cb67aa47642", "sighting--551b3f11-1fd4-459c-9221-d033bf5b2a98", "sighting--9b096cb7-af92-44ae-86b0-8d89663eb22c", "sighting--be967744-1c1b-4c10-a210-d691dedf3b2e", "sighting--843c6483-71cc-4d5a-b2a5-2e28e5a353ab", "sighting--e25899ac-1184-48b2-adec-92a2ce144054", "sighting--a62df683-4fc9-42b8-a41f-f2453ddbb82a", "sighting--dc6c0f01-2b6e-4a2a-84f4-67c975352f9a", "sighting--6e7f8c6c-f02b-4b78-8a3d-0b0156ba0300", "sighting--d84ec0c9-b01b-4f75-9c7a-db04da3b95d1", "sighting--366628e5-68ad-4bfe-9e7c-52654d0d9660", "sighting--58074ad6-0fa4-407d-93bd-c85a02ea5c40", "sighting--533af172-d78f-4a5f-bb9f-747f296c17f8", "sighting--b5d0d105-a009-4534-9e27-7e8e1e59ea53", "sighting--5ff202f6-9e2a-42d4-8060-67b7a962ccf5", "sighting--65ce5211-1efa-4e6c-b2ad-4cd03b4ee8a5", "sighting--4814f54a-1080-45a7-96ff-3ca5a55fa81b", "sighting--446b43a8-aa75-446f-8dda-98f5ba732e38", "sighting--0ee0500d-c0ec-4fab-acf7-e94e6cc83a89", "sighting--fddd98f2-4301-4edf-bf09-c7981a359f67", "sighting--f5e05dff-bb57-4819-9760-cdbe3ce7e3f6", "sighting--835c5450-225a-4282-bcf4-0fdab3d5b6a3", "sighting--6ec51593-fd11-4ab7-ab83-0433126cbc46", "sighting--3c19d423-4bd4-475f-befa-bfedbda52492", "sighting--a7c28e26-fbd9-4ee7-80b5-4d3673d7d833", "sighting--46555668-ff89-4162-af3d-8ba9f8c43124", "sighting--fd9aa092-6669-42ad-8fc8-8ec4f91e0427", "sighting--fbbfa770-51e8-40f2-96c3-7d77ee666cee", "sighting--dbfe4c15-3749-4543-b893-aedb5e06f964", "sighting--d8c3a069-d397-4d7e-87e9-0b05b5aaf789", "sighting--a1f6f95b-3e24-4b3c-989a-6f4b99ab6037", "sighting--ea3c0c06-63d7-43ae-aaa6-5197a34d56ad", "sighting--b88e9023-19f4-483f-95a8-d7abcb3f699f", "sighting--372160f0-d9e0-43a7-bdb6-e56752611a06", "sighting--ae93fa58-a13c-4d2f-bf9b-001ed03cca10", "sighting--ca75dcec-c35a-414a-93e7-0a0f49979852", "sighting--b0dbe6d9-66ad-4e1a-a8ce-a91b8c8a3a39", "sighting--15a63c80-e9a3-48ad-ba74-4371c1a5dbff", "sighting--ca73e212-601a-403b-ba74-3c0123f3c1b6", "sighting--e3d3db17-c0e2-4ddf-832c-4e9c4459ad40", "sighting--60f6912d-753e-495d-adaf-fe3a080d7224", "sighting--c9bb5c5c-1ea7-4b1a-ab1e-de93e33eb6b1", "sighting--56c63fb0-a015-43a0-8de7-343bda51798e", "sighting--9731ce44-b81b-4c2f-ba76-cf02d85f5670", "sighting--2cdd09a7-ceaa-4f59-974f-194d8dc1f001", "sighting--1ca4d124-1f20-4ae8-b26c-4fa9eb388f7f", "sighting--557df3c5-508a-43f0-bf4e-ab3327ab853b", "sighting--135b4f22-d4f9-42e9-8798-aec72dc3bb74", "sighting--ad350f82-88fe-416b-b6ff-d58560ee5b2f", "sighting--b3bd71b1-13ba-4621-889e-8376c9d848f9", "sighting--3f4afdd6-ad3c-490c-b0bd-bdb2d59c7b9e", "sighting--2b0ce03b-0453-4179-8f65-e62d0e6b1b05", "sighting--60482136-9a50-4d9d-9eb3-9e23df1c2389", "sighting--0b9bd5e9-c3de-4968-8cdc-60c56152987e", "sighting--b2cf69aa-4cfd-44e5-a999-28f3e6340ba4", "sighting--e9f795e5-d803-4b10-827a-40690595c80f", "sighting--3c0892cc-57a8-4e7d-927d-dcfd1e8243d2", "sighting--ba4d092f-f070-4345-909c-b7f5a5a93e32", "sighting--3c1f567c-c8ff-4ac7-96b5-1f95b1309f55", "sighting--42051741-af3a-4838-8ba1-535188916da2", "sighting--5528d15e-f29c-4021-97c2-bbca5ea337f7", "sighting--c81a9dc5-03b1-4294-b3df-62824f54c4c6", "sighting--3cdcc3df-e49a-4e33-9a35-98e7dc322eb2", "sighting--14a5259f-2e13-4eaa-b4b9-222e12cedbdf", "sighting--ec545fb4-95cb-4ce7-bbc9-1ae9608c97e8", "sighting--9a3009ab-0e9e-4e5a-8ea7-fc0f22f206bc", "sighting--f0f2f48d-2ef4-4dbb-949c-c1c6ab39e4ab", "sighting--5a98562f-1f81-49dc-8e46-e4686bad82ab", "sighting--a6a2a160-34c1-4f26-9961-00d6138d4fb2", "sighting--c902e3a0-deb8-4bb1-a339-46365f147589", "sighting--62cd7fc0-0571-4cbc-93cf-1d816b6fcbcf", "sighting--fe31ea37-9e05-47dd-a540-4135df78f903", "sighting--27cef16c-71f9-43b7-a2af-d40754dc8510", "sighting--ac70cb6e-a385-42fa-93dd-4b05ff834ba2", "sighting--38d53568-d41e-4cfc-8a9b-65187a9dff93", "sighting--974499f8-aa78-4baa-9856-538b775b3a00", "sighting--5a3a99b8-57d8-4ff4-b19f-d78b2c7415e1", "sighting--35f4f263-81f9-4d35-9b09-9358d9161471", "sighting--3c82bbaa-4598-45d0-9926-4aba5f575601", "sighting--95c36473-d327-4c01-9f9f-abc66323905b", "sighting--fb6e90a9-080e-4502-a15d-44f12def157b", "sighting--fd29eac6-f626-4cf5-9857-967bafcf1f78", "sighting--388a314d-d55f-4820-936a-f80a60027172", "sighting--e7f17a3d-2ddc-4dba-9a39-7c3e2aed7cab", "sighting--50b68140-78d3-4609-8282-37cddbee7ec8", "sighting--37a25e9f-9afb-4dca-9562-5dd6ea0d3650", "sighting--ff9f5a4e-3d8e-4a91-acba-c061061efc78", "sighting--c464f495-b5d2-4468-a9f9-2e24fcd7a7ea", "sighting--54abd8da-9e0e-4876-8779-c2b413be4cd4", "sighting--6d2b78ab-796f-4be9-89e8-82a5a6989bcd", "sighting--4d655976-0d54-48b5-a03e-0435390557c4", "sighting--bb9564f8-1c86-47d5-b6ec-a522cc21e095", "sighting--20fb6275-6ed7-4c77-aaed-a2862eb3da72", "sighting--d47f4ee6-2ad7-486c-b46e-6adf5dd15dfe", "sighting--6ed90865-bff1-4585-a2d1-d6b9635e8359", "sighting--8cc83187-08f3-427b-8d61-db4b68c68f71", "sighting--967088fb-3cc4-488d-a5f7-dbf69c1d89b8", "sighting--d7ed1cf2-ac41-41ec-a8f2-c22d68475e8e", "sighting--f42e4103-d11e-499e-badf-8fcf18d468d2", "sighting--3b8ccbba-7d91-41d1-802b-621fff12dff4", "sighting--0b5eca3f-3725-4548-b37b-133770e4ba25", "sighting--48f9cfcb-bc1f-4eb5-83bc-6674cb3cbc8e", "sighting--0a0cb466-b8a4-46b0-8cb2-60d41de5f540", "sighting--03227bc0-0ad2-42a9-976b-069ae7284964", "sighting--f13ac42e-37f1-453f-8a6e-6141748724fb", "sighting--73163e16-9f88-4f25-9b86-a9c146063729", "sighting--6eb3d178-bd84-4a35-8b06-0be96ad751ac", "sighting--534f9910-4dbf-424d-b0f5-26f610c08b17", "sighting--40cc38e4-c0fb-4d51-b121-aa3714b920d1", "sighting--c7c3f2f3-aaa0-4d9a-a6b4-c12f0dbca922", "sighting--55a0edfd-11ab-4c38-8e6f-4afaaf562655", "sighting--039242a0-f26d-4a4e-bf66-50fc83dbae5b", "sighting--7ce3dd4a-1bfc-41ce-bd86-8d7f1594018f", "sighting--76225491-14eb-4326-a80b-36e82bff069e", "sighting--b5fcbadd-ba46-48da-b939-6a07e4de769f", "sighting--96384269-be22-401a-9e0e-ed60f35ada31", "sighting--daaa07f0-2d0f-48b3-967a-7d28316f38ab", "sighting--7de2047e-ffcb-43c5-ae38-1bc43a6687df", "sighting--cdc19225-eb67-45e7-ba42-5381d5451610", "sighting--52da98a0-eca1-4a5c-8eaa-5eb06b55d85a", "sighting--4674d96c-f22b-43c9-883a-2ea94a0a8f53", "sighting--b2cfd693-7008-45bb-a7b8-679ed0d2a327", "sighting--54490c1f-8162-48d4-a7a2-722cb28e544b", "sighting--4eb8f4d9-0f3e-4a31-956a-e64892d56b9d", "sighting--14aa370c-55eb-46f3-961d-04b6359b2f69", "sighting--af699759-a508-4f67-9d4c-a60e13a6bcdf", "sighting--66d99d8e-96dc-4af1-a202-5360785ac7ed", "sighting--be7ba766-7c74-4cae-9268-d9437cdee8aa", "sighting--e7b3bb72-0d59-49d0-81cf-239e1993fb52", "sighting--903c0717-d3cd-4694-9080-4a18c30e113e", "sighting--26a7abf5-08ef-4675-9d82-7a29de08624f", "sighting--6553efb6-5d81-491e-a6ee-a4acebdd8af4", "sighting--2eb00596-ce58-4f23-81f0-566c44e18e98", "sighting--b1656baf-6126-449a-8dfc-d51ffa500e1f", "sighting--986d64bc-0b5c-4af3-80f8-eac9d743cc8d", "sighting--5f1a0b86-2775-4029-888e-7a657be27569", "sighting--05bada88-548a-4fc1-894e-04f1c2009618", "sighting--4567476e-fe75-4ece-813c-cde216dd3765", "sighting--bcc0fd32-2c23-4489-beff-1996b566f178", "sighting--fbbd28c7-a91c-40a7-ade2-77249d9c91ec", "sighting--3d995dfa-5696-462c-bb57-7d7c34a868e1", "sighting--3af3aa01-f30f-4e67-bcf4-392d862a8354", "sighting--751b087b-a804-4a61-afd9-8a894cfd02b1", "sighting--d383aeb9-c23b-484f-85b4-4d8040481a48", "sighting--60f17a32-d9bb-4192-840f-d42dd7817694", "sighting--d8237a68-3bc0-42d9-a087-b3b46be93b53", "sighting--c817eb83-d93f-44d7-9294-d40fb3437eac", "sighting--568cdef2-c9a5-4a2f-90f1-4b55405c2653", "sighting--190fd536-1475-4708-baea-14f0ff45d823", "sighting--105d77a0-3c1f-492b-a192-4de7854e57c0", "sighting--8429226b-2424-401b-a798-57fabf7ff4d4", "sighting--fcb596b2-302f-4e15-8cf8-7af05f472e07", "sighting--b6625ca4-1576-4f64-ab33-e9ee237c1070", "sighting--5abb2b2f-7c0c-4e2c-a36a-debc0afb753c", "sighting--b4026d0b-c5d2-4acd-a128-041cef65d111", "sighting--8db90e7e-9ed0-47ce-ab8a-19a38cd069ba", "sighting--516cdac1-3c55-49d8-8b38-3f3e4b826120", "sighting--e2bbe0a2-12bb-48b0-9196-65da248eae2e", "sighting--15b18474-91fc-4b94-9564-106f00966a2c", "sighting--d1620a8c-d995-4978-b9af-c9ec4f7b2a99", "sighting--830cca9e-9160-488b-a39b-d097c70839f6", "sighting--da0f9421-5a10-4e42-98b7-c80099b0498e", "sighting--ba9344b5-a2b8-44d6-bb56-6c6995fce60e", "sighting--4a024384-ea9e-4803-9304-2e1031ed2594", "sighting--45a64a64-90fd-4a65-a490-7565b813a45f", "sighting--366b3aee-1646-411b-b910-6f3ddd68047e", "sighting--7b4ab2c2-cdd3-4e31-b85e-4fc965551f09", "sighting--2cfbf5ab-06f2-4077-9b56-4f8db1e0cedd", "sighting--7c36cff5-917f-4444-9699-841442f0e546", "sighting--dae94f52-cfbd-4f7b-af1b-e82a97d87958", "sighting--f0bd9c49-9bc1-45bb-9c89-a6c944cc4097", "sighting--abb1a014-b310-49f9-b786-bdfa2338d1b2", "sighting--169cc334-f01b-429b-8b8e-7acc2ac7ee2a", "sighting--b2080ae9-d920-4da8-90f0-84eebf7b074b", "sighting--087a0bdf-dee3-4a91-8c01-37faf67ee5ae", "sighting--038f0378-dba4-4b7d-8b5d-de40a5b57dcc", "sighting--06e172b5-3933-4c75-a686-0fafef51a72f", "sighting--af3fbc47-4af7-4043-8d44-e61f8d904bb1", "sighting--cdd74636-97f3-4e28-8707-00cf498a47e5", "sighting--5fa4bba2-e48e-4a30-8a02-de1f0c74d639", "sighting--b7cf7d1b-a822-44c7-b1f4-0ba4aecb4d56", "sighting--19465576-cdc0-4970-8f9a-929909070f1c", "sighting--85788f2d-1063-4dc5-9205-fe242886c541", "sighting--198417c4-7b2f-4463-8e75-21405352726a", "sighting--6761556f-56b3-4e7f-b52d-ea100d73326b", "sighting--13027f28-6810-4c91-bcb3-2cf37534fb76", "sighting--86258065-93a3-4700-a613-1dc156459b2f", "sighting--22620788-e720-4704-a628-0d4cc6a94bb1", "sighting--8d64d6ff-1d3f-45bd-a31b-d42e86cabdf2", "sighting--1b689de8-6e96-472c-b840-ff40a07d6599", "sighting--d7e13657-a882-4e58-8898-d1e45b3a5261", "sighting--e00ede20-4662-4a2b-bb2f-c78005c2e376", "sighting--7c0bf5be-4c9d-4f22-9f32-503026cd05fb", "sighting--010a6e40-0e9e-4815-8ace-02bb00ec174c", "sighting--31a54e4e-e4d0-4898-b529-11a4cc2e6af2", "sighting--0cd242c7-0c31-4f05-9fdf-f6128e2be728", "sighting--dbbccfac-1bb9-4ff6-b3e4-c3638e8e4ca7", "sighting--cd709e23-c3dd-48b3-abe7-9d08456e1d61", "sighting--9916fdab-d36c-4059-a0c0-c8a265cc2125", "sighting--bace1d6c-51db-4c62-a5d6-d065a9210662", "sighting--accf8e4e-476e-483c-a485-a34b41c09587", "sighting--d4870cb2-f59d-4e82-b2f3-da39131e6014", "sighting--6d98af2a-067a-431b-8872-b47fabdf7234", "sighting--9d28c56d-f32e-47df-b6f2-f4f2952b8ed0", "sighting--9cda9526-6a16-4424-82e3-01ca1a1f1f5b", "sighting--6c608e97-deed-4998-b0a8-cdbc0e2477a5", "sighting--5f5b5097-80e2-4861-acea-922cb587a9f7", "sighting--07ce5d72-033a-4a27-ad87-4c75838ca7b7", "sighting--a82ac34b-25ec-4fe3-ab91-cf4b76319cbb", "sighting--10d6bce7-6da7-4a5e-8ddb-6dad1a64d291", "sighting--0e8fb747-c96f-4947-91b4-797c4a8b7766", "sighting--bb5035f2-f434-4ca1-8958-66f1e3572253", "sighting--e732510c-0df9-4707-91e7-ef3f880912a0", "sighting--802e1fd1-ea93-4790-a388-175174070372", "sighting--fda2d04a-7d26-41fb-a16c-bb4584b12b4b", "sighting--8a983d95-ae13-435e-b181-386f112bf5b7", "sighting--ac11188e-0a5f-447b-ac36-5f0aa0aa112e", "sighting--cde44604-b87a-4848-804e-233409cf0328", "sighting--80b5a549-b68e-4228-8118-02140d9eccb6", "sighting--1200db6a-651c-4852-b8d3-4872eb2e9da0", "sighting--66c3a908-3205-4051-bb6a-b4a889c1e9d9", "sighting--dfda1dbb-e4ba-42a3-b8da-b3233a1f853f", "sighting--d1a8279a-b493-4bd6-a4f6-99b6d8d15c17", "sighting--481590b3-2e0a-4e1f-9488-b784aa28c54c", "sighting--cbc724f7-e7a2-4ce7-9b33-6e21efed4147", "sighting--6f06cb61-f8b4-40f7-85e9-a92f05eb4aa2", "sighting--37593825-ab37-44a1-910f-15e8faf51033", "sighting--80bd6bfc-44e5-411e-81a8-bb68865eda1b", "sighting--68343176-f301-47c3-b39a-dd97b8875a8f", "sighting--a04018b3-1663-4ead-be0b-ea3bf10e99e6", "sighting--1bca990b-b3d8-41dd-bcea-97da5c2aecf0", "sighting--af37198c-431a-40fe-a4c3-f061c3a61dab", "sighting--66636518-d064-47d9-835f-66b7a16481b5", "sighting--81c59c15-51fa-4898-9157-48aaf0e28876", "sighting--2b51141d-aec9-4556-974f-cd54d0331578", "sighting--bfe8c321-d068-4ec4-9f71-9773fa059b32", "sighting--9b5215cf-9fd5-4a4b-815b-d6fb558d3a43", "sighting--e37ec78b-55f5-4e78-afb4-00c5b2b5f8cc", "sighting--b4cd88bf-731e-4aa9-9e17-cf81941b5a40", "sighting--0adc8431-92ec-4fdc-bdcc-a48b1d428948", "sighting--4104cbff-f5b4-4c6c-8f0e-6ec1d6a558ff", "sighting--3db092ba-2186-4dda-9499-1b6174638e76", "sighting--e3fe6b4e-b8a7-4c2b-b997-6f12c1feb7ee", "sighting--b3ae077c-ab72-446e-88af-fa4c1a9caa80", "sighting--f848e80f-901e-43dd-945a-804ab1f82802", "sighting--70247552-422d-4e13-b725-21a4d5791004", "sighting--224ac9be-ceb6-4134-b1b3-d35451a73efc", "sighting--0d83738c-e63e-4895-b625-450254c236ad", "sighting--128ad301-a846-476c-8342-23aecee3adb8", "sighting--68827cba-23ec-40a2-9dbf-f308dd81e96a", "sighting--ab248207-9783-451d-a461-444110a9b867", "sighting--209373ea-6fa8-42b1-b259-f7b4c1dacec0", "sighting--26ed5f82-12a3-4847-9a2f-0f47b72953a8", "sighting--2c4b8ab5-722b-4d2a-9864-d3d68929026c", "sighting--d3282960-ad2c-49c4-be07-36fc7c655ad3", "sighting--0206385c-f00a-4208-b21d-8173d2663e13", "sighting--4d069d68-91db-43e5-90fb-11dcf0b1420a", "sighting--f43f8019-ab2c-416e-8c55-bc8edeb7f942", "sighting--e5cd0b4e-42ff-4b93-9bff-36ef27348553", "sighting--f2f74d62-18a3-487b-8568-4e23b3f241b1", "sighting--b3118e6e-a0aa-4244-8188-19de27f35036", "sighting--08d7d7ca-619b-4dca-ba9d-5db3b9451799", "sighting--d7d6b79e-2f01-4001-a7e7-628f55a79c1c", "sighting--34b856b1-aa4b-4de8-9baa-282a8eed8531", "sighting--9035400e-52d5-40a5-b0d7-55f932e40340", "sighting--4bbbf4f4-8e70-49e4-8349-440b90a0c9dc", "sighting--41865de1-346f-4750-a9fb-24f24a2d5786", "sighting--9d4d8198-5995-4966-b6d7-8455ff784491", "sighting--c611f687-52bb-4431-bd95-f52f897b9fed", "sighting--f7f23917-1093-48f7-91dd-68607faaa286", "sighting--c0d206ed-bba3-4a09-98d2-9f97616a10e3", "sighting--ad98362a-c9cf-44a0-9559-74dd1cdb1c65", "sighting--b041212a-429f-4a8a-a590-c5ff3a972715", "sighting--d2c89ce0-3d6d-4b8a-a705-d778d1c69c12", "sighting--31034ec8-db75-4c5b-9537-aec02213c118", "sighting--b19d0140-6bc4-4e72-b226-f30f8d4b91b9", "sighting--99ada349-fcef-4f56-b3e5-9f8b278cc6d8", "sighting--42b0a195-67dd-473b-bc73-ae3839c60d9a", "sighting--e1ed5e45-9a64-41ef-ada7-867db24a4ce3", "sighting--b6be4c61-bb53-4e08-82cc-8bed4a455b25", "sighting--413ce5ea-b70a-43ae-8808-89a122150c7e", "sighting--baf2f24e-e759-42f0-9c7d-65be3e6b16c7", "sighting--759b51bd-eb5c-4868-97bf-071355aa65da", "sighting--79ee1b1a-a464-47d8-9fdd-5fa18f4ba07c", "sighting--4cf0ce8f-b3a3-49ff-a99b-f72b3cb4fce1", "sighting--7bd0a75f-dc28-470c-9e27-5049e94843b1", "sighting--571e887e-c4f1-4123-9db2-d7cda6bcc704", "sighting--3954cd81-db4c-4900-9aa0-9e16d2e1cf38", "sighting--78668c30-ac1b-4e04-b5a8-4cc3215eb265", "sighting--64871f15-7f9f-4377-a36a-36ef5d250fbe", "sighting--d644a509-db37-41a3-94d6-c3028f01a0db", "sighting--6279ec37-518f-4e18-9445-06a1354e8ea0", "sighting--f270846b-1148-4a6d-a9f8-0d4f695c27ae", "sighting--9f73da8e-cc87-49a5-9989-d6a95a40f045", "sighting--56024f8d-e3b4-4b5c-a4c8-1cb278068ffc", "sighting--99375f48-2a9c-48ef-8b3e-ab064cc064cd", "sighting--96a25d55-2233-41ba-93f0-f87b204c5678", "sighting--59105eb3-29f2-4672-b930-d0a70c0f268f", "sighting--fbc48b43-82f9-4ee7-a1f7-4830eaf665c4", "sighting--e138607a-42f7-474d-ab4a-67a590eb4299", "sighting--f7e2dc72-6336-4859-865d-4aed942f4634", "sighting--5feee6d8-bcf2-4f6a-8648-54a396f9d63e", "sighting--fafa0923-a834-47d9-915c-9ef6bd66ee6d", "sighting--8da19b29-f073-4afd-b549-7ac00a373cd7", "sighting--2aa60d80-b259-4091-a72d-3182688c885b", "sighting--c80d0998-2d8d-4790-9cba-dd653f4977c3", "sighting--42dfd5ed-3990-4a82-92c9-cce514f6a23d", "sighting--26a5eb98-5479-4559-a5d5-b05fe5f903d9", "sighting--51e49896-0c2f-4d2e-af18-e211eab6fb66", "sighting--e433f8db-c078-447f-99a7-99d6878a922a", "sighting--a1811f52-2021-4080-8326-545e1d30f6ae", "sighting--9b9cc9d8-b421-4401-a4d2-e98e3625c679", "sighting--c209971d-afc2-45a1-959f-855cc1ef94a8", "sighting--6ae07fdb-65d6-4de9-ae8e-f108c92e5f21", "sighting--33ccaa7f-eff9-4500-b2a6-3ebfc29649ae", "sighting--4d282dd3-305e-47d4-9803-43cfcf1b8f80", "sighting--19e54684-e30a-46df-ad74-15a3e44d9685", "sighting--e14a3891-5a60-4c1a-95ec-f8a8701efc19", "sighting--e0c00ce3-7279-4420-b878-3e1e316defb8", "sighting--c62bae7f-d212-41de-967b-265f6c11d980", "sighting--a38f9011-ab8c-4b64-bc41-d9ec1e05fdc5", "sighting--42ab1596-7567-4cbb-ae4b-ee6e6f8634c6", "sighting--83e6c471-8e09-49ac-bc69-9a587c7aee1b", "sighting--0a33c681-32e7-4868-b045-3ebb6833eedd", "sighting--b54cc545-08aa-4753-ba01-003b75b54f0b", "sighting--82158963-7c3c-47a0-b514-d7d73c67e23c", "sighting--85554f53-afef-47a8-a81c-c06c82c283b1", "sighting--cd6ec73f-ce2f-43e1-af83-8b7274723dcb", "sighting--cc5f5d76-d813-4ea2-8acd-ac376bdb4126", "sighting--f0e95831-f68b-4bbb-831a-46b95339e0a3", "sighting--b722d31c-7091-41c8-8dff-40a39de98d87", "sighting--f8c468db-5df6-420f-bc88-a2da10bd424e", "sighting--ca71b4dd-dbaa-4a55-afe2-d6759d2f6b53", "sighting--b61f7b94-b0e8-4654-8ce8-1f0f49bfc1d2", "sighting--3a09a5aa-425d-40a4-aa4c-01f8bc77934c", "sighting--66d66e43-17f8-43d7-b766-78f5cca2acee", "sighting--af786b74-16e6-43a5-b3e6-4b7e9da0ee61", "sighting--1ef31753-dced-4078-a4c8-754110960ae7", "sighting--c1af53c9-14d0-4170-8ea1-69885754523b", "sighting--b62fbbbf-3b7e-47b7-b5aa-68d25ee05648", "sighting--945a5ee6-7ee6-458c-829d-c71edec3fd40", "sighting--c3b63bca-cedc-4c38-94f3-2480b0940a49", "sighting--2a25bce7-99f2-4ed1-9bdf-1a7258b5a291", "sighting--91ec94bd-e4ec-40bd-af9f-583674321883", "sighting--6d280501-3fcb-4d7c-b486-d65ae36ae0dc", "sighting--dd91812b-a186-4411-8c9d-8a9f0b986395", "sighting--a354d599-742f-4b2f-97db-ee967d8e1778", "sighting--d42228ec-73fe-4f9e-8e9d-ad3ca058ef4d", "sighting--0581552a-fba6-41d1-9aa8-244577aa71ab", "sighting--eb46c1be-4ba7-4ecd-9920-f9e67793e55a", "sighting--7e70afe4-c7e4-4727-9400-7367750b83ae", "sighting--70054107-4940-4a12-8e96-a62189dbf540", "sighting--f1d2453c-4a48-4056-b535-97953fda94cc", "sighting--d538e474-62e5-46a5-bc48-54f8524022fc", "sighting--56d6630c-2d32-476f-b72b-0344905c1f31", "sighting--c57f3636-82c2-4d0c-868c-422d0983257e", "sighting--5078d6f9-82dd-4b60-b59f-1259722bbf99", "sighting--f0b76588-8501-4ada-b297-bdc44d147842", "sighting--038a53f2-abd5-49ed-84e5-fc0199c33704", "sighting--b278fc93-eda1-4295-94d3-04b36543ebc2", "sighting--7d5937ac-ec28-47bd-a075-dd0a5ff70b7f", "sighting--d019a9c6-715a-42f6-aeae-2ccdba2b8737", "sighting--60583c2a-a84f-47ce-bc31-66dd1a72a840", "sighting--e7d60600-8b36-4f33-a400-48f332a5bab7", "sighting--70c0157e-7eb4-4d32-9efd-708bc156fcfc", "sighting--3ac8adf1-a39a-4625-a6b6-fb859ffc4f9e", "sighting--8b7f97ab-0157-4628-8b1d-d796e4c89def", "sighting--3c362792-7d71-4d3e-9ec0-ef82be9c81f7", "sighting--6a62cb9b-b467-41a8-914b-ed82a4a8f55e", "sighting--d1078804-0ab9-4b40-b4a7-07f4cde9300a", "sighting--8fe1693b-b063-45e6-8e01-00be5c0cc5bd", "sighting--9c3313c8-e760-4037-ad82-01116b278f9f", "sighting--5a3a7536-01c3-4cf2-904a-1c0741a7be8e", "sighting--792a286f-b6c3-4aad-bfc9-d7dcc25fcabe", "sighting--43f2c91e-4ce1-4d9b-b0d4-fe7879f25416", "sighting--13ade373-4262-4f10-9531-e4e3c59ee81c", "sighting--25afc297-f7a1-41cf-a8d7-a7daea0f1e61", "sighting--d976362c-281e-49a1-9461-1b086406e3a0", "sighting--2679962e-4133-43b3-a8d3-1d7b690953ea", "sighting--cd2f231a-e025-4235-a8a8-6630720750a6", "sighting--2c7e131a-7af2-4000-aff0-9e01a869afa7", "sighting--79a3f68a-c0af-4df0-ac64-ba8c4c746fce", "sighting--e3c723eb-6475-42a7-a39e-27adcbaa6c36", "sighting--9804e6a2-8172-4b6a-933f-29f9f755c442", "sighting--5f3a6cbc-263c-41d7-a81f-5bb4a98aac68", "sighting--af136939-bddb-40d7-8e3a-acec4b01618f", "sighting--50ae9f58-df0e-4d11-b974-d372bf495c93", "sighting--ff2f7497-9ce7-4519-ba1e-77d4092db3cc", "sighting--c7a69bfc-b739-436c-9034-ce7c8064712d", "sighting--ea1eb20b-72fe-4381-96a5-7f9878e6d69f", "sighting--1b26a7c3-877c-4e6b-aac8-7e852f3323c0", "sighting--b253d2d3-1533-4c3a-95be-9c6a12c6d1bb", "sighting--609e6f51-36a8-4fd9-875f-861676b568d6", "sighting--2254d450-0217-4171-aa94-697938ec71b8", "sighting--61acaed9-b26f-468d-9df7-c598851313a4", "sighting--330c97d3-999a-4a43-a164-313b1bdcc7ab", "sighting--64c3769a-9ca9-48e6-b6a0-a17e8f29d785", "sighting--5f38e170-f33c-4485-86e1-e034be1f7134", "sighting--fef2600b-f1fc-46d1-9ccf-80c043124fca", "sighting--b30ab71b-21d8-4b14-814b-951fe01d8793", "sighting--cf7d16fa-df2f-4231-8322-3b6188bc62e7", "sighting--8cbfd52c-cba5-451d-97d4-9c5d641fa6a4", "sighting--62562d9e-e733-4239-aee7-f3a13d395308", "sighting--d23807bb-8a25-43fc-96c0-4b2a1c5f2fc2", "sighting--04e7fac1-bd92-4b4a-a37c-16ea5d05bfef", "sighting--63b32b48-99f0-4112-8c5a-894f5c6f8be3", "sighting--2606cd6e-1034-4057-b0e9-8a9a02ef71fd", "sighting--ba0407c5-b4ea-42d6-bc9f-36e3a8ec1873", "sighting--912964ba-365f-4d7b-b391-cfb0a90e4770", "sighting--b1e39316-c53e-4ee0-9a05-21e8a71c0ef5", "sighting--f4a58163-23c8-4ab3-9a8a-6b0de05386f8", "sighting--09525d35-fb75-4aac-9d2e-0d274f8c9fdc", "sighting--de19dab8-1655-4093-a75b-cc478af73a0b", "sighting--e019d20b-3133-4764-b9f7-e7b2649c47bc", "sighting--0a4e41aa-91fc-44ef-8abe-5db56308e2b5", "sighting--aef4bd8d-4c48-472b-9bbc-de8b24191c19", "sighting--2a00c8f7-7882-4fe9-b772-bbdd8ec7cb7f", "sighting--571fa108-6e04-49f3-8978-f49612ae341a", "sighting--84431319-24b2-4fe7-91ae-914794c6493e", "sighting--178ce837-4c0f-4fa9-8886-7763a35d8026", "sighting--8be253a5-e99a-4c25-8865-f1419ba41407", "sighting--760f5234-803a-4be4-93d3-39cf3ca0f6f6", "sighting--2d4be21f-e207-4dd3-a3d1-95c8bc72d19d", "sighting--37bb5267-559b-47f8-b5d2-a9e605ee0df6", "sighting--3879a5cd-e0a3-4efd-ad42-373f12f7cb9b", "sighting--0e465245-d859-4346-bf9d-367d3faca339", "sighting--129df854-de43-470c-a64c-d6ec175fc475", "sighting--f193a925-671b-464f-bc75-61783e8944f9", "sighting--426b96ab-7132-461c-b2e3-c42cc7234d94", "sighting--e7002cc9-3fbc-4061-907c-0d033c1a1d33", "sighting--f7a0f287-87a0-4392-8103-48b241dc1f36", "sighting--742e722b-fe5a-41d8-95e9-741bd570560f", "sighting--1cfffda3-1fa3-4a6d-b7f4-f1a225b11f99", "sighting--3a1007d3-cccc-4d7b-9caf-55a06f56c0d0", "sighting--d9a20230-2958-49b2-b6bd-4f37c452da7a", "sighting--d3dc0906-d0f9-46af-b2e0-f1ee1c746028", "sighting--de9c3af3-5a3d-409e-89fe-41b0af9a253d", "sighting--0b1f8db8-2ac9-4ffd-809f-c39d89d02576", "sighting--d290eec9-8dae-4263-8c1f-d75779a1a375", "sighting--b26284dd-c180-4e17-ab51-c5e1abf06b77", "sighting--2c2d8a58-4ce3-470e-b79b-18beaa5a28c3", "sighting--2aee6627-5939-4fc6-b5f7-65570196bc3c", "sighting--bce267a2-a8cd-43fc-84af-3b153240eccb", "sighting--a2a46de6-319c-43af-b2d2-da3b9adfe7b0", "sighting--026f621e-5f1f-4eaa-85f5-6c8c6bb305f6", "sighting--b795fd1b-aac9-4cd7-87bf-26ea2686a79e", "sighting--6baffab3-36cb-478a-b19b-6e3e5fbb69c6", "sighting--3d21986c-4970-4af7-ae79-26fe30b6ef63", "sighting--7cce2a44-a2b4-425f-9dea-4959718e60e1", "sighting--feba7574-ceda-48c0-9cb4-8ca3ab519064", "sighting--5599a0c0-9f0d-4491-9ca4-79a3b1aa31f7", "sighting--44357656-3bdb-48f1-b6f9-479cd695b704", "sighting--ce01e6df-77e1-4afb-9355-1b95e2274256", "sighting--44ca70f0-4b0e-48e6-a737-15dc881138b5", "sighting--b461e9a5-ee61-4dd5-a3de-81c627446f73", "sighting--a15b9d35-6e3b-4cd4-9d8a-2439777db74e", "sighting--1e6a7a93-6e66-40c4-8859-326d924a47bb", "sighting--84d58afe-4a86-4c43-945d-45ad3c80ab2a", "sighting--2b27fea8-d2c1-41a0-89a3-46be412f9c62", "sighting--3d531427-dce3-401d-8f4f-5eb472f3b5dd", "sighting--95408548-a71c-4f29-b111-dbbb93cc3ba7", "sighting--318a85a1-a7e0-4122-b9ca-939c4d134294", "sighting--bbba63e9-9952-4a07-924f-ed549e7dd5b2", "sighting--a7c2d36a-a924-4f0e-8600-2be0c051203e", "sighting--ecd0c04f-83b1-49a8-9f76-bc5eccc21e3e", "sighting--d06ed0ac-54b0-426e-9275-7d556ed62c2d", "sighting--32730f27-2415-4495-a2a8-00c78082c5e1", "sighting--3e67b904-f0df-46c9-a9c7-2f825917166b", "sighting--5bda6cc2-96f8-4f6f-a730-37b8a034637f", "sighting--f28efe18-c0f3-4eb4-9526-dd8cf0c98c7e", "sighting--6d7e16e9-ae79-4f0d-ad4c-838b15f1e940", "sighting--fe3b2535-57e8-45a4-9cf6-698fab6fe230", "sighting--5beb0edf-989f-4fef-84ff-5a9d09776978", "sighting--baa5c709-3652-4b1d-a6cb-11c71e13be90", "sighting--3ee5a270-aa98-4bdf-b0e0-998605b680f4", "sighting--dac6e823-e267-4976-a210-c309fe1d3fb0", "sighting--1c1380c6-3424-44fd-9d41-0c0d9fd02460", "sighting--941b7e75-6226-4852-b06d-bb8d3aad5c6e", "sighting--c338ee35-9ff9-499b-8ec0-38bcbcec920a", "sighting--738eed54-c48f-4afc-ad33-941cd4fc2c88", "sighting--78fe03f1-c41d-444d-bd59-5aa0577860d8", "sighting--806eb7cb-bbf9-476f-8062-8b4766d2a9d6", "sighting--eaf799f8-a5f4-4113-9ce9-b78a547648a8", "sighting--cc84736e-0e3f-4a0e-a215-23c5a2d82120", "sighting--c16ada40-6eb6-4a79-a2d1-5a52aab1c676", "sighting--3cc54c0d-640b-4c06-9efe-c1824e22a23f", "sighting--3f28dbdb-8a50-451f-8856-e193b3009282", "sighting--2581419d-3f17-4696-98c6-f566af90c5a2", "sighting--01a31d60-b19c-4543-a8a0-6ee41a19c5c3", "sighting--bc22e0f7-f82f-46ec-93a6-9546bebd9d87", "sighting--45e6f105-6f6a-4aa1-af98-9f5d8cc3b019", "sighting--f834649b-bbae-447e-9d45-8846214a1314", "sighting--528dc12d-2f81-4ca2-8c5c-fe4a00b84e38", "sighting--3f0b9fcf-4597-44f5-9802-113dd3a1b2e2", "sighting--79e2ddfd-fbd1-4be3-b518-4500a58a4d58", "sighting--304304b7-1ee8-4e51-b6fe-f5d4d956bc45", "sighting--a4d9b43e-e84b-4fc7-80c6-6ad0e909628e", "sighting--c00856c5-472d-4ae7-b120-9bfca31af0b1", "sighting--386da85d-b1b8-4250-929d-848aaece273d", "sighting--266da935-af85-4214-bba4-cc9fdc7b98d9", "sighting--e0d7d7c2-ce01-4bd4-af88-b3019da96b54", "sighting--82b995fe-318f-44b7-95ea-8b2eb27ba57e", "sighting--78011d3a-e936-4052-866d-e16236e97324", "sighting--3e68e789-e17e-428f-a925-e957e6c787ee", "sighting--74469ee8-73f7-48ad-ad05-6e2efd597a02", "sighting--2e22e951-4d0a-487d-b80d-f38716b5679a", "sighting--28a71ba1-2b08-472d-83c9-2924f414a278", "sighting--a3c51a00-4295-417f-9268-2a46aead3996", "sighting--620e10af-7db5-430d-b711-56728ad30c14", "sighting--6e32af55-dae9-4432-bf26-1f9cb84c20fb", "sighting--17a3b8c9-0220-441f-9803-e07c473c27da", "sighting--4de94550-b2d5-48c8-9f2d-11ec891c8a99", "sighting--343d6388-1339-4356-8ea5-ceba70c52418", "sighting--331573ed-6826-432c-9d0e-3f8db02f8168", "sighting--35dc3d9e-90b5-487a-baba-933b26cf8676", "sighting--ee46be8c-85a5-4c61-b341-3c05136e0a7d", "sighting--79df8f92-f1c1-432a-b325-55108780c557", "sighting--169b8556-8260-4922-b6bd-5ee8378da6cf", "sighting--3c58f833-0056-4728-8da5-abff127919a9", "sighting--52533c97-7a13-47fc-9e9c-a7b2e5f318f3", "sighting--55cd8469-7629-4693-976a-86df725563fe", "sighting--78c06788-7ba9-426e-949d-650a7b27f6d9", "sighting--4b3c3822-f4c8-4827-b81c-f26edf50f875", "sighting--ca206d0d-c3e3-4354-9d72-fde424cf22a4", "sighting--8f1115c6-4752-4249-ab46-fdd252f7f267", "sighting--54886b2a-156e-4336-9c43-1551abcc9bd4", "sighting--f1be1891-bb49-48f6-98a0-e3b82978419d", "sighting--d1d199ff-27e0-4225-b671-06c721021d09", "sighting--506bb75d-65e9-4f24-ada7-76911d0b19a7", "sighting--42663515-3936-46c5-8eb2-08ff3f50d8a2", "sighting--dda0d246-e292-4da0-89ae-7e34104d65f0", "sighting--829d0d4a-ee6c-4d87-a10d-c3264fe8b098", "sighting--9fed6131-db8f-4a60-bf75-c32e5b1604a5", "sighting--56f085b2-6304-4878-a367-9ce521eca290", "sighting--b4e4fa8f-9ad5-4027-9766-e229e798bd4b", "sighting--7cf51c22-0e65-4454-bda8-986d6f72a6c1", "sighting--3b85b4e1-4592-4da9-8dd3-8b6fa3d0a379", "sighting--80be4b75-931f-430e-806e-74e89f95f9a9", "sighting--56477e69-5afc-4a57-a26e-0cba3ff3abd6", "sighting--c92debd6-c143-49ba-afda-e550844d7812", "sighting--9841b3a8-6381-4d86-bf8e-7ecaf6038a4e", "sighting--c94bda63-0b6c-4fa5-b800-c23ca8ec3141", "sighting--8ddbf493-3252-45f4-8f6c-a5fad9b40dda", "sighting--6066de3f-ec0a-4346-90dc-7b805ff70e0d", "sighting--08c66701-8f1e-4146-9db7-cf12a04f6703", "sighting--c487e29b-39b9-406a-9c6e-316dfc71ede8", "sighting--a77321a7-9a1a-403b-aa4b-9efba22e5d9f", "sighting--00dc1c48-bb1a-4cf0-8087-a537e2e5dc8d", "sighting--eedf179b-7e98-4542-a931-0b905e924ddb", "sighting--4b988ff3-d471-45c2-b399-5fedbbe02a0f", "sighting--719b29bf-3206-4c8c-86e0-1a897583d807", "sighting--86b46e0a-3d86-4dc3-bed9-f194336326b6", "sighting--916d551d-0132-40b1-8611-0dbec0a72088", "sighting--623489cc-a486-48b7-8537-b7bedd78cf3c", "sighting--a7ff01b1-91b5-44d1-a608-168e13f96290", "sighting--b600493b-22b4-46bb-a475-c5ae030f1192", "sighting--f4105364-9c73-4338-9ac0-d72d92c7e5ff", "sighting--83e130cd-a7ee-40b0-96b0-f915347f2351", "sighting--d39d6bc5-7704-42a5-b2ac-17c2f5906cfc", "sighting--4ea4ddf4-507b-44b8-99f7-073df1e2449e", "sighting--6bae5ea6-98bc-427e-a3a4-942036bd199e", "sighting--c9b975a7-7f21-4163-af00-051f65ae092e", "sighting--98c90356-60c0-4293-ac23-8210f30cc1a7", "sighting--14120bda-04c3-4721-945b-4ac601fb9345", "sighting--1f7583c1-028b-4a02-89f9-989264dc276a", "sighting--223705f2-3930-4674-b71d-affedbbbaf49", "sighting--7fb21aea-c58e-4b2e-a272-2aac9450873a", "sighting--0ac5e5d1-8083-491b-8383-4589b9152624", "sighting--fffbbae6-db82-4a5b-90f0-17eb0f28b098", "sighting--16e1d045-6628-49df-8776-4ac2cd250fc2", "sighting--d26a5e0a-67ee-43b4-af9d-506253a66c53", "sighting--53c40c8d-2f0e-4ae9-be82-0b25b51722c5", "sighting--e34c6739-44ca-4e52-9e65-6e04510e8bee", "sighting--d9fb819b-9d2d-48d3-ac43-63c5069ccda4", "sighting--1325adae-2bdd-48af-aa5e-118410ef06a3", "sighting--f6e80ca3-05fb-4282-9949-ae3f822b9fbf", "sighting--7c0f8482-40fd-4da2-bb81-a2f2c51cd36e", "sighting--570c38f6-6315-484f-8e78-100f0fd1bf54", "sighting--de055eda-9895-41a1-9acf-8252fa231d53", "sighting--2e73dfa4-e53d-49a3-b50e-0aa768df0619", "sighting--9e62e5b7-4fa2-4398-85df-8f9b7152936c", "sighting--808144c6-5c57-44b1-ab9f-1999c6b681ed", "sighting--83af0241-e973-4e9f-9430-5591118b2393", "sighting--1e34f368-00fe-462e-8722-ec2dd32f4750", "sighting--c95deb93-9c16-4f2d-8b7c-761e47a69fc5", "sighting--5bac9b26-9707-48f0-a765-9a6c37edf580", "sighting--a029703c-1f22-4c1c-8c0d-117de95a886e", "sighting--1316c561-f698-44a8-a2cb-3b6d7d2f1c34", "sighting--1414c9b0-5c1a-44b9-8d01-224e949bb0eb", "sighting--9abf7cf4-a4fb-4b97-b2f8-064ef0d97400", "sighting--9b91f4d8-25bb-410b-b8fc-0b88ccf62d65", "sighting--52597d3a-870f-4a18-811e-044f5ac01faa", "sighting--5503eb1f-283d-4145-9382-a4e162332c01", "sighting--313bb8e4-ac7e-41be-8b9b-b35fd2b88efa", "sighting--ba145b8f-35b0-471f-b833-0e37975c7063", "sighting--5b9139e1-fcb5-4142-ac98-2c877c325aed", "sighting--3d11480b-e4c1-480e-b929-8006337cb59a", "sighting--503daea9-0bb4-4e7f-b457-b740ccbdf817", "sighting--3752e748-a1a7-49eb-9d0b-1002fe14920a", "sighting--4019a9a5-1d15-4511-bb03-bb7c8f2849ff", "sighting--efdab573-a8b2-4ae5-8b3e-942897224695", "sighting--a24a21b5-014a-4ee2-91cd-d0536a184cf6", "sighting--45dab385-3b17-4d71-a9a6-e8294ce2af51", "sighting--60fbe360-6108-4a1a-b1f7-a22744d5365b", "sighting--17fb821e-ded9-426a-9ee4-95fad4ee2c54", "sighting--5a436944-3fd0-4c22-86cb-a59faf645c4e", "sighting--d3302548-1c3c-4579-aee0-75c30354c41e", "sighting--01357129-0713-431e-bd70-3a816b5a2d33", "sighting--e84d94bc-7134-45ce-99e3-15d33393f5bb", "sighting--fb82af8d-3772-4a35-8b8e-99d388a871b4", "sighting--a9fa08e7-85fb-44cb-9f03-f569748b7d81", "sighting--37a96e4d-b881-42fd-af78-f84516af1953", "sighting--8db7c209-3b25-4d94-9fad-2d0904c26b89", "sighting--1a454987-1ff6-40dc-a7e1-72d742e4f28a", "sighting--38db3ddf-afc8-4d28-9305-b7aff178fa45", "sighting--44e874c5-b462-452c-87a0-b555de624822", "sighting--a631cea8-450e-485b-b77a-a6d73bc0a332", "sighting--3d9f96e5-c30d-48f4-97ce-8481a18f5f38", "sighting--0d93f414-89ce-456b-9608-ad986ae7f7bc", "sighting--5ed1c6e4-7a03-46ed-a392-d5e8d92f109d", "sighting--ae2382de-27ab-47ae-95f9-7a20f646b90b", "sighting--a26d0cd2-b0b3-4de9-906d-4cf133359a12", "sighting--955e5bba-6842-4815-bcba-d118dfd338ad", "sighting--f580ab70-a209-4d83-84dd-847db83eb613", "sighting--6e93c745-e08f-4218-a31c-eff2d614b448", "sighting--dbef90cc-cca1-4f79-9c43-a78a46041faf", "sighting--3716062c-6d34-4d9e-9a37-d45a992f9a38", "sighting--f344e033-3d8a-4ae0-888b-a01e57fcb0d5", "sighting--93f72eb0-612b-4eed-9c20-13692464eb18", "sighting--452a2386-05ea-47b6-9c46-adc2c938c46e", "sighting--5a71b889-889b-409b-91db-961d6cb7b36e", "sighting--a7509c23-2e0c-4a42-b002-56bc036704fb", "sighting--c576158c-1ce3-45b9-a193-d26b9b4240e5", "sighting--aff438e5-d1fd-4241-ba4b-7c4253f6f3fa", "sighting--5a28a30b-ec15-404f-a97a-c214340c65f9", "sighting--e6dc39d9-b970-4d23-87b0-2d074092c477", "sighting--ff7eecf5-bd62-46be-9355-a27aa8771b2c", "sighting--eb97fd58-cbd1-427c-ba38-bc5e8b2b06be", "sighting--8a98abf4-4689-4212-bc2f-9530bd7d6bbf", "sighting--df1bc714-c317-4456-92a5-5b49f2aaf40d", "sighting--230d5ac8-7f3b-49a8-9f6e-c0efac3771b8", "sighting--53e7da33-ddea-4704-806f-fa3f9818e7cc", "sighting--eae550a2-6010-4184-83ad-2763748ecec2", "sighting--71e22be9-5b1d-49db-97c7-7e954a8fa8c4", "sighting--500c7f71-8019-42a0-9ce7-124bfdea3b46", "sighting--c454e026-9935-4c99-aa86-46a4d5b80c31", "sighting--eeda0f0a-5ce8-4f03-a803-0d2d6dfe485b", "sighting--8dd62862-2296-40bc-991c-2b21c25f0b9f", "sighting--b14ef3bd-9dd5-41bd-88a4-e7897c25705c", "sighting--18c4b6e8-b9d4-449a-bb12-c6d5b6eb07c7", "sighting--d4ba0283-5ef5-4e78-a17b-76acb9b1eaba", "sighting--5f1b3525-9efa-4de8-9a0c-a1f5d9a85ec4", "sighting--52229499-5d69-41c9-9115-7d56b024dc94", "sighting--adcf882b-af37-4cbd-bc7b-112054834348", "sighting--e2335607-bb11-41ed-89a0-80dad54b2d30", "sighting--09545d7a-3934-420e-b3cf-564a9dc40982", "sighting--d5e2380d-37d3-4ef1-88c4-99389bcc6767", "sighting--e938eed5-c76a-4a7c-a6b9-289c49fed486", "sighting--426e79f5-45f2-478c-b97b-949c1a8681c7", "sighting--86302f4d-e3fe-47a2-b145-c1d90659841c", "sighting--2afb9b7a-328c-43b5-afe2-17547a1db9e0", "sighting--7f4b6bdf-cc6d-448c-a7cc-ef1b606a428c", "sighting--30d600d5-a7a3-422f-9c6e-349a84dbfdf3", "sighting--9c984dea-3e79-4f49-83e6-200db0cf7fa1", "sighting--f683611f-c526-415c-9980-4946ee4ec2b6", "sighting--936e1914-415c-467e-925a-389b8ef344f7", "sighting--2b6a6105-f4e7-48ec-9b0d-26512911bfdd", "sighting--28e9bf03-50d4-43f0-8830-8d8d6d82468b", "sighting--5265e314-fe2f-4ea0-a59d-becce52b7351", "sighting--12587ae3-9b04-48f5-b3a3-840037f05e57", "sighting--f40abe3c-a45d-4412-b68a-1d242ca0525e", "sighting--22103271-b2b0-46e1-aa9b-ace6dd100c58", "sighting--b7105892-5188-457d-8d72-bf6190834f06", "sighting--7534fada-1afd-4eee-9efc-90b9e77595db", "sighting--ee489b72-d6e2-434a-8d8a-fca1800a4601", "sighting--21a8c8e9-79fe-4868-9e11-1d26a740a7c5", "sighting--7e28060d-770f-473e-a18d-48b2305c2bcf", "sighting--6b74ad1a-5970-4d96-a58c-365df199fcf4", "sighting--e2f336ae-7a15-4950-b72d-e3cee326b855", "sighting--c565267e-ba31-4330-8af3-703661d5ff2b", "sighting--a09730d7-a756-475c-8bab-2b47181a4779", "sighting--1fa4e291-4ef7-4c23-967c-af376cb9ba3a", "sighting--1333c881-0391-4208-a42a-e729de8e915b", "sighting--faaf698a-b28a-4a87-902a-932f49bff491", "sighting--c2a724eb-d34b-4e04-b522-43d413670403", "sighting--cdc444c4-f881-46f1-bc03-869a27716dc6", "sighting--9894ede7-83c7-4135-bf81-92e19315fae5", "sighting--8faf2087-ec67-4e62-a046-8a23860c0a4e", "sighting--85656ee7-4220-487e-801b-d3f8bd5bf967", "sighting--d85ccf8c-da7c-4bc2-bb67-a45b4e637e42", "sighting--301647f2-dc30-4d35-ad1d-8ccafdae4ac7", "sighting--cce39891-dd04-467a-b872-197e15294aaa", "sighting--554cc8bc-fb2f-43e2-a570-d10d7cba0c86", "sighting--821f251b-49d1-418a-a3f1-bc979943b6ed", "sighting--3584eaa4-80c8-41a5-8dd9-bcec1e511280", "sighting--2c513300-a886-47f7-9381-1e34339ed2e0", "sighting--7a70f364-4a5a-4dc8-b16c-11125b310b55", "sighting--14846b1f-3d80-4048-949a-baba8023f0dc", "sighting--63afcc40-5569-45bd-9f53-801acd9cc839", "sighting--9f004799-1e4d-4c00-b77b-532c7a4f2c81", "sighting--baff4e71-bf9c-418a-a5c0-8322208e91dd", "sighting--28c69da6-6f0d-403c-af14-96619d81021c", "sighting--9cb2bdda-4b8f-4d10-b2ca-7a3ba2903a1e", "sighting--2101a2b5-68a9-43b8-a1a2-75688fb01d6e", "sighting--473e5411-bda5-4e5e-b5ba-4c85a9c16bc5", "sighting--bb16d5b2-e744-40d6-8a13-c203ffd68164", "sighting--4190c9df-3ab6-4eff-944f-20735579cb30", "sighting--01f867c3-478c-4961-8ec6-ca7a9368e9bc", "sighting--4a592d23-a52f-43fc-a05d-04d14130587f", "sighting--6fda08c9-8cdb-4618-9633-fb5bbb9f970b", "sighting--bdb2798d-dd01-46b6-b88b-e111bfff18eb", "sighting--53c8a573-6135-4f74-ad3f-69a40799b918", "sighting--eba6a61d-9a3d-4560-86d1-b242600572ad", "sighting--4960aa11-15d1-4d10-85b9-8f7073f0a951", "sighting--06457d93-7662-42eb-afc6-1a734ae4baf3", "sighting--e8fd1af3-d261-4399-bb8e-6345263d06b5", "sighting--180efa56-f9f3-40b5-a175-fad3cb5bf711", "sighting--bca89791-6a7f-4ad4-aac7-de431bde5bd5", "sighting--048216fe-4320-4e5f-bc38-9fda4765e2ed", "sighting--38ee1c83-78fd-4ff7-91df-bddd21bb1c24", "sighting--57ac7065-3cc1-4231-a179-0300d8ce1232", "sighting--74c338b4-f5f8-4aa0-a56a-8733ab264e33", "sighting--0ff130f0-d9f4-4099-be77-bc5353e8ac40", "sighting--e6fcbd7a-cda4-49a5-bdad-bbf67263fefb", "sighting--7e7f53b9-cc95-42a6-ad0f-73ae155961b4", "sighting--5fd767a4-2542-4b06-90bc-67093ac0722c", "sighting--20185975-a13f-4b01-83b0-8a9cc911de28", "sighting--33015738-c777-490a-a5c7-0aae9722d207", "sighting--7e2f46b7-93e5-45ab-8211-dd109eba59eb", "sighting--badf6c3a-3682-4b5f-ab9e-b5be0a62c1a2", "sighting--7607c617-af8c-4bc2-a51a-72b90badf3a3", "sighting--dcc3b816-30d4-4ad6-a201-cfd025173dcf", "sighting--669957a4-0990-4c88-8581-841fc2888bd1", "sighting--c9060274-370c-4e79-84bd-de4eb139fee7", "sighting--9eee46f9-a693-41e8-98a9-6ef165d1bb33", "sighting--d07cacfd-a08e-4da4-b38d-335aa5c14f84", "sighting--cd071f8c-2c08-472a-9ca7-95be0eca7410", "sighting--6b822e70-b41d-4736-a2d8-280fd7b49b41", "sighting--7436e502-959d-42de-9061-b71c69b78e34", "sighting--46e0d5dc-c9cd-476d-a05e-2c72555a0907", "sighting--04e0312a-00ea-4cb2-b568-0781e5997b85", "sighting--f779a423-e1e8-460c-96f8-5230f00b04ff", "sighting--efdb133b-77e5-4339-ba04-638e6448bba9", "sighting--c9e62bf8-11dd-4097-a5a9-a34349bb216e", "sighting--9f66abde-0272-4881-9f4f-8082e3409433", "sighting--8412128d-5457-458d-8240-890026996037", "sighting--e1130b87-b86b-4f86-889b-42a99ea0e093", "sighting--095c95fc-c1b3-4de5-b3e7-f2f1bb65aa62", "sighting--953d2280-a8bd-4965-8fe9-82df7b45d0ce", "sighting--0eff0af9-06fb-40b6-b436-ddc18f1926c7", "sighting--2a83a4d8-8af7-4ab2-bcfe-d7d464796353", "sighting--d8d9101d-a583-40f1-9353-6406282f5b47", "sighting--d5056ecb-1953-45a8-b707-2ccf3914dcfc", "sighting--94ea734c-0889-4f7d-ab7c-33b77187e5d9", "sighting--9f1227c5-a4db-446b-a65a-4f95fd1adb47", "sighting--bdd52641-5ac8-401a-93eb-b421592bf641", "sighting--a41e9b88-cf43-467c-b3a9-2ba75bfda40b", "sighting--065ba243-6d54-4443-a210-4686c07f9815", "sighting--d29e6f2a-e67c-4104-aa1b-d5fd84e8537c", "sighting--7cfc9328-000a-48db-ad48-dcd515c7851d", "sighting--aa48b51d-1cb2-4973-8aef-886d15cb7820", "sighting--4f93b6f4-d4cf-472e-8587-335f7b95b873", "sighting--f9b381e5-33ff-40a6-8d30-c122ea4690cd", "sighting--0b82df0e-23bb-4c2d-b1ac-9509aefb30ab", "sighting--cf8f8b8b-869e-4ccf-ad47-37f04d89d373", "sighting--0d6021da-a099-48e0-87fb-12b1961ac6b2", "sighting--fe88f93c-21ad-45d8-9d06-aa8872cac8b9", "sighting--fb8d4706-b6ea-4d1d-ac7d-518b6a9fc828", "sighting--ad1e808b-ccf4-4c9a-8f9d-e00f86a43191", "sighting--9aeabb5b-1d89-4db9-a989-d9facc10871e", "sighting--e09d2edf-dbe6-4b92-bda0-ebb5b6e1b9ef", "sighting--9224c440-378c-4d5b-9edb-5c759ff3b8e5", "sighting--07e52f69-d4c0-4df9-aab6-c624a3ba817f", "sighting--813f4668-7b16-4389-9d3e-4fbb47edacc6", "sighting--71c34eac-2c8c-4892-8076-b91703562553", "sighting--d39c1912-102c-486a-8263-b5edb98015d7", "sighting--a49b11ee-6061-4b0a-9f51-7dc837f3203a", "sighting--092f3002-424e-444b-8abd-92d82408e697", "sighting--03cc0a0b-7eee-487d-b578-bcd24a0b139e", "sighting--a2261008-a2ac-4451-b035-4f4eac9e5b5c", "sighting--0d580eec-ba47-45d7-84fd-ecb96149fe9c", "sighting--9941f34b-359d-40af-ad84-d728287a9bc9", "sighting--c031ecc2-bd44-43f4-bd7a-a91c5b046667", "sighting--4d2c6a12-5213-45af-b4aa-afef84a2cd92", "sighting--54a64c7b-cf99-4993-8c91-602a2ed322a8", "sighting--0e8c2113-8960-49e1-8525-b107f7e4dadb", "sighting--d5c33bad-f8d6-473a-8139-8682a296f882", "sighting--b3bc9079-fba1-48c2-b876-b450789ee320", "sighting--dfb18c9d-5695-4c7b-9abf-db2dd96d6fc0", "sighting--a9ef15c8-a282-492e-8c92-30453dacf34f", "sighting--f5763b10-bee8-421d-98d9-f53c66c6c86b", "sighting--a853d9d9-8e39-4568-9aad-6a44071c2d40", "sighting--ea3f4115-5fce-442f-a634-5280ae3df7e4", "sighting--a73e4763-d021-4822-a5cf-371f6b05e1f3", "sighting--588a836d-8733-4c36-99dc-e357cb974746", "sighting--dddecd39-711c-4e48-99d5-752c12f3e132", "sighting--08a8ca62-c327-4ffd-8340-956041c54d2e", "sighting--823bff01-b3ef-4226-953a-8c3c090264a5", "sighting--43d2a1b7-ff8a-4ea2-907a-e27ec0cac5a7", "sighting--aa75b4cc-d313-4c2c-bff4-bcd5f04620dc", "sighting--cab530fd-9d48-4bf8-90e7-61f09c95d03e", "sighting--db46f811-3dd8-4727-9bfd-955b6550040d", "sighting--7a49b4e7-9a6a-4769-a2cb-afa76fb37aa0", "sighting--421b18e0-0a44-47d2-b7d8-9d3f5e0dd324", "sighting--8817ac6c-350e-4156-9ab0-48a0841aef59", "sighting--ea7dd834-8add-4990-8065-12080a4d2f2d", "sighting--59a4697d-5b53-43e9-b40f-fa69a01ff9a4", "sighting--24732a19-ebf3-4979-8869-9c4d2826781e", "sighting--796443b3-e392-4904-b18e-6acfe8a942e3", "sighting--d1e44e9b-cdbf-4f98-a847-3c1e7fdc7859", "sighting--7330a85a-2994-4764-8e7e-3802e8de2fa7", "sighting--0248457d-57d3-4d1b-a34e-75e7769dc604", "sighting--656fe452-383f-47c9-ae4a-9303e7305c1b", "sighting--3467ea17-a80e-44d8-ab7b-9f40e045c9a1", "sighting--26d6cae9-7157-43fe-9c58-245fb7f90e31", "sighting--a90d4662-2be5-4247-89ae-d9dd76ad91f5", "sighting--36277ef5-300c-44d8-8b12-fa7404078ab5", "sighting--66646e19-84b9-4989-b096-c17bb4eb90c3", "sighting--06ae3a1d-e0bf-4025-9d20-e38363ed4dc3", "sighting--37355bd3-8881-4479-8203-99659869ce30", "sighting--6031bd5f-814b-4961-972c-2c3cdaba8491", "sighting--5bcc11bb-64ea-49f4-a6b6-ed024e4abdbe", "sighting--002feb6b-388a-41b0-b3a0-d316bff7f23d", "sighting--e24ad0af-24a9-4d77-b240-ac6e662aa01c", "sighting--9052c63a-af42-48ca-b3f8-71e23c352653", "sighting--f769d507-840c-4c40-9e26-1a40e043c886", "sighting--ff88be13-2d5e-4162-b448-f37a82a4967f", "sighting--2eaa6b40-44c6-452e-84ce-404ac8a111d4", "sighting--07e61564-1134-4c99-b4f5-959333ef30a0", "sighting--985001c2-ea8a-4722-bafd-fbc1c2d782bf", "sighting--fba1aca0-fc8f-4fcf-a57c-d6f34c5140be", "sighting--92558d31-931a-48bc-b92a-1ab1084b2dd8", "sighting--cea2aced-459e-4c52-a7d0-bfe154d0c9b7", "sighting--4cfc07d3-7e4f-47c2-96cc-9402f822f31a", "sighting--e4f7f564-34fd-4fbc-b7b7-a38051f8bb3f", "sighting--e7de60bf-3cbd-4e13-87c0-83b1b24c5e13", "sighting--47d7aaaf-19fb-4b6f-b50f-fea8607255be", "sighting--aaea6ff1-5938-44c3-8439-cd3a7ef2d540", "sighting--2cdcffdd-2075-4716-af2e-0745c3a46679", "sighting--9ff6733e-efc8-4a74-b7b5-c5c4345a2dd7", "sighting--eca61ae2-1610-4b96-a8be-04c4bb27cbfd", "sighting--fd987890-891e-4855-a4aa-ff1ad20bf37d", "sighting--f99070f6-8b2b-4930-b003-264a7c9b7aa2", "sighting--cfde70c5-b422-4f93-b8f2-4313f1259c15", "sighting--4d2152b0-604d-40ee-bdf5-b56eae58293c", "sighting--b49cb341-b65e-4d17-a8f2-c4bf03604ab8", "sighting--014bbae0-d2e7-45ab-a4b3-ce8c569082aa", "sighting--50cd4734-c43a-4ff5-919d-a5edf572bdd1", "sighting--5d89bfba-16c6-49f8-a425-1c3dda067a8f", "sighting--a7dac5a4-c51a-42ea-b0a2-90a5509b3fb7", "sighting--33057559-4d49-4aea-b9b2-1a6cdbc4180f", "sighting--209899aa-58bf-44e2-a49f-94d5a0bc4428", "sighting--2e593cf3-4798-40a8-a006-7e69a9b12020", "sighting--7cd1da73-2e8e-4b6c-8a33-5ad8bc08864b", "sighting--8db75d67-fc41-4127-bb65-84dbe3747e3b", "sighting--786b8425-4c06-44bf-8603-8f19713c274f", "sighting--5ae06dc2-3d8f-4583-aff9-6c462eb7cd5f", "sighting--295b5b96-3e81-4d91-b473-996527696430", "sighting--66a95806-7002-47dc-8063-ba719da57e00", "sighting--9fcb17d3-17ee-4f7f-9a01-1a0e8da2eb07", "sighting--c879655f-d4bc-455e-ab91-47727942462c", "sighting--3d9a607a-1c36-4010-979e-e2005162ce93", "sighting--ed894a71-e0a6-4b9e-abe6-014e0b8029fc", "sighting--371ca859-792a-4195-bf0a-68016243c065", "sighting--37966047-ee1f-4cf3-9744-1f65048d9229", "sighting--1122e86b-1375-4355-917b-493c5a6ac5d8", "sighting--315e3f30-d9e6-45c2-b132-8a383eabc935", "sighting--56071ca1-4a2f-4dcd-ad4e-6142a0ebdf15", "sighting--042a032e-ff95-4664-8f2d-21fc0ae2cb2a", "sighting--c8e4af96-2725-4fb0-a276-4e41eddfa38a", "sighting--1f81e744-2c07-4bbb-8880-59d8e10d5b27", "sighting--5b98f433-8bf0-4f9e-96cb-7febf38711b2", "sighting--1ac43f3b-0799-4252-8b00-ad46edcaeff9", "sighting--a6d484d6-0652-400f-b036-13ea83540981", "sighting--925a92f1-0c86-481a-a54b-8ea15eeac92e", "sighting--02b5394e-f313-4bd2-9d0b-4f4f4f5b8432", "sighting--c032f985-c3a4-4222-a83a-d9a607e1fdba", "sighting--35ae0564-d29a-4de7-9612-58c816e42b9f", "sighting--89627a1a-a8a6-498e-8853-49611005b696", "sighting--49a9da64-ab91-4ebf-b7c7-47645955f957", "sighting--ea44bc7a-3747-441f-a2df-dd7ebeb4085c", "sighting--a706d51f-aaa9-4c9e-8743-fabf7a3d596a", "sighting--3583b766-1115-404e-979f-2f7dfcd27fe6", "sighting--fe439436-6ef6-4987-b9b4-16e6600c6144", "sighting--2063fdcc-a190-46a8-801b-233056481c80", "sighting--e1dcfc63-82f9-4536-9b5f-90132d756cec", "sighting--4c7dc849-02ec-4844-9e1b-f69be2f70843", "sighting--7ab39cfd-3a9d-4044-be3d-da89608b197f", "sighting--f21f0a14-2fdf-4ee4-a6f4-6df89980a7b1", "sighting--a70818f4-3b48-4de7-b583-ae1cb5d3c42a", "sighting--06ad7f21-03d4-4f3c-ba59-11d56ae38f95", "sighting--922c4b32-91c8-48c2-af13-99c9d09a8698", "sighting--fb117c35-a66c-4fea-9530-674eaa4488fc", "sighting--ad4024fb-0883-4de2-941a-638e8d3f6c76", "sighting--cc1c2e44-47de-45a6-9497-5ed809e5f851", "sighting--6d4f562d-acad-46b4-88cd-09e5badc9fd4", "sighting--332b9e6f-f5cd-43b4-95e0-35ecffbfc392", "sighting--b4b6c0d0-e945-4de1-9c86-8eba5b940120", "sighting--c5ae0273-5921-47c6-b5df-64d3e0506325", "sighting--d1329122-91cd-4f7b-839a-53619ade7d13", "sighting--cd5f5899-b495-4b23-8473-b8ff350fec35", "sighting--b51ccbcb-7b9e-43e8-9cf4-5909b26a3452", "sighting--f70a8394-615b-44e3-82df-e4d5a730ba4b", "sighting--163ce02c-4d93-443c-95d8-5506edb7efc7", "sighting--44c45ea2-5665-4bec-b480-e516f3d8c091", "sighting--9ceb2225-5fd5-4a86-b383-8df00c7f56a7", "sighting--a4a4a6b5-0106-4969-8be6-936b08f1d324", "sighting--df0f2af6-f0e2-487e-a3cb-f838d088035f", "sighting--390d62e7-d7a5-4aa5-910b-bf8734cc070a", "sighting--4e948636-bf3b-4107-8c4a-c649fe47ad01", "sighting--d675ee13-0069-4626-aaa7-e3a7136ba1af", "sighting--8396d1d0-e68e-4208-953c-448e658a4735", "sighting--b922d631-8365-4102-9238-4fd17bfea3ef", "sighting--e3e8f1f9-e155-4730-82d9-ca89f5d7298d", "sighting--b10a8745-5b4c-4741-bef1-38efebdc6997", "sighting--f7208c24-8efb-45bb-9ffb-d79b0fc1410f", "sighting--6a70ad62-aeef-4ef6-ab35-187a29fffe24", "sighting--f8a2dcfa-d840-45d8-9bf7-be423532fbce", "sighting--4e1dd71b-0cf3-4c90-9b1f-bb9756f10be7", "sighting--4bb2413d-2105-43c9-8d68-64ed24dfcdac", "sighting--4e61eb3f-0c0a-426e-9a1a-8456f3abd74a", "sighting--94179427-fb2b-4574-aeda-c7e5a5c8b41c", "sighting--0bd43133-09c0-4fcb-bda7-f982c433e4dd", "sighting--c0c1d9d6-bde8-468d-b065-58a3c4885b03", "sighting--a328108a-3b73-47c1-9fc4-826285ecacea", "sighting--8103190d-6bfd-43cc-88cd-33845deab86d", "sighting--90068490-7da2-46c3-aaad-b615c70fb8b8", "sighting--361f07c3-7e54-4d02-abb0-454288dee3cd", "sighting--de711a2a-4e1f-4e71-a8f3-fa2266fc7982", "sighting--f5ab84a4-538f-49ba-81b9-5ffde5d4dedc", "sighting--376844d5-5ce8-46f4-b787-9a0e5651f8b5", "sighting--0b80ebe8-a1ae-457c-a789-edcadb7d2260", "sighting--7e4b395c-0637-47a1-b52a-270ca9f5a1c6", "sighting--37986f33-3a9a-4545-b345-91208c6d083c", "sighting--bb1add75-a5e3-4443-8ad1-562bbd64ca86", "sighting--ef4abcf2-6f97-4279-a91b-0a3c8afba2a8", "sighting--9602bc2f-b12d-47e1-8754-74eaace5febe", "sighting--d0ac7aeb-9195-4f78-bc7e-7001fb30e987", "sighting--9dbde2fa-adaf-4e47-be19-01408770dd0a", "sighting--9370d3d0-c47f-4ecc-a1ca-34d9aa7c30b3", "sighting--df7190c3-10d7-4842-85fb-86aab7ad9f73", "sighting--ecd2f42a-4acf-406c-8cde-91c7b8aeb548", "sighting--b5f51969-e72f-4cb7-9eae-c753ab3c234d", "sighting--f7484c7e-6d7c-4307-94f4-175f0598771e", "sighting--500e8185-3248-4921-9f50-cb9b2aa97c6d", "sighting--36db61a6-e00b-45ed-879b-9143c5e642b8", "sighting--8998b2b1-f578-4eed-bee8-66300f4ed272", "sighting--d1441ec6-7b8b-443b-afb4-04e474f5ad23", "sighting--a865711b-7445-4859-a0df-8b28c85725c4", "sighting--b7a7eb76-7aee-421f-a592-ca67cd05b9ab", "sighting--7d834bcd-5cd9-4403-9148-13adfcc1d8e8", "sighting--b7b45633-9e7a-4410-8754-c517d0c92506", "sighting--4f4d274a-4bfc-40f7-baa3-30dc7543047c", "sighting--0b51e156-3869-4e73-96ad-0a55fade6c93", "sighting--83d94505-423e-4a2d-8d59-3fc810ebbee6", "sighting--8183887d-7b5b-4bb6-ae81-b2c4a46db40d", "sighting--d820b327-5e67-45f8-9866-364b03cc2742", "sighting--d7f9cfdd-6938-418b-9020-49bba0b9c68b", "sighting--e43e3d63-5f44-41d5-97ee-844ba13ed163", "sighting--1ec20386-d3b7-4479-95e7-41f750d3c747", "sighting--8ab529f6-3a93-46ae-a4b8-7cec2c3aab71", "sighting--8d4aae09-b42b-4a7e-bd17-c39aaba22aee", "sighting--7ea2c01c-60e1-4e20-b7f6-87524d061fa0", "sighting--f4963ccf-2016-49d4-821f-4dc273770da0", "sighting--87181230-3b0f-4279-9ee0-76a655e0eb8d", "sighting--3c7d08b1-fa59-4060-8a35-1d5df8c696cf", "sighting--7aceba97-da96-4cb6-b5e5-8e67fa37afe5", "sighting--b6790ccf-1f27-4ede-8187-05c2c3e9a8b9", "sighting--a7e6a835-7f12-4f05-b60c-004f78137de3", "sighting--7f3873f0-5ac1-4f7f-ac26-54d154d23c11", "sighting--693018fb-5b4d-49cd-adee-e32eb17f593f", "sighting--e136a185-1d6d-4b25-8238-f2ecad462532", "sighting--4aaa3a00-45c4-4e57-8472-6b8f462795e7", "sighting--5cf4aeb9-f74b-47f8-8d4b-381bf2496aaf", "sighting--1f15dde7-3ea4-409e-98a5-ab80cdd0bb9e", "sighting--477c439b-2ac2-4c72-b376-335f0255f2d4", "sighting--360967b8-e500-4ed5-abf6-4d908f003cec", "sighting--1ae7544b-3112-4571-a2ba-7bf5b291669e", "sighting--3cc9c90b-c62c-4403-93ad-4530db29db6e", "sighting--75ad10b6-9cf7-422f-b6f2-7ff17481ce08", "sighting--3af681a4-627f-4f91-88b0-8ed45e121d55", "sighting--aa4fccd2-fda5-415b-8483-c7c14a125bdb", "sighting--4c73bc91-8241-4b06-add5-1a6078c8a7b7", "sighting--b6ef4f98-29ce-4929-a6fa-a596a2a1a88b", "sighting--c478e5c3-66c3-407f-8775-53b3820421a2", "sighting--24e4aa3a-d13e-413b-89e8-437e9a5dc18b", "sighting--53120d00-7fcc-4c76-a3c0-95d3bb6697c2", "sighting--ebecccb3-b7d0-4d4a-8852-558ef10d9602", "sighting--74af5ff0-2ed5-4e8d-a93f-18124de548a9", "sighting--85f83875-6a0d-4d10-8e7c-0e608b1e53d1", "sighting--0fd2eeec-67bf-43c3-8476-435b7568ff60", "sighting--075147b1-de9f-4449-9f1e-914be54d8a08", "sighting--60e81b4b-6360-4d7d-8fca-bd4ea57f3e7b", "sighting--6b9ff0a0-3f19-4a68-b8ef-60057a92f6a4", "sighting--030f2258-4bb5-426a-beba-c115caf9b2ca", "sighting--02d16893-3f9a-4400-9ec7-65b6ee11128d", "sighting--d865f9f9-866a-4c0b-bb45-d6863c27ce63", "sighting--5cf27ce2-5fd1-4597-b6a9-d4fad73da470", "sighting--83460114-53bd-4db8-a4a3-60bb4ce285de", "sighting--a6c1a78b-d940-4123-8b42-88d90279543e", "sighting--19a8075d-d8b0-40b0-83dc-0700bf4f08e6", "sighting--ef5afe63-628b-4c65-a812-03ea3a27b90f", "sighting--4dc35948-a76d-4648-a4b4-266a5e877604", "sighting--b6aeafcd-2fe4-4be8-8195-9ed7a26e616b", "sighting--d658e24a-cc4a-40d1-aca9-3273dd9d8bf3", "sighting--b7e6c95c-2b00-40f1-bb6c-565353cccaf3", "sighting--96d31b51-7ee7-4b39-8957-0c36056e54b8", "sighting--88790f93-6b5d-428a-9fd2-dd74c6b7ce29", "sighting--9fb96ba0-6640-4851-a121-084c5acd66f0", "sighting--631b3d6c-cf32-439b-96c7-c6d89abbadb1", "sighting--5f9037ea-4155-44f2-b1c0-81f55e56bed7", "sighting--dcd3479c-7a1a-4ddf-8f33-1fb32eabe1f6", "sighting--316dd9cb-1618-43d4-845c-ed817b256754", "sighting--d2ce3eef-4d45-49cb-abb0-86d3e939229c", "sighting--352c0d7a-b055-4a95-a3e8-7fef0e926096", "sighting--4799bd7c-6c09-46a9-b730-dd90df5d500d", "sighting--2b63eeda-7c54-4621-98df-5dc83be754e5", "sighting--2e84d649-54e2-4d34-b00d-2a72b981098f", "sighting--03f200c1-cab3-499e-9324-80aa9c05435f", "sighting--682eddb1-d08b-4296-8c04-d60c73a48008", "sighting--ee9928cb-b46a-414d-bd33-910a28d08067", "sighting--399f08ec-34a2-47ff-bf49-1af9e2ade3fd", "sighting--3f3f8158-2978-4300-bedd-074c9d178cb0", "sighting--8571012c-901c-4a1c-bc5a-0408ce455b3d", "sighting--b48cfc27-a241-4ece-8be8-5809563917ef", "sighting--8efc90f5-eaac-4d23-be4b-cd9653d2e3de", "sighting--88cfabd6-2553-4d57-ac41-760450c536d2", "sighting--dd394742-363d-440c-9865-f0f9acb105e8", "sighting--37384199-f72e-40ef-89ab-206b69f9ed03", "sighting--6531c616-3f67-4b02-a7ba-46db1844349c", "sighting--a28d2928-4968-4b03-8836-2a9277ca4be6", "sighting--51a8a5a1-cf18-4c7f-a277-d742cba5ef84", "sighting--5511d7ca-7f8f-43b4-9595-dd26a39574b3", "sighting--e09c2a2d-1714-4ef9-9f5c-9a4a978bf2a2", "sighting--57dc3562-3d83-482f-8018-ec1c3349a24c", "sighting--979b1075-70f3-4837-b0b4-24a997098627", "sighting--137baac5-8c1d-40d5-bb6d-91cc734a992c", "sighting--f0027982-f791-4e6e-9353-febefb77de2e", "sighting--9db2349d-1e83-422b-82ef-50d7844966ce", "sighting--8856c77e-7cb7-4508-8788-d9bee88796a6", "sighting--98efe1b0-8563-4271-97dc-517b624ef9fd", "sighting--a36c2960-3b2e-45f5-80aa-f14a343d5e6d", "sighting--9c73c6ac-b1ea-46a5-8a57-ca9174c67dfe", "sighting--920e8bad-2b66-4956-88d2-2492f3be7242", "sighting--a852f01e-0520-42b1-90e2-0073b7028ac3", "sighting--796c21f2-c164-415b-9ae3-a565ee09bcd0", "sighting--0084ce7a-d2cf-4d49-a99d-1f3e28958a31", "sighting--15155fca-3607-4e27-9aac-ac826d426fa4", "sighting--748622f9-08f2-4b8a-9885-7816a1daec42", "sighting--26a219fb-605d-4337-8591-d10df15feb55", "sighting--fa19e41c-7a32-4f21-ab21-adeb1c27416d", "sighting--1ba6ed04-ceca-4627-a03b-d847c58d0370", "sighting--71fe23fd-5423-49e2-bf6a-579113eb75c3", "sighting--540016e6-b55c-405c-ba2d-e715e0a51e26", "sighting--a2c5725e-90b4-4d12-ad8d-d1eccbcb2558", "sighting--eac852ec-8ce9-44dd-8d78-3cdf3a0300aa", "sighting--2b3961fa-36df-48cb-b16b-c32c0623e302", "sighting--3e4790a9-2225-4590-8e3f-4810be1d1207", "sighting--bf791367-34ef-4588-93ff-53399b7196e2", "sighting--e5fde003-78e8-4723-8cd0-072d860938c7", "sighting--9ddebc26-4308-430a-9f31-b38046f52a4c", "sighting--d964a1f9-8994-428a-b890-8c21009598d1", "sighting--5907ba21-3e90-42e5-b681-cda3ef37816a", "sighting--4985bfbb-1986-4d55-a93b-f6bba96e9934", "sighting--831ba632-9223-4875-9ee2-e07e63845a31", "sighting--ba29e2a6-9d17-47d7-a0ca-a095b3c171e3", "sighting--ad347e9c-a541-4ad3-ac34-9e1aa377a635", "sighting--9bbf18f1-a6b9-421e-abb3-12fb7c479708", "sighting--ff8771d4-65ff-4377-b2c4-3a9a84677b63", "sighting--a9f01882-7e67-4350-a649-f8af7ed70422", "sighting--ac806001-856c-4f5d-86e2-38373ed177bb", "sighting--78680fee-557e-47b7-9c73-a706c9e36689", "sighting--d1c99695-361b-4004-8fc2-4409761478eb", "sighting--4047a7a2-e3a8-474c-b14c-1b4a6c9856ec", "sighting--17f21893-b639-4ab1-882f-1fab93b9b8d0", "sighting--d4e36475-b25e-452c-834f-2b2bb640ca9f", "sighting--578ed7a0-5463-4f96-b87e-124e8e91b71f", "sighting--d0e33228-e5ce-4525-8fc7-dfb9a09ac79f", "sighting--f0261e1f-c880-42ab-aead-669bb862eed6", "sighting--b992fe1c-1d6c-4f7d-8421-efdac7b56398", "sighting--7d47d9ce-0ca0-4ec4-a562-2d32970822c3", "sighting--dd77e928-fca4-462f-9674-b0365f676834", "sighting--2d227e63-7c5b-496c-b79c-d9e5ee685b4e", "sighting--bebcf988-6a84-476c-9fea-0a8b8240e5a4", "sighting--520e0acb-ee87-4ac3-8f3a-5462aba6cde1", "sighting--f7d8ab72-26df-4738-b553-5ec89f944afe", "sighting--6e123eb6-8fa8-4edb-8297-a3f39c26c5e2", "sighting--4537ad59-4b05-489c-98fb-21acbf88066f", "sighting--7d1e9ff2-597c-4849-89b1-ad532dec82ae", "sighting--15c8dfb1-39ee-4fa1-a322-868a9da1c2b9", "sighting--97dafcec-fd97-4ef2-975f-0ab3a13dd6b1", "sighting--2126e32e-914e-4cd9-bf7b-45627715b24a", "sighting--f2904682-6a52-42b0-92d3-05427d55b40a", "sighting--d0e54c10-4be0-4c17-8a6c-d58614fad3ee", "sighting--b9059a79-dab7-40c3-97e4-ff6f39a25cfd", "sighting--8782a1ce-480e-4445-9b05-0635c10d62d7", "sighting--d712c393-c90a-414b-a699-1d64f8254457", "sighting--824e1b88-383c-4b07-9e50-17fece014e7c", "sighting--fe55e640-5920-46c3-a26e-0ff8b3bc7e85", "sighting--9fcf0247-a57e-4f8c-a454-ab8cb4ce029e", "sighting--747a74f9-feb4-456c-81ed-b40071c79976", "sighting--ae41f1c9-00d8-40f1-b278-6405a742b78b", "sighting--d17477e5-11d3-427a-a89a-32a6062a97e2", "sighting--d05fbd1d-e73f-4ab7-996d-7f050b6b4f5c", "sighting--c2deffed-1b47-429b-b09e-c3893daeb570", "sighting--ae65c324-0256-40cb-b90d-6a9dd290797f", "sighting--5bf77017-d56f-42fe-89da-b918b1720994", "sighting--de59f38a-c30e-4568-b2b3-8f53638c1a5a", "sighting--c575a31a-616a-40b5-8c66-9234f64e002e", "sighting--8c38e979-abbe-4b11-b2ab-7d9e680f6a30", "sighting--47e3b392-1802-4adf-b44a-694a5dbb8afe", "sighting--3351388c-b896-4fdc-b25f-663076a94abe", "sighting--f70421f0-faa9-4c3d-a909-58e45bb28ad3", "sighting--d8c0ed4d-5f81-4e06-9297-05fc8765fd9f", "sighting--2efaba85-a0c1-4440-903b-c71c895d7a01", "sighting--41d21e45-5d47-4faa-8b9a-6174e59877dd", "sighting--6e1f5bda-22be-463f-a645-dd38f85b873c", "sighting--47e811df-970f-4a09-8065-c771831bd2b0", "sighting--489fef72-7a2e-42ca-a0a6-e161cab9e591", "sighting--3ea7a1fe-ea5f-4cc2-8d08-195d52177959", "sighting--ed8afbc8-bfbb-49d4-8b93-1624c4d10dff", "sighting--29bf522a-4a83-4f64-8f7a-94226ea90a70", "sighting--4f4fa2bd-5dca-4ba5-a7df-dc28b9e85d7f", "sighting--006b80c5-96cf-4783-859c-172207910a4f", "sighting--d21a4711-e57d-498b-9be4-8d3e5ee3af31", "sighting--847644d3-3840-4f3a-b53d-af0ff6f8b484", "sighting--fced9597-ac47-429a-86d3-46852cee46b8", "sighting--e2a370aa-bfa3-4f03-9d33-86b2a698b7be", "sighting--60f021cc-1d2a-4bfc-be94-501a8a1d08c3", "sighting--75e6508b-81a7-49bc-a991-9c5a7496df56", "sighting--327dc2de-4e02-4dc9-9f5b-923db22fad85", "sighting--766571c8-b9f2-4e1a-ba83-5de842f8c7ee", "sighting--abac0368-925b-4c75-8107-b36cffaa1352", "sighting--1e78e795-6cd7-44ae-b590-b2e78d53ed13", "sighting--e0bf1e87-4758-48e1-b0bf-77e62fcd318b", "sighting--378db5ad-a716-4e82-a2c2-867f7cebb00a", "sighting--ff743a92-4e13-4696-bac3-36e8e57e7ff6", "sighting--d51d24a0-5adb-4713-98db-1f5d7d189f73", "sighting--2d2a6694-688e-4826-b1b1-eb6fe93833fa", "sighting--089d1a9c-8182-400b-8483-41eed44db01f", "sighting--94767a3e-2a5b-4405-9050-564203966e51", "sighting--fc9e24c5-5dde-4ade-b3d1-13c5959b3333", "sighting--5bb1b6c3-f9df-4581-bdc3-ba2a398c913c", "sighting--c2457680-d50b-4d01-a155-762c9acb8770", "sighting--5602f593-bc05-44d7-b2bd-76110139cec7", "sighting--c1146b1f-9499-4ae3-abba-0c048a26057b", "sighting--e4beaeed-7733-4670-8d4e-e658544878b2", "sighting--a49fd17a-4346-4265-8491-0cc7b4ad39f9", "sighting--30460d53-4659-42d8-88f9-5358d81adf66", "sighting--30fa57f9-426e-4310-b66c-276c885f29a6", "sighting--786822c9-9f54-4e6d-af14-9cec87db22f4", "sighting--d01a99d8-92d5-4f54-b985-b1a921de66b4", "sighting--5620c975-cfb4-4d6f-937d-a2f5b936c73c", "sighting--38529ae6-da84-40f0-8cc1-36c8332a4dec", "sighting--456ad9bf-bc58-4bdd-a2f6-69e07150c7f2", "sighting--d7f8e5bd-b457-4e69-a645-5ef8a2b197e3", "sighting--d956856f-b8ba-4032-ba89-55012600661a", "sighting--565e29d5-1730-4d9f-baae-51d2b0cdcff7", "sighting--7b98b524-facf-42d8-b41f-ccde381641a9", "sighting--dd9aa289-6746-4269-a0cf-23bb844fdc7f", "sighting--8e2bb1c8-e58f-4435-92fc-159467db2d04", "sighting--c44de557-1306-4e74-8e7f-f24fb2aed795", "sighting--02fbeaa6-346f-4a89-b5ea-e4380104df08", "sighting--9a44725d-7a40-481d-a6cc-89723612ba03", "sighting--6db0eb43-89ae-4ec1-8ad5-f9ec0d8f45b5", "sighting--37bc938b-2958-4a2d-bc9d-5c1d14eb1ea6", "sighting--7f059238-34a2-4fed-ae9b-c08eaf57eb98", "sighting--0447b7d1-804f-4e41-83ec-d28d577706a5", "sighting--5b3a8e76-ac32-4c4b-aeb3-ba25fc5b214a", "sighting--42bab1f9-b7c2-4c35-bd05-b6cf2708eecb", "sighting--b01b9f3b-dea5-459f-8f7b-c37d92570666", "sighting--3b8502ac-89a1-42e3-957c-d6fa0bc5c1c5", "sighting--b2c639d3-6576-4236-a8f2-7a7c6bdb6847", "sighting--1a5e2098-645c-4fd1-bf04-34b29689fb23", "sighting--7c46319d-7467-4c63-9616-5a80edbb0118", "sighting--7d04cff7-3a3b-41de-9c84-cc26d7838c1f", "sighting--c945c6d4-0106-41d2-91a0-46da016350fd", "sighting--a6b33daf-b189-4722-a784-835283260cbf", "sighting--276e788e-0d12-48e5-ad00-8ffd98aac5b1", "sighting--62f3fd01-172c-4263-863b-33c7a779a618", "sighting--51f8fe62-48d0-4461-81d3-0a2a84c17959", "sighting--5647fc45-31bc-42c3-8201-15f7deee0645", "sighting--a7f6730b-ef3d-417d-87c8-1fd257beffc4", "sighting--609a4d9e-b699-47cf-a8ec-a69321e104ec", "sighting--85e59130-e23f-4f6c-918c-52336dbf34d5", "sighting--a8fcbffa-f010-444a-9415-69406de1c71f", "sighting--b33e944b-9f39-4b75-8e81-200d0f026721", "sighting--c2e06ef0-e0d7-4ac6-9399-de4f8185887c", "sighting--92deb87d-8945-4848-bc9f-ca67a3e22bee", "sighting--cf9572a9-075e-43b6-85dd-d28f9213db06", "sighting--d4ddf252-a322-43e4-920e-89990c66e84a", "sighting--3758c919-0483-4dab-abcf-ff4405e5b9a0", "sighting--7419da19-ac56-453c-8447-3fb1d8289ea5", "sighting--4dcfce4d-ad8d-46a6-97b1-38f534f9b24d", "sighting--00fc01bd-183c-4b8f-8fed-8f9d31014ee7", "sighting--8ae5e994-cfd2-45d2-8c70-926313e9f764", "sighting--2a3bec20-99bd-44e4-a921-5cbf58e1a382", "sighting--37800629-51ed-4247-be57-2bf5a0acfc68", "sighting--ea3f2203-f407-4af3-a0c8-2989363a5b85", "sighting--37adb9b2-8ca2-43cb-8772-19c8ee8f8e0a", "sighting--e4fe9e75-c8a2-47f6-b5df-9de41c84d139", "sighting--ef4d87cc-a074-4a31-b137-4ab2e4275567", "sighting--995cf094-dc59-4883-92cc-a7a6db158d33", "sighting--4d532f66-920e-4c83-8ff6-2482bb28be9f", "sighting--49b40a36-0043-4da4-abec-eba78e31335f", "sighting--fd583049-7dea-4b34-bce7-87445a953488", "sighting--54148cb2-e4b2-42ff-81d8-dc2d1906bef5", "sighting--02edc45f-1b95-403d-bfc5-7658791380e1", "sighting--cd172c69-8e2b-420b-9e1e-f31fe7ae82be", "sighting--986eb9f0-da1d-4996-8ea9-ee22ab2f60a1", "sighting--85c44828-25bd-4682-b2da-1d8e47e5a8d9", "sighting--c42dbab9-ac51-44a6-8326-e8a103af5f91", "sighting--2b98bfe7-fa2d-4c24-bb89-4a36e516bef8", "sighting--db933d63-d07f-412c-bfe9-529431922c34", "sighting--c75828ab-c7b8-4497-b2a9-a8aa9a49357a", "sighting--a6cce5dc-2c26-4520-8260-b8cf9a7fc0cc", "sighting--92bfbf90-df59-4f0b-a4f9-6b45cd768af5", "sighting--2370519f-96c8-4ad9-b413-7f9c59d42381", "sighting--762c813b-2efa-4b5b-b4ff-4f5fbee9a621", "sighting--923d3a05-d243-4f24-b9ff-b758994b8f68", "sighting--d3637438-ce0d-4079-a237-b4d89c703062", "sighting--d3a8e6db-89ae-4699-b373-3b032d1e48df", "sighting--ac6fe4a0-de17-4f74-9d28-c77fae8dab7d", "sighting--83e25aaa-d7bd-48b3-9d72-154ba1f9a51a", "sighting--e489229b-f076-4ebb-b9c6-b65c5057a6f1", "sighting--9f136520-4bf8-414a-849e-5693824f2932", "sighting--98f95cc6-a551-4b34-9c54-566d8e288f4d", "sighting--fce24295-fb67-4a9c-b138-dfb7c599055e", "sighting--2df7a30d-0aa9-42ea-93ca-6456fef0c2e9", "sighting--aa118b06-357b-4ef7-83d1-76fa90fbd3d4", "sighting--c2a49ebc-3610-4cb8-a9f2-ed87bc9a9d5c", "sighting--02fe58b8-f807-4f48-9892-0f038108fc28", "sighting--5ecff3df-c927-4c5e-9817-e5f8ccda8e9e", "sighting--104b6c53-46c2-4ca3-b6ef-c308ddc5605e", "sighting--64339d34-8d4a-4830-866e-2adcddcbbdf5", "sighting--14d49e25-92f9-4c11-a846-95adf1da0f79", "sighting--7a3f709c-5e2e-4223-bddc-56901fb6c94e", "sighting--a5897156-be26-4171-bee3-ca9f97ca5c88", "sighting--fa07854f-5770-4501-bb4a-8ead3514afc2", "sighting--df729077-cf1c-4a5c-858f-d44906690545", "sighting--be7b4186-b65e-4f7d-804d-1e2fd95ed52c", "sighting--9fa713ae-7a7b-428b-8614-bbc981cb3da2", "sighting--52221d0b-2f6d-44eb-89c3-04ab60ecb497", "sighting--6ef6d35b-7b50-42ca-8885-1387a9e8eb6e", "sighting--5d672cdc-4ecb-4465-8653-fcfa23dda8bc", "sighting--6ccdc9b0-904a-4594-8b01-aa0ec02a1178", "sighting--c654e368-7401-49cb-a4f6-35f28e4017de", "sighting--069d3941-ea29-483c-813d-5ed51fb13846", "sighting--d9781d6b-824f-4403-a4f5-00764dfb23eb", "sighting--1416e517-4ead-457c-a4d7-58cf42b1b819", "sighting--298da106-5f5a-4a3b-b24b-833f3f6a08b8", "sighting--2f30d3f5-e3e8-4a67-a3ec-e9395ca9cb15", "sighting--f5662473-5a5a-4275-b838-c3b67a694b6a", "sighting--acbac5aa-f23b-4c67-9db4-7cf552d369bb", "sighting--8250a8b5-6958-445e-9906-16014b5a73ff", "sighting--bfc709b3-cc04-4975-aad4-c45f17ab086a", "sighting--476fd9c8-445e-4d2b-8590-da98ce2f4224", "sighting--ed9b5efa-4b92-47d8-bbb2-bd9c7e9209fa", "sighting--2c9fd263-177f-49e2-9673-f8af52b5ec8f", "sighting--52db2e71-9abe-423b-90f5-206613982c5a", "sighting--5e1c2ecb-1c07-4643-8e85-6a8c0ae56fc6", "sighting--f5ee2602-26ee-4d95-87c2-085ab8447a25", "sighting--0779651a-8a9d-44f5-b3ee-031f0d980784", "sighting--5ce9abf3-ad39-4215-940e-6939e0c15ab2", "sighting--8393656d-6a4e-4741-a390-c192a40c746a", "sighting--d62aa4af-8d05-43df-9348-af3b9a3c9bf2", "sighting--49f4de2b-7693-4606-b3c9-c49fc2004c60", "sighting--d69f940a-8490-4500-a088-ad9ab93b692b", "sighting--2211aa03-6ec9-4c24-be38-9ec93e171228", "sighting--9ea7b8f8-91fe-477a-affa-73f7c5ae6cd1", "sighting--b9b2ddc2-2151-43b8-899e-f89b89c79eab", "sighting--59ed9273-bbe4-4f43-a19d-3188607c2854", "sighting--bc27c7f4-6b57-418d-9264-090b255d36a1", "sighting--035c9884-1b8a-49ed-98fd-452caa57eb7c", "sighting--66368fd6-66ad-429b-be95-348e73d2b58d", "sighting--e79a8de0-1395-4861-8e1b-ec287fbeeb46", "sighting--c8a03249-5307-4348-868f-4ede5475b1ae", "sighting--9a8e91df-8bdf-4b22-9164-684e6a48dfdc", "sighting--fdeda1fb-0758-47b9-af5d-0e9bd2ac9eff", "sighting--569f03f3-9a1d-4324-bc7f-a1b8371d650b", "sighting--488afbe0-4283-493b-a9f0-d263148530b6", "sighting--f3e914be-a073-41ca-a2e0-658825773ba4", "sighting--cdc36606-1902-49e3-ba41-3056c4ca38ac", "sighting--3951a1de-4486-4c1b-9c46-be42bd6c46a0", "sighting--a935d3e6-1645-44dd-a38f-5fcfd96e6eb5", "sighting--deb6e912-bb5a-4e0f-a7f7-18489965345a", "sighting--3908a6f6-5aa0-408e-ac18-6859e816535e", "sighting--614f364e-54a1-4c41-a775-ca1fdb2747bc", "sighting--884b2358-8286-440e-af70-a0a8951848dd", "sighting--30a42cfd-30b5-472b-b995-3884d5d5ec5d", "sighting--710645ea-f675-42ce-9939-fa1e5150418e", "sighting--483b923f-3483-4983-a1df-8726c95c0d21", "sighting--bfa1abd2-dfd1-43f2-a204-f386886314e9", "sighting--9665fb9d-2ec5-4a78-a5ea-00b99eb20340", "sighting--b17d31b3-3e23-46c4-84b0-c99296dcd304", "sighting--3d376fb9-222e-484c-846f-0eaf9055606f", "sighting--4a0c2f8b-1809-4f3a-a7fc-fc625cfbb7bb", "sighting--4eda51ca-e3ab-44e1-b6fc-3c8a208acd49", "sighting--dd911b34-2e50-4b3b-8417-670ac56be988", "sighting--f76a07f9-5feb-44fe-bb56-85b90f7b3d57", "sighting--1b31618f-cd29-4a95-bccc-9e59ed686cfc", "sighting--332d6c77-3157-4bed-9ab9-b08c93b830cf", "sighting--b429c73e-dfe6-487f-aa5f-465d14dd5904", "sighting--06a25164-2368-4594-a492-4f03813912f6", "sighting--d1ab59e1-6807-4c29-affb-1bb863ec49ae", "sighting--cdcdefdf-151c-42c5-b093-410a41079c6e", "sighting--fa986551-c501-45e4-b471-9c4e0c94a1a9", "sighting--4e23e3e1-23c8-4913-9b80-73243defd54b", "sighting--62a08e47-6c52-4683-b966-ba3b0bdd78dc", "sighting--61e48301-b1bc-4de8-bd7b-b77ec84d9cc0", "sighting--ba16b5a9-6371-456e-beb2-a2e69d6c3ed9", "sighting--c0b411af-5163-4754-984a-03c8cb0eceea", "sighting--410db8de-bcc8-4957-b79f-fbffb65508fb", "sighting--42c319f9-2c15-4556-8725-60745dd07c3f", "sighting--04d1b580-d5f6-4b49-bc62-81d1ecda19c7", "sighting--75b40443-95ec-445e-b860-2a52fd4b6d67", "sighting--63a1350e-c96a-4062-b20a-960cfeb6749a", "sighting--97aed0a5-2c89-48fc-9abf-6d2258ab9ba1", "sighting--ae3ee2e1-d4cd-42d2-9da5-4df05955ea65", "sighting--2d21662c-2232-4a20-b0e6-2312750d6abc", "sighting--85f371ac-37fd-4244-be85-39ed4affa03e", "sighting--9a08fdb2-b6da-47f8-97b9-7f9ec821d054", "sighting--58287eb9-1630-4bfb-96cb-0bbe83f12752", "sighting--8c87e305-a7e4-4188-bfc3-77eb5c119268", "sighting--4b934fc0-a884-411c-ac66-685a481f2241", "sighting--5189f3d5-2ab6-450c-a5f0-29f46c2b5371", "sighting--bb55476d-1f21-4db1-933e-c77dd48e2a60", "sighting--c70f7ea8-9dbe-4efb-83f1-4d98f4d23f7e", "sighting--49ac4374-0550-47db-b6c3-a557e5288394", "sighting--f2ba88b7-9aac-4b32-acca-217ece081bef", "sighting--4f104e3b-4cc0-4329-8d54-42bd0eac98af", "sighting--294bfacb-9438-4da5-9961-acc972418e69", "sighting--871bcffb-a1b3-45f4-8a95-107941ae0ac0", "sighting--3a3f5e5e-cf0a-4cb9-8d88-48cfe6eeba0d", "sighting--ccaaf3dc-ac2c-4292-8248-94da6cc7710a", "sighting--a08d8dca-eb0c-4e80-8618-dbb430ff46c8", "sighting--b4a479da-b67d-4295-8660-aa38c0fd039c", "sighting--eeb7318b-ae00-49ee-913f-dfc12849445e", "sighting--b4d22995-4335-4797-a443-89bb203a3e0e", "sighting--2faa1e91-f2dc-4553-8b94-261c957a3029", "sighting--909db968-6aa4-4452-a759-97e312b66d43", "sighting--554a710c-898e-4a30-b42c-9aef36ad9ae3", "sighting--7d9f5b50-3ae8-425d-a316-07f06dc529cb", "sighting--4f5e20f2-1463-4bb8-b07c-f12c901f8487", "sighting--3e5c878c-3ca0-4001-926c-1bce75b1035e", "sighting--8c559449-80fa-484d-96f2-b732ec4f5a67", "sighting--405b6471-7a77-459a-9667-b73fc472a943", "sighting--1170a125-e0ea-4fb4-839a-ae0476daad7b", "sighting--fdd67654-7799-4198-a1ff-6e495c73b3f6", "sighting--c29aba73-5481-401f-8f48-26236cb0e94d", "sighting--20430fd3-dbc6-4ccb-9bde-5167f19f0b5c", "sighting--6205827a-e925-4213-8a30-af110edf3547", "sighting--9474efab-3cd3-48f6-8df2-e9490feef6aa", "sighting--a022b0c8-f8bc-4407-925e-ae19d90c3490", "sighting--e8f776e8-79a9-4925-934b-e48ea5b49330", "sighting--7f7a5e8d-1fd6-41b7-8269-697c33f5a352", "sighting--3825e9ec-c25c-471b-a699-8f7d33027d10", "sighting--4577bccf-f137-4691-b826-59ff9c7fb2ba", "sighting--cd6740c7-9cb9-4f98-b662-6dbfd537e4c3", "sighting--f24d8a87-b797-4ab5-8c55-08d60461f8a0", "sighting--4554b619-877f-4d19-bd7f-299e91af6672", "sighting--b0083d5a-94c9-412f-989b-ec4920b783b9", "sighting--f0e7a062-f5f7-4c4d-9c49-fb830fef227f", "sighting--20aeda36-635c-472e-9354-b83363ff6d94", "sighting--8a613b89-b23e-4048-8b6e-5d5500033aeb", "sighting--0424d679-033b-488b-b9eb-91e9a5a6813d", "sighting--09b206f9-73a1-48d8-8122-4f0181200f00", "sighting--80eff3b7-471f-4642-b82f-a4155b6082ad", "sighting--d66eb5ec-ff59-44e4-af66-574407439278", "sighting--ebc6af4b-c617-4ea3-ab0b-2f4e917c9169", "sighting--997a0120-7c92-4e6c-adfe-f5472f8c7931", "sighting--6662d7bd-9343-47a9-8048-3123c8b4d6ec", "sighting--ab3a4ede-80b3-4b32-8149-20be5df5ced2", "sighting--ae0047a2-4721-4f76-9f6a-385653aecfc4", "sighting--5c0bf5a0-6ce4-498a-bccf-f5dece8abfdd", "sighting--b858804c-98bc-4cdf-b70b-3405b0c0061e", "sighting--a2c27c5b-7a51-4e77-9603-39fd8cb32791", "sighting--652cad29-3702-4626-8edb-80b79a93fe89", "sighting--e5008b54-cb5c-42be-9292-9b306f933cb8", "sighting--978c559c-0d14-4b09-95a8-e9c8c5d6cddf", "sighting--03e4c00a-2556-40ed-9f4c-d6fd6547ec56", "sighting--7ce75b13-9884-45fa-9ba1-72e067ed9704", "sighting--952551da-57a7-47e1-abdd-d2bf5a6adde8", "sighting--fef5549a-4ac2-4c20-b784-3a9a9705c1fe", "sighting--2954538b-3dc8-4ab4-9271-a48343d6f0c2", "sighting--a7cdb161-9292-458a-a5c6-302fcf48bc2a", "sighting--f94f1093-51dd-4839-ae40-3151906dd11c", "sighting--669e56df-561f-45e0-ad4f-8f501a6adae6", "sighting--79946fc1-12c9-4f17-8dd5-3b561da74833", "sighting--96222c07-3a2c-4029-b6a5-c249ddcb2277", "sighting--ed906ba4-582b-4042-9740-ea625dc4db75", "sighting--8ad8b57b-a405-4611-9388-ea0f267609c1", "sighting--c03fb174-7e9f-4302-a209-c1b0a9b0bb35", "sighting--d74134d3-800b-4de7-96e9-2d02717e4b29", "sighting--168e1f5e-73bd-4e1f-9391-c3a9646fb368", "sighting--327c5ecf-f9a5-411f-b563-67e9f66f96a1", "sighting--195d9b76-991d-47a7-98c9-5aa0d151a69c", "sighting--74916d10-a5e4-47dc-baf0-799287a336e0", "sighting--c68f3e70-bbb1-4a48-8652-e73fc0d4b7f5", "sighting--7ae258e4-53c2-4102-8eb7-4ca56649dee2", "sighting--eec9a7a8-e579-4718-b1ed-123b542509b2", "sighting--20d1ef20-7602-4911-b1f9-b5cb5db009af", "sighting--57e92e5a-0362-4020-b0a9-a23069ecf60a", "sighting--63274478-77d0-48ae-9d0e-36f8d7b31d9d", "sighting--56c5ff94-84b9-4e05-bebd-17fff9ad8802", "sighting--a30d6aec-7131-490b-acab-4bbdababfeb7", "sighting--e96bbd68-7e4c-4e37-950e-bf900b931261", "sighting--fee5109e-f88a-4519-9c76-1b95357306b4", "sighting--d34ba142-6d7e-4c98-ab9f-4c9eadb7fcb1", "sighting--8af816e5-602f-4519-9a1f-6a49ce7295a8", "sighting--85cdb64b-f176-40b3-91c4-8495a6d651a2", "sighting--2e100827-9611-4e69-bd6f-9ec75b77cbc0", "sighting--b594ff0d-1864-4df9-8b7e-e2d28678490d", "sighting--e4d518e9-cbc9-44b2-9925-b9c747c064b1", "sighting--50c4102b-f59a-478a-aeec-36450284df85", "sighting--1ee4e31a-2dea-46ad-9e64-bacdc36cf85e", "sighting--b23a9735-7e48-4437-8e04-105ce0d04337", "sighting--b2ee9ca6-953f-4aeb-b2ff-11a15ba5d051", "sighting--996237bf-f25c-483b-9f39-144fae32a653", "sighting--884600d8-98c1-4cd5-bcf8-e1453cf887cf", "sighting--039dd2b0-a1c0-454d-884e-db08f1e289fb", "sighting--1a2d22ae-a87a-4c74-876b-f0d6d7d28456", "sighting--63aa27f1-bd02-44b2-b3df-bda734890048", "sighting--9de49a5a-1823-48bd-9ba1-92f6086e4616", "sighting--8a786653-48b4-49f5-9a14-4bca7b027d22", "sighting--f46f48d6-4f9a-47e3-81bf-2d2aa85887fa", "sighting--cf28bc9d-5445-4184-8fc9-1b56c2759c02", "sighting--2c6a5ef1-ebab-4dcf-bc7f-b501bae6c900", "sighting--550fa982-ae0f-48ed-875c-8fb51d44d138", "sighting--2e466c10-76a7-415a-b32c-9e71393a56d3", "sighting--ae6c2e2b-30e4-4da7-b883-72a878f1a31d", "sighting--b4158e39-8f4d-4caa-8906-7fc8e6d17ae3", "sighting--1a8c4337-8361-4a9d-a616-73a4ef99af6b", "sighting--d095deab-a2ba-45b1-986a-9723ea6ae638", "sighting--a4061ff8-c68f-46dc-960b-836b46b38d75", "sighting--3114499c-39ec-49ef-9539-24717855cd7c", "sighting--49b20a68-9560-489e-8d07-530618e5a2c8", "sighting--0e17a130-6b11-4c80-b62d-b49ab389a42c", "sighting--f41e6ddd-84fe-4420-aed9-c253e62c7ed3", "sighting--ada69cd9-58ca-41c6-ae83-1e1921c436f3", "sighting--e06e64b0-70c6-48f6-abdb-0c49d079a028", "sighting--2b95b4e0-f3f7-4c31-8ffe-7b08a2ae0876", "sighting--8bc326c7-6a29-48e4-90f8-7ed1f5bcdf81", "sighting--70116d1e-4ecf-475a-a7c6-89a64b0fe367", "sighting--3e4149f5-ced0-483a-a350-2c99ca876caf", "sighting--e3218024-501f-44f4-bcec-d07087242249", "sighting--a2666d9c-c40c-418e-8e03-89f665dc8902", "sighting--498b6b7d-481b-4281-86e5-6ffe6931a822", "sighting--94086138-46c2-45ce-8096-9891f9af5331", "sighting--a6ec4c0b-9ea3-4f64-bbde-355467575ad6", "sighting--91bae896-4f22-4dc5-96f3-59676f7a4d11", "sighting--d299ff70-c11b-437e-83e1-d246eb79876c", "sighting--6d37b315-4c4c-437c-bb57-8b9b7b372be3", "sighting--ed627da3-08e7-4bcf-b1f3-04c4a6381e10", "sighting--f2ea056f-99a3-4a9b-babd-1268f1a43dfe", "sighting--3676ec1f-e909-4d1f-92fe-497aacb424da", "sighting--0078ab11-18f9-442a-8f49-3bb4a82039a9", "sighting--4adc6384-c5ef-4568-80ea-d034247ce0b9", "sighting--99e829d6-5e82-43b4-a9b6-750936d51468", "sighting--4fa9a011-df72-4998-9065-308d43114b7f", "sighting--ddcefd8a-b4bb-4bb5-8ed0-23122c0f4c83", "sighting--fd9f19b8-e28b-493a-b3be-a54f8f91a8d1", "sighting--07bf69fd-2607-4bad-86b8-0a577c5512fe", "sighting--28559f32-9988-46bc-ad1e-4a5bd04b64f4", "sighting--959ef94e-576b-4224-a057-539f5d90a20b", "sighting--2736f39f-b4e5-4bef-9bc9-876f574bfaab", "sighting--2f1593ec-18ae-4457-882e-381ec35cd165", "sighting--1f6b0c81-8306-4939-8cf0-124905153285", "sighting--ac98155f-ba13-49a3-871e-dd631de70bd1", "sighting--58fb912b-2380-49bd-aa64-367fb62de4a6", "sighting--90817435-e66a-4a43-8106-6cf72271b447", "sighting--91f9e6e5-4f45-4ef7-b4a8-f5e1cfe08388", "sighting--4453009b-b88d-46a5-9e00-467b23343586", "sighting--67ca673d-cb3e-447e-aebd-6978b391108f", "sighting--5cd9a51d-37e1-4d6f-98e1-09dd07fbac99", "sighting--66213c87-2be1-4894-b1db-07a4ad6aabcd", "sighting--ce55832b-45db-4e84-8b97-52ccfed062ed", "sighting--b5742944-47c7-4ba2-9343-8be41c8ee98a", "sighting--024864fd-7bd3-4feb-97a1-941503241fb5", "sighting--cc359c8c-13c5-4dbb-8247-fc28c874285b", "sighting--b3af8287-47cb-41e5-81ca-ab0be8730c06", "sighting--89c060a4-fc41-4bec-b0d5-14c77d258471", "sighting--24ee8d74-ffd2-4e1b-aad8-357263af8d58", "sighting--583dab60-bef4-4df9-990d-0a83290ced78", "sighting--5cf2b0ac-03d2-4170-baea-f4e6bf7953a6", "sighting--c60855c0-1bc7-4e3e-94fa-ece2d28b0bcc", "sighting--513c2282-807d-4176-86e0-527f19a1cfb2", "sighting--7a5bf238-ae40-4da1-90bc-f3fb5a71ff5d", "sighting--b686c196-e1e7-4a15-9d4c-000f0a38bbed", "sighting--00388e7e-5184-40ac-8e70-224047a071d6", "sighting--6a3ff2a1-a04d-4c3e-8c1f-bb1b283d93fd", "sighting--f07af6cc-baac-4500-9932-1e29e9cd0be7", "sighting--6e121e77-62c3-473e-8cce-112d7e71d77d", "sighting--58993153-5ba8-4200-9a83-63f97ae7b325", "sighting--6e9d94f7-dc14-404b-9230-dbc3bb13540b", "sighting--2dea8675-934c-4660-ac50-c86ee22ce397", "sighting--aaf96f73-31c3-4a99-b416-6d7e7732a6c4", "sighting--52a1884b-610f-4fad-aaf0-efd7db64a383", "sighting--a42a4078-df45-49c4-b1b1-159f9597f1c0", "sighting--22313cfb-f9ca-4ddb-92fb-e5f3434d8d16", "sighting--84cf5863-02a4-4aa6-bfe3-04ce9676f37c", "sighting--0c59f9c3-2b02-411d-b964-a15abc137dab", "sighting--a54f039f-186c-4b4d-a983-1098e2a9a57c", "sighting--da81bd9b-849e-4dc2-8578-20c91647c90d", "sighting--0bb4165f-b60d-46cc-8d3a-785d7ee15d77", "sighting--75575726-f2f7-4598-a1f8-ca2f0a41dd79", "sighting--d09e17c4-ad63-46ce-a77a-dab3d69dd7fc", "sighting--0d47b5f5-24b2-49c1-9775-c6919b75bd2b", "sighting--e771ac16-5740-4d8f-8dae-891f944a0897", "sighting--9fecf80e-9209-4850-9166-cd46597a0e49", "sighting--989777c5-9155-4f6a-b99d-b2dbb46e094d", "sighting--1a82d395-4abf-4224-8c55-494331024202", "sighting--69c18ccd-c2f1-4fa7-8738-127956c7e66c", "sighting--6e597ae6-4749-412f-92cf-af986187a9f8", "sighting--c4e91954-3bdd-4f35-a62a-9c1579104945", "sighting--6cd18d9f-c7ce-4fc3-a641-cf36af1075d7", "sighting--2e94ca08-853f-4760-99f7-b983a09bafaa", "sighting--c6a1c2d5-9806-4d95-a205-90fc4fbfec3c", "sighting--329aa982-614b-4068-b9bc-f0cba8f358e5", "sighting--aa8ecca7-9ed3-4ac4-addb-c28e9bc07762", "sighting--5edeb169-9709-47bb-be23-1efd127dad2a", "sighting--50388c3f-ba4b-434b-847a-a7c778516300", "sighting--9523835a-b479-40fb-8b06-2cfa0f11b83b", "sighting--2cf81424-6a04-4493-a4f7-589c696465c7", "sighting--445ae9e2-d10c-4bd5-9862-0e721f296ae2", "sighting--58213241-4204-4e23-a058-1eb695cae8a3", "sighting--ba02cb85-1e89-4e34-a13d-f65e2694530c", "sighting--46ccf836-9e76-49b4-9cd8-adf3badd6e9d", "sighting--9398b16b-5fe8-48cd-a673-d32f556fe1d6", "sighting--58702a30-48d2-4857-881a-db726ba9371a", "sighting--8fc96e54-3406-44be-9f41-93097f3da434", "sighting--ecefee3f-5428-4196-941d-6ede96ab85df", "sighting--e5020d23-db3c-4390-995e-50ae7b468c5e", "sighting--b7c37e02-bfd3-4781-9671-0b251a4fd51c", "sighting--82053447-3c79-4ef3-85be-dc8626c8e523", "sighting--86270f34-3ac2-4918-b368-b8223385fc70", "sighting--7a3e4486-9f7c-4f09-940e-923ea190d549", "sighting--729b867d-ea74-4211-b1a8-42f2e59e1eb3", "sighting--fc61e975-e5d9-4950-aca7-28bce9740ac8", "sighting--bd5c4a2a-af64-4277-b77f-f72d82b7416d", "sighting--c1100e65-bfb2-46b3-a14a-a13a55ca5b38", "sighting--7ea6cef3-44e4-4d86-a039-9ba916f80df1", "sighting--ce85c083-15ae-483c-a4d7-78bf299a8ed9", "sighting--23189b33-8d7e-4f3f-a888-4abf0f28af2b", "sighting--e136891c-3b00-43ea-85f8-972a59906089", "sighting--f4f9d564-90d2-4dbf-90c1-e2daf8c928cf", "sighting--49ed274c-fd26-4239-a98f-69947a09644d", "sighting--fe6464d0-66bd-46bb-a722-7249ee464bac", "sighting--1957f63f-a3ae-4be6-802f-dbccdf43afcd", "sighting--b836db49-dda2-43d1-8871-359387c93392", "sighting--089a431b-21da-4fe6-a166-647499a5498b", "sighting--97b0e687-f3fc-4b62-a6d3-301e14db7e35", "sighting--6d0d1c0f-4dd4-4c6c-87dd-295ad2dfced6", "sighting--5c26b5ba-9d89-4a40-973d-ad25273f2019", "sighting--e6cad4b4-5841-4132-9d83-ba9df0eaf71c", "sighting--a9b94ff9-8647-46d0-b747-5c177289b78e", "sighting--6d8e8c30-774c-4815-a5ae-533bea5fbaae", "sighting--e9b9ecd0-57e1-471e-bc00-26815f167331", "sighting--30948c52-36d3-4081-8aba-0c939c4d66d1", "sighting--469f0954-18c2-4745-8421-3dd753aff334", "sighting--c225feed-9907-48f2-b255-d064608a1a3c", "sighting--23cfcff9-8e14-4e14-b905-64cbb7ef6e80", "sighting--cf9cff19-74d2-468e-b7df-ca4e0c688a11", "sighting--25ff96cb-6833-47f1-a7ba-7dac1c560d01", "sighting--abf8e232-c9d6-4cf5-ba72-892f2333b0b6", "sighting--8eac5ee9-7b6a-4ef6-847e-c8708945eaab", "sighting--8fc46ac5-bccd-41d0-bfaf-e85fd7db7727", "sighting--137b49bc-a0ad-42fa-b9da-7af1e0596650", "sighting--d71de27a-3009-4f2e-bda1-35c37fbebfab", "sighting--af3ee347-cc72-4998-b5c1-6b098b7092a2", "sighting--99aee1d8-3d99-480c-927c-234af4c088af", "sighting--446bbbb5-e042-40f4-b22f-bfdb222d3239", "sighting--fdbf83da-075a-42a6-860f-fc0bcb9c2ef1", "sighting--11c64761-703e-4830-96f5-f58d2a6ddf2f", "sighting--64dd0128-fb27-40d5-af54-c4a607c3302c", "sighting--adf5adc3-9920-44cd-80bc-31052ee04451", "sighting--48f85a7b-90cd-4405-b835-451ffed3e85e", "sighting--46231c2c-9f35-482e-b03b-bce0a79709f8", "sighting--dbe6ffa0-0ceb-47c5-ac3f-4b010a784531", "sighting--0fe8904b-e263-48cc-80e8-02ba42314478", "sighting--e229cc46-15a3-4ef4-a858-2747358ebb6a", "sighting--0c9a341f-d215-40ad-99bb-4ee5c48a9653", "sighting--c562d86b-8792-4ab5-90d2-c51a4f2b7f1c", "sighting--5d7221ce-9c6d-4e0e-b772-7130c3ad9584", "sighting--a89d9867-1dd3-4e57-98ab-ffce8592062d", "sighting--9b7d905a-e777-49b1-9932-3294ada14e25", "sighting--634fdbc4-9748-4c56-b173-9c2c17cd67b6", "sighting--2953ab60-9380-424f-bae1-bc3ee5546793", "sighting--ca5318c5-f287-4370-83eb-0667c57b57d2", "sighting--38d3cec7-d349-403c-abfa-dc7220152dfe", "sighting--c8bbdbdd-aad1-4576-9f2b-f58237317ccd", "sighting--5e94feb1-9e21-41ad-bfbe-6d4169e6aa7a", "sighting--f7862ab2-84d6-48a8-8004-c32c1c9d8563", "sighting--db4d2774-37e7-4602-8746-2fbadcf55658", "sighting--4cc21d64-7c89-486c-9404-f9f8730d1a53", "sighting--0e10435c-c7f4-4076-8eda-8484ae4d3bf6", "sighting--a8889fb3-8151-4d96-8177-52f5ee19cbbc", "sighting--26995424-e894-4775-90a1-5f7bdf7ab6be", "sighting--0396ea81-144f-4189-8b63-42b45b72d371", "sighting--17717081-56be-497a-b351-a891d8b1e43e", "sighting--310c0188-c3db-4609-8120-97dba14aa2a6", "sighting--ddc7397e-f437-4035-89a9-f9869378d487", "sighting--8cf7d16c-f9ce-4b40-af9e-d7b1712985d5", "sighting--1f40f5e6-4dff-4820-82f3-182dad52aafe", "sighting--a16f45b0-87ef-4101-94f9-53785047973e", "sighting--9044f54a-a4c6-4a9c-9d61-94a04795c18b", "sighting--f4e9dbb0-93dd-4792-9f8e-8cba817f9b69", "sighting--34dc8b73-d852-4170-a9e3-53a60b66a11b", "sighting--db82540a-49de-428d-a5e2-586681cc2372", "sighting--a72d9137-bac2-4666-9de8-3d5e27539ebb", "sighting--574735a1-e6ae-4f4f-a385-2d5c175bf014", "sighting--411d0d0d-58f3-4f95-9410-2c33471f6f2e", "sighting--eeaf28b9-fddc-42a6-afdc-78b436cc62c6", "sighting--90a80fa7-cd49-419d-9ab7-7fb07458b001", "sighting--3e05090f-019b-426e-a990-27993990af57", "sighting--fe74e0ab-66c7-4002-b365-5dd54af883b1", "sighting--9f198a37-74ea-4835-ba6b-e717de08962c", "sighting--fd7c2eee-056f-40c3-a57f-df802a65624a", "sighting--11e0bc5b-7c03-44bd-89ae-7f2e41a5ff44", "sighting--b9fb659a-f4f8-44f4-9912-6ef340e4f904", "sighting--0dd81ea5-f10b-40e6-b4b9-60aa3dcdae84", "sighting--15f0947f-1ccd-4525-b88c-119d1afd41e4", "sighting--7df878b7-5dc0-4ca4-9eb9-aefe3a3fea80", "sighting--7e5db6b2-9fdd-4fb2-bc96-70fb93893f63", "sighting--9512394d-46db-4807-82bd-3d20a78a504f", "sighting--d23ff727-b746-4bb5-8055-25027ef44fbc", "sighting--90c18b13-4a88-4d2e-a497-c0a78029c13b", "sighting--074ccaaa-31cf-430b-9ab3-3e916f84e459", "sighting--bb17afff-0768-4b38-861a-9b3d01a62f98", "sighting--6dd69cf6-32be-4ce5-a944-754c14b4fc52", "sighting--30f1f45b-1b09-47b6-ade6-b9349c2b0bec", "sighting--a34d37c3-a0eb-4771-b607-7db201e5b916", "sighting--0e204a0d-4878-475c-88d9-8b1cc1b0f77a", "sighting--70477eea-58d4-4802-8443-13bb412f4d4b", "sighting--01ebdfa7-00d3-4e73-be5f-e1a98a0f2121", "sighting--8a0544ff-811e-449a-8d01-9ca271204288", "sighting--fe38f3b1-218f-4d38-8e36-213bd02f5adf", "sighting--97bf095d-f9e4-44d9-82d7-4b7c25e973b2", "sighting--cb46d462-c5cf-444a-846c-4798cbd2f7f3", "sighting--79ea6a2e-3f4d-4fd0-b2a1-a4aa153113d3", "sighting--6df4af2e-70fb-4263-ae83-96c26b55c96d", "sighting--a1caaa30-bfe0-4aff-8e00-6e4fc6fa0d4c", "sighting--a48a1f33-b803-4096-bd87-a19906275dc6", "sighting--cf6c1da5-1e9d-4002-93e0-b88c9ec3fa77", "sighting--b7e08eaa-13d9-487a-a1d8-46b3e68e4e36", "sighting--2744502c-189c-41f6-8f01-804faef184c0", "sighting--8e618cff-cbc1-45a0-808c-ab58b8df76e3", "sighting--1f477254-c4f1-4ecd-9015-3cfa5bff7043", "sighting--e34accc9-105b-4ebc-9749-0b48adc0477c", "sighting--6fe4e8e0-53eb-42eb-b70e-5b01db696d85", "sighting--dd5c6224-6296-43ae-bfc6-efd639349fa7", "sighting--d55911f1-28b4-4d0b-850e-9278fb529bd9", "sighting--d3430976-c816-4cf2-96bd-7830a2d1c87b", "sighting--aa3bc793-3de8-4fba-8871-712a86a36797", "sighting--7c5d29e5-0b2d-4936-a924-9d5cf27f93b3", "sighting--89e6c225-2a39-4494-95a2-c4ca8c031ba4", "sighting--cdeff767-546e-4e09-8da9-5ddcacaf3973", "sighting--0a101cb7-86fb-4b44-b2e1-b498966d84f4", "sighting--c3cc6fd6-7a3b-49ab-b0d5-0ab245a25073", "sighting--992318f7-1451-4bf5-a0b1-b12bd3eed097", "sighting--3ea982a8-61c5-4120-8cd1-62ba05e7bf71", "sighting--f185ed21-660a-46ac-b278-dd083994ceef", "sighting--aba2a7e4-9c8f-4f81-b81c-e24cde1f83e7", "sighting--d515dda1-7c68-4857-a22d-99cbc2ae4e77", "sighting--53cc7686-4ad6-4383-a4bb-b7db7b2cd587", "sighting--10aa14b7-bdc0-4e07-b3f1-b86535b7281c", "sighting--58cb3d2c-eb06-4000-a61d-1024dac8a6c3", "sighting--43c97262-ad23-4507-91a2-01365061954b", "sighting--e2453dcd-0aff-4052-a802-83e55be7824f", "sighting--279ae442-44cf-4839-a5e3-702a801a8ad0", "sighting--1953da93-cccd-43c6-b06c-95c612a31dd4", "sighting--6e9fc060-163d-48d3-ac43-0002758c278e", "sighting--e7a88443-8a85-48b7-99ef-f53070d533ff", "sighting--e6bd008a-7931-44f9-8b40-4c7357a87c48", "sighting--4050a692-6dd7-41d4-83a6-d9cdaf3f7b97", "sighting--3f61f149-4081-4ed4-8cd1-6e539c44c249", "sighting--868fa532-28bd-409c-b7e5-0079be68bae4", "sighting--592013dd-9a58-4825-abef-7560c04b0b2e", "sighting--946dd92a-1ab3-459f-9a62-d7bc99324ca6", "sighting--1fa85bb0-2651-4661-8d99-be41a9dfe0ee", "sighting--503e4afd-b7be-407e-bfe1-d25ddda095f7", "sighting--85d4d5be-3b84-4d64-a517-c1fbce00c0bd", "sighting--050fdf62-ff30-45fe-bd0d-72b48da6dcda", "sighting--847c35a0-7bdd-48fb-9872-d2f9876ff817", "sighting--86fd6c26-2107-4add-826f-175c6d08e124", "sighting--3e6c38d4-c57f-4a27-9719-8cd84847cfc4", "sighting--793ea983-afcb-4f6f-9ea1-8f0c50142ad4", "sighting--afb6a248-3432-4671-9ffb-142978ddef31", "sighting--047494e1-9438-4062-b24a-e97ed9a910d8", "sighting--44b329ee-963b-41f3-84b9-c1f6144b4cc4", "sighting--139be453-7fe2-4936-a88c-49e2404388e9", "sighting--7b909505-74d6-477d-9964-0e191748c28e", "sighting--f692d7b8-3680-49a1-a78d-2063e1d1e7a6", "sighting--a2c9d69d-92ab-432e-a4e3-9c5e41c949bf", "sighting--9c03f973-c108-41dc-a7e3-d8b40cdddaab", "sighting--086fae69-5921-4e57-ad5f-c85908721425", "sighting--d457e8da-2653-4da1-bf29-760bdf9b85c2", "sighting--f3e1ab0d-c2d7-463b-9eea-da91f86c557b", "sighting--199f7390-5f71-4faa-b38a-1945fc7c182a", "sighting--8d9685e8-d72f-4840-919d-ecf14c6bb1c2", "sighting--e2c0c1d8-5df4-4b12-8766-9fa33d496b8f", "sighting--bd05b58e-857f-4de9-9f6a-4901aec14a69", "sighting--d4bedcf0-67b3-46f4-8199-d8f9b96375da", "sighting--e2fb56cb-050c-45e7-a8a9-09e4a690059f", "sighting--7054e2e1-d9b5-4018-b479-53449658bda8", "sighting--22ceab07-7256-4978-a6aa-d9e0ee00ba40", "sighting--9da63877-d239-4651-8c47-5dc5824484ee", "sighting--e1179f04-e0dd-45a6-8006-9f674de06a39", "sighting--08f97b44-a502-46bc-ab4a-5e14e4842ff7", "sighting--da289a18-cd67-4445-a849-a9f70c536d3e", "sighting--2e013606-455c-4e4a-8e6f-4e3b07f59778", "sighting--d4f4efd2-463c-4cc6-af03-81c9dc0cce1c", "sighting--da58c27e-13be-4b49-9cf0-4463d0b99f49", "sighting--2e01749a-42b1-478c-a491-ffa43df5ca83", "sighting--53ceea31-18cd-4a2f-a3d5-d118e1fcecbd", "sighting--6cef1277-0bee-4b47-a70b-e63a89a4bfae", "sighting--ad82af8e-d5c9-4628-9ab0-08262db13e8d", "sighting--b4eb158f-77eb-4037-8160-b33642cbc7af", "sighting--5cc5d021-7af1-41c1-bc36-98f7be4d05b6", "sighting--cd3a1599-6252-4d50-8872-81b72737be32", "sighting--779ea23e-0de6-437d-bcfa-ee41e4888764", "sighting--9e99d784-8903-461f-8d71-105b4bed5910", "sighting--dac9b050-7217-4d6d-ae81-7f1bc17b83c6", "sighting--080b4716-bc8d-4952-951a-50162c3b4065", "sighting--1c29cbfe-5454-4cba-8497-88d8080edc76", "sighting--5dc4b2c1-dad9-4415-b92a-28dc4a4f59e3", "sighting--78fa4d5f-c744-4c38-bf78-afeabc49596b", "sighting--49ccb6b4-45fc-4896-aea4-44ed453b514f", "sighting--f3e4deb8-b6e7-457b-aa53-c8d1ce9e1cae", "sighting--785edf7a-3f9c-45dc-9e1c-6ee604a793cb", "sighting--9e4dd353-939d-473d-b14f-c9d80d36b63e", "sighting--688abac0-20fc-46ba-9b67-59c462a2abef", "sighting--1a19fb94-27de-4962-9ce4-6718af645d8f", "sighting--a0c5d527-25dc-498c-8685-35754333899d", "sighting--a1c4788a-ea27-4a99-a324-eea200039a31", "sighting--516523fc-2ac1-4f76-9c80-4292d4a99d40", "sighting--a9ae92ca-8a86-4987-a08d-2936672956fa", "sighting--7a0c4d05-e7ce-4566-8666-3c60fcecc7eb", "sighting--44b3f0e3-a856-450f-a60f-947e82a0ee2f", "sighting--ba75dc15-b48d-4bcc-98f9-75c250c42901", "sighting--fa8f057c-bf99-4888-94af-caa4d0302d67", "sighting--ec7dc66b-a4fb-4191-a9de-decb7b128beb", "sighting--ee18ee43-066a-4f43-96e8-f51bd7517cf9", "sighting--b787c287-e63e-405f-bd06-39674db0f4ca", "sighting--8f490f47-0adf-458f-82d7-be1a4a65c3f6", "sighting--7349b3d9-db62-4f70-b942-ca2c4a6c8498", "sighting--ca2b7a90-1910-4347-aea6-775bfee78f54", "sighting--60913cf5-0520-41a2-ab0a-cef6e0e76a99", "sighting--e68384ab-dcf4-4100-a288-241d50366fda", "sighting--ab0570a5-cf0c-40a2-b3d6-82ce70a64803", "sighting--3e31b729-0e5a-48c6-95c3-f9a92a7867b7", "sighting--598c97a9-0657-4f91-9d6e-cd048bd92582", "sighting--6a38136e-b6d3-4359-ba66-2309e3b5dc9d", "sighting--7d91716a-dedf-4717-9392-27b12feae2c7", "sighting--4704780c-c6ef-4bee-b863-c0fca96091ec", "sighting--2be29b86-ee00-4ee7-afbc-6a025152f87f", "sighting--faed69d9-9afc-41f1-81e1-8bb8fee7cc09", "sighting--92c81e73-90e4-4907-a8f6-9774c592538c", "sighting--af5801c6-2dec-4a0e-974a-f3f18e285c27", "sighting--ccc34d74-08b4-448f-b39f-6574e1af62de", "sighting--8c39ec2a-af58-4e6a-b7e0-749291512e0b", "sighting--a34ef92f-6d14-453d-9122-6be5d2ae7cc6", "sighting--477c7bef-ab7b-49b8-af05-b2be986d6065", "sighting--6e55f0ce-01ff-4696-8722-e9fcc5ccb6b2", "sighting--c44a89a8-743c-4755-9b91-2ab3345fad93", "sighting--6d56f119-a7b0-4287-b42d-bd2ba7bdd273", "sighting--91f85fa6-fc53-45ab-9f3c-3f7dde923bfd", "sighting--68847719-7b35-4888-ac44-fc8476895039", "sighting--2ec085a9-816d-4d6b-954c-8ec6f87e014e", "sighting--68a444da-ec70-447f-8398-5c39db203e8b", "sighting--9c9ac435-528a-4341-a663-6789aad4464e", "sighting--1c8ff330-baa0-4f52-927e-2e69af610920", "sighting--7e7729c2-7d54-4ebe-9bca-d05f2f6307b4", "sighting--b9ca675f-6c86-4d74-a835-fc4578cec213", "sighting--21741c5f-7f8e-4cc3-9c50-a0106edde19d", "sighting--f7b109f1-2fef-4665-8490-b28c3b434013", "sighting--d56c343e-2878-4f16-b54f-09bab51adb5b", "sighting--65d0eb64-ed11-41f7-bc5a-c84e7b9e77ae", "sighting--9a36b8da-5545-46e6-896a-1c71e97d66aa", "sighting--c53a5258-7066-4a89-a8e2-73988be1f372", "sighting--f47cf46a-59df-4ec0-93f6-ea50634b4a26", "sighting--656ae6c9-818b-4c17-9bd9-23acce1f4c9f", "sighting--e1cfc08b-ec0c-4c7f-9a39-19392cc42eb6", "sighting--3bac1d47-0da8-4953-b2bb-b407d8694d78", "sighting--eacc939f-1d25-45fc-ad04-cda98694ddd9", "sighting--35622431-c90b-4b40-ba41-80891a189552", "sighting--bf2fdefe-f09a-469e-a4d0-5f55991868b8", "sighting--19c3c9c6-499f-46cd-8ade-a71d51580bee", "sighting--f85329be-0893-4b99-a7dc-b7059c11d753", "sighting--32293af7-0c5b-4f9b-8fc8-f5817e6b0667", "sighting--20e4f5fb-ebb1-47dd-87ff-131e15c053ed", "sighting--ad737bdd-6933-44bd-a89c-364564dfaf28", "sighting--fd5dd60a-7b95-4898-ac23-151bf1e5713b", "sighting--4f7508a1-5d3f-47ba-a8ed-59db48ebb9a5", "sighting--97a87af9-6fb4-402b-83ef-cab06d449175", "sighting--01cd5ab6-e296-45d0-9165-d15677174742", "sighting--c2b40cea-5530-400e-88e7-5911e53a49cb", "sighting--305f9a36-a753-4d8b-968e-b9aa7f9f06f4", "sighting--70b96bd9-185f-4ad1-ab9e-8653240bef5a", "sighting--0b3fe228-7a33-4522-8e3f-bfce77181640", "sighting--aaa82251-a941-4c68-8b2d-c03e57cf94ce", "sighting--7adf2cbf-002d-414f-a2c5-c29ce2ba056b", "sighting--b1492e2a-126a-427e-8c7e-bcb7d22ca5b5", "sighting--b38e8b4c-30a2-4e2d-adfc-f20c75170852", "sighting--f6312042-1bae-475d-9c48-cfdc07e459ef", "sighting--1f8adc17-c31b-4630-b3e9-36b788c8e062", "sighting--a34ce4c6-9bae-4e75-b9aa-2a44c3f3d9b5", "sighting--066d63e3-cfe2-4fb9-9e80-348b2eccb9fc", "sighting--c0093f93-0c00-4ffe-9707-3391300dd5f7", "sighting--25dae8be-4fd5-40c8-9586-4afe78ebc164", "sighting--d81ad1be-5383-4ed0-8b46-28ffd819f014", "sighting--8d323848-4033-43e8-a84e-d1f4bb5807e5", "sighting--f420e3f4-ea84-456a-bd3b-00d6216ca398", "sighting--fdece32e-c20d-4070-915c-d04df7cb3e70", "sighting--e7533a35-e446-4df9-9fe3-b982b664f7f7", "sighting--a585b7f3-02c5-4d95-b3d4-6999c59ce4f0", "sighting--6e7071ca-c61f-4eae-8fda-50b73f549ce0", "sighting--e508b9b3-47a4-49f3-afad-4ae3b9841602", "sighting--0e6d3a3f-205f-42df-bee9-cedfa23c8b76", "sighting--f9e263bb-0411-45b1-9530-6db1e95f8207", "sighting--7d93bcbd-ade4-4b50-931e-7675e13a3b96", "sighting--30be436f-7730-4e57-a08b-fb99965b1a99", "sighting--50dc8f44-cf58-4995-be05-1c1be2dab6cb", "sighting--19e1cfb1-0fee-4917-9f9c-ec071510b5e9", "sighting--4bbc7e92-fe69-4240-9551-3a00b24aa321", "sighting--3a1fcf72-0359-4edf-8097-21c8e68bd52d", "sighting--afd87a7b-2078-404f-9c77-5d32921998d0", "sighting--871cd2aa-a5ba-44bd-a1a4-3bb9c1de4d3e", "sighting--4c4f953d-f6d7-4535-92dc-0ce5f7671519", "sighting--2999c0f5-2083-46da-b0ec-435f32280589", "sighting--4c49d48c-215d-4ffd-95f0-966f06b5b6a6", "sighting--b9b5785e-8417-4b56-b81c-0e7c3d0abe5d", "sighting--c9f73dad-0275-4833-82da-0b528ee1b66c", "sighting--8f605e9f-f0b4-4aa0-baaf-30a0cba8677d", "sighting--d85a5a8e-90bb-4943-a0d1-7e72ba28e438", "sighting--11c13d3a-a76b-45c2-af37-07dc83442183", "sighting--72d34998-4fc4-4d74-be28-84fd8aa01d9a", "sighting--c1d8db57-91ad-42b9-a6a3-7770da28292b", "sighting--002d87fd-bd7d-4295-9852-e8f0c9f5d657", "sighting--6f7ffe92-e458-49bd-980f-93f18d891a75", "sighting--5f79ae8c-f673-4f9f-8d65-81a15e4babb7", "sighting--351ae067-c5e6-4eb6-8bb3-2c9665bcc561", "sighting--8a1eb3fc-88ab-45d1-ac48-a9deb13693f1", "sighting--2f23b5e1-5c87-4be3-81c8-826530cd9cfe", "sighting--2792c745-626b-4b9c-92ac-778285c41ed9", "sighting--4e74628f-a8fe-4ab3-9862-dcf9745bd743", "sighting--7282d119-0806-4df7-af47-d03e033e8b50", "sighting--b9f6735f-353d-40f6-afd2-908c20951635", "sighting--5b20c377-6b08-424b-bd78-fcc8736424a1", "sighting--a04813ca-cd4f-4613-b264-6f5b7db61b23", "sighting--05ec4c8c-32df-4868-a3d0-e1ae39170650", "sighting--48dbf305-376c-4179-ac87-7da0879ed72a", "sighting--458ef672-7e9f-45bc-8858-6f9269827fe4", "sighting--19785d1e-7ac6-4939-83dd-0370dcd38d22", "sighting--619a9513-9b78-4939-89cc-aca9469cf623", "sighting--5b1a3397-7f43-47b0-9368-62c51ae86bef", "sighting--6823a39f-2067-4ef3-b350-187580947931", "sighting--64503f6f-099d-4ae3-8445-cfeba07fb011", "sighting--1865fb2d-51ce-40f6-9b38-97d924ab6b72", "sighting--f7f28641-28c9-4a5b-a568-c421c7053f9f", "sighting--03712ed3-21c2-4943-9003-d1da2ec9dfb9", "sighting--3f26efe5-1128-4190-87ab-cf598b7c6435", "sighting--04d8663e-919c-4872-aa0f-1db49a4e2898", "sighting--449886b2-1bcb-48d5-85b6-25385209770e", "sighting--f9f2a6cd-fc5b-4180-b660-7eb6038342b7", "sighting--0edfec4c-8f3a-4671-a027-e1153be5c946", "sighting--053a5791-1cbc-4255-ba9c-cce27667043b", "sighting--1ba7ce33-c237-475e-9588-a79a3b56c1c3", "sighting--cdd6cda8-dcaf-446c-ac50-e0234933e1e9", "sighting--59df20c9-4f84-4c6a-9ff6-a8bb067bf44b", "sighting--31cb2d73-f3de-4891-870a-5a0f207d1c7d", "sighting--87b4efe2-4817-4451-8924-368bb0ec2524", "sighting--63a7fcc7-ab8e-4053-b21b-d9a81e1186e7", "sighting--fcd2a8b3-4544-4ee1-bc2f-eb5c2d296750", "sighting--f9de3017-34c3-4ff7-a8cd-0cfa5bfeb41d", "sighting--914a6798-2826-43f9-b896-0267ba13ddf1", "sighting--8009dcad-a7a6-4350-9b9d-7fc3ee1818ae", "sighting--bffa4bb9-2142-4280-a277-9eafe90510b9", "sighting--3a9b7531-841d-4221-b471-d76b39d023b2", "sighting--4be3821e-51dd-445a-a3eb-1bd284f29a85", "sighting--e467af7e-f81f-405f-afdd-da1a7f1ae60f", "sighting--4fb8ff36-c62a-4628-bfa8-8c448d9a31e5", "sighting--f39922d7-b4a1-44ea-a2aa-93e96c33afb4", "sighting--79fd19b0-3710-4d02-803a-4de32746098c", "sighting--dcfa07c9-d1ac-4010-9607-c4650905c41e", "sighting--2c72c380-1bd9-44cc-80e4-406f0283cc09", "sighting--25fe8287-ed47-4101-89ea-53c89368dd11", "sighting--99f1fda1-353f-4ac9-91d1-4d2af8b4e4b1", "sighting--5d9990d2-1176-45c9-895b-c8a7740fce65", "sighting--33ee3abf-1fb2-4673-844e-51bee071d384", "sighting--919885f6-bfeb-4e92-a0a7-b7d3b938e586", "sighting--8c0d95de-28b9-4c10-95d0-7450d8f8c558", "sighting--57529c57-1e47-49ff-a37b-e1291cb79be6", "sighting--40b63c9d-e8ce-4383-bcb8-ba65b3815f8a", "sighting--86b02f21-1887-42cc-90fd-146c0e64f69c", "sighting--72516adc-40c9-4410-b30c-85a9674c0f94", "sighting--6109a9e5-c65d-4c74-a548-da3216a8bac3", "sighting--c920eec4-9ab4-4f7c-a720-19061e780bb1", "sighting--10a0cc07-dcf5-4d94-acdd-173e50b3260a", "sighting--1f9033ba-b3fc-4c3b-97c7-36e54d816002", "sighting--713f2671-5887-4a59-b825-9f75d309e7e3", "sighting--6440866e-16fe-4047-9675-dd0e61fb0e16", "sighting--492555e7-6f59-42eb-9fda-5e8d7a1b8881", "sighting--bc22335d-9c48-4077-a002-ece9088f7b6f", "sighting--acd4a60d-dda9-44d7-b734-247c8bb4bc73", "sighting--b55060db-c360-4db0-92e6-6870412f0c5a", "sighting--9f7ddf5e-6dd3-4353-94bd-af1b5c043dda", "sighting--5bfc6fdf-6bd4-4ae5-893b-e91fcba8289f", "sighting--acc637dc-ea2d-4e53-8a51-b067f9cdfbdb", "sighting--7aecdf00-dd7d-41fa-9ed3-fed86c34f784", "sighting--3cb81ac0-719e-4c71-875e-176ecb29ad10", "sighting--cb9dc407-ff9d-456d-a8de-744698d8447b", "sighting--ac922a05-a805-4f37-88ae-754af8356c0a", "sighting--81d8a74d-3a62-40fd-a958-7952f2aea5e3", "sighting--e63f7fc1-7e89-4a5c-b3b4-337aff1d264b", "sighting--7e967f12-4df6-4adc-a5c5-efd2b1777ba0", "sighting--7a4da35f-c913-4e8b-9f92-77dd01f8ed3e", "sighting--0557145d-3ba4-4627-bb5f-1765cbb32fbf", "sighting--e29772f9-922a-4be6-9028-4687aeb420b2", "sighting--bcbbbaac-b002-4da6-b4b9-d72d085549f0", "sighting--bd355a6b-d0be-4145-a212-f474272928f1", "sighting--5e500c65-3e6c-46e6-b9cc-f5a2a816adbf", "sighting--83bdd419-b455-4111-9ef8-d254f639b8f6", "sighting--ffca44d9-9c5a-4da8-9272-3e7d417f5ad2", "sighting--571e93b5-332b-405d-bb6f-88703b25853f", "sighting--572a3ec0-ace5-4486-aa55-840ccc5204d0", "sighting--cd28b185-31ec-4861-87f6-a72ce2156d41", "sighting--61d5e5df-3ddb-4166-9e7f-5b403efc7d65", "sighting--4fe320cf-aa19-47cd-a831-d2affa656a45", "sighting--6e408abb-88fc-4fd9-b479-611f507c4383", "sighting--efb8318d-9d79-4a16-9f74-e4f22546c431", "sighting--02c72072-42b8-4856-b66a-10f1ca1a39d8", "sighting--6363427e-7238-458f-a994-9106e11aae66", "sighting--e97102de-3645-4cb7-b3aa-537b90f67ee0", "sighting--bcfd1d05-e41c-41c5-9e02-71cddaccbadc", "sighting--eab3de1b-ce46-445c-8e76-b8b2148a70a7", "sighting--19fd4d51-c7b0-4db9-af21-f13f741cc5d9", "sighting--2ea76dca-49be-4f41-a3c2-150a36e98c77", "sighting--d5375375-1df0-47ae-8abe-2c5bcbc64267", "sighting--f264fafb-6857-472b-89ac-a3a6c4db6097", "sighting--cd0faa99-049d-485d-a950-5508bd8df9db", "sighting--c7912111-fb47-4fea-bfc9-dcd148511066", "sighting--3b95e556-e573-4e49-ae6a-8cf3b884cd14", "sighting--4d38cafd-81c7-44bd-a95c-a476295b40a6", "sighting--cf1f6f7c-c548-4260-9110-c1e398d83e22", "sighting--c67d76ce-4a1d-4583-9fe6-5657e93cb89e", "sighting--4b69a0e5-045c-4dfe-b110-005cab219d59", "sighting--54f9bcbe-2fc2-4657-8675-be03e238b088", "sighting--36a464e7-b737-45bf-8859-661cb6c47507", "sighting--bfa5f326-ac84-4ddc-8b04-885f48f53bc2", "sighting--d3f5cf8b-aee2-4f8b-9789-f2a34f26ae49", "sighting--39a43b40-f035-4e7c-8037-4a33711aa0c0", "sighting--4f9c2f08-5317-443a-a495-ad2d76403e95", "sighting--3015bdac-b578-4b4d-9fc7-7f26945d4890", "sighting--246f4c5b-3267-440c-81c1-993d3fcd68f3", "sighting--c3a0886a-552c-4c18-ad80-25b751260ad2", "sighting--51ab3a33-83c9-4172-9081-06c295d9b347", "sighting--93a283dc-8f3b-451a-82ad-185540913400", "sighting--7877596d-9d64-4055-8fe0-70c12d7c154e", "sighting--a33e6df4-2779-41ec-887c-487cd926fecc", "sighting--26251e99-6765-4555-807c-acd34fb0025c", "sighting--a886683c-2066-4d91-95e6-d2db51323f10", "sighting--c8a89f2c-0696-4399-984c-e4f3497fa5cb", "sighting--d508b2ac-1054-4232-8eb6-bfdb17553c15", "sighting--848e368f-3de5-4639-ac5b-a59ee115a59c", "sighting--21896a5c-d5a9-4389-bbdc-9172a680a79c", "sighting--29e4edc9-d7c9-4f06-983b-fddfa9595a84", "sighting--29b958a7-55be-405e-b87d-269d61e428d6", "sighting--6102b87b-6238-4384-b10b-fa016e5aaf45", "sighting--fd410610-3836-4cfb-b3f2-2792c2f65c76", "sighting--407500ac-8af5-4528-86c7-af2f0d330370", "sighting--5919ee18-1896-48a5-929b-e35775c2b850", "sighting--e6afa266-f048-4b5f-8f39-1e29a97119ca", "sighting--3115b49b-f729-40af-9c2b-112114d79f90", "sighting--01afddb4-16b6-4681-8103-08680da6c630", "sighting--df18d708-d5f7-4076-a436-2976f4489f1d", "sighting--5f93de0e-9d8a-4de9-8e76-c909576c472d", "sighting--da64dea2-66ba-4972-a939-65eaa4cfcc68", "sighting--b927fedb-56d6-448d-b23c-60ad51ee6f5f", "sighting--7fb685ed-1591-455e-9fb9-882faaad8512", "sighting--fa2a0e45-2df8-485a-a4ae-5c20896e3dc3", "sighting--39af4db6-a59a-4659-8395-bfd254c86b7a", "sighting--fe09c167-1d6d-4f05-89ab-91e50e0ddcbe", "sighting--a33fcecc-d757-48a2-b813-1b5c9ec06c14", "sighting--de176cf0-7610-4387-a1ab-395cb1c901b4", "sighting--7f3abd79-905f-4dc4-ac5d-a1ead71399ca", "sighting--384274ba-4e38-43aa-bc0c-576b953adbd4", "sighting--522193e5-6f42-4637-8212-1227458aca7e", "sighting--6734a879-9c98-469c-bfd6-a9e6ae84e7a6", "sighting--9eae9d71-ee83-4c6a-b869-d743cd00bd07", "sighting--18b5ad5c-387c-4b3a-b853-ba5ba774d5b3", "sighting--e1d89ae3-e201-4384-9224-814a054bfe86", "sighting--064f6e8f-bce6-405e-93bc-b17be6132a19", "sighting--6022bfc1-7abb-4e9a-a5cf-e014972ddf82", "sighting--4e70309e-f062-4a7b-9773-b8044050057b", "sighting--e9702856-1335-46e9-9f45-28b95d8e3be1", "sighting--6516d9f4-153d-436f-a4af-693115c716d5", "sighting--0ce99a0a-d410-4421-ba13-f042ec71d1b3", "sighting--86f7342c-7836-40c9-a34c-a5aa07f0b423", "sighting--c34dbdca-5d09-422c-b111-b68b46fd30d2", "sighting--a577f609-be39-40ba-a1c0-be23e72fbe30", "sighting--575db5cf-3aa7-4f4d-bb70-c34fe7ba4fd6", "sighting--e4f384b9-a185-4e6b-8ac3-208d4f165b38", "sighting--c1755442-b2aa-4e51-b0d1-1f4ee4edb289", "sighting--1f781bd3-4be6-4999-b0b7-be2527ccf5fb", "sighting--38bf1670-06c0-4b56-a659-e50d713cdf01", "sighting--3a9d5509-17e0-4b33-a93a-cdf96a31d58d", "sighting--beb20f5d-d06d-4e81-be94-0f8ad9a75d2c", "sighting--660f88c1-92d9-4e47-be05-c5184927c190", "sighting--f06e554c-e1e9-4ac5-8419-2da65065be6c", "sighting--c29c851e-f381-475d-bc85-afd5776b5f0c", "sighting--e5c61c96-66f6-4591-ab17-9b1b0f9d17ff", "sighting--6135f084-90de-46d4-a41c-8c4f8e61926b", "sighting--deaaf3a6-9d68-4cdf-94ab-923f4db3dfcb", "sighting--3ccfa82a-30ae-432d-9274-972bc99eaef6", "sighting--c43db781-d6ea-4b44-bb91-64a27f6e7fe0", "sighting--08859bad-7745-4670-8a91-b161da319643", "sighting--084a002b-b9bb-42b8-bbc3-a9634c43bee6", "sighting--291578e2-6356-446e-8ccb-f421e0850fa4", "sighting--5f47ed75-58f6-4dc9-afc9-49c54e826ce2", "sighting--ccb2407d-d781-4164-930b-aadc968288dc", "sighting--91ccb049-9834-4962-a705-ebb213e3e5bd", "sighting--f1371543-6c2f-40e8-9727-4d5eb84bac7c", "sighting--01a609b1-71c7-4e68-9c41-e17da9790e13", "sighting--daef2012-6025-4d29-9dc0-1e26f16b1cdd", "sighting--c00e77be-06d5-469b-a0bb-9ea601cba875", "sighting--053b4401-b03d-469c-ae62-d1a182e82836", "sighting--4454488a-93ba-4210-baa5-94c9a4a01539", "sighting--152a6175-d6fd-47b2-b606-dfa5be363a86", "sighting--b8b32298-2d24-4294-9ba4-6a73700eb809", "sighting--a7922425-c9c6-405b-a4c2-b6f6af58d795", "sighting--9bb738d6-8fe9-48cf-a8a6-7a26994081b2", "sighting--3d9e4c96-7d4b-420b-9f23-d16b8dadebfa", "sighting--654b69dc-e46f-482c-b5dd-6ed0b4b2035a", "sighting--890ac1cb-1653-41f2-b284-537bd5a3e53e", "sighting--9c9f142e-c5d4-430c-912f-d8978f4ded8f", "sighting--ee26162d-44dd-4b40-8c0f-adc6c15b58ff", "sighting--a1690fb0-fdd6-4846-8d91-d13eff21f0cf", "sighting--efc48d23-2026-4f42-a503-fb34ce69baf3", "sighting--a0218292-385b-4872-9bf6-b296bbc4cc62", "sighting--f6fbeef4-a9c1-4ed4-8002-898721520496", "sighting--2981e3f3-40e7-4693-9087-6fdff9cbd9f1", "sighting--f3665ed1-82e3-4234-8932-11f2247dd676", "sighting--117a2de1-7bae-4864-bd88-d15b8d3a5a32", "sighting--ad9323f0-7948-4baa-9433-5ed21492e19f", "sighting--89ef9873-9656-474b-89c4-dfee3048eb12", "sighting--2681f7ac-0af2-4a67-81d0-c101f5441885", "sighting--6dc65016-1a43-416b-aced-8e3aec3e3011", "sighting--52dec6a4-2ff8-46b2-936f-6f91faf3e94b", "sighting--56af75e0-7b62-4167-8277-bf6c5e060e61", "sighting--65c83c67-31d8-4384-a1ed-22b5a092ece7", "sighting--d845e6f3-459d-4609-9990-2fffd98fc8a7", "sighting--3b51aad2-5820-4ae1-9308-8884f796f4cf", "sighting--1134df0b-ac7e-4627-af13-8eaa7372ae47", "sighting--dd00cdfb-4ee1-4bf7-aee3-9290d38f96ac", "sighting--38e7c9bb-d59d-4338-9b5c-a9c586356674", "sighting--a51aa738-2b64-41b0-ac5d-816fb9f32a0e", "sighting--c1f0c06c-829d-4860-b32d-0c0a80f9a875", "sighting--e8bab0d5-4596-4c88-b4fe-ea12e27c1369", "sighting--2128138d-f33d-4be6-95e3-451ea86e6492", "sighting--59ad9fdd-8b78-4d88-a436-56cdf1f0f494", "sighting--13b1d81d-3e2b-4e96-82c9-888d3edb3201", "sighting--dfa259cf-53c4-4386-88d2-5e4b5bc70a30", "sighting--f1bc4196-a568-49ba-870a-375e29e60187", "sighting--8b64e65e-9c05-47a4-a0e4-97cd22cd603f", "sighting--b3362315-41a7-4e7b-a6f1-47d5d829c57e", "sighting--ec8917db-29f0-47b0-a409-639618312660", "sighting--8e8dd396-9ce9-4659-92f7-2ae2e4139c3f", "sighting--9197611c-6895-421f-9ee7-9eb5bd416fb6", "sighting--da7045a1-66cd-4ec8-ad20-577ad67542e8", "sighting--819f391d-a0ea-45f3-ae49-2932e68d75e6", "sighting--aff1042a-a01d-4e34-8654-8485e4bd8afe", "sighting--f4a2350e-a8d6-4da4-8fe8-25d9c3ad7d52", "sighting--6d8c7184-250f-438c-97e8-2417ab9abb87", "sighting--073a2ab1-f06e-4c48-af53-b20df233b321", "sighting--ea6081b7-02e8-41be-86fd-bcbad393abc7", "sighting--5b01e392-8944-4341-96f1-53a865fcd930", "sighting--7d01d844-bd28-4a43-815c-34bca892fe7b", "sighting--537da878-dcab-49fd-89a5-71830e03f320", "sighting--eec77f05-1aab-4828-bb79-e272c2a67785", "sighting--44cd9168-4305-4c50-9f03-030386fbec97", "sighting--cbd35616-fd5e-4a96-a2e9-54d0da337596", "sighting--3d0aaeb6-842c-4705-816b-6934607496d4", "sighting--1606efa2-9bc2-43b2-8f18-5babce318549", "sighting--2e1be8f5-06f9-41a3-b753-a7d393f9c081", "sighting--ecaf00b1-079e-48b6-892d-a458af891692", "sighting--21dc9b03-9cb8-4f3c-b1ab-dcb401cf4337", "sighting--c60b5114-f976-4e33-96ff-a3debd2398f9", "sighting--e8a40c0f-2c54-40ca-be62-f70c8177bd6c", "sighting--de7a5610-10b5-43f2-86b1-7799dd36135f", "sighting--8422373e-a048-4909-8314-0b7f146e1438", "sighting--f071950d-d96d-4377-a095-2d0e52f7e119", "sighting--69bd057d-fc8c-4381-a577-02640ed9f6b5", "sighting--32819933-d7f7-4064-be45-bd13a6619008", "sighting--b17c2e3c-5218-4981-b5dc-e59b07fac06b", "sighting--3973e1e5-1f98-44e0-87ee-8e59936a3384", "sighting--ad66043e-1d0a-4d5f-9a9c-4b04b9b18edb", "sighting--ea2113db-a00d-42b0-b554-f62a4dd44986", "sighting--48de2f7f-2a66-427d-841b-6d89f9ec4958", "sighting--fd1bb8f4-974d-46e5-a697-05b4f363262c", "sighting--e782625a-a4d6-44f1-a57d-173e3d9efdc7", "sighting--9e0f0f83-05bb-4094-91e2-eaacfdd15ee3", "sighting--4fcc2b8b-442f-4774-881c-c6c8d796e0aa", "sighting--7a773df6-c549-41c2-a355-9b6f8c92a02f", "sighting--373132bd-1cc4-4e77-9d5e-f83158e02e6f", "sighting--6a7eef92-acaf-486f-882d-ff92e8c6ca42", "sighting--198f8a90-93ce-478f-879c-fa025f3e0104", "sighting--1d1d0954-5d71-41ff-b225-66b830859e12", "sighting--9cd04cd5-70a9-4b5d-97e2-875665c4006f", "sighting--62c447a0-d04e-409e-a215-cac38ab3b955", "sighting--b5cdfb6f-3d6b-4209-b9b2-7a3a9032533e", "sighting--952008e0-bf36-4898-9014-95feb7303f93", "sighting--512f29c2-e553-4bdb-80c6-f2414916d40e", "sighting--461b42dd-200b-4eb6-beaf-9958443700ac", "sighting--fa958e7c-2558-4e37-82a4-aa50be9d4891", "sighting--d248ed16-de97-4965-812b-ba86b355d027", "sighting--4b6d869d-6f6d-4ac4-958f-d96a5673e5cb", "sighting--0bb6cd3e-3eb2-4398-a3c8-4e751ad2368e", "sighting--d9120f46-beeb-465e-baae-a7cc5dea8c46", "sighting--e5ee2026-cd83-42f1-82e9-8c49f8c1fcdd", "sighting--4aaec903-33d9-47f5-9855-4bdc3c4eec41", "sighting--96b31875-6700-4c4b-a8b1-99fb5b891e5a", "sighting--47d2317f-97ad-4eea-a460-debcfadb3ded", "sighting--2c3f82c2-67bc-4d1f-ae1a-802149d00748", "sighting--d79b7c93-8553-4d98-831d-b3fae3b5bad7", "sighting--1796e395-ef3b-4bb4-97cc-03099e249244", "sighting--b2bde1f0-e286-475c-b82f-7aaf592a7f47", "sighting--ee48cb91-7d94-4bbf-b8b0-eeec936c4384", "sighting--31c57974-5d48-4a21-b50c-c66af9637873", "sighting--d9a0dd6c-c242-4f96-8db4-9de0291e9d74", "sighting--bc6c544d-f62e-4cc7-8149-c0aded51ff91", "sighting--4d2296d6-1a91-4d31-a9ee-564b49d4c2ae", "sighting--cff9a135-d886-4af9-9bc5-ce90d0330be1", "sighting--5b76547a-cb17-46a1-8546-a2ab75953569", "sighting--73913b75-93df-4c81-95c8-4a68411cf8c9", "sighting--7401ad30-de16-40c8-8a96-8536eb6db81b", "sighting--d548dbf2-4183-478c-b334-a42845821b4b", "sighting--e0e856c2-a2d9-452a-b51f-f89038cf5baf", "sighting--723d1890-e027-4c1e-baf8-3247b3fd551c", "sighting--7ce42bdd-2f4e-4634-a630-e0456b6427ff", "sighting--7f026107-7cd4-48e3-9eab-b4fa37643430", "sighting--28d7a056-6144-43a0-a341-1169b7e81388", "sighting--26ecef7a-d847-4ce4-9774-19dc0982c61e", "sighting--9e6cf80b-c6d2-48a1-bde9-952a0bfdb1f9", "sighting--04d79d19-fd44-431e-8e0f-0e8ffb559c42", "sighting--a6cf468f-ba12-4a31-927b-da25113dc123", "sighting--ca526ca5-8f32-4772-b79b-8cf8d5ae75f2", "sighting--ce82fab6-e8fe-4445-84b1-0ca35895144d", "sighting--5ea7e19e-6de0-434f-8d2e-f9b403e4c501", "sighting--e2c9e30d-845c-4f41-8015-883537e76b4b", "sighting--5815555f-fa7f-40f8-9848-44e0582877f5", "sighting--96702555-8f9b-470e-ab3a-ea83688e90c1", "sighting--6611da6a-d5c1-484e-bde2-579e8659e7c2", "sighting--a5daf332-8830-4df2-bf6c-58cc449b9034", "sighting--51f07293-f1ac-4798-8ad9-3d4c1b0b9076", "sighting--15850fdb-3fa5-4ffb-b8b9-ba746082ea03", "sighting--ae6ac915-2c72-4e2d-a723-b4b1b242d993", "sighting--76a34174-15e7-435b-8275-7a44428ffd68", "sighting--1256c634-f624-48e8-a0aa-4bdf5707518e", "sighting--07cbe6c4-59c6-4256-ac8a-edd7660dc527", "sighting--6260983b-4d4c-4247-bc12-6f386d8ac5ed", "sighting--f31f0efd-cb0a-4b4a-8085-e8a1181b0c5b", "sighting--bd6df8c1-c097-4604-95ff-aa050c58badd", "sighting--2ab8e66b-71c9-48f6-9837-a8f4ff41c189", "sighting--eed9935d-6d82-4451-92b5-c6f5ff85b832", "sighting--1c3ec5ff-6369-4aba-886f-f77d0c18153a", "sighting--47452a69-d592-4e54-9164-91000183550c", "sighting--c0159595-c231-40bc-93a2-96b3052cc7d5", "sighting--7078a617-7e6a-4513-883f-6d2d8ea4b81d", "sighting--fbef1378-64dc-4fa3-a011-c901dfcf449d", "sighting--7eaddd03-c231-44fe-91c9-9e75dc34e6d0", "sighting--6c159ec0-5882-449a-bc40-cd1bec034226", "sighting--7ecc2779-f321-4615-9f57-52d3a65671b0", "sighting--22599fd5-f337-4f70-89df-5076c6404a97", "sighting--77fc0fd9-4d08-45b3-a2bf-de5899f9cad5", "sighting--f9ecdf99-c65a-4ded-99d2-05a7a7baec17", "sighting--edfdce77-c849-4889-b34f-870ee6323ee5", "sighting--379be8f9-a6e8-4b8b-9248-062c3c073b57", "sighting--e5a42bc4-d6ec-4439-a28e-628c58122a9b", "sighting--8ab02b08-2863-4606-aa52-0f6a58340865", "sighting--bf094de9-8c8f-4ba6-960f-20ae93ae6d62", "sighting--ad02dee2-63f1-482e-8e70-9b2bf45da19c", "sighting--639de5fe-6846-4a19-885a-c7904581ad4b", "sighting--1a7e2783-cde1-4a9d-8c9a-22687dfd93bb", "sighting--4bb3bb80-de38-4ae5-8ced-c90072c8072c", "sighting--9c40b36e-4646-44a8-b33e-1ae9872857ed", "sighting--e3e92fcd-eff5-4cb2-a11f-fc0f57f24515", "sighting--e12b1681-f04f-484c-b6a0-cfcc45153f02", "sighting--f7541968-6111-45a6-8823-81ea85021033", "sighting--6293e471-5484-4f94-a3a6-d39f44b50aeb", "sighting--7e41918c-1e0a-4d51-bda8-e13b9c85fa80", "sighting--e9bf031d-b916-4dca-957b-9890b4777a8a", "sighting--01f710d4-a753-4d2b-afe1-8577eb11862d", "sighting--62b0345a-05e5-45e3-8288-e3d03c372840", "sighting--e5875d81-595d-4369-b629-40adb24547ac", "sighting--9a9b8831-23de-441b-a522-1e9ee657ba22", "sighting--ac5076ff-7708-410d-8586-612f13094092", "sighting--95d3b08e-be7b-4baf-9112-97106c881fac", "sighting--f5e699bb-0cb7-456f-b81b-9906b9e565ea", "sighting--1a9e4693-9057-413a-9686-57351c323d87", "sighting--c7319264-994e-4815-8712-0a90042a097b", "sighting--4330ad1b-3202-4401-b6cb-49619ff8b7e6", "sighting--7b072b4e-a6b9-469d-83ea-f2c2ab5a0855", "sighting--0fb6116b-2f7b-43ac-89bd-c67d7e3a5442", "sighting--f3ee9706-c2f7-4602-b01f-c7e3d3323419", "sighting--92fa0250-f3d6-4fd8-b12b-0f68a5a131d3", "sighting--8dbfc077-e458-4e86-bf44-5a265d5eafc9", "sighting--9fedabf0-59cb-4135-bf79-3442b3fdacdc", "sighting--432d5124-124f-4e49-aa81-7bca8b78bada", "sighting--3e905cad-de63-402e-8d51-f07930def01d", "sighting--31f91e4d-261d-4e8b-a222-391cfaf0f344", "sighting--562b7d80-5750-4c62-9f21-77f5eda0e35a", "sighting--7f3ab280-0ce4-422d-91d9-467c6dcab130", "sighting--b5b7fb5b-de7a-419f-8906-21e7abcf64c2", "sighting--d6ef10a5-2afa-4a27-998c-598135223dde", "sighting--db2aa3de-7330-4059-abb3-8e6f7aa4cfff", "sighting--5e68dba0-11a7-4ad1-ae1c-a04742846a5f", "sighting--9f22fdf0-4adf-4f22-bee0-a4221c3a7ca0", "sighting--6590b95a-f27e-40f5-8d72-4b13af027eb8", "sighting--27684850-6fc0-43d0-80fa-98df5cf4f60d", "sighting--4bfe0edb-7901-4daa-8885-589740e1e854", "sighting--ccf8fd69-4163-4548-95d7-cf78a779f707", "sighting--092062ce-9e4a-476a-a0af-ed7695ebd6f4", "sighting--2473a4d1-6469-4a5b-9f80-f5d3b181b5bd", "sighting--292c7840-77c8-4b7e-b71a-f9078eb76c4b", "sighting--b204cdc3-5737-4967-b620-0a8dcca1d8f3", "sighting--4d118e9f-a76e-44ea-80e7-9c2474573ab0", "sighting--82a307ff-256b-42d7-8d07-4c0d90d2dc13", "sighting--ba746eda-cdfa-4653-826f-166524c9793d", "sighting--db403aca-dfe0-4d7f-879d-37b1507797e2", "sighting--0aeaf3d0-df98-4d49-beb7-8d31c2dc850e", "sighting--78cf8f19-e9f8-46e2-9826-6b39049a4132", "sighting--d49dff2a-05a2-4d5d-aa30-d041d5d041d2", "sighting--3ca32763-de8b-414e-aee4-801c80ab9711", "sighting--e19eae40-e48e-4348-8696-82be5c86fd4c", "sighting--93ec7ea0-dc0d-4cac-b157-9166f6d9ee63", "sighting--2788b76b-48b8-477d-9941-3a794d1a572f", "sighting--62174d6c-ec4e-4907-b5da-f50387d88d4a", "sighting--ac60e7dc-acb8-41b7-9cec-119f2aef27e4", "sighting--08ffca07-052e-4502-afc7-c3b51fd19fd4", "sighting--510fde02-755c-49cf-a334-6163a3dad517", "sighting--0bc90d46-327a-4eb4-ac19-67e25c388d1d", "sighting--ada61fc5-960b-45b9-8555-e1b91f217949", "sighting--cb4df3c9-02fb-48d6-8dd1-863e43f64c75", "sighting--d0c98966-1d25-4c6a-80fb-0924c05a3e83", "sighting--48b06073-1db2-4306-bcf2-f49f94416069", "sighting--cf3113f3-6f59-4646-8f8a-35be0860c313", "sighting--86fbbd1a-3246-4c29-8737-31821213c1b4", "sighting--9815c472-7a7b-4bf6-98c8-44ce83d13fd0", "sighting--f5ae02fb-6537-4ce9-94ab-6caa04912db8", "sighting--f45f3ff0-3c15-4638-92bb-78f982ec04e6", "sighting--7ad3c90a-8578-46d2-a8d7-40cacc698064", "sighting--88c33060-e70d-41eb-a403-e897f3940f4d", "sighting--2e7f13d6-0197-4715-b82a-13ea6f3bb7f9", "sighting--0d0e5a67-db8c-4f9e-a59e-795a24ee9b5f", "sighting--d076218f-0b87-49d1-8f57-77f0c1a7db68", "sighting--3fbf364b-4a5a-4ee7-b030-f6861b55e69a", "sighting--406b577f-8318-4267-a3d1-b8ff2a806791", "sighting--9ff00630-5182-4f30-8bbd-3a3348fc75b3", "sighting--4e7ef115-dfd7-43dc-85cb-fa119222197c", "sighting--c9f3e953-0773-46cd-96cd-0466e0deb6b7", "sighting--63d27fcd-e572-460e-a20b-0afbd60913d0", "sighting--a634550d-1897-4557-842e-1fdbea6f356d", "sighting--1e771853-01a0-4ed1-9a95-4b4a8e0e97e0", "sighting--222bbe7f-7f0c-438c-8a77-40d39eefda91", "sighting--e3fc09ab-5d20-4914-8517-a2169a9764ca", "sighting--21d100d2-5da9-4b1b-a738-d0df35fbad5e", "sighting--abe38870-d064-48f8-8741-10fc7d2ba47d", "sighting--449266a3-fbfb-4544-92e6-a0ed62989a4d", "sighting--fdc9c7bd-a8ea-48b4-ad68-5f78cb0d57bf", "sighting--e9c3d7ae-c111-4640-92db-cd60e00ee55d", "sighting--53e06f1b-691c-4dd6-a055-d3da397c0cc8", "sighting--ab7d7eb4-053f-4ab6-ba53-9ded960dfe5a", "sighting--772e62c1-d182-4666-8277-292d93252fb0", "sighting--ecc4ebae-e5bf-479b-9b39-e08665029d7c", "sighting--49800d7c-c6c9-4678-afde-093e5fcb1824", "sighting--59a3d8e9-5a7a-4d68-8bb2-3e4e69d627ff", "sighting--90a3c44f-2859-4c7e-b21a-b17edacd0d91", "sighting--5917572c-202c-4570-8f86-8aaa841dc3eb", "sighting--56450b8e-59a3-4d57-91b3-9ed14617cc38", "sighting--85b355ee-160c-4ea4-bee8-e727c646ba2d", "sighting--02f59293-c222-4941-9c01-132a12e2492a", "sighting--07c64d15-5d6f-4936-985a-850a727318a2", "sighting--3e8b7aeb-2cb3-449d-bdfd-4699348b28be", "sighting--6e0c8db5-75ba-404c-9253-95cf74aa4c37", "sighting--956fbe3b-fe57-40d4-bc69-2ed7456fc54d", "sighting--2d4270cb-4731-47cc-ab3b-f19b9b8e9681", "sighting--50d0124c-11f2-4cee-929f-c4fdf6d60993", "sighting--481b25fe-797b-47cc-9ea8-a1f815bda489", "sighting--9bd331fb-abd8-4d32-a8f8-4a0cdc34126e", "sighting--26e8494f-c818-44c2-85f5-914463f495b6", "sighting--dd986bd5-86b6-42e4-a894-8e589c56926c", "sighting--0a837128-a195-4cad-b356-f10890cb7d9b", "sighting--da3856c8-19fd-48b3-997f-c0299546b13d", "sighting--c1801fb5-c3d8-410e-8d1c-3155eeffd941", "sighting--538e3a29-a81d-4dd7-986e-9aa0578cc7ee", "sighting--50a30d45-201b-49f5-b304-7db880cd4daa", "sighting--d2aa173f-c607-4151-9add-1102aaff2385", "sighting--d6aefe1f-6c75-48fc-bca6-aac15c1aab6e", "sighting--c3e043d8-ba5d-403c-910a-d44828d97746", "sighting--afc0f2b3-41d4-45e7-ac70-b698e4c1764b", "sighting--aa6ea8ef-c3fc-4e13-b943-981736f41e2a", "sighting--628279d1-182e-4032-aa36-15307c34f21e", "sighting--c43ee531-74ac-4284-8967-6134b27e4965", "sighting--9b27014a-a108-44d3-8588-58676474b765", "sighting--394f5213-884b-4e71-b2eb-f903b2426f0d", "sighting--5c1a91f9-5c6f-4cba-839d-d778edea189d", "sighting--dcf784b7-2a43-4578-ac16-d4d1544c69dc", "sighting--56d164eb-6d6b-4376-94ae-f5692846921e", "sighting--123e5619-f3ba-4222-90cb-27572c52d0cf", "sighting--050b43b0-6c1e-404c-8d29-112baedef90b", "sighting--686a91a6-883b-4d2a-8a9b-6fb4d56bb0ca", "sighting--e9c15b7c-f920-4e1d-8c6e-bf83621ba5a7", "sighting--e761a47a-aac0-4234-874b-e21dec26af70", "sighting--839c3557-93be-4984-855a-e39efda5019d", "sighting--8838c15a-376c-49f7-953a-a018287ded84", "sighting--1c7c0555-1130-4068-a73a-b7b31c50c552", "sighting--63f2ccd2-9edb-46b3-bf05-b19c80ea7f3e", "sighting--4a46ee28-8317-413a-a9d8-00961d1819bf", "sighting--dd6f2c6f-d54e-4092-acca-97b9f48e2d48", "sighting--f9d67fba-58f2-461b-8560-29dd80b08e75", "sighting--38d837ae-27e3-4109-957b-7eee9425c8c2", "sighting--ea4c4024-6bce-4f0a-ad14-a4a01b6ee3d0", "sighting--a8236063-617b-4294-8d6b-2a8e5a99262b", "sighting--faec5011-1c3c-4d08-af07-767c3b435fd1", "sighting--3658365a-2718-4f90-84b1-4ed5934c2b65", "sighting--df504fe2-b46e-4bf6-99d8-a0174d3329a4", "sighting--790ef9a0-5be3-4ada-89a8-cf1389942e89", "sighting--d37e770a-4a21-4baf-85ce-400a86c5104a", "sighting--9c231afd-4625-449e-a602-b9abfd77f931", "sighting--01f89fba-87ce-480d-9a37-b8e2f9a5223c", "sighting--2fb77a40-16e6-43d8-9136-88cf354322a5", "sighting--49f3373c-b43e-429b-8788-8e249bb4ee29", "sighting--2c01d0c9-485b-42c4-862f-d3bb2ee569e1", "sighting--7f4e7b37-153f-4d51-90e5-2caf303a9e17", "sighting--9d6962a0-5574-469c-98e9-f80389b1a7fa", "sighting--9d190926-b0a5-4b4c-9d0a-7bd42996b9f8", "sighting--0bbfab5a-e337-43ad-896f-23273786e891", "sighting--e418feb0-67e0-40b0-aa1f-ae611cbc76d3", "sighting--3c068aeb-e7c2-49db-9e3e-a8286342a780", "sighting--ca3dba76-2199-4d9e-ae9e-af710622af67", "sighting--00780b7a-e43c-4dca-9a82-9f3dcd4ff2b6", "sighting--9a9e9462-5d4f-4b04-8a1b-10dcb413d03a", "sighting--c271a78e-2266-4353-9029-7ae8134c397a", "sighting--9187778a-56cb-417d-bbb6-51312880afd2", "sighting--26c8554b-9435-42b4-8627-1e55c225306e", "sighting--a599d818-bc1e-40d9-94b7-1994d5e76ba6", "sighting--7866ebbf-afd3-4346-b7e4-bad1000c8c35", "sighting--a020dedf-fdbe-418e-8fd8-8b1bb4912bc4", "sighting--61072726-dd45-41fc-9be6-e8aab08eb3bd", "sighting--0a7575c2-1b4f-4131-a7ce-1405b562268f", "sighting--7603c7ce-bb3b-46c0-ae3a-d25990f42e25", "sighting--651a0577-53aa-4a53-8554-0129d67cd906", "sighting--df040bd5-303d-40df-9a91-c6c193bb1669", "sighting--5bcc5f04-f240-4bb1-a527-172ed6eea6de", "sighting--d1377516-7703-4156-ab36-01645b3d9d90", "sighting--5d78a1c3-bf82-408d-bd28-c48930d6bb35", "sighting--80508a54-41f1-4cb7-83d8-5fe12f8608e2", "sighting--20840752-a167-45c6-bf96-21cc1fc269d0", "sighting--a6e91e64-ec55-4f93-9dea-cf9239c193fb", "sighting--b06ab744-dded-49cb-89aa-0cda713aabb0", "sighting--87c53988-efa7-4d15-944d-e4531bc004a2", "sighting--95a44067-dc71-4fa3-9472-c09e4687ab7f", "sighting--c5392b0a-693b-4b2c-8da2-d3fa8bae6f0a", "sighting--4b734754-6c23-404f-b77a-8d43e67af03a", "sighting--7665a3d4-dc9e-4ff2-921e-d9b35d55236b", "sighting--cbdfa7d7-fce9-4466-9ac8-83d7d2887a6f", "sighting--a37cdb0f-b59e-46ec-a67b-e046bcae947b", "sighting--7c567ed5-412c-4df1-867f-dc3d0e26cb66", "sighting--f6ec53e5-6d3e-4004-81a3-9900068a7316", "sighting--687e89f5-2b6f-46db-8344-f2d98d05967e", "sighting--8dec9762-3e23-4420-9742-9533a0f67a13", "sighting--c3badb32-fc5b-44e5-9756-ab5da0e660fe", "sighting--d19aec6b-a24d-4344-9474-40afd79d7c76", "sighting--c832479e-365a-4c65-a2cf-6a025205b64d", "sighting--fce1069a-eb66-4d81-b9ac-b57354684216", "sighting--d5452501-6a91-4211-811f-e68eb97c4860", "sighting--10061e52-109c-4618-bd6b-647d24c3d55e", "sighting--96637eb4-2c20-4ff8-836f-c475feb62afd", "sighting--415424ff-7241-4ad8-8d2f-5e5d8e42519f", "sighting--e0cdfa59-71e1-4336-ad40-44d4ce289957", "sighting--f814f25f-5bbc-4b05-aed2-812bd1d1a777", "sighting--53348d0f-0daa-4dd5-9e2f-c8b7071a0d86", "sighting--ea4849c2-bc39-4953-b075-baed7948e769", "sighting--2eabf4f9-c890-47cb-9e9d-06dd4c2f2360", "sighting--c335cec7-cabf-4007-a1e4-e5111e8dc08b", "sighting--b0dfc9d8-9c62-4006-be7c-6567ce31950e", "sighting--412a25c6-3559-4473-b25b-8f7574d1702d", "sighting--5c7d5aae-2c73-4af2-960a-4905029399de", "sighting--cc5e186e-f9d3-4f36-b4fd-2d66d9141818", "sighting--74f3a220-3ccf-4a27-8c22-8c8a032e4910", "sighting--12703744-2ec2-4216-9094-a902eebc6fc8", "sighting--376eb7e1-e734-41c3-b7aa-824b2783e267", "sighting--95f3133d-9b43-4a99-990e-19381793a8d5", "sighting--0db0d883-0ae8-4010-a491-73fbbb4a64a2", "sighting--9001ac62-1599-482c-8777-b55b9415faa9", "sighting--ca03fc60-a5ee-4a35-adc1-91dbca8a71e2", "sighting--55ad2c69-4337-4ded-9abe-50cbeb75f713", "sighting--6c476d6b-db90-4476-b828-10df0d62194a", "sighting--aaa87259-d315-48e9-bd3a-cb95b4e97935", "sighting--f80be6ae-0439-437c-aca9-a9ed6aa9ac8a", "sighting--efacec07-8250-462c-87ef-290865e589a8", "sighting--b258f85e-a905-4d4b-b168-5547c581e68c", "sighting--557f3cf6-9983-4410-bd34-50cdc0b20155", "sighting--acce9572-7c73-4a0e-92ff-70394ea9b0ba", "sighting--9af466c7-3451-4204-8b56-aac6f63ae440", "sighting--500e1250-a5ee-4a94-b4a5-3a01a97f9f0a", "sighting--cb1a7b86-abbb-4549-873c-d6901ddc8dc5", "sighting--e6d746e1-3a43-465d-934a-b6309b68e3b7", "sighting--7f48f176-8112-4499-b7d5-fd29a81ddb94", "sighting--393b9cc6-a76a-4d5f-a2f7-4ac05c7db035", "sighting--a03d155c-916a-4ef3-83ae-3813296a8cd6", "sighting--46956968-8b69-4474-a2fb-75e0f271e283", "sighting--50e6e53c-3f84-4ca9-be6f-3e6c47f00548", "sighting--53239dfd-b586-4615-8e29-ed67e1abb080", "sighting--bec75f34-346b-4543-b2d5-a8d88be67fb5", "sighting--c98e70a2-629c-4e43-ad94-576eac96efc6", "sighting--e46c81f8-f4ea-4f83-b4ba-311d574fe903", "sighting--c93a5dea-5893-4a8f-9e2c-040b03e34be3", "sighting--67071ebf-8e5a-4582-9f2a-1b191882cf31", "sighting--022e1eb0-fba6-4bdd-a106-3f6f64fccb2f", "sighting--0962f6b6-ac9e-4935-b54a-69bcae9bd23d", "sighting--948c825a-8e78-4798-8ddd-a8e979d707c5", "sighting--9e8de093-63fa-4363-9406-b15573e5c984", "sighting--bbeec1cc-ff1b-489f-a141-8cbac3fbfa14", "sighting--c497eb18-64b3-4313-845c-0c5f61a82892", "sighting--64d7674a-a079-40c6-bc32-28ab1d0f24e8", "sighting--d81a1fbc-f644-461e-9e16-71b5fa4eca06", "sighting--2ca52045-0e93-4256-b51a-a04db2a3e682", "sighting--659255cc-24a4-4b32-9e9d-da17e2a36fde", "sighting--2ebea25d-1e0f-4038-ba83-a5c319e87455", "sighting--0812ead0-a294-4f21-97b5-0691feb8a82f", "sighting--25839d74-6569-4920-b249-a5c1d73b11fa", "sighting--b2e75808-7600-4be6-b128-59b32131e416", "sighting--34964848-65ab-4e7b-be4e-4725fd16d495", "sighting--a78a62db-34cd-423d-a9b5-fab532dad52c", "sighting--51a365a4-c983-4d81-b2df-8e28b2b7fce8", "sighting--2d98603e-7adc-4962-b534-f3f85737969a", "sighting--b08d5607-be54-4945-8e51-d25ab065be62", "sighting--23597c61-bdd1-45b4-9c26-4570c038dea4", "sighting--3f2d032f-2093-40ac-beab-c7889b4c6dc7", "sighting--bb3b5c23-84d8-410e-91c2-da6e25163ebc", "sighting--1117b4bc-92a6-49b1-8e48-d2fc995cff8a", "sighting--677ee672-776b-4728-84cf-0558046b2098", "sighting--9dfb2a9e-d9d6-45e5-9cbf-e13024cc693b", "sighting--7e8c03ea-13ab-4cda-adb5-093942014357", "sighting--fb5d7b6e-daa0-4718-b333-b748e0e47383", "sighting--2d5cf9e5-7c73-4928-bccd-6d3669da1e9b", "sighting--308c1faa-c08b-444a-a69b-6a18944eb834", "sighting--b2a39310-bb8b-41d5-bcb7-d1cd5cc25f1f", "sighting--49482dd3-748d-4f9b-8d89-cebf55dce5a3", "sighting--e3a9e999-9710-450f-a9ed-55ed7d5cc562", "sighting--6fbd8310-cf61-4544-9207-bc6dbd36d024", "sighting--f8c989ef-9d03-4140-b7b6-63a82423a48b", "sighting--08d72045-f564-4ad8-8b74-d9f6a81e30e2", "sighting--bee90bef-2ae1-4483-aa7d-6e88ae2c2c48", "sighting--450496b1-ba58-442f-9f07-efbae697bdec", "sighting--01506200-d85f-437b-8dfc-219ab3013330", "sighting--ad37d9c0-e519-4936-9b7a-6195bf88a4f8", "sighting--ad0d5db0-0e61-4589-b2da-f8ba8e733c18", "sighting--ac8ecc68-30aa-40c2-b8e6-8c50395d23dc", "sighting--78f558d5-a43d-446e-932c-1514173117a1", "sighting--048fa30a-66cf-41a3-8cef-bf412a9261e4", "sighting--44dda40c-7961-4660-8a66-32b17393cd53", "sighting--cb58fde9-0492-4775-9d62-8af97ce1d14b", "sighting--310573d7-0479-4b59-b80b-68c07aa4eba7", "sighting--58b142a4-b10a-4dda-80de-13e0f1c8733b", "sighting--bde958d7-4b0c-4e82-881b-080c48c71c9f", "sighting--0bae6dde-765d-4c42-988a-86310ccc6ceb", "sighting--9dddd9ba-4f7b-4a88-9c02-fc74bc3dade9", "sighting--8cef3be5-7b7c-45e6-9a34-e01aa4ecb00f", "sighting--4b6f10dc-79c9-442b-9e9c-ad8771aecc5b", "sighting--29f1acf2-36f9-4144-a8eb-51e04966da11", "sighting--fe21767c-9923-485c-9291-8d849df98553", "sighting--52aab6a8-a3fc-4716-9bba-b2a1934b96b0", "sighting--21460b90-4bc5-4779-af11-99a6994882e4", "sighting--d4ffbf4e-7d1b-44f7-ac62-5f77230e0960", "sighting--407a93ff-282e-4213-af46-1805506d809b", "sighting--4334697a-6314-42fb-a913-c15d8b9209a2", "sighting--881af0dc-9410-42a2-8f4e-62073dd4102f", "sighting--869caefb-9523-426d-9568-9729973f1d00", "sighting--217954e3-0f13-4ee3-a794-28a927ef4d1e", "sighting--57228a8a-faf7-494d-adca-485ae9223039", "sighting--3c57da68-dc27-48fa-ae78-fe362d162eeb", "sighting--25c72669-d83d-4322-8632-e479e4330f53", "sighting--f066fd87-48c1-461f-a03d-e6c5e1abf2fb", "sighting--cbda517e-fda1-4beb-bb2f-4ed6ccb90a2d", "sighting--e543e79f-6cd8-4de6-a4bb-bc1b39c22992", "sighting--b2e9fbfc-1e4b-401d-968d-b07049385ddb", "sighting--291e6e87-7c52-4d67-947e-ff1c6e52ccb5", "sighting--c4aa354a-c65b-4933-a863-7e284b3c3922", "sighting--1560c743-aa40-4343-ac59-f2bba37facbe", "sighting--91f521a4-6b1e-48ff-b804-2e170d649672", "sighting--b25d89a7-b4e4-4596-8de3-8c3b850f08b9", "sighting--441ceaa7-8f94-4d76-bfb6-f60b5a64f181", "sighting--963665fa-5d0e-4ada-8fc9-5faa444d5511", "sighting--d1b11c74-530a-4d33-bd0d-0fc7992b52e4", "sighting--d593f30e-2286-462d-acb0-17eb98d1a264", "sighting--0791b45d-9020-44e7-8af1-ceaa222547d9", "sighting--95c3d33f-b5b3-486d-8c0d-4686c35abf51", "sighting--e4769aab-61ef-4c61-95a6-df3c648b8d5d", "sighting--051aca1f-d8f8-43e5-b661-c3719d0ce089", "sighting--06e2b822-f5cc-4018-ae6a-6f0220c49baa", "sighting--6d80a302-7f3a-48c5-8344-f5f42d97df85", "sighting--98dff511-70da-4ecd-bc34-1b4f3dc69d13", "sighting--c45f397b-77fc-4a19-b6d6-0431ce107e34", "sighting--2e97c5c1-4bd9-4581-8685-e9bc8e99d565", "sighting--8e6aa82b-6036-4d8b-8864-3b1e592574a8", "sighting--c4a3ac1a-a91c-4654-8ce9-c40be7ffcea3", "sighting--8f3b085d-047e-4c5e-9215-791685dc68e3", "sighting--d57bb040-b5f7-482c-a6c9-6fe76e888835", "sighting--10930d87-54c8-4604-832b-73ad7ea3c1fd", "sighting--7227b246-c74f-40b9-90c6-e625351cd73f", "sighting--92ad7f67-3b2f-4330-a757-c9e22083dcc0", "sighting--4ea15afa-e48d-4c0d-83c8-6b5b256e23de", "sighting--c3eda223-0ea0-44b4-9c14-92141b76791d", "sighting--1b0c9502-966c-47cb-b18a-411b31a3d1a1", "sighting--52edde0c-cba9-4f06-867c-e5fb1aac4cde", "sighting--612fa21d-5199-4f2c-92cc-c34e3d48ef19", "sighting--9ba528d1-73dc-4bf2-806e-0057131bbf9a", "sighting--de6fa931-f415-422f-b0f8-8856f162d73e", "sighting--7a1606ad-f3db-4467-b934-317592fee71b", "sighting--2c6a6bf9-2415-4d6c-9181-fe29e29eab60", "sighting--f3d226dc-7f54-4fee-89b4-a91b7c0991d9", "sighting--75ea2982-878c-440f-ad5c-4e8ed5837cbe", "sighting--e1a91eb7-9ddb-415b-b49c-be9f95684f1e", "sighting--707a8653-8538-4e47-bc21-8450cc9aa377", "sighting--a9d6bf9c-3674-4088-a8b2-208dd2de4143", "sighting--1f70a91b-96de-4542-accd-983f188f73f8", "sighting--108fbe3a-b7d3-4a82-9aa8-49bc75eb9571", "sighting--f5b44235-a6b3-4a5b-b205-366990e117dd", "sighting--5b233177-c238-40e7-805f-c533e27ac8b8", "sighting--3e653831-31b7-41c5-ba98-6411ced7bdf0", "sighting--9b76bf60-a372-4f60-a4b8-8cb71fcb3f79", "sighting--1f64759f-82ac-415e-8c44-164b61072564", "sighting--4656b987-fc63-492e-8e1a-fb7c156007c4", "sighting--26e208d4-5edb-4017-892e-b00100c48934", "sighting--d3043e12-7b56-4a79-a6d7-a6d055d7b047", "sighting--aeafcdd5-fbe4-4a07-911e-2e01da1b4b3e", "sighting--4114f454-b165-49f0-9807-4cebd8f75f5b", "sighting--71000e17-0cd2-4b44-b150-170acbf5b9d6", "sighting--11fb4f9a-d496-4efa-8c5b-ab72d61cd0e6", "sighting--13c6d8b4-381f-4646-bddb-f94031b31ad7", "sighting--01684ec7-df33-4c1e-8e47-acfb11299982", "sighting--26e1902d-b8f6-4951-bf30-c790d245223a", "sighting--851bb86d-dac3-47e0-88d2-368eae381834", "sighting--1f4d175d-2192-439c-9fac-341b187e824d", "sighting--526dd099-7fcb-4098-a1ba-f68b4350f0f7", "sighting--82219f41-fa44-4a30-82a2-e7df6b5fc23a", "sighting--a3523fee-b651-4388-a4bb-aebc0311f0eb", "sighting--2089a3cf-21e5-458c-a412-67118baba083", "sighting--b86d9edf-0d1a-474a-a429-2e2fe3b3006e", "sighting--e07f27ee-3519-4568-b7bd-761bde09d7e1", "sighting--bdb153e2-fcd3-4824-8f31-c6549a1e93e7", "sighting--5c304a42-85c3-4b3d-8a8a-915d0a7dd9d0", "sighting--be1a07fd-eb57-4173-b40c-7a79fbb00c1a", "sighting--06e42eda-13cf-4854-bc1f-6089460ca85a", "sighting--48d019cd-9291-461d-9d9e-c88e239a4120", "sighting--567d7e9f-a257-4380-998b-8ea4938f7a2c", "sighting--2f9ab20e-44d3-412e-a6c0-2c043b30d05c", "sighting--b5802982-9bc4-4668-ab8a-2b039dc87ab9", "sighting--51027324-b572-422b-9ac4-c4467411a937", "sighting--cf1a0d16-e108-4b86-8600-41becdc6eaea", "sighting--15bea6a4-ad36-4cfc-9dcd-74b5058cb167", "sighting--c425cdc6-0d97-4469-8b65-09c6c2c1d409", "sighting--9047ed6d-92e0-425a-8193-7da042afef84", "sighting--f21de3ea-17d1-4030-ac2b-bd8bd498debd", "sighting--8cc16151-47a2-446d-8e92-1b09f99154c6", "sighting--883f7e57-0e1b-4368-8251-019cffa6de1d", "sighting--3ef839bc-7629-4556-9148-510ff24b1cbd", "sighting--bddb1e35-d9b0-484c-8485-7b1c75857e47", "sighting--243d9d5e-fe60-4f3a-9bbe-6efe49d53cdb", "sighting--2d7f5d3a-7a84-4454-9280-6d77d456b3f4", "sighting--169b4ea0-bdd3-4c3d-8a9b-975de4bd875b", "sighting--93de59f5-8490-415c-9d39-36b81d754988", "sighting--929f411e-f825-4aee-900d-ec46db7de137", "sighting--faacb0fa-deb2-4523-b458-8df9c7449a8e", "sighting--7c69d49b-cf62-4035-86a0-90e67da91072", "sighting--d15289b2-0fb7-4b15-b679-a7b1abdbc526", "sighting--75732503-52d6-4afb-a586-b5b8a97bcb84", "sighting--72be516a-07d1-40ed-87b0-b24797376c7e", "sighting--0143c0c1-7b5a-48b3-a5a3-d8e5da309425", "sighting--eba05d7c-87b6-4751-83c6-2b9f024b55de", "sighting--c06fa2a0-95a6-4d61-8dd2-0045cab51bd9", "sighting--940e2f38-fc08-44ea-b8a6-c41e4d9c839e", "sighting--b8b7f558-4294-48b9-ac09-ba7f920373a2", "sighting--e37bd493-7f85-4186-a7d6-fe1b37ff5139", "sighting--4d910871-0af6-4019-8e9a-66fd2d478e55", "sighting--a3c9df04-e92d-4d3f-8c5b-22f131973d75", "sighting--e40c47be-d015-4cef-ab93-91643428e8d1", "sighting--6c75200a-7fa8-4475-9434-74c0902cc692", "sighting--804a66a6-598a-4a0a-9863-04259883d3fc", "sighting--4787ff92-107f-448e-a7fd-473c6497d050", "sighting--17a66635-20e8-4ff8-b50e-1fd737a5fbcb", "sighting--5b380a04-8173-4c3d-8dfb-2db26ef89d9d", "sighting--f5747f9b-4599-46da-84b3-077d8c23362a", "sighting--0ac2aef6-9773-4ab2-9606-bba4537b9032", "sighting--4aa0a1e3-3d5d-4348-beec-784959b248d1", "sighting--3cc763a0-3693-441e-9271-5492398ed47d", "sighting--8283131b-c065-4504-81f8-383dc81e48bd", "sighting--e9a41205-ecb1-4f78-8b8e-18337a8d1146", "sighting--8e924bc9-e85a-440c-a877-42c6e7431007", "sighting--3690eb39-7202-4e87-9156-67b63a864aaa", "sighting--52c57ee8-3acc-4b91-a1da-f0549b08718b", "sighting--031a5c5f-d419-46ba-a6ba-d699b410b302", "sighting--e79733e6-61e2-4de5-85fd-e96244496f10", "sighting--8f414cf7-810d-4b9d-81d5-a19428d853d7", "sighting--56f62fe1-0242-413b-8c43-18b94b730468", "sighting--9acb3ca5-4b25-428b-a80c-d5a05e72ab1e", "sighting--619d30b9-2c72-4fa0-8f2a-af2cb48089f9", "sighting--f491ff3b-82fd-4fe2-8459-c9c6dd0f1d97", "sighting--8a27f512-4033-4e40-bf57-4f5adf4ef4d0", "sighting--8257b812-cec4-4eee-b054-fd02fc8694ea", "sighting--9ccc33ad-4ba7-477a-82f1-c137a61c1912", "sighting--52bec8a1-85d6-4646-b1ca-86f26ea162e2", "sighting--ed47bbe8-7104-46ed-a312-f864725bf6c6", "sighting--5ae9b2a9-ede8-4a35-99ae-be9913a0110f", "sighting--a00c5c97-eefb-4cf8-9910-dc0ef55d22fe", "sighting--2b9816ac-1914-45a1-ad41-4bd46e388da3", "sighting--66da4ece-0afc-48a8-9e63-f4d9b55da862", "sighting--1e2848a6-4698-4f5c-98ca-b56613d082b2", "sighting--fbe64d8c-0df8-4ea0-b46f-a55dfbf39b1b", "sighting--4e02ede7-bb5c-4c91-8820-1286a6022d1c", "sighting--a2a3156d-b993-4df1-9bff-bf26dc9c13f7", "sighting--80d0e96a-508a-4d3b-be2a-5d1e326a64e6", "sighting--2e5ef619-8c54-4bf0-9a14-f0eddb2ee5c4", "sighting--f7a51664-c429-4f80-95ce-bf2855f5b6d2", "sighting--99d322a1-39fc-4448-ab6c-1e5457c4e6da", "sighting--5dfbbada-0af2-4bf8-bdd0-aef5f9e7c41e", "sighting--7f066171-7545-4df3-a239-a266aeebd6b0", "sighting--fa4a94e8-9724-449f-adb5-68ab02008042", "sighting--fbf97ae7-e44c-494d-ba7e-9661e8b959a4", "sighting--42c371d8-247b-4163-8a94-45b4ddb8ea89", "sighting--3fbe8981-76bc-49b6-a4d4-b8a220e32f40", "sighting--26c08cae-66f3-46fe-a5c9-d6b2636ac5ba", "sighting--690eb789-da3e-4415-86f7-4b0976ba48aa", "sighting--ba7f4874-2629-4bc2-a7fa-d67eb90a888c", "sighting--9874b193-678c-4799-98fc-1ff40ea5102c", "sighting--47c509f8-4fa6-4179-ba0f-a4bfa71ad646", "sighting--55892745-4b46-461d-b782-974f47e2926a", "sighting--958cefff-50a5-4c3c-984d-29f9c2aeea19", "sighting--ffdac983-fb1b-4685-9ff7-ede3cfcbca74", "sighting--2824b5b1-3702-476e-a5d2-400d59ee2a6e", "sighting--0ec6c73f-717b-4e39-b063-a47f8103db5a", "sighting--df7dfc23-ed22-4c1b-967c-f7840fc37727", "sighting--bd17d0d2-38fe-4a06-8625-60fe1cd57ff2", "sighting--4a823547-8911-4715-b8db-450ecc942a12", "sighting--e1c87300-d5ef-4e8b-9a0c-04afc0661fcb", "sighting--33d02c40-329c-41f1-9338-c5b494b66fff", "sighting--d0728f91-3468-448d-b68c-182c2ad86ca9", "sighting--1c9f491e-682b-4914-b18f-775a5356733a", "sighting--600f96fe-b0c0-49a2-b653-3b4526314861", "sighting--be53829a-1db9-4c4b-9d8e-736fef734bc1", "sighting--9bbfebca-d468-4cda-8452-39e7c187b0d0", "sighting--3e191d40-b331-4792-98b3-d195873a3650", "sighting--568d3ea1-af47-48dd-baf7-ac02081e475b", "sighting--7fbb07cb-334b-4a2e-a4d6-c59b59401527", "sighting--1eace768-77c8-4e91-83b3-d69e4abc45f2", "sighting--c176f9e2-8eff-4a44-8098-17cb637cfc90", "sighting--e4548fa7-053e-40c0-9937-6e4d7cbe2bed", "sighting--fd51d164-dda0-4178-bdb3-98907a0707b8", "sighting--6b4414a6-4b12-4de0-b409-0909f28457af", "sighting--c298c0a9-5685-4b05-acd5-45d8e2861ff3", "sighting--869d6850-ed7d-4f5c-809b-50bbe4f170dc", "sighting--647a9eb3-2cda-421f-9301-c011a6783cfe", "sighting--1ccd6159-7978-4904-a1dd-f7519606a59d", "sighting--985fc962-f16b-421d-b634-552cc5b1e29f", "sighting--f7b6f424-bb03-445d-9e42-527e6f232a5b", "sighting--ea665650-7257-4a50-86e6-b88fd08ad3ca", "sighting--7e613a18-fffe-4097-b63a-bd8b1e5ff7e3", "sighting--23f81330-f686-4619-8c83-a79c8f70167a", "sighting--6490ddb5-8df2-43f0-ae28-91382c9df656", "sighting--0c4a40e8-6f3d-4409-b678-9e6a4f1a2eae", "sighting--a2fa63a5-aa1d-4240-bf36-7e03e38f9f19", "sighting--ca03118a-5c35-4dc5-806f-5c7e832726b9", "sighting--e36f5925-282f-4107-93ec-65380e1cb2c1", "sighting--237b86dd-dd79-42bc-a0f2-5c6c5aa1da32", "sighting--cbbd73f6-4206-4c21-ad0c-46b30b8bc4c1", "sighting--9129da1e-0506-4b92-acd8-e8a7acc40bbc", "sighting--6669b15a-4b2c-478c-86a1-251a1d3d085a", "sighting--736795cc-f773-4473-b83f-4b1fbc22c7fb", "sighting--31f41a10-36db-45b2-8537-8c99bbb2a6df", "sighting--fff9c553-f191-42c5-81ad-84ef7e846ebc", "sighting--84d09b33-8930-4f0c-a72b-5f1f24c064c2", "sighting--3c329c32-5d7e-460a-b4a8-88307a5a4bc1", "sighting--61e3c1a5-f1e9-4865-bb76-536500761746", "sighting--0bbf4eda-443f-4486-b034-eeed37ff6539", "sighting--b84e0f3f-978a-4ba3-8172-cc4a33375115", "sighting--e2929e37-5a19-40e7-84e1-e0956670ba08", "sighting--22f9fd21-010c-47ea-8f5c-6583750ee17a", "sighting--b968e6fb-b1dc-420a-a454-574b969abc61", "sighting--68b9090d-8b1a-404e-9a2e-0de842d3f337", "sighting--f427bcea-7f43-4dd8-bb02-0d437d377f5a", "sighting--2381ce16-685b-47cc-8056-495f426c7893", "sighting--2433084a-7c37-4c26-88c9-b113e07f19d4", "sighting--f6cce9f1-a3b3-4275-ae4c-6a3098e95ce2", "sighting--5494767b-e4dc-4af2-ab68-2e5cde2ff3b6", "sighting--ba1b94d3-3ea1-4515-92dd-7579a197dece", "sighting--6051aaf4-7182-4c6e-bd75-36f47886c3e6", "sighting--d5a1a9fe-6d13-46fb-b47b-1dc19b868133", "sighting--6423919e-c7a1-414e-8a70-8582cf1faeb1", "sighting--bb791aa6-6f85-4061-9e24-73fa3ba040d0", "sighting--6ad44c91-cbac-48a3-ab12-fba70be4d694", "sighting--66d38b7c-cba4-4b4e-aa12-8e0dcf688a49", "sighting--257c045c-48d7-426a-ab9f-f1f3768b4093", "sighting--eafc5189-cd37-485f-8c34-07c4b2c64c5b", "sighting--0c8c6b34-9801-4a7c-950f-513ac9aba7a9", "sighting--2356c96d-efec-41d3-a471-6e2c042a96b5", "sighting--bc1654b4-5045-4eac-9ba1-db1992be3d1c", "sighting--d9856ecb-5832-42d3-a033-7f126da60e4c", "sighting--07452148-ee74-4e06-8238-c0a418766d91", "sighting--c9210535-ecd5-4586-8901-595bac1e341b", "sighting--13b7ce08-2ad4-4b5b-8462-bc608858b604", "sighting--cd19c0d9-de43-4653-9a4e-13775fe7bf09", "sighting--70f29515-7872-4070-b059-1d46f47d87a7", "sighting--a70f3370-53d3-4970-87cd-5796f3043df2", "sighting--ee0e4d0b-0014-40be-b9fe-d920bfac512f", "sighting--1c1231c4-776d-4adc-932a-0cecedef0f3c", "sighting--f93b59b2-3246-4408-926d-303359e9dabb", "sighting--405b838e-9963-4e05-822d-35e7599c706d", "sighting--7b0e0c18-4039-4f51-a180-872a688889b4", "sighting--2989bae6-d187-4aed-93aa-0e22f22b76ab", "sighting--5cc1ecf4-5a73-489b-a3dd-0272f2f3bf3b", "sighting--6eaa4157-13d4-4548-919a-626dc966479c", "sighting--218c9c0c-7cd1-409f-b092-fe02a3e4c827", "sighting--32749ee6-0b1c-431a-aa13-bcab01e07e65", "sighting--4c4a8d92-467b-491c-a500-6a74c504c1c7", "sighting--02ac9efd-ad8e-4d88-bc4d-f283323f52e7", "sighting--a237d57e-ba0d-4ff2-9c31-fef89913f6de", "sighting--e2dc8241-517c-41d1-995b-a2c663480dde", "sighting--f7ad31ab-3700-4f67-9346-d90451e8f64f", "sighting--c141816d-7e08-458f-ad2a-a22622d31e92", "sighting--8513ea9a-c7f7-41d4-aaba-18f33d82071e", "sighting--82665b14-b20b-4c63-bb3c-f76c8b432766", "sighting--5dbce320-69ec-4f1d-8375-77cc3e106142", "sighting--b591d2a4-09b2-4922-8d05-2a4deeb6ceeb", "sighting--04b12209-3dfd-42a3-ae3a-a9522cb3cc73", "sighting--9f18ea9a-be0b-4f07-b665-d89f2fc07f8c", "sighting--38bb52b4-d142-4a0a-b1c0-fae489a9ecf7", "sighting--7f6828b9-4548-4023-96f3-ff86c2412d0a", "sighting--84b4f71d-0f58-4819-a806-4cd88af20b58", "sighting--b0133803-6a8e-4817-afeb-ddb0528e0058", "sighting--e2e66d85-2289-4bdd-8d30-c0bc6fcc849c", "sighting--1755646a-db65-4681-b9fc-c5ec55a939f4", "sighting--cd15ffc7-7e4e-4b73-a52f-aa3529903309", "sighting--ec042f27-9da7-4d5d-abf9-204e4045a416", "sighting--afc6ce73-8d78-441b-b681-46d04c75e1d1", "sighting--5928c076-efe0-44e9-9e26-ead962dac881", "sighting--67d2c71d-ccd5-46b5-b7d6-6f04eb9d8d77", "sighting--88f1e6d5-aeb5-46c9-b9d4-4fadbbdb90f5", "sighting--96c55df8-9839-41eb-901e-372f233bf95d", "sighting--a853d107-f3b9-47f1-9fe9-0b7be87f5c41", "sighting--107018a0-a30e-4849-a349-aaad96cdcc90", "sighting--1f28a837-afdc-4414-828c-171fbfadbe21", "sighting--fd979cd0-7552-48c9-90bd-24af0c43530e", "sighting--4624b459-05c0-465d-97f0-aeed88dfa68a", "sighting--29928fd8-a222-48cd-aef5-d5956d6a99ca", "sighting--5eaac8db-11e6-4123-8da9-c7cbaad41d89", "sighting--3d6ff1fc-4905-47eb-81c3-3ea2ca22f20c", "sighting--acc7509b-8f1c-4182-919f-cee944d72863", "sighting--95daa460-b446-495b-a70d-830a0c5d7eeb", "sighting--ed946c71-2a99-444e-93af-9477e1b5268e", "sighting--3b8dc35c-e2a6-4aef-a4bc-d762eaaa87a5", "sighting--95e5a93d-7731-4581-aaf0-eef0a68e920c", "sighting--3f2051af-0d78-4525-a33b-0dab7cdedf9c", "sighting--21be2c1f-d433-4832-8c66-2f7f3df06eef", "sighting--331bc926-656d-4f24-bfab-4b0aaaa1e9ba", "sighting--d1ee6e1a-473d-412a-a6c0-99cd3cf01b9d", "sighting--c1b9d3fa-f4b4-47a5-89a9-71ec55f5aaf1", "sighting--d13c8a15-4403-4fde-91a0-2b4874a27f9b", "sighting--4e8bed26-6505-41d0-a85a-65bd269e667a", "sighting--117b6e6a-6cab-47e2-8c0c-15d5c3c94251", "sighting--6b95da5f-a367-4ed3-a432-998f4e819ed3", "sighting--97d43b1a-0e6b-425f-9405-e109e14db85f", "sighting--941704bd-0407-4f06-81c0-1ab0016c317b", "sighting--2cefa620-0817-4e5c-a160-89a3ac8b8c1e", "sighting--2c961300-6068-4ebe-b976-d073f1639e9f", "sighting--16527356-875d-4e73-93c6-ba812943e401", "sighting--ab4a4855-c6ab-4de6-8ff7-9270ee0d7c18", "sighting--c0b21f4e-d2a9-4254-9aad-235db6c99686", "sighting--8606403e-cb42-4b8a-9bf2-9e367c2817ee", "sighting--64e770df-545e-41c2-b57f-42fe994e65c7", "sighting--18f6ae68-6696-44c9-beca-8f8e0c041237", "sighting--0fcbbb2b-792e-42e8-b495-0105af8e833d", "sighting--c89b6978-514c-4aea-8199-e541a24b0b9a", "sighting--1c1bd80e-86c1-4d95-8bcd-5620bc7c7081", "sighting--26b51d77-eddf-4d67-8e3e-2cbcc0e5dd17", "sighting--9737f4b9-f58b-4159-96de-bdaca36a7661", "sighting--907ffc3f-436b-4527-bfc6-5294432dac21", "sighting--90261bb7-1024-4758-be6d-c136fe384cc1", "sighting--51802673-f352-472e-87f1-4b66933c6ac6", "sighting--b2793f35-b522-4d16-88f3-76a17ae6eba2", "sighting--1757a0fe-e399-42ca-857a-502e8191adee", "sighting--a967ebe4-c7cc-4c97-9741-15ce50e21962", "sighting--4ff710dc-7970-4339-bafa-6ad95e7416cd", "sighting--4bdac1b4-60dc-416e-9aaf-fd71f3cdbb45", "sighting--ea3c44ca-ecae-4567-8ffe-721e26c0e45a", "sighting--691a46c5-e69d-445f-890e-c70a0262dae4", "sighting--b083ebea-0b44-4465-bdeb-eaa630d2d9ce", "sighting--f6882a87-690a-47b9-a2a7-7f9c903eee65", "sighting--d1dc2059-86db-4eee-a3a2-9ba8ad65f83a", "sighting--e2d998a6-e243-4ef5-8187-9579431e242c", "sighting--778ba026-cbea-4cc8-aeb4-5edd859928c7", "sighting--bb971e95-1c83-4e36-b651-705c1eb415a2", "sighting--934de5c3-9815-4fcf-a199-6eca80210e15", "sighting--cb4f45bc-5fa8-45e5-8eb3-5ea5da299523", "sighting--4b1ea44a-56a8-4db0-a674-de46077da8b9", "sighting--7ff8172b-0a94-463a-b8a6-5a278993e352", "sighting--4f8bff8c-3992-413f-bf1a-171bcb54b988", "sighting--12d6b2d3-6e74-4a71-ae06-2409c22671d1", "sighting--fc46fd69-06bd-408c-b592-e2433ba370dd", "sighting--7e14c393-ec1e-4de8-b436-9e36df3309bd", "sighting--2e57a5c0-b244-47ce-a1e4-f25d7ba26a7b", "sighting--8ca29a87-c6e7-4b16-9e52-fb6443f8d79d", "sighting--9bb8a025-306c-4cd1-a8d2-fbfd0e511d48", "sighting--b4f04d35-2e97-4ab0-9ef0-4c2bf22cc4e4", "sighting--cccf0fab-6d8d-4816-978b-d99ef326d9cc", "sighting--98089407-70c9-47e2-9628-60ec081d7d28", "sighting--da5f8927-11e2-4eff-9c7c-56994f2cb50e", "sighting--2060e91a-92b3-4f17-bc30-2cdce2252a53", "sighting--d540ae78-4968-4cbe-9826-3b8a35cedc81", "sighting--4732eda6-8153-4255-8e83-628e3f2755df", "sighting--5038abed-947b-45d9-8c29-b76cf1d52b0b", "sighting--78833302-2de8-4e79-a8ac-bf2e0d92c5ce", "sighting--e907ca5c-41f4-4e90-b500-1ed8aa152d70", "sighting--5df7af69-b018-4d43-94b3-3d1fb4f2b1ec", "sighting--1acd2831-3fa6-45a2-a317-cc65b3f6e8ed", "sighting--38820f4f-4bf2-4780-8666-6e897f1c5eeb", "sighting--365887a3-1755-44cd-9426-9e9b4b84c8cc", "sighting--d05fd8c2-e0c9-4d05-b95e-4f4cffd6c05a", "sighting--3bc0a768-9a72-448b-8802-db90e6d25550", "sighting--b3e43df1-944b-4d17-a936-473a0c0919d4", "sighting--3c6b88ad-a2ae-4255-8e48-2fd24371d28a", "sighting--20b30178-bd01-4fae-bd69-0361d190a80b", "sighting--747a7c0a-2ae9-4396-a16e-91fca268d00f", "sighting--0be257dc-542d-4350-a125-2a5c96cb80ac", "sighting--ac90b190-8b74-48de-aba6-3884f6c81386", "sighting--98e3b36d-be11-455e-a282-1dc30f53fd36", "sighting--83af66c0-c317-452c-a634-b6e9c6c0695f", "sighting--4d0feaed-a5df-451e-b848-2addccbc8c65", "sighting--73e4b38a-c988-405b-b4af-c82c8cfc8739", "sighting--3f7f2486-a2b3-4c96-b2eb-805a7b603ead", "sighting--72523f1f-bbfb-46ef-a30c-21fa7735a100", "sighting--e8b2e8ea-fca9-4e38-af50-898629bcd7c9", "sighting--5f930da4-eab9-4072-96d6-4966c2a920db", "sighting--949464a5-e6b8-4c73-a94f-42fd76feea90", "sighting--ce57ebd1-5bf8-4a5c-a98b-5a9574c4b873", "sighting--82439260-787a-44e7-8ce6-7093473471df", "sighting--742fc2b5-5bca-43b6-b925-f0fdcc8d5267", "sighting--86056a70-a234-4a5f-a15f-949cb6d00746", "sighting--4f59d59b-c712-48cd-869c-6a6d917633bc", "sighting--721fa61d-d85e-44f3-918a-ece2fe27c07a", "sighting--671e37ba-eb64-4ebf-8d94-0084b74055c7", "sighting--122304b5-d12f-4af1-b985-e571e3d3b959", "sighting--f1ed2915-633f-4f8f-bff6-906eca9fc789", "sighting--396fa4d5-c856-4b29-8430-1ced2996cb0e", "sighting--35c969df-9194-4a88-929c-84305a7f8f5c", "sighting--2890dd0d-0887-45b2-886e-2e126e1dabe6", "sighting--68d187eb-e2aa-41ec-a66c-b60be6406f8f", "sighting--40f76f4d-42af-4b47-8659-7386f7b62596", "sighting--e4ab55d6-2a7f-4922-a5ff-8f421360d48c", "sighting--aa0b6bb4-9d4f-4797-a7d2-9ef256762223", "sighting--7adef8e0-ece3-44ea-97c5-fefd7972b535", "sighting--34546dfe-e71e-4a3b-b9e5-1291dced3cd6", "sighting--9727171a-638d-4c2c-acdb-3114c6a25297", "sighting--0d3b90ed-eb9c-4683-817e-028f07c960ee", "sighting--ebc13f70-6e9f-443d-94f1-7e53781be478", "sighting--312f42e8-522a-4094-ae27-0a63a9840008", "sighting--65ca798a-f006-4780-8a87-1583e58bca4f", "sighting--6a15ad7f-0cf7-4ab5-81c6-e09d1e8af8e7", "sighting--fe0f823c-d362-4131-a011-04fa2fc35a75", "sighting--94ee8b2d-9053-401c-b4d1-07f4848367c4", "sighting--7134ce43-6be9-444c-b0ca-f9265e6b4d80", "sighting--964b9ef6-4a93-4368-a7bd-0c83bcfe016a", "sighting--dc4a47b6-9d54-4833-9edb-bc548cfea5ac", "sighting--2073e249-358f-41f7-95db-b5d7d4f3fbcf", "sighting--994f9c74-0625-4863-9088-4ca85b2b5224", "sighting--a2f97cf5-07c7-4f56-ad92-59403749d801", "sighting--18b67c8f-b2ac-4db1-b7e7-a4d1b9f0e8aa", "sighting--2df2cf0a-a7d2-456d-b9ce-2fd99d117eb2", "sighting--a62eab1a-3e2a-459e-8138-f53085ac0f14", "sighting--d8d4bef1-bd64-44f6-8723-6ded5d19c0c5", "sighting--b7f85c34-d1f3-4565-85ba-15b3b976742e", "sighting--e83c48d0-89d9-4af0-9f7e-16cc4bd4f87f", "sighting--57a84802-0322-44fd-ace8-cae6f19c160b", "sighting--872c6bb9-3437-4421-ae6c-fec42b21880e", "sighting--4f8d9c27-3a26-4466-b0b7-e7c4d2bf46f5", "sighting--0b040551-6216-4ae0-80aa-fa20dd28d359", "sighting--c95783ad-5454-4e3b-9713-443232df80ae", "sighting--0898fd5d-b2a0-4d1b-a640-283dd46aa048", "sighting--50a208a4-dd4f-4b82-aa28-0ecf68bb0eae", "sighting--39271a0d-21bb-407a-8458-5c5b3105e5be", "sighting--ba9b9406-9aa4-4b8a-b49c-47713cda17fa", "sighting--9bfb1f58-1fe9-4d46-b3e0-7d6673c713e6", "sighting--08ee6ce4-f156-4f04-8186-b69aa28b37cd", "sighting--64aebd42-5793-488e-a56b-9a799205e060", "sighting--72ee71d9-eb94-4423-88dc-b836ed76c580", "sighting--40113337-a387-4f85-b501-721300da6b60", "sighting--30a47e9a-7abf-4c6d-85b4-a0c461077887", "sighting--3d037513-d4e0-4d89-8a19-856f5a235b74", "sighting--5d850ff1-4f57-4e04-815e-5b0197868dbe", "sighting--29f92361-36e1-403b-b733-44cfaeece460", "sighting--25f5bf3b-4595-4f45-b44a-03565ec835ad", "sighting--c92c7b48-d480-4dc4-b232-31faf0a6dfd0", "sighting--38e04b5c-96db-4d1e-922d-f9070f1212ef", "sighting--b4316b4c-bb09-4514-bf6c-5fd190cf09a4", "sighting--6e16fc52-f417-4a37-bc54-7dc651c59d03", "sighting--63a17ee8-1a54-4412-a570-13ab285c3c11", "sighting--df51ee67-f712-47e7-b6ab-3c7104a8fe2f", "sighting--49652a85-9735-4d37-82a9-5ecf39131c69", "sighting--94335449-b3a3-44d7-9495-02261536310e", "sighting--86784212-5414-4f10-91f8-e39319de9f75", "sighting--3eed7567-35b8-4f5b-99d0-eaf07fc04904", "sighting--b324e1a0-219a-4ff6-b62f-c596ad903a42", "sighting--355ac2e6-00c0-48e0-972c-6bff4a718d68", "sighting--8b777310-c0cd-4029-9a3c-e1593fa9dba6", "sighting--4042c350-fac1-4b7b-8d91-9cad43b98e6e", "sighting--720af140-6426-4304-aed6-e67d8a36dc2b", "sighting--d31b7358-b8af-4d42-8189-e2ceeb3f33b6", "sighting--84340875-bd3b-4dac-8e5b-827630658d43", "sighting--7185203a-81ac-4dc8-8b99-9088b9acae13", "sighting--69219fb3-f616-4f12-9005-c229f915902f", "sighting--978ec5a3-046b-4118-b1fa-2273f2f45055", "sighting--ba3d116e-8a21-4a64-9e37-a1c9362e61b7", "sighting--661fa291-fcdd-4dba-95f3-1838985c26ff", "sighting--f895e37b-3ead-4a75-b9c7-a321aa8f8605", "sighting--149c3180-07db-47dd-8645-72b6312962b7", "sighting--e1fb4355-f9b5-4c54-808a-f1157f758fb1", "sighting--2510e39c-d182-431f-a8ea-def49fc79c46", "sighting--39c7f923-1523-4998-b5aa-bdc440081c20", "sighting--66dd8b3a-4ba9-40fc-afb1-da42d479eafa", "sighting--c903377d-6d26-4fc4-bbf1-f80e53f4ed85", "sighting--6bcd6be5-d9d3-471a-9e2e-239c2f8b9875", "sighting--9cad5e93-722c-4255-99c9-1114c98cf3e4", "sighting--b666d9e3-dce3-4eb9-8433-cb329440b077", "sighting--aa8ff785-ddbd-4e5b-b163-cbe8da4eecdd", "sighting--50d8998b-f52b-4ecf-80c5-36e06ec13770", "sighting--ae0de66c-54a2-49fb-aed2-4388cdd2ea55", "sighting--73538ecf-09b1-493b-8559-7c0b54030ff8", "sighting--dff408d4-cdc2-47de-9ba0-13842dbc9ba2", "sighting--6bd8e354-791f-4a18-b831-b828e302eb16", "sighting--5c8d814f-dfa4-4ebb-9ca9-c215a383da8e", "sighting--d2236e18-53f6-416f-bfce-5f54b9fe814c", "sighting--71350416-4a37-424e-9371-dfce166c7080", "sighting--35ca17fb-955b-4d8c-88a3-01773819a010", "sighting--d618233d-a012-4996-b4ca-1ef4cf95fa66", "sighting--249005d7-49fa-453f-aedb-925f1e3b0fe3", "sighting--a24e6dcf-c113-423e-a377-856bf8325002", "sighting--787c2c17-e7e9-4de1-88b0-94d73f95bd56", "sighting--7f579e45-917d-4f60-987f-df952e8a035a", "sighting--376a6f4f-9188-48c9-912e-2d1b7aa7cf9e", "sighting--55a39cdd-be28-40f5-8d0e-309f4d4a1a86", "sighting--0f678240-f999-4fcd-825b-201b5fd6936f", "sighting--f76772f6-4670-4fa3-9340-1d6a368fd65c", "sighting--22e05469-c0fd-43c4-b4bb-675f01739d0d", "sighting--8fcf3310-aa11-4542-9b90-6f9991557cd5", "sighting--852dbc00-c801-428b-9df3-c989af53b98a", "sighting--d17fe78d-bf27-49a3-8661-9d248074682e", "sighting--617e7ad9-68a9-4f92-b06f-d4536e4a7735", "sighting--0a2cc077-b0a5-453e-a0f9-81f694191742", "sighting--0034c310-a4e9-4000-8e42-57180c425b36", "sighting--02686621-d0bc-4588-8162-065967c359b3", "sighting--b61a27ef-df4e-47e7-8227-664753ffeb0d", "sighting--aff501ee-f06e-425f-811a-bc5ef4dbba91", "sighting--299a5d9f-2c19-48f4-b67f-043d7c0dbf45", "sighting--7ee59471-3d6c-4780-80a9-5ace69171e3e", "sighting--872c55a1-cd5c-4246-85cf-d90297966bde", "sighting--9cdda194-0890-4296-91a8-0937f3cf61c4", "sighting--7228812a-aa7f-4055-baf7-0245277768c7", "sighting--c240751d-96aa-4c3c-ab30-ba06922a1531", "sighting--b86bd190-9eab-4536-a741-5482761f7bc3", "sighting--46d85585-5b12-4648-a9a4-3f64f5b5d9cd", "sighting--10aa67d4-ef09-4c16-aef4-a5f7b3877f82", "sighting--f851e8cc-ed7b-45b0-b8df-c383f67e5657", "sighting--d47c01cf-7566-478f-93a7-28916cd1ab42", "sighting--2b5639b1-a689-48af-9bf6-59ced90c026f", "sighting--8073e20a-da5b-41c5-818c-c8057ab925ff", "sighting--bf16810f-3443-4906-b10a-c9a7a5fee9ed", "sighting--9aa64ce9-905c-4ff2-bc0a-80141d297c8d", "sighting--a9c3a5f9-6eb1-4149-8117-344d1b17898f", "sighting--8ad097e3-54aa-4001-9d12-365cb10dc61b", "sighting--f99bb6ee-056c-4e0a-8be0-731657032036", "sighting--aa4943b8-df72-447c-99f5-08c72a617654", "sighting--4f1d5746-c3e6-413a-97f9-d600bc7a6609", "sighting--b2517b20-de8f-43a3-982b-695e636b017d", "sighting--4c375ff7-5860-4d2a-8f42-68f0f8a1ba80", "sighting--5017a461-bcd4-4c78-b727-3d2b528cdfcf", "sighting--28a2f8cf-992e-4719-bfc3-7bccce682655", "sighting--8d7d664f-31c7-4b69-be0c-b95a568b0510", "sighting--e91552b7-7369-43eb-84ea-e08b488096bc", "sighting--7101ea7a-eedc-4b1b-9280-8ed538d67631", "sighting--b85e96d6-e779-4fc6-a9aa-bbad334cf817", "sighting--3bee2081-8d03-4d3d-999f-82a68392abf3", "sighting--e513d3b6-09c2-42ce-ac80-f7a5ac2fb243", "sighting--b59b0798-ec18-4f25-80a0-57e8e660c8f6", "sighting--8bb9a239-1482-4fb9-b785-80012f079ef2", "sighting--23480ac3-91a6-416e-8509-8ab303e780bf", "sighting--46289f0f-1eda-4ebf-978e-b7ecb1785884", "sighting--d072a1f1-c0b3-4214-95e0-3f5f3ef25e66", "sighting--5c590773-8907-4d13-a9e2-ee6c8d37006d", "sighting--9a3d80db-21af-4766-8c4b-f06bcf76ea07", "sighting--742fd6de-ed42-4c90-b978-fad1ba4f3240", "sighting--4d63ce83-3b40-4f43-b442-4b94738c8b7a", "sighting--f78c18e8-2ba3-43aa-8367-a27a32dddb14", "sighting--f9f41c7c-4351-464f-abbd-233460a7b54c", "sighting--36856e9b-f4e4-4c66-8302-654cbd2cd8bf", "sighting--4f507cab-5e58-4249-a56d-b768f6c31741", "sighting--96e87ebe-65c1-4d38-890a-2e624af51fe5", "sighting--bae35aae-bccb-430e-94c4-a2c6a82b5a33", "sighting--4ce75031-3a60-4e86-87f1-b9149e0a8164", "sighting--abd4ce0a-f133-4d0a-a04c-1f047fd33bcb", "sighting--5e1a530a-9c33-4956-9e6f-8ff4b7da372c", "sighting--a4404d56-66b9-47b2-bd6e-d5941223fe3e", "sighting--b5b5f864-59b4-4e07-96e4-b4a6f394b9f1", "sighting--eb42d0eb-3385-46ba-8bfc-5f184bd6b751", "sighting--62e9091c-cfa6-4608-8324-e5f386c9e38d", "sighting--a842cffd-128d-41b7-90d4-b6788df99475", "sighting--dd07047a-23dd-4210-b9b5-a6423a970f31", "sighting--99a43b07-7595-4237-9337-220a8bcbcfaa", "sighting--4249dded-9f6f-408a-8ec2-01791a5baee1", "sighting--08b10461-0411-4b5b-b92c-d0adbb6eb273", "sighting--790e8b09-d8e4-42c6-9224-bbbf8dad828f", "sighting--3af52e03-d17e-40e8-8ba4-4b170f7867ab", "sighting--74d35bbc-bce5-4e8e-9f92-4efa2aa6016e", "sighting--d4c9d258-45bb-4e7e-9117-56d0f3d0e7d0", "sighting--62be2b82-e2c6-4a50-a470-a26feb3db988", "sighting--855fc0ce-6738-4c8e-a054-1af4c56f7469", "sighting--dd4832b8-39cf-492b-9577-968a6afc5d8d", "sighting--e900f2da-9286-46ea-bda5-a868e8846578", "sighting--0b846563-3b89-45fe-bb15-c44dbb485499", "sighting--e030e44d-2aec-43a3-aae4-29ecba4b9ab9", "sighting--00d7002e-115c-467d-a6b3-a463d23ddd58", "sighting--d8417213-1764-481d-8a6a-240d806c59df", "sighting--0dedfd26-cc0a-43c6-9362-b0f9ab748263", "sighting--20093012-da22-4641-a452-0f751528f78d", "sighting--ba26e0a2-6702-4be2-9855-a8bb26d9a458", "sighting--49b7914d-e75d-4fed-8da3-b35f26d7a8c5", "sighting--32165206-8dea-4b0e-88d4-c1359848ee95", "sighting--270bbb2a-da6d-4683-a875-8c2dc74cc7d1", "sighting--77e83b68-64b7-4de1-8b59-2e3d327327a6", "sighting--3681ebe3-6fbd-472f-98d4-4ba1fbf363ed", "sighting--0cfc795f-c9d1-4307-bddc-0981bebd1e63", "sighting--a00c31c4-015d-43f6-bcd3-e088825ae960", "sighting--67cc0ce1-0f78-43f7-8bdb-907d8e39b6a0", "sighting--7d6d1743-b22d-4df4-8b09-595861f0fe0e", "sighting--e3d3adab-0e67-44be-bfed-5aa1e0289a51", "sighting--57062a90-74fb-481d-be9e-02b5fe41241a", "sighting--be7df588-5b62-4ee8-9801-e0c11f8bce8e", "sighting--e9f20331-3446-46eb-abe4-952b2893c420", "sighting--5e60f78c-e635-4c89-93a6-38967a1e9fff", "sighting--c90caabb-8c73-4170-b1e3-18454232e6e3", "sighting--c2ca9e63-036d-455d-b39e-4d55bcfc4d03", "sighting--f21c03f3-1eec-41d3-a43b-d3de7fd9f02e", "sighting--5a2a89b7-3860-49d7-814f-76cc07766db1", "sighting--b8082a59-bed9-43fc-b618-3419a33e1e6c", "sighting--9238d7f3-85c7-4a06-8989-9f9a58d0c2cd", "sighting--d3ab6af1-dac6-4208-b2fe-bb170eb46a58", "sighting--f8d37277-630c-4c96-b66b-ed5c39d93a1d", "sighting--6b3f4212-8ace-4c6c-aaa4-6c682e687e6a", "sighting--e55ee25b-0fe5-4dd7-9153-ceb572fbd1d1", "sighting--e280c2b9-2e05-4e45-9079-9fc21a6b28fa", "sighting--8d6631c8-1f71-4118-a182-e4bf9bd72728", "sighting--d8e3c357-ff79-4a48-bfbe-3e7bc59293a7", "sighting--3dd32604-a2a9-4b5a-81f0-7b6074de3ac3", "sighting--fbd3e764-9763-4cd8-81d4-5725f51de3e5", "sighting--1e3e96fc-9c6b-4c0b-b83d-9410907cab14", "sighting--3d95cb33-1054-491d-a506-aaf952951806", "sighting--5d9c87b1-6c14-4c92-8b46-2f025a7a242c", "sighting--02554850-95bb-4e16-83e3-3311c61802bf", "sighting--d4b8d4b8-20f0-4b85-a3f1-c0fc9b679ba4", "sighting--212f4b55-ef1c-4dc5-8aa3-66104c37e870", "sighting--2569b6c7-e8a6-476e-8bb8-bb636231223b", "sighting--50befdee-87b2-4498-a3a9-a7d724704666", "sighting--ec16ebf4-67b6-4a4e-a703-1c6bc9128fa3", "sighting--3ff3e39a-6dc5-4680-8229-0ea4e1599761", "sighting--5667c090-6887-43b9-a16c-fbfe3ac203fb", "sighting--99f0b587-01c0-4b6f-9a30-6dcfbf5acfdd", "sighting--13c7627d-cd61-4c6c-99f2-152f8f10656d", "sighting--42c3a5e6-d773-403f-8d9e-999326996f29", "sighting--3f9d5494-fb5c-42df-978f-d655e50c59c1", "sighting--08e87a03-6caf-4faa-9d0a-90386b02736c", "sighting--aa35e6d9-1c47-45a2-8ae9-b63edb474508", "sighting--d994f99f-c6bb-40d0-9918-253c8c84fbc7", "sighting--732061ae-9275-4c0d-8d41-318aafb9cb4c", "sighting--6248a445-5491-4108-8e20-ba1680ad8957", "sighting--2a8afc88-d063-453f-ab9e-d2f51d12c052", "sighting--0f7e1bc5-6ac5-490e-a2ac-b71cc838f1a9", "sighting--6115ac00-fcd0-4276-8c8b-156d24d0f90c", "sighting--af23937e-9cfc-404a-923c-23e3b6c35ed6", "sighting--e52a030b-ada6-426f-b8c1-26f669e1c0dd", "sighting--3bdea3a9-d767-4e30-8e29-d92b07186fa5", "sighting--d1ff2ef1-5798-43cf-93d0-5b0be7986f7f", "sighting--50dabfe5-ed88-4f8b-91ac-e8f47ed4eb29", "sighting--1270f087-0601-4ff9-b77d-c870405c82a7", "sighting--4373aff4-5cce-4612-807f-f583fef57ab0", "sighting--33f76682-acfa-411a-9566-7c8e4cdb22b3", "sighting--d554e3d2-6a49-4f0f-912c-9302d1e189ce", "sighting--6e5dc182-02cf-4d2f-890c-2b6e00c5c72c", "sighting--49bf7ce0-54ec-4070-a7ad-12ecb6e4f753", "sighting--2cac2d6c-44ff-4443-9b08-6636d5997139", "sighting--ac887bb4-edf3-4e34-866b-919d50989370", "sighting--81ba1a77-22d4-4d6c-802e-b8f32114dbbf", "sighting--8dbcfe32-4d52-4c92-8cfa-a21aff859475", "sighting--6408e678-529f-4635-ad8e-4b071f845aa0", "sighting--3124c296-8f23-4d69-a0d8-e6fb90bbfb05", "sighting--431cd5a3-5bf3-4553-8db1-ecf25c7a6f7d", "sighting--2ecf114d-509e-419d-92eb-6fee4025c489", "sighting--7b068ccd-9d96-4169-b9bc-016a85d41df4", "sighting--9477057c-c907-44c4-8778-158e2e8c6bf0", "sighting--9fcbf6cc-af9d-47e9-9846-e8561156afce", "sighting--dbe56147-521d-4835-a753-00bdb8cb0a7b", "sighting--ec5795af-801a-4cd4-93ae-6f5b89b934a8", "sighting--d1961aee-9b02-47d7-bb4b-654c2be11b09", "sighting--f6be136a-4a19-4947-9566-e9216e6f8cec", "sighting--5f4f0768-5713-4766-99c6-f32a088c8092", "sighting--ec3bec58-c697-4924-abde-bd6f0007ac59", "sighting--83386e55-3905-4187-b0c7-789d1c395b02", "sighting--1363a5f3-661e-42e4-a932-967e14136a0e", "sighting--4590855a-264a-406a-81bc-cb9628c957de", "sighting--a1cb948d-ba9a-41ed-a6a7-a2f1cddb5825", "sighting--50e22c1b-f3a6-4bce-b1a6-6c106f85f96a", "sighting--93e5b120-df2a-4f76-9170-86969e7c98b4", "sighting--5ac7889b-29b2-4096-9ada-c710b740bf11", "sighting--e67e9685-7606-4a0e-b5ec-18748aecbe3a", "sighting--c3adafdf-eadb-4887-999a-6c696ee7cd64", "sighting--5b376566-166d-411e-a7d7-3e2cc8c36081", "sighting--8609f9ea-d5f0-465b-b1b5-b9204aca60a1", "sighting--3cd1e711-aea7-459a-94d8-4b48e36677af", "sighting--876e0cb9-324f-4635-84c6-2e9c7b1f3457", "sighting--984ecaef-98f9-4008-a4c8-ba2b865c88cb", "sighting--b8c8376a-621d-429a-bac1-e3bd88bd25ed", "sighting--6bcd6a00-528b-4ea5-9e1a-322c92e4a09c", "sighting--435eb355-ebca-4dd6-88f2-aacbc4e54206", "sighting--79384ce6-1954-4147-a4b7-f2ee8e029a66", "sighting--9f023a07-9511-42ad-9e83-ae0fe7487fe4", "sighting--4f7a1bbf-c18c-472d-b875-235a8afdee57", "sighting--75624d32-0c98-48de-91a6-9b6532de6a8e", "sighting--67fadb42-313b-4a7b-b331-67d43357d77a", "sighting--b095693f-cd08-4957-92a9-d538d3cd8f18", "sighting--f99c41f6-121d-452a-8f8a-0b008d1df284", "sighting--db050640-ca69-402e-a513-a2ddc95f2b84", "sighting--76e13389-0743-4bf0-a9f7-384365d03ba0", "sighting--cca1c1dd-4709-4190-9a7d-d37afd4482b9", "sighting--f7abf228-d8f7-4d42-95ba-3f3b4cc03dce", "sighting--08657a17-ae2d-41b2-8938-e0e67e041f6a", "sighting--f23b5465-3596-4649-87fc-e8547ac330d0", "sighting--b7c59fea-7eea-4c7e-ba1c-573fe34f4f0c", "sighting--daeaed37-4df2-46f8-9ae5-8458e511be93", "sighting--ba807283-5ebd-4e8e-9b33-b2d50d6fc0be", "sighting--1bf42aac-a83f-476a-842c-c6fd556361a8", "sighting--605d4b10-7cfd-4490-84b5-56901ddc7874", "sighting--64af2769-694c-4613-968f-769de6fb94e6", "sighting--73e33420-87fe-4773-a497-712836a4fe88", "sighting--16558bf9-9bb5-4fc9-8d74-4f7ef0c6c24d", "sighting--d464e780-8d24-4d39-a971-9b8d404f831e", "sighting--72dbcd93-996e-4133-a854-f6dc438993e1", "sighting--cc0adb12-c901-43b8-ae1f-2a8779d7b222", "sighting--b58d89fa-71e0-48ba-abac-8cc069a01c20", "sighting--6d59f25b-d9f0-4292-8d1e-d8e58e301557", "sighting--90bc9ada-3278-4210-a443-3a8b95480994", "sighting--b3206fd6-270f-4cbc-b7a8-9c9027ddd1e2", "sighting--922c9dbc-a67a-4f47-aa15-3d375b9321aa", "sighting--1014ca51-7b2c-43bf-9f95-6e2f2d286b78", "sighting--e997790d-1731-41f3-b5b5-2471c2fa5d99", "sighting--a4e14160-6c6c-4a38-abf6-e094f9601b4a", "sighting--600b1b02-c60f-4107-a867-16b06d3b4372", "sighting--ca6c2cdd-207f-4798-b9f5-4ac271a19655", "sighting--802e6d61-bfb8-430d-b822-b931c6afdfa3", "sighting--1a82fb9c-3f25-460a-b784-e3bfd22502aa", "sighting--2f67d3fd-5de1-4dc5-8b49-18b644d5330b", "sighting--c641dee1-0dca-4887-888c-a1d2312c1e71", "sighting--d8117ba3-0185-456b-81f5-27163546c4b7", "sighting--b26ade67-5605-4538-8184-424de0894ad0", "sighting--6bd3c934-c50f-41f3-81b6-a33100f81917", "sighting--c68a8ba1-63e4-4177-9092-f8ea34b342ca", "sighting--8f8c54d7-4503-47cb-99ce-2a8a4f53e738", "sighting--71e6b255-f9bc-4f76-a236-78f8b11344f7", "sighting--d81b4b17-df2a-4529-b60f-0e0af7fc6f92", "sighting--4764b119-1029-479f-b01b-552056b9db3e", "sighting--deb964a4-7e41-483c-8cc5-ef27c0ad873a", "sighting--4c185f07-0869-4920-bbdf-c0055fc2245c", "sighting--f030e76b-8fb1-4060-a3b7-1d543a74ca1f", "sighting--9bb452a7-8768-40b2-ad6c-540d199bab36", "sighting--ab618bd7-6588-432f-80ae-a30a2b27b729", "sighting--f9821f10-5926-4d68-80ed-04e4d7471059", "sighting--993f0879-8b72-4954-a1db-88a5bb25172a", "sighting--20623168-f271-4b45-aff8-446b779783cb", "sighting--d9150bd5-511b-4fe4-9d05-06b87b18a92c", "sighting--abe4d20a-fb27-4c98-9dc5-bfced51a5d00", "sighting--1309eefb-a834-4e12-a348-c031d2117e97", "sighting--ce78b675-2407-4271-afc1-d388e5976e28", "sighting--f79b166b-317a-4a87-8f79-b78ed932a18a", "sighting--9e132159-3e89-4b26-99ac-ee1344ac95aa", "sighting--11df9c46-9ae4-4161-a799-ceb15171d983", "sighting--73013cca-76f6-4cd9-91c0-390ed2619846", "sighting--59f2fbcc-242b-4df3-8c6b-9db9a56154ef", "sighting--7004ec73-a69e-4b5c-a8f0-f33b1aea27f9", "sighting--440cc5c0-2d19-4ba1-a898-7df798548c06", "sighting--ab681be8-f43a-49d0-a1d0-91add3d1c722", "sighting--b47a6f78-3d87-40c5-8a34-80c7d20bd451", "sighting--001b0a76-cc3b-4c5a-ad97-915312f50b9d", "sighting--1ae489c1-f492-4a22-a097-9d025422a7d3", "sighting--33fbd452-ba0a-49b3-9d62-909606058aee", "sighting--79072d4a-5247-44c4-9655-c1637e53ab0b", "sighting--a5bba472-160a-49fa-9c06-2cf410e742f7", "sighting--0acb0df7-27c4-4197-b8e9-d692c712ee1a", "sighting--c6ab4d70-479d-4d58-b042-afd8bb9a9de6", "sighting--deff47cd-d291-46f0-885f-0a1101f9bf9f", "sighting--1ff7228c-68cd-4215-97ee-391eefebf44e", "sighting--2d2459d2-b732-4abe-9bc6-e52080d5afab", "sighting--c37e655e-570b-4826-b6c3-1a3233324643", "sighting--4c24009b-c373-4695-a34c-c7085695a0b8", "sighting--7fb2a24d-f2e8-48f2-8405-a8647d957777", "sighting--7d41ec7d-fe61-4e03-a4da-7515c882a65a", "sighting--dbbc3940-c648-4957-91ca-87957add39c2", "sighting--c279e2a2-00c1-44d3-8ff5-40ff504ebfac", "sighting--2fcbdbb1-e730-4299-909b-f8afdbaae725", "sighting--18afa735-ee7f-4df7-b7f8-314a16b742e0", "sighting--678ce31d-57dc-4723-bc73-b4753f21c7bf", "sighting--09ca76d1-59d4-4344-8a24-0e7b3a6caa3c", "sighting--2bdfa81a-bbaa-4b49-80e7-0ace34ba42ad", "sighting--f530276e-0879-4953-97d8-0477387ded05", "sighting--080d00e5-b4af-4920-b85b-39c447af544e", "sighting--959895f1-8eec-43da-a994-d1fe5784e0cb", "sighting--ffc91c1b-cb44-4848-93ef-3d2cefe22a5e", "sighting--59bad680-fa44-46ac-a89a-9fcfa4b38f3a", "sighting--fb2dc5d8-73e8-4efd-a4aa-188469eb0841", "sighting--5117ec04-eeb1-4926-aa3f-677d1b7052ab", "sighting--79c877fd-0e6e-4baa-8327-0d4f77feaf87", "sighting--22260987-12a1-48c8-8bec-a90073701974", "sighting--378b3427-e61f-48e6-9997-9a6d471f3941", "sighting--ef02144e-8b98-40fb-8414-69076e05623d", "sighting--97ce3bca-2081-407a-b420-24788acd7333", "sighting--80859ace-d5d9-4671-9efb-83e6a4a40a2b", "sighting--08c3165f-8fa5-4bb0-87f6-ef407361cc83", "sighting--17c77c72-c9d1-4cce-8b22-73380cf347c6", "sighting--6a464d61-73f8-46be-910d-600e57ad2dd9", "sighting--c5182600-d98f-4c58-b83a-e76a90a11217", "sighting--99fe08ef-7066-4df2-9d16-f67c886258d7", "sighting--193b7b98-6e3b-4d7c-a98d-3cf640344dbc", "sighting--07a6e083-238d-490d-831d-4af5dbc29514", "sighting--f045862e-a5f9-4c09-806b-ad8eb6c3d2d3", "sighting--da889907-76dc-4301-9a99-0513204886ce", "sighting--02965571-5c40-49e0-9903-8748ce124401", "sighting--e8d46586-da64-4ca7-b08f-eb1cab96ec83", "sighting--35b5d5da-fb9a-4961-b56d-619c955b0aad", "sighting--75c43398-5782-4147-bc64-9cb45e9a8ee0", "sighting--88a68d8a-1d8c-45d2-b949-1dd37a3970c6", "sighting--4d271eae-fd6f-48a4-9a4c-e836dfe35317", "sighting--4c6bb0e0-1dba-44dd-85e1-19eb5a342293", "sighting--d1b22723-947a-420f-aa28-c47789e377ee", "sighting--c3eb71d3-ed4f-4104-88c9-a345b3266fc6", "sighting--29dd8664-cdd4-4655-a9c8-ecc222815053", "sighting--82e21a70-c2c5-4aaa-ad5e-1648d7f0c3e4", "sighting--ef5f463b-de9a-42b8-8095-ebc89a57934d", "sighting--4f6c8764-4bc0-4a38-a784-ec70130bfb35", "sighting--7b38e3ab-7936-4b73-a234-fc4453010a84", "sighting--74f1a869-66cc-4c5b-94e5-d7d3a288fe33", "sighting--34bdddd5-18dc-42b5-9748-ef979618a36f", "sighting--4003d5aa-e635-4065-9bb8-d4c23ad698b3", "sighting--627b3ecd-294e-41db-8383-9fdb064ab9ec", "sighting--356ab7e0-32f4-4279-99ca-b09a1aa3b6d9", "sighting--9a25cba8-aff5-48f6-8a7d-3e0bede655b8", "sighting--f9df5d44-7b52-43b4-9939-b101bc35fe96", "sighting--b1e3fe54-f93b-4328-a936-495b0a14a2fb", "sighting--bc0e2f71-2609-4508-9a18-78e6a30fd9da", "sighting--70c179a0-9ad3-4289-a11a-29f357e00d46", "sighting--195afe90-7723-4138-936c-baa75feb4d33", "sighting--b4941865-9ea4-4da5-867e-c2c2612c4a82", "sighting--0c00dffc-d0cc-4336-80cf-abf4e05a8c5e", "sighting--b83408da-aaae-47ed-8009-59814b2782e5", "sighting--e7280f3f-3430-442b-bec0-29f79eea2579", "sighting--2763bdb7-fb47-41d2-9f70-dfd6590585f8", "sighting--67f281ed-3fac-4367-b4ea-d931750f852d", "sighting--99c27330-8c3d-416c-859c-c0bc33dfffa4", "sighting--bd707f8a-859a-4b04-9c91-5669b7ffb6ec", "sighting--411d3e39-621f-45c5-bb46-bc52790cdd45", "sighting--5327e6d4-35d0-4498-ac1b-ee760f8e665c", "sighting--290842bc-25a0-4b1c-87c6-a721df50dee4", "sighting--ba901055-2fb5-43b5-ba72-739b490c5cad", "sighting--aa85d062-f8b6-45f6-8fe2-ebc25e408475", "sighting--4b8f6035-7dc8-4f8a-9859-c8ed7e28aa91", "sighting--2167b00d-011d-4e67-a7ea-a0e9f1d7235b", "sighting--1952f91b-51ca-4197-8446-1670ac7c51cb", "sighting--f67661d7-daf3-4c49-95f7-9c20268b0ea2", "sighting--9d00c1ef-ffe7-4816-9094-bdbb78ea4d3a", "sighting--8e40e0f1-3a08-44c7-8c0f-b7354be8f94c", "sighting--25d69136-bc7c-4f70-b985-752e7cca9f2c", "sighting--6a0344d0-ab95-4f37-b627-9a4603e540d2", "sighting--c3edf5b0-7307-4ef9-a9eb-bff92c1a1151", "sighting--01fde616-5fcc-4532-82c7-28ca1051c37b", "sighting--d6969e04-783b-4505-8df4-073b0328093e", "sighting--e9d3ae17-1ea2-4e96-925b-48608c29536e", "sighting--8b84cba5-68a5-4dcb-a02f-79a1b3f32f31", "sighting--feb73b66-6680-4e35-8b2b-afd0528402df", "sighting--44c33107-7a99-45ef-91c0-972e788dd785", "sighting--f4deeb33-4999-44e8-b870-9b9574d9d443", "sighting--15572921-c90c-4d15-b410-a302ebc9ae0b", "sighting--bc70c614-f0fd-4cfa-a6ec-fe3c762287dd", "sighting--ba9a1415-5949-4aaf-8527-06e0f652b62b", "sighting--92af71f4-668e-4974-9b6e-fdc17ae826f3", "sighting--34af2072-35e9-4f35-b8a3-dce514835d4b", "sighting--e74e9021-d9bb-480a-82e6-6de70314f6c7", "sighting--2a6f715a-a13e-4abb-a583-bb4194ae1af7", "sighting--111d3a28-7698-406c-b224-0fb307ec7243", "sighting--be00106b-ad64-481d-b886-9600ea0646d1", "sighting--63d0304f-dcc8-4a6a-bcd5-d8153be5199d", "sighting--30b8e75c-f570-4f8e-9198-af1928bd6206", "sighting--c701be6b-a9cc-4310-9470-d466ae1c814a", "sighting--a3545fc4-de39-4550-a531-9ca6b718bfb8", "sighting--03c7b923-df18-47c8-a89c-4fec3a9b9cd8", "sighting--f8c96c67-71b2-457a-b390-0d58139ececc", "sighting--7c17deba-4a1d-491d-a7e3-33d2510d7ce7", "sighting--7ddaf986-3121-48a9-ac04-5e5559fcdaee", "sighting--c5bd8cef-78fc-4a3b-855e-a1b0498775fd", "sighting--b30b5edf-daad-4074-a762-6987250c4a65", "sighting--1af1b1fc-4294-4a79-ae35-d6b69b96e6d0", "sighting--67747c85-dbc0-4d08-92c9-391f892f0971", "sighting--b7a6cb99-97db-4e1e-8e9e-5cabdf0b832c", "sighting--d7eaadb1-c392-41d0-af2f-154a4e02dde7", "sighting--01c7d33b-77a2-4dfd-9509-b6538b47ef7c", "sighting--8ec57258-53db-41d7-8cfc-dd4ee4cdc326", "sighting--04a17371-a005-4473-9a97-9e07081dffc0", "sighting--67d52c67-db3d-4fb7-9219-ecc39c5a088e", "sighting--a8fde5ae-c057-465f-94a0-9e265b48d292", "sighting--d0afd8bf-aa9d-4384-872c-c8e20cc26d07", "sighting--0e913310-0a25-4d03-8e07-65b7a012026d", "sighting--620d84ea-0ed6-4815-8e1d-64a20c6ce26b", "sighting--e8e101d4-6fe8-4371-a053-fd790a10cffa", "sighting--bb7ae1d5-77bd-409e-a9a5-0f0528ae32ee", "sighting--32b52ccb-f15c-4027-a151-bfbc013f03e0", "sighting--739b333a-1528-4b31-a3fa-108e9db7294c", "sighting--79557c57-0582-4316-b1d1-388980ed63cf", "sighting--828ff692-e6b2-4c0c-8551-a50f3f3f7c3e", "sighting--c8ca1655-b885-4c47-ba33-bb8ebfdef1d8", "sighting--ddb56c6e-19ec-4b09-b41d-be2191cf8ef1", "sighting--1a2c8c72-8515-40b0-9776-b2d29977e801", "sighting--c2b995d5-acc2-4cf2-af39-c0350aeb1aad", "sighting--aa56fbca-c1d6-4c8e-a327-6e8fd10f6ae3", "sighting--f39afb58-0171-4cfe-b020-5903f2ce760d", "sighting--de1c8df5-7822-46f4-9e1a-80aafc2c6721", "sighting--3e8cb713-3115-469e-93bb-c51cf961647e", "sighting--7e5f5da5-07af-4972-9581-6b9e7dd5f9da", "sighting--e5c334f7-1e85-48c3-ac01-fde52c65c77b", "sighting--eb76bdb2-4f1b-49ab-a5d8-6dc91d6e61d8", "sighting--9c3a5ab0-4196-4543-928c-86d9985e1261", "sighting--04a3fed5-4567-43b4-ba5a-39ab3aa9378a", "sighting--05f4c87b-78cc-4c56-a173-21f2901172bb", "sighting--71d5ea87-bbad-45f1-8c10-828b92c1776d", "sighting--af1d00a9-91d0-4824-9184-506b45c70db2", "sighting--0df7540a-3400-48a3-a583-8a08f3e538da", "sighting--2cd186dc-fed5-437f-88dd-acd350262c23", "sighting--9250546b-1a88-4b47-852d-30c1d8913359", "sighting--17909600-9d8b-4e5f-bb10-0d3702f305eb", "sighting--00249683-9a8a-4710-9e32-b0cfdbb9f20f", "sighting--7445fbd1-60d1-45f1-aa56-2d6644cdbee5", "sighting--7a752117-d0fd-4e59-a00b-75aa62dcc68a", "sighting--8722289e-27ba-41c6-946e-cd2624bed4ec", "sighting--96b4d906-594a-4646-8111-727a4222032b", "sighting--a6566c93-d69c-4cd9-8b78-69df1e2d5c5c", "sighting--38015c7d-cd10-41d9-8c0e-8a13b62f1301", "sighting--7230aa13-7510-4e19-b56d-3df33e07fe04", "sighting--2f499548-fc12-4c97-b63f-f9e617378af9", "sighting--4f935f93-2886-4dbc-8987-6bca00add6a5", "sighting--97ab35c5-da5b-436a-9a76-a2092e0b1450", "sighting--aecaefaa-7cad-42ec-9e84-80c4dc26f808", "sighting--4bc92844-9825-4abd-9aff-1ae12da8c9e0", "sighting--1d23f8fd-30d3-49dd-a478-35cb2583ce17", "sighting--195250c4-35a3-4331-a762-9adcec3b7307", "sighting--04481405-4ba6-490f-9f07-90e08c2990f6", "sighting--8737d71b-5cea-4763-8485-caccd43ef7a0", "sighting--660f5c86-1514-47b7-8315-cbf4c082c36d", "sighting--1a446fff-42f1-4323-8960-8f13ff29d261", "sighting--b9912667-9a5b-4d2e-8056-fbe072814f20", "sighting--0d460ab9-5079-46b7-8642-6f86afa9c58f", "sighting--b6ffdc57-9927-4202-b945-408703dde043", "sighting--9136bd25-f5b5-4076-b3ea-88a0b1011619", "sighting--a6224274-a44f-4c91-bfb5-289962fcd9a4", "sighting--e12ca67a-1c77-4c26-ade1-c24ca1cbd1e1", "sighting--0e05c768-2a98-461f-a758-0a7589076df0", "sighting--d1ee4bbe-a3de-4966-a2fd-e92053b1fd35", "sighting--4a639d25-4afa-42ab-92b3-2a839fa36d5e", "sighting--3655c4ff-aba3-4636-952f-5b3dc595b0f2", "sighting--99d16101-dfb5-4a3f-aab8-3d009824918d", "sighting--4f227460-d22e-4393-b13d-deff7dfb83e1", "sighting--269b89e0-572d-4679-ad2c-4250846ba1fe", "sighting--2714ed79-aea1-444a-9328-ad53cd01fe62", "sighting--1b542110-5e14-457e-9a34-8518bd927108", "sighting--e531428d-ab78-459f-85fa-2952948cf1e8", "sighting--fc06a6cb-bd10-4bd6-9254-5c4b03596f5b", "sighting--a1be2a88-2083-44e6-9d31-88c0c1a389e1", "sighting--4d4af9e7-855e-4687-8f30-5eb7d33cba2a", "sighting--9c10e08e-4274-4ab7-a42e-0e60854d6569", "sighting--0e2e19cf-533b-4845-b59d-1df28bf2886e", "sighting--125ca6e5-8b31-483e-bc5f-7e7998f8c49e", "sighting--608a3668-190c-47ff-86db-4b0a859cf3e2", "sighting--4fad1027-ee5b-437f-9c2b-e2f0c56e94d1", "sighting--61dd55eb-eb94-40b7-9e25-aa29b126348d", "sighting--949ef5ad-df22-4ba6-bfca-f4ca7de547c8", "sighting--48342475-48fb-4b55-8120-21d2b04ca668", "sighting--80c4eee0-c3fd-4fae-99d0-5e6833262b40", "sighting--f7d852a1-46f2-4275-91fa-26c518252a41", "sighting--f3f31214-bbff-4032-bc27-063910290b6d", "sighting--8636c144-4444-47cd-8e7b-0bd0b3b9ece0", "sighting--ea4a7975-159f-4f0d-a8e5-c14b9791a2f3", "sighting--032a5ff8-53d7-4093-9b5f-a8f2c8c6114d", "sighting--2ce201a4-b0b7-4b0c-9ab7-bb7d4539166c", "sighting--861bfc90-5266-478c-b59c-6b99c66829fc", "sighting--352b84f1-9484-48c6-9db1-51bd4e1b89b2", "sighting--bc760b9f-ff05-4227-b6e1-83cf49a38c1f", "sighting--cd1bb94b-6a4c-4040-91b6-1c8b7e8907c1", "sighting--50d1dc74-73aa-4bb0-93db-d1c7651412d8", "sighting--46745213-fd7e-43a4-b6ee-849e0a103fda", "sighting--6d06edef-5a16-4eda-9426-190b72cf7349", "sighting--f66c86f8-f3f8-40a9-89ff-2eaf4a72cb57", "sighting--a7dba9c3-3e20-47ca-b8e5-4818e31f2b43", "sighting--675f9373-3640-4f5f-ad11-3703fbfabaee", "sighting--082284a3-b7f8-448e-a73b-903e424b8e32", "sighting--47df2080-029c-4976-a1ca-ba3997e0a97f", "sighting--f67e3c6d-5e38-48b9-b2cc-9450bad70c04", "sighting--7b40f820-1305-437e-b7c5-1eeb5cedf1cf", "sighting--1892c82c-2806-40f0-9b85-2da2a577adf0", "sighting--45ef2de0-01fd-442b-bad2-5147105d5d95", "sighting--2c96a07c-7299-423e-9b59-77a5daaefa1b", "sighting--30a6bae8-0d04-43a9-a8a9-72d7ec67ec87", "sighting--f62c9b11-6821-4dff-a08f-ef3d5920419b", "sighting--f8d281bf-a408-43df-9cd2-fd2cd3b715df", "sighting--904a1521-4cbe-40ec-b29e-87d96f484777", "sighting--63e7b8f2-6ee0-4eae-b078-7a2fe51af4a4", "sighting--d5e14809-58bb-4904-8645-5adf3cbe2c76", "sighting--d1ffb923-535e-415a-8500-07cb7a09d932", "sighting--5f681dc5-8a1c-4a89-96ee-5708000bc275", "sighting--0763888b-a099-4803-858d-134f6ab76e84", "sighting--54ebaaf0-1638-434c-9c50-3a4e26e28ae1", "sighting--b3264b87-9c86-4537-ac11-1be886c88ebd", "sighting--3dc9a3c8-4b35-4fd5-8f5c-60862ea4a32f", "sighting--cef87c36-d03a-4c0c-aad3-739e8a3553da", "sighting--ed08e592-c130-4786-87fd-7b12acb2d8f7", "sighting--b9576f75-000a-42e6-b562-b5cdcf645d5f", "sighting--f6d294aa-4817-4eac-bc32-5741e706d832", "sighting--719a6567-fd23-47ee-b627-832bfd7d3b49", "sighting--52a74365-285e-41d0-830d-2dee1c34037c", "sighting--f9e76f57-a71e-4571-889e-85af060a0110", "sighting--9506ce0e-9b82-4ed6-b47c-3773fcf552ec", "sighting--56f84eec-34eb-46c8-9f63-314beb566f16", "sighting--ec390d24-30f7-401b-a25b-1699b088bc07", "sighting--ab39fa10-134d-48fe-bc24-69bf4fc36981", "sighting--46140979-8297-4fa3-8cd9-9b229f438a28", "sighting--afd6f97d-34f4-48dc-98e6-943c6fbf2429", "sighting--808002db-93a1-4bbe-9971-9f024dc273d7", "sighting--973ff880-e14e-492b-94a3-0ba2d28d1d52", "sighting--ad32ee92-bcb0-43fa-951b-60a65840f7c8", "sighting--fda5e8af-9e82-4ea0-98ba-105def87466d", "sighting--41955984-c968-4510-b4ef-4538d3e09063", "sighting--cee0b9b6-5c94-4156-8769-6f4d708cc6ff", "sighting--0ffa989b-b693-46f8-9d1f-bd82a293fdbf", "sighting--531f888e-ce67-4dbf-800b-4cba98674d79", "sighting--8cb3772b-4a82-420c-84c8-9e2b5b678d7e", "sighting--18c2d1de-6c01-4bfb-86ba-33ac1b1e9dc5", "sighting--91d8c157-5fa8-4e91-a8d7-29bc542c69ab", "sighting--60c1e85f-1bad-40c4-9138-e50caab1b86d", "sighting--2b0767e5-76e0-4e1c-82ac-8ad44ba22cf8", "sighting--0ae54e8e-6b3f-4d2a-bcbb-8caaa24f2b3f", "sighting--15af3af7-e059-4ec7-b8d3-a8b1eb069e64", "sighting--638c52a6-a104-47c1-926b-a7d1451ca033", "sighting--8fca852d-9fb7-4fbc-a02d-aa9c61b9bec1", "sighting--738f971f-116e-4c49-a472-0f59f96b3eb9", "sighting--979bf1d7-703b-4c9a-b850-c424c4144f67", "sighting--8e817f3a-59e8-40c8-9821-5552fc7b9206", "sighting--23f6296c-4a0a-4185-be0d-0fea5682f60f", "sighting--b6a98c5a-f714-4a5f-bf71-823436c96c1c", "sighting--2bcb1012-572a-4c6b-98be-80bc95bb9001", "sighting--b240121e-dad7-4b6b-b980-6315724eae08", "sighting--4feddd13-05e0-4a59-9023-65c09871d733", "sighting--4a6426bd-8087-4b76-9c0a-850d0e7cb922", "sighting--17cc129b-90ee-4d5e-9714-fa22bdf14d70", "sighting--235fa23f-8faf-4345-a042-995b065bd410", "sighting--1d7557d7-f879-46cc-9161-4698b9672ac6", "sighting--c88dc3eb-b838-4da3-b968-9dca06e2d02e", "sighting--2c85dfc8-ebb6-4aeb-987b-c0037bad2102", "sighting--7c10aa98-e411-4dbd-98f6-909908bdbe1e", "sighting--2ed4fccc-c08d-4258-a833-bea12dcfe1e3", "sighting--ea121d43-916a-4ad5-9e00-d572890e0a9e", "sighting--12e63474-d1e2-4026-b6b7-233f36d2746e", "sighting--3a308d1f-d323-4d71-b783-db6de1d212fa", "sighting--81af743c-eb11-4117-8268-db0a3bfb1163", "sighting--2ab9e679-5c3a-439c-be6b-130574af7fc6", "sighting--8de4ef1f-18c6-4221-8949-77c79c36bf47", "sighting--a79a4c6b-719d-400f-a526-38b476e2eac1", "sighting--86efd044-b725-43e6-bd37-7e6f6f1ee00f", "sighting--272a38ec-9381-443b-b281-a0559516404b", "sighting--24a0d066-9eb4-4e4b-9ecc-58cc637f9699", "sighting--11be396e-05b5-41c1-8973-84c07f7aa64a", "sighting--d9102e3c-e7e7-4ee2-82ae-87efaf6a879a", "sighting--ecfdcd3b-3fa7-441e-8ae4-3eaa99ecc434", "sighting--fc9f8c37-ce94-49c7-9893-bb64c8f3487b", "sighting--836de279-74a7-4a5d-84ef-420026c1a228", "sighting--f9e2e3e0-fe81-4ee5-9ae0-9bb48a1b9589", "sighting--beaac253-9682-4198-82d6-86801f6deb01", "sighting--bd9c8046-f396-4622-9b00-1d7500d6af8b", "sighting--139bf264-cb06-4a2d-bdf4-34cb099be7ec", "sighting--7774d022-fe3d-4301-870f-b4ccd06a5523", "sighting--5634ebd3-f430-4dd0-8127-ac04bb7c4f94", "sighting--cb6506d1-4450-40a1-b177-26549b849b1c", "sighting--06522bd7-7480-4de8-8a49-13fdd3577b86", "sighting--ad191fbd-9408-4728-859e-2febcc37c483", "sighting--5391d3f2-fc9e-4e30-b6ce-13775cb355b3", "sighting--6575705e-6761-4a35-8dc9-b0ddee662435", "sighting--3a9e32d7-dddf-4e53-933f-0428d1e6c3ac", "sighting--1d17ab40-71cb-4ff4-a3df-645fb6edd118", "sighting--8e9e81da-440d-432e-8b08-9036fd32cd9a", "sighting--8e09f48b-8a67-4175-8943-6fc68a4219c0", "sighting--5d4e9e39-49bf-496e-af55-4ec6a8d84b39", "sighting--0de8dbb7-ce7d-4147-869a-40239f3df719", "sighting--4df9bf99-2e3e-45a5-94ff-7f20360654b6", "sighting--05a9a3f6-06a3-4493-b825-e011aca08f5c", "sighting--4006acfb-e841-45d5-b7db-d6b095dc6c47", "sighting--8666e8ab-a69f-4672-9930-7645929f16ad", "sighting--80971688-802a-41a4-a8dd-dd31128cd79a", "sighting--b247e439-4d44-4be8-ac5c-70271a5c9dec", "sighting--a1abeb8d-ada2-42f0-8f6c-4b9c4274bd59", "sighting--69cec57e-9298-469f-a81f-abe8b66bfe61", "sighting--40dbef51-d81e-40af-90d5-c92fa9c0bed9", "sighting--a4e27102-19f8-4c8c-9452-cfeb1f535714", "sighting--9614fa3c-266e-46d8-8d0d-c8e0c7417079", "sighting--d6bcd3e4-f5d1-4ddd-a51b-89e2d218dcee", "sighting--f773ae06-687b-4ec4-8e57-7ce3ba3e5964", "sighting--67181e42-8310-435f-954f-abfedf130fb8", "sighting--e49f835e-e457-429c-b6d5-b440f58fb93d", "sighting--1395ced4-efc2-4c5d-8a66-5d5bebe5f920", "sighting--0ed41faa-9fb7-4d03-8efc-29b31e0ba05e", "sighting--910c75e7-9385-4c18-aa8c-e6856575903c", "sighting--8c1231e0-6dc8-4671-8697-8c7ca08bc59e", "sighting--ffdebac6-50fc-4da0-8786-bcbce11819b7", "sighting--b9cc5123-35a4-4389-9335-641b9f3d41e1", "sighting--36618450-dc0d-4c21-93ab-0d5f4d574db6", "sighting--7474fd86-5adf-425f-89a4-90568b5eec4c", "sighting--15df75dd-4a6b-46ee-8c37-f3b2792c86a8", "sighting--921285de-ca04-4688-81ee-100e5c62221e", "sighting--2a138881-40c2-4513-8477-129a9b871e9e", "sighting--4484e752-388b-44d4-99e0-5cf596de323e", "sighting--cacaa8ac-6270-4f2a-b7ce-da69e510e0ff", "sighting--d741b772-86ee-4025-939e-d9c36e7ccb0b", "sighting--17bdd384-cfab-4b35-930d-cf79905c1c6d", "sighting--ad99142f-295b-4a1c-ac87-26a271ddfeeb", "sighting--d7f32ed4-4d81-4c3b-98f5-ac8cf18009f2", "sighting--9fc19d99-993b-4dab-a289-843c99663641", "sighting--57b91e9c-757a-4db8-a09d-71ca3fd6800b", "sighting--4ca86d33-0813-4820-bcea-5f63053c5824", "sighting--850cd175-bc4a-407e-93d1-c9ee23f0bb32", "sighting--cdfa8aab-e9af-47ae-9cc1-4e99eac8fed5", "sighting--0252b5bd-4b61-42b4-8b07-46ae447db108", "sighting--19a4fafa-f638-4d37-af76-e2da18dc4a1b", "sighting--766b1be3-6c8d-4195-957b-3a3512e4aa31", "sighting--da4699ca-6eab-4b95-a632-9b8cdb72e4bf", "sighting--0ef3cba8-3bb8-4c70-84c3-fa136a520319", "sighting--cf30a418-c5a1-4e13-a3b4-56f77d09af53", "sighting--910f1263-66fd-41d5-bf79-cb1a0d4da1b3", "sighting--e23430d9-1c57-47c2-a72f-d07cb0f71b78", "sighting--9be59082-40b3-407c-97e7-35f8b1ecdde1", "sighting--595a8a4b-fd10-47ce-a463-2d3ece1b2ff9", "sighting--4b53a9b4-80ed-46cb-acde-f533697d7768", "sighting--c4d20f0d-0e31-408e-b068-a6ebc8b2a95f", "sighting--75cf98a7-aca3-4db6-a94f-c5c97a5101d8", "sighting--207d8a8e-c253-40a5-809c-9cb8336377c9", "sighting--3396063d-dfd1-41c5-a203-9e740d785131", "sighting--d6957c14-f478-4712-aa3a-6a75d2ce30b6", "sighting--6dc9190a-f264-464c-af5b-222e88164f77", "sighting--b11fd42d-7b1e-4a29-a37a-d1d868c98191", "sighting--4788d1e8-95ed-4a8e-90ae-b8f52acfc3d3", "sighting--0dfcddc0-bcf0-4fdd-876b-0c8b7654f61b", "sighting--902b0623-2460-4b3e-8dd6-12b803e4a16f", "sighting--e26a73b3-386e-461c-8668-476ad89dd51f", "sighting--c7fb9a3c-56e7-4931-916d-c32727131fb4", "sighting--5bbf4e20-8929-4066-b232-fc8a9f45ad33", "sighting--84fecae4-1ac2-4194-ab13-f1cf9cb3ef7b", "sighting--972b79d5-9dfe-4046-ae1a-40fea3d24aaf", "sighting--ff3d4810-be6e-4ca6-99dc-22e5f7431220", "sighting--1cf037f5-a2a4-4974-ad71-3629dc5f6db8", "sighting--aa9d6e50-f710-4b1c-a7d3-31f5351045ae", "sighting--43a6fde9-376a-4ad9-b3ca-ab98d8682b39", "sighting--a014af18-7a42-493e-84ff-3078b1b598a4", "sighting--86c1f653-772a-412a-a8d4-99abf3dd73d5", "sighting--02735d2e-39ff-403e-ad00-9d2903b42519", "sighting--980a5a6d-6e1a-4ed6-8ec8-a05b20f1b3b8", "sighting--4e928c7e-15ec-41f2-abb4-5a34fd8a9042", "sighting--25bbd80e-186e-48a6-857f-4b908a1888f2", "sighting--fbe4b25e-5437-4b3b-b188-3ddc982f1d5a", "sighting--b61bd25a-006b-452b-be5a-c75a5172329b", "sighting--ef698386-8912-45c0-a241-d2986bbf1b3c", "sighting--16f1d0bd-093f-4472-83dc-8d9fb8679295", "sighting--01318c49-3700-41a7-9d0e-dcc98abbfd33", "sighting--37d3fbad-9f5b-4ebc-955b-7d3dc8ec847b", "sighting--14b3745a-178f-4e60-9de4-f73388bf06d1", "sighting--3f2c821b-ced1-489e-84e2-df776506ddf3", "sighting--e1d51160-712a-4f3f-9158-c9d1927a46d1", "sighting--bf1847b0-699c-447e-879e-d27266e71e1e", "sighting--9494a27c-f28b-4565-b232-767d0c45015b", "sighting--c1cc5743-9397-456b-8387-3b672f2de35e", "sighting--3af62a53-fc6a-4e0d-9f74-f02d8bd442b2", "sighting--af679254-6b8c-4111-a5eb-a801c5b65f71", "sighting--7c995715-d677-47c5-8feb-4fdc2d94aff4", "sighting--5fe64946-10a2-4f22-a24f-9d2e7f8709cc", "sighting--90f37ac4-8e59-4703-aabd-51eae5e96423", "sighting--49432a5b-1794-4846-8069-8c19b05fcb70", "sighting--f4989929-7fe8-4184-8589-359ba27cdbd1", "sighting--07f1e21d-a611-4da8-b89d-b36aa2fc11e6", "sighting--9a839a6e-6bca-4d3f-94b2-348b09469f11", "sighting--7ec4dc3f-70e9-454b-bb23-16aff0dc0e22", "sighting--ef43d950-fe25-4847-8e9d-d71dde91f1d6", "sighting--3dffd89b-54f4-4040-bdae-bbc57d5c54ea", "sighting--ca011309-519a-4d58-82bd-db01d4ebe124", "sighting--d793b053-662a-42eb-a56a-faf6aa264725", "sighting--257efc24-5861-4f5a-87f9-7da6677b561e", "sighting--4719d75b-27aa-4682-93f5-51c735bf3a92", "sighting--d258b9a6-c3df-4706-b0a9-1637db3aadfe", "sighting--399dd6ab-6210-4ead-b8d1-6c3a4703e950", "sighting--53dd9b65-fbf2-44b9-abd2-d21e4136f562", "sighting--8d14de9e-6151-4a7c-a90a-e346e262dfe8", "sighting--5d5bd415-5b12-46b8-aec6-f1a1c8a1d4a2", "sighting--00274b47-9906-4ac4-a47c-84f66e8bd929", "sighting--df401a6a-4b65-4576-aab5-ff93c1a6b747", "sighting--fb554a19-c057-4c11-9c25-33ed48a6bdbb", "sighting--302e1060-01bc-476c-83f4-900c1e953ce4", "sighting--2f012a9f-8c3d-4938-85ff-6a02d0a9d5dc", "sighting--b9e60bed-7834-4aba-85ab-04eeea142463", "sighting--2ddaaf3a-30d8-45c9-8646-ce37e5fc7b63", "sighting--5d7e05a9-2c3e-4d0d-8bee-2fe15a3494fb", "sighting--883c086d-f3c2-45c8-afd9-56308ed412ab", "sighting--eff01fa3-114f-41f7-b7c9-fb49b36b37ef", "sighting--0ba00a41-7449-4a37-9257-0062c459976e", "sighting--df496c98-05e4-45f9-8664-2723ef6ac1ea", "sighting--a0d3a039-4866-43a3-ad9f-98bc15a1d0da", "sighting--0c24a543-24c6-47ea-b793-43bf3ba45cb4", "sighting--c0cfafd9-8d08-4f06-ab16-bf7a8d26d505", "sighting--d18642fd-5452-4fec-8618-d85300467978", "sighting--5ba43b3d-c831-44f1-be64-5347513ef0ee", "sighting--b0c56289-309e-4fdc-aa13-030130fd9f95", "sighting--a092e5e4-2330-4c7c-ab88-3cd101fd346d", "sighting--b25d1aee-4595-4931-9b73-c061dc9d410e", "sighting--60c68e14-424f-4b2e-aa52-c1855b06b57f", "sighting--7504c40f-c7eb-420e-8ba9-858b5ea6fa8f", "sighting--812aedcc-bddb-4035-af1a-e48bca1b7243", "sighting--6a150af0-14db-4678-819d-3c1c528761e2", "sighting--678d3e85-d20d-4fa3-b86b-66fbebb043ef", "sighting--bfc0eb66-f898-49e4-bc3e-dc587763fc6c", "sighting--39c3e7e2-63a6-4d7f-9e34-13eddbb0e991", "sighting--58795fdd-6157-4d4b-a10d-25523b81b66f", "sighting--47ae96dd-83ed-427b-948d-f8c4497f6e15", "sighting--f84db042-0f00-4023-8d82-4953beb3f4ab", "sighting--22edfd36-717a-47da-8b13-894d0ba1dfcc", "sighting--d0033a82-7275-4880-9fff-38c493d76d05", "sighting--1d7b8259-6c77-4457-8113-8eaf2fb63efd", "sighting--34ba5488-045d-4890-8b7b-672d444d64ea", "sighting--35e13999-eab4-4e2f-92d4-3f2472d10b76", "sighting--200e0750-adcf-4598-b981-05587d65c367", "sighting--1b7cb434-0d13-4b65-8daa-943d7d929fd2", "sighting--79ed978a-1064-4eb6-9539-c3374a71e1c9", "sighting--e0660e65-fe9f-476c-9df0-87118da7a92d", "sighting--3cccf6fa-9c41-40b3-bcf8-898ba7a25995", "sighting--62e8e2ff-b778-4d51-b777-4998dc072099", "sighting--8089fe88-f833-4883-b5c5-5b53419f2cfd", "sighting--9c4d3247-8471-4cc2-abe6-e5910bf8803c", "sighting--bd043986-e997-4b18-af1a-55e99a95c176", "sighting--ae890ea5-6913-45ac-b833-26d691a77cc9", "sighting--d3786377-bff3-44ea-b7f8-19c3f70b2215", "sighting--46514eee-ef05-417f-bb71-974d21c820d8", "sighting--953e3866-0176-4849-a7d8-bda5b6021a43", "sighting--7c868090-93c7-433f-9a27-a5bc3a971ecc", "sighting--9aaf3bef-bfa3-44f0-9e95-0edf94f12799", "sighting--10ff71b4-70c3-4898-9602-bf22a6a919e1", "sighting--8315dd24-3995-49f4-a034-2a7095b52fb8", "sighting--9a5b3304-33ea-4849-a9d6-40b4cb7a0594", "sighting--0205f525-f6f8-40b7-98eb-31c4e14cff04", "sighting--acf4c22e-913b-4295-ac55-77d6f161b93f", "sighting--a9ff3a1a-74a6-4b9b-9ea5-f598910a932f", "sighting--e4f8eb77-4c80-469a-bcfa-dea348ca4c32", "sighting--914facca-94ef-4b1a-9bdf-fd2364095f1d", "sighting--04900563-e561-4eca-8496-c48bc14af3ed", "sighting--cd05f238-adb4-4135-8f61-ecbe239dcf87", "sighting--c77afc08-1e14-4a65-92dd-1d6d49047913", "sighting--f7ed8ed4-9c8f-4759-b0ee-15528abc7a0d", "sighting--bcb83946-1dca-4fc5-9862-160a3c2178e3", "sighting--2213bc89-e9a8-4320-a27f-16c35072e2ca", "sighting--cca3d2de-2648-477b-97e9-211034a31d50", "sighting--9124fa16-b8b3-4b46-a0a9-6753ebcb0e9d", "sighting--ed6126c0-4f9e-4ec3-9222-b8c8b80bb5bb", "sighting--6103b02c-7bed-4ddc-8c20-8ba845204c44", "sighting--a23a3821-7487-4175-8ceb-3b42fe5a92b6", "sighting--08d87af5-57c2-48c4-9e2d-6f2ddbd48985", "sighting--4d9c2a6b-f91e-4cd9-aa9d-90d424914c6d", "sighting--b11faf24-1371-42c6-9ad8-baa46ca75b49", "sighting--c6480f29-d691-4d94-bc34-0236e543b987", "sighting--24bfe699-f0f3-4039-96c5-c7b8b3ac209f", "sighting--a074e6cb-8669-45bf-b348-c0390a9b288f", "sighting--77d997b2-0985-4371-80ae-2e7863e34a5b", "sighting--c68d8bdd-54b6-4de9-8824-9f0396c8147f", "sighting--dfc0604e-7f73-429c-9617-48772cb9a2af", "sighting--c66e06b0-7692-4233-bc60-e817bb9e12f0", "sighting--00424073-c0ba-419a-8877-e3a6d0854f3a", "sighting--4e67c4d3-e28c-4645-b21f-c4ba6b74101a", "sighting--639fc7ae-e79d-4d54-931e-53bf86139293", "sighting--d629b8b0-d7d7-4a7a-8697-18421fa6decf", "sighting--4e2c4b15-9b07-41a3-acad-790202be62a6", "sighting--dea42759-0011-4ad7-ab67-13bae31bbfa8", "sighting--efa1ed20-1263-4945-bd60-3615750dcef0", "sighting--db5ff12f-ea87-4117-8609-90813a4c98c7", "sighting--06709b71-18fc-4901-a1fd-c758f3de0ef0", "sighting--40214216-0eb4-4e8f-9db9-d77693955579", "sighting--2950f922-4a8f-4ade-96f1-d8fe5a8e9c1d", "sighting--db63f7b5-5443-4d8e-88b5-632f5f762f03", "sighting--45dce2e9-4985-4b20-b509-ce5f40572196", "sighting--dad27bed-4302-4191-b3f2-cece69811c66", "sighting--ad6814ff-c14d-4ef3-bff4-084d5ade0ec7", "sighting--e0fd3448-3600-44fe-b722-5a4b49bb0f23", "sighting--8e23b730-bf38-4bee-b06e-87b4416f5b17", "sighting--056d4d3c-b0a2-4af5-a800-d4ecf98e2a4a", "sighting--bdfd5448-9a81-434b-b183-5b999392c4f0", "sighting--f90cb38e-0f4b-402c-b067-e79760ad9d8e", "sighting--9fe260ae-ed23-44ac-9d14-f2b22bf7a736", "sighting--8700cb55-e1c6-443f-b5ae-4ca8c849e825", "sighting--5ae8c85b-41f7-4689-9bdb-825670f63056", "sighting--1eb7ef98-a159-4e94-ba79-6f19cd3786c8", "sighting--63198659-0dbe-48c3-872c-d15bb901ee57", "sighting--1af6b84a-f940-4e26-81f3-acf698ba6c23", "sighting--f9cff71e-5281-4819-843f-32174c102738", "sighting--64a51949-b545-4219-b5b0-c66d2730fc16", "sighting--2f7a3d33-7be2-4f7c-9f99-bed72849b18e", "sighting--8c92bf6e-03b7-4df8-afd5-7b88bae6b91a", "sighting--a17e8e88-aacc-48ca-89fe-8d1c97d911dd", "sighting--6f5ba7ae-721d-40be-b0f0-c762925d762e", "sighting--a88ee8d9-fdad-4c1c-8999-8c375408ea07", "sighting--6a526abe-f55c-410b-af19-349ea7cb62f8", "sighting--101163d4-b3bb-45e0-afba-2e48ed73e076", "sighting--aaf98663-97c3-4f9d-b544-7519334256dc", "sighting--d9e46877-8557-44fc-887f-542bde015090", "sighting--fa0af0ee-e4f1-4c11-8777-5a14962b48df", "sighting--72e52965-bba3-4cbd-862f-e0da30534253", "sighting--e1c78adb-05d7-41a2-9ff4-cefab1624d64", "sighting--83380952-557c-433a-bd7c-7cf3893ed3bc", "sighting--6a1fd34f-7f1e-4ca3-8afd-77f8b4644cde", "sighting--96c483a0-52c0-4387-affc-53d352806c75", "sighting--3d1aaaa2-d8cc-4b63-ba6b-8de404a60b2b", "sighting--440a6947-ff78-4538-b704-c539d3e04418", "sighting--d0416bd1-89bb-4394-b6a6-365213640440", "sighting--5bf19b55-9eec-48f2-addb-932dab7a63d4", "sighting--02ce7dd7-7358-4e63-8c91-743cfe51f18c", "sighting--c8d1ed28-9f8c-4398-8f61-5b31dcc9623b", "sighting--3d97fae8-1a2a-4d57-8acf-d2c9d20c55d3", "sighting--68f8882f-34dd-4390-a259-fbbd6ec27c2a", "sighting--e1eab4d9-36aa-4f3d-8e0e-16d046f400cf", "sighting--040e2d66-eed7-44c6-b070-7b50d5e734f9", "sighting--cc27b055-f72e-4f2d-96ce-20e93158a32f", "sighting--46df5bef-c705-4c46-bd5d-4d4a7257c4ca", "sighting--94cfaab4-29e7-41bb-b052-6684f62c4dfe", "sighting--4458d85d-b042-4744-83f9-7bff4c4377e8", "sighting--3daa9c87-011d-46f6-982d-1c219b07776c", "sighting--dac885f7-66e7-46e3-a5d4-e117019f2986", "sighting--93f39412-7a72-4c29-b349-808f106c81d7", "sighting--735e13e4-4b32-4c87-93a3-b57d5a56de0c", "sighting--607fd91b-1d64-419f-8bbe-fc15b00ca00e", "sighting--1bf33c53-fc24-4366-b69d-41dafe09cd40", "sighting--3a7676f3-8bf0-4ce4-b17e-6915afdcbf82", "sighting--3aac399d-6aaa-4d28-9ac6-8a180251753f", "sighting--05ecbe25-a06a-4192-925c-5d57594d836d", "sighting--a4ced176-c49a-4f8a-94b9-ffe88076a619", "sighting--8c0a1108-08d5-4a72-aac2-257e09426619", "sighting--05588d99-fc78-4e57-af3c-1c2bce5afc72", "sighting--92bd9701-e870-45b0-bb1c-caf7153c2870", "sighting--80699868-da16-449a-8ed9-4ce2bb5456ec", "sighting--2633efd5-a05b-4b41-b835-3c4e6d5b9526", "sighting--a8db6e38-1f60-4f2e-acee-7b9d8fdab079", "sighting--e9ad1059-5b9a-4ba2-82df-87b1cd4aaa6c", "sighting--64b333e2-f6e8-4f92-9d32-a8025439a86f", "sighting--a9914447-cf5c-440b-82a4-8756eebecc7a", "sighting--6b7742c9-18d6-4844-979e-028ef7a6b5da", "sighting--4d25c1ac-1c46-4800-8a1c-527ec1dd2dff", "sighting--a7da0f40-7656-4057-9dc8-dc4f6166018d", "sighting--fa0de339-7aef-41b8-a4f6-07964341e791", "sighting--899bc1d4-6dcc-4dab-b910-9f9b64ca1eff", "sighting--1b3ce6fb-267e-479b-8272-08943d009955", "sighting--274ea61d-daa8-4569-920f-78e900f14b9f", "sighting--d2255496-24b5-4817-a0dd-4fae558b3283", "sighting--4156b249-0612-4697-ae97-413e2530b382", "sighting--6f78677d-d975-4a2b-abdb-4a92a44108e4", "sighting--d9a55c4f-05aa-4771-92d3-7d34d44969ec", "sighting--8caf4e54-ad85-4ac3-a98e-e34ed8c5cdbd", "sighting--2bf33739-648e-4982-9095-1d6f3a1f8d58", "sighting--bf7159b0-0a03-4e55-9c10-e3258c9e70c7", "sighting--ee4c03cd-e4f4-449f-a794-19f762589ee4", "sighting--3a301460-f058-4720-888f-18eeed13d2a5", "sighting--e7573314-1509-427d-a3c5-2b4e8990b628", "sighting--5b3f10b2-65a9-45d3-8d06-36ab8d7ac0c8", "sighting--4664e30b-c84c-4541-a4c0-23b94e754da0", "sighting--064ea4e0-ff14-4b7d-a12e-b2a8806b9a4a", "sighting--32cb3625-66f6-4480-97a2-735f2e7d4211", "sighting--b9338022-3fda-4914-be9b-823bcd5aa97b", "sighting--c10f493b-1908-4930-adb2-91ebcd03fc21", "sighting--f2273885-0f87-430e-9dbc-2605262d716f", "sighting--5ef6005a-962f-4e24-8e56-afae0535090b", "sighting--d152d2c3-cbea-4cda-a23f-2bad9352145c", "sighting--039422bd-c583-4170-9d4b-e8c50bea1e11", "sighting--1f62460a-1d5b-431a-9e45-35cb4a3a4453", "sighting--a5cec456-10bf-42fc-8f2b-84bfeee00263", "sighting--51a6cb17-f605-40b9-b103-1f500806caf5", "sighting--8ac67920-0186-4e66-a477-ac57c8f3152c", "sighting--ee002bcb-549c-4688-a8ea-be2101323425", "sighting--7b99cef3-3ef7-4bc8-b2a8-1e3fccc1fa35", "sighting--747040db-491d-4d38-8ae4-4ecfa2832fa2", "sighting--c976629d-2ee5-453b-9cea-54124dbf9cbf", "sighting--ebb3c026-6c48-4c07-9367-fb12384bdc64", "sighting--a0f08390-eb93-4ce7-9e64-32a96c1d2ce5", "sighting--21d3fe64-11d9-4500-b2e5-2bf42e9de9ff", "sighting--ef0b6b02-ceff-4de9-8cf3-ced3a3a7ff4f", "sighting--5f67f82e-e545-4678-989e-425034a77fd3", "sighting--608e9a4f-42a5-4910-8f47-120aba0c14fa", "sighting--18b99371-e6bd-4bc8-95d9-e689a0c39b62", "sighting--c6eb4687-515b-4f6b-ab0e-822e1511fc99", "sighting--ef296af1-f3b2-4f50-bff3-c331f2e0492b", "sighting--bcfeb2e9-d8d6-42ab-9fe2-8d72a024e6a4", "sighting--a49add66-673a-4d40-a9e5-9ef76efb51d5", "sighting--3d79e076-169e-47cd-bc3b-b6ba45c8871e", "sighting--bd079bad-0750-450e-b9ca-d2bf1dfa8ca8", "sighting--991f022a-734e-40aa-ba47-b596ec423eb0", "sighting--e4aa15da-92e3-49b6-b426-be24687340ba", "sighting--c58d650f-4369-4f3e-9ea3-202e34e479c5", "sighting--e3e6ab01-97b3-48fa-9898-c69c3d1f4f80", "sighting--03cd0fa7-dc2e-4a99-96d4-b904675e6ae5", "sighting--f95f1200-1ccf-45fb-8787-7f2453d74572", "sighting--3890da4f-1817-4ccd-a5a2-12f10387cb3d", "sighting--d8b0b45c-691f-4402-9494-e5c20d24e0a9", "sighting--61b318ff-6821-4f30-9a08-7ff07c2efa4f", "sighting--bd71d0c3-9cd7-4c45-a66b-3f8a0708b84e", "sighting--770e6030-d10b-490c-a6c6-a1ea7d1835c5", "sighting--6b11885f-4375-4415-99eb-eaf63669fc46", "sighting--90886ba3-9f87-4ecd-b88e-97d3a9122e28", "sighting--ebdab3a8-2872-49ec-9ecd-bba9ebb09a5d", "sighting--e3ffc98a-6b9d-4fb1-9335-40bae9bb0965", "sighting--3030c005-2544-42d9-8bc6-c4499bed1752", "sighting--03c8d41c-3a3c-49f2-9ba0-f5e0cc6f6ea0", "sighting--626c33ae-1193-4dcd-a5fd-7d990b3646f4", "sighting--77dc17ba-2ded-4414-b214-3bc5326ba891", "sighting--91797eeb-151b-40c0-8fc7-013790301ab4", "sighting--b1d369fa-d459-4884-8148-1e366d7923ae", "sighting--f9acc4de-464e-4b1f-9f58-7a99c8ecef4c", "sighting--b25b0f59-9fef-4d8a-9e10-e10e2a695139", "sighting--2c97dddf-c5d1-419f-9aa0-5a78bfd75147", "sighting--a6a34df4-3830-41b0-aa65-55098cf588e9", "sighting--ae87d4f7-05b6-4ce6-af62-f94bc26bf65f", "sighting--833b82de-f36f-44f2-b53d-7126c54c6267", "sighting--d957c7f3-7a11-421a-a775-6aad2e96e0b2", "sighting--0a907aa6-4599-415a-8705-5323b82ee4bc", "sighting--6bc6120b-def3-4879-b968-4eba4fbfc2f5", "sighting--2c3dda00-ca9e-47f9-980f-f02d000a43d2", "sighting--3e4e9fbb-7a93-4d4c-b082-4e15eb4832ca", "sighting--44c37211-ea1d-484c-9b9b-8defcbcf6898", "sighting--e7d49f13-c5f4-4f5d-a84d-97c12d7e5c51", "sighting--0dbd4281-af38-4120-a107-5cabaf6c9cc7", "sighting--8ee2ed59-9af5-4f18-a5e8-57a7f96eddd7", "sighting--dcd93f30-376a-4f0b-a938-0d513a9b0a4c", "sighting--7cf4d95d-d19b-4115-8ced-976a8ddd62ba", "sighting--5acb4b4e-2d9e-4fbd-bd40-1484ecb68533", "sighting--03580154-4a0d-42c8-849e-9c9e3785d521", "sighting--098774e3-fcd7-4849-9e07-f18c5e09414a", "sighting--447d82fd-ff3a-43cb-b4a5-f5a3ea3155ad", "sighting--bb20cf7b-222f-4c55-bbe5-4247fffd26ef", "sighting--b9f8bc1a-eb2b-4ac3-9662-909023aec725", "sighting--dd56c58c-14de-42ac-93d2-bf44faaf808f", "sighting--2d450157-041d-4aff-8529-f533a91829ea", "sighting--5e96ef68-ae46-4c33-a29d-b7889938fbe8", "sighting--e0dde5c0-c7b9-4dd1-9aed-a8c932566688", "sighting--8776acf4-958c-49ff-8d4f-38cbeab2bb59", "sighting--9885b162-1e8d-43cb-820c-ae3d753f52b1", "sighting--51f7f104-3efe-4e8a-9dfb-987c2946324e", "sighting--fed4510f-8f57-4d02-8a47-a93c92c59920", "sighting--bd860371-a4ac-49e6-99f8-6196ea6375fa", "sighting--e1d95a6e-fe6b-4316-8725-533775ab9d4b", "sighting--07f27c34-6f46-4dd0-af1e-4aa8c7ec7a79", "sighting--e5d47ae2-05f5-46b5-b848-80f719334851", "sighting--62e3aab5-ff5b-4341-8bc8-4a1acd3d7cb9", "sighting--050671be-5689-4656-9e31-419e9d4e7d06", "sighting--3f196934-1b83-46c5-84b7-72aca5a90425", "sighting--4c392c97-eef0-4745-b5c1-78bb339c1039", "sighting--6900cccd-4f75-457d-9dfa-b1ff262db26e", "sighting--a6369481-46e9-4269-bc70-db5755e8e752", "sighting--05e022d4-db60-40db-b51f-3817f493dbe9", "sighting--ddb025c9-0321-4bd7-b7ea-b3a7c41fa8ab", "sighting--610a585f-4c55-4c20-b1ee-4c73f3d1d381", "sighting--5c2daf94-2fee-45c7-8fae-cd5fd26acd37", "sighting--b2dd29c8-2d01-4e02-a9d4-67be2266ecff", "sighting--ec48cd36-d458-400d-9f87-15cfd23b1aaf", "sighting--4518733c-cfd4-4292-a2a4-a38920a40d06", "sighting--8211831b-719f-45fc-a645-8f3f34863a49", "sighting--680c7c7b-ef65-4846-ae06-7afe26218627", "sighting--bfc8efb5-ee25-4df0-92fe-794c29294210", "sighting--6cc0e41c-364e-4c00-b3de-1a6054d1e3e7", "sighting--99aa85d1-0a93-437c-8ff0-3fc0315f9692", "sighting--6328cd23-740e-4820-b5e2-4581cedf2e2e", "sighting--1bc66cb5-04cc-4911-8990-d3b5bfc2917d", "sighting--b7a8fb0b-5855-448f-9cb0-0fa1e99d5ac7", "sighting--7da1ab2d-07ff-4b60-968a-3a2bc51a0110", "sighting--a1b939eb-bf9c-48b1-b860-6f0956fbd99e", "sighting--fd571c10-0e1f-40c1-9374-9a5427e42494", "sighting--b7d6a9b0-425d-45ed-8368-9cbf4b96653b", "sighting--0684d83d-599e-4e26-80be-133f13ea936d", "sighting--04d64c2c-e7c3-4aa9-9dc0-c77b44be794a", "sighting--e605f167-de4a-4efb-8eec-2d81c9c5f3d9", "sighting--a7c3c6cf-4090-484c-bd6f-cf23b2110276", "sighting--6602b51f-6fbe-473d-9675-0ab802d04e07", "sighting--8e606826-c025-490b-842e-d56b3ea98721", "sighting--9f721e34-fb7c-44c2-b4c7-3c4a573a9fea", "sighting--50bb4c89-e6a0-4511-a59d-58dafe7f8a3f", "sighting--b12686ed-71c8-497b-8162-e6d8f41d744d", "sighting--2427c022-7a18-4948-aff3-e1990396bbbc", "sighting--0e32a022-1d47-471b-846f-34edcb7592e0", "sighting--d7fc15e6-a0bd-49d6-a330-36b22c9dcd6f", "sighting--6026c5bb-8d44-4c57-b14a-c893220847c8", "sighting--604112e0-e55f-45f5-b1ae-a62915d42454", "sighting--2165b1e9-8103-4bfd-9582-e368657a90da", "sighting--b6cba49f-5a0b-49a4-acc7-799a89d9b444", "sighting--ef74c574-b3f5-4d4d-8c63-d8fc82661605", "sighting--5bbffe79-266f-4752-9075-71aa0d58ba52", "sighting--4fd93a17-2937-4355-a2a8-6243f5819481", "sighting--1c31415f-26da-4555-800c-fad3b37908ad", "sighting--f9eb5853-1e71-4683-afaf-b4a400aad636", "sighting--1d8b2115-a4af-426a-beea-6757fd2cccac", "sighting--47a9058d-d5cd-4f0b-9546-0449591c4596", "sighting--322c60ed-2830-495d-a51f-724cc10c5a3e", "sighting--6208e798-f18a-4777-9d15-1fc758d2b274", "sighting--cc8a9c2f-5866-48a3-8fd9-a4585de76726", "sighting--712e17b2-ac51-4739-a672-4eac25a1ed4c", "sighting--111ccc72-63eb-4259-81b9-46ff612ed67c", "sighting--f5138324-3408-47de-97e2-f96aca276b55", "sighting--73564daa-2df5-4896-b453-9f99243b532e", "sighting--d52480c3-b5db-4362-8bc6-140c083d2b1d", "sighting--ea387543-066b-4d3c-a82f-0076dd680a45", "sighting--a0c47a95-e640-4f27-a604-f566c6fcf42f", "sighting--32d6b536-2001-47df-8f7e-98d15f77ef36", "sighting--14fa7bdb-4a17-4c9e-9d19-540a3cd3d653", "sighting--680387b4-a1f8-480c-aef2-4142f2d7206f", "sighting--89121040-6410-4ec4-94a0-ff2f9d082f85", "sighting--4fbe93b7-ecfa-403a-b4b2-cf4db51150e8", "sighting--e38ea45f-70d7-445a-8c72-10a8db64e2a5", "sighting--6335bdf2-fccf-4a3f-9df9-9c2e4cb1854b", "sighting--1eaff6b6-c766-458b-ba13-2bd064f73ce9", "sighting--dc0a5a83-a104-488a-8f83-249b3657c51a", "sighting--8d9dea34-0a1f-4253-a666-e9fadd025d26", "sighting--57e85186-6a1a-4087-b1c1-ad4fc2514ce4", "sighting--6d6693d1-1af5-42c9-9abe-b102fc94dbae", "sighting--ba7c5fd3-17f1-4af6-a185-e7f8c08d53ce", "sighting--6396b891-3492-4952-b643-a5b7ad43713b", "sighting--c4a0bbdb-6706-4332-9d93-f4ad3db41bf9", "sighting--b428c57b-96fd-4752-b764-868f35e83f83", "sighting--2eefd278-a2e1-49c0-8ae1-f2a230ac6cdd", "sighting--870de0dc-1840-42a5-a252-5c98ace4b67c", "sighting--b7ffa805-dfdb-40ef-b5f7-5bc546a3021b", "sighting--2e7c6c81-2f91-499b-8a84-18b683df7047", "sighting--509ab59c-ccb8-4bcb-9fef-e3d9013c8eba", "sighting--4dba55e5-d5e2-4f02-bf66-cdfd09cd5123", "sighting--fed29726-11ea-4264-924c-8ad403e83b73", "sighting--b62021e4-1efd-42b9-b816-5195cea9af24", "sighting--99947774-eef9-4640-999c-c9ea0307dca7", "sighting--6b3cd279-6363-4133-8995-d228e0d894da", "sighting--59562c07-a764-4652-a6d6-df549e71fa6b", "sighting--2690c324-936e-4b52-bb85-d4810eb10b3f", "sighting--ec24b611-15a0-43bb-a8f8-9e19a5a89814", "sighting--145b8811-1092-45d3-926b-f50333c9b43e", "sighting--49cf4e60-bf3c-4fd2-8fa0-9f597157ccc7", "sighting--5f4a5a34-56da-498c-a29c-ec83f661e124", "sighting--5e532a4f-e87b-4747-81f8-7838ecee426e", "sighting--37a9ad03-263f-41de-a52a-ed959e3d22d1", "sighting--54ccc99b-789d-411e-83c2-affc28782890", "sighting--de19f650-8681-4f94-b9ae-23daa40eb3c6", "sighting--4979fe9b-4ca8-41e4-8974-be969e370ba0", "sighting--89506133-82e7-4eee-84c0-63663ece3dc7", "sighting--f40a8370-56f6-4a88-a1b9-32414e8e40ed", "sighting--a446f766-a5e0-4371-8814-40a65f48ec4e", "sighting--015bd80e-051e-445d-9db4-0d27e6fbef42", "sighting--68955d39-aa31-4e21-b5f0-9edb3e29b61e", "sighting--7c969af2-7598-417f-92e9-8149803781d3", "sighting--bb99c255-7f84-4e3e-a000-07fdc8a20d14", "sighting--4fce76c5-a7ee-4dd5-b09f-5483f83cd0de", "sighting--08505276-20ea-4db3-afe7-d43ffc758e15", "sighting--341737ee-8cf6-4007-b758-d72d6af82c5a", "sighting--9fe6950d-9342-412c-b757-a922c1df4ad8", "sighting--3906d38b-4be1-4a6a-a85d-bc51b656c92f", "sighting--256eb080-1004-4152-b883-d51e75439bed", "sighting--8d4f9317-9c81-473d-bb67-34b255dbf1c1", "sighting--077676c6-fa18-4283-b225-dcc166e5f02b", "sighting--4fd1806c-2dda-4b2a-ab78-4d3113c8cc28", "sighting--f9cc630c-9e4e-4c45-a6df-a4fa37653275", "sighting--8e003529-5dc5-4f7c-9552-e014a34d2922", "sighting--59efe80a-029a-4124-833d-6f818b42c43e", "sighting--616c7e87-077b-4eff-be97-845e7f20bd55", "sighting--7e2cf97e-9baa-4aae-be0e-3994914aa599", "sighting--04924c9d-d164-420d-bfd7-a8f55edeca11", "sighting--4abcbdb5-03c4-4b88-9fa7-9a6a8ac4399b", "sighting--7bb52cb3-8893-469d-af7b-a1b675ddfb74", "sighting--b143e6cd-64dc-4e6e-a0c0-9601a3a95a33", "sighting--b7d32369-3b59-4d81-9172-e2047c5aa52b", "sighting--0eb1a326-b913-415e-b608-428355f9af52", "sighting--00141668-508a-45ab-b186-6001965a366e", "sighting--ad482035-2029-4f4a-83b1-85db19014fbf", "sighting--6e18de21-1b87-4516-a3df-c79ae408e53f", "sighting--46ca48c1-6c30-427e-9915-152f4c1295fd", "sighting--4a1ebf75-43e6-4442-b57e-df0d5b45a0f7", "sighting--a1746591-d8e7-4e46-ace9-ab937d741bd0", "sighting--fd38ca97-639a-4b8a-8ca8-0392db006d3d", "sighting--4e272b09-631e-4afc-a6bd-205546cbd07e", "sighting--3156de0f-206c-44b3-b22c-3d02fd7677ab", "sighting--fbe8e861-d72f-45a0-b812-b2adafd9d915", "sighting--1a655424-80c1-4023-9503-d00e360cf179", "sighting--50dc0870-0400-4bda-91cc-b4843ad443c8", "sighting--e06a13f1-a573-48b2-8ab8-609031202a75", "sighting--a74c12f0-17ef-421c-a884-17797c70a6af", "sighting--aad4614f-1faf-425c-b67e-6089bccc0be4", "sighting--90f4d46e-3be6-4f80-bf53-be1f6a251217", "sighting--96947d3c-b76a-4954-9053-2e7b3d33a90c", "sighting--247eb1a3-be66-4301-a018-4290dece5a59", "sighting--6e322b55-e052-4bea-a965-09163ba699b8", "sighting--f8a7f390-d6df-4809-a18d-b768c35d3e3a", "sighting--86ead304-ff73-4c66-a664-552ae2914aff", "sighting--32c3f7b1-edb0-4320-9469-92a5d1de7516", "sighting--07d84ad6-c727-4ada-a9b8-56b9fc608e18", "sighting--63061eab-7bd9-4472-9b04-95302ff8bb02", "sighting--612c942d-febc-4cdd-9f81-ce874deb6fb6", "sighting--72dbe2af-6d80-494a-875d-ec33539b82a8", "sighting--1d4545d3-56c3-4a85-bb1c-bc2346b5f0e0", "sighting--c1a81d88-0f3a-4a1c-a070-d8ff582c58a5", "sighting--582c03d0-ae1b-46dd-bc88-5322d977b2ba", "sighting--a2598ce7-483b-49f2-b3ac-f5bf5178083f", "sighting--dc8a1751-2a20-4e1a-890f-ead21cc9fd18", "sighting--b52bbfb0-f310-4775-8931-e11ea5ebc7a9", "sighting--529c0266-c172-404e-b224-3a4fb0197534", "sighting--e85f79b2-8fd6-429d-8ff5-16002219e4fb", "sighting--d6930b6c-ce13-4260-a1f4-8a41235c4e53", "sighting--fed6b48b-c97d-4e92-be28-5c400b5d5b8c", "sighting--072a36dd-eda1-4474-90f5-1e53c202776c", "sighting--1a394be2-3976-4ffd-9ae7-ecdb75625004", "sighting--e51368a4-ac71-451c-b1c9-1ab5f2e62c7f", "sighting--f0311945-639f-42ef-b80f-319f203fa16b", "sighting--1ddc0d9a-19d6-4b36-883e-864b62bd830f", "sighting--c237747f-bdd9-43ff-baa5-469265312554", "sighting--780a241f-b703-4b07-a315-7a96c0e906ce", "sighting--14ceaac3-44f6-4794-8edc-80e9e9349401", "sighting--3ef9011f-8fc3-40d2-8e2d-4ec9559d5bd4", "sighting--6dc387d7-e28c-46e0-b429-e3abfbcfce2c", "sighting--89fee801-346a-4765-8a93-d32e87fd3acf", "sighting--6be30f60-874f-4d58-b067-4ee5888dff24", "sighting--b1d18eef-6cb9-4bd4-ad1c-8c089921b0c9", "sighting--64d9a4f6-bc95-472e-9a1b-ab3d8ecf0c4b", "sighting--286808c2-f03d-4157-a317-2da92de9ab0d", "sighting--b615b1ea-a70d-406d-bd3f-a642bdb333e6", "sighting--d67bcca5-4b4b-49ab-8cc3-21ad90e0a0a9", "sighting--244ee762-5794-4f3d-88f9-3c1570fce66f", "sighting--05054be5-7879-40dc-8524-63525a901e18", "sighting--c3f1f6ad-48ab-4d18-9f19-6b6ba291be83", "sighting--449bd407-0645-441d-ab68-fc0150c40cf2", "sighting--3fcc77ca-79f3-41a5-ba1a-d9024e47c16d", "sighting--48df731f-7e11-472d-9740-3693ec2d0d6f", "sighting--c0324677-44b4-4384-b38e-0c81d79c4231", "sighting--bc5c4f38-bea1-4019-a9ef-846cda94b053", "sighting--02247253-45d6-43e2-bba2-a2e208d98345", "sighting--3839ec5c-bc4f-480b-82b7-e94416020eb3", "sighting--6ea30c54-0690-41fb-bcdd-0e9b8b1fc7d3", "sighting--f2f3faa0-479b-4094-adbb-063f30fc1ce6", "sighting--e1b02f02-e563-421d-b16f-61a0f8108951", "sighting--30cf978e-db0f-45ef-8c10-dcc00cd36efb", "sighting--fb404059-dbc3-4eb1-be6d-cb4d21f730d5", "sighting--04401042-89b2-4bb8-9df3-e22813a0f872", "sighting--70dbcca7-9832-44da-be42-edae607a9488", "sighting--19b9e4d6-3837-482f-b9eb-a35fb5884e13", "sighting--59cf5caf-e278-4aac-9756-527f037bf098", "sighting--183e70cf-9bed-4249-aabe-0243d0fe13c8", "sighting--c7889491-775d-4458-b695-ef5495ddd9ee", "sighting--69354a4b-4222-43e2-80b4-72b1f5cab2d9", "sighting--192dc021-c5d8-4f85-8eb7-4b6d22579f36", "sighting--2cd5079f-d451-4f45-a6f5-59a1eaa3ef98", "sighting--533aec22-78ce-43a6-b147-81e511eaa411", "sighting--d6f47cea-2427-41d5-bcfa-1cf3254fc84b", "sighting--c0ca54f5-6a77-4a8e-841d-9a0fcff975df", "sighting--048c7873-9089-4c75-8010-37b87e716274", "sighting--cb0e9b48-de4a-496f-9bd2-e43f68ba6f10", "sighting--db60f954-7c52-4ec0-80df-b4c58eb6224f", "sighting--5cfcd24f-b5e5-432c-9ff2-e84cac20d906", "sighting--b9e68929-ed6a-4be7-b114-2a42f9146763", "sighting--ecd50262-fe9c-4932-a608-f62b76f0b30b", "sighting--67e97231-f090-4c50-b8d7-7e5cdf9bda1f", "sighting--f27bcea6-7c24-49a7-a05b-1cdff8d73454", "sighting--8b7f9e53-fb54-48d9-b883-1772d3d69e03", "sighting--495b4c5e-5551-44a4-98e0-66f533b55ad0", "sighting--abe71f73-c4c4-44f6-814c-a666c7b51cd3", "sighting--c62c6169-9933-4eab-be70-3e6c756d518c", "sighting--79255693-83e2-467d-8982-2e509bc34a63", "sighting--83216d56-6ef0-4b26-88f9-8f8b4e99488f", "sighting--6f060244-5fba-41f3-a097-ec18ac610bd4", "sighting--08f175a1-f581-459c-bb7e-02ded1f1e5a7", "sighting--4769db69-b03a-4bcc-b701-5c5fc820ffb4", "sighting--c21f4576-0f13-4e80-b5b2-5612725cac26", "sighting--987803d2-d02e-44ec-9bce-1889587de4a7", "sighting--b0bc32c4-f75b-4f68-84dd-e84b06e0b9ec", "sighting--f3030dd5-9028-45ff-a40e-ed8392f4fc8f", "sighting--1ac81ad3-c332-4cfe-a00b-d77d43786883", "sighting--ca4e9ba3-56e5-4bb4-b3fa-cd18875f8f30", "sighting--17caace0-901b-48c9-8259-f3cacd402e97", "sighting--beb11d96-82d1-4a1b-8d74-b9d8ce6140f4", "sighting--08492d64-cf3e-4dd7-a48f-4edb1f339887", "sighting--f6b7adba-099a-4481-9c55-dcd5afe36615", "sighting--d68debc5-a2c8-43ee-86ad-74776f65b525", "sighting--6fce7b5a-dd2d-4dd3-ac34-e59217fe5881", "sighting--e2efa218-d03e-440b-941f-7626aee70e79", "sighting--c5161cd9-2e26-4199-a5d0-7fcd7c94f6a5", "sighting--44d3c3bf-696c-42c6-87c0-98bcc543c961", "sighting--62a78e2e-9f95-40d1-8b84-30038e50d919", "sighting--32651d9e-b2be-4de2-8445-e6a0def2b171", "sighting--cee03799-5dee-4023-a490-267641bee2a0", "sighting--c6e1df3e-dae5-427d-8469-d52b555ede0f", "sighting--4b48e49f-c8a5-4f10-908f-d88d69c4d17c", "sighting--742de7e3-3e31-4b05-bf3b-6e432b7bedeb", "sighting--c6193d72-d237-46f2-aa19-b888d12d79c0", "sighting--628c30f0-bebf-4b03-94ec-bf504555b138", "sighting--18fabb11-e846-400b-9be6-fc16a53c527f", "sighting--48015ea2-d491-4db9-95a9-4cde29bc0b2e", "sighting--0ef69445-d903-47e9-8178-d4948e96fa60", "sighting--b63a6f03-240d-4400-8aee-e8bda68cb5ba", "sighting--30b00de8-527a-4689-b9d9-bdba7f786893", "sighting--e2cc6415-e155-47b8-8f7c-0c75b5475ec3", "sighting--620fb176-7e01-41b4-aadb-e8593ee0283c", "sighting--a6743daa-4613-499f-8d29-e52d63365959", "sighting--09096a82-6e5c-4570-9d82-b2fdfd456e05", "sighting--4a38ec4f-faea-41d4-bf0a-5a122eef5fbb", "sighting--d05ccf49-8d3e-4bcb-881a-63e7ee6ba1cf", "sighting--93b29779-76a2-48c2-9394-6f783f9133b6", "sighting--8f440e23-c71a-4383-ad37-39194eefc446", "sighting--bc0586c2-3516-4ac7-a63f-b795da26422a", "sighting--cfba6d00-3eaf-46c8-8b2c-9fc70f89ff41", "sighting--75d02f96-1595-4fd9-bf92-b726bcb73c38", "sighting--20eedd04-9f32-4c2f-bbde-1bda0e3083d4", "sighting--ea3d2dff-835b-41dc-ba92-b8f79e962fa0", "sighting--cc91e0c3-fd8d-4ad8-828e-68353eeb905c", "sighting--02949aab-6ce9-464a-a432-4f7e2128c281", "sighting--84964aab-b557-4e8d-85be-675e3d951acb", "sighting--4eeec14b-b637-46cc-aae8-a75652454026", "sighting--ba7ac253-eb67-45ae-9101-61cf70584340", "sighting--16860fbd-824b-41ff-8238-e6d5b9370201", "sighting--00a76951-c0ba-45b2-b35e-438f5564cc8a", "sighting--f60a1935-0d0e-4773-964a-c4acd97af8ad", "sighting--5e011732-91e9-483e-affb-15191f578801", "sighting--0a01c211-8da2-401f-86e7-7be3a9c63741", "sighting--30b28d65-8bdc-49aa-9b88-394647013ed9", "sighting--34af745b-f071-4c73-a761-b7f6d0426499", "sighting--d4ae83c7-ff8d-4308-be57-693d928ef0f2", "sighting--fb6b08d5-3b04-4823-90ed-58eecd3c9839", "sighting--befef00d-8694-4a06-902e-884ed8a02925", "sighting--36afd16d-2985-4838-a4fe-d500767b45df", "sighting--9d653624-02f7-4d47-a781-beef44c02a67", "sighting--1498f54b-1fed-416e-aa8c-277da0aa0b6b", "sighting--4171214c-41e4-4330-aaf8-ae81e3a3c84a", "sighting--89a54c05-3852-424b-8762-c65bdca20904", "sighting--4209d410-b67c-44b2-a8f3-9af60b5952d4", "sighting--906802d5-3f14-4616-b522-1c5833abc820", "sighting--80e12c75-1320-4127-bcdc-72d51368e2a9", "sighting--024e47b8-2b52-44a9-8b92-af21b55b3c71", "sighting--875a5fc6-498c-453b-afdc-4b372d17ce04", "sighting--2167a41f-0407-4e1f-af72-e8a3caa731c9", "sighting--bdbf1e4d-461b-4856-982d-1f08bcaaa07c", "sighting--950d0e4a-0715-474f-8357-9f895b07597a", "sighting--43ec3ef5-81c6-4795-9e91-f71fe74e1e0b", "sighting--0c69fbbc-5f3c-4bfa-afa0-7c7d39632670", "sighting--ea4f4b2a-5bb7-4928-b48e-9327925514a7", "sighting--08452215-0419-4282-a703-15b22ccbc036", "sighting--d57f5477-0429-4713-9269-6a5b916b143b", "sighting--b60bf86d-ae31-48d6-94a1-f91fdf5d7390", "sighting--8b1103d0-f861-49c4-815e-e495c17da956", "sighting--9ad3d738-9d66-451d-b222-d309ff34301a", "sighting--f64eecd1-cb60-4f7b-ac8c-3d465f2107a1", "sighting--9819e641-47ac-4269-a5ec-cf49637bd0df", "sighting--e56f71d6-9051-47a5-b41e-ca275c46f336", "sighting--dfe0c506-3bf6-48e3-a908-2055c197b493", "sighting--ff982194-c2f2-49ad-8216-6d6125647f30", "sighting--b73d91b6-c68e-470d-b0f1-befc23ab35c8", "sighting--1d77e797-12f0-43f1-8d33-8d454a76c4bb", "sighting--4d9dd6a5-1b85-457d-a08e-9c334b09169b", "sighting--cdf340fb-03e5-4e2c-bca2-35467ad333bc", "sighting--cc874db9-e399-4165-9cd0-c4161f2dd56a", "sighting--042a48a5-7317-4528-8a71-511ce2390a96", "sighting--39dcdf2e-2ef0-4995-8d8a-ef755ec056aa", "sighting--415ff8c7-2f6d-499b-a84e-12c1eecbef8a", "sighting--8472e984-4b01-410f-81fd-c1d465669fe5", "sighting--cf346523-af17-47b6-b86a-9671bbe7c2d1", "sighting--40379bab-0bf2-4d1a-8585-0cc07273c1fc", "sighting--6e76e933-7a33-4487-a919-738f8d9a7d14", "sighting--60619535-4f70-4c10-988c-afad9bb4d481", "sighting--d93fdf26-af7f-4ce5-a2f4-4528d6df5be3", "sighting--77a09e71-248e-4a84-85e5-276524f5453d", "sighting--b86cde49-bc68-4f61-a3f1-7c6e26465380", "sighting--15d1898d-0e5f-47be-9d97-cdae87e38a92", "sighting--aec5a04a-d307-4a57-a9e5-fa57bcfa77f7", "sighting--d851d6f5-cafc-4c97-a7c4-858b54b49f47", "sighting--70d28155-9469-4f4c-8b76-1f88c6f65240", "sighting--b632fceb-3e62-421e-9d30-d75e839cb8ed", "sighting--d38c3045-e9ad-49fe-857b-792433082b56", "sighting--9798cd8b-9b96-4d63-a614-41f812328480", "sighting--431b178b-9cd0-4a53-b5ef-8c073a47aaba", "sighting--961c2761-de50-4235-88eb-3678926cef96", "sighting--49fba907-b4df-4df8-b70b-e17b77f66b37", "sighting--d83076da-e8fe-4b8d-98f5-5f584ad9957a", "sighting--4aa3480c-f4d2-45f7-a461-bb90755cf392", "sighting--e5a2c5a3-4725-4bdc-a6bc-c6026ac35793", "sighting--8e269534-7f17-416b-8897-dfe3a241f376", "sighting--e2cd2387-9788-4044-9c88-a4cf5913ab00", "sighting--d4cf6800-55d7-46b3-8855-f9df4c197592", "sighting--e421152e-fd8d-4613-af4c-0c4b331bc68a", "sighting--a4073b2d-3069-4edc-a38e-101b1eb7cfe0", "sighting--66af2297-4749-40ea-b105-ec8304f5ffdc", "sighting--c4290c39-e11f-4465-87c9-6ee8adf42cfb", "sighting--4c977ca6-d230-4e21-bfff-fbe2f0d39927", "sighting--4dc94b40-eecf-455e-ba72-dc217b5af970", "sighting--ca0665cf-fa99-4e3e-8442-4fb61d4f6551", "sighting--6f055db2-7a60-4348-a4ca-d8a66e78e7e7", "sighting--5fed32ae-6d4e-42ed-b0a6-db471a080197", "sighting--f01c7c45-df04-4d88-b846-a074a67056ac", "sighting--b414c344-abd4-47d3-8b13-ddff6cfccc75", "sighting--1c3110d0-5c2e-40af-b94d-138365bdaabf", "sighting--c3e2a082-04a8-4a80-9fab-dfa85e22ec43", "sighting--eb0b5c31-bec0-4efd-ab09-e0530c9908d6", "sighting--6aeb1c3b-ef89-47b5-8722-13235107b08c", "sighting--7c70d56c-857c-4b3a-bfa5-53975f596993", "sighting--a05b689c-f624-436f-9a96-fcee625b3730", "sighting--88533c12-86ca-4d5b-8d1c-bc4a329c2a9d", "sighting--0717d4eb-40bf-4586-a37a-3dce73025ac1", "sighting--772f47cd-9bfd-45f3-b24a-804075b1d367", "sighting--f78d859b-cc47-40eb-89cc-3df27489a4a2", "sighting--330e3e58-f270-4ac6-9aa7-659eecdac428", "sighting--c4b1ab60-eae9-48ef-a096-75a0cedab608", "sighting--fd7f4fa2-acf5-4613-9bf2-2f9596dbff4d", "sighting--52cbef35-b70f-4fcf-866f-f3cd0708a676", "sighting--dcbd9096-9650-47a0-a63e-baa8ffb09b45", "sighting--3e95d001-601b-4466-880e-70201fdf9cea", "sighting--d6e16281-00b1-4f58-9e10-71ab4d006c1a", "sighting--f6226014-d25a-4fb8-9079-b27b0a3b8832", "sighting--b33b3148-c8bc-47fc-9b8f-9dd6b5c11610", "sighting--bf1f3837-42b1-41a2-8975-820503b564c4", "sighting--31a000ab-abe7-4635-af51-ab83865c1f9e", "sighting--3b1024b7-23d5-4ac4-903a-9728fb0e22f0", "sighting--df4368ac-206f-436b-8d07-5793bde5a394", "sighting--057bde4f-29a3-45ee-af9f-05cf414d8a5b", "sighting--8a8e87db-f3a5-4048-8f1f-f80248b63f01", "sighting--83aa4b57-e727-4d4f-ab77-a495d43e510b", "sighting--41a84d9e-1631-4866-a21c-a71620517116", "sighting--3f82bf48-97c5-4c77-ab6a-113d2a9d7d32", "sighting--ef26328f-bd96-48f9-81d8-a54062d00054", "sighting--f4f02de3-3981-4899-9ad4-391a9f52c758", "sighting--64222edc-3de9-4934-84d7-35c2b038624b", "sighting--cffdaf9c-1926-48eb-a344-9bd6dcf10735", "sighting--2f8fe8e9-7d0a-44a5-aab1-3be4e97073e9", "sighting--04098baf-1d91-4abf-8817-538a2c5e2320", "sighting--cb4661e9-8966-4ce2-8cb4-7c2b6c3261ce", "sighting--a4e7a36d-c2f5-4779-ab91-1b4d7101d3f1", "sighting--54fc9e8d-8e79-42fd-b9ff-8c1244c56187", "sighting--e03cb148-db10-46f4-8786-82de06f93a1b", "sighting--f88f008d-0d5e-4063-9061-06265d49e4b6", "sighting--def068e7-c09d-409d-a171-95a1a276fcd1", "sighting--0e76f2b5-dce9-402f-a325-12e320a123f7", "sighting--5d7cd844-c9ca-4d12-9f6a-869189d7914f", "sighting--9df70aa0-f333-4a7a-bf12-a4889761ca5e", "sighting--c16f6f0e-5efa-4b70-827e-1464064935fc", "sighting--35145118-18f6-446a-a177-8343d4c3402f", "sighting--ca261181-1c17-4429-b575-4a58a13fc9fe", "sighting--fd89da60-7642-4b16-b9c4-b68aaf48111f", "sighting--8c58e2e6-94a2-4356-886a-344fe80f6598", "sighting--29e2493c-518f-4bbd-a544-85ad485bd684", "sighting--4f674c55-f015-4d5e-bb0e-ee41fe79f183", "sighting--b71b34fa-edf7-46ea-a2e9-c003c8a97302", "sighting--fc80661b-573d-465e-8ed4-23688521884b", "sighting--df1db834-3f32-4292-83de-3f3db168f3dc", "sighting--ba43a2eb-9cd6-4515-a98d-e0ab1ca573fa", "sighting--303456e3-24e5-4258-ab96-d3f2174995df", "sighting--cdbae748-3be9-40a6-b7f4-c160b8f3d7a5", "sighting--71591db8-831e-4f15-9e52-4a905fd1b8e4", "sighting--202494d0-327a-450a-ae30-929349e7524f", "sighting--f2d796f7-abb2-4dc6-b948-a6168fa2d3c6", "sighting--57b4855b-44d0-4e32-9292-52c7aa4f0fb7", "sighting--944cc3e2-45e9-48a0-ba82-fdfe7bd33c07", "sighting--9beefa04-3d40-4e80-8752-5925f47b5a32", "sighting--55bc6311-bfe1-4340-9ee2-565ed04ce99e", "sighting--084d9d70-0ce6-439c-a66e-2d3f2d5d9fc4", "sighting--3b7662e4-b850-4612-bb42-38d05b66f434", "sighting--48aad558-645e-4c8c-b058-b6e743c012d5", "sighting--1eb1db4d-02a1-4911-8369-6e04fcf1f73b", "sighting--b8ac11fe-6e80-446b-9844-c90d0eb3c404", "sighting--0a5bcc1c-f143-498c-bd79-73fe04c5f7bb", "sighting--42b6bfb3-9c70-48f1-b02c-62cfd91dc150", "sighting--a14525f0-d022-4197-8bf8-b6d2d1aa8252", "sighting--42976dab-30f8-4cdb-800e-f6d5ad74599d", "sighting--e78d880c-58d1-43f7-8f39-83989eea5c98", "sighting--6d514b55-51ba-4d75-93bf-2d2042ece91d", "sighting--5d6f95d0-8b14-4034-8bc4-84a41b6ccb3a", "sighting--9c1d8146-8334-421c-a168-679193fb4835", "sighting--d67b3b6c-857a-44ec-8406-4e032cbe96f8", "sighting--c8dc53ed-bdb5-4bc4-80d9-a61f003f8ce9", "sighting--4f6253cd-e650-4118-a9db-9b646a1cc49c", "sighting--fef5d092-2fd7-424c-aff2-5ac88f11622f", "sighting--1073dd88-68b1-486a-a9f2-6081334a51c9", "sighting--672af3e4-245e-49e1-b509-3d7b2fdeb944", "sighting--4bc72d7b-9800-453f-bf3b-a43ba2146421", "sighting--504da8d3-afa9-452d-9172-75c8a206481e", "sighting--d836b8f3-c2fe-4e64-9c81-8eb889722d52", "sighting--5358cf08-4761-4c16-90af-d65aa386ee33", "sighting--6f14bab7-cc92-4752-b4f7-6a463501b6c2", "sighting--fbc2d57d-b13b-4ad4-be85-0477baa39352", "sighting--85ed56d0-7e2d-43eb-9730-564e07d41609", "sighting--31347723-b44c-4fea-a993-ded1ed07008c", "sighting--1e9509d1-3857-4324-af08-cecf40f0a864", "sighting--6b5cd840-4907-4fdc-948c-bfaf85158f52", "sighting--08cde9cd-d9ad-42ac-8f42-54e504c2184c", "sighting--b2f1690b-a861-4956-bbc3-b3b7121acc21", "sighting--d2de5b0f-5f91-4987-97e8-90f39165518a", "sighting--80d719fb-709d-4f0d-94bf-4a09facbba02", "sighting--d6b6eb4c-8faa-43df-b886-078e66d1e31c", "sighting--c0e5c084-3c05-4d13-8a5c-95d4a86b9811", "sighting--819013dd-6e06-4fa2-8aed-c85d5477d505", "sighting--42538c65-f1b1-456c-abe5-01554628bded", "sighting--72513e5f-b9be-4fb8-96ec-cd23f521cfaf", "sighting--4486d901-c0b3-40f1-b294-1aa2c772c47c", "sighting--5a961f9f-7e2a-4b5f-8376-257576ba3a27", "sighting--f9bbcb59-4d23-4e1e-b24e-002fee266ed3", "sighting--8aa95a61-8ecb-4ffe-a511-7b241ac548da", "sighting--2f6dc3c3-f772-4814-8438-73166f4fecce", "sighting--432bc5cc-98bd-4da4-85db-d7222961c233", "sighting--b8817fd0-b1e5-487d-8b03-6e7a1bc087d5", "sighting--3b42e563-57f5-43ea-9534-e450e7b3f81f", "sighting--a5ead8ca-c919-42c6-862e-a348d9d9fe8b", "sighting--a32b8d37-984f-4bb6-b288-2dc69e28bf7a", "sighting--931f0ef0-71d0-4335-803b-10de49853218", "sighting--fa20ccbc-89d4-489d-a2d4-0b5623de6880", "sighting--fb3aba15-2b85-41b9-a8c0-3582e99032a9", "sighting--38d28235-34f3-4096-b84b-05ea7547104b", "sighting--a8cc3472-0bc5-4119-9793-1a533c90af56", "sighting--ed5907c9-0585-4cfa-8a34-cd0c92b4f6e6", "sighting--a9021303-ffc4-4a54-aefb-5659f32aeeb9", "sighting--36c1033f-558c-4bc4-94a6-04366b99994f", "sighting--a26dd85f-9e20-4a95-a824-6a1afcff9dfe", "sighting--1ea8ffd9-995a-4fff-887c-ccc144592440", "sighting--49e98482-fb4c-4664-a6ac-c5579cb410b8", "sighting--1179288a-8630-4708-889a-2c88c19da0dc", "sighting--b48af5fb-6c43-49e6-969e-6f8bb7b4c8bf", "sighting--2bfc71f8-dbd7-41b7-902a-b1a74da8f6c3", "sighting--97c37231-ceaf-44e8-8029-de1ec0d45d14", "sighting--c39bb34f-c31f-4758-833c-4742574445ab", "sighting--3255b445-86cf-4b84-a8f0-c4749b28b713", "sighting--fc42b9fc-91d5-46a8-af9c-9951d088a75e", "sighting--0fc09b4f-4c97-4158-a657-a59b27ce697e", "sighting--17a9c73e-2402-46d7-8033-99f8c0d3b39c", "sighting--8a37980c-ceb5-4da7-9f9c-b4243c5fdb59", "sighting--3e4b774c-98ee-4f02-8367-26cc2a4686ff", "sighting--c1543e99-6b12-429c-9c3f-5ee0b140eeaf", "sighting--57749ff1-5092-484a-a8c7-25c5454603ef", "sighting--90ba5207-443f-44e0-97b8-1a14b671d6c8", "sighting--8d9b4680-86f4-422a-b418-bda9cdd1ae90", "sighting--fb905b76-e084-4425-8b07-1fb073df05a0", "sighting--d50cd42a-adc7-4b3c-aada-7321ee95a90a", "sighting--226355e8-ace5-4ae6-9130-b313a519c246", "sighting--53bcb8e4-3c56-46bf-a0f9-a3d2de4749cd", "sighting--fd3bce92-c360-4d18-81d4-5e1b581556d9", "sighting--b4d3c24d-403a-4dd6-947e-0bc432540962", "sighting--f83b2c0f-6e2c-4e65-a48b-4a4294b628f2", "sighting--d418a3d7-a18e-427f-9d57-d587ccd2cb76", "sighting--fc0f9050-92e7-4b48-bbd8-e4136f363d2b", "sighting--6b5f361b-e888-4e3f-a3f1-320056d25897", "sighting--fe861127-b973-438e-b7d1-17bb2972f9e9", "sighting--b9b15919-1274-4ff2-ac04-6be804256121", "sighting--6ef0316b-5c5f-4fea-85c6-622deebb121b", "sighting--e4ccfb07-488a-4714-8a84-9a9b02db041f", "sighting--38d58b90-3975-4d17-b341-02b49ce9ba06", "sighting--a96e59c1-d4f6-4412-8985-adcc951d6efe", "sighting--af4c2d3c-5271-4ad3-bda5-22314fb1f648", "sighting--394fbb03-6b75-4ba8-a6d4-b267938ffa0c", "sighting--44441bc3-9b91-4bd1-9e62-33a77f58668a", "sighting--6d56c45e-53fd-4a36-950a-0c6017cdc3c4", "sighting--f8ebcd82-6027-4677-973b-d01bc38df2e2", "sighting--df9a621c-7a34-4b2e-98f4-2c23202fb806", "sighting--bd48ca6d-a8dc-4b57-972c-c58fe0da34a9", "sighting--a23b6a7a-c49e-4b8d-8982-ec4d71eb9e06", "sighting--01179119-d375-445e-9577-65b5f47d1f01", "sighting--3d14b8df-e98b-4519-bd82-dedc25bdf3ba", "sighting--967baf1d-46e2-4e47-a5c2-886074ba2a71", "sighting--6b639f03-f20e-4ebf-9428-6c47f4e2ac34", "sighting--a1ffaa24-fa47-4ada-9b5e-28703a3aad03", "sighting--1fa36315-3530-4816-8741-f6273d404d8d", "sighting--67303bb6-7baf-40aa-8a7b-d102859cf353", "sighting--9c196252-58ce-4bf5-a36b-3d2414bfb01f", "sighting--9bd73b4a-7d74-4ad8-acf2-444ffa243387", "sighting--71fb0222-1734-44d7-9081-f42879f5b1d5", "sighting--f8920657-2dfa-49fc-a4d8-768a7f975e09", "sighting--496ddb85-6a3c-4bf2-878b-7323d040b214", "sighting--be9c7245-1fdd-476f-8f3b-e6aeecfbe1c4", "sighting--7d529a7c-b1f6-406a-8b40-23d4889f62e4", "sighting--9d5f8d7a-488f-40d5-9874-18650c0b3286", "sighting--93031b73-504d-4474-b64e-3f5de1fabade", "sighting--5552573c-5aa3-48e3-a9d4-e5cec7c4f125", "sighting--8bb277e4-c6c1-44b7-914d-a589b5370f42", "sighting--8a10c47e-e59c-4970-93ac-b58f6023d3be", "sighting--aea8b9a7-0788-4473-96de-a02424a95ba3", "sighting--38359c63-22ec-4055-bbd8-7607df14eb7e", "sighting--0218fc45-2398-4b15-a97e-69c2b2da2322", "sighting--82772c38-5ea2-4cbb-a5a5-8e27bf4d2cd8", "sighting--93b3bab6-72e1-4e8c-b417-3bfb6d2fc1bf", "sighting--eb1ccdbe-cc89-42cf-b905-f91d382af38d", "sighting--5188102b-dd66-4d59-b98c-eae25ec51b2c", "sighting--b3a84468-1900-4ff3-aa51-03addba94bdc", "sighting--67a7668b-3592-4ace-b603-46a8561b580f", "sighting--1ef502ed-ba34-4cd4-b7df-1f1bbffde0f9", "sighting--d4d51846-01dc-408c-94b5-2d43fe3fdc2f", "sighting--480595c6-c872-4cdf-a284-0d10b5703dad", "sighting--9a61f99b-97d4-45e8-8176-a76ec5bbfd3f", "sighting--5e6ced8c-0d37-4d7f-a1fc-c7f3f44cab24", "sighting--f5ea6fed-b79e-483f-b93d-199763320507", "sighting--a44270d3-c9e5-4d47-ade1-04da0b01a486", "sighting--2a6dc088-cd20-411b-8633-19e1bd3b2e70", "sighting--533a9287-5700-4c53-a241-b7c579d05c9f", "sighting--903dfb09-2188-46b7-a265-9ef7cdc8170b", "sighting--f079c416-5ff6-4620-bcb5-268e7bbc7884", "sighting--7f11fa75-529a-49c2-aba2-5e6f56b0e7c2", "sighting--a0d456df-5210-4055-8aef-c0ba2fc89d1a", "sighting--8c7fbfa8-700e-4b7a-88e9-5dd7a13371b6", "sighting--d3d068ee-25fe-4a1d-ab6a-d19082723e59", "sighting--58a44d38-7c7a-4d1b-9ff2-7461207e8a88", "sighting--af886cf4-8f53-4dc1-8e17-13cd94e53747", "sighting--18a1b113-e377-4666-a922-1cfd9eebcf7b", "sighting--693e7763-65d3-4217-84d8-aacae7523b5d", "sighting--68abe063-b7a9-446f-ab87-e4b47c023134", "sighting--abfcf517-b420-4f58-a706-ba7ac7923c72", "sighting--db1e6955-9dce-4b39-acdb-e317303f8663", "sighting--9848b538-66c0-42a5-996c-c2a1acf272c4", "sighting--04edcae6-e055-465f-a91d-6225edef66bb", "sighting--82ce6d6b-ed98-4fc2-8113-f02e24841fec", "sighting--1cdb7902-48dd-460a-a9f5-90d95622ae6c", "sighting--29e73236-6577-477c-91ea-599a72ccf036", "sighting--489cfa5a-ac9c-4695-9152-2dd0f3755c9e", "sighting--4de05ba3-4585-4391-bfb9-fc1c5c0968f7", "sighting--b094e602-21bd-4011-9a65-fc31bf2f0680", "sighting--db7fb473-7e6f-421f-a1a7-31c182829118", "sighting--57965d83-68d7-4c12-a132-83a4581ff98b", "sighting--743e7509-4f7d-423b-9e3d-caa25bdb428f", "sighting--a12c4337-171b-484a-8e31-b1dd332d176a", "sighting--babd39d8-42d5-4270-b6fd-1e04089370f0", "sighting--d6dfb9e0-cbee-4b1f-a719-a46e7262e9c9", "sighting--6b033678-0a2a-4714-b4bd-e6ab3866c37c", "sighting--26a7cbae-19c6-4f00-9a6f-2a3addc8f006", "sighting--7e4b5ca4-8d15-4113-bda2-902c1186ad94", "sighting--f39ba738-64e1-4415-a6a7-8da3ed4206fa", "sighting--f20938a2-aefd-44f5-854c-b7eb2262cf8a", "sighting--4a7b13fd-663d-4574-b5bb-fd6decf54985", "sighting--b0cab322-094b-4f8d-9f34-6b450dc3f01f", "sighting--5d81f37b-f5a8-47ef-82ca-6e166eb1ea1b", "sighting--508f57fb-84ce-4108-a371-021985b72e0e", "sighting--012ce6de-8f74-4d53-963d-ab740ec20725", "sighting--f8d0d846-c2f2-4441-89ab-9040eb9cdcb7", "sighting--aadc0252-35b7-4bc2-8b75-54b3619a5dec", "sighting--c33e95c6-14af-4452-8d19-3d9c2d81077a", "sighting--57a50ad2-2f7e-463d-8941-6cb2ea209868", "sighting--f73f4440-acdb-4354-9336-390c219fdec6", "sighting--7029f186-921a-450b-9593-f0563c0f93ea", "sighting--f6f893d3-3f02-41ad-83f8-1023540e4da9", "sighting--3d8763a5-cbab-4ded-86d8-69e088a175be", "sighting--bcd76a2a-4020-4ded-92f6-a1b076070c69", "sighting--759d9511-715b-4473-8999-9ca0717ca79a", "sighting--a2b7ea76-06cc-44a8-b398-af98260c05c8", "sighting--59327a1e-adcf-4e39-851e-fe4f138b62a1", "sighting--255a2f5e-c8eb-4434-871c-1b1745193896", "sighting--7bc1dde9-62d0-4c97-b189-65dc8c9f55c7", "sighting--d5722f84-6f22-4191-a229-940863fa350b", "sighting--f956d7de-303d-416b-a1ca-04fbe3293909", "sighting--b8ba681b-8439-4bd9-977d-fc1353f75f14", "sighting--fd83ec2b-c518-4c55-8488-166f10b3eaa6", "sighting--4fb97dbd-2561-4e6c-96fb-ac6ef94ab415", "sighting--5759556f-a550-454a-910c-4833646a5a0a", "sighting--fb44b3e6-d295-4dcc-b227-4d4994be8922", "sighting--13279c17-4979-4d87-967c-eec67774965c", "sighting--263831a1-b123-4c97-bd8e-3a6a0b4ad882", "sighting--4cfdff6b-6535-44bf-8878-9564b2ab8b97", "sighting--b56352d6-4d81-40ab-bb95-86cf864b2232", "sighting--8c617105-b4e2-4e01-9b8a-4f1625ed28ae", "sighting--5345c77a-3f2f-4fa8-8946-9a8c58850d31", "sighting--4ffb4dbd-51dd-4fc2-b062-1c205864b75a", "sighting--3127ed51-8c89-41bb-95d0-9b578cea597a", "sighting--0aa4728b-04d2-4ef2-b439-07149b4956b2", "sighting--17a80b1f-024b-4aa8-87ce-fda5f85ff204", "sighting--9725ac7f-ee65-44b8-9ef5-b6039e6207af", "sighting--62ba070a-fbcd-466e-9e26-0b780f9eac08", "sighting--5ffcd1ee-28b3-4ba1-86a1-7b4e01ef933b", "sighting--f21602e0-d29a-4ebc-9900-92392dd3b966", "sighting--e940f5d4-f9e0-4ac3-982a-90c0a25f0d70", "sighting--eb5c7de0-b22f-490c-ad0d-9df69cf9ccef", "sighting--817b7160-fe4b-4582-9dfc-daa515be6da7", "sighting--4c7bf75d-8956-4ba5-9f2f-cf81585004af", "sighting--e8a20155-5862-4bd4-8fb1-8561c1bf61b5", "sighting--210ae90f-80e8-48bd-b3a5-31787c9a79f7", "sighting--4c8d6aec-0e55-4fb8-aedd-be3af0870c96", "sighting--5259c3bb-2e75-4cb0-8490-b75e94759967", "sighting--9c8adcd1-99f9-41e6-8b9c-30a6b1affedd", "sighting--a508307a-4c86-4bc9-81e4-0f5833abd0b6", "sighting--8dd8de1d-a5fe-4661-8084-ad7445b46c6f", "sighting--f1c6c7c4-f527-4747-a62c-ce1c9fec8335", "sighting--e6fe8344-a152-4c50-8b00-5ea9762e2d98", "sighting--2377a182-3cec-41ae-8e18-cdd42a2d44fc", "sighting--b3e952fb-f124-4bab-91e8-b2f8bb53aaf5", "sighting--6220a97d-8e99-41fc-9b81-da9e4a044b51", "sighting--d2f469b1-797c-43cd-b7ee-ebdd2bc22460", "sighting--7d1af67b-38ef-47c2-8adb-4682cc8e3290", "sighting--2f388a06-4581-46ba-a9e0-c33cc634a013", "sighting--07ef88f9-b126-4a6a-9089-1c0ed5996072", "sighting--52e1e66c-b8ba-4d09-89b4-bcaa3610e4b2", "sighting--432402c4-e752-4bce-9e68-9d4a043d938d", "sighting--e1ec3170-fc4b-408a-9374-183dceced2fd", "sighting--0d8ced06-4d31-4bc9-b5eb-6394cb55ee58", "sighting--af2ed78f-9a73-4e03-9f0b-29f2b93e8168", "sighting--c22571f7-86ac-4b3f-b4c7-38a3a8be330c", "sighting--6bf30c39-257a-4c17-8123-14d321b49aec", "sighting--30274aa8-b8df-4dde-9d9f-41798cf76eb2", "sighting--17b0b79e-432a-401c-8c9b-e75f0cfc03c0", "sighting--cee45ad9-5cd7-4d10-9610-9e56db098030", "sighting--0a7b0d4b-e8cd-4edf-8da9-a810588b414d", "sighting--8e96150b-9282-467e-93e0-486c95f311fe", "sighting--3164d9d6-b298-4c9d-b546-c2f01d23c820", "sighting--097a5274-3b59-4e58-82e2-5e4304145cc8", "sighting--135bda86-44d9-487a-89b1-f98cb9b75579", "sighting--8e06b18b-e940-4744-a6a6-fc824fbd627f", "sighting--61f4529f-fb4d-4173-8a91-e3b2fd13a891", "sighting--afe795c4-dd3a-4974-a987-0a3e29747684", "sighting--891149e3-c5d0-4f33-a18d-5282364096a6", "sighting--badf600b-56af-4349-935c-50abc58125ff", "sighting--9bc79eec-d325-461d-bf97-cdb7748e75c3", "sighting--ca4e5d39-95da-4f0e-89e0-f622428bd1a6", "sighting--1f3c86e9-e2be-486f-add0-0efca9af096f", "sighting--d654dc06-3c50-4034-927c-0958911573d1", "sighting--8d4512a5-04c2-4d83-afe4-66097ace1f45", "sighting--746d8420-fb8b-4968-b958-5ecf754c246e", "sighting--633a576f-56f0-4ca1-bfa7-ef9dcc8ccac0", "sighting--4540bf48-cda1-435f-834b-db853168a9c3", "sighting--8b5abf6f-4803-4192-8c53-5db68d3aea1f", "sighting--8329f5e9-f943-46fa-8d33-ce774c4e69ef", "sighting--9067bb88-e598-420d-8b2c-d6e4ebbfd668", "sighting--7075060c-677b-4973-88e2-ccf36bfc67ce", "sighting--5c7db135-9824-4dfa-9e64-75b3efa46788", "sighting--6b287c33-bfa3-4450-accd-6a851c94a88e", "sighting--2077b568-64a5-4a0f-b329-e378ff85a1ec", "sighting--ba5a68ad-2f00-4453-8945-a24dbd66c1db", "sighting--a84a1811-d14d-4e8e-a350-95624e49cf2b", "sighting--8a669650-eaec-4314-b4a6-9f7be74c715f", "sighting--f6c0f297-86f3-49f7-92b6-520f081e11ce", "sighting--daaec382-8255-4471-a5ad-361dc4f31492", "sighting--1df827b8-618d-42ed-b680-a4c60a48f5c8", "sighting--d0d98b70-cdb4-4dd8-b686-6a7251da1b1e", "sighting--ba98e2c4-dcd3-495c-bcc4-101c58f7b17f", "sighting--cacecc7f-3919-4e86-83dd-4cbd9587227f", "sighting--e7c3c85a-ab08-4c74-a508-db7becc25436", "sighting--80304a7f-592f-4329-bc4c-d93328a9d5a1", "sighting--55616ff6-dce6-4b8e-9ebb-3340e09b88cd", "sighting--91206075-59aa-4318-aeef-0d73ba9920f7", "sighting--ffff5130-3952-4e52-b7fa-196485be5957", "sighting--cd75db7c-1a83-466e-a231-7722bc5c0c6d", "sighting--4418ad81-723b-42e5-9045-819ba095524c", "sighting--476a15dd-95f6-4cef-af71-c8050396598e", "sighting--0314fc51-a22f-4f99-a0f0-f1c6e603824a", "sighting--bba20a29-2ac5-47de-98ab-c16b92d42bc2", "sighting--0d0cd10b-179c-4c3c-9657-7eefee630692", "sighting--e11335c7-8ba4-4d6f-9b1d-33a055a906b5", "sighting--de5ac54c-714d-481c-a472-0ad0995707ec", "sighting--a16facbf-eff2-40c3-87a7-dd1e690141a1", "sighting--6fe25900-c03e-49d1-9165-bcb400590e1a", "sighting--2cd22aab-cf9d-45dc-b967-56f450c6ba3e", "sighting--7d063401-5471-4f7c-b141-17d23ec87f22", "sighting--c95f9569-502e-424e-ab46-4a151298dfe3", "sighting--99f67d0d-e871-4cad-8565-d56ee6877894", "sighting--c546f3c6-e750-4e9b-a665-b19f92bcc158", "sighting--9d1d95db-bc17-48af-a65f-8270e5ed339c", "sighting--491bb29c-e8ce-4e00-b2b2-2b73d3a44365", "sighting--7c592e96-131d-4387-ad94-920c531f2698", "sighting--c4b6bd9e-54af-47cc-a42a-f79e52a08f99", "sighting--17a37fbc-bd39-487b-b82e-b2a6d30a46c2", "sighting--b58c7bd4-a7e0-4c03-ba71-bf5692209d54", "sighting--5a84b982-5f85-48b2-80e1-df4f33c21f8e", "sighting--247fc5dd-4598-43ea-9579-3a337ae0e9bb", "sighting--316e18c2-280a-48c8-8a93-0d8f59ce0371", "sighting--a48165f8-e230-48a0-bf4b-bd71e45bc544", "sighting--6cbe4bb7-93ee-4812-abd6-29efc02df679", "sighting--ce0fb2c6-6207-4026-b100-6e23b007ed96", "sighting--2e43b5ff-5920-4bf6-9e06-48df292ad52b", "sighting--afcf7795-2ece-48f3-89a2-6c5e150b6a81", "sighting--195c8eb1-4ac4-45a1-ab33-8ce3dfbbc653", "sighting--fa5ff9c6-86d8-412c-9ef8-c5a411998c6b", "sighting--dad7019a-3e9a-4c5d-844f-1ed7acb948b5", "sighting--d95d0344-00af-412e-860a-3646c8888657", "sighting--4b8dd844-6fa8-4efe-aa3a-9aa69ab1223d", "sighting--834335ec-6c8f-4ffb-928d-1c7999abbcf3", "sighting--5491d801-191b-4e6a-bfb6-1c7a21589e0c", "sighting--c643059d-0f8d-4610-a4e7-daa1490226cc", "sighting--f1253a78-b35d-4cb9-9f27-6e380ea8d0c2", "sighting--2e0d9b38-fd12-477e-98d3-77ecb52fd666", "sighting--61561bb8-a57d-41b1-876c-93fb166b7ca9", "sighting--d8a15832-e33c-440b-9e0d-4d2196e8e84c", "sighting--861146e7-9562-4698-a20b-392b83de102f", "sighting--4aff0880-c51c-446e-84b2-12d04d13eaaf", "sighting--6a1b4b8f-e8e9-4b1e-a9a7-4e852594cbcc", "sighting--f6078839-4947-448f-bd17-88a080663378", "sighting--21762b13-732f-4cba-a031-1650b707e882", "sighting--2631d356-6952-479e-bcda-295c3ea0cc6b", "sighting--fec5bb74-8631-42a2-b55d-b0fa5603e35d", "sighting--b3509750-9026-4af4-8aa0-fe867ae8a933", "sighting--56d9c4bd-c27c-44f2-9deb-72786288e1ef", "sighting--eccd27ed-f8d9-4265-b920-c8b7a4a10e5c", "sighting--955d3101-6860-4350-a64f-28567debd253", "sighting--9f4a8f6e-e305-430a-8cb8-51787dc3e249", "sighting--2a20281a-24e5-450f-b87c-e4393e57a9ba", "sighting--6ccbcd69-5b29-403b-baa4-d10d7897356d", "sighting--f32eb87d-352b-4d3a-9ccb-1724b05ed11f", "sighting--ca27d0e8-8462-4973-a933-dea020c45f62", "sighting--87289a8b-ccc4-4862-b503-a90ebd7354e3", "sighting--d7c2fb7b-1efc-4d62-ab11-7b1d2a50a399", "sighting--8a4d1968-6fbe-4d8d-9fba-f06f89fb6c42", "sighting--d9ab9adb-deea-41ba-ade9-389d277a50ae", "sighting--2acdb8a1-4380-4385-8885-37978ae3ac74", "sighting--c421fffe-89a5-4c64-9524-662e01e31b2e", "sighting--dd1dcc03-57d3-4409-874d-a471f9b5f3c8", "sighting--5cde06d1-e873-439f-ac18-c3c24e1dfd5a", "sighting--d17eabac-99a5-4ef4-9681-b991047b5505", "sighting--da6ef433-8cc4-4c3e-aef4-2629416a80a6", "sighting--12756d86-66fa-411f-9a3d-37e205826c44", "sighting--1b075d3e-ab6e-402c-ad7f-1cc1f5d4571a", "sighting--71bf317c-811e-47fd-b746-9bb7cf675e23", "sighting--92895592-9149-46f2-9f96-eecc9cf412a6", "sighting--786e1f3f-bb73-41b0-9f83-ed4cfeee23ed", "sighting--4aafd1b6-3390-4714-961f-407c261f5845", "sighting--12e238b3-2e1a-4436-9eb9-0ed3a59dda6f", "sighting--21df87c8-119f-471e-a332-1dfe099ea3b2", "sighting--638dc667-1ba6-482b-b96a-c939b11f8a61", "sighting--d960221d-13a3-4b2f-b24f-b930ed367a2e", "sighting--291b0aea-5870-463f-9e68-3d3c36905f3e", "sighting--f465838d-7352-4ff7-a427-315275cb5f8a", "sighting--551aeb13-a823-4190-926f-91e510e6d90b", "sighting--52f0724e-a12f-46e2-ab00-449e293c8e36", "sighting--a9c6b76a-e821-4f07-bda9-6504dbfa12a9", "sighting--773743bc-42d0-41cd-b000-728a699a0296", "sighting--324423b9-18b0-4564-8156-f170495c21f3", "sighting--e5ac9859-441c-42c5-8024-08df99f21d06", "sighting--ba4a1cb3-630f-491b-94f9-4b99c3ac317c", "sighting--18604b57-087d-4961-b7a8-93286e59786c", "sighting--4472e5c6-e8c1-401d-9c8f-8dc10bc69c62", "sighting--68f140ff-15e5-456f-9716-24c526bcf70e", "sighting--5812c050-9ba8-409f-bf07-068a607fbb68", "sighting--49bf7dcb-ba38-42a7-b950-2a5e23844129", "sighting--30a3b670-c312-45a7-a5a1-e2efda5592a9", "sighting--2d55bc41-f215-4469-96f5-153bf2725bd1", "sighting--051b911a-c7b4-4cac-8782-6aceb794dbcb", "sighting--32e968ad-a70b-43f6-b282-f06db6bf6b21", "sighting--242d8d3b-97a1-48e8-a3e4-528f118b064b", "sighting--c09afafc-8532-4b81-afe6-c3d4570f74f0", "sighting--1138c44b-b57a-4d15-8316-e9b8fe4c6ede", "sighting--f2b5f314-e197-45bb-a754-c3aeb521b928", "sighting--d2b89b9b-ee49-455e-b5cd-061b49e0899d", "sighting--4cfd5f31-b3e7-466c-ab3f-92f95a3c81e0", "sighting--7d234f38-5671-41b8-a2d1-19dba629c24c", "sighting--934f27a8-7f9a-4982-ad90-9e045f5e425f", "sighting--9abbad00-d251-449a-aaee-ca01357931b2", "sighting--afa1bd35-e684-4dbb-a709-be375ed6f4b7", "sighting--0dbf29ba-53a0-449c-a453-70058b7061e4", "sighting--c59ffd3b-bd40-469a-af9a-aa46bff77c90", "sighting--0bd8f561-1e94-4d7a-ba46-fc94354a1b7c", "sighting--09bdd3ee-d838-445e-90d1-6f1e3b12c57c", "sighting--8b543cf0-c5cd-4792-b25f-0e6263573b5c", "sighting--06a1bbf2-b8e1-4d87-a82c-769ba07dedad", "sighting--131e7235-a91b-4c11-a1b0-1c036265bb91", "sighting--1ec7f757-4842-4e4d-8d21-70a2ddbd584e", "sighting--d22e8fab-3960-4427-9e3f-cc46ccdb95e8", "sighting--095c5d30-4a4a-4540-a4a3-9bb18ac8e339", "sighting--528c9f59-74fe-42fa-a1f7-4391e1313019", "sighting--fea909bf-3e8a-4809-ae2e-92e0eea63658", "sighting--5cab995b-22b3-452d-be42-464b9cdf4f5d", "sighting--bb08866f-dc06-4e0a-b3ad-3e5ae14125fd", "sighting--b79e0dc5-9281-49e5-a145-44ebe8979304", "sighting--86c22775-9db9-4f20-904c-37496e56a758", "sighting--ce58c6a6-404d-4e5a-be69-b1ac60a1ad87", "sighting--e5c51390-ca08-48bb-b868-bd8eb53daab5", "sighting--6135ca75-d7cc-4c5f-bdeb-2b5ab52cd457", "sighting--1eaa606c-b432-4aa9-bb64-0b4cf1d8b666", "sighting--dc464e72-865f-4333-af46-61fce09dd7e2", "sighting--6e9a3d7a-fd8c-4bf8-ab76-d2d6b5deae89", "sighting--ccc33b53-c6e7-4430-adef-7ac3ad5a770e", "sighting--0bc85705-140e-48a1-9f41-d06f59065156", "sighting--2d4d0bb6-71ba-4aa6-8a0d-cf88e73a1ee4", "sighting--74ebf292-5e96-4b91-ab8f-1c50c1749b66", "sighting--4476eb2f-03c6-40c2-98b0-a336c74ee221", "sighting--7436cd56-2b24-421c-904e-0035bcd21731", "sighting--9bf317c7-8509-4ebc-933c-b169758ef154", "sighting--162d1480-c2e1-4317-a95c-a1949158eceb", "sighting--7c999eba-3ba7-4f3a-bf5e-8424c808cf1f", "sighting--0ebf5ebf-94f1-469b-9753-7f84de211fbe", "sighting--b0a3994c-432b-4977-afb5-d2004ba3126d", "sighting--93fafbf9-23a5-47da-907d-c3720379d1b5", "sighting--9202f750-f9d6-4e34-af79-1b96ac6906ac", "sighting--2bf141b4-5d89-4afe-874a-9b0d9f88e666", "sighting--56a17295-97b7-4ae4-b4e5-6fd8b0694f1e", "sighting--ec51cc4f-c407-441e-9f5d-765993acd93c", "sighting--85365253-4222-4881-af3a-96f640a87624", "sighting--578c1777-40ae-4e79-b09c-9243ceb7405b", "sighting--84208cd0-3059-4d60-bb61-5b6cf712c8cf", "sighting--e43992a7-0b10-4c2d-bb6c-09310f3b9921", "sighting--d6bd32c8-eb0d-4ed0-a04c-552ab36cb516", "sighting--9004693e-b446-4288-8490-54997cf11e05", "sighting--0f77382b-f632-4660-a052-a5af7ac577bd", "sighting--68b9f6b3-5e45-4411-a627-2dac594af3a9", "sighting--d0b3ab7f-b913-49f9-a108-5aa66c9441d0", "sighting--25112f78-ccca-4d35-be88-4af706fed064", "sighting--19be0453-246f-400f-8b72-0f974e7b14bc", "sighting--3b5be05e-bee1-40ca-8eff-5d615a598be9", "sighting--985382c2-5a48-4b0f-8ce2-c0c5cc7ce2c9", "sighting--59c530b3-8e1a-434b-87ea-4f2caa1d3a3e", "sighting--ff8676dc-609b-4744-969c-810c2d84ff5d", "sighting--02b4a967-3582-4da6-af66-da26dc12d8e7", "sighting--b074a476-b23a-414d-a26c-d67cd2f9ad3b", "sighting--150d14c1-d931-4cde-b27d-88e91e53de59", "sighting--9cfc9733-388e-4c66-a514-0c1a37704ac9", "sighting--691620e1-f27e-4153-8a00-12abe1724063", "sighting--b21a07aa-5d10-446c-8c6b-aa82004e5670", "sighting--e275c09a-e90b-4b10-925e-85b3dc307700", "sighting--ed6c2860-04d0-4f03-9f9b-03b95d61f4f5", "sighting--cdd07c05-585a-444e-8da8-2b71fc530eea", "sighting--d81938f1-0b05-42b8-8e73-f7bad181fa1f", "sighting--2388adc6-c942-4db0-96d7-e89220c55cc6", "sighting--496a5577-47ac-4401-82cf-f97592a4ec77", "sighting--0315a470-b511-401a-8bfa-c12768e54a19", "sighting--b314cd4d-fd02-4eb1-9877-155546b49652", "sighting--dedb87ea-0798-4b43-8bee-5e244b946853", "sighting--bf2f6780-4901-4307-bc20-8bfb3c6bb491", "sighting--99f943d7-0cfb-4d5a-a14f-331fa1ea74ea", "sighting--1b943e9c-dd06-4de1-9ed1-1a730f585302", "sighting--2e7b9ce0-7357-4a69-953d-27a625cfc3f0", "sighting--3deb1f98-df74-42cd-bdc9-5e09f3fadb97", "sighting--1d7a536b-5e0f-485f-8a9d-3abbebe08b91", "sighting--be96d5f3-465f-4306-9a6f-1700642a2db0", "sighting--520a09b2-2d2c-4958-80dd-7eff06686636", "sighting--9908bd3a-0f6b-4592-b457-ef85abb58523", "sighting--70dfa5ad-d9a9-4b70-ad67-11a57d49d945", "sighting--54139569-0bd2-4b84-be4d-5816b95bd916", "sighting--89a7b1c4-85a4-48cf-ab36-78a9235eea94", "sighting--28c72fdb-5648-4a53-988d-eaf049513d0e", "sighting--e4d58b24-a3bf-4060-9fee-64a0479283d4", "sighting--22984fd3-db2e-41d5-814c-5bd0c522f3a7", "sighting--7957eb62-e7a0-4639-9d3e-b931751d83ae", "sighting--3f3d1f3a-4415-4c43-b878-5891c7f5c90e", "sighting--4aa08ba2-81b3-4b37-8a22-ef0730c2e35b", "sighting--283ba962-a636-40f3-9a52-f41b2ae3ab0e", "sighting--260c490a-4bec-4e6c-a1b2-632d1336b1b4", "sighting--2ad19ede-2f17-41d4-aa9f-72ffec696255", "sighting--9c0965e0-f6c6-43aa-8303-7db55b18bee9", "sighting--040c533f-dd15-4e42-9017-bcf79afc6cd7", "sighting--6721b16d-97c2-44b0-95a7-9f085cb7e94c", "sighting--64633407-f37e-4004-bedf-a9885ec5beb0", "sighting--aae68aea-846c-42bd-b2e5-4b1c4258d10a", "sighting--aea374b2-977f-46fc-801a-5dd6b42888d0", "sighting--8c6ab30d-b615-4c71-8d86-c4e7c95e84cf", "sighting--80da971c-5c3b-40f8-af51-10cd4bb10d7a", "sighting--20b6c0b7-3520-40ab-8961-223d92f1d9c9", "sighting--600cfb32-d846-4c5d-a7ca-623aab96f656", "sighting--3a2c3e68-b25e-4f87-b54b-fcb11511768a", "sighting--e15545ee-8f6e-4cac-9092-ba633350feea", "sighting--5b01ab05-9651-43d2-8ff7-c68b97363140", "sighting--c0ed0c04-66a7-4b03-ac72-a9ea61f4d429", "sighting--5acd84fc-7558-44de-a041-3990a25568fa", "sighting--652559f8-75b9-41f0-bd7b-c67d19f46d49", "sighting--9133a588-1ade-4f79-8399-ea2df059466d", "sighting--d513c8fc-99df-4cc7-8faf-6bc3a8f7caff", "sighting--1e5a8224-6e00-40fd-a88a-91244857c653", "sighting--596958bd-b563-43d4-8846-4fbfadf08615", "sighting--81e6c8e4-3f0a-4d23-9d67-e225b92e99f6", "sighting--af8c2512-46d3-4beb-8e94-2cb38aa09820", "sighting--36f96d00-b4ab-46f1-8669-3ae25e0b2d40", "sighting--70e5811f-0cc4-429e-9930-7484555c9134", "sighting--c10692c6-67c4-4dae-9793-6b0f69572599", "sighting--85ecc7ae-33a2-4a6b-8eec-9691fd4572e3", "sighting--38062c28-a742-46d9-ad3e-0666fb0cfa67", "sighting--fe2a7730-2bbf-4aa5-98be-7976b7b492d0", "sighting--9aed1018-0e59-43d7-8311-758f3dba86a4", "sighting--ca4818a6-0355-48d1-aeeb-39c357faa22f", "sighting--a23c8d65-4ca3-45f7-898e-806bb6fd0fa5", "sighting--704262cc-58df-44db-aed1-e8b71cc87c78", "sighting--e2fcefdc-4c6e-48ef-ab92-ff74467eff00", "sighting--a43d15bc-a5af-4734-9a00-63e2d56205f8", "sighting--efd7c3cc-58e4-43df-ae90-809994646bfa", "sighting--7159a397-ffe3-48ff-9246-19deb79146ef", "sighting--9a9a1274-872c-4e79-bd5f-7f3b23e96888", "sighting--116cd2cf-e4d4-4a72-9ede-289150c08a2a", "sighting--ed914e75-f2a2-4ef9-baeb-39ebbf9f5cb7", "sighting--9d39f523-1715-439d-9c5e-b1ed3ac3a932", "sighting--25fe2720-c3ae-4559-9e46-97d1979b12de", "sighting--46142f72-4696-4fe9-ad62-4895407efc5d", "sighting--b3f96cd3-5e11-41d0-9146-4a5ca1d4c1d4", "sighting--48f8e933-a48f-4ac5-beb5-2b82730c3be5", "sighting--ab7f2274-8e39-47d6-953c-97634cf7ec2a", "sighting--949ecfad-4650-4402-a8f1-8debf90089f7", "sighting--d92939ae-b5ef-4d06-9632-035dc60ff024", "sighting--04f7b341-1eb8-44b8-829a-ebf7cdd1a599", "sighting--a6aacc1b-34f2-447c-bdc9-c5c36b4fe368", "sighting--748873aa-c0cf-4b44-9f41-313eace91563", "sighting--7e5bc330-5145-4930-8442-cf50fb3d1ea4", "sighting--3c250f0b-1ec0-43aa-9781-ac9a824fcd28", "sighting--3e7e3d61-bbc3-4edb-832a-780636b8b672", "sighting--c6a2b9f6-ecfd-47c9-9539-2b2c96a7e4c3", "sighting--24e3d7c9-1d06-4e4a-96b9-f4b9e4f0a082", "sighting--f84383ca-c768-4551-93f7-24615ad6697b", "sighting--502b1f5d-92af-46d8-af36-766877f2ab6e", "sighting--7027e24e-4faa-4295-9fb9-e9c7fb5356fc", "sighting--c56948be-7253-4abd-a4a0-55a3a5bc6ba8", "sighting--0e35c3d5-2790-4722-b17d-a34d91c35a3d", "sighting--2bcd0567-c70f-467f-872a-5636bf5eda83", "sighting--963a8219-d2e6-4970-999d-bd7b089a0d1c", "sighting--368d871c-0a31-467f-88c2-b46854246fcf", "sighting--61577f79-e5a6-4bf8-bdd9-eb263d17a4b4", "sighting--e06107b6-e1e0-4fa8-a03c-cb2bacfada9b", "sighting--0156bf90-8c53-42ab-af9b-1e4acf1546e7", "sighting--81259d45-6c7e-4569-bb08-93909f37cbce", "sighting--8a3b047d-c04a-45e5-8463-8df0ac9d9ffc", "sighting--8cbc22a2-6ca8-4b98-9f88-517b1a08c9fe", "sighting--db5a53c1-a1c5-4931-b4c1-f4963a0d94b6", "sighting--9517c8fe-c092-473f-8be7-fc7fe9a9e869", "sighting--81612f98-301d-437d-968a-00cc1e287940", "sighting--38dae4a8-1fd0-426e-b876-0c1869ba454c", "sighting--d49441c1-ecf4-482b-a73b-68a9b4e1b45d", "sighting--be35c91a-a227-4268-ae34-b4e97ce014b1", "sighting--9dfc2997-5bd2-42a1-ba79-d2838e39905e", "sighting--11ee16a1-5f04-412c-8598-ccd464aace16", "sighting--11d276b4-48ae-40eb-af29-5d1db1ed2e59", "sighting--5a5a0f4b-03bc-4fbe-a02b-a7297d91d8c6", "sighting--149be47d-ee26-4850-b407-75533cfb7fa5", "sighting--22588b4d-31fa-4a73-9809-2a86b61a080a", "sighting--00356c9c-7259-4311-bc8d-5064f9ccf00d", "sighting--c275fa9d-0b81-447b-8bf6-df916ceda184", "sighting--dc1ee2a6-a747-4331-be4e-1de300b40a91", "sighting--440f1bcc-487d-406b-898a-e9d9f2f73c4c", "sighting--48760a75-3446-4ee7-8837-05ecd284f6af", "sighting--aea09c4f-b0b7-4885-8a84-a0789bca41f4", "sighting--7295b0e2-1b45-4f7d-b70e-e7d1eb846f10", "sighting--eb4100eb-91f6-43dd-96ff-ef451eab4641", "sighting--e9d07323-1628-48b1-a338-7b4d6ba334df", "sighting--611d40e8-3321-46f6-9a97-22a3ef3fb31c", "sighting--d1aff73d-1c8e-4d47-8ddd-58d4058099b8", "sighting--af20285d-197c-4227-931e-6dbc34813686", "sighting--a23ab547-d459-4591-a6ce-d9b717bded1a", "sighting--83041fbb-a60f-47e5-951e-3dc7a87f02df", "sighting--7ed6bda1-44e3-45ee-899b-31a399e13fd6", "sighting--4bb0724b-0ea9-45fb-8a74-26a50921acc2", "sighting--6bf9b31a-a443-442b-a3b1-c33c1597a712", "sighting--741f6d28-2c16-41b7-9d4d-afeceb3b0a5e", "sighting--8f9d6e15-0ce9-4683-b1af-6dd435347ca7", "sighting--66a6c81c-8116-4613-83ce-f5f6deaf241e", "sighting--643d67ea-2c47-425e-a4e6-a48cd09da0b5", "sighting--681a4c7f-0463-4dc3-b5f7-eb29fb524b12", "sighting--e303d2a3-da30-4fd3-b2ea-1195bec5d30e", "sighting--c2558ef6-71a5-4bc8-adb6-bdf00cf75d01", "sighting--dfafecfc-b4f0-4361-9984-69caa5c26c1b", "sighting--a2d2c8f2-49f8-4bb4-b76f-36653de992ab", "sighting--a7277890-5041-4479-8f3c-30dbc67158c6", "sighting--b7a4fb38-abcd-4248-8ebf-8f5ae3c55872", "sighting--cdc198f1-7919-4ace-ba9a-2ed38744fe7b", "sighting--8accf89d-5886-433c-bf8d-2325c45065ab", "sighting--4979d8b3-a974-449f-b345-27d8e144f215", "sighting--a3ead522-b748-41ef-995a-68365c2a58c7", "sighting--41e35e04-9a40-4689-81fe-16e04b869f28", "sighting--4baf8dee-5de0-49a9-a2cc-763b2eb39763", "sighting--49164b6a-b596-45ab-b9eb-03a2f466df3b", "sighting--98dae326-1782-425a-af39-67913f5c9e03", "sighting--5c7c5ac5-0986-4665-8412-2adaf6f93a8d", "sighting--154a3ce5-1d0a-441b-aca0-4c3d2f935f90", "sighting--193e35ab-88d8-4aa7-8157-9d5e22e7e729", "sighting--22f0753d-ca59-4b28-92e5-c768c447053d", "sighting--0a863e9c-6458-4e79-8dfa-492a583399ed", "sighting--4190eb2f-62cd-45f5-b739-0a45aa8bfebc", "sighting--13935e9b-b761-4e98-aac2-cb184f79b345", "sighting--c2fc2676-7c74-4cf5-8c10-0530337f3a94", "sighting--7e72661e-8417-41f5-99f1-9ddbd9e9530d", "sighting--f19f2b58-05b6-48aa-9c27-a2e8043cf861", "sighting--3be7b97e-59ae-4593-bf45-3cc0b70cd951", "sighting--8283bc8a-8fb3-4e41-984b-9dc950b68e1f", "sighting--abcea362-08fa-43e3-9d4d-fbcf6612aabc", "sighting--4821521d-18cb-4a6b-8133-8cdcc7b26bca", "sighting--11c48e0f-cc90-433a-a0aa-6d6c6b0a711a", "sighting--e8fe1a0e-db15-4543-8cf3-f8019af957c1", "sighting--25002faa-11b5-426f-9f43-2490bc775627", "sighting--0f29fbd5-7dd4-49ae-99b3-948179b282e3", "sighting--05963bcf-32d1-4ea0-863a-6387ed9f08bb", "sighting--0a27ad9a-85dc-4a5f-850b-97b40737a389", "sighting--f9544b86-cbb4-40ec-b4b1-2864ec66fbc3", "sighting--437f6b09-eecb-4d84-bd4b-d050908d5baa", "sighting--2939798c-047f-4018-9a42-e2ce22b62abb", "sighting--4b1b132e-da2e-4cf8-9559-3a9dd0611737", "sighting--647fa875-b641-417b-a2a8-3e1e95d99d3c", "sighting--c38c72b1-c86a-4a15-953f-6a32ddae4a58", "sighting--947f2d01-c997-49a9-81d1-db46f1647a5a", "sighting--f5af555f-d8be-42f3-8189-b787e9b25aa3", "sighting--c30bd23f-e2f4-4636-afdd-4f9bf27d9404", "sighting--e5607e66-4e1a-4fb0-9023-27638d8f0fe7", "sighting--63b07912-1064-428d-a359-235f0b181c69", "sighting--679a1c2d-760b-416c-972a-ba54d0e65983", "sighting--39b7affe-8fcd-4d8e-93ba-a284dfecb73a", "sighting--67b4ee7c-e312-492d-898b-f7727ca4b5cc", "sighting--08fbcd92-88e1-4788-b94c-c3c23ae3d2bb", "sighting--a9838478-d0a9-4763-bba2-f9fb2850cad7", "sighting--c70c23e7-74a8-4b5f-b5a0-faf05704cd79", "sighting--d934d6be-ac65-4751-a351-68a65feab421", "sighting--8c4e8f4d-93ce-4f3b-9610-2f6a66cec794", "sighting--f7a776fa-bcde-4195-8ec5-390350415be2", "sighting--3f3c03ac-9eda-4e81-9582-a80415163e6b", "sighting--c09b8e07-2fe6-4fd7-9004-f11152905df5", "sighting--5057afc9-e0b3-4d18-86d5-7302d1dbcf47", "sighting--68588712-149a-482b-8ff0-5a3556dc5798", "sighting--88482b0d-f899-4dec-8e26-0a9a6473bd21", "sighting--9f7eb5ca-7b25-427d-a583-45bc60ab1b50", "sighting--a78b8abf-8203-4305-bb97-14fd9c383aef", "sighting--d3787194-d001-4200-ba2d-a5ec04bf4966", "sighting--53412f61-7694-48f2-8e69-b763611f36a7", "sighting--109108f3-4e2a-465d-8792-d42a97dbc208", "sighting--acc7089e-dd33-4719-aa13-61266dead928", "sighting--cd55bce8-ea62-434a-8f31-4521e0422f01", "sighting--052a39cd-f8f3-473f-aa50-b05e03648c3a", "sighting--0acd86fd-f918-44a6-bfa4-0d955afab140", "sighting--e237934f-2853-431d-8d7e-862ef9451948", "sighting--cdaee7b7-196f-4d48-9f69-b7a725c56278", "sighting--0474896f-39bd-4ba0-b51b-8bf5aadff0bb", "sighting--25d375c7-469a-4c32-864b-19dd84d801ed", "sighting--da921c4a-80be-4954-8d99-7576e66cd127", "sighting--511ad1a8-dd41-4b6b-a64d-fe0944ed9ab0", "sighting--ea42286d-2e1d-4665-bc04-f3a118986a12", "sighting--ffc982a3-a6e6-4a85-b464-c06b24874e23", "sighting--a378fec9-97b0-4583-b095-dcedbddddeb5", "sighting--c6d93395-ace0-48a9-86bb-0b49d01135ad", "sighting--73b2bfad-0373-45af-a6ed-a10e171bb45b", "sighting--7d7f5d25-ea08-4aa6-965c-62487481f76a", "sighting--6cdc46f1-913e-4d18-9ba6-b8cb6b5a4d61", "sighting--00ce2df7-1c19-4f6c-b98d-207bbcba48d1", "sighting--b92c74b0-3d99-4a0b-bdde-345b641ac683", "sighting--92ddbd19-e95b-4def-98a8-0d07e6a84a62", "sighting--9caf6905-2ebe-4527-8f8c-7ba69838a542", "sighting--11f234fc-2b0e-4ac3-be61-f4359b22aff1", "sighting--506d6a85-9de3-4e48-a2f6-ba6e8e37ceef", "sighting--eadf5fb8-37b9-4fbc-8c1a-53c6778b1b1d", "sighting--b927be14-fd7e-4e8c-93e0-e2e791947db1", "sighting--b45266a4-832d-4255-82ae-2dc50dfde29a", "sighting--91c5f923-0f46-4947-b03e-13150add7f67", "sighting--9b70fedd-6435-4150-a1ae-3381bbebc92b", "sighting--02a18aff-2315-4982-8a9a-8810ed48437c", "sighting--208a91d5-437f-4c63-8043-8300fcac876c", "sighting--fbe5a8ed-78d1-4a4d-8e74-e26da49d4fe5", "sighting--d5973929-b14d-4a40-9ccd-bb6350ac7875", "sighting--db4f9757-927c-4cd4-b499-f32bf74efeb7", "sighting--ad056218-7f60-4a46-89d8-bde280b4080f", "sighting--3b043440-5e7b-4ba9-9c13-d0af3efdb8b1", "sighting--0da37d85-cac1-41a8-ad47-4d68f33a10b0", "sighting--c2ee36fb-8b23-4e6c-abd4-8c67c257c05b", "sighting--4177c8aa-8e7f-461e-9ea9-22cff2c8c85e", "sighting--eebd40f6-d700-43d2-be58-cfc39e7145fb", "sighting--d36aee10-c08e-47e5-8983-5bf0502de1d5", "sighting--035362fb-4af3-4416-96e0-555690d5559b", "sighting--f5d60dc2-b8ad-4bf3-8549-ad55379a8a4e", "sighting--0e630763-ba40-4f24-8a7e-91c4aef27284", "sighting--406a922c-8048-4d56-8baa-0dcaacc6192d", "sighting--e0e094aa-38ba-489c-b775-6e1591bed1bb", "sighting--6c3d779b-656f-4bb1-b380-b76ef79707f2", "sighting--6dba2a29-713a-4b35-bd19-a28cb78d4a4b", "sighting--86f41c5b-9fae-4496-a571-212e6e8cf095", "sighting--d51e3999-6813-4337-8f18-e9969407263a", "sighting--30b75e25-bddc-4202-9086-f0e349331845", "sighting--17783d17-03df-4a4c-9a11-da8c5b610c3e", "sighting--f96d8d82-b8f2-4eff-bcb8-df60e6ff60cd", "sighting--5605a527-f03b-4ade-b476-675e1682dad6", "sighting--740a64ce-90be-48ce-a951-c78605d81b3d", "sighting--33000e0a-f250-4102-ab69-bebbdbeac76c", "sighting--53345c73-92cc-412d-9d6d-3409524bc387", "sighting--cfa86a7c-94c4-4379-8386-2eeb0a30fbc1", "sighting--0f9677bd-004a-4fb7-b0dc-d3d85f4d0831", "sighting--dc7a57fe-c532-4b92-9518-73d652764f06", "sighting--7bee07d2-80b1-40b4-b685-271348ed978a", "sighting--60c8755b-68e5-4657-b86b-f2e533b03c77", "sighting--cdab71ce-463e-4c65-91de-d3282f4e0f7b", "sighting--3a42ea34-42fb-4db4-8814-9d24d14427c4", "sighting--567f39b3-6590-4ad6-a467-be624f635bc3", "sighting--6d839598-4d1c-4e2e-bf00-493087033a69", "sighting--46cfb7c2-2aba-4c1c-9fc7-4c1814289f9e", "sighting--b201849c-fb2c-4809-b1db-f996483aef54", "sighting--89e3790b-6fbc-4df1-a431-f14fcd96507d", "sighting--f27a7fda-ce59-4352-b427-b5087c8a32cf", "sighting--6317fa66-9de0-4d55-ab7b-e752887f033d", "sighting--d6540a81-47b7-4697-8c64-1ea686d2789b", "sighting--9425dc8a-d114-45c3-83fe-81478ac6ead9", "sighting--cd986c9a-4df3-4939-82a5-830fbdb44520", "sighting--d0dfe2c7-a2fa-4c71-943a-10a628bcd1eb", "sighting--3a8b9ad1-c036-48b1-b483-7cb98fba6028", "sighting--9929e844-eaba-45d1-a501-1cb5f9685393", "sighting--b6622e29-f1cc-484c-9b8d-b87a65f968e2", "sighting--d2ae923b-93b6-4ef6-8642-e5c13720bb0b", "sighting--7788f525-dac0-416a-926b-ba3a4bbd8480", "sighting--24fbff6a-a719-47c7-a5d5-3181f946978f", "sighting--1e174233-5fb6-4bd2-bad7-059268debbf7", "sighting--94462119-020b-4b10-ad5b-664aa2e40f7e", "sighting--85a47445-a940-4a03-b161-99db471d2f69", "sighting--de0d5142-4237-4007-9c99-e96211c5e667", "sighting--49999dbd-313f-4a03-b36e-b455f43b6fe2", "sighting--e8278195-8c6e-48b8-9e7b-90969870707c", "sighting--523770ab-9fc5-4393-9cad-18d71a344cbf", "sighting--313c9b00-c8bc-4add-ae12-73afadd5aa62", "sighting--882952c8-aa54-40c8-88d2-28bb9722ee4d", "sighting--f544814b-757b-41e1-a472-d919b5dfa5b3", "sighting--769e65d6-1a5c-4bb4-bb9f-d9ffe3fe106f", "sighting--cdc6fb2e-ee96-4cf6-bfe4-f5a3d8ffa581", "sighting--dd2c31bf-7779-44d1-b7ad-1b35da8c4a4e", "sighting--a1e6fbd3-ce44-46f5-83fd-4fdfbe5b3af1", "sighting--b45510ac-0997-4fbd-a050-5cc137419c2e", "sighting--368e85f9-1281-478c-9ea5-17793827f474", "sighting--475103c4-320e-4d88-bc7d-15ec57cc0c2a", "sighting--e5026b40-2905-4d91-a124-26821640567e", "sighting--f5e62d1f-d497-48d5-a6fa-d8a0fd26b7d2", "sighting--256fda91-7564-4da2-be1f-0fc9a89a44ce", "sighting--58b38ada-62b1-4d58-8909-5ea1a7b1b9fa", "sighting--0ca01d1f-500f-48f3-9d12-40cc5f012179", "sighting--29ad1772-2b1b-484e-ac98-76767c2c478f", "sighting--ef20e14c-56dc-442c-a413-44c9758845f2", "sighting--69ff3d0d-adc0-4a78-898f-9b2681d3fdda", "sighting--1fd8e48f-1d9e-4d9d-89ed-8519de3d40f9", "sighting--97ef44ef-ec31-437e-bd89-afb0d2fb65c9", "sighting--d00fd360-fbef-4961-a302-387fad2177a1", "sighting--5332cdd8-2ba7-49b1-9bcf-eb239a6eaf80", "sighting--14527ebc-c517-4add-a694-180599f795d5", "sighting--6f4de77b-1fca-4cf4-a9a7-629dc27166d4", "sighting--ee4042ec-9e6d-4a7f-b538-a784710afdc0", "sighting--3c664cc9-af71-4d94-804e-24bbebd06754", "sighting--a6168993-3af8-4d4f-bbfd-e53fb21a5c6d", "sighting--9b8e9d4f-1951-4bd9-bcaf-65ca9fc5b9c9", "sighting--2a7b7461-62ba-4c00-b911-68bb7935ba0d", "sighting--05957fd9-6e3b-4321-b22a-88d52010c8c1", "sighting--3bfca65e-816c-4b3a-b222-651a8d316c2a", "sighting--af50cb43-78ae-4034-97f1-e7c10322e789", "sighting--89d1586b-014b-4453-acde-6502c4239c2d", "sighting--3788f858-c1ea-4007-b6c2-dd95ce4f0737", "sighting--cb279080-67a8-4e92-8a79-7f3cabf7354f", "sighting--9b880d51-0b4a-4837-98dd-ff5dd5251252", "sighting--b6ffb5c1-228b-4ed7-9e5b-bfa34114446e", "sighting--1c125f54-9de4-4703-bdac-3e642655d7c2", "sighting--04f7dd32-3999-4e04-8ad5-072749c23d89", "sighting--ed04d6e4-8605-4c6e-ad96-8c5ff603548e", "sighting--c21f3505-4ff6-433d-a51d-5042341e703d", "sighting--f1abeba8-2f0e-4772-adf0-d1e42f1670a7", "sighting--25cf92a1-9d9e-4233-acd8-b860e9142f0c", "sighting--32bcb83a-ad41-4561-b967-2cf7882cd914", "sighting--e7707628-8b5f-472f-a61b-c4d6c1e118bd", "sighting--77e7343b-063c-4924-ad65-d3b02c8c1f2b", "sighting--85abd884-d1d4-489f-b002-c8bc7554e80f", "sighting--04929a10-ad0a-43ac-9998-908d4b6d7ae5", "sighting--9e10aec5-dafb-46f2-91f0-2b6fd3a3c47d", "sighting--8bd215b7-7587-4e68-bc76-b863d2bf0e8d", "sighting--f75d73c4-1800-463c-a3e2-5dd43b3fec67", "sighting--6d727100-4686-4eb4-acb2-434317f24047", "sighting--717ebf48-e924-4720-994e-430ab945d0d5", "sighting--76b6986f-8078-4b26-811f-0b3a24f36d4a", "sighting--792a5472-c1ed-4e79-8df7-ed4349d8f209", "sighting--5657eef4-b870-4adc-85f0-ef4ac4c31a9f", "sighting--dd0f7b52-1595-4033-88a6-c5af8d6458e2", "sighting--67905544-7d45-4297-b81c-2064e37682ec", "sighting--2a645554-abd2-426e-b72a-11f2ed573372", "sighting--3f7cde51-072b-4583-8a92-f5622f154694", "sighting--8dc8985f-5436-4c32-bed8-cea77a6820c5", "sighting--3ab0f488-2be1-492d-930a-7f1d4c5defe2", "sighting--04710ec0-4530-454d-811e-20814826c750", "sighting--ffcabaf6-833a-433e-854f-644807d54f15", "sighting--9029cd25-3e4a-4aac-9be3-6c2fcfc0e24c", "sighting--cfd1e5ef-0d3f-4f47-9074-10e8528a93fd", "sighting--af88ee3e-610a-4fa0-b835-edf1eb02a614", "sighting--4c1998ee-a98e-4a53-9aab-7a885d644bd4", "sighting--aadd2328-5ec1-4d45-af7d-cbeeceb41aaa", "sighting--4c99dd4e-5170-4877-946f-9bfc9800f412", "sighting--b6efde70-66d1-4a8d-87c1-01a78d87c83c", "sighting--f711f8ed-1cc0-4983-b295-879a294be4f6", "sighting--c77ed672-a199-4837-9e5b-8842f3024441", "sighting--755e7b86-541a-47de-b615-97ec6e580cab", "sighting--ef40fb6f-ec2f-4c44-83e8-ad02e0d0c077", "sighting--1ef1427b-14c4-486e-8ad1-248b7cc47c90", "sighting--31480d98-bf77-4799-805e-a9f2bced184c", "sighting--63eff205-9ccd-4aac-827a-ad64b917fd1c", "sighting--9fc1d205-beb7-4474-b220-3812c5c22531", "sighting--800f64f1-64fa-4bbb-ac7c-8fea6923fb50", "sighting--ec36f183-d2d9-4e70-9b3a-16a4d39a0eb0", "sighting--d90767d8-18ef-47a1-a23f-4cd74bd7ee0a", "sighting--9797a142-1e28-4bb4-8bc2-cd1b5291ca08", "sighting--7ebb2e10-ad78-43e7-ba40-1ca6fa2b253f", "sighting--62ee811c-5e11-4b77-8f2d-1b9d8250e43d", "sighting--29ae6406-71cb-4f68-a813-1c4d6e44ca31", "sighting--8571e407-30c2-4f6a-a74f-e43c1ce13630", "sighting--68533ad3-d84e-4326-84df-e405a3f5b31e", "sighting--0afdf25d-6326-45cc-8a27-1c6bab897ca4", "sighting--8c71bee2-8ef5-43b0-94d6-6f897705f4c9", "sighting--58c820d7-e8c3-4779-833e-a9135858da6f", "sighting--605300e6-ecf5-4fd8-8649-7f8ecb55ea8d", "sighting--7d80daef-b72e-4421-9d7d-0f969106d4ed", "sighting--b96c41d3-d1ad-4228-a7fc-402bedcda3c1", "sighting--7cc53642-4a4d-47e3-8165-3c7ec6ba78bd", "sighting--286f57fa-bc46-4775-b3d5-febe7c385168", "sighting--36e3020c-b861-4c47-b81f-2acbb4a8a733", "sighting--b86ffa14-88f7-41d0-b26e-8989583f6305", "sighting--209e5fdf-fcb4-40ea-9f1c-79bc641e5062", "sighting--d8b720cd-dcb1-4bce-8813-b124ba3eea3c", "sighting--85b19a02-b6a3-401f-96dc-463f2533becf", "sighting--ae2e7cf5-cecd-4c65-830a-5f6bb0d29ee5", "sighting--267d8c00-d738-4b1c-909c-4ab3f0719f8a", "sighting--e81d8e8f-8eed-41b7-87c3-58d2a7bac0b6", "sighting--829ff8db-f154-47d3-9870-db72fe78689c", "sighting--43842bf8-2db2-4547-a4fa-4d163af57faf", "sighting--d362ad6a-b385-4ec8-9027-e62ccc98b42d", "sighting--c25c7ab6-39d9-49d2-a359-b3468e260ccc", "sighting--34f1f5d3-6ff0-4a57-a0a5-c878836ec59e", "sighting--ef5e55e9-c5e9-4c75-86fb-e0f7beaba7c3", "sighting--40e8d996-102f-4cd0-a53a-1d85460ce310", "sighting--c733db20-3f9f-486d-96fb-e203ae78bfbb", "sighting--80f263fc-df4c-477d-b8f0-f847567bf2b8", "sighting--7d6d4f03-1a0f-4a4b-901e-07f3a2d81cea", "sighting--f8f95e68-76dd-441a-ad8b-76a5a79e4a10", "sighting--18171db7-ee57-4ca8-928b-404e7e30ed87", "sighting--3a3b9ffb-2ba2-4311-bed9-5f980240488a", "sighting--40f7d496-fab3-445b-895c-1c5e28db4150", "sighting--356914fe-b188-4b4c-83ec-5d8e7fc704a5", "sighting--28b6b498-f218-43a2-81b5-67be04427355", "sighting--12e94401-4c90-4f42-875d-3f8664ff8273", "sighting--1c14239a-8be8-408e-b112-22aab308818e", "sighting--d3f35cd8-f90e-4831-9e85-3ae519dba659", "sighting--488f9dd1-2c97-4fe4-8315-f06d2ebd3556", "sighting--5dba47ee-4120-4c6c-bb6c-5e8ce8e46b43", "sighting--c3e3f5a9-c507-4f0c-b91d-f66d5c8fa1c5", "sighting--b5ade9fe-34b5-4dfd-8b91-c9f362237879", "sighting--b36c0cc1-eb17-44bd-a8b8-a5e0c68390b2", "sighting--3b194645-9f4d-4c73-b066-3e0b4b7e312d", "sighting--54ca0301-abe6-4898-a07a-f739cd70916d", "sighting--e0faff6e-e89f-4fb2-847e-5d4e9b3643df", "sighting--8f61072c-f98c-40e0-81eb-29ac0046af2f", "sighting--eac7bdd9-b590-4963-8a21-a65d2432938a", "sighting--4c3dc337-2aab-4433-bf3e-804cd1a241f8", "sighting--10e427e6-7bc0-425f-8b5d-2ae2c72d0399", "sighting--9c1174d3-8337-404b-a57b-d2b18fa4c8a3", "sighting--3df93df7-ce71-48f0-ace2-dd1fead1379b", "sighting--5accea3c-0f49-45f3-a8d8-c16594aa1534", "sighting--a7db0735-b971-43e4-95cc-cec1bdbcd75a", "sighting--205883cc-8220-4b57-a574-91fb1959e698", "sighting--de1639b2-1414-4f86-8654-d965c531f36e", "sighting--86dffaaf-8cb5-4bd8-968d-e2e3696824d1", "sighting--50238007-5da0-4569-8612-e8beec166b4d", "sighting--e0bdc161-41bb-4af3-867a-a933d1b45aa7", "sighting--e18f3955-6811-407b-802f-ce551a7ebc62", "sighting--d59e4a63-b2cc-42c2-911e-3ad4557c43af", "sighting--29fcc3c4-e56c-477c-bfa8-f4401712d21b", "sighting--f5e0b3ca-5796-46c0-a58a-50c33decf2aa", "sighting--10e1df04-8cc1-48a3-9ffc-03e54290cc30", "sighting--a7d730c1-d9ae-4b34-984a-b30f13c1df99", "sighting--38156e96-bc26-4587-b3a3-31389fd5ed5a", "sighting--8249752f-cfd4-4e45-8275-e5951bb469a3", "sighting--223d0ddc-34e8-4ae5-9a69-044a08a991e3", "sighting--75222f11-b108-48e5-809a-4b970ed9740c", "sighting--01581b05-7583-425e-a51b-998b7545a4ba", "sighting--4014bd29-f3e0-4123-ae48-6295b2e02634", "sighting--41a7c4ba-a4e1-41d9-89eb-81a586d74be6", "sighting--4647ac00-2b86-48b8-b622-d6c0d374c1f0", "sighting--869405a0-b9d0-41f5-8993-791d3bcebc69", "sighting--3e5a5c92-cb38-4b47-9a47-6efc866d4dd2", "sighting--dfeda627-84c7-47fe-8e96-364e84c28538", "sighting--06b93a8d-8f52-4b83-ab3f-8840b234420e", "sighting--d02896d4-e39b-4e6f-bcc6-0f76af22c177", "sighting--982c16cd-ef6a-4450-a5e2-9025ad2c91cb", "sighting--0f0f9726-ecb5-4f46-94c1-6404cacabede", "sighting--1c5e6db6-7bdb-4955-94f5-8a15aed67a59", "sighting--3b00c1cf-e2c2-401f-a473-d65966ec1ebb", "sighting--9571ef72-f66a-41a2-894e-382711a02cfd", "sighting--167515ce-2eb7-4db0-9b7a-86db4e20dee3", "sighting--9906a29b-09fa-4893-873a-eae510604cc0", "sighting--75ad49c8-9723-47c3-a502-37ca36e55b3e", "sighting--f28cf835-4fde-477d-a030-c887152b2124", "sighting--fb1c5cdf-e720-4513-b43c-3086ba1e8823", "sighting--e05e9489-4fbf-41d6-96d7-7f393f124309", "sighting--dfd96644-8505-420f-ae24-0b62a587b030", "sighting--24815d2d-2f40-4c1f-b46f-06cc767623df", "sighting--5fb44be2-20e9-4d91-bb66-bcf85a601637", "sighting--a0d323ef-af82-4fa8-bfa9-43a1cab0e543", "sighting--133e0799-9da5-425a-90b1-919a7f6c04cc", "sighting--c4dc0a44-fbbd-40e0-bf93-32f9932efe1a", "sighting--fc82cfcc-1f05-4170-9601-1fe33ed85fdc", "sighting--8bbdfd56-56c7-49a1-940d-f851a84b09d8", "sighting--41f036c5-ac42-419f-8b92-c34ac3061a02", "sighting--d8484b6d-de17-4249-b4ec-00c21e30791e", "sighting--4b5772d5-4f0f-40cf-9554-5d4e40b30abc", "sighting--d55ee1ef-99ff-4f7a-b56d-bc482e820509", "sighting--65eba1df-417a-44a1-8ada-4a12efcb82d1", "sighting--b3c61265-6989-4a30-bdc4-2245d61ac6e3", "sighting--d6cddefc-a6b0-40fb-bd45-fe6e9d1e77dc", "sighting--f5149f6c-64a1-45a6-a884-77ce25530387", "sighting--5504e38f-859d-4578-9195-f36768681e35", "sighting--a83d7240-e8b4-473b-84be-ffcdfb969c41", "sighting--0551fde7-f5aa-452e-9aaf-1298ec0419e3", "sighting--940ab775-d77c-41db-a4b1-48359bdbcc87", "sighting--d8c8b89e-081f-4dcd-bdd1-fcd32fd0de55", "sighting--11ebfdac-e089-4d05-af9f-0faa7f2d18bf", "sighting--10ea24b9-b5c5-438c-965e-6e6cb7596a0b", "sighting--f436d3c8-b218-4169-a1c3-fd3f8ebb14d0", "sighting--dbcaad32-decc-474d-bf5d-eff9e2d898d1", "sighting--6ee2b162-5c7d-40fd-b0dc-9c95ad1b5299", "sighting--ac5ca6a5-8937-41dc-a5e0-d5cec6f1cf80", "sighting--92c5c5bb-6ffb-442b-8685-6d602eec8f7c", "sighting--e8923895-e249-447c-b35e-b9a673d2c16c", "sighting--477b5939-35be-4767-a413-767ec7adeb53", "sighting--a486ba8f-90b3-486a-9e17-b7187798741b", "sighting--8c8415dd-0a7b-4cf2-8244-05d96805ad88", "sighting--91a982d9-4b11-44b0-b101-0adb3ecc7ee2", "sighting--54ff6e19-4804-4bfb-ac97-644cc6e9b553", "sighting--e899afaf-7f85-47cc-baea-761de93a3a77", "sighting--e7dbec1a-0584-45b6-9c5c-0186e6f52040", "sighting--8f3af04b-d545-48c0-a082-9a29e56315ae", "sighting--413115f9-d28d-48d3-961c-ef0d252b832c", "sighting--04ef232e-b306-4b40-a60e-cde5cb67d27f", "sighting--785cb597-7318-4b8a-b765-96f774532a6f", "sighting--d32f796d-f4f9-4ec3-ac64-7aebfa02c904", "sighting--c07455a2-49f1-4870-a85e-10b0ed86c248", "sighting--33186b7c-2182-4162-8bc2-038cbc47b17a", "sighting--72ceebe7-a208-46a1-ac45-fa2090ee28b1", "sighting--3a25ef80-0f71-4c22-ad49-04f7a491fb37", "sighting--21b3f73e-22ed-4f4d-9a63-0f8a3094df40", "sighting--83efd2cf-3f40-47e2-8dca-f2b0ccfabf3d", "sighting--06747dc5-0374-493d-a7db-10888de65d2a", "sighting--03173761-0d7d-4285-b8cd-b723d43c4feb", "sighting--a88a14d1-ea17-4456-9d12-a47499de3ef8", "sighting--fea066a7-1062-4eb6-a1e5-249cfde1e6a2", "sighting--c88d4f2e-8f9b-441e-85b9-06f9fea0ebf8", "sighting--11f4a90d-c207-4fea-b36d-defc3c7bc1ce", "sighting--f8170129-d550-4f7a-a9a6-57516093ccb3", "sighting--701c83f1-045b-483c-9aad-5f286551358a", "sighting--23e161a9-df63-4b87-a866-88610856175b", "sighting--f7235d66-8fa3-4333-a8f8-d08a7b8f9378", "sighting--d8c8323f-2a97-4dd8-af93-3df445168179", "sighting--5558ea95-480f-492b-889b-281dfa910808", "sighting--7395a2e7-bac0-45a8-9c6e-34c9478fc5ca", "sighting--b19f0013-92a0-47d6-9274-4d668e90fbbc", "sighting--ac56e2a6-4f21-4e38-b4d7-a99d9e4a6e21", "sighting--6ae01c9d-7116-4a37-aa09-7d610b32c3f5", "sighting--5439e427-eedf-4349-970e-54b40b9f0f18", "sighting--47074cfb-95f3-4172-9353-9b00e1a2faca", "sighting--55b3d07c-2cfd-474b-8c59-0853e589a814", "sighting--583bcd20-34a5-4551-bf44-df439ac7244d", "sighting--0c59c0fb-8510-4685-ae4d-2482fc66d188", "sighting--264407fa-b677-4917-ae72-ea68f2597377", "sighting--49025f3c-9f1c-48bc-a81f-9638829af28f"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-17T11:00:01.806Z", "modified": "2026-06-17T11:00:01.806Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}